Watchguard AP325 Installation instructions

WatchGuard
AP325
Hardware Guide
AP325
Access Point

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 6/4/2020
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2020 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names
mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence
products and services to more than 75,000 customers worldwide.
The company’s mission is to make enterprise-grade security
accessible to companies of all types and sizes through simplicity,
making WatchGuard an ideal solution for Distributed Enterprises
and SMBs. WatchGuard is headquartered in Seattle, Washington,
with offices throughout North America, Europe, Asia Pacific, and
Latin America. To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity,
for real-time information about the latest threats and how to cope
with them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. i

Contents
WatchGuard AP325 Hardware Guide 1
Requirements 1
About Your Hardware 1
Hardware Specifications 1
Environmental Requirements 2
Hardware Description 3
Device Connections and Buttons 3
Device Indicators 5
Mounting Instructions 8
Flat Surface Bracket (Optional) 9
Connect the AP 11
Connect the AP for Link Aggregation 11
Ethernet Power Injector (Optional) 12
Power Adapter 13
Notices 14
Safety Notices 14
Product Safety Certification 14
Safety Warning 14
Disclaimer 14
HINWEISE ZUR SICHERHEIT 14
Sicherheitshinweis 15
AVISO DE SEGURIDAD 15
Certificación de seguridad del producto 15
Advertencia de seguridad 15
FCC Certification 16
CE Notice 17
ii WatchGuard Technologies, Inc.

Industry Canada Certification 17
Europe – EU Declaration of Conformity (Wireless) 18
Brasil ANATEL 21
Mexico NOM 21
Taiwan Class B Notices 21
Taiwan NCC 21
Taiwan RoHS 22
Japan VCCI Notice (Class B ITE) 22
RoHS Statement 23
WEEE Statement 23
REACH Certificate of Compliance 23
WatchGuard Technologies, Inc. iii

WatchGuard AP325 Hardware Guide
WatchGuard AP325 Hardware Guide
WatchGuard AP325 devices are intended for low to medium density environments and feature 2x2 MU-
MIMO with dual concurrent 5 GHz and 2.4 GHz radios supporting 802.11a/n/ac Wave 2, 802.11b/g/n, two
spatial streams, and data rates of up to 876 Mbps and 300 Mbps, respectively. The AP325 also contains a
third 2x2 MIMO 802.11ac radio for dedicated multi-function security and wireless network scanning (Wi-Fi
Cloud mode only).
Requirements
There are two ways you can manage your AP325:
Total Wi-Fi and Secure Wi-Fi with WatchGuard Wi-Fi Cloud
A powerful cloud-based enterprise wireless management solution for AP configuration, security, and
monitoring.
Basic Wi-Fi with WatchGuard Firebox Gateway Wireless Controller
Local management, configuration, security, and monitoring of APs directly from your WatchGuard
Firebox. The WatchGuard Firebox requires Fireware v12.1 and higher.
The third radio is not available when you manage the AP325 locally with a Gateway
Wireless Controller.
About Your Hardware
Hardware Specifications
This table shows the hardware specifications for the AP325.
Processor and RAM Qualcomm IPQ4028 717 MHz quad-core ARM processor with 256 MB RAM
and 64 MB Flash
Radio Type and
Frequency Band
2.4GHz, 802.11b/g/n. Max data rate: 300 Mbps
5GHz, 802.11a/n/ac. Max data rate: 876 Mbps
Third radio for dedicated RF and security scanning in Wi-Fi Cloud mode
only.
Antenna 6 integrated omnidirectional antennas
n2 antennas: 2.4 GHz radio
n2 antennas: 5 GHz radio
WatchGuard Technologies, Inc. 1

