Access point details

Add wireless networks to the access point to provide separate wireless networks for different zones, for example a company network in offices and a guest network in public areas.

You can also use the access point to broadcast a mesh network.

Use these settings to select networks and to specify advanced settings such as channel, transmission power, and VLAN tagging.

  • To add a wireless network to the access point, click Add new item and select a wireless network.
  • To broadcast a mesh network using the access point, click Add Add button, select a network, and specify a role.
Tip To manage network settings for more than one access point at a time, use access point groups.

Edit access point

Access point ID (serial number).
Label or identifier of the access point on your network.
Country where the access point is located. The country setting determines the available channels.
Note In the Sophos APX series access point, when you change the country, the channel list shows only the Auto option until you save the settings. Also, until the Sophos APX series access point reboots and is up, it retains the previously configured country's channel list.
Note Radio 0 for APX 320 in Israel supports only 2.4GHz.
Group to which the access point belongs.
Mesh networks

Select the mesh networks that should be broadcast by the AP. You can also add APs that should broadcast mesh networks from this page by clicking Create new.

Mesh networks can only be created between access points of the same series. For example, APX access points can only create a mesh network with other APX access points.

For APX access points, there's no need to specify the mesh role. If the mesh-enabled SSID is pushed to two APXs, the one with the existing Ethernet connection to the Sophos XG Firewall becomes the root AP. Once the mesh-enabled SSIDs are pushed to the APXs, it’s advisable to restart them.

Note This option will appear only if a mesh network is configured.
Note Access points other than AP 10 and AP 30 can broadcast mesh networks.

Advanced settings

Bridge to Ethernet
Turn it on to bridge the local wireless access point to Ethernet. The existing DHCP server will be used for the bridge port. If a DHCP server does not exist, a new server is automatically created. If you turn it off, the bridge is deleted and all configurations are restored to the physical interface.
Note This feature is available only for IPv4 configurations and applicable only for the SSIDs that are of type, Bridge to LAN.
Port to bridge
Select the port for bridge connection.
Note The interface must have an IP address and should not belong to the WAN port or any other bridge. Bridging between VLAN interface and local Wi-Fi is not allowed.
Select the zone for the bridge connection. You cannot select the WAN zone here.
Channel 2.4 GHz/5 GHz
Channel settings for 2.4 GHz and 5 GHz bands.
Note Selecting Auto will automatically select the least used channel for transmission. This improves transmission quality and speed.
Note For APX 320, both radios must be on 5 GHz to enlist all available channels.
Channel width
Select the channel width for band 2.4 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.

Default: 20 MHz

Channel width 5 GHz
Select the channel width for band 5 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.

Default: 40 MHz

Dyn chan
Allows the access point to scan for best channel at regular intervals.
Time-based scan
Available if Dyn chan is enabled. Allows you to specify a scanning time.
Select scan-time
Available if Time-based scan is enabled. Click Add new item and select a scanning time schedule.
TX power
Controls the power of outbound transmissions from the router to the antenna. Adjusting the power can help with coverage and data rate. Reducing the power means reducing the operating distance, for example to minimize interference.
TX power 5 GHz
Select the transmission power for the AP.

Default: 100%

The Spanning Tree Protocol (STP) prevents bridge loops and the broadcast radiation that results from them. STP is a network protocol that builds a logical loop-free topology for Ethernet networks. It also allows a network design to include redundant links to provide automatic backup paths if an active link fails.
VLAN tagging
Connects the access point with the specified VLAN interface.
VLAN ID to be used for VLAN tagging.