Fortinet 24100045 Wireless Access Point User Manual

Fortinet Inc. Wireless Access Point

Users Manual

FortiAP C24JEQuickStart Guide4/26/2017Copyri ght© 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,FortiCar e® and For tiGuar d®, and cer tain other marks ar e register ed tr ademarks ofFortinet, Inc., in the U.S. and other jurisdictions, and other For ti net nam es her ein m ayalso be registered and/or common law trademar ks of For tinet. Al l other product orcompany nam es m ay be trademar ks of their respective owners. Per for mance andother m etrics contained herein were attained in inter nal lab tests under ideal conditions,and actual perform ance and other results may var y. Network variabl es, different networkenvironm ents and other conditions may affect per for mance r esults. Nothing herei nrepr esents any binding commitm ent by Fortinet, and Fortinet disclaims all warr anties,whether expr ess or implied, except to the extent Fortinet enters a binding wr itten contr act,signed by Fortinet’s General Counsel, with a purchaser that expressly warr ants that theidentified pr oduct w ill perfor m according to certai n expressly-i dentified per formance metr icsand, in such event, only the specifi c perfor mance m etr ics expressly identified in such bindingwritten contract shall be binding on Fortinet. For absolute cl arity, any such warr anty w ill belim ited to perfor mance in the same ideal conditions as in Fortinet’s internal lab tests. In noevent does For ti net m ake any comm itment rel ated to future deliverables, features, ordevelopment, and cir cumstances may change such that any forwar d-looking statementsherein are not accurate. Fortinet disclaim s in full any covenants, r epresentati ons,andguarantees pursuant hereto, whether express or i mpl ied. Fortinet reserves the r ight tochange, modify, transfer , or otherwi se revise this publication without notice, and the mostcurrent version of the publication shall be applicable.ediuG tratSkciuQRRegister for SupportRegister your Fortinet product to receive:Technical SupportNew product featuresProtection from new threatsVous devez enregistrer le produit pour recevoir:Support techniqueNouvelles fonctionnalitées du produitProtection contre de nouvelles menacesLa reistrazione ti permette di usufruire di:Supporto TecnicoNuove funzionalitaProteezione dalle ultime minaccceDebe registrar el producto para recibir:Apoyo técnicoNuevas funcionalidades del productoProtección contra ataquesⲫ䥢ȃǟ予Ǚᵜ ᰕ ǃɝȱό Ɏȫɕɋɐ㼭 ૱ ȃⲫ 䥢 ȧǬǻǤǵǪǙDŽⲫ䥢ǮȠǽ⅑ȃɩɲɋɐǡǗȟȓǮDŽɎȷɓȳɳȽɥόɐ •ᯠ₏㜭ȃ䘭࣐ •ᯠǬǙ㜵ေȍȃ䱢ᗑediuG tratSkciuQ䈧傜к⌘޼ᛘⲴ伎ຄӗ૱ᛘ൘⌘޼ԕਾ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃᴰᯠေ㛱䱢ᣔhttps://support.fortinet.comToll free: 1 866 648 4638Phone: 1 408 486 7899Fax: 1 408 235 7737Email: register@fortinet.com䈧傜к⌘޼ᛘⲴ伎ຄӗ૱ᛘ൘⌘޼ԕਾ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃᴰᯠေ㛱䱢ᣔhttps://support.fortinet.comToll free: 1 866 648 4638Phone: 1 408 486 7899Fax: 1 408 235 7737Email: register@fortinet.com5Box IncludesFortiAP device QuickStart GuideMountingplate1 Security Torx+ 1 Philips screw4 screws 4 screwanchorsQuickStart Guide Videohttps://video.fortinet.com/video/177/fortigate-and-fortiap快速安装指南快速安装指南6Before You BeginWrite down details typically provided by your networkadministrator or ISP.Static IP addressIP address ___________________Subnet Mask ___________________Default Gateway ___________________Primary/Secondary DNS ___________________DHCPIt is normal to not require a hostname, but your ISPmight require it.Hostname ___________________RJ45Pass-ThrougCONSOLEWAN/POE9Wall-mount1 11 1232 312Junction-box: NA, Japan, AUS/NZ333Junction-box: EU, UK, China, AUS/NZ10LAN1 LAN2 LAN3/PSERJ45Pass-Through12VDC(optional)Mountingscrew811 InstallationTorx screwdriveris required (notincluded)Electrical boxpre-installed(not included)60mmThe unit can be mounted on a junction box using the mountinghardware provided. It is recommended to use the Security Torxscrew to mount the FAP-C24JE to the mount plate for highersecurity (Torx screwdriver not included).The holes on the mounting hardware fit the electricalwallbox ofNA, EU, UK, China, Japan, AUS/NZ, and Korea.12 Basic ConnectionWAN/POENetwork Core/FortiGateConnect the FortiAP device to a FortiGate controller oran Internet connection.Ensure that the Power over Ethernet (PoE) cable isconnected to an applicable port on your FortiGatedevice or PoE injector.Caution: Adequate grounding must be providedto the FortiAP unit and the PoE injector, incompliance with your local electrical code orregulations.Warning: This device complies with IEEE 802.3afPoE specification. Do not use any PoE injectorsthat are not IEEE 802.3af compliant as they maydamage your device.13 FortiAP SetupFortiCloudInternetFortiAPWAN/POEACloud provisioning with FortiCloudORFortiAPWAN/POEBFortiGate secured on local networkFortiGateEthernet