Watchguard AP 320 Installation instructions

WatchGuard
AP320
Hardware Guide
AP320

ii WatchGuard AP320
ADDRESS
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
SUPPORT
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
SALES
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
ABOUT WATCHGUARD
WatchGuard® Technologies, Inc. is a global leader in network security, providing best-
in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and
network intelligence products and services to more than 75,000 customers worldwide.
The company's mission is to make enterprise-grade security accessible to companies of
all types and sizes through simplicity, making WatchGuard an ideal solution for
Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle,
Washington, with offices throughout North America, Europe, Asia Pacific, and Latin
America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow WatchGuard on Twitter,
@WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec
blog, Secplicity, for real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Copyright and Patent Information
Copyright© 2017 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, the WatchGuard logo, LiveSecurity, and any other mark listed as a trademark in the “Terms of Use” portion of
the WatchGuard Web site that is used herein are either registered trademarks or trademarks of WatchGuard Technologies,
Inc. and/or its subsidiaries in the United States and/or other countries. All other trademarks are the property of their
respective owners.
Printed in the United States of America.
Revised: April 19, 2017
Notice to Users
Information in this guide is subject to change without notice. Updates to this guide are posted at:
http://www.watchguard.com/wgrd-help/documentation/hardware-guides
Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be
reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Complete copyright, trademark, patent, and licensing information can be found in
the WatchGuard product documentation. You can find this document online at:
http://www.watchguard.com/wgrd-help/documentation/overview

Hardware Guide 1
Hardware Specifications
The WatchGuard® AP family of wireless access points provide secure, reliable, wireless communications while
delivering high performance and broad coverage—a perfect combination of services to meet the needs of
enterprise-level customers, small businesses, branch offices, campuses, and hotels alike.
Internal antennas, slim cases, minimalist labeling, and small LEDs, coupled with wall and ceiling mount
options, make these devices ideal for low profile deployment scenarios. Power can be provided by any Power
over Ethernet (PoE) power source or an AC adapter.
WatchGuard AP320 devices features concurrent 3x3 MIMO capability and a dual radio that supports 2.4GHz
(802.11b/g/n) and 5GHz (11a/n/ac) to provide wireless clients with enhanced reliability and performance.
There are two ways you can manage your AP320 device:
WatchGuard Wi-Fi Cloud
A powerful cloud-based enterprise wireless management solution for AP configuration, security, and
monitoring.
WatchGuard Firebox Gateway Wireless Controller
Local management, configuration, security, and monitoring of AP devices directly from your
WatchGuard Firebox. The WatchGuard Firebox requires Fireware OS v11.11.2 or higher.
For more information about how to set up and manage your WatchGuard AP device, you can find
documentation online at: http://www.watchguard.com/wgrd-help/documentation/overview
Package Contents
WatchGuard AP device
Quick Start Guide
Wall-mount and T-rail ceiling-mount accessories
Optional mounting accessories for walls or ceilings without a T-rail are also available from
WatchGuard. (Part #: WG8019)

2WatchGuard AP320
Hardware Specifications
About Your Hardware
Hardware Specifications
Environmental Requirements
To safely install your WatchGuard AP device, we recommend that you:
Install the device indoors.
Make sure the device has adequate clearance for air flow and cooling.
Connect it to a surge-protected power supply to prevent damage from sudden power changes
Other environmental requirements:
AP320
Radio Type and
Frequency Band
2.4GHz, 802.11b/g/n. Max data rate: 450 Mbps
5GHz, 802.11a/n/ac. Max data rate: 1.3 Gbps
Antenna Six integrated omnidirectional antennas
Ethernet interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1)
802.3af PoE, PoE input voltage: 48V
1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2)
1 x RJ45 serial console, RS 232 Serial
Bits per second: 115200
Data Bits: 8, Stop Bits: 1
Parity: None, Flow Control: None
USB Port 1 USB port (Not in use)
Power Interface PoE: DC48v (802.3af)
DC jack (12V DC input)
Dimensions 177mm × 155mm × 42mm
Weight 0.82 lb. (0.37 kg)
Operating temperature 0°C to 40°C (32°F to 104°F)
Operating relative humidity 5% to 95% non-condensing
Non-operating temperature -40°C to 70°C (-40°F to 158°F)
Non-operating relative humidity 5% to 95% non-condensing

Hardware Guide 3
Hardware Specifications
Hardware Description
Device Connections and Buttons
Ethernet Network Interfaces
LAN1: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE connectivity.
LAN2: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps. Can be used for
advanced AP features.
CONSOLE: Standard RJ45 connector for serial console access.
Power Input
The WatchGuard AP320 can be powered by an 802.3af PoE of nominal input voltage 48v DC on the
LAN1 interface.
You can also power the device with an optional AC power adapter. Make sure you use only an AC
power adapter supported by the AP320 device.

