Products
Fortinet FortiAP 231F
Fortinet FortiAP 231F access points are managed centrally by the integrated WLAN controller of any FortiGate® security appliance or through the FortiAP Cloud provisioning and management portal. With the integration of the wireless controller functionality into the market-leading FortiGate appliance, these APs are perfect for protecting your LAN Edge from the campus to branch deployments. Fortinet’s Security Fabric enables you to easily manage wired and wireless security from a single pane-of-glass management console and protects your network from the latest security threats.
Unified Management
Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance.
Advanced Security Protection
Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Built-in Wi-Fi Security
Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Highlights
This enterprise class Wi-Fi 6 indoor AP provides three radios as well as features such as OFDMA and dual 1 Gbps Ethernet ports for PoE diversity. The AP can provide 24/7 scanning across both bands while still providing access on both the 2.4 and 5 GHz bands. The integrated BLE radio can be used for beacons and locationing applications.
2×2 MU-MIMO | Up to 574 Mbps + 1201 Mbps + scanning
FortiAP 231F
|
|
| Hardware | |
| Hardware Type | Indoor AP |
| Number of Radios | 3 + 1 BLE |
| Number of Antennas | 3 Dual band Internal Wi – Fi + 1 BLE / ZigBee |
| Antenna Type and Peak Gain | PIFA antenna Dual band : 4 : 5dBi for 2.4Ghz and 5.5dBi for 5GHz BLE antenna 4.0dBi at 2.4GHz band |
| Frequency Bands ( GHz ) * | 2.400-2.4835 , 5.150-5.250 , 5.250-5.350 , 5.470-5.725 , 5.725-5.850 |
| Radio 1 Capabilities | Frequency band : 2.4GHz Channel width : 20 / 40MHz Modulation : BPSK , QPSK , 64/256/1024 QAM MIMO Chains : 2×2 Service |
| Radio 2 Capabilities | Frequency band : 5.0GHz Channel width : 20 / 40 / BOMHz Modulation : BPSK , QPSK , 64/256/1024 QAM MIMO Chains : 2×2 Service |
| Radio 3 Capabilities | Frequency bands : 2.4GHz and 5.0GHz MIMO Chains : 1×1 Frequency Scanning |
| Maximum Data Rate | Radio 1 : up to 574 Mbps Radio 2 up to 1201 Mbps Radio 3 : Frequency scanning only |
| Bluetooth Low Energy Radio | Bluetooth scanning and iBeacon advertisement @ 10 dBm max TX power |
| Interfaces | 2x 10/100/1000 Base – T RJ45 , 1x Type 2.0 USB , 1x RS 232 RJ45 Serial Port |
| MDI / MDIX | Supported Supported |
| Simultaneous SSIDs | Up to 16 ( 14it background scanning enabled ) |
| EAP Type ( s ) | EAP – TLS , EAP – TTLS / MSCHAPv2 , PEAPVO / EAP MSCHAPV2 , PEAPVI / EAP – GTC , EAP – SIM , EAP – AKA , EAP FAST |
| User / Device Authentication | WPA ” , WPA2 ” , and WPA3 ” with 802.1x or Preshared key , WEP , Web Captive Portal , MAC blocklist & allowfist |
| Maximum Tx Power ( Conducted ) |
Radio 1 : 2.4GH2 : 23 dBm / 200 mW ( 2 chains combined ) Radio 2 : 5GHz : 22 dBm / 158 mW ( 2 chains combined ) Radio 3 : NA |
| Kensington Lock | Yes |
| IEEE Standards | 802.11a , 802.11b , 802.110 , 802.11e , 802.11g , 802.11h , 802.11i , 802.11 ) , 802.11k , 802.11n , 802.11r , 802.11u , 802.11v , 802.11w , 802.11ac , 802.11ax , 802.1Q , 802.1X , 802.3ad , 802.3at , 802.3at , 802.3az |
| SSID Types Supported | Local – Bridge , Tunnel , and Mesh |
| Per Radio Client Capacity | Up to 512 clients per radio ( Radiol and Radio2 ) |
| Cellular Co – existence | Yes |
| Reset Button | Yes |
| LED Off Mode | Yes |
| Advanced 802.11 Features | |
| OFDMA | Yes ( UL and DL ) |
| Spatial Reuse ( BSS Coloring ) | Yes |
| UL MU – MIMO 802.11ax mode | Yes |
| DL – MU – MIMO | Yes |
| Enhanced Target Wake Time ( TWT ) |
Yes |
| ZeroWait DFS / Agile DFS | No |
| Wireless Monitoring Capabilities | |
| Rogue Scan radio modes | Background , Dedicated |
| WIPS / WIDS radio modes | Background , Dedicated ( recommended ) |
| Packet Sniffer Mode | Yes |
| Spectrum Analyzer | Yes |
| Dimensions | |
| Length x Width x Height | 6.0 x 6.0 x 2.86 inches ( 153.2 x 153.2 x 53.0 mm ) |
| Weight | 1.0 lbs ( 0.543 kg ) |
