FORTINET FAP-432G FortiAP 432G Wireless Access Point User Guide

August 9, 2024
FORTINET

FAP-432G FortiAP 432G Wireless Access Point

“`html

Specifications

  • Model: FortiAP 432G (FAP-432G)
  • Power Input: 100V-220V AC
  • Power Output: 54V DC
  • Antennas: 9x N-Type Omni Antennas
  • Frequency Bands: A1-A4 (2.4/5GHz), A5-A8 (2.4/5/6GHz)

Product Usage Instructions

1. Setup Options

Direct Connection:

  1. Connect FortiAP LAN Port to FortiGate Ethernet Port using an
    Ethernet cable.

  2. Preauthorize the FortiAP on your FortiGate or wait for it to
    appear on the Managed FortiAP page in FortiOS.

FortiLAN Cloud:

  1. Connect FortiAP LAN Port to the FortiLAN Cloud using an
    Ethernet cable.

  2. Log in to FortiCloud, click Inventory, Import AP Key, and enter
    the Cloud Key from the device sticker.

Network Connection:

  1. Connect FortiAP LAN Port to the FortiGate Ethernet Port using
    an Ethernet cable.

  2. To configure, connect to FortiAP using IP address 192.168.1.2
    with username admin and set a password.

  3. Specify the FortiGate IP using the provided configuration
    commands.

2. Installation

Wall Installation:

  1. Mark the location for mounting bolts using the wall mount
    bracket.

  2. Drill holes and insert mounting bolts.

  3. Attach the wall mount bracket to the device and secure it with
    screws.

Pole Installation:

  1. Attach wall mount and pole mount brackets to the device using
    mounting screws.

  2. Loop pole straps through bracket slots and around the pole,
    then tighten the straps.

Antenna Installation:

  1. Insert antenna base into the antenna mount securely.
  2. Tighten the antenna fastening collar by hand.
  3. Repeat for remaining antennas.

3. PoE Injector Installation

  1. Attach AC power cord to the PoE injector.

  2. Plug power cord into a power outlet or UPS.

  3. Connect an Ethernet cable from injector POE port to LAN 1 on
    the FortiAP.

  4. Use LAN port on injector to connect to a network device.

Frequently Asked Questions (FAQ)

Q: Where can I find detailed setup and configuration

information for FortiAP?

A: You can refer to the Admin Guide available at
https://docs.fortinet.com/product/fortiap.

Q: How do I access technical support and warranty coverage for

my device?

A: To access technical support, firmware upgrades, and warranty
coverage, register your device at https://support.fortinet.com.

Q: What are the default login credentials for my device?

A: For local access, use https://192.168.1.2 with username admin
and leave the password blank. For cloud management access, use
user-defined credentials at https://fortilan.fortilcoud.com.

“`

QuickStart Guide
FortiAP 432G
FAP-432G

Before you begin
Register your device to access FortiGuard updates, cloud management, firmware upgrades, technical support and warranty coverage.
https://support.fortinet.com

This guide covers: FAP-432G

May 7, 2024

Copyright© 2024 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., in the U.S. and other jurisdictions, and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet’s General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet’s internal lab tests. In no event does Fortinet make any commitment related to future deliverables, features or development, and circumstances may change such that any forward-looking statements herein are not accurate. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.

For Product License Agreement / EULA and Warranty Terms, visit https://www.fortinet.com/content/dam/fortinet/assets/legal/EULA.pdf

2

3

The Essentials

Default Logins

https://192.168.1.2 Username: admin Password: leave blank

https://fortilan.fortilcoud.com Username: user-defined Password: user-defined

Admin Guide
For a detailed FortiAP setup and configuration information, refer to the Admin Guide on https://docs.fortinet.com/product/fortiap
Customer Service
For contracts, licensing, product registration and account management, contact FortiCare Support at https://www.fortinet.com/support/contact

Self-service Resources
Access our knowledge base, forums, videos and technical experts at https://www.fortinet.com/support/support-services/forticare-support

Thank you for choosing Fortinet

Package Contents
FortiAP 432G FAP-432G

QuickStart Guide

FortiAP Device

1x PoE Injector and AC Cord
(100V-220V AC Input, 54V DC Output)

Wall Mount Bracket

Pole Mount Bracket

Mounting Kit (2x Pole Straps, 4x Mounting Bolts with Screws, 1x Grounding Cable, 9x Mounting Screws)

9x N-Type Omni Antennas

4

5

Setup Options

Direct Connection

1

3

FortiAP LAN Port

2
Ethernet Cable (not included)

FortiGate Ethernet Port

Note: To self-configure, preauthorize the FortiAP on your FortiGate Otherwise once connected, wait for the FortiAP to appear on the Managed FortiAP page in FortiOS.

