Contents

Monitor AP Status

You can monitor, reboot, upgrade, view and update the status of AP licenses, and complete many other actions on WatchGuard APs managed by your Firebox.

Monitor Access Points

From the Access Points tab, you can:

  • See the connection status and uptime of each AP.
  • See the radio frequency and channel used by each radio.
  • See the power source used by an AP.
  • See the transmit power and secondary channel information.
  • See the AP activation and feature key status.
  • See the log messages for the selected AP.
  • See network statistics for the selected AP.
  • Flash the power LED on the AP for identification.
  • Reboot APs.
  • Upgrade the firmware on APs.
  • Trust an AP.
  • Reset APs to factory default settings.
  • Perform a site survey from a selected AP to detect other wireless access points.

See AP Connection Status and Uptime

In the Status column, you can see the status of each paired AP.

  • Online — The AP is enabled and can communicate with the Firebox.
  • Not Trusted — The AP is not in a trusted state. For more information, see AP Trust Store.
  • Unreachable — The AP cannot be contacted by the Firebox.
  • Discovered — The AP has been discovered by the Firebox, but is not yet online.
  • Updating Firmware — The AP firmware is being updated.
  • Updating Configuration — An update to the AP configuration is in progress.
  • Authenticating — The AP is authenticating to the Gateway Wireless Controller. If the status does not change from Authenticating to Online, the passphrase on the AP might not match the passphrase on the Gateway Wireless Controller. For information about how to resolve a passphrase mismatch, see About AP Passphrases.
  • Cloud Managed — An AP on your network that is managed by WatchGuard Wi-Fi Cloud and not the Gateway Wireless Controller.

In the Uptime column, you can see how long an AP has been online.

For the Uptime to be correct, the Firebox must have a policy that allows NTP traffic from the AP to the Internet. For more information, see WatchGuard AP Requirements and Limitations.

See AP Activation Status

(Fireware v12.5.1 and higher)

In the Activation Status column, you can view the license activation status for each AP:

  • Activated — The AP is activated with a valid Basic Wi-Fi AP subscription. If you also manage Total or Secure Wi-Fi APs in WatchGuard Wi-Fi Cloud, the APs are displayed as (Activated: Total/Secure).
  • Activated (Expiring )— The AP is activated with a valid AP subscription that expires in less than 90 days.
  • Expired — The AP license is expired. The AP will continue to run in its last known configuration, but you cannot configure or monitor the AP until the license is updated.
  • Not Activated — The AP has not been activated in your WatchGuard account. For more information, see About AP Activation.
  • Not Available — The Gateway Wireless Controller cannot determine the activation status. This status can occur when the Gateway Wireless Controller cannot communicate with WatchGuard servers.

For more information about AP licensing, see About WatchGuard AP License Subscriptions.

Update AP Feature Key

(Fireware v12.5.1 and higher)

By default, the Gateway Wireless Controller automatically synchronizes the AP license status and AP feature key from WatchGuard servers. You can modify this option in the global Gateway Wireless Controller settings. For more information, see Configure Gateway Wireless Controller Settings.

This synchronization occurs on a periodic basis to make sure the Gateway Wireless Controller has the latest activation status and AP feature key for your AP.

To immediately update the license status and AP feature key for an AP:

See AP Power Source

You can view the type of power source in use by an AP:

  • PoE+ (802.11at)
  • PoE (802.11af)
  • DC (Power adapter — If both DC and PoE power are in use, DC is displayed)
  • -- (Not supported)

Power source indication is only supported on WatchGuard 802.11ac Wave 2 APs. 802.11ac Wave 1 and legacy APs will display "--" to indicate the ability to view the power source is not supported.

See AP Radio Frequency and Channel

In the Radio1 and Radio2 fields, you can see the frequency, channel, and transmit power used by each AP radio. If available, secondary channel information also appears.

Each radio automatically selects a quiet channel in the band you selected. The radio chooses an available channel that meets the requirements you specify in the Gateway Wireless Controller settings for the band, wireless mode, channel width, and country.

For more information about radio settings, see Configure AP Radio Settings.

See AP Network Statistics

In the Sent, Received, and Total columns, you can see the number of kilobytes of data sent and received by each AP since the last time it restarted.

The Network Statistics report shows a more detailed collection of raw network statistics information from the selected AP. This includes the Interface Statistics (names, MAC and/or IP addresses, and traffic counters), the Routing Table, and the ARP table for the AP. This information can be helpful when you troubleshoot your AP configuration.

See Log Messages on an AP

By default, each WatchGuard AP saves recent syslog log messages locally. If you configure the AP to send syslog messages to an external syslog server, the recent syslog messages are also available on the AP.

