Fortinet FortiAP User manual

FortiAP 221C
QuickStart Guide

January 28, 2014
20-000-226428-20140128
Copyright© 2014 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
and FortiGuard®, are registered trademarks of Fortinet, Inc., and other
Fortinet names herein may also be trademarks of Fortinet. All other
product or company names may be trademarks of their respective
owners. Performance metrics contained herein were attained in internal
lab tests under ideal conditions, and performance may vary. Network
variables, different network environments and other conditions may affect
performance results. Nothing herein represents any binding commitment by
Fortinet, and Fortinet disclaims all warranties, whether express or implied,
except to the extent Fortinet enters a binding written contract, signed by
Fortinet’s General Counsel, with a purchaser that expressly warrants that the
identified product will perform according to the performance metrics herein.
For absolute clarity, any such warranty will be limited to performance in the
same ideal conditions as in Fortinet’s internal lab tests. Fortinet disclaims in
full any guarantees. Fortinet reserves the right to change, modify, transfer,
or otherwise revise this publication without notice, and the most current
version of the publication shall be applicable.

Table of Contents
Package Contents 1
Mounting Your FortiAP Unit 2
Connecting Your FortiAP Unit 4
Configuring Your FortiAP Unit 5
Technical Specifications 7
LED Specifications 8
Cautions and Warnings 9
Regulatory Notices 12
Documentation and Links 14
Register Your Product 15
Product License Agreement 16

This page intentionally left blank.

Package Contents
Fortinet’s FortiAP wireless thin access points deliver secure, identity-driven
WiFi client access that creates a fortified WLAN network that is centrally
managed by a FortiGate or FortiWiFi platform.
Your box contains the following:
FortiAP 221C
QuickStart Guide (with Mounting Template)
Mounting Bracket
T-Rail Mounting Hardware Kit
Wall/Ceiling Mounting Hardware Kit
Page 1
Mounting
Bracket
Wall/Ceiling Mounting
Hardware Kit
T-Rail Mounting
Hardware Kit
QuickStart Guide
FortiAP 221C
QuickStart Guide
Note: Accessories may not be exactly as shown.

Mounting Your FortiAP Unit
Page 2
Using the provided hardware, the FortiAP unit can be attached to a ceiling or wall.
To attach the unit to a ceiling or wall using the mounting bracket:
1. Attach the mounting bracket to the wall or ceiling using the Mounting Template
and the provided wall/ceiling mounting hardware kit (P3.5x32 screws and
Mounting Anchors).
2. Insert the provided P2.6x12 screws into the bottom cover of the FortiAP unit.
3. Leave enough of the screws exposed to ensure that the unit can be attached to
the mounting bracket.
If extra space is required, use the provided spacers and long screws from the
T-Rail mounting hardware kit to increase the space between the unit and the
mounting bracket.
4. Mount the FortiAP unit on the mounted mounting bracket by rotating the unit
clockwise about 90 degrees to secure it in place.
You can now proceed with connecting your FortiAP unit.
Mounting Anchor
P3.5x32 Screw
P2.6x12 Screw
Mounting Bracket
Rotate clockwise to
secure the unit in place
Installation
Template
Wall or Ceiling
Page 3

To attach the unit to a ceiling using the provided T-rail connectors:
1. Attach the T-rail connectors to the bottom cover of the FortiAP unit using the
provided P2.6x10 screws.
Two sizes of T-rail connectors are included in the mounting hardware kit: 15/16in
(2.38cm) and 9/16in (1.43cm).
If extra space is required to accommodate drop ceiling tiles, use the provided
spacers and P2.6x25 screws.
2. Line up the connected T-rail connectors with an appropriately sized rail and press
the unit onto the rail until it snaps into place.
Note: To protect your FortiAP unit from unauthorized removal, use the Kensington
Security Slot to attach a cable lock (cable lock is not included).
P2.6x25 Screw
P2.6x10 Screw
Spacer
Clip
Clip
Clip
T-rail
Kensington
Security Slot
Page 3

