FortiAP 431G / 433G QuickStart Guide

Before You Begin

Register your device to access FortiGuard updates, cloud management, firmware upgrades, technical support, and warranty coverage.

Visit: http://support.fortinet.com

This guide covers: FAP-431G, FAP-433G

Date: November 30, 2022

Copyright © 2022 Fortinet, Inc. All rights reserved. Fortinet, FortiGate, FortiCare, FortiGuard, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions. Other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments, and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet's General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics. In such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet's internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features, or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

For Product License Agreement / EULA and Warranty Terms, visit: https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

The Essentials

Default Logins

• FortiAP Access: https://192.168.1.2, Username: admin, Password: leave blank
• FortiLAN Cloud Access: http://fortilancloud.com, Username: user-defined, Password: user-defined

Admin Guide

For a detailed FortiAP setup and configuration information, refer to the Admin Guide on https://docs.fortinet.com/product/fortiap.

Customer Service

For contracts, licensing, product registration, and account management, contact FortiCare Support at https://www.fortinet.com/support/contact.

Self-service Resources

Access our knowledge base, forums, videos, and technical experts at https://www.fortinet.com/support/support-services/forticare-support.

Thank you for choosing Fortinet.

Package Contents

The FortiAP 431G / 433G package includes:

• FortiAP Device*
• QuickStart Guide
• FortiAP Antenna Device**
• 9/16" Ceiling Mounting Bracket
• 15/16" Ceiling Mounting Bracket
• 8x Mounting Screws with 8x Anchors
• 8x Antennas** (4x detachable, 4x non-detachable)

Setup Options

Power the FortiAP device with an 802.3af/at PoE injector, FortiGate PoE port, or the optional (not included) 12V 4A power adapter.

FortiLAN Cloud Setup

Diagram Description:

1. Connect the FortiAP LAN Port to an Ethernet Cable (not included).
2. Connect the Ethernet Cable to the FortiLAN Cloud service via http://fortilancloud.com.

Note: Use your FortiCloud credentials to log in, then click Inventory, Import AP Key, and enter the Cloud Key on the device sticker.

Direct Connection Setup

Diagram Description:

1. Connect the FortiAP LAN Port to an Ethernet Cable (not included).
2. Connect the Ethernet Cable to a FortiGate Ethernet Port.

Note: To self-configure, preauthorize the FortiAP on your FortiGate. Otherwise, once connected, wait for the FortiAP to appear on the Managed FortiAP page in FortiOS.

Network Connection Setup

Diagram Description:

1. Connect the FortiAP LAN Port to an Ethernet Cable (not included).
2. Connect the Ethernet Cable to a device on the Same Network.
3. Connect the network to a FortiGate Ethernet Port.

Note: Connect to the FortiAP using 192.168.1.2 with username 'admin' and set a password. Specify the FortiGate IP using the commands:

cfg -a AC_IPADDR=0.0.0.0
cfg -c

Where 0.0.0.0 is the FortiGate IP.

Installation

Bracket Installation

The FortiAP mounts on a ceiling using the provided T-rail mounting brackets, which come in two standard sizes: 1.43cm (9/16in) and 2.38cm (15/16in).

1. Select the bracket for the T-rail size: 1.43cm (9/16in) or 2.38cm (15/16in).
2. With the ports facing you, slide the bracket from left to right onto the T-rail.
3. Hold the device against the ceiling T-rail and push until it snaps into place.

Antenna Installation (FAP-433G only)

Diagram Description: The device has multiple antenna connection points. Antennas are described as 'detachable (connectorized)' and 'non-detachable (integral)'. A 'fastening collar' is used to secure them.

1. Insert the antenna base firmly into the appropriate antenna mount.
2. Securely hand-tighten the antenna fastening collar.
3. Repeat for the remaining antennas.

Note: There are 8 external antennas in total: 4 detachable (connectorized) on each corner and 4 non-detachable (integral) on the sides of the device.

Interfaces - FAP 431G / 433G

Diagram Description: The diagram shows the top and bottom views of the FortiAP device with numbered interface elements.