| Package ( shipping ) Weight | 2.1lbs ( 0.95 kg ) |
| Accessories | |
| Mounting Options | Ceiling , T – Rail , and Wall |
| Included Accessories | Standard Mount kit for Ceiling , T – Rail , and Wall |
| Power Supply | SP – FAP200 – PA – XX , or SP – FAP250 – PA – 10 , or 802.3at POE GPI – 130 |
| Environment | |
| Power Consumption ( Maximum ) | 17W |
| PoE Mode | 802.3at PoE default 1 port powered by 802.3at – full system functionality + USB support 1 port is connected to 802.3af – no USB support |
| Humidity | 5 % -90 % non condensing |
| Operating / Storage Temperature |
32 % -122 ° F ( 0 ° -50 ° C ) / -22 ° -158 ° F ( -30 % -70 ° C ) |
| Directives | Low Voltage Directive RoHS |
| UL2043 Plenum Material | No |
| Mean Time Between Failures | > 10 Years |
| IP Rating | N / A |
| Surge Protection Built In | No |
| Hit – less PoE Failover | N / A |
| Certifications | |
| WiFi Alliance Certified | Yes ( includes Passpoint ) |
| DFS | FCC , IC , CE , Japan , Brazil , Taiwan and Korea |
| Warranty | |
| Limited Lifetime Warranty | Yes |
If the FortiGate is on the same network as the FortiAP:
1. Preauthorize your FortiAP device using your FortiGate
2. Plug the FortiAP into your local Ethernet connection
3. The FortiAP will self-configure
Or
1. Instead of preauthorizing, authorize the FortiAP device after you have connected the FortiAP to the network
2. Within two minutes of connecting the FortiAP to your FortiGate, the device will appear on the Managed FortiAP page in the GUI to authorize and assign a profile LAN Port FortiAP Ethernet Port FortiGate
If FortiGate is not on the same network as the FortiAP:
1. Log in to the FortiAP directly (IP address: 192.168.1.2) with username admin and no password, and specify the IP address of the controlling FortiGate
2. Specify the IP address of the controlling FortiGate:
cfg -a AC_IPADDR_1=0.0.0.0
cfg -c
where 0.0.0.0 is the address of the FortiGate
3. The FortiAP device connects to the FortiGate, and then you can authorize the FortiAP
FortiAP 231F Interfaces
1 OPTIONAL POWER (12V DC) Optional 12V DC 2.5A adapter
2 RESET resets the device
3 CONSOLE (RJ-45) CLI management computer interface
4 LAN2 GE (RJ-45) 1 Gbps Ethernet interface
5 LAN1/POE GE (RJ-45) 1 Gbps 802.3at PoE Ethernet interface
6 USB 3.0 (Type A) software enabled power through the GPIO, 9A/5V
Fortinet FortiAP 231F - LED Indicators
Green: Device is on
Blinking Green: Booting up
Orange: Reserved for customizations
Off: Link is off
Green: Link is on
Blinking Green: Transmitting at 1Gbps
Blinking Orange: Transmitting at 100Mbps
Off: Link is off
Green: Link is on
Blinking Green: Transmitting at 1Gbps
Blinking Orange: Transmitting at 100Mbps
Off: Radio 1 & 2 are off
Blue: Radio 1 is on
Blinking Blue: Radio 1 is transmitting data
Orange: Radio 2 is on
Off: BLE & Radio 3 are off
Blue: BLE is on
Blinking Blue: BLE is transmitting data
Orange: Radio 3 is on
Blinking Orange: Radio 3 is transmitting data
Green: BLE & Radio 3 are on
Blinking Green: BLE and Radio 3 are transmitting data
Fortinet FortiAP 231F Basic Connection
FortiAP Cloud
FortiAPCloud is a cloud-based FortiAP management solution and log retention service. It provides centralized reporting, traffic analysis, configuration management, and log retention.
FortiGate Deployment
Your FortiAP can be preauthorized and configured using a FortiGate. You can also authorize your FortiAP after you have connected it to the same network. If the FortiGate is not on the same network as the FortiAP, you can log directly into the AP and authorize it via the CLI.
Device Setup
1. Connect the FortiAP device to a FortiGate controller or an Internet connection
2. Ensure that the Power over Ethernet (PoE) cable is connected to an applicable port on your FortiGate device or PoE injector
Optional: If you are not using PoE, connect the DC plug of the optional power 12V 2.5A power adapter into the FortiAP power jack and the AC plug from the adapter into a power outlet.
