Watchguard AP420 Hardware Guide

Brand: Watchguard

Model: AP420

Category: WLAN access points

Type: Hardware Guide

WatchGuard

AP420

Hardware

Guide

AP420

ii WatchGuard AP420

ADDRESS

505 Fifth Avenue South

Suite 500

Seattle, WA 98104

SUPPORT

www.watchguard.com/support

U.S. and Canada +877.232.3531

All Other Countries +1.206.521.3575

SALES

U.S. and Canada +1.800.734.9905

All Other Countries +1.206.613.0895

ABOUT WATCHGUARD

WatchGuard® Technologies, Inc. is a global leader in network security, providing best-

in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and

network intelligence products and services to more than 75,000 customers worldwide.

The company's mission is to make enterprise-grade security accessible to companies of

all types and sizes through simplicity, making WatchGuard an ideal solution for

Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle,

Washington, with offices throughout North America, Europe, Asia Pacific, and Latin

America. To learn more, visit WatchGuard.com.

For additional information, promotions and updates, follow WatchGuard on Twitter,

@WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec

blog, Secplicity, for real-time information about the latest threats and how to cope with

them at www.secplicity.org.

WatchGuard, the WatchGuard logo, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of

the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies,

Inc. and/or its subsidiaries in the United States and/or other countries. All other trademarks are the property of their

respective owners.

Revised: November 21, 2019

Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be

reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express

written permission of WatchGuard Technologies, Inc.

Complete copyright, trademark, patent, and licensing information can be found in

the WatchGuard product documentation. You can find this document online at:

https://www.watchguard.com/help

Hardware Guide 1

Hardware Specifications

The WatchGuard® AP family of wireless access points provide secure, reliable, wireless communications while

delivering high performance and broad coverage—a perfect combination of services to meet the needs of

enterprise-level customers, small businesses, branch offices, campuses, and hotels alike.

Internal antennas, slim cases, minimalist labeling, and small LEDs, coupled with wall and ceiling mount

options, make these devices ideal for low profile deployment scenarios. Power can be provided by any Power

over Ethernet (PoE+) power source or an AC adapter. WatchGuard AP420 devices are high performance,

enterprise access points that feature 4x4:4 MU-MIMO 802.11ac Wave 2 capabilities with a dedicated third

radio for security scanning and automated over-the-air attack prevention.

There are two ways you can manage your AP420:

Total Wi-Fi and Secure Wi-Fi with WatchGuard Wi-Fi Cloud

A powerful cloud-based enterprise wireless management solution for AP configuration, security, and

monitoring.

Basic Wi-Fi with WatchGuard Firebox Gateway Wireless Controller

Local management, configuration, security, and monitoring of APs directly from your WatchGuard

Firebox. The WatchGuard Firebox requires Fireware v11.12.4 and higher.

Note: The third-radio is not available when managed locally with a Gateway Wireless Controller.

For more information about how to set up and manage your WatchGuard AP, you can find documentation

online at: https://www.watchguard.com/help

Package Contents

 WatchGuard AP420

 Quick Start Guide

 Mounting bracket for T-rail ceilings (15/16”, 24mm)

Optional mounting accessories for walls or ceilings without a T-rail, or different size T-rail ceilings are

also available from WatchGuard. For more information, see “Mounting Instructions” on page 9.

2 WatchGuard AP420

Hardware Specifications

About Your Hardware

Hardware Specifications

AP420

Radio Type and

Frequency Band

2.4GHz, 802.11b/g/n. Max data rate: 800 Mbps

5GHz, 802.11a/n/ac. Max data rate: 1.733 Gbps

Third radio for dedicated RF and security scanning

Antenna 10 integrated omnidirectional antennas

 4 antennas: 2.4GHz radio

 4 antennas: 5GHz radio

 2 antennas: Third scanning radio

Ethernet interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1)

802.3at PoE+ / 802.3af PoE, PoE input voltage: 48V

1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2) for link

aggregation or a wired extension.

1 x RJ45 serial console

RS232 Serial

Bits per second: 115200

Data Bits: 8, Stop Bits: 1

Parity: None, Flow Control: None

USB Port 1 USB 2.0 port (Not in use)

Power Interface Power over Ethernet: 802.3at (PoE+) / 802.3af (PoE)

DC jack (6.3mm connector): 12V DC input, 2.0A

Power

Consumption

802.3at (PoE+): 21.5W

802.3af (PoE): 12.95W

DC power: 19.5W

Idle: 8W

MTBF Rating 1,320,756 hours at 25°C

662,479 hours at 40°C

Dimensions 220mm × 220mm × 57mm

Weight 2.86 lb. (1.3 kg)

Hardware Guide 3

Hardware Specifications

Environmental Requirements

To safely install your WatchGuard AP, we recommend that you:

 Install the device indoors.

