Fortinet 24100045 Users Manual

FortiAP C24JE

QuickStart Guide

4/26/2017

For tiC are® and For tiGuar d®, and c ertai n other m ark s are regi ster ed tradem arks of

For tinet, Inc., in the U .S. and other j uris dicti ons, and ot her For tinet names her ein m ay

als o be regi stered and/or com mon l aw tr ademar ks of F orti net. Al l other pr oduct or

com pany names m ay be tr ademar ks of t heir res pectiv e owner s. Per form ance and

other met ric s contai ned herei n wer e attained in i nternal l ab tests under ideal condi tions ,

and act ual perf ormanc e and other res ults may var y. N etwor k var iables , diff erent netw ork

envi ronment s and other condi tions may affec t perf ormanc e resul ts. N othing her ein

repr esents any bi nding com mi tment by F orti net, and For tinet dis clai ms al l w arrant ies,

whet her expr ess or i mpli ed, exc ept to the ex tent For tinet enters a bi nding w ritt en contr act,

si gned by For tinet ’s Gener al C ounsel, wi th a pur chaser that ex pressl y w arrant s that t he

ident ified produc t wi ll per form ac cordi ng to cer tain ex press ly- identi fied per form ance met ric s

and, i n such ev ent, only the s pecifi c per form ance metr ic s expr essl y identi fied i n such bindi ng

wr itten contr act shal l be bi nding on F orti net. For abs olute cl ari ty, any suc h warr anty w il l be

li mi ted to per form ance in t he same i deal c onditions as in F orti net’s inter nal l ab tests . In no

event does F ortinet m ake any c ommi tment rel ated to fut ure deli ver ables, f eatures, or

devel opment, and ci rcum stances may change such that any for ward- looki ng stat ements

herei n are not acc urate. F orti net dis clai ms i n full any covenant s, r epresentati ons,and

guarant ees purs uant hereto, whet her expr ess or i mpl ied. For tinet res erves the r ight t o

change, m odify , tr ansfer, or ot herwi se r evise this publ icati on wi thout notic e, and the m ost

cur rent v ersi on of the publ icati on shal l be appl icabl e.

e d

iuG tratSkciuQ

RRegister for Support

 Technical Support  New product features  Protection from new threats

Vous devez enregistrer le produit pour recevoir:

 Support technique  Nouvelles fonctionnalitées du produit  Protection contre de nouvelles menaces

La reistrazione ti permette di usufruire di:

 Supporto Tecnico  Nuove funzionalita  Proteezione dalle ultime minaccce

Debe registrar el producto para recibir:

 Apoyo técnico  Nuevas funcionalidades del producto  Protección contra ataques

ⲫ䥢ȃǟ予Ǚ

ᵜ ᰕ ǃɝȱό Ɏȫɕɋɐ㼭 ૱ ȃⲫ 䥢 ȧǬǻǤǵǪǙǄ ⲫ䥢ǮȠǽ⅑ȃɩɲɋɐǡǗȟȓǮǄ ɎȷɓȳɳȽɥό ɐ • ᯠ₏㜭ȃ䘭࣐ • ᯠǬǙ㜵ေȍȃ䱢ᗑ

e d

iuG tratSkciuQ

䈧傜к ⌘޼

ᛘⲴ伎ຄӗ૱ ᛘ൘⌘޼ԕ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃᴰ ᯠေ㛱䱢ᣔ

https://support.fortinet.com

Toll free: 1 866 648 4638 Phone: 1 408 486 7899 Fax: 1 408 235 7737 Email: register@fortinet.com

䈧傜к ⌘޼

ᛘⲴ伎ຄӗ૱

ᛘ൘⌘޼ԕ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃᴰ

ᯠေ㛱䱢ᣔ

https://support.fortinet.com

Toll free: 1 866 648 4638

Phone: 1 408 486 7899

Fax: 1 408 235 7737

Email: register@fortinet.com

Box Includes

FortiAP device QuickStart Guide

Mounting

plate

1 Security Torx

+ 1 Ph ilips screw

4 screws 4 screw

anchors

QuickStart Guide Video

https://video.fortinet.com/video/177/

fortigate-and-fortiap

快速安装指南

Before You Begin

Write down details typically provided by your network administrator or ISP.

Static IP address

IP address ___________________

Subnet Mask ___________________

Default Gateway ___________________

Primary/Secondary DNS ___________________

DHCP

It is normal to not require a hostname, but your ISP might require it.