PortFortiAP Setup Videohttps://video.fortinet.com/video/92/basic-fortiap-setup14AFortiCloud1. Go to http://www.forticloud.com to sign in orcreate a new account.2. Select an existing AP Network or create one.To create a new network, go to Add AP Networkand enter an AP Network Name and AP Password.3. From the left panel, select Deploy APs.No APs in Inventory: Add AP dialog boxappearsORAPs in Inventory: Click the +AP button3. Enter the unique FFortiCloud Key located on theFortiAP device, then click Submit.Note: When creating a new network, the APPassword will be applied to all APs in that APnetwork.15BDeployment through a FortiGateFortiGate support may be available for certainregion codes. Please check the product datasheetor contact Fortinet sales for details.Also, please ensure that you are running theFortinet recommended version of software onboth FortiGate and FortiAP units. Please checksupport.fortinet.com for more information.If FortiGate is on the same network as the FortiAP:1. Use FortiGate to preauthorize the FortiAP device.2. Refer to the “Access Point Deployment” section ofthe FortiWiFi and FortiAP Configuration Guidefound at http://forti.net/ap-docs.3. Plug the FortiAP into your local Ethernetconnection. The FortiAP will self-configure.Or1. Instead of preauthorizing, you can use theFortiGate to authorize the FortiAP device after youhave connected the FortiAP to the network.2. Within two minutes of connecting the FortiAP to theFortiGate, the device appears on the Managed16FortiAP page in the Web-based Manager:authorize and assign a profile to the device.If FortiGate is not on the same network as theFortiAP:1. Log into FortiAP directly (IP address: 192.168.1.2)with username admin and no password, andspecify the IP address of the controlling FortiGate.2. Connect to FortiAP via the CLI (see “Connecting toFortiAP CLI” in the FortiWiFi andFortiAP Configuration guide).3. Specify the IP address of the controlling FortiGate:config capwap wtp acIpAddr 0. 0.0.04. The FortiAP device connects to FortiGate, and thenyou can authorize the FortiAP.17Cautions and WarningsEnvironmental specificationsAmbient operating temperature: 0C to 40CRefeRefer to specific Product Model Data Sheet for EnvironmentalSpecifications (Operating Temperature, Storage Temperature, Humidity, and Altitude)rRéférez à la Fiche Technique de ce produit pour les caractéristiquesenvironnementales (Température de fonctionnement, température destockage, humidité et l'altitude).SafetyCaution: This equipment is to be used in a Network Environment 0per IECTR 62101. This product is connected only to PoEnetworks without routing to the outside plant.Attention: Ce matériel doit être utilisé dans un Environnement Réseau0 par IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE sans installation externe de routage.This product is intended to be supplied by a Listed Direct Plug-InPowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by48 Vdc fromPoE source.17Cautions and WarningsEnvironmental specificationsAmbient operating temperature: 0C to 40CRefeRefer to specific Product Model Data Sheet for EnvironmentalSpecifications (Operating Temperature, Storage Temperature, Humidity, and Altitude)rRéférez à la Fiche Technique de ce produit pour les caractéristiquesenvironnementales (Température de fonctionnement, température destockage, humidité et l'altitude).SafetyCaution: This equipment is to be used in a Network Environment 0per IECTR 62101. This product is connected only to PoEnetworks without routing to the outside plant.Attention: Ce matériel doit être utilisé dans un Environnement Réseau0 par IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE sans installation externe de routage.This product is intended to be supplied by a Listed Direct Plug-InPowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by48 Vdc fromPoE source.51513119718Le produit doit être alimenté par un bloc d'alimentation à courant continuhomologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par unesource d’alimentation par Ethernet de 48 Vdc (PoE).Regulatory NoticesFederal Communication Commission (FCC) –USAThis device complies with Part 15 of FCC Rules. Operation issubject to the following two conditions:(1) this device may not cause harmful interference, and(2) ) this device must accept any interference received; includinginterference that may cause undesired operation.This equipment has been tested and found to comply with the limitsfor a Class B digital device, pursuant to Part 15 of the FCC Rules.These limits are designed to provide reasonable protection againstharmful interference in residential installation. This equipmentgenerates, uses, and can radiate radio frequency energy, and if it isnot installed and used in accordance with the instruction manual, itmay cause harmful interference to radio communications. However,there