Fortinet 24100045 Wireless Access Point User Manual

Fortinet Inc. Wireless Access Point

Users Manual

FortiAP C24JE
QuickStart Guide
4/26/2017
Copyri ght© 2017 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®,
FortiCar and For tiGuar , and cer tain other marks ar e register ed tr ademarks of
Fortinet, Inc., in the U.S. and other jurisdictions, and other For ti net nam es her ein m ay
also be registered and/or common law trademar ks of For tinet. Al l other product or
company nam es m ay be trademar ks of their respective owners. Per for mance and
other m etrics contained herein were attained in inter nal lab tests under ideal conditions,
and actual perform ance and other results may var y. Network variabl es, different network
environm ents and other conditions may affect per for mance r esults. Nothing herei n
repr esents any binding commitm ent by Fortinet, and Fortinet disclaims all warr anties,
whether expr ess or implied, except to the extent Fortinet enters a binding wr itten contr act,
signed by Fortinets General Counsel, with a purchaser that expressly warr ants that the
identified pr oduct w ill perfor m according to certai n expressly-i dentified per formance metr ics
and, in such event, only the specifi c perfor mance m etr ics expressly identified in such binding
written contract shall be binding on Fortinet. For absolute cl arity, any such warr anty w ill be
lim ited to perfor mance in the same ideal conditions as in Fortinet’s internal lab tests. In no
event does For ti net m ake any comm itment rel ated to future deliverables, features, or
development, and cir cumstances may change such that any forwar d-looking statements
herein are not accurate. Fortinet disclaim s in full any covenants, r epresentati ons,and
guarantees pursuant hereto, whether express or i mpl ied. Fortinet reserves the r ight to
change, modify, transfer , or otherwi se revise this publication without notice, and the most
current version of the publication shall be applicable.
e
d
iuG tratSkciuQ
RRegister for Support
Register your Fortinet product to receive:
Technical Support
New product features
Protection from new threats
Vous devez enregistrer le produit pour recevoir:
Support technique
Nouvelles fonctionnalitées du produit
Protection contre de nouvelles menaces
La reistrazione ti permette di usufruire di:
Supporto Tecnico
Nuove funzionalita
Proteezione dalle ultime minaccce
Debe registrar el producto para recibir:
Apoyo técnico
Nuevas funcionalidades del producto
Protección contra ataques
ȃǟǙ
ǃɝȱό Ɏȫɕɋɐ㼭 ૱ ȃⲫ 䥢 ȧǬǻǤǵǪǙDŽ
ⲫ䥢ǮȠǽ⅑ȃɩɲɋɐǡǗȟȓǮDŽ
ɎȷɓȳɳȽɥόɐ ᯠ₏㜭ȃ䘭࣐ ᯠǬǙ㜵ေȍȃ䱢ᗑ
e
d
iuG tratSkciuQ
䈧傜к⌘޼
ᛘⲴ伎ຄӗ૱
ᛘ൘⌘޼ԕਾ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃ
ᯠေ㛱䱢ᣔ
https://support.fortinet.com
Toll free: 1 866 648 4638
Phone: 1 408 486 7899
Fax: 1 408 235 7737
Email: register@fortinet.com
䈧傜к⌘޼
ᛘⲴ伎ຄӗ૱
ᛘ൘⌘޼ԕਾ᡽㜭ᗇࡠᢰᵟ᭟ᤱǃᯠӗ૱⢩⛩ؑ᚟ǃ
ᯠေ㛱䱢ᣔ
https://support.fortinet.com
Toll free: 1 866 648 4638
Phone: 1 408 486 7899
Fax: 1 408 235 7737
Email: register@fortinet.com
5
Box Includes
FortiAP device QuickStart Guide
Mounting
plate
1 Security Torx
+ 1 Philips screw
4 screws 4 screw
anchors
QuickStart Guide Video
https://video.fortinet.com/video/177/
fortigate-and-fortiap
快速安装指南
快速安装指南
6
Before You Begin
Write down details typically provided by your network
administrator or ISP.
Static IP address
IP address ___________________
Subnet Mask ___________________
Default Gateway ___________________
Primary/Secondary DNS ___________________
DHCP
It is normal to not require a hostname, but your ISP
might require it.