FortiLAN Cloud
1
FortiAP LAN Port

3
FortiLAN Cloud
https://fortilan.fortilcoud.com
2

Ethernet Cable (not included)

Note: Use your FortiCloud credentials to log in, then click Inventory, Import AP Key and enter the Cloud Key on the device sticker

6

Network Connection
1

FortiAP LAN Port

2
Ethernet Cable (not included)

3

4

Same Network

FortiGate Ethernet Port

Note: Connect to the FortiAP using 192.168.1.2 with username admin and set a password. Specify the FortiGate IP using:
cfg -a AC_IPADDR=0.0.0.0
cfg -c where 0.0.0.0 is the FortiGate IP.

7

Wall Installation
1. Mark the location of the mounting bolts using the wallmount bracket 2. Drill holes and hammer the bolts into the drilled holes 3. Attach the wallmount bracket to the device with the provided screws 4. Secure the device on the wall using the mounting bolts
Pole Installation
1. Attach the wallmount bracket, then the pole mount bracket to the device using the provided mounting screws
2. Loop the pole straps through the bracket slots, then around the pole 3. Tighten the straps

Antenna Installation
1. Insert the antenna base firmly into the appropriate antenna mount 2. Securely hand tighten the antenna fastening collar 3. Repeat for the remaining antennas

A4 – 2.4/5GHz A3 – 2.4/5GHz A2 – 2.4/5GHz A1 – 2.4/5GHz
BLE / Scanning

A5 – 2.4/5/6GHz A6 – 2.4/5/6GHz A7 – 2.4/5/6GHz A8 – 2.4/5/6GHz

Note: Antennas A1/A2/A3/A4 radiate at 2.4/5.0GHz; A5/A6/A7/A8 radiate at 2.4/5/6GHz

8

9

PoE Injector Installation
1. Attach the supplied AC power cord to the PoE injector 2. Plug the power cord into a power outlet or UPS 3. Connect an Ethernet cable from the injector POE port to LAN 1 on the FortiAP 4. Use the LAN port on the injector to connect to a network device

Power Outlet or UPS

LAN Port
PoE Port
Reset Button
(press and hold 5secs to reboot press and hold 10secs for factory reset)

PoE Connection

Waterproof Cabling
1. Unscrew the sealing nut from the panel connector and remove the seal and claw 2. Thread the RJ45 plug through the nuts and ring, then the panel connector 3. Wrap the seal and claw around the cable between the sealing nut and connector 4. Insert the RJ45 plug into the port and screw the panel connector onto the threads 5. Slide the seal and claw along the cable into the panel connector 6. Threat the coupling ring onto the panel connector and tighten it

Panel Connector

Seal and Claw

Sealing Nut

10

11

Interfaces

1

2

3

4

5

6

7

8

9 10 11 12

1 LAN 1 10GE / PoE 802.3bt (RJ45) 2 LAN 2 1GE / 802.3af PSE OUT (RJ45) 3 CONSOLE (RJ45) Reset button above port 4 A4 2.4/5GHz 5 A3 2.4/5GHz 6 A2 2.4/5GHz

7 A1 2.4/5GHz 8 BLE 5.0 / Zigbee 3.0 9 A8 2.4/5/6GHz 10 A7 2.4/5/6GHz 11 A6 2.4/5/6GHz 12 A5 2.4/5/6GHz

12

LED Indicators
1 2 3

1 WiFi
Off: Radio 1 & 2 off Blue: Radio 1 on Blinking Blue: Radio 1 transmitting Amber: Radio 2 on Blinking Amber: Radio 2 transmitting Green: Radio 1 & 2 on Blinking Green: Radio 1 & 2 transmitting
2 LAN
Off: Not connected Green: Connected Blinking Green: Transmitting at 10/1Gbps Blinking Amber: Transmitting at 100Mbps

