Watchguard AP332CR Installation instructions

WatchGuard AP332CR
Hardware Guide
WatchGuard AP332CR
Outdoor Access Point

WatchGuard Technologies, Inc. 2

About This Guide
Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of WatchGuard Technologies, Inc.
Guide revised: 7/11/2022
Copyright, Trademark, and Patent Information
Copyright © 1998 – 2022 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade
names mentioned herein, if any, are the property of their respective owners.
Complete copyright, trademark, patent, and licensing information can be found in the Copyright and
Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview.
About WatchGuard
WatchGuard® Technologies, Inc. is a global leader in network
security, providing best-in-class Unified Threat Management, Next
Generation Firewall, secure Wi-Fi, and network intelligence products
and services to more than 75,000 customers worldwide. The
company’s mission is to make enterprise-grade security accessible
to companies of all types and sizes through simplicity, making
WatchGuard an ideal solution for Distributed Enterprises and SMBs.
WatchGuard is headquartered in Seattle, Washington, with offices
throughout North America, Europe, Asia Pacific, and Latin America.
To learn more, visit WatchGuard.com.
For additional information, promotions and updates, follow
WatchGuard on Twitter, @WatchGuard on Facebook, or on the
LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for
real-time information about the latest threats and how to cope with
them at www.secplicity.org.
Address
505 Fifth Avenue South
Suite 500
Seattle, WA 98104
Support
www.watchguard.com/support
U.S. and Canada +877.232.3531
All Other Countries +1.206.521.3575
Sales
U.S. and Canada +1.800.734.9905
All Other Countries +1.206.613.0895
WatchGuard Technologies, Inc. 3

Contents
WatchGuard AP332CR Hardware Guide 6
Access Point Management 7
About Your Hardware 7
Hardware Specifications 7
Environmental Requirements 8
Hardware Description 9
Bottom Panel 9
Top Panel 9
Rear Panel 10
Side Panel 10
Mount and Connect the Access Point 15
Wall Mount Installation 16
Pole Mount Installation 17
Antenna Installation 18
Connect the Ground Wire 18
Connect the Access Point 19
How to Assemble the Weatherproof Connector 20
How to Disassemble the Weatherproof Connector 21
Ethernet Power Injector (Optional) 22
Notices 24
Safety Warning 24
FCC Certification 24
CENotice 25
Industry Canada Certification 25
EUDeclaration of Conformity 27
Brazil ANATEL 29
4 WatchGuard Technologies, Inc.

CISPR 22 Statement 29
Mexico NOM 29
Japan Statement 29
Japan VCCIClass B Statement 29
Taiwan NCCStatement 29
RoHS Statement 30
WEEE Statement 30
REACH Certificate of Compliance 30
Declaration of Conformity 32
WatchGuard Technologies, Inc. 5

WatchGuard AP332CR Hardware Guide
WatchGuard AP332CR Hardware Guide
The WatchGuard AP332CR is designed for indoor or rugged outdoor deployment conditions and built
with an industrial-rated IP67 enclosure.
The AP332CR features 802.11ax 2x2 2.4 GHz and 5 GHz dual concurrent radios that support data rates
up to 1148 Mbps on the 2.4 GHz band and 2402 Mbps on the 5 GHz band.
Power is provided by a PoE+ (Power over Ethernet) power source.
WatchGuard Technologies, Inc. 6

Access Point Management
You can manage the AP332CR with WatchGuard Cloud. WatchGuard Cloud delivers a simplified
platform for Wi-Fi management to easily deploy, configure, and monitor your wireless networks.
For more information on how to set up your access point with WatchGuard Cloud, see
watchguard.com/start.
About Your Hardware
Hardware Specifications
Hardware Description
Processor Qualcomm Cypress IPQ6010-0 Cypress Quad-core A53 1.8GHz
Memory nNOR Flash 8MB
nNAND Flash 256MB
nRAM: DDR3L 512MB x 2
Radios nRadio 1: 2.4 GHz 2x2 802.11b/g/n/ax
nRadio 2: 5 GHz 2x2 802.11a/n/ac/ax
Antennas n2 x 2.4 GHz, 5 dBi
n2 x 5 GHz, 5 dBi
4 x omnidirectional antennas are included.
Note:The device must have antennas connected for full range and
functionality.
Ethernet Interfaces 1 x 2.5 GbE Ethernet port
Power Interface PoE+ 802.3at 48-57V DC
Power Consumption nAverage: 11.52W
nPeak: 11.98W
MTBF
(Mean Time Between
Failures)
25,000 hours at 25˚C / 77˚F
Dimensions 190mm x 124mm x 47mm (7.5” x 4.9” x 1.85”)
Weight
0.82 kg (1.8 lbs)
WatchGuard AP332CR Hardware Guide
7 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
Environmental Requirements
To safely install your WatchGuard access point, we recommend that you:
nInstall the device per local regulations
nMake sure the device has adequate clearance for air flow and cooling
This equipment is not suitable for use in locations where children are likely to be present.
Other environmental requirements:
Operating Temperature -20°C to 60°C (-4°F to 140°F)
Operating Humidity 5% to 95% non-condensing
Non-operating Temperature -40°C to 80°C (-40°F to 176°F)
Non-operating Humidity 5% to 95%, non-condensing
WatchGuard Technologies, Inc. 8

