Fortinet FortiAP-21D
Thin Wireless LAN Access Points

Overview:

FortiAP are thin access points, delivering secure, identity-driven WiFi access for your enterprise network, managed centrally by the integrated WLAN controller of any FortiGate® security appliance. With the integration of the wireless controller functionality into the market leading FortiGate appliance, Fortinet delivers a true Unified Access Layer. This enables you to easily manage wired and wireless security from a Single Pane of Glass management console and protects your network from the latest security threats.

Outdoor Enterprise WLAN Deployment

FortiAP Remote WLAN access points have been purpose-built for installation in remote locations, with coverage areas of up to 300m². Preprovisioned APs can be shipped to a remote user and connect back to the FortiGate wireless controller via a secure tunnel over any Internet connection. The AP can broadcast the same SSID at the remote location as it does at headquarters, providing a seamless roaming experience for users. The wired ports can also be bridged to an SSID, enabling devices such as VoIP phones to seamlessly connect back to the corporate network. The remote series of FortiAPs are designed to increase the security remote wireless LANs, while simplifying management and reducing helpdesk calls.

Highlights

• Leverage existing FortiGate or FortiWiFi platforms as controllers for low TCO.
• Integration with FortiManager and FortiAnalyzer for centralized management and reporting.
• Fast Roaming for uninterrupted data access.
• Automatic Radio Resource Provisioning (ARRP) for optimized throughput.
• Layer 7 application control prioritizes business traffic.
• Rogue AP detection and mitigation to satisfy PCI DSS Key Features & Benefits compliance.

Key Features & Benefits
Advanced Security Protection	Wireless LAN security done right, from the leader in network security. Integrated Firewall, IPS, Application Control, and Web Filtering protect the wireless LAN from the latest security threats.
Integrated WIDS and Rogue AP Suppression	Protects the network from advanced wireless threats and satisfies PCI DSS compliance.
Deep Application Control	Fortinet goes above Wireless Multimedia Extensions (WME) by offering deep Layer 7 inspection to precisely control applications and bandwidth usage.
"Single Pane of Glass" Management Console	Unified management console simplifies operations, ensuring consistent and effective policy enforcement and compliance.

Hardware:

FortiAP 11C

The FortiAP 11C is a small plug-and-play 1x1 MIMO access point suitable for traveling road warriors or teleworkers, featuring an integrated power plug for easy storage and installation. It has two Ethernet ports (LAN and WAN), allowing you to connect wired devices like VoIP phones back to the corporate network, enabling an instant office for the distributed workforce.

FortiAP 14C

The FortiAP 14C is a cost-effective 1x1 MIMO access point, with integrated 5 port 10/100 Ethernet switch in small desktop form factor. The AP is designed for deployment in small remote offices or hotels, allowing a number of additional wired devices to be connected directly to the AP, such as PCs, VoIP phones or printers.

FortiAP 21D

The FortiAP 21D is a tiny 2x2 MIMO access point, powered from a standard USB port (or included USB power adapter). This AP is perfect for deployment as cost-effective FortiPresence analytics sensor, or for traveling employees. The dual Ethernet ports enable bridging of devices like VoIP phones back to the corporate network.

FortiAP 25D

The FortiAP 25D is a small power-strip design dual-band 2x2 MIMO access point. With 5 Ethernet ports, this AP is well suited to desktop deployments in hotels or hospitality environments, enabling the connection of Point-of-Sale and other remote equipment back to the corporate network.

FortiAP 28C

The FortiAP 28C is designed for larger remote offices, featuring a higher performance dual-band 2x2 MIMO radio and a 10 port Gigabit Ethernet switch. This AP can be deployed to provide all of the wired and wireless connectivity and security for your remote office.

Deployment:

Remote Telecommuter or SOHO Deployment

Remote Deployment with Local Bridging

Specifications:

	FortiAP 11C	FortiAP 14C	FortiAP 21D	FortiAP 25D	FortiAP 28C
Hardware
Hardware Type	Remote (Indoor)	Remote (Indoor)	Remote (Indoor)	Remote (Indoor)	Remote (Indoor)
Number of Radios	1	1	1	1	1
Number of Antennas	1 internal	1 internal	2 internal	2 internal	2 internal
Peak Antenna Gain	2 dBi for 2.4 GHz	2 dBi for 2.4 GHz	2.5 dBi for 2.4 GHz	2 dBi for 2.4 GHz, 3 dBi for 5 GHz	3 dBi for 2.4 GHz, 4 dBi for 5 GHz
Frequency Bands (GHz) *	2.400–2.4835	2.400–2.4835	2.400–2.4835	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850	2.400–2.4835, 5.150–5.250, 5.250–5.350, 5.470–5.725, 5.725–5.850
Frequency of Radio 1	2.4 GHz b/g/n	2.4 GHz b/g/n	2.4 GHz b/g/n	2.4 GHz b/g/n, 5 GHz a/n	2.4 GHz b/g/n, 5 GHz a/n
Frequency of Radio 2	–	–	–	–	–
Throughput	Up to 150 Mbps	Up to 150 Mbps	Up to 300 Mbps	Up to 300 Mbps	Up to 300 Mbps
Tx/Rx Streams	1x1 MIMO 1 spatial stream	1x1 MIMO 1 spatial stream	2x2 MIMO 2 spatial stream	2x2 MIMO 2 spatial stream	2x2 MIMO 2 spatial stream
Ethernet Ports	2x GE RJ45 ports (1x WAN port, 1x LAN port)	5x FE RJ45 ports (1x WAN port, 4x LAN ports)	2x FE RJ45 ports (1x WAN port, 1x LAN port)	1x GE RJ45 WAN port, 4x FE RJ45 LAN ports	10x FE RJ45 ports (2x WAN ports, 8x LAN ports)
USB Port	1x Type A, 1x Mini-B	–	1x Type A	–	2x Type A, 1x Type B
Serial Console Port	–	–	–	–	–
Power over Ethernet (PoE)	–	–	–	–	–
WME Multimedia Extensions	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)	Yes (4 priority queues for voice, video, data and background traffic)
Simultaneous SSIDs	8 (7 if background scanning enabled)	8 (7 if background scanning enabled)	8 (7 if background scanning enabled)	8 (7 if background scanning enabled)	8 (7 if background scanning enabled)
EAP Type(s)	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST	EAP-TLS, EAP-TTLS/MSCHAPv2, EAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC EAP-SIM, EAP-AKA, EAP-FAST
User/Device Authentication	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist	WPA™ and WPA2™ with 802.1x or Preshared key, WEP and Web Captive Portal, MAC blacklist & whitelist
Maximum Tx Power	17 dBm (50 mW) *	17 dBm (50 mW) *	17 dBm (50 mW) *	16 dBm (40 mW) *	17 dBm (50 mW) *
Physical Security	–	–	–	–	Kensington Lock
Mean Time Between Failures	>10 years	>10 years	>10 years	>10 years	>10 years
IEEE Specifications	802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x	802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x	802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x 20 MHz and 40 MHz High-	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x 20 MHz and 40 MHz High-	802.11a, 802.11b, 802.11e, 802.11g, 802.11h, 802.11i, 802.11j, 802.11n, 802.1x20 MHz and 40 MHz High-
802.11n Features	– – –	– – –	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save	20 MHz and 40 MHz High- Throughput (HT) Support Increased maximum frame transmission by incorporating A-MPDU and A-MSDU Packet Aggregation Conserve power via Dynamic MIMO power save
Advanced 802.11n to enhance rate-over-range including:	– – – –	– – – –	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver	Low-density parity check (LDPC) encoding Maximum likelihood demodulation (MLD) Transmit beamforming (TxBF) Maximum Ratio Combining (MRC) for improved receiver
Mounting Options	–	Desktop, Wall	Desktop, Wall	Desktop, Wall	Desktop, Wall
Included Accessories	International power plugs	AC power adapter and wall mount kit	AC power adapter and wall mount kit	AC power adapter and wall mount kit	AC power adapter and wall mount kit
FortiPresence Capable	Yes	Yes	Yes	Yes	Yes
Wireless Monitoring Capabilities
Frequencies scanned	–	–	–	2.4 and 5 GHz	2.4 and 5 GHz
Background scan with client access on 2.4 and 5 GHz	–	–	–	–	–
Full-time scan as dedicated monitor	–	–	–	Yes	Yes
Dimensions
Length x Width x Height	1.5 x 3.5 x 4.3 inches (3.4 x 8.9 x 11 cm)	3.86 x 4.92 x 1.06 inches (9.8 x 12.5 x 2.7 cm)	2.9 x 3.2 x 0.9 inches (7.3 x 8.1 x 2.2 cm)	0.9 x 2.8 x 1.4 inches (2.28 x 7 x 3.5 cm)	7.09 x 8.43 x 1.38 inches (18 x 21.4 x 3.5 cm)
Weight	0.5 lbs (0.22 kg)	0.1 lbs (0.2 kg)	0.14 lbs (65 g)	0.62 lbs (0.28 kg)	1.1 lbs (0.5 kg)
Package (shipping) Weight	1.6 lbs (0.74 kg)	1.2 lbs (0.56 kg)	0.77 lbs (0.35 kg)	1.01 lbs (0.46 kg)	3.2 lbs (1.47 kg)
Environment
Power Supply	Integrated Power Supply with 100–240V AC, 50–60 Hz Input	Adapter Input: 100–240V AC, 50–60 Hz	"USB Mini-B Powered, 5V 2A Adapter Input: 100–240V AC, 50–60 Hz"	Adapter Input: 100–240V AC, 50–60 Hz	Adapter Input: 100–240V AC, 50–60 Hz
Power Consumption (Average)	4.38 W	3.35 W	3.3 W	2.5 W	14 W
Power Consumption (Maximum)	6.86 W	3.85 W	5.5 W	2.7 W	15 W
Humidity	10–90% non-condensing	20–90% non-condensing	10–85%, non-condensing (Operating)	0–90% non-condensing	20–90% non-condensing
Operating Temperature	-4–140°F (-20–60°C)	-4–158°F (0–40°C)	-4–158°F (0–40°C)	-4–158°F (0–40°C)	32–104°F (0–40°C)
Storage Temperature	-4–158°F (-20–70°C)	-13–158°F (-25–70°C)	-4–158°F (-20–70°C)	-4–140°F (-20–60°C)	-13–158°F (-25–70°C)
Directives	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS	Low Voltage Directive • RoHS
Certifications
WiFi Alliance Certified	No	No	No	No	No
Warranty
Limited Lifetime Warranty	Yes	Yes	Yes	Yes	Yes

Documentation:

Download the Fortinet FortiAP Remote Series Datasheet (PDF).