Skip to content

Access point details

Add wireless networks to the access point to provide separate wireless networks for different zones, for example a company network in offices and a guest network in public areas.

You can also use the access point to broadcast a mesh network.

Use these settings to select networks and specify advanced settings, such as channel, transmission power, and VLAN tagging.

  • To add a wireless network to the access point, click Add new item and select a wireless network.
  • To broadcast a mesh network using the access point, click Add Add button., select a network, and specify a role.


To manage network settings for more than one access point at a time, use access point groups.

Edit access point


Access point ID (serial number).


Label or identifier of the access point on your network.


Country where the access point is located. The country setting determines the available channels.


  • When you use a Sophos firewall with two Wi-Fi cards, built-in or optional, if you change the country on one card, the change is also applied to the second card. The channel is also set to Auto on both cards.
  • If you change the country in the Sophos APX series access point, the channel list shows only the Auto option until you save the settings. To apply the updated country's channel list, you must restart the access point.
  • Radio 0 for APX 320 in Israel supports only 2.4 GHz.


Group to which the access point belongs.

Mesh networks

Select the mesh networks that the access point must broadcast. You can also click Create new to add access points that must broadcast mesh networks from this page.

You can create mesh networks only between access points of the same series. For example, APX access points can create a mesh network only with other APX access points.

For APX access points, there's no need to specify the mesh role. If the mesh-enabled SSID is pushed to two APXs, the one with the existing Ethernet connection to the Sophos Firewall becomes the root AP. Once the mesh-enabled SSIDs are pushed to the APXs, it’s advisable to restart them.


This option will appear only if a mesh network is configured.


Access points other than AP 10 and AP 30 can broadcast mesh networks.

Advanced settings

Bridge to Ethernet

Turn it on to bridge the local wireless access point to Ethernet. The existing DHCP server will be used for the bridge port. If a DHCP server does not exist, a new server is automatically created. If you turn it off, the bridge is deleted, and all configurations are restored to the physical interface.


This feature is available only for IPv4 configurations and applicable only for the SSIDs that are of type, Bridge to LAN.

Port to bridge

Select the port for bridge connection.


The interface must have an IP address and not belong to the WAN port or any other bridge. Bridging between the VLAN interface and local Wi-Fi isn't allowed.


Select the zone for the bridge connection. You can't select the WAN zone here.

Channel 2.4 GHz/5 GHz: Channel settings for 2.4 GHz and 5 GHz bands.


Selecting Auto will automatically select the least used channel for transmission and improve transmission quality and speed.


For APX 320, both radios must be on 5 GHz to enlist all available channels.

Channel width

Select the channel width for band 2.4 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.

Default: 20 MHz

Channel width 5 GHz: Select the channel width for band 5 GHz. If you increase the channel width, throughput increases in low-density wireless environments and decreases in high-density environments.

Default: 40 MHz

Dyn chan

Allows the access point to scan for the best channel at regular intervals.

Time-based scan

Available if Dyn chan is enabled. Allows you to specify a scanning time.

Select scan-time

Available if Time-based scan is enabled. Click Add new item and select a scanning time schedule.

TX power

Controls the power of outbound transmissions from the router to the antenna. Adjusting the power can help with coverage and data rate. Reducing the power means reducing the operating distance, for example to minimize interference.

TX power 5 GHz

Select the transmission power for the AP.

Default: 100%


The Spanning Tree Protocol (STP) prevents bridge loops and the broadcast radiation that results from them. STP is a network protocol that builds a logical loop-free topology for Ethernet networks. It also allows a network design to include redundant links to provide automatic backup paths if an active link fails.

VLAN tagging

Connects the access point with the specified VLAN interface.


VLAN ID to be used for VLAN tagging.