 Make sure the device has adequate clearance for air flow and cooling.

 Connect it to a surge-protected power supply to prevent damage from sudden power changes

Other environmental requirements:

Operating temperature 0°C to 40°C (32°F to 104°F)

Operating relative humidity 0% to 95% non-condensing

Non-operating temperature -25°C to 75°C (-13°F to 167°F)

Non-operating relative humidity 0% to 95% non-condensing

4 WatchGuard AP420

Hardware Specifications

Hardware Description

Device Connections and Buttons

Ethernet Network Interfaces

LAN1 (PoE+): Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE+

connectivity.

LAN2: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps.

This interface can be used for link aggregration or as a wired extension for a wireless SSID that has

NAT enabled. For more information, see the WatchGuard Wi-Fi Cloud Help.

For APs managed locally by a Gateway Wireless Controller with Fireware v12.2.1 and higher, you can

bridge together the LAN ports on AP models that have two LAN interfaces. This enables you to extend

the wired network on the second LAN interface. For more information, see the Fireware Help.

Power Input

The WatchGuard AP420 can be powered by 802.3at PoE+ or 802.3af PoE on the LAN1 (PoE+)

interface, or an optional power adapter.

To make sure that LLDP-capable switches provide appropriate PoE+ power to the AP420:

 You must enable LLDP on the switch

 Disable static allocation of maximum power of 30W (if previously configured)

For more information, see AP420 and PoE+ power with switches and LLDP.

The use of 802.3af PoE results in limited feature functionality of the AP:

 USB port and LAN2 Ethernet extension port is disabled.

 The 2.4 GHz radio is downgraded to 1x1 15dbm or lower, or as set in the device template.

 The 5 GHz radio is downgraded to 1x1 15dbm or lower, or as set in the device template.

 Third scanning radio is downgraded to 1x1 with 12dBm transmit power. Lower PoE power

results in reduced performance and effectiveness of WIPS scanning and intrusion prevention

functions.

Hardware Guide 5

Hardware Specifications

Console Port

Standard RJ45 connector for serial console access.

USB Port

The USB port is currently not in use.

Reset Button

Resets the WatchGuard AP to factory-default settings. You must use a paper clip or other small object

to press the reset button through the small hole on top of the device.

To reset the device to factory-default settings, press and hold the reset button for up to 10 seconds

until all LEDs go off to indicate that the device has rebooted.

Kensington Security Lock Slot

Kensington security lock slot for use with a security cable to secure your device.

6 WatchGuard AP420

Hardware Specifications

Device Indicators

The front panel of the AP420 has four LEDs that indicate the status of the AP.

Hardware Guide 7

Hardware Specifications

The AP420 always works in AP combo mode where the first two radios work in AP mode and the third radio

works in WIPS (Wireless Intrusion Prevention System) sensor mode. The fourth LED indicates that the WIPS

sensor on the third radio is active.

AP Firmware 8.8.1 and Higher

LED

Status

Power/Ethernet 2.4 GHz, 5 GHz, and

3rd Radios

Off Powered off. Radio inactive.

Green Powered on. Operating at normal power and capabilities.

(PoE+ or DC power). Connected at 10/100/1000 Mbps

Radio active.

Flashing

Green

Not connected to Wi-Fi Cloud or paired with a Gateway

Wireless Controller.

Orange Powered on. Operating at reduced power and

capabilities. (For example: PoE 802.3af)

See AP Power Requirements

Flashing

Orange

No IP address received from DHCP. -

8 WatchGuard AP420

Hardware Specifications

AP Firmware 8.8.0 and Lower

The LEDs for 2.4GHz and 5GHz will flash indicating activity if a client is connected on the

corresponding radio. If no client is connected to a radio, the corresponding LED will remain solid

green.

Power /

Ethernet

2.4GHz 5GHz Description

Solid green Solid green Solid green Powered on and operating correctly with a gigabit

ethernet connection.

Connected to WatchGuard Wi-Fi Cloud services.

Fast flash green Any Any Did not receive a valid IP address from DHCP.

Connected with a gigabit ethernet connection.