3 Power
Off: Device off Green: Device on Blinking Green: Booting up or upgrading Amber: Reserved for customizations

13

Cautions and Warnings
Environmental specifications
Ambient operating temperature: -40°C to 60°C
Refer to specific Product Model Data Sheet for Environmental Specifications (Operating Temperature, Storage Temperature, Humidity, and Altitude) Référez à la Fiche Technique de ce produit pour les caractéristiques environnementales (Température de fonctionnement, température de stockage, humidité et l’altitude).
Safety
Warning: Equipment intended for installation in Restricted Access Location. Avertissement: équipement destiné à être installé dans un endroit à accès restreint.
Caution: This equipment is to be used in a Network Environment 0 per IECTR 62101. This product is connected only to PoE networks without routing to the outside plant. Attention: Ce matériel doit être utilisé dans un Environnement Réseau 0 par IECTR 62101. Ce produit est uniquement connecté aux réseaux PoE sans installation externe de routage.
This product is intended to be supplied by a Listed Direct Plug-In Power Unit marked LPS or Class 2 and rated 54Vdc, 1.11A from PoE source. Le produit doit être alimenté par un bloc d’alimentation à courant continu homologué UL de 54Vdc, 1.11A nominal marqué LPS ou Class 2 ou par une source d’alimentation par Ethernet de 54Vdc (PoE).
Grounding ­ To prevent damage to your equipment, connections that enter from outside the building should pass through a lightning/surge protector, and be properly grounded. Use an electrostatic discharge workstation (ESD) and/or wear anti-static wrist strap while you work. In addition to the grounding terminal of the plug, on the back panel, there is another, separate terminal for earthing. Mise à la terre – Pour éviter d’endommager votre équipement, les connexions qui entrent de l’extérieur du bâtiment doivent passer par un parafoudre / surtension et être correctement mises à la terre. Utilisez une station de travail à décharge électrostatique (ESD) et / ou portez un bracelet antistatique pendant que vous travaillez. En plus de la borne de mise à la terre de la fiche, sur le panneau arrière, il y a une autre borne séparée pour la mise à la terre.
Regulatory Notices
Federal Communication Commission (FCC) ­ USA
This device complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received; including interference that may cause undesired operation.
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in residential installation. This equipment generates, uses, and can radiate radio frequency energy, and if it is not installed and used in accordance with the instruction manual, it may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation.
If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.
WARNING: Any changes or modifications to this unit not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 61cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules.
Industry Canada Equipment Standard for Digital Equipment (ICES) ­ Canada
This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Innovation, Science and Economic Development (ISED) ­ Canada
This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canada’s licenceexempt RSS(s). Operation is subject to the following two conditions: 1. This device may not cause interference. 2. This device must accept any interference, including interference that may cause undesired operation of the device. L’émetteur/récepteur exempt de licence contenu dans le présent appareil est conforme aux CNR d’Innovation, Sciences et Développement économique Canada applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes: 1. L’appareil ne doit pas produire de brouillage; 2. L’appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d’en compromettre le fonctionnement.
For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. Pour les produits disponibles aux États-Unis / Canada du marché, seul le canal 1 à 11 peuvent être exploités. Sélection d’autres canaux n’est pas possible.
This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 32cm between the radiator & your body.
14

