AP420

Watchguard AP420 Hardware Guide

  • Hello! I am an AI chatbot trained to assist you with the Watchguard AP420 Hardware Guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
WatchGuard
AP420
Hardware
Guide
AP420
ii WatchGuard AP420
ADDRESS
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
SUPPORT
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
SALES
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
ABOUT WATCHGUARD
WatchGuard® Technologies, Inc. is a global leader in network security, providing best-
in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and
network intelligence products and services to more than 75,000 customers worldwide.
The company's mission is to make enterprise-grade security accessible to companies of
all types and sizes through simplicity, making WatchGuard an ideal solution for
Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle,
Washington, with offices throughout North America, Europe, Asia Pacific, and Latin
America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow WatchGuard on Twitter,
@WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec
blog, Secplicity, for real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Copyright and Patent Information
Copyright© 2019 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of
the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies,
Inc. and/or its subsidiaries in the United States and/or other countries. All other trademarks are the property of their
respective owners.
Revised: November 21, 2019
Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be
reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Complete copyright, trademark, patent, and licensing information can be found in
the WatchGuard product documentation. You can find this document online at:
https://www.watchguard.com/help
Hardware Guide 1
Hardware Specifications
The WatchGuard® AP family of wireless access points provide secure, reliable, wireless communications while
delivering high performance and broad coverage—a perfect combination of services to meet the needs of
enterprise-level customers, small businesses, branch offices, campuses, and hotels alike.
Internal antennas, slim cases, minimalist labeling, and small LEDs, coupled with wall and ceiling mount
options, make these devices ideal for low profile deployment scenarios. Power can be provided by any Power
over Ethernet (PoE+) power source or an AC adapter. WatchGuard AP420 devices are high performance,
enterprise access points that feature 4x4:4 MU-MIMO 802.11ac Wave 2 capabilities with a dedicated third
radio for security scanning and automated over-the-air attack prevention.
There are two ways you can manage your AP420:
Total Wi-Fi and Secure Wi-Fi with WatchGuard Wi-Fi Cloud
A powerful cloud-based enterprise wireless management solution for AP configuration, security, and
monitoring.
Basic Wi-Fi with WatchGuard Firebox Gateway Wireless Controller
Local management, configuration, security, and monitoring of APs directly from your WatchGuard
Firebox. The WatchGuard Firebox requires Fireware v11.12.4 and higher.
Note: The third-radio is not available when managed locally with a Gateway Wireless Controller.
For more information about how to set up and manage your WatchGuard AP, you can find documentation
online at: https://www.watchguard.com/help
Package Contents
WatchGuard AP420
Quick Start Guide
Mounting bracket for T-rail ceilings (15/16”, 24mm)
Optional mounting accessories for walls or ceilings without a T-rail, or different size T-rail ceilings are
also available from WatchGuard. For more information, see “Mounting Instructions” on page 9.
2 WatchGuard AP420
Hardware Specifications
About Your Hardware
Hardware Specifications
AP420
Radio Type and
Frequency Band
2.4GHz, 802.11b/g/n. Max data rate: 800 Mbps
5GHz, 802.11a/n/ac. Max data rate: 1.733 Gbps
Third radio for dedicated RF and security scanning
Antenna 10 integrated omnidirectional antennas
4 antennas: 2.4GHz radio
4 antennas: 5GHz radio
2 antennas: Third scanning radio
Ethernet interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1)
802.3at PoE+ / 802.3af PoE, PoE input voltage: 48V
1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2) for link
aggregation or a wired extension.
1 x RJ45 serial console
RS232 Serial
Bits per second: 115200
Data Bits: 8, Stop Bits: 1
Parity: None, Flow Control: None
USB Port 1 USB 2.0 port (Not in use)
Power Interface Power over Ethernet: 802.3at (PoE+) / 802.3af (PoE)
DC jack (6.3mm connector): 12V DC input, 2.0A
Power
Consumption
802.3at (PoE+): 21.5W
802.3af (PoE): 12.95W
DC power: 19.5W
Idle: 8W
MTBF Rating 1,320,756 hours at 25°C
662,479 hours at 40°C
Dimensions 220mm × 220mm × 57mm
Weight 2.86 lb. (1.3 kg)
Hardware Guide 3
Hardware Specifications
Environmental Requirements
To safely install your WatchGuard AP, we recommend that you:
Install the device indoors.