Hostname ___________________

RJ45 Pass-Throug

CONSOLE

WAN/POE

Wall-mount

1 1

2 3

Junction-box: NA, Japan, AUS/NZ

Junction-box: EU, UK, China, AUS/NZ

LAN1 LAN2 LAN3/

PSE

RJ45 Pass-Through

12VDC (optional)

Mounting screw

 Installation

Torx screwdriver

is required (not

included)

Electrical box

pre-installed

(not included)

60m

The unit can be mounted on a junction boxusing the mounting hardware provided. It isrecommendedto use the Security Torx screw to mount the FAP-C24JEto themount plate for higher security (Torx screwdriver not included).

The holes on the mounting hardware fit the electricalwallboxof NA, EU, UK,China, Japan, AUS/NZ, and Korea.

 Basic Connection

WAN/POE

Network Core/FortiGate

Connect the FortiAP device to a FortiGate controller or an Internet connection.

Ensure that the Power over Ethernet (PoE) cable is connected to an applicable porton your FortiGate device or PoE injector.

Caution: Adequate grounding must be provided

to the FortiAP unit and the PoE injector, in compliance with your local electrical code or regulations.

Warning: This device complies with IEEE 802.3af

PoE specification. Do not use any PoE injectors that are not IEEE 802.3af compliant as they may damage your device.

 FortiAP Setup

FortiCloud

Internet

FortiAP

WAN/POE

Cloud provisioning with FortiCloud

FortiAP

WAN/POE

FortiGate secured on local network

FortiGate

Ethernet Port

FortiAP Setup Video

https://video.fortinet.com/video/92/basic-fortiap-

setup

FortiCloud

Go to

http://www.forticloud.com to sign in or

create a new account.

2. Selectan existing AP Network or create one. To create a new network, go to Add AP Network and enter an AP Network Name and AP Password.

3. From the left panel, select Deploy APs.

 No APs in Inventory: Add AP dialog box

appears OR

 APs in Inventory: Click the +AP button

3. Enter the unique FFortiCloud Key located on the FortiAP device, then click Submit.

Note: When creating a new network, the AP Password will be applied to all APs in that AP network.

Deployment through a FortiGate

FortiGate support may be available for certain region codes. Please check the product datasheet or contact Fortinet sales for details. Also,please ensure that you are running the Fortinet recommended version of software on both FortiGate and FortiAP units. Please check

support.fortinet.com for more information.

If FortiGate is on the same network as the FortiAP:

1. Use FortiGate to preauthorize the FortiAP device.

2. Refer to the “Access Point Deployment” section of the FortiWiFi and FortiAP Configuration Guide found at

http://forti.net/ap-docs.

3. Plug the FortiAP into your local Ethernet connection. The FortiAP will self-configure.

1. Instead of preauthorizing, you can use the FortiGate to authorize the FortiAP device after you have connected the FortiAP to the network.

2. Within two minutes of connecting the FortiAP to the FortiGate,the device appears on the Managed

FortiAP page in the Web-based Manager: authorize and assign a profile to the device.

If FortiGate is not on the same network as the FortiAP:

1. Log into FortiAP directly (IP address: 192.168.1.2) with username admin and no password, and specify the IP address of the controlling FortiGate.

2. Connect to FortiAP via the CLI (see “Connecting to FortiAP CLI” in the FortiWiFi and FortiAP Configuration guide).

3. Specify the IP address of the controlling FortiGate:

config capwap wtp acIpAddr 0. 0.0.0

4. The FortiAP device connects to FortiGate, and then you can authorize the FortiAP.

Cautions and Warnings

Environmental specifications

Ambient operating temperature: 0C to 40C

RefeRefer to specific Product Model Data Sheet for Environmental

Specifications (Operating Temperature, Storage Temperature, Humidity,

and Altitude)r

Référez à la Fiche Technique de ce produit pour les caractéristiques

environnementales (Température de fonctionnement, température de

stockage, humidité et l'altitude).

Safety

Caution: This equipment is to be used in a Network Environment 0

per IECTR 62101. This product is connected only to PoE

networks without routing to the outside plant.

Attention: Ce matériel doit être utilisé dans un Environnement Réseau

0 par IECTR 62101. Ce produit est uniquement connecté aux

réseaux PoE sans installation externe de routage.

