Settings
Configure, assign, and save basic SSID settings.
Go to My Products > Wireless > SSIDs and click Settings.
Configure basic settings for your SSID.
Basic settings
SSID
Enter a name. SSIDs are case-sensitive and must satisfy the following criteria:
- A minimum of 1 printable character.
- A maximum of 32 printable characters.
- No space at the beginning or end of the name.
We recommend using ASCII printable characters to avoid display errors on connecting devices.
Type
Choose whether you're configuring this SSID for APX or AP6 series access points.
Encryption mode
Select the encryption mode.
We recommend that you use the strongest encryption mode possible for your environment. The following table shows the supported encryption modes:
Access point | Encryption modes |
---|---|
APX | WEP WPA Personal and Enterprise WPA2 Personal and Enterprise |
AP6 | WPA2 Personal and Enterprise WPA3 Personal and Enterprise WPA2/WPA3 Personal OWE |
Restriction
You must choose WPA2/WPA3 or WPA3 encryption if configuring the 6 GHz band.
Encryption algorithm
Select the encryption algorithm. The default algorithm is Advanced Encryption Standard (AES). We recommend using this as it's a quick and strong cipher and is widely accepted.
Note
AP6 series access points only support AES.
RADIUS server IP
You must configure a RADIUS server for your network when using an enterprise authentication method.
Sophos Central allows you to configure a RADIUS server for each SSID that uses an enterprise authentication method. AP6 series access points support a primary and secondary RADIUS server for each frequency band (2.4 GHz, 5 GHz, 6 GHz). If you assign multiple SSIDs with different RADIUS servers to an AP6 access point, you can see the following behavior:
- Sophos Central assigns the RADIUS server you configure as the primary RADIUS server for each frequency band configured for the SSID.
- When you assign an SSID with enterprise authentication and RADIUS configured on the same frequency band, the update overwrites the existing primary RADIUS server with the new SSID RADIUS server configuration.
RADIUS port
Enter the port to use for RADIUS authentication. The default is 1812.
Passphrase
Enter a passphrase to protect the SSID from unauthorized access. The passphrase must be 8 - 63 ASCII printable characters.
Frequency band
Select the frequency band. The access points assigned to this SSID will transmit on the selected frequency bands. Higher frequency bands offer better performance but have a reduced range.
We recommend using the 5 GHz frequency band for Voice over IP (VoIP) communication. It has higher performance, lower latency, and less interference.
Enable mesh mode
You can create a mesh network to connect access points that don't have LAN access. If you want to turn the mesh network off, you must delete the SSID.
Note
Only one mesh network per SSID is allowed.
Assign network
Assign one or more access points to your SSID. APX access points can have a maximum of eight SSIDs per band. AP6 access points support up to 16 SSIDs per band.
- Multiple Access points: Assign the available and registered access points.
- Add Access points later: Assign the access points later by editing the SSID.
Tip
You can also add access points later from the access point details page. See Assigned SSIDs.
Save configuration
Save your basic settings.
- Enable SSID: You can turn on the SSID that you just created. If you want to turn the SSID off, deactivate it after saving your configuration.