Watchguard AP325 Installation instructions

WatchGuard
AP325
Hardware Guide
AP325
Access Point

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 6/4/2020
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2020 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names
mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity,
for real-time information about the latest threats and how to cope
with them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard AP325 Hardware Guide 1
Requirements 1
About Your Hardware 1
Hardware Specifications 1
Environmental Requirements 2
Hardware Description 3
Device Connections and Buttons 3
Device Indicators 5
Mounting Instructions 8
Flat Surface Bracket (Optional) 9
Connect the AP 11
Connect the AP for Link Aggregation 11
Ethernet Power Injector (Optional) 12
Power Adapter 13
Notices 14
Safety Notices 14
Product Safety Certification 14
Safety Warning 14
Disclaimer 14
HINWEISE ZUR SICHERHEIT 14
Sicherheitshinweis 15
AVISO DE SEGURIDAD 15
Certificación de seguridad del producto 15
Advertencia de seguridad 15
FCC Certification 16
CE Notice 17
ii WatchGuard Technologies, Inc.

Industry Canada Certification 17
Europe – EU Declaration of Conformity (Wireless) 18
Brasil ANATEL 21
Mexico NOM 21
Taiwan Class B Notices 21
Taiwan NCC 21
Taiwan RoHS 22
Japan VCCI Notice (Class B ITE) 22
RoHS Statement 23
WEEE Statement 23
REACH Certificate of Compliance 23
WatchGuard Technologies, Inc. iii

WatchGuard AP325 Hardware Guide
WatchGuard AP325 Hardware Guide
WatchGuard AP325 devices are intended for low to medium density environments and feature 2x2 MU-
MIMO with dual concurrent 5 GHz and 2.4 GHz radios supporting 802.11a/n/ac Wave 2, 802.11b/g/n, two
spatial streams, and data rates of up to 876 Mbps and 300 Mbps, respectively. The AP325 also contains a
third 2x2 MIMO 802.11ac radio for dedicated multi-function security and wireless network scanning (Wi-Fi
Cloud mode only).
Requirements
There are two ways you can manage your AP325:
Total Wi-Fi and Secure Wi-Fi with WatchGuard Wi-Fi Cloud
A powerful cloud-based enterprise wireless management solution for AP configuration, security, and
monitoring.
Basic Wi-Fi with WatchGuard Firebox Gateway Wireless Controller
Local management, configuration, security, and monitoring of APs directly from your WatchGuard
Firebox. The WatchGuard Firebox requires Fireware v12.1 and higher.
The third radio is not available when you manage the AP325 locally with a Gateway
Wireless Controller.
About Your Hardware
Hardware Specifications
This table shows the hardware specifications for the AP325.
Processor and RAM Qualcomm IPQ4028 717 MHz quad-core ARM processor with 256 MB RAM
and 64 MB Flash
Radio Type and
Frequency Band
2.4GHz, 802.11b/g/n. Max data rate: 300 Mbps
5GHz, 802.11a/n/ac. Max data rate: 876 Mbps
Third radio for dedicated RF and security scanning in Wi-Fi Cloud mode
only.
Antenna 6 integrated omnidirectional antennas
n2 antennas: 2.4 GHz radio
n2 antennas: 5 GHz radio
WatchGuard Technologies, Inc. 1