Hardware Description
Bottom Panel
2.4GHz
Antenna connector for the 2.4 GHz radio.
LAN (PoE)
The LAN (PoE) port is a 2.5 GbE port that connects the access point to a wired LAN connection
through a switch or hub. This port also provides PoE+ (802.3at) power for the access point.
5GHz
Antenna connector for the 5 GHz radio.
Top Panel
5GHz
Antenna connector for the 5 GHz radio.
2.4GHz
Antenna connector for the 2.4 GHz radio.
WatchGuard AP332CR Hardware Guide
9 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
Rear Panel
Ground Connector
Use the included ground screw to attach the ground wire to the ground connector on the rear of the
access point and attach the other end of the wire to a nearby grounding point.
Side Panel
LED Indicators
The access point has LED indicators that can show status conditions for the device connection to
WatchGuard Cloud. The LED indicator status depends on the firmware version on the device.
Access Point Firmware 1.1.7-0 and Higher
Wi-Fi in WatchGuard Cloud access points that run firmware 1.1.7-0 and higher have LEDindicators
that can show different status conditions while booting, activation validation, feature key download,
WatchGuard Cloud device registration, and the connection to WatchGuard Cloud.
The access point briefly passes through each stage until the device is connected to WatchGuard
Cloud and shows a solid blue LEDindicator. If the access point remains in the same state for a long
period of time without a solid blue LED indicator status, there might be a network issue, activation or
feature key issue, or a problem with your WatchGuard Cloud account.
Check the following table for the status of the LEDindicators and how to troubleshoot the issue.
WatchGuard Technologies, Inc. 10

LEDColor Status Troubleshooting
Solid Red or
Orange
Device is
booting
If the access point remains in this state, the access point
processes might not have started, or there might be an issue
with the access point firmware.
nDisconnect and reconnect power to reboot the access
point to see whether the device connects.
nTry to log in to the access point command line interface
(CLI) to check the device status, current firmware
version, and run diagnostic tests. For more information,
see AccessPoint Command Line Interface.
Flashing Red or
Orange
(Fast:100
milliseconds)
Validate
access point
activation and
download
feature key
If the access point remains in this state:
nMake sure you have activated your access point with a
valid device serial number and license key in your
WatchGuard account. The license key must be for a
WatchGuard Standard or USP Wi-Fi license for Wi-Fi in
WatchGuard Cloud.
nMake sure the access point is connected to the network
and has received an IPaddress from DHCP.
nMake sure the access point can connect to
*.watchguard.io for product activation and feature key
updates.
nIf you set up an access point behind a firewall that
performs inspection on HTTPS traffic, you must add
*.watchguard.io to the content inspection exception /
bypass list to enable the access point to receive a
feature key from WatchGuard servers. On the
WatchGuard Firebox, this is enabled by default for
cloud-managed Fireboxes in WatchGuard Cloud.
nUse the access point command line interface (CLI) to
check the feature key status, download a feature key,
and run diagnostic tests. For more information, see
AccessPoint Command Line Interface.
Flashing Red or
Orange
(Medium: 500
milliseconds)
WatchGuard
Cloud device
registration
If the access point remains in this state:
nMake sure access point can connect to
*.watchguard.com for WatchGuard Cloud device
registration.
WatchGuard AP332CR Hardware Guide
11 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
LEDColor Status Troubleshooting
nFor service providers, make sure you have allocated the
access point from your inventory to a subscriber
account. For more information, see Access Point
Allocation.
nMake sure you have added the access point to your
WatchGuard Cloud subscriber account. For more
information, see Add an Access Point to WatchGuard
Cloud.
Flashing Red or
Orange
(Slow: 2
seconds)
Connection to
WatchGuard
Cloud servers
If the access point remains in this state:
nMake sure the access point can connect to
*.watchguard.com for WatchGuard Cloud management
connections and is not blocked by a firewall or other
network device.
nMake sure you do not have an expired MSSPlicense for
the access point.
nCheck the access point allocation status to see whether
the device was deallocated from the subscriber account.
Solid Blue Successfully
connected to
WatchGuard
Cloud
Device is online and connected to WatchGuard Cloud.
Flashing Blue Flash LED
action from
WatchGuard
Cloud
LED flashes blue for 60 seconds for identification.
Access Point Firmware 1.1.4-0 and Lower
Wi-Fi in WatchGuard Cloud access points that run firmware 1.1.4-0 and lower have basic
LEDindicators that can show if the device is successfully connected to WatchGuard Cloud.
If the access point remains in the same state for a long period of time without a solid blue LED
indicator status, there might be a network issue, activation or feature key issue, or a problem with your
WatchGuard Cloud account.
Check the following table for the status of the LEDindicators and how to troubleshoot the issue.
WatchGuard Technologies, Inc. 12

