Watchguard AP125 Installation instructions

WatchGuard
AP125
Hardware Guide
AP125
Access Point

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 5/4/2020
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2020 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names
mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity,
for real-time information about the latest threats and how to cope
with them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard AP125 Hardware Guide 1
Requirements 1
About Your Hardware 2
Hardware Specifications 2
Environmental Requirements 3
Hardware Description 4
Device Connections and Buttons 4
Device Indicators 6
Mounting Instructions 8
Flat Surface Bracket (Optional) 10
Connect the AP 12
Connect the AP for Link Aggregation 12
Ethernet Power Injector (Optional) 13
ACPower Adapter 15
Notices 16
Safety Notices 16
Product Safety Certification 16
Safety Warning 16
Disclaimer 16
HINWEISE ZUR SICHERHEIT 16
Sicherheitshinweis 17
AVISO DE SEGURIDAD 17
Certificación de seguridad del producto 17
Advertencia de seguridad 17
FCC Certification 18
CE Notice 19
ii WatchGuard Technologies, Inc.

Industry Canada Certification 19
Europe – EU Declaration of Conformity (Wireless) 20
Brasil ANATEL 23
Mexico NOM 23
Taiwan Class B Notices 23
Taiwan NCC 23
Japan VCCI Notice (Class B ITE) 23
RoHS Statement 23
WEEE Statement 24
REACH Certificate of Compliance 24
WatchGuard Technologies, Inc. iii

WatchGuard AP125 Hardware Guide
WatchGuard AP125 Hardware Guide
WatchGuard AP125 devices are intended for low density environments such as small restaurants,
distributed remote office spaces, small meeting rooms, and small-footprint retail. The AP125 features 2x2
MU-MIMO 802.11ac Wave 2 capabilities with dual concurrent 5 GHz and 2.4 GHz radios that support data
rates of up to 876 Mbps and 300 Mbps respectively.
Requirements
There are two ways you can manage your AP125:
Total Wi-Fi and Secure Wi-Fi with WatchGuard Wi-Fi Cloud
A powerful cloud-based enterprise wireless management solution for AP configuration, security, and
monitoring.
Basic Wi-Fi with WatchGuard Firebox Gateway Wireless Controller
Local management, configuration, security, and monitoring of APs directly from your WatchGuard
Firebox. The WatchGuard Firebox requires Fireware v12.1.3 and higher.
WatchGuard Technologies, Inc. 1

About Your Hardware
Hardware Specifications
This table shows the hardware specifications for the AP125.
Processor and RAM Qualcomm IPQ4028 717 MHz quad-core ARM processor with 256 MB
RAM and 64 MB Flash
Radio Type and
Frequency Band
2.4GHz, 802.11b/g/n. Max data rate: 300 Mbps
5GHz, 802.11a/n/ac. Max data rate: 876 Mbps
Antenna 4 integrated omnidirectional antennas
n2 antennas: 2.4GHz radio
n2 antennas: 5GHz radio
Ethernet Interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2) 802.3af PoE
1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1) for a wired extension of
an SSID or link aggregation.
Power Interface Power over Ethernet: 802.3af (PoE)
PoE input voltage 48V, Class 0
DC jack: 12V DC input, 1.5A (5.5mm overall diameter/2.1mm center
pin/hole)
Power Consumption Max: 12.95 W
Min: 2.7 W
Average: 11 W
MTBF Rating 2,080,309 hours at 25°C
952,320 hours at 45°C
Dimensions L = 148 mm (5.8")
W = 148 mm (5.8")
H = 33 mm(1.3")
Weight 237 g (0.522 lb)
WatchGuard AP125 Hardware Guide
2 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
Environmental Requirements
To safely install your WatchGuard AP, we recommend that you:
nInstall the device indoors.
nMake sure the device has adequate clearance for air flow and cooling.
nConnect it to a surge-protected power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating Temperature 0°C to 45°C (32°F to 113°F)
Operating Humidity 0% to 95% non-condensing
Non-operating Temperature -20°C to 65°C (-4°F to 149°F)
Non-operating Humidity 5% to 95%, non-condensing
WatchGuard Technologies, Inc. 3

