WatchGuard AP432 Hardware Guide WatchGuard AP432 Access Point WatchGuardTechnologies,Inc. 2 About This Guide Information in this guide is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard Technologies, Inc. Guide revised: 1/24/2022 Copyright, Trademark, and Patent Information Copyright 1998 2022 WatchGuard Technologies, Inc. All rights reserved. All trademarks or trade names mentioned herein, if any, are the property of their respective owners. Complete copyright, trademark, patent, and licensing information can be found in the Copyright and Licensing Guide, available online at https://www.watchguard.com/wgrd-help/documentation/overview. About WatchGuard WatchGuard Technologies, Inc. is a global leader in network security, providing best-in-class Unified Threat Management, Next Generation Firewall, secure Wi-Fi, and network intelligence products and services to more than 75,000 customers worldwide. The companys mission is to make enterprise-grade security accessible to companies of all types and sizes through simplicity, making WatchGuard an ideal solution for Distributed Enterprises and SMBs. WatchGuard is headquartered in Seattle, Washington, with offices throughout North America, Europe, Asia Pacific, and Latin America. To learn more, visit WatchGuard.com. For additional information, promotions and updates, follow WatchGuard on Twitter, @WatchGuard on Facebook, or on the LinkedIn Company page. Also, visit our InfoSec blog, Secplicity, for real-time information about the latest threats and how to cope with them at www.secplicity.org. Address 505 Fifth Avenue South Suite 500 Seattle, WA 98104 Support www.watchguard.com/support U.S. and Canada +877.232.3531 All Other Countries +1.206.521.3575 Sales U.S. and Canada +1.800.734.9905 All Other Countries +1.206.613.0895 WatchGuardTechnologies,Inc. 3 Contents WatchGuard AP432 Hardware Guide Access Point Management About Your Hardware Hardware Specifications Environmental Requirements Hardware Description Bottom Panel Connections Side Panel Connections Device Indicators Mount and Connect the Access Point Ceiling Mount Wall Mount Access PointFree Standing Bracket Connect the Access Point Ethernet Power Injector (Optional) Power Adapter (Optional) Power Adapter Requirements Notices Safety Warning FCC Certification CENotice ISEDStatement EUDeclaration of Conformity Brazil ANATEL CISPR 22 Statement Wall or Ceiling Mount with T-Rail Mount and Spacers 6 6 7 7 8 9 9 10 10 12 12 14 15 16 17 18 20 21 21 21 21 22 22 24 27 27 4 WatchGuardTechnologies,Inc. Mexico NOM Japan Statement Japan VCCIClass B Statement Taiwan NCCStatement RoHS Statement WEEE Statement REACH Certificate of Compliance 27 27 27 27 28 28 28 WatchGuardTechnologies,Inc. 5 WatchGuardAP432HardwareGuide WatchGuard AP432 Hardware Guide The WatchGuard AP432 is a high performance 4x4 Wi-Fi 6 802.11ax access point that supports up to 1148 Mbps data rate on the 2.4 GHz band and 2400 Mbps on the 5 GHz band. The access point also features a 2.5G Ethernet interface.Power is provided by a PoE+ (Power over Ethernet) power source or an optional AC power adapter. Access Point Management You can manage your access point with WatchGuard Cloud. WatchGuard Cloud delivers a simplified platform for Wi-Fi management to easily deploy, configure, and report on your wireless networks. For more information on how to set up your access point with WatchGuard Cloud, see watchguard.com/start. WatchGuardTechnologies,Inc. 6 WatchGuardAP432HardwareGuide About Your Hardware Hardware Specifications Qualcomm IPQ8072A Quad-Core CPU ARM Cortex A53 2.0GHz Hardware Processor RAM Radio Model Antennas Description n Flash: SPI 8MB n NAND: 256MB n RAM: DDR4 2GB n 2.4 GHz: QCN5024 n 5 GHz: QCN5024 n 4 x 2.4 GHz, 5.01 dBi n 4 x 5 GHz, 5.19 dBi Radio Type and Frequency Band n Radio 1: 2.4 GHz 4x4 802.11b/g/n/ax n Radio 2: 5 GHz 4x4 802.11a/n/ac/ax Ethernet Interfaces 1 x 10/100/1000/2500 NBASE-T RJ-45 Gigabit Ethernet Port Power Interface PoE 54V DC 802.3at Power Consumption MTBF
(Mean Time Between Failures) 19.5W TBD Dimensions Weight 205 mm x 205 mm x 33.2 mm (8.07 x 8.07 x 1.31) 0.560 kg (1.234 lbs) 7 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Environmental Requirements To safely install your WatchGuard access point, we recommend that you:
n Install the device indoors n Make sure the device has adequate clearance for air flow and cooling Other environmental requirements:
Operating Temperature 0C to 40C (32F to 104F) Operating Humidity 5% to 90% non-condensing Non-operating Temperature
-30C to 80C (-22F to 176F) Non-operating Humidity 5% to 90%, non-condensing WatchGuardTechnologies,Inc. 8 WatchGuardAP432HardwareGuide Hardware Description The access point has these connections on the bottom panel of the device. Bottom Panel Connections ResetButton Resets the access point to factory-default settings. n Use a paper clip or other small object to press the reset button through the hole. n Press and hold the reset button for up to 10 seconds. When you release the reset button, all LEDs will go off to indicate that the device has rebooted. 2.5G/LAN(PoE+) DC12V This is a 2.5 Gbps Ethernet LAN port that connects the access point to a wired LAN connection through a switch or hub. This port also provides PoE+ (802.3at) power for the device. If PoE power is unavailable, you can power the device with the optional 12V DCpower adapter
