FortiAP 431G & 433G QuickStart Guide

Before You Begin

Register your device to access FortiGuard updates, cloud management, firmware upgrades, technical support, and warranty coverage.

http://support.fortinet.com

This guide covers: FAP-431G, FAP-433G

Publication Date: May 3, 2022

Copyright © 2022 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare®, and FortiGuard® are registered trademarks of Fortinet, Inc. Other product or company names may be trademarks of their respective owners. Performance metrics are based on internal lab tests under ideal conditions; actual performance may vary. Fortinet disclaims all warranties, express or implied, except as expressly stated in a binding written contract. Fortinet reserves the right to change, modify, or revise this publication without notice.

For Product License Agreement / EULA and Warranty Terms, visit: https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

The Essentials

Default Logins

• Local Access: https://192.168.1.2, Username: admin, Password: leave blank
• Cloud Access: http://fortiapcloud.com, Username: user-defined, Password: user-defined

Admin Guide

For detailed FortiAP setup and configuration, refer to the Admin Guide on https://docs.fortinet.com/product/fortiap.

Customer Service

For contracts, licensing, product registration, and account management, contact FortiCare Support at https://www.fortinet.com/support/contact.

Self-service Resources

Access the knowledge base, forums, videos, and technical experts at https://www.fortinet.com/support/support-services/forticare-support.

Thank you for choosing Fortinet.

Package Contents

The package for FortiAP 431G / 433G (FAP-431G*, FAP-433G**) typically includes:

• FortiAP Device*
• FortiAP Antenna Device** (for FAP-433G)
• QuickStart Guide
• 9/16" Ceiling Mounting Bracket
• 15/16" Ceiling Mounting Bracket
• 8x Mounting Screws with 8x Anchors

Setup Options

Power the FortiAP device using a 802.3 af/at PoE injector, FortiGate PoE port, or the optional (not included) 12V 2.5A power adapter.

FortiAP Cloud Setup

Diagram Description:

• Step 1: Connect the FortiAP to the LAN port.
• Step 2: Use an Ethernet Cable (not included) to connect the FortiAP.
• Step 3: Connect to FortiAP Cloud via http://fortiapcloud.com.

Use your FortiCloud credentials to log in, then click Inventory, Import AP Key, and enter the Cloud Key found on the device sticker.

Direct Connection Setup

Diagram Description:

• Step 1: Connect the FortiAP to the LAN port.
• Step 2: Use an Ethernet Cable (not included).
• Step 3: Connect to the FortiGate Ethernet Port.

To self-configure, preauthorize the FortiAP on your FortiGate. Otherwise, once connected, wait for the FortiAP to appear on the Managed FortiAP page in FortiOS.

Network Connection

Diagram Description:

• Step 1: FortiAP LAN Port.
• Step 2: Ethernet Cable (not included).
• Step 3: Connect to a device on the Same Network.
• Step 4: Connect to the FortiGate Ethernet Port.

Connect to the FortiAP using 192.168.1.2 with username admin and a blank password. Specify the FortiGate IP using the commands: cfg -a AC_IPADDR=0.0.0.0 and cfg -c, where 0.0.0.0 is the FortiGate IP.

Installation

Ceiling Bracket Installation

The FortiAP mounts on a ceiling using the provided T-rail mounting brackets, available in two standard sizes: 1.43cm (9/16in) and 2.38cm (15/16in).

Diagram Description:

1. Select the bracket for the T-rail size: 1.43cm (9/16in) or 2.38cm (15/16in).
2. With the ports facing you, slide the bracket from left to right onto the T-rail.
3. Hold the device against the ceiling T-rail and push until it snaps into place.

Antenna Installation (FAP-433G only)

Diagram Description:

1. Insert the antenna base firmly into the appropriate antenna mount.
2. Securely hand-tighten the antenna fastening collar.
3. Repeat for the remaining antennas.

Interfaces - FAP 431G / 433G

Diagram Description: The diagram shows the FortiAP 431G device with numbered ports and LED indicators.

LED Status

• Power (PoE 802.3at or 12V DC 2.5A): Off: Device is off; Green: Device is on; Blinking Green: Booting up; Orange: Reserved for customizations.
• LAN (5 Gbps 802.3at PoE RJ45): Off: Link is off; Green: Link is on; Blinking Green: Transmitting at 5 Gbps; Blinking Orange: Transmitting at 2.5 Gbps/1 Gbps.
• WiFi (details may vary): Off: Radio 1 & 2 are off; Blue: Radio 1 is on; Blinking Blue: Radio 1 is transmitting data; Orange: Radio 2 is on; Blinking Orange: Radio 2 is transmitting data; Green: Radio 1 & 2 are on; Blinking Green: Radio 1 & 2 are transmitting data.

Ports

1. 12V DC: Optional 12V DC 2.5A power adapter input.
2. RESET: System reset button.
3. CONSOLE (RJ-45): CLI management port.
4. LAN2 / POE 5G (RJ-45): 5 Gbps 802.3at PoE Ethernet interface.
5. LAN1 / POE 5G (RJ-45): 5 Gbps 802.3at PoE Ethernet interface.