n2 antennas: Third scanning radio
Ethernet Interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1)
802.3at/af PoE for a wired LAN connection through a switch or hub.
1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2) for a wired extension of an
SSID, VLAN extension, or link aggregation.
Power Interface Power over Ethernet: 802.3at (PoE+) / 802.3af (PoE)
DC jack (6.3mm connector): 12V DC input, 1.5A
Power
Consumption
Max: PoE+ (802.3at): 16W
Max:PoE (802.3af): 12.95W
Max: DCpower: 16W
Min: 6.5W
Average: 13.8W
MTBF Rating 1,081,559 hours at 25°C
535,205 hours at 45°C
Dimensions L = 196 mm (7.72")
W = 196 mm (7.72")
H = 43 mm(1.69")
Weight 850g (1.87lb)
Environmental Requirements
To safely install your WatchGuard AP, we recommend that you:
nInstall the device indoors.
nMake sure the device has adequate clearance for air flow and cooling.
nConnect it to a surge-protected power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating Temperature 0° to 40°C (32° to 104°F)
Operating Humidity 0% to 95% non-condensing
Non-operating Temperature –20° to 85°C (-4° to 185°F)
Non-operating Humidity 5% to 95%, non-condensing
WatchGuard AP325 Hardware Guide
2 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Hardware Description
Device Connections and Buttons
This table shows the device connections and buttons on the AP325.
Ethernet Network Interfaces
LAN1: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE
connectivity.
LAN2: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps. When managed by
Wi-Fi Cloud, you can use this interface for a wired extension of an SSID, a VLAN extension, or link
aggregation. For more information, see the WatchGuard Wi-Fi Cloud Help.
For APs managed locally by a Gateway Wireless Controller with Fireware v12.2.1 and higher, you
can bridge together the LAN ports on AP models that have two LAN interfaces. This enables you to
extend the wired network on the second LAN interface. For more information, see the Fireware Help .
Power Input
You can power the WatchGuard AP325 by 802.3at PoE+ or 802.3af PoE on the LAN1 (PoE)
interface, or an optional power adapter.
In 8.8.2 and higher, the AP can use 802.3af PoE with no loss in functionality.
In 8.8.1 and lower, the use of 802.3af PoE results in limited feature functionality of the AP:
nUSB port and LAN2 Ethernet extension port are disabled.
nThe 2.4 GHz radio is downgraded to 1x1 12dbm or lower, or as set in the device template.
nThe 5 GHz radio is downgraded to 2x2 12dbm or lower, or as set in the device template.
nThird scanning radio is downgraded to 1x1 with 12dBm transmit power. Lower PoE power
results in reduced performance and effectiveness of WIPS scanning and intrusion prevention
functions.
WatchGuard Technologies, Inc. 3

USB Port
The USB port is currently not in use.
Reset Button
Resets the WatchGuard AP to factory-default settings. You must use a paper clip or other small
object to press the reset button through the hole.
To reset the device to factory-default settings, while the AP is powered on, press and hold the reset
button for up to 10 seconds until all LEDs go off to indicate that the AP has rebooted.
If you press the reset button while the AP is not powered on or is booting, the reset
button will have no effect.
WatchGuard AP325 Hardware Guide
4 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Device Indicators
The LED device indicators show the status of the AP.
WatchGuard Technologies, Inc. 5

The AP325 operates in AP combo mode where the 2.4 GHz and 5 GHz radios work in AP mode to
broadcast Wi-Fi, while the third radio operates in WIPS (Wireless Intrusion Prevention System) sensor
mode (Wi-Fi Cloud management only).
Device Indicators in AP Firmware 8.8.1 and Higher
LED Status Description
Power Off Powered off.
Solid
Green
Powered on.
Flashing
Green
APcannot connect to Wi-Fi Cloud or the Gateway Wireless Controller.
Flashing
Amber
APdid not receive an IP address from the DHCPserver.
LAN1
(PoE)
Off No Ethernet link.
Solid
Green
Network interface is up and connected at 10/100/1000 Mbps.
LAN2 Off No Ethernet link.
Solid
Green
(Wi-Fi
Cloud
mode)
8.8.2 and higher: For APs with additional LAN ports, interface will be green if the
interface is up and a wired extension or link aggregation is enabled on the
interface in Wi-Fi Cloud.
8.8.1: Network interface is up and connected at 10/100/1000 Mbps.
Solid
Green
(Local
mode)
Network interface is up and connected at 10/100/1000 Mbps.
2.4
GHz
and
5 GHz
radios
Off 8.8.2 and higher: No SSID enabled on the radio.
8.8.1: Wireless radio is inactive.
WatchGuard AP325 Hardware Guide
6 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
LED Status Description
Solid
Green
8.8.2 and higher: SSID enabled on radio.
8.8.1: Wireless radio is active.
Third
Radio
(WIPS)
Off Wireless radio is inactive.
Solid
Green
WIPSscanning is active (Wi-Fi Cloud mode only).
Device Indicators in AP Firmware 8.8.0 and Lower
LED Status Description
Power Solid Green Power on
Off Power off
LAN1 / PoE Solid Green Device connected to LAN1 port at 10/100/1000 Mbps.
Fast Flash Green Did not receive valid IP address from DHCP.
Slow Flash Green Cannot connect to WatchGuard Wi-Fi Cloud.
Intermittent Flash Green Activity on LAN1 port.
Off No Ethernet link.
LAN2 Solid Green Device connected to LAN2 port at 10/100/1000 Mbps.
Flashing Green Activity on LAN2 port.
Off No Ethernet link.
2.4 GHz Solid Green Client connected to 2.4 GHz radio.
Intermittent Flash Green Activity on 2.4 GHz radio.
5 GHz Solid Green Client connected to 5 GHz radio.
Intermittent Flash Green Activity on 5 GHz radio.
Third Radio Intermittent Flash Green WIPS scanning activity on third radio.
WatchGuard Technologies, Inc. 7