Cet équipement est conforme aux limites d’exposition aux rayonnements ISED établies pour un environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 32cm de distance entre la source de rayonnement et votre corps.
The maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate. Le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5725-5850 MHz) doit se conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le cas.
Caution: The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems Attention: Les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux
Caution: The maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall comply with the e.i.r.p. limit; and the maximum antenna gain permitted for devices in the band 5725-5825 MHz shall comply with the e.i.r.p. limits specified for point-to-point and non point-to-point operation as appropriate. Attention: Le gain maximal d’antenne permis pour les dispositifs utilisant les bandes 5 250-5 350 MHz et 5 470-5 725 MHz doit se conformer à la limite de p.i.r.e.; le gain maximal d’antenne permis (pour les dispositifs utilisant la bande 5 725-5 825 MHz) doit se conformer à la limite de p.i.r.e. spécifiée pour l’exploitation point à point et non point à point, selon le cas.
(iii) where applicable, antenna type(s), antenna models(s), and worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in section 6.2.2.3 shall be clearly indicated.. (iii) lorsqu’il y a lieu, les types d’antennes (s’il y en a plusieurs), les numéros de modèle de l’antenne et les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable au masque d’élévation, énoncée à la section 6.2.2.3, doivent être clairement indiqués.
This radio transmitter (IC: 7280B-5108TQ56462 / Model: FAP-432G) has been approved by ISED to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le présent émetteur radio (IC: 7280B-5108TQ56462 / Model: FAP- 432G) a été approuvé par ISED pour fonctionner avec les types d’antenne énumérés ci-dessous et ayant un gain admissible maximal et l’impédance requise pour chaque type d’antenne. Les types d’antenne non inclus dans cette liste, ou dont le gain est supérieur au gain maximal indiqué, sont strictement interdits pour l’exploitation de l’émetteur.
This device and it’s antennas(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures. Cet appareil et son antenne (s) ne doit pas être co-localisés ou fonctionnement en association avec une autre antenne ou transmetteur.

Antenna Label A1 A2 A3 A4 A5 A6 A7 A8 BLE

Brand Name SENAO SENAO SENAO SENAO SENAO SENAO SENAO SENAO SENAO

Model Name 5718A0729300 5718A0729300 5718A0729300 5718A0729300 5718A0727300 5718A0727300 5718A0727300 5718A0727300 5718A0618300

Antenna Type Dipole Dipole Dipole Dipole Dipole Dipole Dipole Dipole Dipole

Connector N-Type N-Type N-Type N-Type N-Type N-Type N-Type N-Type N-Type

Frequency 2.4G/5G 2.4G/5G 2.4G/5G 2.4G/5G
2.4G/5G/6E 2.4G/5G/6E 2.4G/5G/6E 2.4G/5G/6E BT/Zigbee

Max Peak Gain (dBi) 2.4G: 4.82 / 5G: 5.89 2.4G: 4.76 / 5G: 6.01 2.4G: 5.03 / 5G: 6.40 2.4G: 4.78 / 5G: 6.14 2.4G: 4.26 / 5G: 5.75 / 6E: 5.80 2.4G: 4.45 / 5G: 5.54 / 6E: 5.95 2.4G: 4.81 / 5G: 5.50 / 6E: 5.65 2.4G: 4.86 / 5G: 5.72 / 6E: 5.80
BLE: 4.71

Professional Installation Instructions
1. Installation personal This product is designed for specific application and needs to be installed by a qualified personal who has RF and related rule knowledge. The general user shall not attempt to install or change the setting. 2. Installation location The product shall be installed at a location where the radiating antenna can be kept 61cm/32cm from nearby person in normal operation condition to meet regulatory RF exposure requirement. 3. Antenna Use only the antennas which have been approved by the applicant. The non-approved antenna(s) may produce unwanted spurious or excessive RF transmitting power which may lead to the violation of FCC/IC limit and is prohibited. 4. Installation procedure Please refer to user’s manual for the detail. 5. Warning Please carefully select the installation position and make sure that the final output power does not exceed the limit set force in relevant rules. The violation of the rule could lead to serious federal penalty.
Instructions d’installation professionnelle
1. Installation Ce produit est destine a un usage specifique et doit etre installe par un personnel qualifie maitrisant les radiofrequences et les regles s’y rapportant. L’installation et les reglages ne doivent pas etre modifies par l’utilisateur final. 2. Emplacement d’installation En usage normal, afin de respecter les exigences reglementaires concernant l’exposition aux radiofrequences, ce produit doit etre installe de facon a respecter une distance de 61cm/32cm entre l’antenne emettrice et les personnes. 3. Antenne Utiliser uniiquement les antennes approuvees par le fabricant. L’utilisation d’autres antennes peut conduire a un niveau de rayonnement essentiel ou non essentiel depassant les niveaux limites definis par FCC/IC, ce qui est interdit. 4. Procedure d’installation Consulter le manuel d’utilisation. 5. Avertissement Choisir avec soin la position d’installation et s’assurer que la puissance de sortie ne depasse pas les limites en vigueur. La violation de cette regle peut conduire a de serieuses penalites federales.