Hardware Description
Device Connections and Buttons
This table shows the device connections and buttons on the AP125.
Ethernet Network Interfaces
LAN2/PoE: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE
connectivity.
LAN1: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps. When managed by
Wi-Fi Cloud, you can configure this LAN interface as a wired extension for an SSID or for link
aggregation. For more information, see the WatchGuard Wi-Fi Cloud Help .
For APs managed locally by a Gateway Wireless Controller with Fireware v12.2.1 and higher, you
can bridge together the LAN ports on AP models that have two LAN interfaces. This enables you to
extend the wired network on the second LAN interface. For more information, see the Fireware Help .
Power Input (DCIN)
You can power the WatchGuard AP125 with 802.3af PoE on the LAN2 (PoE) interface.
You can also power the device with an optional AC power adapter.
WatchGuard AP125 Hardware Guide
4 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
Reset Button
Resets the WatchGuard AP to factory-default settings. You must use a paper clip or other small
object to press the reset button through the hole.
To reset the device to factory-default settings, while the AP is powered on, press and hold the reset
button for up to 10 seconds until all LEDs go off to indicate that the AP has rebooted.
If you press the reset button while the AP is not powered on or is booting, the reset
button will have no effect.
WatchGuard Technologies, Inc. 5

Device Indicators
The LED device indicators on the top of the front panel show the status of the AP.
Device Indicators in AP Firmware 8.8.1 and Higher
LED Status Description
Power Off Powered off
Solid Green Powered on
Flashing
Green
Not connected to Wi-Fi Cloud or paired with a Gateway Wireless
Controller
No IP address received from DHCP
LAN1 and
LAN2/PoE
Off No Ethernet link
WatchGuard AP125 Hardware Guide
6 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
LED Status Description
Solid Green Connected to the network at 10/100/1000 Mbps
2.4 GHz
and
5 GHz
radios
Off 8.8.2 and higher: No SSID enabled on the radio.
8.8.1: Wireless radio is inactive.
Solid Green 8.8.2 and higher: SSID enabled on radio or WIPS scanning in progress.
8.8.1: Wireless radio is active.
Device Indicators in AP Firmware 8.8.0 and Lower
LED Status Description
Power Off Powered off
Solid green Powered on
LAN1 Off No Ethernet link
Solid amber Connected to LAN1 port at 10/100/1000 Mbps
Flashing amber Activity on LAN1 port
LAN2 (PoE) Off No Ethernet link
Solid green Connected to LAN2 (PoE) port at 10/100/1000 Mbps
Fast flash green Did not receive valid IP address from DHCP
Slow flash green Cannot connect to Wi-Fi Cloud or Gateway Wireless Controller.
Flashing green Activity on LAN2 (PoE) port
2.4 GHz Solid green Client connected to 2.4 GHz radio
Flashing green Activity on 2.4 GHz radio
5 GHz Solid green Client connected to 5 GHz radio
Flashing green Activity on 5 GHz radio
WatchGuard Technologies, Inc. 7

Mounting Instructions
Your package includes the AP125 and a T-rail mounting bracket.
Use the included mounting bracket (15/16”, 24mm, Part #: WG8027) to install the AP125 on a ceiling with a
T-rail.
Optional T-rail mount brackets are available from WatchGuard:
n9/16” T-rail mount, 15mm, Part #: WG8026
nInterlude/Silhouette T-rail mount, 15mm, Part #: WG8021
WatchGuard AP125 Hardware Guide
8 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
To install the AP125 on a ceiling with a T-rail:
1. Put the first mounting post on the back of the AP over the lower bracket notch and rotate into place.
2. Make sure that all the mounting posts on the back of the AP are securely positioned in their bracket
notches.
3. To attach the bracket to the T-rail, rotate the bracket so it is parallel to the T-rail, and snap the bracket
on the T-rail.
WatchGuard Technologies, Inc. 9

Flat Surface Bracket (Optional)
An optional surface mount bracket for walls or ceilings is available from WatchGuard (Part #: WG8040).
1. Pull the release key outward to unlock the mount bracket.
2. Attach the bracket to the mounting surface with screws (not included).
3. Attach the AP stubs to the bracket holders. You may need to adjust the AP stubs for a firm fit.
WatchGuard AP125 Hardware Guide
10 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
4. Push in the release key to lock the hooks. Make sure all hooks are locked in place.
5. Use a T10 screwdriver to fasten the included screw to the release key to lock the AP to the bracket.
WatchGuard Technologies, Inc. 11