Slow flash green Any Any Cannot connect to WatchGuard

Wi-Fi Cloud services. Connected with a gigabit

ethernet connection.

Solid green /

Solid yellow

Fast flash

green

Solid green Troubleshooting running on 2.4GHz radio.

LED1 = Solid green if AP is on gigabit ethernet

connection. Solid yellow if on non-gigabit ethernet

connection.

Solid green /

Solid yellow

Solid green Fast flash

green

Troubleshooting running on 5GHz radio.

LED1 = Solid green if AP is on gigabit ethernet

connection. Solid yellow if on non-gigabit ethernet

connection.

Solid green /

Solid yellow

Slow flash

green

Solid green Prevention running on 2.4GHz radio.

LED1 = Solid green if AP is on gigabit ethernet

connection. Solid yellow if on non-gigabit ethernet

connection.

Solid Green /

Solid yellow

Solid green Slow flash

green

Prevention running on 5GHz radio.

LED1 = Solid green if AP is on gigabit ethernet

connection. Solid yellow if on non-gigabit ethernet

connection.

Solid yellow Solid green Solid green Powered on and operating correctly with non-gigabit

ethernet connection.

Connected to WatchGuard Wi-Fi Cloud services.

Fast flash yellow Any Any Did not receive a valid IP address from DHCP.

Connected with non-gigabit ethernet connection.

Slow flash yellow Any Any Cannot connect to WatchGuard Wi-Fi Cloud services.

Connected with non-gigabit ethernet connection.

Solid orange Any Any No ethernet connection.

Slow flash orange Any Any Software upgrade in progress.

Off Off Off Not powered on or in startup process.

Hardware Guide 9

Hardware Specifications

Mounting Instructions

Your package includes the AP420 device, and a mounting bracket.

The MAC address and serial number of your AP are printed on a label on the back of the device.

Make sure you record this information before you mount the AP.

10 WatchGuard AP420

Hardware Specifications

T-rail Brackets

Use the included mounting bracket (15/16”, 24mm, Part #: WG8021) to install the AP420 on a ceiling with a

T-rail. Optional T-rail mount brackets are available from WatchGuard:

 9/16” T-rail mount, 15mm, Part #: WG8026

 Silhouette/Interlude T-rail mount, 15mm, Part #: WG8027

1. Put the first mounting post on the back of the AP over the lower bracket notch and rotate into place.

2. Make sure that all the mounting posts on the back of the AP are securely positioned in their bracket

notches.

3. To attach the bracket to the T-rail, rotate the bracket so it is parallel to the T-rail, and snap the bracket

on the T-rail.

Hardware Guide 11

Hardware Specifications

Flat Surface Bracket (Optional)

An optional surface mount bracket for walls or ceilings is available from WatchGuard (Part #: WG8020).

1. Attach the bracket to the wall with screws.

2. Pull the side latch to unlock the mount bracket.

3. Attach the AP stubs to the bracket holders.

4. Lock the latch and attach the AP to the mount with the included screw.

12 WatchGuard AP420

Hardware Specifications

Connect the AP

To power on and connect the AP420 to the network with PoE+:

1. Connect one end of the network interface cable to the LAN1 PoE+ port on the AP420.

2. Connect the other end of the network interface cable to an Ethernet jack that provides PoE+ power.

To connect the AP420 to the network and to power on the AP420 with a power adapter:

1. Connect one end of the network interface cable to the LAN1 PoE+ port on the AP420.

2. Connect the other end of the network interface cable to an Ethernet network jack.

3. Plug the power adapter cable into the 12V DC power receptacle on the back of the AP420.

4. Plug the power adapter into an 100V-240V 50/60 Hz AC power source.

Connect the AP for Link Aggregation

With WatchGuard Wi-Fi Cloud, you can use both Ethernet ports of the AP420 for link aggregation that enables

these ports to logically merge into a single link for higher aggregate bandwidth.

You must enable link aggregation in a device template for the AP420, and link aggregation must also be

enabled on your network switch for the two ports connected to your AP. Both links should use CAT6 Ethernet

cabling.

Make sure that PoE+ power is supplied to the indicated first Ethernet port labelled PoE+ on the AP420.

The second Ethernet port is not supported when managed locally by a Gateway Wireless Controller

on a Firebox.

Hardware Guide 13

Hardware Specifications

Ethernet Power Injector (Optional)

You can power the WatchGuard AP with an optional Ethernet Power Injector. This PoE+ capable device allows

you to power the WatchGuard AP through an existing Ethernet connection. With this feature, you do not have

to position your WatchGuard AP near a power outlet.