This product is intended to be supplied by a Listed Direct Plug-In

PowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by

48 Vdc fromPoE source.

Cautions and Warnings

Environmental specifications

Ambient operating temperature: 0C to 40C

RefeRefer to specific Product Model Data Sheet for Environmental

Specifications (Operating Temperature, Storage Temperature, Humidity,

and Altitude)r

Référez à la Fiche Technique de ce produit pour les caractéristiques

environnementales (Température de fonctionnement, température de

stockage, humidité et l'altitude).

Safety

Caution: This equipment is to be used in a Network Environment 0

per IECTR 62101. This product is connected only to PoE

networks without routing to the outside plant.

Attention: Ce matériel doit être utilisé dans un Environnement Réseau

0 par IECTR 62101. Ce produit est uniquement connecté aux

réseaux PoE sans installation externe de routage.

This product is intended to be supplied by a Listed Direct Plug-In

PowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by

48 Vdc fromPoE source.

Le produit doit être alimenté par un bloc d'alimentation à courant continu

homologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par une

source d’alimentation par Ethernet de 48 Vdc (PoE).

Regulatory Notices

Federal Communication Commission (FCC) – USA

This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:

(1) this device may not cause harmful interference, and

(2) ) this device must accept any interference received; including

interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in residential installation. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or

television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna.

Increase the separation between the equipment and receiver.

Connect the equipment into an outlet on a circuit different from

that to which the receiver is connected.

Consult the dealer or an experienced radio/TV technician for

help.

WARNING: Any changes or modifications to this unit not expressly approved

by the party responsible for compliance could void the user’s

authority to operate the equipment

This equipment complies with FCC radiation exposure limits set forth for an

uncontrolled environment. This equipment should be installed and operated

with minimum distance 20cm between the radiator and your body. This

transmitter must not be co-located or operating in conjunction with any other

antenna or transmitter.

Caution: Operation of this device is restricted to indoor use only.

For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to

indoor environment. The band from 5600-5650MHz will be disabled by

the software during the manufacturing and cannot be changed by the

end user.

interference by one or more of the following measures:

This device meets all the other requirements specified in Part 15E,

Section 15.407 of the FCC Rules.

Industry Canada Equipment Standard for Digital Equipment (ICES) – Canada

CAN I CES-3 (B) / NMB-3 (B)

Innovation, Science and Economic Development (ISED) – Canada

This device complies with Industry Canada’s licence-exempt RSSs.

Operation is subject to the following two conditions: (1) this device

may not cause interference, and (2) this device must accept any

interference, including interference that may cause undesired

operation of the device.

Le présent appareil est conforme aux CNR d’Industrie Canada applicables

aux appareils radio exempts de licence. L’exploitation est autorisée aux deux

conditions suivantes: (1) l'appareil ne doit pas produire de brouillage, et (2)

l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi,

même si le brouillage est susceptible d'en compromettre le fonctionnement.

For product available in the USA/Canada market, only channel 1~11

can be operated. Selection of other channels is not possible.

Pour les produits disponibles aux États-Unis / Canada du marché, seul le

canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est pas

possible.

The device meets the exemption from the routine evaluation limits in

section 2.5 of RSS 102 and compliance with RSS-102 RF exposure,

users can obtain Canadian information on RF exposure and compliance.

Le dispositif rencontre l'exemption des limites courantes d'évaluation

dans la section 2.5 de RSS 102 et la conformité à l'exposition de

RSS-102 rf, utilisateurs peut obtenir l'information canadienne sur

l'exposition et la conformité de rf.

This transmitter must not be co-located or operating in conjunction

with any other antenna or transmitter. This equipment should be

installed and operated with a minimum distance of 20 centimeters

between the radiator and your body. Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même

temps qu'aucune autre antenne ou émetteur. Cet équipement devrait

être installé et actionné avec une distance minimum de 20 centimètres

entre le radiateur et votre corps.

The maximum antenna gain permitted for devices in the band 5725-5850

MHz shall be such that the equipment still complies with the e.i.r.p. limits

specified for point-to-point and non-point-to-point operation as appropriate.

This radio transmitter 7280B-24100045 has been approved by ISED to

operate with the antenna types listed below with the maximum permissible

gain and required antenna impedance for each antenna type indicated.

Antenna types not included in this list, having a gain greater than the

maximum gain indicated for that type, are strictly prohibited for use with

this device.

Le présent émetteur radio 7280B-24100045 a été approuvé par ISED

pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant

un gain admissible maximal et l'impédance requise pour chaque type

d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le

gain est supérieur au gain maximal indiqué, sont strictement interdits

pour l'exploitation de l'émetteur.