Make sure the device has adequate clearance for air flow and cooling.
Connect it to a surge-protected power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating temperature 0°C to 40°C (32°F to 104°F)
Operating relative humidity 0% to 95% non-condensing
Non-operating temperature -25°C to 75°C (-13°F to 167°F)
Non-operating relative humidity 0% to 95% non-condensing
4 WatchGuard AP420
Hardware Specifications
Hardware Description
Device Connections and Buttons
Ethernet Network Interfaces
LAN1 (PoE+): Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE+
connectivity.
LAN2: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps.
This interface can be used for link aggregration or as a wired extension for a wireless SSID that has
NAT enabled. For more information, see the WatchGuard Wi-Fi Cloud Help.
For APs managed locally by a Gateway Wireless Controller with Fireware v12.2.1 and higher, you can
bridge together the LAN ports on AP models that have two LAN interfaces. This enables you to extend
the wired network on the second LAN interface. For more information, see the Fireware Help.
Power Input
The WatchGuard AP420 can be powered by 802.3at PoE+ or 802.3af PoE on the LAN1 (PoE+)
interface, or an optional power adapter.
To make sure that LLDP-capable switches provide appropriate PoE+ power to the AP420:
You must enable LLDP on the switch
Disable static allocation of maximum power of 30W (if previously configured)
For more information, see AP420 and PoE+ power with switches and LLDP.
The use of 802.3af PoE results in limited feature functionality of the AP:
USB port and LAN2 Ethernet extension port is disabled.
The 2.4 GHz radio is downgraded to 1x1 15dbm or lower, or as set in the device template.
The 5 GHz radio is downgraded to 1x1 15dbm or lower, or as set in the device template.
Third scanning radio is downgraded to 1x1 with 12dBm transmit power. Lower PoE power
results in reduced performance and effectiveness of WIPS scanning and intrusion prevention
functions.
Hardware Guide 5
Hardware Specifications
Console Port
Standard RJ45 connector for serial console access.
USB Port
The USB port is currently not in use.
Reset Button
Resets the WatchGuard AP to factory-default settings. You must use a paper clip or other small object
to press the reset button through the small hole on top of the device.
To reset the device to factory-default settings, press and hold the reset button for up to 10 seconds
until all LEDs go off to indicate that the device has rebooted.
Kensington Security Lock Slot
Kensington security lock slot for use with a security cable to secure your device.
6 WatchGuard AP420
Hardware Specifications
Device Indicators
The front panel of the AP420 has four LEDs that indicate the status of the AP.
Hardware Guide 7
Hardware Specifications
The AP420 always works in AP combo mode where the first two radios work in AP mode and the third radio
works in WIPS (Wireless Intrusion Prevention System) sensor mode. The fourth LED indicates that the WIPS
sensor on the third radio is active.
AP Firmware 8.8.1 and Higher
LED
Status
Power/Ethernet 2.4 GHz, 5 GHz, and
3rd Radios
Off Powered off. Radio inactive.
Green Powered on. Operating at normal power and capabilities.
(PoE+ or DC power). Connected at 10/100/1000 Mbps
Radio active.
Flashing
Green
Not connected to Wi-Fi Cloud or paired with a Gateway
Wireless Controller.
-
Orange Powered on. Operating at reduced power and
capabilities. (For example: PoE 802.3af)
See AP Power Requirements
.
-
Flashing
Orange
No IP address received from DHCP. -
8 WatchGuard AP420
Hardware Specifications
AP Firmware 8.8.0 and Lower
The LEDs for 2.4GHz and 5GHz will flash indicating activity if a client is connected on the
corresponding radio. If no client is connected to a radio, the corresponding LED will remain solid
green.
Power /
Ethernet
2.4GHz 5GHz Description
Solid green Solid green Solid green Powered on and operating correctly with a gigabit
ethernet connection.
Connected to WatchGuard Wi-Fi Cloud services.
Fast flash green Any Any Did not receive a valid IP address from DHCP.
Connected with a gigabit ethernet connection.
Slow flash green Any Any Cannot connect to WatchGuard
Wi-Fi Cloud services. Connected with a gigabit
ethernet connection.