(WG9009). 9 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Side Panel Connections KensingtonLockSlot The Kensington security lock slot is for use with a security cable to secure your device. Device Indicators The device has a single LED indicator that can show these conditions:
WatchGuardTechnologies,Inc. 10 WatchGuardAP432HardwareGuide LEDColor Status Solid Red Device is booting. A permanent solid red LED after booting is very rarely a hardware issue. It may take several minutes before the access point successfully connects to WatchGuard Cloud. Please review all the troubleshooting tips above before you contact WatchGuard technical support. In most cases a network issue, blocked port, licensing, or WatchGuard Cloud account issue will result in the access point not connecting or appearing in your WatchGuard Cloud account. Flashing Red Device cannot connect to WatchGuard Cloud. This can occur for several reasons, for example:
n Device did not receive an IPaddress from DHCP n Device cannot connect to *.watchguard.comor *.watchguard.iobecause of a network issue or blocked port Solid Blue Device is online and connected to WatchGuard Cloud Flashing Blue Flash LED action from WatchGuard Cloud 11 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Mount and Connect the Access Point Your package includes the access point, ceiling mount t-rail brackets, and wall mount screws and spacers. The MAC address and serial number of your access point are printed on a label on the back of the device. Make sure you record this information before you mount the device. Ceiling Mount The ceiling mount bracket is intended for use with ceilings with a t-rail system. 1. Slide the ceiling mount base into the slot on the back panel of the access point. 2. Hold the access point with one hand to reach the other hand over the t-rail sides of the bracket. 3. Attach the stationary end of the ceiling mount bracket on to the t-rail. WatchGuardTechnologies,Inc. 12 WatchGuardAP432HardwareGuide 13 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Wall Mount
(110mm apart). holes. into the anchors. 1. Determine where the access point will be placed and mark the location for the two mounting holes 2. Drill the two mounting holes (8.1mm diameter and 26mm depth) and hammer the anchors into the 3. Screw the anchors into the holes until they are flush with the wall, then screw the included screws 4. Attach the access point to the wall with the mounting screws. WatchGuardTechnologies,Inc. 14 WatchGuardAP432HardwareGuide Wall or Ceiling Mount with T-Rail Mount and Spacers For ease of use, you can also affix the access point to a wall or ceiling with no t-rail system with the t-rail 15/16" mount bracket attached. Use the included spacers to place between the mounting screws and the anchors. 15 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Access PointFree Standing Bracket You can optionally purchase a free standing bracket for your access point:
n WatchGuard AP Universal Free Standing Bracket (WG9017) The stand enables you to safely place your access point on a desk or other flat surface if you do not want to mount the device on a wall or ceiling. To install the access point in the free standing bracket, align the slot on the back of the access point with the stand and slide the access point firmly into place. WatchGuardTechnologies,Inc. 16 WatchGuardAP432HardwareGuide Connect the Access Point Plug one end of the Ethernet cable from your network into the LAN (PoE) port on the bottom panel of the access point. Make sure the other end of the Ethernet cable is connected to your network through a hub, switch, or injector with PoE+ (802.3at) power enabled. 17 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Ethernet Power Injector (Optional) You can power the access point with an optional Ethernet Power Injector. The PoE+ power injector enables you to power the access point through an existing Ethernet connection. With this device, you do not have to position your access point near a power outlet. This device complies with IEEE 802.3at/af PoE specifications. Do not use any PoE adapters that are not IEEE 802.3at/af compliant as they may damage your device. To connect an Ethernet Power Injector to the WatchGuard access point:
1. Plug the Ethernet Power Injector into an AC power source. 2. Connect an Ethernet cable from your network backbone (for example, a PoE-capable router, switch, or hub) to the LAN connector on the Ethernet Power Injector. 