Hostname ___________________
RJ45
Pass-Throug
CONSOLE
WAN/POE
9
Wall-mount
1 1
1 1
2
3
2 3
1
2Junction-box: NA, Japan, AUS/NZ
33
3Junction-box: EU, UK, China, AUS/NZ
10
LAN1 LAN2 LAN3/
PSE
RJ45
Pass-Through
12VDC
(optional)
Mounting
screw
8
11
Installation
The unit can be mounted on a junction box using the mounting
hardware provided. It is recommended to use the Security Torx
screw to mount the FAP-C24JE to the mount plate for higher
security (Torx screwdriver not included).
The holes on the mounting hardware fit the electricalwallbox of
NA, EU, UK, China, Japan, AUS/NZ, and Korea.
12
Basic Connection
WAN/POE
Network Core/FortiGate
Connect the FortiAP device to a FortiGate controller or
an Internet connection.
Ensure that the Power over Ethernet (PoE) cable is
connected to an applicable port on your FortiGate
device or PoE injector.
Caution: Adequate grounding must be provided
to the FortiAP unit and the PoE injector, in
compliance with your local electrical code or
regulations.
Warning: This device complies with IEEE 802.3af
PoE specification. Do not use any PoE injectors
that are not IEEE 802.3af compliant as they may
damage your device.
13
FortiAP Setup
FortiCloud
Internet
FortiAP
WAN/POE
A
Cloud provisioning with FortiCloud
OR
FortiAP
WAN/POE
B
FortiGate secured on local network
FortiGate
Ethernet Port
FortiAP Setup Video
https://video.fortinet.com/video/92/basic-fortiap-
setup
14
A
FortiCloud
1. Go to http://www.forticloud.com to sign in or
create a new account.
2. Select an existing AP Network or create one.
To create a new network, go to Add AP Network
and enter an AP Network Name and AP Password.
3. From the left panel, select Deploy APs.
No APs in Inventory: Add AP dialog box
appears
OR
APs in Inventory: Click the +AP button
3. Enter the unique FFortiCloud Key located on the
FortiAP device, then click Submit.
Note: When creating a new network, the AP
Password will be applied to all APs in that AP
network.
15
B
Deployment through a FortiGate
FortiGate support may be available for certain
region codes. Please check the product datasheet
or contact Fortinet sales for details.
Also, please ensure that you are running the
Fortinet recommended version of software on
both FortiGate and FortiAP units. Please check
support.fortinet.com for more information.
If FortiGate is on the same network as the FortiAP:
1. Use FortiGate to preauthorize the FortiAP device.
2. Refer to the “Access Point Deployment” section of
the FortiWiFi and FortiAP Configuration Guide
found at http://forti.net/ap-docs.
3. Plug the FortiAP into your local Ethernet
connection. The FortiAP will self-configure.
Or
1. Instead of preauthorizing, you can use the
FortiGate to authorize the FortiAP device after you
have connected the FortiAP to the network.
2. Within two minutes of connecting the FortiAP to the
FortiGate, the device appears on the Managed
16
FortiAP page in the Web-based Manager:
authorize and assign a profile to the device.
If FortiGate is not on the same network as the
FortiAP:
1. Log into FortiAP directly (IP address: 192.168.1.2)
with username admin and no password, and
specify the IP address of the controlling FortiGate.
2. Connect to FortiAP via the CLI (see Connecting to
FortiAP CLI” in the FortiWiFi and
FortiAP Configuration guide).
3. Specify the IP address of the controlling FortiGate:
config capwap wtp acIpAddr 0. 0.0.0
4. The FortiAP device connects to FortiGate, and then
you can authorize the FortiAP.
17
Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
RefeRefer to specific Product Model Data Sheet for Environmental
Specifications (Operating Temperature, Storage Temperature, Humidity,
and Altitude)r
Référez à la Fiche Technique de ce produit pour les caractéristiques
environnementales (Température de fonctionnement, température de
stockage, humidité et l'altitude).
Safety
Caution: This equipment is to be used in a Network Environment 0
per IECTR 62101. This product is connected only to PoE
networks without routing to the outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau
0 par IECTR 62101. Ce produit est uniquement connecté aux
réseaux PoE sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In
PowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by
48 Vdc fromPoE source.
17
Cautions and Warnings
Environmental specifications
Ambient operating temperature: 0C to 40C
RefeRefer to specific Product Model Data Sheet for Environmental
Specifications (Operating Temperature, Storage Temperature, Humidity,
and Altitude)r
Référez à la Fiche Technique de ce produit pour les caractéristiques
environnementales (Température de fonctionnement, température de
stockage, humidité et l'altitude).