is no guarantee that interference will not occur in a particularinstallation.If this equipment does cause harmful interference to radio ortelevision reception, which can be determined by turning theequipment off and on, the user is encouraged to try to correct theinterference by one or more of the following measures: 619Reorient or relocate the receiving antenna.Increase the separation between the equipment and receiver.Connect the equipment into an outlet on a circuit different fromthat to which the receiver is connected.Consult the dealer or an experienced radio/TV technician forhelp.WARNING: Any changes or modifications to this unit not expressly approvedby the party responsible for compliance could void the user’sauthority to operate the equipmentThis equipment complies with FCC radiation exposure limits set forth for anuncontrolled environment. This equipment should be installed and operatedwith minimum distance 20cm between the radiator and your body. Thistransmitter must not be co-located or operating in conjunction with any otherantenna or transmitter.Caution: Operation of this device is restricted to indoor use only.For operation within 5.15 ~ 5.25GHz frequency range, it is restricted toindoor environment. The band from 5600-5650MHz will be disabled bythe software during the manufacturing and cannot be changed by theend user. interference by one or more of the following measures: 20This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.Industry Canada Equipment Standard for DigitalEquipment (ICES) – CanadaCAN ICES-3 (B) / NMB-3 (B)Innovation, Science and Economic Development(ISED) – CanadaThis device complies with Industry Canada’s licence-exempt RSSs.Operation is subject to the following two conditions: (1) this devicemay not cause interference, and (2) this device must accept anyinterference, including interference that may cause undesiredoperation of the device.Le présent appareil est conforme aux CNR d’Industrie Canada applicablesaux appareils radio exempts de licence. L’exploitation est autorisée aux deuxconditions suivantes: (1) l'appareil ne doit pas produire de brouillage, et (2)l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi,même si le brouillage est susceptible d'en compromettre le fonctionnement. For product available in the USA/Canada market, only channel 1~11can be operated. Selection of other channels is not possible.21Pour les produits disponibles aux États-Unis / Canada du marché, seul lecanal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est paspossible.The device meets the exemption from the routine evaluation limits insection 2.5 of RSS 102 and compliance with RSS-102 RF exposure, users can obtain Canadian information on RF exposure and compliance.Le dispositif rencontre l'exemption des limites courantes d'évaluationdans la section 2.5 de RSS 102 et la conformité à l'exposition deRSS-102 rf, utilisateurs peut obtenir l'information canadienne surl'exposition et la conformité de rf.This transmitter must not be co-located or operating in conjunctionwith any other antenna or transmitter. This equipment should beinstalled and operated with a minimum distance of 20 centimetersbetween the radiator and your body.Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en mêmetemps qu'aucune autre antenne ou émetteur. Cet équipement devraitêtre installé et actionné avec une distance minimum de 20 centimètresentre le radiateur et votre corps.The maximum antenna gain permitted for devices in the band 5725-5850MHz shall be such that the equipment still complies with the e.i.r.p. limitsspecified for point-to-point and non-point-to-point operation as appropriate.23This radio transmitter 7280B-24100045 has been approved by ISED tooperate with the antenna types listed below with the maximum permissiblegain and required antenna impedance for each antenna type indicated.Antenna types not included in this list, having a gain greater than themaximum gain indicated for that type, are strictly prohibited for use withthis device.Le présent émetteur radio 7280B-24100045 a été approuvé par ISEDpour fonctionner avec les types d'antenne énumérés ci-dessous et ayantun gain admissible maximal et l'impédance requise pour chaque typed'antenne. Les types d'antenne non inclus dans cette liste, ou dont legain est supérieur au gain maximal indiqué, sont strictement interditspour l'exploitation de l'émetteur.Attention: Le gain maximal d’antenne permis pour les dispositifsutilisant les bandes 5 250-5 350 MHz et 5 470-5 725MHz doit se conformer à la limite de p.i.r.e.; le gainmaximal d’antenne permis (pour les dispositifs utilisantla bande 5 725-5 825 MHz) doit se conformer à la limitede p.i.r.e. spécifiée pour l’exploitation point à point etnonpoint à point, selon le cas.22Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pourl’exploitation