Mounting Instructions
Use the included mounting bracket (15/16”, 24mm, Part #: WG8027) to install the AP325 on a ceiling with a
T-rail.
Optional T-rail mount brackets are available from WatchGuard:
n9/16” T-rail mount, 15mm, Part #: WG8026
nInterlude/Silhouette T-rail mount, 15mm, Part #: WG8021
To install the AP325 on a ceiling with a T-rail:
1. Put the first mounting post on the back of the AP over the lower bracket notch and rotate into place.
2. Make sure that all the mounting posts on the back of the AP are securely positioned in their bracket
notches.
3. To attach the bracket to the T-rail, rotate the bracket so it is parallel to the T-rail, and snap the bracket
on the T-rail.
WatchGuard AP325 Hardware Guide
8 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Flat Surface Bracket (Optional)
An optional surface mount bracket for walls or ceilings is available from WatchGuard (Part #: WG8038).
1. Attach the bracket to the mounting surface with screws (not included).
2. Pull the release key outward to unlock the mount bracket, then attach the AP stubs to the bracket
holders. You may need to adjust the stubs for a firm fit.
3. Push in the release key to lock the hooks. Make sure all hooks are locked in place.
WatchGuard Technologies, Inc. 9

4. Fasten the included screw to the release key to lock the AP to the bracket.
WatchGuard AP325 Hardware Guide
10 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Connect the AP
To power on and connect the AP325 to the network with PoE:
1. Connect one end of the network interface cable to the LAN1 PoE port on the AP325.
2. Connect the other end of the network interface cable to an Ethernet jack that provides PoE power.
To connect the AP325 to the network and to power on the AP325 with a power adapter:
1. Connect one end of the network interface cable to the LAN1 PoE port on the AP325.
2. Connect the other end of the network interface cable to an Ethernet network jack.
3. Plug the power adapter cable into the 12V DC power receptacle on the back of the AP325.
4. Plug the power adapter into an 100V-240V 50/60 Hz AC power source.
Connect the AP for Link Aggregation
With WatchGuard Wi-Fi Cloud, you can use both Ethernet ports of the AP325 for link aggregation that
enables these ports to logically merge into a single link for higher aggregate bandwidth.
You must enable link aggregation in a device template for the AP325, and link aggregation must also be
enabled on your network switch for the two ports connected to your AP. Both links should use CAT6
Ethernet cabling.
Make sure that PoE power is supplied to the indicated first Ethernet port labeled LAN1 (PoE) on the AP325.
The second Ethernet port is not supported when the APis managed locally by a
Gateway Wireless Controller on a Firebox.
WatchGuard Technologies, Inc. 11

