Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=wireless-SSID-settings

Settings

The Settings tab lets you configure, assign, and save basic SSID settings when creating or editing an SSID.

To create a new SSID, go to My Products > Wireless > SSIDs, click Create AP6 or Create APX, then click SSID.

To edit an existing SSID, go to My Products > Wireless > SSIDs and click the name of the SSID you want to edit.

Basic settings

You can configure the following basic settings for your SSID:

  • SSID: The name of the SSID. SSIDs are case-sensitive and must be between 1 and 32 printable characters. We recommend using ASCII printable characters to avoid display errors on connecting devices. When you save the SSID, Sophos Central discards any spaces at the beginning or end of the SSID name.

  • Encryption mode: The encryption method to use for the SSID. We recommend you use the strongest encryption mode possible for your environment. The following table shows the supported encryption modes:

    Access point Encryption modes
    APX

    WEP

    WPA Personal and Enterprise

    WPA2 Personal and Enterprise
    AP6

    WPA2 Personal and Enterprise

    WPA3 Personal and Enterprise

    WPA2/WPA3 Personal

    OWE

    Restriction

    You must choose WPA2/WPA3 or WPA3 encryption if configuring the 6 GHz band.

  • Encryption algorithm: The encryption algorithm to use for the SSID. The default algorithm is Advanced Encryption Standard with a 256-bit key (AES-256). We recommend using this algorithm as it's a quick and strong cipher and is widely accepted.

    Note

    AP6 series access points only support AES.

  • RADIUS server IP: The IP address of the server you want to use for RADIUS authentication. When using an enterprise authentication method, you must configure a RADIUS server for your network.

    Sophos Central allows you to configure a RADIUS server for each SSID that uses an enterprise authentication method. AP6 series access points support a RADIUS server for each frequency band (2.4 GHz, 5 GHz, 6 GHz). If you assign multiple SSIDs with different RADIUS servers to an AP6 access point, you can see the following behavior:

    • Sophos Central assigns the RADIUS server you configure as the RADIUS server for each frequency band configured for the SSID.
    • When you assign an SSID with enterprise authentication and RADIUS configured on the same frequency band, the update overwrites the existing RADIUS server with the new SSID RADIUS server configuration.

    Note

    You must configure your network policy server to allow network access servers, such as Sophos access points, to communicate with your RADIUS authentication server. This includes configuring firewalls for RADIUS traffic and creating RADIUS clients, connection request policies, network access policies, and PEAP certificates. See Manage Network Policy Server (NPS).

  • RADIUS port: The port to use for RADIUS authentication. The default is 1812.

  • Passphrase: The passphrase protects the SSID from unauthorized access. The passphrase must be between 8 and 63 ASCII printable characters.

  • Frequency band: The frequency bands used to broadcast the SSID. The access points assigned to this SSID will transmit on the selected frequency bands. Higher frequency bands offer better performance but have a reduced range. Choose from the following options:

    • 6 GHz: Recommended for AP6 420E and 840E. Highest bandwidth, very short range.
    • 5 GHz: Best balance of range and bandwidth.
    • 2.4 GHz: Longest range, lowest bandwidth.

    Note

    We recommend using the 5 GHz frequency band for Voice over IP (VoIP) communication. It has better performance, lower latency, and less interference.

Assign network

Assign one or more access points to your SSID. AP6 840 and 840E support up to 16 SSIDs. AP6 420, 420E, 420X, and all APX access points support a maximum of eight SSIDs. Access points with a mesh SSID assigned to them can have four SSIDs in addition to the mesh SSID.

  • Multiple Access points: Assign the available and registered access points.
  • Add Access points later: Assign the access points later by editing the SSID.

Tip

You can also add access points later from the access point details page. See Assigned SSIDs.

Save configuration

Save your basic settings.

Select Enable SSID to turn on the SSID that you just created. If you want to turn the SSID off, deactivate it after saving your configuration.