Your WatchGuard Access Point (AP) device is an extension to your Firebox or XTM device. You can connect one or more WatchGuard AP devices to your network to enable wireless access, expand the wireless range of your network, and enable wireless access to different security zones in your network. You configure and manage your AP devices through the Gateway Wireless Controller on your Firebox or XTM device.
An SSID (Service Set Identifier) is the unique name you give to each wireless network. You can assign more than one SSID to several different AP devices to accommodate different wireless configurations.
When you configure SSIDs for your WatchGuard AP devices, you can:
Assign the same SSID to more than one AP device (for wireless roaming on the same SSID)
When you assign the same SSID to more than one AP device, the range of that SSID is extended. When a wireless client that is connected to an SSID moves to a different location on your physical network, the wireless client can automatically connect to the AP device that has the strongest signal for that SSID. This eliminates the need for users to manually reconnect when they move their wireless devices around your office.
Assign more than one SSID to each AP device
You can also enable more than one SSID on each AP device. The number of SSIDs each wireless AP device can support depends on the AP device model, and whether the device has single or dual radios.
For each SSID, you configure the security and encryption settings that protect your network. For more information, see Configure WatchGuard AP Device SSIDs.
When you configure the SSIDs for your AP devices, you can optionally enable VLAN tagging. If you enable VLAN tagging for SSIDs on a WatchGuard AP device, you must also enable VLANs on the network that the AP device connects to.
Enable VLAN tagging on your AP device SSIDs if you want to:
For more information, see Configure VLANs for WatchGuard AP Devices.
To support roaming for a wireless guest network, you might want to enable station isolation to make sure wireless clients cannot directly send traffic to each other. This requires a VLAN, but does not require VLAN tagging. For more information, see About AP Station Isolation.
In the Gateway Wireless Controller AP device settings, you configure the radio settings for each AP device and set the SSIDs each AP device uses.
For more information, see Configure AP Device Settings.
WatchGuard AP Device Deployment Examples