This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE adapters that are not

IEEE 802.3at/af compliant as they may damage your device.

Connect the Ethernet Power Injector

To connect an Ethernet Power Injector to the WatchGuard AP:

1. Plug the Ethernet Power Injector into an AC power source.

2. Connect an Ethernet cable from your network backbone (for example, a router, switch, or hub) to the

LAN connector on the Ethernet Power Injector.

3. Connect an Ethernet cable from the PoE+ Ethernet interface on the AP to the PoE connector on the

Ethernet Power Injector.

14 WatchGuard AP420

Hardware Specifications

Ethernet Power Injector Specifications

Ethernet Power Injector

WatchGuard Part # 802.3at PoE+ Injector with AC cord (US/FCC)(WG8599)

802.3at PoE+ Injector with AC cord (CE)(WG8600)

802.3at PoE+ Injector with AC cord (UK)(WG8601)

802.3at PoE+ Injector with AC cord (AUS)(WG8602)

Specification IEEE 802.3at/af

AC Input Voltage Rating 100 to 240VAC

Input Current 0.8A Max for 100VAC

Output Power 30W maximum

Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data

POE: RJ-45 for 10/100/1000 Mbps data and power

Voltage: Pin4, 5:54V, Pin7, 8:Return

Indicator Power: Green

Temperature Operating: 32°F to 104°F (0°C to 40°C)

Storage: -22°F to 176°F (-30°C to 80°C)

Humidity 5 to 90% (Operating and storage)

Dimensions L = 3.9” (99 mm)

W = 2.27” (68.5 mm)

H = 1.3” (33 mm)

Weight 0.33 lbs (149.6 g)

Hardware Guide 15

Hardware Specifications

AC Power Adapter (Optional)

An optional AC power adapter supplies 12V DC power to the WatchGuard AP420 and includes region-specific

adapter plugs.

AC Power Adapter Specifications

AC Power Adaptor

WatchGuard Part # WG8025

AC Input Voltage Rating 100-240V, 50-60Hz

Output Voltage DC12V, 2.0A

Region-specific

Adapter Plugs

US, EU, UK

Temperature Operating: 0 to +40°C

Storage: -20 to +70°C

Humidity Operating: 0% to 90%

Storage: 0% to 95%

16 WatchGuard AP420

Hardware Specifications

Hardware Guide 17

Legal and Regulatory Information

Limited Hardware Warranty

This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any

associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the

“Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS

HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the

authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc.

(“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable:

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the “Warranty

Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product,

when properly installed and used for its intended purpose and in its intended operating environment, will

perform substantially in accordance with WatchGuard applicable specifications.

This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other

than WatchGuard except for the replacement or inclusion of specified components authorized in, and

performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed

by force majeure events, accidents, power spikes or similar events, or by any intentional, reckless or negligent

acts or omissions of any party. You may have additional warranties with respect to the Product from the

manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby

release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on

account of, any such warranties or any breach thereof.

2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,

WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair

the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for

returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall

not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard

becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any

software, firmware, information or data contained in, stored on, or integrated with any returned Products.

3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND

YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR,

AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND

LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST

WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY

NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED

18 WatchGuard AP420

Legal and Regulatory Information

WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY

ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF

NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION,

LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER

ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY

OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO,

OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).

4. LIMITATION AND LIABILITY. WATCHGUARD'S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING

WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND

FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE

PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY

AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER

ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED

NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY

INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF

PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR

INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH

DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.

5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington,

U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on

Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or

indirectly transfer the Product or use of the product or associated documentation to any country to which

such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is

found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid

provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the

purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product,

and supersedes any prior purchase order, communications, advertising or representations concerning the

Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN

ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS

AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF

OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL

POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS

UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY'S OBLIGATIONS

UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY.

No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements

include product safety approvals and other global compliance standards. Please read the following

instructions carefully before operating the product, and refer to them as needed to ensure the continued safe

operation of your product. Additional information can be found in the electronic Hardware Guide.

Page is loading ...

Watchguard AP420 Hardware Guide

Brand: Watchguard

Model: AP420

Category: WLAN access points

Type: Hardware Guide

Download PDF

report

Watchguard AP420 Hardware Guide

Watchguard AP420 Hardware Guide

Related papers

Other documents