Solid green /
Solid yellow
Fast flash
green
Solid green Troubleshooting running on 2.4GHz radio.
LED1 = Solid green if AP is on gigabit ethernet
connection. Solid yellow if on non-gigabit ethernet
connection.
Solid green /
Solid yellow
Solid green Fast flash
green
Troubleshooting running on 5GHz radio.
LED1 = Solid green if AP is on gigabit ethernet
connection. Solid yellow if on non-gigabit ethernet
connection.
Solid green /
Solid yellow
Slow flash
green
Solid green Prevention running on 2.4GHz radio.
LED1 = Solid green if AP is on gigabit ethernet
connection. Solid yellow if on non-gigabit ethernet
connection.
Solid Green /
Solid yellow
Solid green Slow flash
green
Prevention running on 5GHz radio.
LED1 = Solid green if AP is on gigabit ethernet
connection. Solid yellow if on non-gigabit ethernet
connection.
Solid yellow Solid green Solid green Powered on and operating correctly with non-gigabit
ethernet connection.
Connected to WatchGuard Wi-Fi Cloud services.
Fast flash yellow Any Any Did not receive a valid IP address from DHCP.
Connected with non-gigabit ethernet connection.
Slow flash yellow Any Any Cannot connect to WatchGuard Wi-Fi Cloud services.
Connected with non-gigabit ethernet connection.
Solid orange Any Any No ethernet connection.
Slow flash orange Any Any Software upgrade in progress.
Off Off Off Not powered on or in startup process.
Hardware Guide 9
Hardware Specifications
Mounting Instructions
Your package includes the AP420 device, and a mounting bracket.
The MAC address and serial number of your AP are printed on a label on the back of the device.
Make sure you record this information before you mount the AP.
10 WatchGuard AP420
Hardware Specifications
T-rail Brackets
Use the included mounting bracket (15/16”, 24mm, Part #: WG8021) to install the AP420 on a ceiling with a
T-rail. Optional T-rail mount brackets are available from WatchGuard:
9/16” T-rail mount, 15mm, Part #: WG8026
Silhouette/Interlude T-rail mount, 15mm, Part #: WG8027
1. Put the first mounting post on the back of the AP over the lower bracket notch and rotate into place.
2. Make sure that all the mounting posts on the back of the AP are securely positioned in their bracket
notches.
3. To attach the bracket to the T-rail, rotate the bracket so it is parallel to the T-rail, and snap the bracket
on the T-rail.
Hardware Guide 11
Hardware Specifications
Flat Surface Bracket (Optional)
An optional surface mount bracket for walls or ceilings is available from WatchGuard (Part #: WG8020).
1. Attach the bracket to the wall with screws.
2. Pull the side latch to unlock the mount bracket.
3. Attach the AP stubs to the bracket holders.
4. Lock the latch and attach the AP to the mount with the included screw.
12 WatchGuard AP420
Hardware Specifications
Connect the AP
To power on and connect the AP420 to the network with PoE+:
1. Connect one end of the network interface cable to the LAN1 PoE+ port on the AP420.
2. Connect the other end of the network interface cable to an Ethernet jack that provides PoE+ power.
To connect the AP420 to the network and to power on the AP420 with a power adapter:
1. Connect one end of the network interface cable to the LAN1 PoE+ port on the AP420.
2. Connect the other end of the network interface cable to an Ethernet network jack.
3. Plug the power adapter cable into the 12V DC power receptacle on the back of the AP420.
4. Plug the power adapter into an 100V-240V 50/60 Hz AC power source.
Connect the AP for Link Aggregation
With WatchGuard Wi-Fi Cloud, you can use both Ethernet ports of the AP420 for link aggregation that enables
these ports to logically merge into a single link for higher aggregate bandwidth.
You must enable link aggregation in a device template for the AP420, and link aggregation must also be
enabled on your network switch for the two ports connected to your AP. Both links should use CAT6 Ethernet
cabling.
Make sure that PoE+ power is supplied to the indicated first Ethernet port labelled PoE+ on the AP420.
The second Ethernet port is not supported when managed locally by a Gateway Wireless Controller
on a Firebox.