15

European Conformity (CE) ­ EU This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.
This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. The device is restricted to indoor use only when operating in the 5150-5350 MHz.
Simplified EU Declaration of Conformity This declaration is only valid for Fortinet products (including combinations of software, firmware and hardware) provided by Fortinet or Fortinet’s authorized partners to the end-customer directly for use within the EU or countries that have implemented the EU Directives and/or spectrum regulation. Any Fortinet products not obtained directly from Fortinet or Fortinet’s authorized partners may not comply with EU Directives and Fortinet makes no assurances for such products. 2014/53/. Cesky Tento produkt je v souladu se smrnicí 2014/53/EU. Dansk Dette produkt er i overensstemmelse med direktiv 2014/53/EU. Deutsch Dieses Produkt entspricht der Richtlinie 2014/53/EU. Eesti See toode vastab direktiivile 2014/53/EL. English This product is in compliance with Directive 2014/53/EU. Español Este producto cumple con la Directiva 2014/53/UE. 2014/53/. Français Ce produit est conforme à la Directive 2014/53/UE. Hrvatski Ovaj proizvod je u skladu s Direktivom 2014/53/EU. Italiano Questo prodotto è conforme alla Direttiva 2014/53/EU. Latviski Sis produkts atbilst Direktvai 2014/53/EU. Lietuvi Sis gaminys atitinka direktyv 2014/53/ES. Malti Dan il-prodott huwa konformi mad- Direttiva 2014/53/UE. Magyar Ez za termék megfelel a 2014/53/EU irányelvnek. Nederlands Dit product is in overeenstemming met Richtlijn 2014/53/EU. Norsk Dette produktet er i samsvar med direktiv 2014/53/EU. Polski Ten produkt jest zgodny z dyrektyw 2014/53/UE. Português Este produto está em conformidade com a Diretiva 2014/53/UE. Rumunski Acest produs este în conformitate cu Directiva 2014/53/UE. Slovensky Tento produkt je v súlade so smernicou 2014/53/EÚ. Slovensko Ta izdelek je v skladu z Direktivo 2014/53/EU. Suomi Tämä tuote on direktiivin 2014/53/EU mukainen. Svenska Denna produkt överensstämmer med direktiv 2014/53/EU. Note: The full declaration of conformity for this product is available at the link below: https://site.fortinet.com/ProductRegulatory/EU
16

The device is restricted to indoor use only when operating in the 5150 to 5350 MHz frequency range in the following countries:
Compliance with 2014/53/EU Radio Equipment Directive (RED) In accordance with Article 10.8(a) and 10.8(b) of the RED, the following table provides information on the frequency bands used and the maximum RF transmit power of the product for sale in the EU: The product transmits within the frequency ranges and less than or equal to the power listed below: 2402-2480MHz less than 20dBm 2405-2480MHz less than 20dBm 2412-2472MHz less than 20dBm 5180-5240MHz less than 23dBm 5260-5320MHz less than 23dBm 5500-5700MHz less than 30dBm 5745-5825MHz less than 14dBm 5725-5875MHz less than 30dBm 5725-5875MHz less than 13.5dBm 5955-6415MHz less than 23dBm Note: Only with DFS bands certification. UK Conformity Assessed (UKCA) ­ United Kingdom The product transmits within the frequency ranges and less than or equal to the power listed below: 2402-2480MHz less than 20dBm 2405-2480MHz less than 20dBm 2412-2472MHz less than 20dBm 5180-5240MHz less than 23dBm 5260-5320MHz less than 23dBm 5500-5700MHz less than 30dBm 5745-5825MHz less than 14dBm 5725-5875MHz less than 30dBm 5725-5875MHz less than 13.5dBm 5955-6415MHz less than 23dBm Note: Only with DFS bands certification. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This product is in compliance with Statutory Instrument 1206 Radio Equipment Regulations 2017 Operations in the 5.15-5.35GHz band are restricted to indoor usage only. The full Declaration of Conformity for this product is available in the link below: https://site.fortinet.com/ProductRegulatory/UK
17

18

19

Fortinet.com

References

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>

Related Manuals