Connect the AP
To power on and connect the AP125 to the network with PoE:
1. Connect one end of the network interface cable to the LAN2/PoE port on the AP125.
2. Connect the other end of the network interface cable to an Ethernet jack that provides PoE power.
To connect the AP125 to the network and to power on the AP with a power adapter:
1. Connect one end of the network interface cable to the LAN2/PoE port on the AP125.
2. Connect the other end of the network interface cable to an Ethernet network jack.
3. Plug the power adapter cable into the 12V DC power receptacle on the back of the AP125.
4. Plug the power adapter into an 100V-240V 50/60 Hz AC power source.
Connect the AP for Link Aggregation
With WatchGuard Wi-Fi Cloud, you can use both Ethernet ports of the AP125 for link aggregation that
enables these ports to logically merge into a single link for higher aggregate bandwidth.
You must enable link aggregation in a device template for the AP125, and link aggregation must also be
enabled on your network switch for the two ports connected to your AP. Both links should use CAT6
Ethernet cabling.
Make sure that PoE power is supplied to the indicated Ethernet port labeled LAN2 (PoE) on the AP125.
WatchGuard AP125 Hardware Guide
12 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
Ethernet Power Injector (Optional)
You can power your WatchGuard AP with an optional Ethernet Power Injector. This PoE+ capable device
enables you to power the WatchGuard AP through an existing Ethernet connection. With this feature, you
do not have to position your WatchGuard AP near a power outlet.
This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE
adapters that are not IEEE 802.3at/af compliant as they may damage your device.
To connect an Ethernet Power Injector to the WatchGuard AP:
1. Plug the Ethernet Power Injector into an AC power source.
2. Connect an Ethernet cable from your network backbone (for example, a router, switch, or hub) to the
LAN connector on the Ethernet Power Injector.
3. Connect an Ethernet cable from the LAN2 (PoE) Ethernet interface on the AP to the PoE connector on
the Ethernet Power Injector.
The table below provides the specifications for the Ethernet PoE injector.
Ethernet Power Injector Specs
WatchGuard Part Number 802.3at PoE+ Injector with AC cord (US/FCC) (WG8599)
802.3at PoE+ Injector with AC cord (CE) (WG8600)
802.3at PoE+ Injector with AC cord (UK) (WG8601)
802.3at PoE+ Injector with AC cord (AUS) (WG8602)
Specification IEEE 802.3at/af
AC Input Voltage Rating 100-240VAC
WatchGuard Technologies, Inc. 13

Ethernet Power Injector Specs
Input Current 0.8A max for 100VAC
Output Power 30W maximum
Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data
POE: RJ-45 for 10/100/1000 Mbps data and power
Voltage: Pin4, 5:54V, Pin7, 8:Return
Indicator Power: Green
Temperature Operating: 0 - 40°C (32 - 104°F)
Storage: -30 - 80°C (-22 - 176°F)
Humidity 5% - 90% (Operating and storage)
Dimensions L = 99 mm (3.9")
W = 68.5 mm (2.27")
H = 33 mm(1.3")
Weight 149.6 g (0.33 lbs)
WatchGuard AP125 Hardware Guide
14 WatchGuard Technologies, Inc.

WatchGuard AP125 Hardware Guide
ACPower Adapter
An optional AC power adapter supplies 12V DC power to the WatchGuard AP and includes US, EU, UK,
and AU region-specific adapter plugs.
AC Power Adapter Specs
WatchGuard Part Number WG8041
AC Input Voltage Rating 90-264VAC
Output Voltage DC 12V, 1.5A
Region Specific Adapter Plugs US, EU, UK, AU
Temperature Operating: 0 - 45°C (32 - 113°F)
Storage: -20 - 85°C (-4 -185°F)
Humidity Operating: 0% – 95%
Storage: 0% – 95%
WatchGuard Technologies, Inc. 15

Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Please read these instructions
carefully before operating the product, and refer to them as needed to ensure the continued safe operation of
your product.
For patent information, please visit http://www.watchguard.com/patents
Safety Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Read these instructions carefully
before you operate the product, and refer to them as needed for continued safe operation of your product.
Product Safety Certification
The WatchGuard product is safety certified under the following standards:
nIEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
nEN 60950-1:2006+A11+A1+A12+A2:2013
nEN 61000-3-2:2014
nEN 61000-3-3:2013
Safety Warning
nDo not place objects on the power cord.
nDo not obstruct the ventilation openings. These openings prevent overheating of the machine.
nNever push objects of any kind into slots or openings on this equipment. Making a contact with a
voltage point or shorting out a part may result in fire or electrical shock.
nWhen removing or installing an appliance, follow the general installation safety instructions.
Disclaimer
WatchGuard shall not be held liable if the end user alters, modify, or repairs any WatchGuard hardware
appliance.
HINWEISE ZUR SICHERHEIT
Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen
zuerfüllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale Compliance-
Standards. Bitte lesen Sie die folgenden Anweisungen sorgfältig, bevor Sie das Produkt, und bezeichnen
sie als notwendig, um den sicheren Betrieb des Geräts zu gewährleisten.
Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertifiziert:
nIEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
nEN 60950-1:2006+A11+A1+A12+A2:2013
WatchGuard AP125 Hardware Guide
16 WatchGuard Technologies, Inc.