Attention: Le gain maximal d’antenne permis pour les dispositifs

utilisant les bandes 5 250-5 350 MHz et 5 470-5 725

MHz doit se conformer à la limite de p.i.r.e.; le gain

maximal d’antenne permis (pour les dispositifs utilisant

la bande 5 725-5 825 MHz) doit se conformer à la limite

de p.i.r.e. spécifiée pour l’exploitation point à point et

nonpoint à point, selon le cas.

Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande

5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pour

l’exploitation point à point et non point à point, selon le cas.

Caution: The device for the band 5150-5250 MHz is only for indoor

usage to reduce potential for harmful interference to

co-channel mobile satellite systems. High-power radars

are allocated as primary users (i.e. priority users) of the

bands 5250-5350 MHz and 5650-5850 MHz and that these

radars could cause interference and/or damage to LE-LAN

devices.

Caution: The maximum antenna gain permitted for devices in the

bands 5250-5350 MHz and 5470-5725 MHz shall comply

with the e.i.r.p. limit; and the maximum antenna gain

permitted for devices in the band 5725-5825 MHz shall

comply with the e.i.r.p. limits specified for point-to-point

and non point-to-point operation as appropriate.

Attention: Le dispositif de la bande 5150-5250 MHz est réservé à

un usage intérieur afin de réduire l'interférence nuisible

potentielle aux systèmes mobiles par satellite co-canal.

Les radars à haute puissance sont désignés comme

utilisateurs principaux (à savoir les utilisateurs prioritaires)

des bandes 5250-5350 MHz et 5650-5850 MHz et que ces

radars pourraient causer des interférences et / ou

endommager les périphériques LE-LAN

Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande

5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pour

l’exploitation point à point et non point à point, selon le cas.

Caution: The device for the band 5150-5250 MHz is only for indoor

usage to reduce potential for harmful interference to

co-channel mobile satellite systems. High-power radars

are allocated as primary users (i.e. priority users) of the

bands 5250-5350 MHz and 5650-5850 MHz and that these

radars could cause interference and/or damage to LE-LAN

devices.

Caution: The maximum antenna gain permitted for devices in the

bands 5250-5350 MHz and 5470-5725 MHz shall comply

with the e.i.r.p. limit; and the maximum antenna gain

permitted for devices in the band 5725-5825 MHz shall

comply with the e.i.r.p. limits specified for point-to-point

and non point-to-point operation as appropriate.

Attention: Le dispositif de la bande 5150-5250 MHz est réservé à

un usage intérieur afin de réduire l'interférence nuisible

potentielle aux systèmes mobiles par satellite co-canal.

Les radars à haute puissance sont désignés comme

utilisateurs principaux (à savoir les utilisateurs prioritaires)

des bandes 5250-5350 MHz et 5650-5850 MHz et que ces

radars pourraient causer des interférences et / ou

endommager les périphériques LE-LAN

Reorient or relocate the receiving antenna.

Increase the separation between the equipment and receiver.

Connect the equipment into an outlet on a circuit different from

that to which the receiver is connected.

Consult the dealer or an experienced radio/TV technician for

help.

WARNING: Any changes or modifications to this unit not expressly approved

by the party responsible for compliance could void the user’s

authority to operate the equipment

This equipment complies with FCC radiation exposure limits set forth for an

uncontrolled environment. This equipment should be installed and operated

with minimum distance 20cm between the radiator and your body. This

transmitter must not be co-located or operating in conjunction with any other

antenna or transmitter.

Caution: Operation of this device is restricted to indoor use only.

For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to

indoor environment. The band from 5600-5650MHz will be disabled by

the software during the manufacturing and cannot be changed by the

end user.

interference by one or more of the following measures:

Pour les produits disponibles aux États-Unis / Canada du marché, seul le

canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est pas

possible.

The device meets the exemption from the routine evaluation limits in

section 2.5 of RSS 102 and compliance with RSS-102 RF exposure,

users can obtain Canadian information on RF exposure and compliance.

Le dispositif rencontre l'exemption des limites courantes d'évaluation

dans la section 2.5 de RSS 102 et la conformité à l'exposition de

RSS-102 rf, utilisateurs peut obtenir l'information canadienne sur

l'exposition et la conformité de rf.

This transmitter must not be co-located or operating in conjunction

with any other antenna or transmitter. This equipment should be

installed and operated with a minimum distance of 20 centimeters

between the radiator and your body.

Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même