About AP Device Configuration
Your WatchGuard Access Point (AP) device is an extension to your Firebox. You can connect one or more WatchGuard AP devices to your network to enable wireless access, expand the wireless range of your network, and enable wireless access to different security zones in your network. You configure and manage your AP devices through the Gateway Wireless Controller on your Firebox.
An SSID (Service Set Identifier) is the unique name you give to each wireless network. You can assign more than one SSID to several different AP devices to accommodate different wireless configurations.
When you configure SSIDs for your WatchGuard AP devices, you can:
Assign the same SSID to more than one AP device (for wireless roaming on the same SSID)
When you assign the same SSID to more than one AP device, the range of that SSID is extended. When a wireless client that is connected to an SSID moves to a different location on your physical network, the wireless client can automatically connect to the AP device that has the strongest signal for that SSID. This eliminates the need for users to manually reconnect when they move their wireless devices around your office.
Assign more than one SSID to each AP device
You can also enable more than one SSID on each AP device. The number of SSIDs each wireless AP device can support depends on the AP device model, and whether the device has single or dual radios.
- Single radio devices support a maximum of 8 SSIDs
- Dual radio devices support a maximum of 16 SSIDs (eight per radio)
We recommend a maximum of 20-40 associated wireless clients per radio based on the overall airtime demand of the clients.
For each SSID, you configure the security and encryption settings that protect your network. For more information, see Configure WatchGuard AP Device SSIDs.
When you configure the SSIDs for your AP devices, you can optionally enable VLAN tagging. If you enable VLAN tagging for SSIDs on a WatchGuard AP device, you must also enable VLANs on the network that the AP device connects to.
Enable VLAN tagging on your AP device SSIDs if you want to:
- Configure different firewall policies for SSIDs that connect to the same network
- Separate the traffic on the same physical network to different logical networks.
For more information, see Configure VLANs for WatchGuard AP Devices.
To support roaming for a wireless guest network, you might want to enable station isolation to make sure wireless clients cannot directly send traffic to each other. This requires a VLAN, but does not require VLAN tagging. For more information, see About AP Station Isolation.
About Automatic Deployment
For wireless networks with a large number of WatchGuard AP devices to deploy that will be assigned the same SSIDs and do not require unique configurations, you can enable automatic deployment on specific SSIDs so that AP devices are automatically deployed by the Gateway Wireless Controller and configured with the specified SSID. For more information, see About AP Automatic Deployment.
AP Device Configuration
In the Gateway Wireless Controller AP device settings, you configure the radio settings for each AP device and set the SSIDs each AP device uses.
For more information, see Configure AP Device Settings.