n2 antennas: Third scanning radio
Ethernet Interface 1 x 10/100/1000 Mbps Gigabit Ethernet (LAN1)
802.3at/af PoE for a wired LAN connection through a switch or hub.
1 x 10/100/1000 Mbps Gigabit Ethernet (LAN2) for a wired extension of an
SSID, VLAN extension, or link aggregation.
Power Interface Power over Ethernet: 802.3at (PoE+) / 802.3af (PoE)
DC jack (6.3mm connector): 12V DC input, 1.5A
Power
Consumption
Max: PoE+ (802.3at): 16W
Max:PoE (802.3af): 12.95W
Max: DCpower: 16W
Min: 6.5W
Average: 13.8W
MTBF Rating 1,081,559 hours at 25°C
535,205 hours at 45°C
Dimensions L = 196 mm (7.72")
W = 196 mm (7.72")
H = 43 mm(1.69")
Weight 850g (1.87lb)
Environmental Requirements
To safely install your WatchGuard AP, we recommend that you:
nInstall the device indoors.
nMake sure the device has adequate clearance for air flow and cooling.
nConnect it to a surge-protected power supply to prevent damage from sudden power changes
Other environmental requirements:
Operating Temperature 0° to 40°C (32° to 104°F)
Operating Humidity 0% to 95% non-condensing
Non-operating Temperature –20° to 85°C (-4° to 185°F)
Non-operating Humidity 5% to 95%, non-condensing
WatchGuard AP325 Hardware Guide
2 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Hardware Description
Device Connections and Buttons
This table shows the device connections and buttons on the AP325.
Ethernet Network Interfaces
LAN1: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps and PoE
connectivity.
LAN2: Standard RJ45 connector that supports link speeds of 10/100/1000 Mbps. When managed by
Wi-Fi Cloud, you can use this interface for a wired extension of an SSID, a VLAN extension, or link
aggregation. For more information, see the WatchGuard Wi-Fi Cloud Help.
For APs managed locally by a Gateway Wireless Controller with Fireware v12.2.1 and higher, you
can bridge together the LAN ports on AP models that have two LAN interfaces. This enables you to
extend the wired network on the second LAN interface. For more information, see the Fireware Help .
Power Input
You can power the WatchGuard AP325 by 802.3at PoE+ or 802.3af PoE on the LAN1 (PoE)
interface, or an optional power adapter.
In 8.8.2 and higher, the AP can use 802.3af PoE with no loss in functionality.
In 8.8.1 and lower, the use of 802.3af PoE results in limited feature functionality of the AP:
nUSB port and LAN2 Ethernet extension port are disabled.
nThe 2.4 GHz radio is downgraded to 1x1 12dbm or lower, or as set in the device template.
nThe 5 GHz radio is downgraded to 2x2 12dbm or lower, or as set in the device template.
nThird scanning radio is downgraded to 1x1 with 12dBm transmit power. Lower PoE power
results in reduced performance and effectiveness of WIPS scanning and intrusion prevention
functions.
WatchGuard Technologies, Inc. 3

USB Port
The USB port is currently not in use.
Reset Button
Resets the WatchGuard AP to factory-default settings. You must use a paper clip or other small
object to press the reset button through the hole.
To reset the device to factory-default settings, while the AP is powered on, press and hold the reset
button for up to 10 seconds until all LEDs go off to indicate that the AP has rebooted.
If you press the reset button while the AP is not powered on or is booting, the reset
button will have no effect.
WatchGuard AP325 Hardware Guide
4 WatchGuard Technologies, Inc.

WatchGuard AP325 Hardware Guide
Device Indicators
The LED device indicators show the status of the AP.
WatchGuard Technologies, Inc. 5

The AP325 operates in AP combo mode where the 2.4 GHz and 5 GHz radios work in AP mode to
broadcast Wi-Fi, while the third radio operates in WIPS (Wireless Intrusion Prevention System) sensor
mode (Wi-Fi Cloud management only).
Device Indicators in AP Firmware 8.8.1 and Higher
LED Status Description
Power Off Powered off.
Solid
Green
Powered on.
Flashing
Green
APcannot connect to Wi-Fi Cloud or the Gateway Wireless Controller.
Flashing
Amber
APdid not receive an IP address from the DHCPserver.
LAN1
(PoE)
Off No Ethernet link.
Solid
Green
Network interface is up and connected at 10/100/1000 Mbps.
LAN2 Off No Ethernet link.
Solid
Green
(Wi-Fi
Cloud
mode)
8.8.2 and higher: For APs with additional LAN ports, interface will be green if the
interface is up and a wired extension or link aggregation is enabled on the
interface in Wi-Fi Cloud.
8.8.1: Network interface is up and connected at 10/100/1000 Mbps.
Solid
Green
(Local
mode)
Network interface is up and connected at 10/100/1000 Mbps.
2.4
GHz
and
5 GHz
radios
Off 8.8.2 and higher: No SSID enabled on the radio.
8.8.1: Wireless radio is inactive.
WatchGuard AP325 Hardware Guide
6 WatchGuard Technologies, Inc.