How to correctly power the FortiAP 431/433G-Series

Comic person holding wireless sign.

We noticed some interesting facts about the new large FortiAP G-Series models that we would like to share with you: When we studied the datasheet and the quick start guide of these new access points, we were surprised to see a drastic increase in power consumption:

The maximum power consumption of a FAP-431F model was limited to 24.5 watts, but the new G-Series version could draw up to 31.7 watts!

The fact that Power over Ethernet has some strict power limits, should concern us now.
For example, the older 802.3af PoE standard can only deliver up to 15.4 watts of power to a device. At least since the newer and widely adopted 802.3at standard, this limit is 25.50 watts.

But this leads us to the following simple calculation:

25.50 watts of power delivery - 31.7 watts of power consumption = missing 6.2 watts to meet specifications ☹️

So even if we use the 802.3at standard for the power delivery, we are still missing about 6.2 watts of power at the consumer end. What now?

Solution 1 – Just ignore the problem

Well, Fortinet has obviously done the same calculation, as they have overcome this problem by reducing the AP’s transmit power when powered by an 802.3at PoE connection:

[…] Single 802.at PoE with no USB and reduced Transmit power.

FortiAP G series datasheet

Now many of you will say that this is no longer a problem because this is a valid solution.

Yes and no. Yes, because it solves the problem for most scenarios. If we had to guess, most customers will deploy these APs without even realising it.

And no, because you have a limited product that ends up not being used to it’s full potential.

We also have no specific numbers on how much the transmit power is being reduced.

Fortunately, there are three other solutions that are much more elegant than simply ignoring the problem:

Solution 2 – Provide 802.3bt PoE that delivers up to 71 Watts of power

In our opinion, this is the most recommendable solution:

The 802.3bt PoE standard, which can deliver up to 71 watts to the consumer. You’re good, problem solved. 👍

As the 802.3bt PoE switches are quite expensive and still very rare, let’s move on to other possible solutions …

Solution 3 – Dual PoE current sharing

You can simply double your 802.3at PoE lines to double the power.
This is called “Dual PoE current sharing” and it can also solve the problem and is a valid solution if you have two network ports per AP in your building.

51 watts of power delivery - 31.7 watts of power consumption = plenty of Watts to run the FAP-431/433G at full power! 🙂

Problem solved. Sure, it uses twice as much copper as the previous solution. But since the APs are capable of moving more than 1Gbps anyway (at least the higher-end models), having two 1Gbps links in a LACP trunk might be a very good solution. By the way: This is only a nice solution, if you can not offer the AP a 5gbit/sec port, since some APs do support up to 5gbit uplink speed (100/1000/2500/5000mbit/sec).

Please ensure to configure the AP like documented with LACP or “uplink redundancy without LACP” to prevent Layer 2 loops in your network. It is also possible to disable the second network port on the FortiSwitch. In the case of FortiSwitch, the power supply of this port will stay up:

The FortiSwitch link status is set to “disabled” and power is still being supplied.

Solution 4 – Plug-in power supply

If nothing else works, of course you can always use an external power supply to fully power your FortiAP.


Power modes on the FortiAP 431G/433G

Fortinet has designed three power modes on those FortiAPs. You can see on the FortiAP GUI (located under WTP configuration) what power mode is enabled on the FortiAP:

FortiAP power mode in the WTP configuration.

The following modes are available:

ModePoE modeRadio operationUSB operation
Low1x 802.3afAll radios disabledUSB disabled
High1x 802.3at or
2x 802.3af
MIMO 2×2, Max. TX powerUSB disabled
Full1x 802.3af + 1x 802.3at or
2x 802.3at or
1x 802.3bt or
DC power supply (12V, 4A)
MIMO 4×4, Max. TX powerUSB enabled

What do you think about it? Let us know and share your experiences in the comment section below.

Loading

5 thoughts on “How to correctly power the FortiAP 431/433G-Series

  1. Thomas Boll Reply

    We have some midspan PoE adapters on stock that deliver 48W/60W/90W (SKU: 48W: PIA5100; 60W: PIA6000; 90W: PIA9000).

  2. Shea Werner Reply

    We have three 431G I can only get two powered the third always ends up going into low power mode. That is on my HP 1920 POE+ switch.

    I tried getting a new switch (NETGEAR GS516UP) it’s unmanaged so I can’t really troubleshoot that supports 802.3bt but even on that switch it starts in high mode and constantly goes to low power mode they are 60 watt ports.
    I just bought a trend net TPE-119 GI but that starts it in low power mode even though it supports 95 Watts.
    so bottom line is I’m not sure what’s going on with these APs

    • vla Post authorReply

      Dear Shea
      Thank you for your comment.
      Did you already try to upgrade the FortiAP OS to the latest version?
      Kind regards from the
      Boll Tech Team

  3. Michael Salmmn Reply

    How about PoE Injectors? Seem like Fortinet sells GPI-145 802.3 bt injector.
    Would that be Solution 5?

    • vla Post authorReply

      Dear Michael
      Thanks for your comment.
      Yes, it is possible to use PoE injectors to power the APs. Since we did not make any product recommendations in the post, I will leave that and instead list our solutions here. Fortinet has the GPI-145 in it’s portfolio which provides enough power:
      excerpt from datasheet of fortiap accessories
      Also, Boll has an alternative product in our shop:
      PIA PoE injectors
      I hope to have answered your question.
      Have a nice day.
      Kind regards from the
      Boll Tech Team

Leave a Reply

Your email address will not be published. Required fields are marked *