Ethernet Power Injector (Optional)
You can power the WatchGuard AP with an optional Ethernet Power Injector. This PoE+ capable device
allows you to power the WatchGuard AP through an existing Ethernet connection. With this feature, you do
not have to position your WatchGuard AP near a power outlet.
This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE
adapters that are not IEEE 802.3at/af compliant as they may damage your device.
To connect an Ethernet Power Injector to the WatchGuard AP:
1. Plug the Ethernet Power Injector into an AC power source.
2. Connect an Ethernet cable from your network backbone (for example, a router, switch, or hub) to the
LAN connector on the Ethernet Power Injector.
3. Connect an Ethernet cable from the LAN1 (PoE) Ethernet interface on the AP to the PoE connector on
the Ethernet Power Injector.
The table below provides the specifications for the Ethernet PoE injector.
Ethernet Power Injector Specs
WatchGuard Part Number 802.3at PoE+ Injector with AC cord (US/FCC) (WG8599)
802.3at PoE+ Injector with AC cord (CE) (WG8600)
802.3at PoE+ Injector with AC cord (UK) (WG8601)
802.3at PoE+ Injector with AC cord (AUS) (WG8602)
Specification IEEE 802.3at/af
AC Input Voltage Rating 100-240VAC
WatchGuard AP325 Hardware Guide
12 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Ethernet Power Injector Specs
Input Current 0.8A max for 100VAC
Output Power 30W maximum
Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data
POE: RJ-45 for 10/100/1000 Mbps data and power
Voltage: Pin4, 5:54V, Pin7, 8:Return
Indicator Power: Green
Temperature Operating: 0 - 40°C (32 - 104°F)
Storage: -30 - 80°C (-22 - 176°F)
Humidity 5% - 90% (Operating and storage)
Dimensions L = 99 mm (3.9")
W = 68.5 mm (2.27")
H = 33 mm(1.3")
Weight 149.6 g (0.33 lbs)
Power Adapter
An optional AC power adapter supplies 12V DC power to the WatchGuard AP325 and includes region-
specific adapter plugs.
AC Power Adapter Specs
WatchGuard Part Number WG8039
AC Input Voltage Rating 100-240V, 50-60Hz, 0.5A max
Output Voltage DC 12V, 1.5A
Region Specific Adapter Plugs US, UK, AU/NZ, EMEA
Temperature Operating: 0 - 40°C (32 – 104°F)
Storage: -20 - 70°C (-4 – 158°F)
Humidity Operating: 0% – 90%
Storage: 0% – 95%
WatchGuard Technologies, Inc. 13

Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Please read these instructions
carefully before operating the product, and refer to them as needed to ensure the continued safe operation of
your product.
For patent information, please visit http://www.watchguard.com/patents
Safety Notices
All WatchGuard products are designed and tested to meet strict safety requirements. These requirements
include product safety approvals and other global compliance standards. Read these instructions carefully
before you operate the product, and refer to them as needed for continued safe operation of your product.
Product Safety Certification
The WatchGuard product is safety certified under the following standards:
nIEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
nEN 60950-1:2006+A11+A1+A12+A2:2013
nEN 61000-3-2:2014
nEN 61000-3-3:2013
Safety Warning
nDo not place objects on the power cord.
nDo not obstruct the ventilation openings. These openings prevent overheating of the machine.
nNever push objects of any kind into slots or openings on this equipment. Making a contact with a
voltage point or shorting out a part may result in fire or electrical shock.
nWhen removing or installing an appliance, follow the general installation safety instructions.
Disclaimer
WatchGuard shall not be held liable if the end user alters, modify, or repairs any WatchGuard hardware
appliance.
HINWEISE ZUR SICHERHEIT
Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen
zuerfüllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale Compliance-
Standards. Bitte lesen Sie die folgenden Anweisungen sorgfältig, bevor Sie das Produkt, und bezeichnen
sie als notwendig, um den sicheren Betrieb des Geräts zu gewährleisten.
Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertifiziert:
nIEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
nEN 60950-1:2006+A11+A1+A12+A2:2013
WatchGuard AP325 Hardware Guide
14 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
nEN 61000-3-2:2014
nEN 61000-3-3:2013
Sicherheitshinweis
nLegen Sie keine Gegenstände auf das Netzkabel.
nVerdecken Sie nicht die Lüftungsöffnungen. Diese Öffnungen verhindern eine Überhitzung der
Maschine.
nStecken Sie niemals Gegenstände jeglicher Art in die Schlitze oder Öffnungen des Geräts stecken. Der
Kontakt mit einem spannungsführenden Punkt oder das Kurzschließen eines Bauteils kann zu einem
Brand oder elektrischen Schlag führen.
nBeim Entfernen oder Installieren eines Gerätes, nach den allgemeinen Installation Sicherheitshinweise.
AVISO DE SEGURIDAD
Todos los productos WatchGuard están diseñados y probados para satisfacer estrictos requisitos de
seguridad. Estos requisitos incluyen la homologación de productos de seguridad y otras normas de
cumplimiento global. Por favor, lea atentamente las siguientes instrucciones antes de utilizar el producto, y
se refieren a ellos como sea necesario para garantizar el funcionamiento seguro y continuo de su producto.
Información adicional se puede encontrar en la Guía del usuario electrónica.
Certificación de seguridad del producto
El producto tiene certificación de seguridad WatchGuard bajo las siguientes normas:
nIEC 60950-1:2005 (Second Edition)+Am 1:2009+Am 2:2013
nEN 60950-1:2006+A11+A1+A12+A2:2013
nEN 61000-3-2:2014
nEN 61000-3-3:2013
Advertencia de seguridad
nNo coloque objetos sobre el cable de alimentación.
nNo obstruya las aberturas de ventilación. Estas aberturas evitan el sobrecalentamiento de la máquina.
nNunca introduzca objetos de ningún tipo en las ranuras o aberturas del equipo. El contacto con puntos
de voltaje o el cortocircuito de una pieza podría provocar un incendio o una descarga eléctrica.
nAl extraer o instalar un electrodoméstico, siga las instrucciones generales de instalación de seguridad.
WatchGuard Technologies, Inc. 15