Warning: This device complies with IEEE 802.3af/at PoE specification. Do not use any PoE injectors that are not IEEE 802.3at compliant as they may damage your device.
- Overview
-
Unified Management
Unified management console simplifies operations, ensuring consistency in effective policy enforcement and compliance.
Advanced Security Protection
Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Built-in Wi-Fi Security
Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Highlights
This enterprise class Wi-Fi 6 indoor AP provides three radios as well as features such as OFDMA and dual 1 Gbps Ethernet ports for PoE diversity. The AP can provide 24/7 scanning across both bands while still providing access on both the 2.4 and 5 GHz bands. The integrated BLE radio can be used for beacons and locationing applications.
2×2 MU-MIMO | Up to 574 Mbps + 1201 Mbps + scanning
- Specification
-
FortiAP 231F
Hardware Hardware Type Indoor AP Number of Radios 3 + 1 BLE Number of Antennas 3 Dual band Internal Wi – Fi + 1 BLE / ZigBee Antenna Type and Peak Gain PIFA antenna
Dual band : 4 : 5dBi for 2.4Ghz and 5.5dBi for 5GHz
BLE antenna 4.0dBi at 2.4GHz bandFrequency Bands ( GHz ) * 2.400-2.4835 , 5.150-5.250 , 5.250-5.350 , 5.470-5.725 ,
5.725-5.850Radio 1 Capabilities Frequency band : 2.4GHz
Channel width : 20 / 40MHz
Modulation : BPSK , QPSK , 64/256/1024 QAM
MIMO Chains : 2×2 ServiceRadio 2 Capabilities Frequency band : 5.0GHz
Channel width : 20 / 40 / BOMHz
Modulation : BPSK , QPSK , 64/256/1024 QAM
MIMO Chains : 2×2 ServiceRadio 3 Capabilities Frequency bands : 2.4GHz and 5.0GHz
MIMO Chains : 1×1 Frequency ScanningMaximum Data Rate Radio 1 : up to 574 Mbps
Radio 2 up to 1201 Mbps
Radio 3 : Frequency scanning onlyBluetooth Low Energy Radio Bluetooth scanning and iBeacon advertisement @ 10
dBm max TX powerInterfaces 2x 10/100/1000 Base – T RJ45 , 1x Type 2.0 USB , 1x RS
232 RJ45 Serial PortMDI / MDIX Supported Supported Simultaneous SSIDs Up to 16 ( 14it background scanning enabled ) EAP Type ( s ) EAP – TLS , EAP – TTLS / MSCHAPv2 , PEAPVO / EAP
MSCHAPV2 , PEAPVI / EAP – GTC , EAP – SIM , EAP – AKA ,
EAP FASTUser / Device Authentication WPA ” , WPA2 ” , and WPA3 ” with 802.1x or Preshared
key , WEP , Web Captive Portal , MAC blocklist & allowfistMaximum Tx Power
( Conducted )Radio 1 : 2.4GH2 : 23 dBm / 200 mW ( 2 chains
combined )
Radio 2 : 5GHz : 22 dBm / 158 mW ( 2 chains
combined )
Radio 3 : NAKensington Lock Yes IEEE Standards 802.11a , 802.11b , 802.110 , 802.11e , 802.11g , 802.11h ,
802.11i , 802.11 ) , 802.11k , 802.11n , 802.11r , 802.11u ,
802.11v , 802.11w , 802.11ac , 802.11ax , 802.1Q , 802.1X ,
802.3ad , 802.3at , 802.3at , 802.3azSSID Types Supported Local – Bridge , Tunnel , and Mesh Per Radio Client Capacity Up to 512 clients per radio ( Radiol and Radio2 ) Cellular Co – existence Yes Reset Button Yes LED Off Mode Yes Advanced 802.11 Features OFDMA Yes ( UL and DL ) Spatial Reuse ( BSS Coloring ) Yes UL MU – MIMO 802.11ax mode Yes DL – MU – MIMO Yes Enhanced Target Wake Time
( TWT )Yes ZeroWait DFS / Agile DFS No Wireless Monitoring Capabilities Rogue Scan radio modes Background , Dedicated WIPS / WIDS radio modes Background , Dedicated ( recommended ) Packet Sniffer Mode Yes Spectrum Analyzer Yes Dimensions Length x Width x Height 6.0 x 6.0 x 2.86 inches ( 153.2 x 153.2 x 53.0 mm ) Weight 1.0 lbs ( 0.543 kg ) Package ( shipping ) Weight 2.1lbs ( 0.95 kg ) Accessories Mounting Options Ceiling , T – Rail , and Wall Included Accessories Standard Mount kit for Ceiling , T – Rail , and Wall Power Supply SP – FAP200 – PA – XX , or SP – FAP250 – PA – 10 , or 802.3at
POE GPI – 130Environment Power Consumption ( Maximum ) 17W PoE Mode 802.3at PoE default
1 port powered by 802.3at – full system functionality
+ USB support
1 port is connected to 802.3af – no USB supportHumidity 5 % -90 % non condensing Operating / Storage