Page 4
Using the provided mounting hardware, attach the FortiAP unit to a wall or ceiling,
as described in the previous section.
Adequate grounding must be provided to the FortiAP unit and the PoE injector, in
compliance with your local electrical code or regulations.
Caution: This device complies with IEEE 802.3af PoE specification. Do not use any
PoE injectors that are not IEEE 802.3af compliant as they may damage your device.
To connect the FortiAP unit:
1. Insert an Ethernet cable into the Ethernet port of the FortiAP unit.
2. Insert the other end of the Ethernet cable into your FortiGate, FortiWifi, or
FortiSwitch unit.
If you are using PoE, ensure that the Ethernet cable is connected to an applicable
port on your FortiGate unit, FortiSwitch unit, or PoE injector.
3. If you are not using PoE, connect the DC plug of the optional power adapter
into the DC power jack on the FortiAP unit, and then insert the other end into an
appropriate power outlet.
Note: For FortiWifi units, the wireless controller feature is only supported on units
running FortiOS 4.0 MR3 and higher.
Connecting Your FortiAP Unit

Page 5
Configuring Your FortiAP Unit
The FortiAP unit is designed to require no configuration in most networks. Zero
Configuration mode works if the unit is directly connected to the FortiGate or
FortiWifi performing the Wireless LAN Controller (WLC) functions, or on the same
layer-2 network and subnet as the FortiGate or FortiWifi unit.
If the FortiAP wireless controller’s IP address cannot be determined using Zero
Configuration mode, or if the network uses static IP addresses, it can be configured
to use a static IP address.
To enable the FortiAP using Zero Configuration:
1. After connecting the FortiAP unit as described in the previous chapter, the unit
goes through its boot procedure and requests an IP address from the DHCP
server.
2. If the IP address is retrieved successfully, the FortiAP enters discovery mode to
locate a FortiGate or FortiWifi wireless controller. The discovery modes are:
• Broadcast
• Multicast
• DHCP option 138
3. Verify that the FortiAP has successfully connected to the controller.
In the FortiGate Web-based Manager, go to WiFi Controller > Managed Access
Points > Managed FortiAP. A successfully discovered unit displays an orange
circle with a question mark.
4. Select the access point and click Edit.
5. In the State field, select Authorize.
6. In the AP Profile field, select Change, then select a profile from the list and click
OK.
The configuration is downloaded from the wireless controller to the FortiAP and
the WiFi LEDs light up.

To enable the FortiAP with a static IP address:
1. Connect the FortiAP device to a separate private switch or hub, or directly connect
it to your management computer via a cross-over cable.
2. Configure the management computer to be on the same subnet as the internal
interface of the FortiAP unit:
• IP address: 192.168.1.3
• Netmask: 255.255.255.0
3. Telnet to IP address 192.168.1.2.
4. Type admin in the Name field, leave the Password field blank, and press Enter.
5. Configure a static IP address for the FortiAP unit and netmask & gateway
information for your network, using the following commands:
cfg -a ADDR_MODE=STATIC
cfg –a AP_IPADDR=xxx.xxx.xxx.xx
cfg –a AP_NETMASK=255.255.255.0
cfg –a IPGW=yyy.yyy.yyy.yyy
cfg –a AC_IPADDR_1=zzz.zzz.zzz.zzz
where xxx is the IP address of the FortiAP unit, yyy is the Gateway IP address and
zzz is the IP address of the FortiGate Wireless Controller.
6. Save the configuration by typing the following command:
cfg –c
7. Unplug the FortiAP unit and plug it back in order for the configuration to take
effect.
8. Move the FortiAP to the intended deployment location and connect the Ethernet
cable as described in the Connecting Your FortiAP Unit section.
9. Log in to the FortiGate controller Web-based Manager, and go to WiFi Controller
> Managed Access Points > Managed FortiAP. A successfully discovered unit
displays an orange circle with a question mark in the Status column.
10.Select the access point and click Edit.
11.In the State field, select Authorize.
12.In the Edit FortiAP dialog box, select Enable Wireless Radio. Leave the remaining
settings at their default values. The configuration is downloaded from the FortiGate
unit to the FortiAP device.
For more information, see the Deploying Wireless Networks Guide, available on
Fortinet’s technical documentation website, http://docs.fortinet.com.
Page 6