Cautions and Warnings

Environmental Specifications

Ambient operating temperature: 0°C to 50°C.

Refer to the specific Product Model Data Sheet for detailed Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude).

Safety

Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant.

Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE sans installation externe de routage.

This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2 and rated 12Vdc, 4A or by 55Vdc from a PoE source.

Le produit doit être alimenté par un bloc d'alimentation à courant continu homologué UL de 12Vdc, 4A nominal marqué LPS ou Class 2 ou par une source d'alimentation par Ethernet de 55 Vdc (PoE).

Regulatory Notices

Federal Communication Commission (FCC) – USA

This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference.
2. This device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy. If not installed and used per the instruction manual, it may cause harmful interference to radio communications. There is no guarantee that interference will not occur in a particular installation.

If this equipment causes harmful interference to radio or television reception (which can be determined by turning the equipment off and on), the user is encouraged to try to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.

WARNING: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Caution:

• For 6ID (Indoor Access Point) & UNII-4 (Indoor AP):
  • FCC regulations restrict the operation of this device to indoor use only.
  • Operation is prohibited on oil platforms, cars, trains, boats, and aircraft, except for large aircraft flying above 10,000 feet.
  • Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems.
• For operation within the 5.15~5.25GHz frequency range, it is restricted to indoor environments. The band from 5600-5650MHz will be disabled by software during manufacturing and cannot be changed by the end user.

This device meets all other requirements specified in Part 15E, Section 15.407 of the FCC Rules.

Industry Canada Equipment Standard for Digital Equipment (ICES) - Canada

This Class B digital apparatus complies with Canadian ICES-003.

Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.

Innovation, Science and Economic Development (ISED) - Canada

This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada's licence-exempt RSS(s). Operation is subject to the following two conditions:

1. This device may not cause interference.
2. This device must accept any interference, including interference that may cause undesired operation of the device.

L'émetteur/récepteur exempt de licence contenu dans le présent appareil est conforme aux CNR d'Innovation, Sciences et Développement économique Canada applicables aux appareils radio exempts de licence. L'exploitation est autorisée aux deux conditions suivantes:

1. L'appareil ne doit pas produire de brouillage;
2. L'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le fonctionnement.

For products available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible.

Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être exploités. Sélection d'autres canaux n'est pas possible.

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and your body.

Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps.

DETACHABLE ANTENNA USAGE

This radio transmitter [IC: 7280B-3918T05646] has been approved by Innovation, Science and Economic Development Canada to operate with the antenna types listed below, with the maximum permissible gain indicated. Antenna types not included in this list that have a gain greater than the maximum gain indicated for any type listed are strictly prohibited for use with this device.

Le présent émetteur radio [IC: 7280B-3918T05646] a été approuvé par Innovation, Sciences et Développement économique Canada pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est supérieur au gain maximal indiqué pour tout type figurant sur la liste, sont strictement interdits pour l'exploitation de l'émetteur.

The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate.

Le gain maximal d'antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer à la limite de p.i.r.e. spécifiée pour l'exploitation point à point et non point à point, selon le cas.

The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and

Le gain maximal d'antenne permis pour les dispositifs utilisant les bandes 5250-5350 MHz et 5470-5725 MHz doit se conformer à la limite de p.i.r.e.;

The worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in Section 6.2.2(3) shall be clearly indicated.

Les pires angles d'inclinaison nécessaires pour rester conforme à l'exigence de la p.i.r.e. applicable au masque d'élévation, et énoncée à la section 6.2.2 3), doivent être clairement indiqués.

Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for harmful interference to co-channel mobile satellitesystems.

Attention: Le dispositif de la bande 5150-5250 MHz est réservé à un usage intérieur afin de réduire l'interférence nuisible potentielle aux systèmes mobiles par satellite co-canal.

Caution: The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate.

Attention: Le gain maximal d'antenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer à la limite de p.i.r.e.; le gain maximal d'antenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer à la limite de p.i.r.e. spécifiée pour l'exploitation point à point et non point à point, selon le cas.

This device has been designed to operate with an antenna having a maximum gain of 5.65 dBi for 2.4GHz and 5.94 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of ISED. The required antenna impedance is 50 ohms.

Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotopically radiated power (e.i.r.p.) is not more than that necessary for successful communication.

Ce dispositif a été conçu pour fonctionner avec une antenne ayant un gain maximal de 5.65 dBi for 2.4GHz and 5.94 dBi for 5GHz pour 5GHz. Une antenne ayant un gain supérieur sont strictement interdites par la réglementation d'ISED. L'impédance d'antenne requise est de 50 ohms.

Conformément à la réglementation d'ISED, cet émetteur radio peut fonctionner seulement avec une antenne d'un type et d'un gain maximal (ou inférieur) approuvé pour l'émetteur par ISED. Dans le but de réduire les risques de brouillage radioélectrique aux autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonnée équivalente (p.i.r.e.) ne dépasse pas l'intensité nécessaire à l'établissement d'une communication réussie.

