Monitor AP Device Status

You can monitor, reboot, upgrade, and complete many other actions on WatchGuard AP devices managed by your Firebox.

See AP Connection Status and Uptime

In the Status column, you can see the status of each paired AP device.

  • Online — The AP device is enabled and can communicate with the Firebox.
  • Not Trusted — The AP device has no trust record. For more information, see AP Device Trust Store.
  • Unreachable — The AP device cannot be contacted by the Firebox.
  • Discovered — The AP device has been discovered by the Firebox, but is not yet online.
  • Updating Firmware — The AP device firmware is being updated.
  • Updating Configuration — An update to the AP device configuration is in progress.
  • Authenticating — The AP device is authenticating to the Gateway Wireless Controller. If the status does not change from Authenticating to Online, the passphrase on the AP device may not match the passphrase on the Gateway Wireless Controller. For information about how to resolve a passphrase mismatch, see About AP Device Passphrases.
  • Cloud Managed — An AP device on your network that is managed by WatchGuard Wi-Fi Cloud and not the Gateway Wireless Controller.

From the Access Points tab, you can:

In the Uptime column, you can see how long an AP device has been online.

For the Uptime to be correct, the Firebox must have a policy that allows NTP traffic from the AP device to the Internet. For more information, see WatchGuard AP Device Requirements and Limitations.

See AP Radio Frequency and Channel

In the Radio1 and Radio2 columns, you can see the frequency, channel, and transmit power used by each AP device radio. If available, secondary channel information also appears.

Each radio automatically selects a quiet channel in the band you selected. The radio chooses an available channel that meets the requirements you specify in the Gateway Wireless Controller settings for the band, wireless mode, channel HT mode, and country.

For more information about radio settings, see Configure AP Device Radio Settings.

See the AP Activation Status

In the LiveSecurity column, you can see the activation status of each AP device.

  • Activated — The AP device is activated.
  • Not Activated — The AP device is not activated.

The Firebox automatically tries to activate the AP device to start the LiveSecurity subscription and hardware warranty.

For more information about activation, see About AP Device Activation.

See AP Device Network Statistics

In the Sent, Received, and Total columns, you can see the number of kilobytes of data sent and received by each AP device since the last time it restarted.

The Network Statistics report shows a more detailed collection of raw network statistics information from the selected AP device. This includes the Interface Statistics (names, MAC and/or IP addresses, and traffic counters), the Routing Table, and the ARP Table for the AP device. This information can be helpful when you troubleshoot your AP device configuration.

See Log Messages on an AP Device

By default, each WatchGuard AP device saves recent syslog log messages locally. If you configure the AP device to send syslog messages to an external syslog server, the recent syslog messages are also available on the AP device.

For the time stamp in the log messages on the AP device to be correct, the Firebox must have a policy that allows NTP traffic from the AP device to the Internet. For more information, see WatchGuard AP Device Requirements and Limitations.

Flash the Power LED on the AP Device

You can flash the power LED on a specific AP device to help with identification. This utility is useful if you select the Disable LEDs option and operate your AP device in stealth mode to hide the use of wireless activity.

For more information on how to disable the LEDs on your AP device, see Configure AP Device Settings.

Restart Wireless on AP Devices

When you restart the wireless interfaces on an AP device, you do not have to reboot the device. This is useful if you encounter wireless interference on the current wireless channel and want to use auto-selection to switch to another channel.

The device configuration is also reloaded when you restart the wireless interfaces. This enables you to reload the configuration and not reboot the device.

AP120, AP320, and AP322 devices might reboot after a Restart Wireless action.

You can select a specific AP device, or select multiple AP devices, and restart wireless on the devices at the same time if they are online.

Reboot AP Devices

You can reboot a specific AP device or select multiple AP devices and reboot the devices at the same time if they are online.

When you reboot a device, the configuration is not reloaded. If you want to reload the configuration for a device, use the Restart Wireless function.

While an AP device reboots, Unreachable appears in the Status column for the AP device. When the AP device reboot is complete, Online appears in the Status column.

You can also reboot the AP device with the reset button on the device. To reboot the AP device, press the reset button briefly (less than 5 seconds) and release.

Upgrade AP Devices

From Fireware Web UI, you can see information about the installed and available versions of AP device firmware the Gateway Wireless Controller Dashboard page. For more information, see Monitor AP Device Status.

From Firebox System Manager, you can see information about the installed and available versions of AP device firmware in the Gateway Wireless Controller. For more information, see Monitor AP Device Status.

To manage the AP firmware available in the Gateway Wireless Controller on your Firebox, click Manage Firmware. For more information, see Update AP Device Firmware.

You can select a specific AP device or select multiple AP devices and upgrade the devices at the same time if they are online.

The AP device power LED will flash amber (AP100/102/200) or flash slowly green (AP300) while the device is upgraded.

While an AP device reboots, Unreachable appears in the Status column for the AP device. When the AP device reboot is complete, Online appears in the Status column.

Trust an AP Device

To help prevent potential security issues from factory reset, unauthorized, or compromised AP devices in your deployment, the Gateway Wireless Controller does not manage or monitor an AP device that is not trusted. For more information, see AP Device Trust Store.

To trust an AP device:

  1. Select one or more AP devices.
  2. Click Action.
  3. Select Mark Trusted.

Reset Trust Store

If any of your AP devices might have been compromised, such as AP devices that have been tampered with, reset, or are no longer under your control, we recommend that you reset the Trust Store.

For more information, see AP Device Trust Store.

Show Password

If automatic passphrase management is enabled, you can show the AP device passphrase.

To see the passphrase:

  1. Select an AP device.
  2. Click Action.
  3. Select Show Password.

For more information, see About AP Device Passphrases.

Reset AP Devices to Factory-Default Settings

You can reset an AP device to factory-default settings from the Gateway Wireless Controller. The AP devices are unpaired after they are reset.

To reset an AP device:

  1. On the Access Points tab, select an AP device.
  2. From the Actions drop-down list, select Reset to Factory Default.

Complete a Site Survey

You can use your AP device to complete a site survey to detect other wireless access points that operate in the same area. When you complete a site survey, the radios in the AP device scan the wireless channels to find other wireless access points. The site survey can detect all local wireless access points. This includes other WatchGuard AP devices and WatchGuard Firebox or XTM wireless devices. You must configure an AP device radio with at least one SSID before that radio can run a site survey scan.

When a site survey scan begins, the AP device scans the airwaves within range for other radio broadcasts in the same radio band, on all available wireless channels. The scan is not limited to the wireless mode and channel settings configured in the radio settings of your device. Dual radio devices can use both radios to scan on the 2.4GHz and 5GHz radio bands. A single radio device scans on either the 2.4GHz or 5GHz band. The band used for the scan depends on which band the radio is configured to operate in.

The site survey does not interrupt wireless connectivity for connected wireless clients.

For each detected wireless access point, the site survey report includes this information:

BSSID

The Basic Service Set Identifier is the MAC address of the wireless access point.

SSID

This is the SSID for the access point. If an access point has more than one SSID, each SSID appears as a separate item in the site survey.

Channel

This is the wireless channel that the wireless access point uses. If available, secondary channel information also appears.

Signal Level

This is the signal strength of the wireless access point.

Type

This is the wireless standard the wireless access point supports.

Security

This is the type of wireless security used by the wireless access point.

Mode

This is the operating mode of the wireless device.

See Also

Monitor Wireless Clients

Monitor Wireless Connections (Gateway Wireless Controller)

Give Us Feedback     Get Support     All Product Documentation     Technical Search