point à point et non point à point, selon le cas.Caution: The device for the band 5150-5250 MHz is only for indoorusage to reduce potential for harmful interference toco-channel mobile satellite systems. High-power radarsare allocated as primary users (i.e. priority users) of thebands 5250-5350 MHz and 5650-5850 MHz and that theseradars could cause interference and/or damage to LE-LANdevices.Caution: The maximum antenna gain permitted for devices in thebands 5250-5350 MHz and 5470-5725 MHz shall complywith the e.i.r.p. limit; and the maximum antenna gainpermitted for devices in the band 5725-5825 MHz shallcomply with the e.i.r.p. limits specified for point-to-pointand non point-to-point operation as appropriate.Attention: Le dispositif de la bande 5150-5250 MHz est réservé àun usage intérieur afin de réduire l'interférence nuisiblepotentielle aux systèmes mobiles par satellite co-canal.Les radars à haute puissance sont désignés commeutilisateurs principaux (à savoir les utilisateurs prioritaires)des bandes 5250-5350 MHz et 5650-5850 MHz et que cesradars pourraient causer des interférences et / ouendommager les périphériques LE-LAN22Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pourl’exploitation point à point et non point à point, selon le cas.Caution: The device for the band 5150-5250 MHz is only for indoorusage to reduce potential for harmful interference toco-channel mobile satellite systems. High-power radarsare allocated as primary users (i.e. priority users) of thebands 5250-5350 MHz and 5650-5850 MHz and that theseradars could cause interference and/or damage to LE-LANdevices.Caution: The maximum antenna gain permitted for devices in thebands 5250-5350 MHz and 5470-5725 MHz shall complywith the e.i.r.p. limit; and the maximum antenna gainpermitted for devices in the band 5725-5825 MHz shallcomply with the e.i.r.p. limits specified for point-to-pointand non point-to-point operation as appropriate.Attention: Le dispositif de la bande 5150-5250 MHz est réservé àun usage intérieur afin de réduire l'interférence nuisiblepotentielle aux systèmes mobiles par satellite co-canal.Les radars à haute puissance sont désignés commeutilisateurs principaux (à savoir les utilisateurs prioritaires)des bandes 5250-5350 MHz et 5650-5850 MHz et que cesradars pourraient causer des interférences et / ouendommager les périphériques LE-LAN19Reorient or relocate the receiving antenna.Increase the separation between the equipment and receiver.Connect the equipment into an outlet on a circuit different fromthat to which the receiver is connected.Consult the dealer or an experienced radio/TV technician forhelp.WARNING: Any changes or modifications to this unit not expressly approvedby the party responsible for compliance could void the user’sauthority to operate the equipmentThis equipment complies with FCC radiation exposure limits set forth for anuncontrolled environment. This equipment should be installed and operatedwith minimum distance 20cm between the radiator and your body. Thistransmitter must not be co-located or operating in conjunction with any otherantenna or transmitter.Caution: Operation of this device is restricted to indoor use only.For operation within 5.15 ~ 5.25GHz frequency range, it is restricted toindoor environment. The band from 5600-5650MHz will be disabled bythe software during the manufacturing and cannot be changed by theend user. interference by one or more of the following measures: 21Pour les produits disponibles aux États-Unis / Canada du marché, seul lecanal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est paspossible.The device meets the exemption from the routine evaluation limits insection 2.5 of RSS 102 and compliance with RSS-102 RF exposure, users can obtain Canadian information on RF exposure and compliance.Le dispositif rencontre l'exemption des limites courantes d'évaluationdans la section 2.5 de RSS 102 et la conformité à l'exposition deRSS-102 rf, utilisateurs peut obtenir l'information canadienne surl'exposition et la conformité de rf.This transmitter must not be co-located or operating in conjunctionwith any other antenna or transmitter. This equipment should beinstalled and operated with a minimum distance of 20 centimetersbetween the radiator and your body.Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en mêmetemps qu'aucune autre antenne ou émetteur. Cet équipement devraitêtre installé et actionné avec une distance minimum de 20 centimètresentre le radiateur et votre corps.The maximum antenna gain permitted for devices in the band 5725-5850MHz shall be such that the equipment still complies with the e.i.r.p. limitsspecified for point-to-point and non-point-to-point operation as appropriate.23This radio transmitter 7280B-24100045 has been approved by ISED tooperate with the antenna types listed below with the maximum permissiblegain and required antenna impedance for each antenna type indicated.Antenna types not included in this list, having a gain greater than themaximum gain indicated for that type, are strictly prohibited for use withthis device.Le présent émetteur radio 7280B-24100045 a été approuvé par ISEDpour fonctionner avec les types d'antenne énumérés ci-dessous et ayantun gain admissible maximal et l'impédance requise pour chaque typed'antenne. Les types d'antenne non inclus dans cette liste, ou dont legain est supérieur au gain maximal indiqué, sont strictement interditspour l'exploitation de l'émetteur.Attention: Le gain maximal d’antenne permis pour les dispositifsutilisant les bandes 5 250-5 350 MHz et 5 470-5 725MHz doit se conformer à la limite de p.i.r.e.; le gainmaximal d’antenne permis (pour les dispositifs utilisantla bande 5 725-5 825 MHz) doit se conformer à la limitede p.i.r.e. spécifiée pour l’exploitation point à point etnonpoint à point, selon le cas.24European Conformity (CE) - EUThis is a Class B product. In a domestic environment, this productmay cause radio interference, in which case the user may berequired to take adequate measures.The product transmits within the frequency ranges and equal to orless than the power listed below:2412-2472MHz less than 20dBm5180-5240MHz less than 20dBm5260-5320MHz less than 20dBm * 5500-5700MHz less than 20dBm * Note: * Only with DFS bands certification.Le produit doit être alimenté par un bloc d'alimentation à courant continuhomologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par unesource d’alimentation par Ethernet de 48 Vdc (PoE).Regulatory NoticesFederal Communication Commission (FCC) –USAThis device complies with Part 15 of FCC Rules. Operation issubject to the following two conditions:(1) this device may not cause harmful interference, and(2) ) this device must accept any interference received; includinginterference that may cause undesired operation.This equipment has been tested and found to comply with the limitsfor a Class B digital device, pursuant to Part 15 of the FCC Rules.These limits are designed to provide reasonable protection againstharmful interference in residential installation. This equipmentgenerates, uses, and can radiate radio frequency energy, and if it isnot installed and used in accordance with the instruction manual, itmay cause harmful interference to radio communications. However,there is no guarantee that interference will not occur in a particularinstallation.If this equipment does cause harmful interference to radio ortelevision reception, which can be determined by turning theequipment off and on, the user is encouraged to try to correct theinterference by one or more of the following measures: 1816141210820This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.Industry Canada Equipment Standard for DigitalEquipment (ICES) – CanadaCAN ICES-3 (B) / NMB-3 (B)Innovation, Science and Economic Development(ISED) – CanadaThis device complies with Industry Canada’s licence-exempt RSSs.Operation is subject to the following two conditions: (1) this devicemay not cause interference, and (2) this device must accept anyinterference, including interference that may cause undesiredoperation of the device.Le présent appareil est conforme aux CNR d’Industrie Canada applicablesaux appareils radio exempts de licence. L’exploitation est autorisée aux deuxconditions suivantes: (1) l'appareil ne doit pas produire de brouillage, et (2)l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi,même si le brouillage est susceptible d'en compromettre le fonctionnement. For product available in the USA/Canada market, only channel 1~11can be operated. Selection of other channels is not possible.24European Conformity (CE) - EUThis is a Class B product. In a domestic environment, this productmay cause radio interference, in which case the user may berequired to take adequate measures.The product transmits within the frequency ranges and equal to orless than the power listed below:2412-2472MHz less than 20dBm5180-5240MHz less than 20dBm5260-5320MHz less than 20dBm * 5500-5700MHz less than 20dBm * Note: * Only with DFS bands certification.61;3ͧͨપޢа,58:/4+:,UXZXO'6)0+Иކਸ਼ކ<^SSMՅୢڦ਩ԭӳ੸ઌD evi ce Gui deNo PSE outputOn: PSE output (max 4W)Flashing: PSE load over limit4: PSE LEDReset buttonNot connectedOn: ConnectedFlashing: Activity1,2, and 3:LAN1/2/3 LEDFAP-C24JENo powerOn: NormalFlashing: Boot upSYS LEDNot connectedOn: ConnectedFlashing: ActivityWAN LEDWiFi LEDGreen :Radio is enabledFlashing Green : Wireless activityPress and hold for less than 10 seconds: RebootPress and hold for 10 seconds orlonger: Reset to factory default132Note: PSE max output is 4W if FAP-C24JE is powered by 802.3af (15.4W)PSE max output is 802.3af (15.2W) if it is powered by 802.3at (25.5W)Device Guide74

Navigation menu