Access point details

You can add wireless networks to the access point to provide separate wireless networks for different zones, for example, a company network in offices and a guest network in public areas. You can also use the access point to broadcast a mesh network. Use these settings to select networks and to specify advanced settings such as channel, transmission power, and VLAN tagging.

To add a wireless network to the access point, click Add new item and select a wireless network.
To broadcast a mesh network using the access point, click , select a network, and specify a role.

Tip To manage network settings for more than one access point at a time, use access point groups.

Edit access point

ID: Access point ID (serial number).
Label: Label or identifier of the access point on your network.
Country: Country where the access point is located. The country setting determines the available channels.
Note In the Sophos APX series access point, when you change the country, the channel list shows only the Auto option until you save the settings. Also, until the Sophos APX series access point reboots and is up, it retains the previously configured country's channel list.
Group: Group to which the access point belongs.

Mesh networks

Select the mesh networks that should be broadcast by the AP. You can also add APs that should broadcast mesh networks from this page by clicking Create new.

For APX access points, there's no need to specify the mesh role. If the mesh-enabled SSID is pushed to two APXs, the one with the existing Ethernet connection to the XG Firewall becomes the root AP. Once the mesh-enabled SSIDs are pushed to the APXs, it’s advisable to reboot them.

Mesh networks can only be created between access points of the same series, for example, APX access points can only create a mesh network with other APX access points.

Note This option will appear only if a mesh network is configured.

Note Access points other than AP 10 and AP 30 can broadcast mesh networks.

Advanced settings

Bridge to Ethernet: Turn it on to bridge the local wireless access point to Ethernet. The existing DHCP server will be used for the bridge port. If a DHCP server does not exist, a new server is automatically created. If you turn it off, the bridge is deleted and all configurations are restored to the physical interface.
Note This feature is available only for IPv4 configurations and applicable only for the SSIDs that are of type, “Bridge to LAN”.
Port to bridge: Select the port for bridge connection.
Note The interface must have an IP address and should not belong to the WAN port or any other bridge. Bridging between VLAN interface and local Wi-Fi is not allowed.
Zone: Select the zone for the bridge connection. You cannot select the WAN zone here.

Channel 2.4 GHz/5 GHz: Channel settings for 2.4 GHz and 5 GHz bands.
Note Selecting Auto will automatically select the least used channel for transmission. This improves transmission quality and speed.
Note For APX 320, both radios must be on 5 GHz to enlist all available channels.
Channel width: Select the channel width for band 2.4 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.
Default: 20 MHz
Channel width 5 GHz: Select the channel width for band 5 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.
Default: 40 MHz
Dyn chan: Allows the access point to scan for best channel at regular intervals.
Time-based scan (available if Dyn chan is enabled): Allows you to specify a scanning time.
Select scan-time (available if Time-based scan is enabled): Click Add new item and select a scanning time schedule.
TX power: Controls the power of outbound transmissions from the router to the antenna. Adjusting the power can help with coverage and data rate. Reducing the power means reducing the operating distance, for example to minimize interference.
TX power 5 GHz: Select the transmission power for the AP.
Default: 100%
STP: The Spanning Tree Protocol (STP) prevents bridge loops.
VLAN tagging: Connects the access point with the specified VLAN interface.
AP VLAN ID: VLAN ID to be used for VLAN tagging.