1. LED Status:
   • Power: Off (Device is off), Green (Device is on and connected to a controller), Amber (Device is on and not connected to a controller).
   • LAN: Off (LAN is not connected), Green (LAN is connected), Blinking Green (LAN data activity).
   • WiFi: Off (WiFi not broadcasting), Green (SSID broadcasting), Blinking Green (Wireless data activity).
2. OPTIONAL POWER (12V DC): Connection for an optional 12V DC 4A adapter.
3. RESET: System reset button.
4. CONSOLE (RJ-45): For CLI management.
5. LAN2 / POE 5G (RJ-45): 5 Gbps 802.3at/802.3bt PoE Ethernet interface.
6. LAN1 / POE 5G (RJ-45): 5 Gbps 802.3at/802.3bt PoE Ethernet interface.

Cautions and Warnings

Environmental Specifications

Ambient operating temperature: 0°C to 50°C. Refer to the specific Product Model Data Sheet for detailed Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude).

(Note: French translation of this section is present in the original document but omitted here for brevity and primary language focus.)

Safety

Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant.

This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2 and rated 12Vdc, 4A or by 55Vdc from a PoE source.

Suitable for use in environmental air space in accordance with Section 300-22(C) of the National Electrical Code, and Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, CSA C22.1.

(Note: French translation of this section is present in the original document but omitted here for brevity and primary language focus.)

Regulatory Notices

Federal Communication Commission (FCC) – USA

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.

If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:

• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.

WARNING: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment.

This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. For operation within the 5.925-7.125GHz frequency range.

FCC regulations restrict the operation of this device to indoor use only. The operation of this device is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems.

Industry Canada Equipment Standard for Digital Equipment (ICES) - Canada

This Class B digital apparatus complies with Canadian ICES-003.

This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada's licence-exempt RSS(s). Operation is subject to the following two conditions: 1. This device may not cause interference. 2. This device must accept any interference, including interference that may cause undesired operation of the device.

For products available in the USA/Canada market, only channels 1-11 can be operated. Selection of other channels is not possible.

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate.

The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in Section 6.2.2(3) shall be clearly indicated.

Caution: The device for the band 5150-5250 MHz is only for indoor usage to reduce potential for harmful interference to co-channel mobile satellite systems.

Caution: The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate.

This device has been designed to operate with an antenna having a maximum gain of 5.65 dBi for 2.4GHz and 5.94 dBi for 5GHz. Antenna having a higher gain is strictly prohibited per regulations of ISED. The required antenna impedance is 50 ohms.

Under ISED regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by ISED. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotopically radiated power (e.i.r.p.) is not more than that necessary for successful communication.

This radio transmitter (IC: 7280B-3918T05646) has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device.

This device and its antennas(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures.

Operation shall be limited to indoor use only.

Operation on oil platforms, cars, trains, boats, and aircraft shall be prohibited except for on large aircraft flying above 10,000 ft.

Antenna Specifications

FAP-431G

FAP-433G

European Conformity (CE) – EU

This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

The product transmits within the frequency ranges and less than or equal to the power listed below:

• 2402-2480MHz: less than 20dBm
• 2405-2480MHz: less than 20dBm
• 2412-2472MHz: less than 20dBm
• 5180-5240MHz: less than 23dBm
• 5260-5320MHz: less than 23dBm *
• 5500-5700MHz: less than 30dBm *
• 5925-6425MHz: less than 23dBm

Note: * Only with DFS bands certification.

This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

Simplified EU Declaration of Conformity: This declaration is only valid for Fortinet products (including combinations of software, firmware, and hardware) provided by Fortinet or Fortinet's authorized partners to the end customer directly for use within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinet's authorized partners may not comply with EU Directives, and Fortinet makes no assurances for such products.

(Note: A list of compliance statements in various European languages is present in the original document but is omitted here for brevity and primary language focus.)

Compliance with 2014/53/EU Radio Equipment Directive (RED): In accordance with Article 10.8(a) and 10.8(b) of the RED, the following table provides information on the frequency bands used and the maximum RF transmit power of the product for sale in the EU:

UK Conformity Assessed (UKCA) - United Kingdom

The product transmits within the frequency ranges and less than or equal to the power listed below:

• 2402-2480MHz: less than 20dBm
• 2405-2480MHz: less than 20dBm
• 2412-2472MHz: less than 20dBm
• 5180-5240MHz: less than 23dBm
• 5260-5320MHz: less than 23dBm *
• 5500-5700MHz: less than 30dBm *
• 5925-6425MHz: less than 23dBm

Note: * Only with DFS bands certification.

This equipment should be installed and operated with a minimum distance of 20cm between the radiator & your body.

This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017.

The full Declaration of Conformity for this product is available at the link below: https://site.fortinet.com/ProductRegulatory/UK