4WatchGuard AP320
Hardware Specifications
Reset Button
Resets the WatchGuard AP device to factory-default settings. You must use a paper clip or other small
object to press the reset button through the small hole on the back of the device.
To reset the device to factory-default settings, power cycle the device (remove the power cable and
reconnect it again). While you reconnect the power source, press and hold the reset button for at
least 60 seconds until the power, LAN1, and 2.4 GHz indicators are green.
USB Port
The USB port connects the AP to a USB device, such as a cellular activity detection device.

Hardware Guide 5
Hardware Specifications
Device Indicators
The front of the AP device has these status indicators
Device Indicators in AP Mode
Power LAN1 LAN2 2.4 GHz 5 GHz Description
Solid green Solid green On/Off Any Any Powered on and operating
correctly. Connected to
WatchGuard Wi-Fi Cloud services.
Solid green Slow flash On/Off Slow flash Any Software upgrade in progress.
Solid amber Solid green On/Off Any Any No Ethernet link.
Solid amber Fast flash On/Off Any Any Did not receive a valid IP address
from DHCP.
Solid amber Slow flash On/Off Any Any Cannot connect to WatchGuard
Wi-Fi Cloud services.
Off Off Off Off Off Not powered on or in startup
process.

6WatchGuard AP320
Hardware Specifications
Device Indicators in WIPS Mode
These indicators are active when the AP device is set to dedicated WIPS (Wireless Intrusion Prevention System)
mode. For more information about WIPS mode, see the WatchGuard Wi-Fi Cloud help.
If the Ethernet connection for an AP320 device drops down to 10/100 Mbps, the amber indicator for
LAN1 will flash while the green indicator for LAN1 remains in its original state. The amber indicator
for LAN1 may continue to flash even if the Ethernet connection switches back to 10/1000 Mbps
mode. These indicators return to normal operation after you restart the AP device.
Power LAN1 LAN2 2.4 GHz 5 GHz Description
Solid green Solid green On/Off Solid
green
Solid
green
Powered on and operating
correctly. Connected to
WatchGuard Wi-Fi cloud
services.
Solid green Solid green On/Off Solid
green
Fast flash Troubleshooting in progress on
802.11a/b/g/n.
Solid green Solid green On/Off Solid
green
Slow flash Intrusion prevention in
progress on 802.11a/n/ac.
Solid green Slow flash On/Off Slow flash Off Software upgrade in process.
Solid amber Solid green On/Off Any Any No Ethernet link.
Solid amber Fast flash On/Off Any Any Did not receive a valid IP
address from DHCP.
Solid amber Slow flash On/Off Any Any C annot connect to
WatchGuard Wi-Fi Cloud
services.
Solid amber Any On/Off Solid
Green
Any Error on 802.11a/b/g/n
interfaces.
Solid amber Any On/Off Any Solid
green
Sensor software error.
Off Off Off Off Off Not powered on or in startup
process.

Hardware Guide 7
Hardware Specifications
Mounting Instructions
Your package includes the AP320 device, and wall-mount and T-rail ceiling-mount accessories.

8WatchGuard AP320
Hardware Specifications
Wall Mounting
To mount an AP320 device to a wall:
1. Affix the mounting screws to the wall.
2. Mount the AP device on the screws.
The MAC address and serial number of your AP device are printed on a label on the back of the device.
Make sure you record this information before you mount the AP device.

Hardware Guide 9
Hardware Specifications
Ceiling Mounting
Use the supplied mounting bracket to install the AP320 on the ceiling with a T-rail.
To mount the device:
1. Attach the mounting bracket to the device.
2. Slide the device on to the T-rail affixed to the ceiling.
The MAC address and serial number of your AP device are printed on a label on the back of the device.
Make sure you record this information before you mount the AP device.