3. Connect an Ethernet cable from the LAN (PoE) Ethernet interface on the access point to the PoE connector on the Ethernet Power Injector. The table provides the specifications for the power adapter. Ethernet Power Injector Specs WatchGuard Part Number 802.3at PoE+ Injector with AC cord (US/FCC) (WG8599) 802.3at PoE+ Injector with AC cord (CE) (WG8600) 802.3at PoE+ Injector with AC cord (UK) (WG8601) 802.3at PoE+ Injector with AC cord (AUS) (WG8602) Specification IEEE 802.3at/af AC Input Voltage Rating 100-240VAC Input Current 0.8A max for 100VAC WatchGuardTechnologies,Inc. 18 WatchGuardAP432HardwareGuide Ethernet Power Injector Specs Output Power 30W maximum Ethernet Interfaces LAN: RJ-45 for 10/100/1000 Mbps data POE: RJ-45 for 10/100/1000 Mbps data and power Voltage: Pin4, 5:54V, Pin7, 8:Return Indicator Power: Green Temperature Humidity Dimensions Operating: 0 - 40C (32 - 104F) Storage: -30 - 80C (-22 - 176F) 5% - 90% (Operating and storage) L = 99 mm (3.9") W = 68.5 mm (2.27") H = 33 mm(1.3") Weight 149.6 g (0.33 lbs) 19 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide Power Adapter (Optional) An optional AC power adapter supplies 12V DC power to the device. AC Power Adapter Specs WatchGuard Part Number WG9009 AC Input Voltage Rating 100-240V, 50-60Hz Output Voltage DC 12V, 2.5A Region Specific Adapter Plugs US, UK, AU/NZ, EMEA (all included) Temperature Humidity Operating: 0 - 40C (32 104F) Storage: -20 - 85C (-4 185F) Operating: 5% 95%
Storage: 0% 95%
Dimensions 69 mm x 32.6 mm x 49.5 mm (2.7" x 1.28" x 1.5") WatchGuardTechnologies,Inc. 20 WatchGuardAP432HardwareGuide Notices All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Please read these instructions carefully before operating the product, and refer to them as needed to ensure the continued safe operation of your product. For patent information, please visit http://www.watchguard.com/patents Safety Warning If protective earthing is used as a safeguard, the instructions shall require connection of the equipment protective earthing conductor to the installation protective earthing conductor (for example, by means of a power cord connected to a socket-outlet with earthing connection). To meet safety and electromagnetic interference (EMI) requirements, you must make sure the power source is connected to earth ground before you connect power to the access point. Power Adapter Requirements This product is intended to be supplied by a Listed Power Adapter or DC power source marked L.P.S.
(or Limited Power Source or PS2) rated 12V DC, 2A minimum, maximum ambient temperature
(Tma)=40C, or supplied by a Listed PoE Adapter marked L.P.S. (or Limited Power Source or PS2) rated 54V DC, 0.6A minimum, maximum ambient temperature (Tma)=40C. For more information regarding approved power sources, please contact WatchGuard Technologies. FCC Certification This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
n Reorient or relocate the receiving antenna. n Increase the separation between the equipment and receiver. 21 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide n Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. n Consult the dealer or an experienced radio/TV technician for help. Changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate the equipment. Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 cm between the radiator and a human body. CENotice The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union (EU). ISEDStatement This device contains licence-exempt transmitter(s) that comply with Innovation, Science and Economic Development Canadas licence-exempt RSS(s). Operation is subject to the following two conditions:
(1) this device may not cause interference,
(2) this device must accept any interference, including interference that may cause undesired operation of the device. Lmetteur exempt de licence contenu dans le prsent appareil est conforme aux CNR dInnovation, Sciences et Dveloppement conomique Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes :
(1) Lappareil ne doit pas produire de brouillage;
(2) Lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. Caution
(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;
(ii) where applicable, antenna type(s), antenna models(s), and worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in section 6.2.2.3 shall be clearly indicated. WatchGuardTechnologies,Inc. 22 WatchGuardAP432HardwareGuide Avertissement Le guide dutilisation des dispositifs pour rseaux locaux doit inclure des instructions prcises sur les restrictions susmentionnes, notamment :
(i) les dispositifs fonctionnant dans la bande 5150-5250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;
(ii) lorsquil y a lieu, les types dantennes (sil y en a plusieurs), les numros de modle de lantenne et les pires angles dinclinaison ncessaires pour rester conforme lexigence de la p.i.r.e. applicable au masque dlvation, nonce la section 6.2.2.3, doivent tre clairement indiqus Radiation Exposure Statement This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20 cm between the radiator &
your body. Dclaration d'exposition aux radiations Cet quipement est conforme aux limites d'exposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps. For indoor use only. Pour une utilisation en intrieur uniquement. 23 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide EUDeclaration of Conformity This device complies with the essential requirements of the RED Directive 2014/53/EU. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the RED Directive 2014/53/EU:
EN62368-1:2014+A11:2017 Safety of Information Technology Equipment (ITE) EN55032:2015+A11:2020 EN55035:2017+A11:2020 Electromagnetic compatibility of multimedia equipment - Emission requirements. Electromagnetic compatibility of multimedia equipment Immunity Requirements EN61000-3-2:2019 Limits for harmonic current emissions. EN61000-3-3:2013+A1:2019 Limitation of voltage changes, voltage fluctuations and flicker in public low-voltage supply systems, for equipment with rated current 16 A per phase and not subject to conditional connection. Assessment of electronic and electrical equipment related to human exposure restrictions for electromagnetic fields (0 Hz - 300 GHz). Electromagnetic compatibility and Radio spectrum Matters (ERM); Electro Magnetic Compatibility