Safety
Caution: This equipment is to be used in a Network Environment 0
per IECTR 62101. This product is connected only to PoE
networks without routing to the outside plant.
Attention: Ce matériel doit être utilisé dans un Environnement Réseau
0 par IECTR 62101. Ce produit est uniquement connecté aux
réseaux PoE sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In
PowerUnit marked LPS or Class 2 and rated 12 Vdc, 1 A or by
48 Vdc fromPoE source.
5
15
13
11
9
7
18
Le produit doit être alimenté par un bloc d'alimentation à courant continu
homologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par une
source d’alimentation par Ethernet de 48 Vdc (PoE).
Regulatory Notices
Federal Communication Commission (FCC)
USA
This device complies with Part 15 of FCC Rules. Operation is
subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) ) this device must accept any interference received; including
interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits
for a Class B digital device, pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against
harmful interference in residential installation. This equipment
generates, uses, and can radiate radio frequency energy, and if it is
not installed and used in accordance with the instruction manual, it
may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular
installation.
If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
6
19
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from
that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for
help.
WARNING: Any changes or modifications to this unit not expressly approved
by the party responsible for compliance could void the user’s
authority to operate the equipment
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated
with minimum distance 20cm between the radiator and your body. This
transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Caution: Operation of this device is restricted to indoor use only.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to
indoor environment. The band from 5600-5650MHz will be disabled by
the software during the manufacturing and cannot be changed by the
end user.
interference by one or more of the following measures:
20
This device meets all the other requirements specified in Part 15E,
Section 15.407 of the FCC Rules.
Industry Canada Equipment Standard for Digital
Equipment (ICES) – Canada
CAN ICES-3 (B) / NMB-3 (B)
Innovation, Science and Economic Development
(ISED) – Canada
This device complies with Industry Canada’s licence-exempt RSSs.
Operation is subject to the following two conditions: (1) this device
may not cause interference, and (2) this device must accept any
interference, including interference that may cause undesired
operation of the device.
Le présent appareil est conforme aux CNR d’Industrie Canada applicables
aux appareils radio exempts de licence. L’exploitation est autorisée aux deux
conditions suivantes: (1) l'appareil ne doit pas produire de brouillage, et (2)
l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi,
même si le brouillage est susceptible d'en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11
can be operated. Selection of other channels is not possible.
21
Pour les produits disponibles aux États-Unis / Canada du marché, seul le
canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est pas
possible.
The device meets the exemption from the routine evaluation limits in
section 2.5 of RSS 102 and compliance with RSS-102 RF exposure,
users can obtain Canadian information on RF exposure and compliance.
Le dispositif rencontre l'exemption des limites courantes d'évaluation
dans la section 2.5 de RSS 102 et la conformité à l'exposition de
RSS-102 rf, utilisateurs peut obtenir l'information canadienne sur
l'exposition et la conformité de rf.
This transmitter must not be co-located or operating in conjunction
with any other antenna or transmitter. This equipment should be
installed and operated with a minimum distance of 20 centimeters
between the radiator and your body.
Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même
temps qu'aucune autre antenne ou émetteur. Cet équipement devrait
être installé et actionné avec une distance minimum de 20 centimètres
entre le radiateur et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850
MHz shall be such that the equipment still complies with the e.i.r.p. limits
specified for point-to-point and non-point-to-point operation as appropriate.
23
This radio transmitter 7280B-24100045 has been approved by ISED to
operate with the antenna types listed below with the maximum permissible
gain and required antenna impedance for each antenna type indicated.
Antenna types not included in this list, having a gain greater than the
maximum gain indicated for that type, are strictly prohibited for use with
this device.
Le présent émetteur radio 7280B-24100045 a été approuvé par ISED
pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant
un gain admissible maximal et l'impédance requise pour chaque type
d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le
gain est supérieur au gain maximal indiqué, sont strictement interdits
pour l'exploitation de l'émetteur.
Attention: Le gain maximal d’antenne permis pour les dispositifs
utilisant les bandes 5 250-5 350 MHz et 5 470-5 725
MHz doit se conformer à la limite de p.i.r.e.; le gain
maximal d’antenne permis (pour les dispositifs utilisant
la bande 5 725-5 825 MHz) doit se conformer à la limite
de p.i.r.e. spécifiée pour l’exploitation point à point et
nonpoint à point, selon le cas.
