Using same cabling, VLAN tags etc, plugged in new AP130's, power up, never connect. 1 connected but then disconnected, when it was working it had an IP and was passing traffic at expect speed. We've only replaced 5 units and expected them to just work, am I missing something?? We need to get this working before the end of this month. I will be onsite again next week. Surely deploying AP's cant be this hard??

Using plink, this is the command that should work:

"C:\Program Files\PuTTY\Plink.exe" -v -ssh 192.168.145.229 -l admin -pw "clear_text_pass" -batch reboot

Using Posh-SSH, it should be this:

$User = "admin"
$PWord = ConvertTo-SecureString -String "clear_text_pass" -AsPlainText -Force
$UserCredential = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $PWord
New-SSHSession -ComputerName 192.168.145.229 -Credential $UserCredential -Verbose
Invoke-SSHCommand -SessionId 0 reboot
Remove-SSHSession -SessionId 0

But neither work and exit with "Not support for admin account."

Has anyone been successful yet in scripting a reboot?

dcc

Thanks in advance

Has anyone managed to get dynamic vlan assignment working with cloud WiFi and Radius (Clearpass in this case). If i setup the site to use SSID assigned VLANS they all work individually, but if i set it to assign VLAN dynamically it just sets it to untagged and no IP is assigned.
I've configured clearpass to send IETF type 81 and the VLAN to the various ones available, but it seems to be ignoring it.
Are there any other values i need to be sending back?

RADIUS Response
Radius:IETF:Filter-Id Test
Radius:IETF:Tunnel-Private-Group-Id 50

thanks

We have two AP330s in use, each for one part of the building.

The problem we are currently experiencing is that the connection to one access point is interrupted from time to time, so that it is not possible to work properly in a meeting room, for example, as you are constantly kicked out of the meeting.

Access Point with issues:

Access Point working without any issues:

Is there maybe any STP related issue?

The SSIDs are set up as WPA3-Enterprise, which also works without any problems.

The access points are connected to an Aruba 2930F PoE+ switch.

The location is in Germany and the settings have already been adjusted several times according to a best practice guide, but without much success.

I no longer have any clues as to what exactly I need to look for. Before the AP330, we had two AP120s, which did not cause these problems.

Best regards,
dankoon

After numerous attempts and adjustments to the settings, we finally found a configuration that seems to make our Wi-Fi network more stable. I would like to share this configuration to help those who may encounter similar issues.

...::: Configuration :::...

1. ThreatSync - Device Settings
Start by disabling ThreatSync for all your access points to avoid any conflicts or stability issues related to this feature.

2. Shared Configuration - Access Point Sites
Wi-Fi Networks - SSID
Configure your SSIDs so that they only broadcast on a single band:

• 2.4 GHz Band: This allows for greater distance coverage but with slightly slower speed. Ideal for environments that require a wider range.
• 5 GHz Band: This provides faster speeds but over a shorter distance. Recommended for maximum performance in closer proximity.
  
  

3. Radio Settings - 2.4 GHz

• Wireless Mode: 802.11 n
• Candidate Channels: 1, 6, 11
• Channel Width: 20 MHz

• Transmission Power: Automatic
  In the advanced tab:

• Enable "Fast Roaming"

• Disable "Allow 802.11 b/g" (to prevent slower, older technology usage)

4. Radio Settings - 5 GHz

• Wireless Mode: 802.11 ax
• Use all Non-DFS Channels (for better performance and compatibility)
• Channel Width: 80 MHz

• Transmission Power: Automatic
  In the advanced tab:

• Enable "Fast Roaming"

• Disable "Allow 802.11 a" (similar to the 2.4 GHz band, to avoid using outdated standards)
  
  
  
  
  

5. Advanced Settings

• Enable "Spectrum Monitoring" (for proactive interference detection)
• Approved Access Points List: Add the MAC addresses of your trusted Wi-Fi access points, including your WatchGuard access points, to prevent them from being detected as potential "Evil Twin" access points.
  
  

This configuration can now be deployed.

Are any possibilites for Watchguard implements Social (Google,Facebook etc..) login and/or forcing auth code when people use captive portal login?
i have two ap 130 configure with watchguard cloud
Everything work ok, but in splash page there are only possibility to configure splash page with three "options" only required, but totally random (no controls for phone,emails etc... users can type random chars and login too)

Thanks All

We are using some AP432 and - like said in the topic - the mDNS hostname not only differs from the "standard" ip/snmp hostnamebut changes from time to time.

i.e. hostname: AP022 // mDNS-hostname: AP432-12 (next day or so AP432-039)

Is there a way to set mDNS permanently equal to the hostname?

Thanks in advance
.K.

Stumbled across a small problem and is wondering if there's some sort of configuration error or design flaw in our setup.

We have been using Authpoint Logon app for some time with our office as Safe Zone excluding that network from Authpoint prompts. Since a week ago I've been playing around with Network Access Enforcement on one of our SSID:s. We have EPDR on all our machines.

The problem/quirk:

When connected to the SSID with NAE activated (no rj45 to network), you're always prompted for Authpoint Login, since the NAE checking for EPDR needs to pull up a web browser to perform the check (from what I can tell the splashpage is the AP gateway performing the check). And when you're not logged in that doesn't happen, check fails. You get no internet, and Authpoint doesn't know where you are. Since you dont have a established internet connection you can't use push notification to your app and have to use OTP or scan QR code to logon. Not very user friendly applying NAE to your SSID:s in conjunction with Authpoint Logonapp.

After that the session is valid for 24h before next NAE check, which also is strange..

Is there a workaround to be able to smoothly use this security feature?