(EMC) standard for radio equipment and services; Part 1: Common technical requirements EN62311:2008 EN301489-1V2.2.3(2019-11) EN301489-17V3.2.4(2020-09) Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic Compatibility
(EMC) standard for radio equipment; Part 17: Specific conditions for Broadband Data Transmission Systems EN300328V2.2.2(2019-07) Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband transmission systems; Data transmission equipment operating in the 2.4 GHz ISM band and using wide band modulation techniques; Harmonized EN covering the essential requirements of article 3.2 of the RED Directive EN301893V2.1.1(2017-05) Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized EN covering the essential requirements of article 3.2 of the RED Directive WatchGuardTechnologies,Inc. 24 WatchGuardAP432HardwareGuide This device is a 5 GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services. This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 - 2483.5 MHz. For detailed information the end-user should contact the national spectrum authority in France. 25 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide WatchGuardTechnologies,Inc. 26 WatchGuardAP432HardwareGuide Brazil ANATEL CISPR 22 Statement Este equipamento no tem direito proteo contra interferncia prejudicial e no pode causar interferncia em sistemas devidamente autorizados. Este produto no apropriado para uso em ambientes domsticos, pois poder causar interferncias eletromagnticas que obrigam o usurio a tomar medidas necessrias para minimizar estas interferncias. This is a class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures. La operacin de este equipo est sujeta a las siguientes dos condiciones: (1) es posible que este equipo o dispositivo no cause interferencia perjudicial y (2) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operacin no deseada. Mexico NOM Japan Statement This equipment contains specified radio equipment that has been certified to the Technical Regulation Conformity Certification under Radio Law. Japan VCCIClass B Statement B VCCI-B Taiwan NCCStatement
(MPE) 1mW/cm2 0.347 mW/cm2 24cm 27 WatchGuardTechnologies,Inc. WatchGuardAP432HardwareGuide RoHS Statement The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous Substances (RoHS directive) that became valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. This device complies with the European Unions R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales. WEEE Statement WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment
(WEEE). The Directive, and its individual transpositions into specific country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE. WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure that our products are in compliance with the WEEE statutes, and that the recovery of our product per the specific EU country legislative requirements is seamless for our products end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard Customer Care Department at:
U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456 WatchGuard is reasonably confident that our products do not contain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their individual form. REACH Certificate of Compliance The new EU chemicals policy REACH (Registration, Evaluation, Authorization and restriction of Chemicals) came into effect on June 1, 2007. REACH is Europe's new chemicals legislation, which is applicable in all 27 EU Member States as well as the EFTA European Economic Area (EEA). REACH creates a new system for gathering information, assessing risks to human health and the environment, and authorizing or restricting the marketing and use of chemicals produced or supplied in the EEA. REACH has an impact on EEA producers and importers of finished products and users of chemicals in the course of industrial or professional activities. WatchGuard supports the overall REACH objective of improving the protection of human health and the environment and will meet all applicable REACH requirements. WatchGuard is strongly committed to working with our customers and supply chain to define and implement the REACH requirements and ensure a smooth transition to compliance. One of the REACH requirements is that manufacturers and importers have the duty to register substances they are producing or importing. In accordance with the regulations, the products of WatchGuard do not need to be registered for the following reasons:
WatchGuardTechnologies,Inc. 28 WatchGuardAP432HardwareGuide n WatchGuard does not import more than 1 metric ton per year of a substance as defined by REACH. n WatchGuard products are non-chemical products that are not designed to release any substance under normal and reasonably predictable application. n Our products do not contain the listed substances at more than 0.1% by weight of the whole product/part. 29 WatchGuardTechnologies,Inc.