10 WatchGuard AP320
Hardware Specifications
Optional Mounting Accessories
Optional mounting accessories for walls or ceilings without a T-rail are also available from WatchGuard.
(Part #: WG8019)

Hardware Guide 11
Hardware Specifications
Connect the AP Device
You can power the WatchGuard AP320 with an 802.3af PoE of nominal input voltage 48v DC. You can also
power the device with an optional AC power adapter.
To power on and connect the AP320 to the network with PoE:
1. Connect one end of the network interface cable to the LAN1 port on the AP320.
2. Connect the other end of the network interface cable to an Ethernet jack that provides PoE power.
To connect the AP320 to the network and to power on the AP320 with a power adapter:
1. Connect one end of the network interface cable to the LAN1 port on the AP320.
2. Connect the other end of the network interface cable to an Ethernet network jack.
3. Plug the power adapter cable into the 12V DC power receptacle on the back of the AP320.
4. Plug the power adapter into an 110V-240V 50/60 Hz AC power source.

12 WatchGuard AP320
Hardware Specifications
AC Power Adapter (Optional)
An optional AC power adapter supplies 12V DC power to the WatchGuard AP and includes US, EU, UK, and AU
region-specific adapter plugs.
AC Power Adapter Specifications
AC Power Adaptor
WatchGuard Part # WG8016
AC Input Voltage Rating 90-264VAC
Output Voltage DC12V, 1.5A
Region-specific
Adapter Plugs
US, EU, UK, AU
Temperature Operating: 0 to +40°C
Storage: -20 to +85°C
Humidity Operating: 0% to 95%
Storage: 0% to 95%

Hardware Guide 13
Hardware Specifications
Ethernet Power Injector (Optional)
You can also power the WatchGuard AP device with an optional Ethernet Power Injector. This PoE device
allows you to power the WatchGuard AP through an existing ethernet connection. With this feature, you do
not have to position your WatchGuard AP device near a power outlet.
The Ethernet Power Injector provides 56V/15.4W power over a single 10/100/1000 Ethernet port, and
also includes region-specific plugs (US, EU, UK, AU) for connection to a wall outlet.
This device complies with IEEE 802.3af PoE specifications. Do not use any PoE adapters that are not
IEEE 802.3af compliant as they may damage your device. This device is to be connected only to PoE
networks without routing to the outside plant.
Connect the Ethernet Power Injector
To connect an Ethernet Power Injector to the WatchGuard AP device:
1. Attach a region-specific plug to the Ethernet Power Injector.
2. Plug the Ethernet Power Injector into an AC power source.
3. Connect a straight-through Ethernet cable from your network backbone (for example, a router, switch,
or hub) to the IN connector on the Ethernet Power Injector.
4. Connect a straight-through Ethernet cable from the WatchGuard AP device Ethernet interface to the
OUT connector on the Ethernet Power Injector.

14 WatchGuard AP320
Hardware Specifications
Ethernet Power Injector Specifications
Ethernet Power Injector
WatchGuard Part # WG8568
Specification IEEE 802.3af
AC Input Voltage Rating 100 to 240VAC
Output Voltage 56V
Output Power 15.4W
PoE Power Class 3
Ethernet Interfaces In: RJ-45 for 10/100/1000 Mbps
Out: RJ-45 for 10/100/1000 Mbps and 56V DC
Voltage on pins 4-5 (+) and 7-8 (-).
Region-specific
Adapter Plugs
US, EU, UK, AU
Indicator Green — Valid PoE load detected and connected.
Flashing Green/Red — Invalid load connected.
Red — Fault detected.
Temperature Operating 0 to +40°C
Storage -25 to +65°C
Humidity Operation 5 to 90%
Dimensions L = 80mm (3.15in)
W = 45mm (1.77in)
H = 33mm (1.29in)
Weight 95g (3.35oz.)