Hardware Guide 13
Hardware Specifications
Ethernet Power Injector (Optional)
You can power the WatchGuard AP with an optional Ethernet Power Injector. This PoE+ capable device allows
you to power the WatchGuard AP through an existing Ethernet connection. With this feature, you do not have
to position your WatchGuard AP near a power outlet.
This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE adapters that are not
IEEE 802.3at/af compliant as they may damage your device.
Connect the Ethernet Power Injector
To connect an Ethernet Power Injector to the WatchGuard AP:
1. Plug the Ethernet Power Injector into an AC power source.
2. Connect an Ethernet cable from your network backbone (for example, a router, switch, or hub) to the
LAN connector on the Ethernet Power Injector.
3. Connect an Ethernet cable from the PoE+ Ethernet interface on the AP to the PoE connector on the
Ethernet Power Injector.
14 WatchGuard AP420
Hardware Specifications
Ethernet Power Injector Specifications
Ethernet Power Injector
WatchGuard Part # 802.3at PoE+ Injector with AC cord (US/FCC)(WG8599)
802.3at PoE+ Injector with AC cord (CE)(WG8600)
802.3at PoE+ Injector with AC cord (UK)(WG8601)
802.3at PoE+ Injector with AC cord (AUS)(WG8602)
Specification IEEE 802.3at/af
AC Input Voltage Rating 100 to 240VAC
Input Current 0.8A Max for 100VAC
Output Power 30W maximum
Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data
POE: RJ-45 for 10/100/1000 Mbps data and power
Voltage: Pin4, 5:54V, Pin7, 8:Return
Indicator Power: Green
Temperature Operating: 32°F to 104°F (0°C to 40°C)
Storage: -22°F to 176°F (-30°C to 80°C)
Humidity 5 to 90% (Operating and storage)
Dimensions L = 3.9” (99 mm)
W = 2.27” (68.5 mm)
H = 1.3” (33 mm)
Weight 0.33 lbs (149.6 g)
Hardware Guide 15
Hardware Specifications
AC Power Adapter (Optional)
An optional AC power adapter supplies 12V DC power to the WatchGuard AP420 and includes region-specific
adapter plugs.
AC Power Adapter Specifications
AC Power Adaptor
WatchGuard Part # WG8025
AC Input Voltage Rating 100-240V, 50-60Hz
Output Voltage DC12V, 2.0A
Region-specific
Adapter Plugs
US, EU, UK
Temperature Operating: 0 to +40°C
Storage: -20 to +70°C
Humidity Operating: 0% to 90%
Storage: 0% to 95%
16 WatchGuard AP420
Hardware Specifications
Hardware Guide 17
Legal and Regulatory Information
Limited Hardware Warranty
This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any
associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the
“Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS
HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the
authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc.
(“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable:
1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (theWarranty
Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product,
when properly installed and used for its intended purpose and in its intended operating environment, will
perform substantially in accordance with WatchGuard applicable specifications.
This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other
than WatchGuard except for the replacement or inclusion of specified components authorized in, and
performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed
by force majeure events, accidents, power spikes or similar events, or by any intentional, reckless or negligent
acts or omissions of any party. You may have additional warranties with respect to the Product from the
manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby
release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on
account of, any such warranties or any breach thereof.
2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,
WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair
the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for
returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall
not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard
becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any
software, firmware, information or data contained in, stored on, or integrated with any returned Products.
3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND
YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR,
AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND
LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST
WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY
NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED
18 WatchGuard AP420
Legal and Regulatory Information
WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY
ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF
NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION,
LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER
ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY
OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO,
OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).
4. LIMITATION AND LIABILITY. WATCHGUARD'S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING
WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND
FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE
PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY
AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER
ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED
NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY
INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF
PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR
INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.
5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington,
U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on
Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or
indirectly transfer the Product or use of the product or associated documentation to any country to which
such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is
found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid
provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the
purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product,
and supersedes any prior purchase order, communications, advertising or representations concerning the
Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN
ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS
AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF
OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL
POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS
UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY'S OBLIGATIONS
UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY.
No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Please read the following
instructions carefully before operating the product, and refer to them as needed to ensure the continued safe
operation of your product. Additional information can be found in the electronic Hardware Guide.
/