22
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande
5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pour
l’exploitation point à point et non point à point, selon le cas.
Caution: The device for the band 5150-5250 MHz is only for indoor
usage to reduce potential for harmful interference to
co-channel mobile satellite systems. High-power radars
are allocated as primary users (i.e. priority users) of the
bands 5250-5350 MHz and 5650-5850 MHz and that these
radars could cause interference and/or damage to LE-LAN
devices.
Caution: The maximum antenna gain permitted for devices in the
bands 5250-5350 MHz and 5470-5725 MHz shall comply
with the e.i.r.p. limit; and the maximum antenna gain
permitted for devices in the band 5725-5825 MHz shall
comply with the e.i.r.p. limits specified for point-to-point
and non point-to-point operation as appropriate.
Attention: Le dispositif de la bande 5150-5250 MHz est réservé à
un usage intérieur afin de réduire l'interférence nuisible
potentielle aux systèmes mobiles par satellite co-canal.
Les radars à haute puissance sont désignés comme
utilisateurs principaux (à savoir les utilisateurs prioritaires)
des bandes 5250-5350 MHz et 5650-5850 MHz et que ces
radars pourraient causer des interférences et / ou
endommager les périphériques LE-LAN
22
Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande
5725-5850 MHz)\ doit se conformer à la limite de p.i.r.e. spécifiée pour
l’exploitation point à point et non point à point, selon le cas.
Caution: The device for the band 5150-5250 MHz is only for indoor
usage to reduce potential for harmful interference to
co-channel mobile satellite systems. High-power radars
are allocated as primary users (i.e. priority users) of the
bands 5250-5350 MHz and 5650-5850 MHz and that these
radars could cause interference and/or damage to LE-LAN
devices.
Caution: The maximum antenna gain permitted for devices in the
bands 5250-5350 MHz and 5470-5725 MHz shall comply
with the e.i.r.p. limit; and the maximum antenna gain
permitted for devices in the band 5725-5825 MHz shall
comply with the e.i.r.p. limits specified for point-to-point
and non point-to-point operation as appropriate.
Attention: Le dispositif de la bande 5150-5250 MHz est réservé à
un usage intérieur afin de réduire l'interférence nuisible
potentielle aux systèmes mobiles par satellite co-canal.
Les radars à haute puissance sont désignés comme
utilisateurs principaux (à savoir les utilisateurs prioritaires)
des bandes 5250-5350 MHz et 5650-5850 MHz et que ces
radars pourraient causer des interférences et / ou
endommager les périphériques LE-LAN
19
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from
that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for
help.
WARNING: Any changes or modifications to this unit not expressly approved
by the party responsible for compliance could void the user’s
authority to operate the equipment
This equipment complies with FCC radiation exposure limits set forth for an
uncontrolled environment. This equipment should be installed and operated
with minimum distance 20cm between the radiator and your body. This
transmitter must not be co-located or operating in conjunction with any other
antenna or transmitter.
Caution: Operation of this device is restricted to indoor use only.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to
indoor environment. The band from 5600-5650MHz will be disabled by
the software during the manufacturing and cannot be changed by the
end user.
interference by one or more of the following measures:
21
Pour les produits disponibles aux États-Unis / Canada du marché, seul le
canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est pas
possible.
The device meets the exemption from the routine evaluation limits in
section 2.5 of RSS 102 and compliance with RSS-102 RF exposure,
users can obtain Canadian information on RF exposure and compliance.
Le dispositif rencontre l'exemption des limites courantes d'évaluation
dans la section 2.5 de RSS 102 et la conformité à l'exposition de
RSS-102 rf, utilisateurs peut obtenir l'information canadienne sur
l'exposition et la conformité de rf.
This transmitter must not be co-located or operating in conjunction
with any other antenna or transmitter. This equipment should be
installed and operated with a minimum distance of 20 centimeters
between the radiator and your body.
Cet émetteur ne doit pas être Co-placé ou ne fonctionnant en même
temps qu'aucune autre antenne ou émetteur. Cet équipement devrait
être installé et actionné avec une distance minimum de 20 centimètres
entre le radiateur et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850
MHz shall be such that the equipment still complies with the e.i.r.p. limits
specified for point-to-point and non-point-to-point operation as appropriate.