Hardware Guide 15
Hardware Specifications
Safety Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Read these instructions carefully
before you operate the product, and refer to them as needed for continued safe operation of your product.
Product Safety Certification
The WatchGuard product is safety certified under the following standards:
IEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
EN 60950-1:2006+A11+A1+A12+A2:2013
EN 61000-3-2:2006+A1:2009+A2:2009
EN 61000-3-3:2008
Safety Warning
Do not place objects on the power cord.
Do not obstruct the ventilation openings. These openings prevent overheating of the machine.
Never push objects of any kind into slots or openings on this equipment. Making a contact with a
voltage point or shorting out a part may result in fire or electrical shock.
When removing or installing an appliance, follow the general installation safety instructions.
Disclaimer
WatchGuard shall not be held liable if the end user alters, modify, or repairs any WatchGuard hardware
appliance.
HINWEISE ZUR SICHERHEIT
Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen zu
erfüllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale Compliance-
Standards. Bitte lesen Sie die folgenden Anweisungen sorgfältig, bevor Sie das Produkt, und bezeichnen sie
als notwendig, um den sicheren Betrieb des Geräts zu gewährleisten. Weitere Informationen finden Sie in der
elektronischen Hardware Guide.
Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertifiziert:
IEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
EN 60950-1:2006+A11+A1+A12+A2:2013
EN 61000-3-2:2006+A1:2009+A2:2009
EN 61000-3-3:2008
Sicherheitshinweis
Legen Sie keine Gegenstände auf das Netzkabel.
Verdecken Sie nicht die Lüftungsöffnungen. Diese Öffnungen verhindern eine Überhitzung der
Maschine.
Stecken Sie niemals Gegenstände jeglicher Art in die Schlitze oder Öffnungen des Geräts stecken. Der
Kontakt mit einem spannungsführenden Punkt oder das Kurzschließen eines Bauteils kann zu einem
Brand oder elektrischen Schlag führen.
Beim Entfernen oder Installieren eines Gerätes, nach den allgemeinen Installation Sicherheitshinweise.

16 WatchGuard AP320
Hardware Specifications
AVISO DE SEGURIDAD
Todos los productos WatchGuard están diseñados y probados para satisfacer estrictos requisitos de
seguridad. Estos requisitos incluyen la homologación de productos de seguridad y otras normas de
cumplimiento global. Por favor, lea atentamente las siguientes instrucciones antes de utilizar el producto, y se
refieren a ellos como sea necesario para garantizar el funcionamiento seguro y continuo de su producto.
Información adicional se puede encontrar en la Guía del usuario electrónica.
Certificación de seguridad del producto
El producto tiene certificación de seguridad WatchGuard bajo las siguientes normas:
IEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
EN 60950-1:2006+A11+A1+A12+A2:2013
EN 61000-3-2:2006+A1:2009+A2:2009
EN 61000-3-3:2008
Advertencia de seguridad
No coloque objetos sobre el cable de alimentación.
No obstruya las aberturas de ventilación. Estas aberturas evitan el sobrecalentamiento de la máquina.
Nunca introduzca objetos de ningún tipo en las ranuras o aberturas del equipo. El contacto con puntos
de voltaje o el cortocircuito de una pieza podría provocar un incendio o una descarga eléctrica.
Al extraer o instalar un electrodoméstico, siga las instrucciones generales de instalación de seguridad.

Hardware Guide 17
Legal and Regulatory Information
Limited Hardware Warranty
This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any
associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the
“Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS
HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the
authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc.
(“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable:
1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the “Warranty
Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product,
when properly installed and used for its intended purpose and in its intended operating environment, will
perform substantially in accordance with WatchGuard applicable specifications.
This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other
than WatchGuard except for the replacement or inclusion of specified components authorized in, and
performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed
by force majeure events, accidents, power spikes or similar events, or by any intentional, reckless or negligent
acts or omissions of any party. You may have additional warranties with respect to the Product from the
manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby
release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on
account of, any such warranties or any breach thereof.
2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,
WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair
the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for
returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall
not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard
becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any
software, firmware, information or data contained in, stored on, or integrated with any returned Products.
3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND
YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR,
AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND
LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST
WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY
NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED

18 WatchGuard AP320
Legal and Regulatory Information
WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY
ARISING FROM COURSE OF PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF
NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION,
LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER
ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY
OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO,
OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT).
4. LIMITATION AND LIABILITY. WATCHGUARD'S LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING
WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND
FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE
PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY
AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER
ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED
NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY
INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF
PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR
INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.
5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington,
U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on
Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or
indirectly transfer the Product or use of the product or associated documentation to any country to which
such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is
found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid
provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the
purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product,
and supersedes any prior purchase order, communications, advertising or representations concerning the
Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN
ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS
AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF
OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL
POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS
UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY'S OBLIGATIONS
UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY.
No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard.
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Please read the following
instructions carefully before operating the product, and refer to them as needed to ensure the continued safe
operation of your product. Additional information can be found in the electronic Hardware Guide.