Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=wireless-SSID-settings

Settings

Configure, assign, and save basic SSID settings.

Go to My Products > Wireless > SSIDs and click Settings.

Configure basic settings for your SSID.

Basic settings

SSID

Enter a name. SSIDs are case-sensitive and must satisfy the following criteria:

  • A minimum of 1 printable character.
  • A maximum of 32 printable characters.
  • No space at the beginning or end of the name.

We recommend using ASCII printable characters to avoid display errors on connecting devices.

Type

Choose whether you're configuring this SSID for APX or AP6 series access points.

Encryption mode

Select the encryption mode.

We recommend that you use the strongest encryption mode possible for your environment. The following table shows the supported encryption modes:

Access point Encryption modes
APX

WEP

WPA Personal and Enterprise

WPA2 Personal and Enterprise
AP6

WPA2 Personal and Enterprise

WPA3 Personal and Enterprise

WPA2/WPA3 Personal

OWE

Restriction

You must choose WPA2/WPA3 or WPA3 encryption if configuring the 6 GHz band.

Encryption algorithm

Select the encryption algorithm. The default algorithm is Advanced Encryption Standard (AES). We recommend using this as it's a quick and strong cipher and is widely accepted.

Note

AP6 series access points only support AES.

RADIUS server IP

You must configure a RADIUS server for your network when using an enterprise authentication method.

Sophos Central allows you to configure a RADIUS server for each SSID that uses an enterprise authentication method. AP6 series access points support a primary and secondary RADIUS server for each frequency band (2.4 GHz, 5 GHz, 6 GHz). If you assign multiple SSIDs with different RADIUS servers to an AP6 access point, you can see the following behavior:

  • Sophos Central assigns the RADIUS server you configure as the primary RADIUS server for each frequency band configured for the SSID.
  • When you assign an SSID with enterprise authentication and RADIUS configured on the same frequency band, the update overwrites the existing primary RADIUS server with the new SSID RADIUS server configuration.

RADIUS port

Enter the port to use for RADIUS authentication. The default is 1812.

Passphrase

Enter a passphrase to protect the SSID from unauthorized access. The passphrase must be 8 - 63 ASCII printable characters.

Frequency band

Select the frequency band. The access points assigned to this SSID will transmit on the selected frequency bands. Higher frequency bands offer better performance but have a reduced range.

We recommend using the 5 GHz frequency band for Voice over IP (VoIP) communication. It has higher performance, lower latency, and less interference.

Enable mesh mode

You can create a mesh network to connect access points that don't have LAN access. If you want to turn the mesh network off, you must delete the SSID.

Note

Only one mesh network per SSID is allowed.

Assign network

Assign one or more access points to your SSID. APX access points can have a maximum of eight SSIDs per band. AP6 access points support up to 16 SSIDs per band.

  • Multiple Access points: Assign the available and registered access points.
  • Add Access points later: Assign the access points later by editing the SSID.

Tip

You can also add access points later from the access point details page. See Assigned SSIDs.

Save configuration

Save your basic settings.

  • Enable SSID: You can turn on the SSID that you just created. If you want to turn the SSID off, deactivate it after saving your configuration.