23
This radio transmitter 7280B-24100045 has been approved by ISED to
operate with the antenna types listed below with the maximum permissible
gain and required antenna impedance for each antenna type indicated.
Antenna types not included in this list, having a gain greater than the
maximum gain indicated for that type, are strictly prohibited for use with
this device.
Le présent émetteur radio 7280B-24100045 a été approuvé par ISED
pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant
un gain admissible maximal et l'impédance requise pour chaque type
d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le
gain est supérieur au gain maximal indiqué, sont strictement interdits
pour l'exploitation de l'émetteur.
Attention: Le gain maximal d’antenne permis pour les dispositifs
utilisant les bandes 5 250-5 350 MHz et 5 470-5 725
MHz doit se conformer à la limite de p.i.r.e.; le gain
maximal d’antenne permis (pour les dispositifs utilisant
la bande 5 725-5 825 MHz) doit se conformer à la limite
de p.i.r.e. spécifiée pour l’exploitation point à point et
nonpoint à point, selon le cas.
24
European Conformity (CE) - EU
This is a Class B product. In a domestic environment, this product
may cause radio interference, in which case the user may be
required to take adequate measures.
The product transmits within the frequency ranges and equal to or
less than the power listed below:
2412-2472MHz less than 20dBm
5180-5240MHz less than 20dBm
5260-5320MHz less than 20dBm *
5500-5700MHz less than 20dBm *
Note: * Only with DFS bands certification.
Le produit doit être alimenté par un bloc d'alimentation à courant continu
homologué UL de 12 Vdc, 1 A nominal marqué LPS ou Class 2 ou par une
source d’alimentation par Ethernet de 48 Vdc (PoE).
Regulatory Notices
Federal Communication Commission (FCC)
USA
This device complies with Part 15 of FCC Rules. Operation is
subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) ) this device must accept any interference received; including
interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits
for a Class B digital device, pursuant to Part 15 of the FCC Rules.
These limits are designed to provide reasonable protection against
harmful interference in residential installation. This equipment
generates, uses, and can radiate radio frequency energy, and if it is
not installed and used in accordance with the instruction manual, it
may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular
installation.
If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
18
16
14
12
10
8
20
This device meets all the other requirements specified in Part 15E,
Section 15.407 of the FCC Rules.
Industry Canada Equipment Standard for Digital
Equipment (ICES) – Canada
CAN ICES-3 (B) / NMB-3 (B)
Innovation, Science and Economic Development
(ISED) – Canada
This device complies with Industry Canada’s licence-exempt RSSs.
Operation is subject to the following two conditions: (1) this device
may not cause interference, and (2) this device must accept any
interference, including interference that may cause undesired
operation of the device.
Le présent appareil est conforme aux CNR d’Industrie Canada applicables
aux appareils radio exempts de licence. L’exploitation est autorisée aux deux
conditions suivantes: (1) l'appareil ne doit pas produire de brouillage, et (2)
l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi,
même si le brouillage est susceptible d'en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11
can be operated. Selection of other channels is not possible.
24
European Conformity (CE) - EU
This is a Class B product. In a domestic environment, this product
may cause radio interference, in which case the user may be
required to take adequate measures.
The product transmits within the frequency ranges and equal to or
less than the power listed below:
2412-2472MHz less than 20dBm
5180-5240MHz less than 20dBm
5260-5320MHz less than 20dBm *
5500-5700MHz less than 20dBm *
Note: * Only with DFS bands certification.
61;3ͧͨ
પޢа,58:/4+:,UXZXO'6)0+Иކਸ਼ކ<^SSMՅୢڦ਩ԭӳ੸ઌ
D evi ce Gui de
No PSE output
On: PSE output (max 4W)
Flashing: PSE load over limit
4: PSE LED
Reset button
Not connected
On: Connected
Flashing: Activity
1,2, and 3:
LAN1/2/3 LED
FAP-C24JE
No power
On: Normal
Flashing: Boot up
SYS LED
Not connected
On: Connected
Flashing: Activity
WAN LED
WiFi LED
Green :Radio is enabled
Flashing Green : Wireless activity
Press and hold for less than 10
seconds: Reboot
Press and hold for 10 seconds or
longer: Reset to factory default
132
Note: PSE max output is 4W if FAP-C24JE is powered by 802.3af (15.4W)
PSE max output is 802.3af (15.2W) if it is powered by 802.3at (25.5W)
Device Guide
7
4

Navigation menu