LEDColor Status Troubleshooting
Solid Red or
Orange
Device is
booting and
connecting to
WatchGuard
Cloud
A permanent solid red or orange LED after booting is very
rarely a hardware issue. It might take several minutes before
the access point successfully connects to WatchGuard Cloud.
In most cases a network issue, blocked port, licensing, or
WatchGuard Cloud account issue will result in the access point
not connecting or appearing in your WatchGuard Cloud
account.
nMake sure you have activated your access point with a
valid device serial number and license key in your
WatchGuard account.
nIf you are a service provider, make sure you have
allocated the activated access point to a subscriber
account in WatchGuard Cloud. For more information, see
Access Point Allocation.
nMake sure you have added the access point device to your
WatchGuard Cloud subscriber account. For more
information, see Add an Access Point to WatchGuard
Cloud.
nIf you have configured DHCP, make sure your access
point has received an IP address from DHCP and can
connect to the network.
nAccess points use TCP port 443 to connect to
WatchGuard Cloud. Access points must also be able to
connect to these destinations:
o
*.watchguard.io for product activation and feature key
updates
o
*.watchguard.com for WatchGuard Cloud registration
and connections
nIf you set up an access point behind a firewall that
performs inspection on HTTPS traffic, you must add
*.watchguard.io to the content inspection exception /
bypass list to enable the access point to receive a feature
key from WatchGuard servers. On the WatchGuard
Firebox, this is enabled by default for cloud-managed
Fireboxes in WatchGuard Cloud.
Use the access point command line interface (CLI) to check the
feature key status, download a feature key, and run diagnostic
tests. For more information, see AccessPoint Command Line
Interface.
WatchGuard AP332CR Hardware Guide
13 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
LEDColor Status Troubleshooting
Flashing Red
or Orange
Device cannot
connect to
WatchGuard
Cloud
This can occur for several reasons, for example:
nDevice did not receive an IPaddress from DHCP
nDevice cannot connect to *.watchguard.com or
*.watchguard.io because of a network issue or blocked
port
Use the access point command line interface (CLI) to run
network connectivity diagnostic tests. For more information,
see AccessPoint Command Line Interface.
Solid Blue Successfully
connected to
WatchGuard
Cloud
Device is online and connected to WatchGuard Cloud.
Flashing Blue Flash LED
action from
WatchGuard
Cloud
LED flashes blue for 60 seconds for identification.
Current factory default access points ship with firmware version 1.1.4-0 or lower.
WatchGuard Technologies, Inc. 14

Mount and Connect the Access Point
Your package includes these accessories:
The MAC address and serial number of your access point are printed on a label on the
back of the device. Make sure you record this information before you mount the
device.
WatchGuard AP332CR Hardware Guide
15 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
Wall Mount Installation
Use the supplied wall-mounting accessories to install the access point on a wall.
1. Mark the location on the wall surface for the four mounting holes of the wall mounting bracket.
nUse an appropriate drill bit to drill holes that are 8.1mm diameter and 26mm depth in the
markings and hammer the bolts into the openings.
nScrew the anchors into the holes until they are flush with the wall.
2. Screw the included screws into the anchors.
3. Slide the mount bracket into the slot of the access point.
WatchGuard Technologies, Inc. 16

Pole Mount Installation
Use the supplied pole mount accessories to install the access point on a pole.
1. Insert the pole mount clamps in the tabs on the mounting bracket and wrap the clamps around the
pole.
2. Attach the access point to the mounting bracket and tighten the straps to make sure the access point
is firmly attached to the pole.
WatchGuard AP332CR Hardware Guide
17 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
Antenna Installation
The access point includes four antennas.
nThe access point requires two antennas for each radio.
nOn the top and bottom of the access point, there are two connectors for the 2.4 and 5 GHz radios
nInsert the antennas into the connectors for each radio and turn clockwise to tighten.
The device must have antennas connected for full range and functionality.
You can use other third-party omnidirectional and directional antennas based on your deployment
requirements. If you use other third-party antenna types, you are responsible for verifying compliance
with regional-based regulations based on the peak gain values.
Connect the Ground Wire
To make sure your access point is safely protected from electrical events, we recommend you ground the
access point according to your local regulations.
Use the included screw to attach the ground wire to the ground connector on the access point and attach
the other end of the wire to a nearby grounding point.
WatchGuard Technologies, Inc. 18

Connect the Access Point
Plug one end of the Ethernet cable from your network into the LAN (PoE) port on the bottom panel of the
access point.
Make sure the other end of the Ethernet cable is connected to your network through a hub, switch, or
injector with PoE+ (802.3at) power enabled.
WatchGuard AP332CR Hardware Guide
19 WatchGuard Technologies, Inc.

WatchGuard AP332CR Hardware Guide
How to Assemble the Weatherproof Connector
Use these instructions to connect the Ethernet cable to the access point through the weatherproof
connector.
WatchGuard Technologies, Inc. 20