For the time stamp in the log messages on the AP to be correct, the Firebox must have a policy that allows NTP traffic from the AP to the Internet. For more information, see WatchGuard AP Requirements and Limitations.

Flash the Power LED on the AP

You can flash the power LED on a specific AP to help with identification. This utility is useful after you select the Disable LEDs option and operate your AP in stealth mode to hide the use of wireless activity.

This feature is supported only on AP100, AP102, AP200, and AP300 devices.

For more information on how to disable the LEDs on your AP, see Configure AP Settings.

Reboot APs

You can reboot a specific AP or select multiple APs and reboot the selected devices at the same time if they are online.

When you reboot a device, the configuration is reloaded and automatic channel selection occurs.

To schedule automatic reboots, see Configure Gateway Wireless Controller Settings.

While an AP reboots, Unreachable appears in the Status column for the AP. When the AP reboot is complete, Online appears in the Status column.

You can also use the reset button on the AP to reboot it. To reboot the AP, press the reset button briefly (less than 5 seconds) and release.

Upgrade APs

From Fireware Web UI, you can see information about the installed and available versions of AP firmware the Gateway Wireless Controller Dashboard page. For more information, see Monitor AP Status.

From Firebox System Manager, you can see information about the installed and available versions of AP firmware in the Gateway Wireless Controller. For more information, see Monitor AP Status.

To manage the AP firmware available in the Gateway Wireless Controller on your Firebox, click Manage Firmware. For more information, see Update AP Firmware on the Gateway Wireless Controller.

You can select a specific AP or select multiple APs and upgrade the selected devices at the same time if they are online.

While an AP reboots, Unreachable appears in the Status column for the AP. When the AP reboot is complete, Online appears in the Status column.

Do not interrupt the power to the AP while a firmware upgrade is in progress. Interruption of power during a firmware upgrade can cause the AP to start in failsafe mode. When the AP starts in failsafe mode, the Access Point web UI on the AP provides a single option that enables you to upgrade the device firmware. For more details about AP failsafe mode and recovery, see the WatchGuard Knowledge Base.

Trust an AP

To help prevent potential security issues from factory reset, unauthorized, or compromised APs, the Gateway Wireless Controller does not manage or monitor an AP that is not trusted. For more information, see AP Trust Store.

To trust an AP:

  1. Select Dashboard > Gateway Wireless Controller.
  2. Select the Access Points tab.
  3. Select one or more APs.
  4. Click Action.
  5. Select Mark Trusted.

Reset Trust Store

If any of your APs might have been compromised, for example, if APs have been tampered with, reset, or are no longer under your control, we recommend that you reset the Trust Store.

For more information, see AP Trust Store.

Show Password

(Fireware v12.0.2 or lower)

If automatic passphrase management is enabled, you can show the AP passphrase.

To see the passphrase:

  1. Select an AP.
  2. Click Action.
  3. Select Show Password.

For more information, see About AP Passphrases.

Reset APs to Factory-Default Settings

You can reset an AP to factory-default settings from the Gateway Wireless Controller. The APs are unpaired after they are reset.

To reset an AP:

  1. Select Dashboard > Gateway Wireless Controller.
  2. On the Access Points tab, select an AP.
  3. From the Action drop-down list, select Reset to Factory Default.

Complete a Site Survey

You can use your AP to complete a site survey to detect other wireless access points that operate in the same area. When you complete a site survey, the radios in the AP scan the wireless channels to find other wireless access points. The site survey can detect all local wireless access points. This includes other WatchGuard APs and WatchGuard Firebox wireless devices. You must configure an AP radio with at least one SSID before that radio can run a site survey scan.

When a site survey scan begins, the AP scans the airwaves within range for other radio broadcasts in the same radio band, on all available wireless channels. The scan is not limited to the wireless mode and channel settings configured in the radio settings of your device. Dual radio devices can use both radios to scan on the 2.4GHz and 5GHz radio bands. A single radio device scans on either the 2.4GHz or 5GHz band. The band used for the scan depends on which band the radio is configured to operate in.

The site survey does not interrupt wireless connectivity for connected wireless clients.

For each detected wireless access point, the site survey report includes this information:

BSSID

The Basic Service Set Identifier is the MAC address of the wireless access point.

SSID

This is the SSID for the access point. If an access point has more than one SSID, each SSID appears as a separate item in the site survey.

Channel

This is the wireless channel that the wireless access point uses. If available, secondary channel information also appears.

Signal Level

This is the signal strength of the wireless access point.

Type

This is the wireless standard the wireless access point supports.

Security

This is the type of wireless security used by the wireless access point.

Mode

This is the operating mode of the wireless device.

See Also

Monitor Wireless Clients

Monitor Wireless Connections (Gateway Wireless Controller)

Give Us Feedback  ●   Get Support  ●   All Product Documentation  ●   Technical Search