This radio transmitter (IC: 7280B-3918T05646) has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device.

Le présent émetteur radio (IC: 7280B-3918T05646) a été approuvé par ISED pour fonctionner avec les types d'antenne énumérés ci-dessous et ayant un gain admissible maximal et l'impédance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est supérieur au gain maximal indiqué, sont strictement interdits pour l'exploitation de l'émetteur.

This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures.

Cet appareil et son antenne(s) ne doit pas être co-localisés ou fonctionnement en association avec une autre antenne ou transmetteur.

Operation shall be limited to indoor use only; and

Operation on oil platforms, cars, trains, boats and aircraft shall be prohibited except for on large aircraft flying above 10,000 ft.

Utilisation limitée à l'intérieur seulement;

Utilisation interdite à bord de plateformes de forage pétrolier, de voitures, de trains, de bateaux et d'aéronefs, sauf à bord d'un gros aéronef volant à plus de 10 000 pieds d'altitude.

Note: The EUT has eight external antennas.

European Conformity (CE) – EU

This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

The product transmits within the frequency ranges and less than or equal to the power listed below:

• 2402-2480MHz less than 20dBm (BT/BLE)
• 2405-2480MHz less than 20dBm (Zigbee)
• 2412-2472MHz less than 20dBm
• 5180-5240MHz less than 23dBm
• 5260-5320MHz less than 23dBm *
• 5500-5700MHz less than 30dBm *

Note: * Only with DFS bands certification.

This equipment should be installed and operated with minimum distance 20cm between the radiator and your body.

Simplified EU Declaration of Conformity

This declaration is only valid for Fortinet products (including, combinations of software, firmware and hardware) provided by Fortinet or Fortinet's authorized partners to the end customer directly for use within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinet's authorized partners may not comply with EU Directives and Fortinet makes no assurances for such products.

Български: Този продукт е в съответствие с Директива 2014/53/EC.

Česky: Tento produkt je v souladu se směrnicí 2014/53/EU.

Dansk: Dette produkt er i overensstemmelse med direktiv 2014/53/EU.

Deutsch: Dieses Produkt entspricht der Richtlinie 2014/53/EU.

Eesti: See toode vastab direktiivile 2014/53/EL.

English: This product is in compliance with Directive 2014/53/EU.

Español: Este producto cumple con la Directiva 2014/53/UE.

Ελληνική: Το προϊόν αυτό συμμορφώνεται με την Οδηγία 2014/53/ΕΕ.

Français: Ce produit est conforme à la Directive 2014/53/UE.

Hrvatski: Ovaj proizvod je u skladu s Direktivom 2014/53/EU.

Italiano: Questo prodotto è conforme alla Direttiva 2014/53/EU.

Latviski: Šis produkts atbilst Direktīvai 2014/53/EU.

Lietuvių: Šis gaminys atitinka direktyvą 2014/53/ES.

Malti: Dan il-prodott huwa konformi mad-Direttiva 2014/53/UE.

Magyar: Ez za termék megfelel a 2014/53/EU irányelvnek.

Nederlands: Dit product is in overeenstemming met Richtlijn 2014/53/EU.

Norsk: Dette produktet er i samsvar med direktiv 2014/53/EU.

Polski: Ten produkt jest zgodny z dyrektywą 2014/53/UE.

Português: Este produto está em conformidade com a Diretiva 2014/53/UE.

Rumunski: Acest produs este în conformitate cu Directiva 2014/53/UE.

Slovensky: Tento produkt je v súlade so smernicou 2014/53/EÚ.

Slovensko: Ta izdelek je v skladu z Direktivo 2014/53/EU.

Suomi: Tämä tuote on direktiivin 2014/53/EU mukainen.

Svenska: Denna produkt överensstämmer med direktiv 2014/53/EU.

Note: The full declaration of conformity for this product is available at the link below: https://site.fortinet.com/ProductRegulatory/EU

Compliance with 2014/53/EU Radio Equipment Directive (RED)

In accordance with Article 10.8(a) and 10.8(b) of the RED, the following table provides information on the frequency bands used and the maximum RF transmit power of the product for sale in the EU:

Operations in the 5.15-5.35GHz band are restricted to indoor usage only

UK Conformity Assessed (UKCA) - United Kingdom

The product transmits within the frequency ranges and less than or equal to the power listed below:

• 2402-2480MHz less than 20dBm
• 2405-2480MHz less than 20dBm
• 2412-2472MHz less than 20dBm
• 5180-5240MHz less than 23dBm
• 5260-5320MHz less than 23dBm *
• 5500-5700MHz less than 30dBm *

Note: * Only with DFS bands certification.

This equipment should be installed and operated with minimum distance 20cm between the radiator & your body.

This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017

Operations in the 5.15-5.35GHz band are restricted to indoor usage only

The full Declaration of Conformity for this product is available in the link below: https://site.fortinet.com/ProductRegulatory/UK