AP Device Deployment with VLANs

If you have a complex network environment with security and policy requirements for wireless users, you can enable VLANs on the SSIDs for your wireless network. VLANs enable you to apply wireless security policies to each SSID on the XTM device, and to separate network traffic for each SSID on a dedicated VLAN.

With this deployment scenario, there are two primary methods you can use to physically connect your WatchGuard AP device to the network:

Network diagram of two AP devices connected to two XTM device interfaces

Network diagram of two AP devices connected to a switch connected to an XTM device

Required VLAN Types

To enable VLAN tagging in your AP device SSIDs, there are two types of VLANs you must create:

If you enable management VLAN tagging in the AP device configuration, the XTM device can use a tagged VLAN for management connections to the AP device. An untagged VLAN is still required for the initial connection to an AP device that has not yet been paired.

You can choose from two different methods to set up VLANs based on where you connect the AP device to your network:

For more information about when and how to configure VLANs for use with WatchGuard AP devices, see Configure VLANs for WatchGuard AP Devices.

See Also

About AP Device Configuration

Configure AP Devices in the Gateway Wireless Controller

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Knowledge Base