Configure AP Device Settings
From the Gateway Wireless Controller on your Firebox or XTM device, you can edit the settings for any AP devices that are paired with the Firebox or XTM device. You can also manually add new AP devices.
When you save an AP device configuration to the Firebox or XTM device, the device immediately sends the update to the affected AP devices. While the update is in progress, the AP device status briefly changes to Updating. The update process can take up to a minute to complete. While the update is in progress, wireless services might be interrupted on the AP device.
Edit an AP Device Configuration
When you pair an AP device with a Firebox or XTM device, you must configure the settings for the AP device. Because some of the details about the AP device are automatically added to the AP device configuration when it is paired, you edit the AP device settings to complete the initial configuration of the AP device.
When you edit the AP device settings, you can change any of the settings except for the model and serial number. The model and serial number are automatically set for paired AP devices and cannot be edited.
There are two network settings you can select for an AP device:
DHCP is the default selection.
Choose this option to configure the AP device to request a dynamically assigned IP address from a DHCP server. If you choose this option, make sure that a DHCP server is configured on the network that the AP device connects to. You can configure the XTM device as the DHCP server when you configure the Firebox or XTM device interface that your AP device connects to.
For a configuration example, see WatchGuard AP Device Deployment Examples.
Select this option to assign the AP device a static IP address, subnet mask, and default gateway. When you select Static, you must configure these settings:
- IP Address — The IP address to assign to the AP device
- IP Subnet Mask — The subnet mask
- Default Gateway — The IP address of the default gateway
By default, the AP device uses the syslog server settings you configure in the common settings in the Gateway Access Controller. When you edit the settings for an AP device, you can configure the AP device to use a different syslog server. For more information about the syslog server settings for the Gateway Wireless Controller, see Configure Gateway Wireless Controller Settings.
To configure the settings for a paired AP device:
- Select Network > Gateway Wireless Controller.
The Gateway Wireless Controller dialog box appears.
- Select the Access Points tab.
The list of Access Points that you can configure appear in the Access Points list.
- Select an AP device and click Edit.
The Edit Access Point dialog box appears.
- (Optional) In the Name text box, type a new name for the AP device.
The default name is <AP device model number >_<AP device serial number>.
- Adjacent to Network Settings, select an option to assign the AP device an IP address:
- If you selected Static, type the IP Address, Subnet Mask, and Default Gateway for your AP device.
- (Optional) In the Location text box, type the location of the AP device on your network.
- To override the Gateway Access Controller settings for syslog server logging:
- Select the Send log messages to a syslog server check box.
- In the Syslog server IP address text box, type the IP address of your syslog server.
- To force your AP device to use outdoor wireless channels, select the Use Outdoor Channels only check box.
This option is enabled by default for AP102 outdoor wireless devices.
- To make sure your AP device does not use DFS (Dynamic Frequency Selection) channels in the 5 GHz band in your region, select the Disable DFS Channels check box.
DFS channels are used with radar and your AP device will stop transmitting if radar signals are detected on that channel.
- To disable the LEDs on your AP device, select the Disable LEDs check box.
This option allows you to operate your AP device in stealth mode to hide the use of wireless activity when the device is deployed in a location that requires additional security. For information on how you can flash the power LED to help identify AP devices in stealth mode, see Monitor AP Device Status.
- To use a tagged VLAN for management connections to the AP device:
- Select the Enable Management VLAN Tagging check box.
- In the Management VLAN ID text box, type the VLAN ID you want to use for management. This must be a VLAN that is configured to handle tagged traffic to the interface your AP device connects to.
If you configure a management VLAN ID in both the Gateway Wireless Controller settings and the AP device settings, the Firebox or XTM device uses the management VLAN ID specified in the AP device settings.
- In the Radio 1 Settings and Radio 2 Settings sections, configure the settings for each AP device radio: band, wireless mode, channel, and SSID.
For more information, see Configure AP Device Radio Settings.
Manually Add an AP Device Configuration
The Gateway Wireless Controller uses a UDP broadcast to automatically discover connected AP devices. The Gateway Wireless Controller cannot automatically discover an AP device located somewhere on your network where it cannot receive the broadcast. In these types of deployments, you can instead connect to the AP device to configure the network settings, and then add the AP device to the Gateway Wireless Controller, with the same network settings. The Firebox or XTM device can then connect to the AP device to pair with it.
Some examples of examples of deployment scenarios where you must use manual configuration and discovery are:
- The Firebox or XTM device and the AP device are separated by a Layer 3 switch or router
- The Firebox or XTM device and the AP device are separated by a Branch Office VPN
For the Firebox or XTM device to discover an AP device, the network between the AP device and the Firebox or XTM device must include a route for the traffic between the two devices.
To configure the network settings on the AP device, use the WatchGuard Access Point web UI. For information, see Use the WatchGuard Access Point Web UI.
To manually add an AP device to the Gateway Wireless Controller:
- In Policy Manager, select Network > Gateway Wireless Controller.
The Gateway Wireless Controller dialog box appears.
- Select the Access Points tab
- Click Add.
The Pairing Passphrase dialog box appears.
- In the Pairing Passphrase text box, type the passphrase configured on the AP device.
The default passphrase on an AP device is wgwap. If you changed the passphrase in the web UI on the AP device, type that passphrase here.
For more information about the Pairing Passphrase, see About AP Device Passphrases.
- Click OK.
The Add Access Point dialog box appears.
- In the Name text box, type a name for this AP device.
- In the Model drop-down list, select the AP device model.
- In the Serial text box, type the serial number of the AP device.
- Adjacent to Network Settings, select Static.
- In the IP Address text box, type the static IP address you configured on the AP device.
- In the Subnet Mask text box, type the subnet mask you configured on the AP device.
- In the Default Gateway text box, type the default gateway IP address you configured on the AP device.
- Configure the other AP device settings as described in the previous section.
Change the Pairing Passphrase
When you initially add an AP device to your configuration, you set the Pairing Passphrase. This passphrase is only used when you first pair the AP device with the XTM device. If the first Pairing Passphrase you typed did not match the passphrase on the AP device, you can change the passphrase the XTM device uses to pair with the AP device.
To change the Pairing Passphrase:
- On the Access Points tab, select an AP device and click Edit.
The settings for the AP device appear.
Adjacent to Pairing Passphrase, click Change.
The Change Pairing Passphrase dialog box appears.
- In the Pairing Passphrase text box, type the correct, current passphrase on the AP device.
The default passphrase for an AP device is wgwap.
- To make the passphrase you type visible, select Show passphrase.
- Click Save.
For more information about AP device passphrases, see About AP Device Passphrases.
Configure WatchGuard AP Device SSIDs
Configure Gateway Wireless Controller Settings