FCC Certification
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
This device has been tested and found to comply with the limits for a Class B digital device, pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful
interference in a residential installation. This equipment generates uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instructions, may cause harmful interference to
radio communications. However, there is no guarantee that interference will not occur in a particular
installation if this equipment does cause harmful interference to radio or television reception, which can be
determined b turning the equipment off and on, the user is encouraged to try to correct the interference by
one or more of the following measures:
nReorient or relocate the receiving antenna.
nIncrease the separation between the equipment and receiver.
nConnect the equipment into an outlet on a circuit different from that to which the receiver is connected.
nConsult the dealer or an experienced radio/TV technician for help.
* FCC Caution: Any changes or modifications not expressly approved by the party responsible for
compliance could void the user's authority to operate this equipment.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. For
operation within 5.15 ~ 5.25GHz / 5.47 ~5.725GHz frequency range, it is restricted to indoor environment.
The band from 5600-5650MHz will be disabled by the software during the manufacturing and cannot be
changed by the end user. This device meets all the other requirements specified in Part 15E, Section 15.407
of the FCC Rules.
IMPORTANT NOTE:
FCC Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This
equipment should be installed and operated with minimum distance 28cm between the radiator & your body.
Note: The country code selection is for non-US model only and is not available to all US model. Per FCC
regulation, all WiFi product marketed in US must fixed to US operation channels only.
Dieses Gerät wurde getestet und entspricht den Grenzwerten für ein Digitalgerät der Klasse B gemäß Teil
15 der Federal Communications Commission (FCC) Regeln einhalten. Diese Grenzwerte sollen einen
angemessenen Schutz vor schädlichen Störungen, wenn das Gerät in einer kommerziellen Umgebung
betrieben wird. Dieses Gerät erzeugt, verwendet und kann Hochfrequenzenergie abstrahlen, und wenn
nicht installiert und in Übereinstimmung mit der Bedienungsanleitung, kann es Störungen im Funkverkehr
verursachen. Der Betrieb dieses Gerätes in einem Wohngebiet wird wahrscheinlich schädliche
Interferenzen in dem Fall muss der Benutzer die Störungen auf seine / ihre eigene Kosten zu beheben.
WatchGuard AP325 Hardware Guide
16 WatchGuard Technologies, Inc.