Temperature32 % -122 ° F ( 0 ° -50 ° C ) / -22 ° -158 ° F ( -30 % -70 ° C ) Directives Low Voltage Directive RoHS UL2043 Plenum Material No Mean Time Between Failures > 10 Years IP Rating N / A Surge Protection Built In No Hit – less PoE Failover N / A Certifications WiFi Alliance Certified Yes ( includes Passpoint ) DFS FCC , IC , CE , Japan , Brazil , Taiwan and Korea Warranty Limited Lifetime Warranty Yes - Antenna Radiation Patterns
-
- FortiAP Deployment
-
If the FortiGate is on the same network as the FortiAP:
1. Preauthorize your FortiAP device using your FortiGate
2. Plug the FortiAP into your local Ethernet connection
3. The FortiAP will self-configure
Or
1. Instead of preauthorizing, authorize the FortiAP device after you have connected the FortiAP to the network
2. Within two minutes of connecting the FortiAP to your FortiGate, the device will appear on the Managed FortiAP page in the GUI to authorize and assign a profile LAN Port FortiAP Ethernet Port FortiGateIf FortiGate is not on the same network as the FortiAP:
1. Log in to the FortiAP directly (IP address: 192.168.1.2) with username admin and no password, and specify the IP address of the controlling FortiGate
2. Specify the IP address of the controlling FortiGate:
cfg -a AC_IPADDR_1=0.0.0.0
cfg -c
where 0.0.0.0 is the address of the FortiGate
3. The FortiAP device connects to the FortiGate, and then you can authorize the FortiAP - Hardware
-
FortiAP 231F Interfaces
1 OPTIONAL POWER (12V DC) Optional 12V DC 2.5A adapter
2 RESET resets the device
3 CONSOLE (RJ-45) CLI management computer interface
4 LAN2 GE (RJ-45) 1 Gbps Ethernet interface
5 LAN1/POE GE (RJ-45) 1 Gbps 802.3at PoE Ethernet interface
6 USB 3.0 (Type A) software enabled power through the GPIO, 9A/5V
Fortinet FortiAP 231F - LED Indicators
1 Power (PoE 802.3at or 12V DC 2.5A)Off: Device is off
Green: Device is on
Blinking Green: Booting up
Orange: Reserved for customizations2 LAN 1 (1 Gbps 802.3at PoE RJ45)
Off: Link is off
Green: Link is on
Blinking Green: Transmitting at 1Gbps
Blinking Orange: Transmitting at 100Mbps3 LAN 2 (1 Gbps RJ45)
Off: Link is off
Green: Link is on
Blinking Green: Transmitting at 1Gbps
Blinking Orange: Transmitting at 100Mbps4 WiFi (5GHz & 2.4GHz 2×2 MU-MIMO)
Off: Radio 1 & 2 are off
Blue: Radio 1 is on
Blinking Blue: Radio 1 is transmitting data
Orange: Radio 2 is onBlinking Orange: Radio 2 is transmitting dataGreen: Radio 1 & 2 are onBlinking Green: Radio 1 & 2 are transmitting data5 Bluetooth Low Energy (BLE) & WiFi
Off: BLE & Radio 3 are off
Blue: BLE is on
Blinking Blue: BLE is transmitting data
Orange: Radio 3 is on
Blinking Orange: Radio 3 is transmitting data
Green: BLE & Radio 3 are on
Blinking Green: BLE and Radio 3 are transmitting data - Device Setup & Basic Connections
-
Fortinet FortiAP 231F Basic Connection
FortiAP Cloud
FortiAPCloud is a cloud-based FortiAP management solution and log retention service. It provides centralized reporting, traffic analysis, configuration management, and log retention.
FortiGate Deployment
Your FortiAP can be preauthorized and configured using a FortiGate. You can also authorize your FortiAP after you have connected it to the same network. If the FortiGate is not on the same network as the FortiAP, you can log directly into the AP and authorize it via the CLI.
Device Setup
1. Connect the FortiAP device to a FortiGate controller or an Internet connection
2. Ensure that the Power over Ethernet (PoE) cable is connected to an applicable port on your FortiGate device or PoE injectorOptional: If you are not using PoE, connect the DC plug of the optional power 12V 2.5A power adapter into the FortiAP power jack and the AC plug from the adapter into a power outlet.
Warning: This device complies with IEEE 802.3af/at PoE specification. Do not use any PoE injectors that are not IEEE 802.3at compliant as they may damage your device.