Thanks in advance for any clarification on the matter.

Resolve Wi-Fi disconnects from Watchguard AP SSID on certain notebook computers. This appears to be a known issue in the Intel community.

Settings

The following client adapter settings resolve the frequent connect/disconnect events reported in Watchguard Cloud.

802.11a/b/g Wireless Mode -- 5GHz 802.11a
802.11n/ac/ax Wireless Mode -- 802.11ax
Channel Width for 2.4GHz -- 20 MHz Only
Channel Width for 5GHz -- 20 MHz Only
Preferred Band -- Prefer 5GHz band
Roaming Aggressiveness -- lowest

Issue was 1st reported on customer Dell Latitudes after connecting to an SSID. This issue is not with Watchguard Cloud but is a larger issue involving this particular Intel chipset. Hope this is helpful to someone.

How do i update the firmware on the AP 330 without connecting to the cloud since the cloud always show the device is never connected? i have the firmware on a usb drive and need to know how to upgrade manually via command line.

The goal is to hang a couple of AP130s off the switch, and a dumb-switch for general desktop use, off the E8 switch. I'll have two wireless VLANs - internal and guest networks - and I'll have desktops and printers, etc. wired in. I'd love it if I could bridge the internal WLAN and the LAN, but I'll settle for just creating bidirectional routing between them, if that's what is necessary.

I'm new at working with Watchguard, and not all that familiar with the Datto switches yet. So I'm not sure what I need to do on the various devices to get this to work. Wish Watchguard also made switches....

I have no idea where to look at for a solution. may someone can help.

Thx a lot, Michael

Am I overlooking a setting for example for regular scanning for other networks or thelike, which may be a cause?

The AP325 is end-of-sale already but end-of-life on December 21, 2026.

The AP330 is not compatible with the AP325 network because one if Wi-Fi 5 and the other is Wi-Fi 6.

My initial idea was to add several AP330's and just define the same SSID's on the AP330's, then devices will roam between the AP325's and AP330's, but WG Support says the different AP types won't play nicely with each other due to power detection differences between the 2 models.

Questions:

How do we expand his existing wireless network if we can't get AP325's anymore?

Has anyone tried mixing AP types like this and if so, how did it work out?

How have others dealt with this issue?

I have what I thought was a simple setup of four AP420s and one AP125 that are cloud managed. Things have been fine for a year and a half until a week ago. For some reason all four of my AP420s have turned off their radios and we can't get them to turn back on. I believe this "may" be associated with the last firmware update, but not absolutely sure.

We have four SSIDs, one of which stays off except for in house customer demo days for our software. So three SSIDs are broadcast all of the time. There were no VLANS in place, no special settings or configuration. I was about to setup VLAN and segregate things a bit more last week when the AP420s decided to turn off their radios.

We have a M470 cluster setup in the office with the access points, but the APs are all cloud managed. We do have an open support case, but it keeps getting escalated and we haven't heard from anyone at Watchguard in three days now, still waiting.

We've tried going into each AP and turning the radios on. The cloud interface in monitor > Wifi > Radios shows them all as "Turning on Radio" as their status. We factory reset one AP as a test with no change. We've deleted and recreated our SSIDs with no change. We've added a new SSID with no change.

Everything is working fine with the AP125.

Thinking really deeply about this, it has to be one of three things:

1. Problem with something in the cloud management
2. Problem with the policies loading into the APs
3. A power issue, too much or two little.

All five APs are connected to an eight port unmanaged switch that provides PoE to the APs. We disconnected one AP420 to reduce the power load on the switch, there was no change. A test meter shows the proper 48 volt output on all five cables running to the APs.

We are at our wits end trying to solve this. I can't believe all four AP420s would fail at the same time. Has anyone experienced anything like this? Any thoughts on how to solve this?

Thank you,

William E Ott
FirstWatch Solutions

I have 5 AP325s in one of our offices and it appears that when any device connects to our WiFi, they are connected to the same network as the Windows devices.

On another site, there are 3 x AP330s. They have been set up individually to allow a number of devices to connect. This is time consuming to setup on each device. Is there a way to manage all 3 in a centralised load balancing type scenario?
As you can tell I am new to Watchguard and have inherited this system which I am trying to see what limitations it has.

We're currently using around 60 AP432 on our networks, all managed through Watchguard Cloud.
Is-it possible to use "discover.watchguard.cloudwifi.com" with these AP's, or is-it only possible through "cloud.watchguard.com" ?
The fact is that the numbers of available options, like WIPS on the first one is much easier to manage security & access & monitoring...
For example, I would like to manage the alerting options on the AP's (like turning off NTP alerts), or activating WIPS...
If you have any recommandations or advice, thanks .

I was trying to follow the guide here to create a Captive Portal for our Guest WiFi, but the 'Cloud Hosted' option is missing. We only get AP hosted or ThirdParty hosted options.

What we're trying to accomplish is to enable either Social or Username/password auth.

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Wi-Fi-Cloud/getting_started/captive_portal.html

Thank you

Lastly, do I need to completely remove my current WiFi 5 network and devices before installing the WiFi 6 network and devices? I ask this because if I install a new AP with the same SSID and password as my existing network, the WIPS on the AP 5's will block or quarantine anything trying to connect to the new AP and mark it as rogue.

I have read all the technical documentation here:

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/WG-Cloud/Devices/access_point/ap_wgc_get_started.html

Along with watching videos and demonstrations by WG Partners, but can't seem to find definitive answers as to a migration strategy or what security / monitoring features are available in the new cloud.

Any insight would be much appreciated :-)

• Doug