Lansweeper Integration with Wi-Fi in WatchGuard Cloud Access Points

Lansweeper is a software tool that provides comprehensive IT asset management, network discovery, and IT inventory capabilities for organizations.

This document describes how to use Lansweeper to discover and monitor your access points managed in WatchGuard Cloud.

Contents

• Lansweeper Integration with Wi-Fi in WatchGuard Cloud Access Points
• • Contents
  • Integration Topology
  • Before You Begin
  • Configure SNMP for Access Points
  • Lansweeper Configuration
  • • Add Scanning Target
    • Add Scanning Credentials
    • Add Custom OID Scanning Targets
  • Test the Access Point and Lansweeper Integration

Integration Topology

This diagram outlines the topology used for the Lansweeper and WatchGuard access point integration.

Before You Begin

Before you begin these procedures, make sure that you have:

• Registered a Lansweeper account (additional charges might apply)
• Installed Lansweeper Scanner on your server
• Enabled the Lansweeper Classic web console
• Upgraded your WatchGuard Cloud access points to firmware version v2.4.7 or higher
• Activated your access points with a WatchGuard USP Wi-Fi Management license and added the devices to WatchGuard Cloud

For more information about how to set up Lansweeper for the first time, go to Install the Lansweeper Cloud-first trial.

For more information about how to enable the Lansweeper Classic web console, go to Enable the Lansweeper Classic web console.

Configure SNMP for Access Points

Before you can use Lansweeper to discover a WatchGuard access point, you must configure SNMP settings for the device.

For more information about how to configure SNMP for your access points in WatchGuard Cloud and view the details of the SNMP MIB file, go to Configure SNMP for Access Points.

1. Log in to WatchGuard Cloud.
2. Select Configure > Devices.
3. Select the access point.
   The Device Settings page opens.



4. Select Device Configuration.
5. In the Settings widget, select Advanced Settings.
6. Enable SNMP.
7. From the Version drop-down list, select v3.
8. In the User Name text box, type a user name to authenticate with the SNMP management system. In this example, we type lansweeper.
9. From the Authentication Protocol drop-down list, select a protocol. You must use the same protocol when you configure the Lansweeper scanning credentials. In this example, we select SHA1.
10. In the Authentication Password (8-32 characters) text box, type an authentication password.
11. From the Privacy Protocol drop-down list, select DES.
12. In the Privacy Password text box, type a password to encrypt outgoing messages and decrypt incoming messages.



13. Click Save.
    
14. To apply the configuration to your access points, click Schedule Deployment in the banner at the bottom of the page.
    The Schedule Deployment dialog box opens.



15. Select Deploy changes now.
16. In the Description text box, type a description. For this example, we type config SNMP for AP.



17. Click Deploy.

Lansweeper Configuration

Follow the steps in these sections to configure Lansweeper for integration with WatchGuard access points.

Add Scanning Target

To add a scanning target in Lansweeper:

1. Log in to your Lansweeper Classic web console.
2. From the top navigation bar, select Scanning > Scanning targets.
   The Scanning Targets page opens.



3. Click Add Scanning Target.
4. From the Target Type drop-down list, select IP Range.
5. In the IP Start and IP End text boxes, type the starting IP address and ending IP address of your AP devices.
6. Enable Ignore Windows.



7. Use the default values for all other settings.
8. Click Ok.

Add Scanning Credentials

To add scanning credentials in Lansweeper:

1. From the top navigation bar, select Scanning > Scanning credentials.
   The Credentials page opens.



2. Click Add new Credential.
   The Add new credential dialog opens.
3. From the Type drop-down list, select SNMP (v3).
4. In the Name text box, type a name to describe this credential.
5. In the Login text box, type the user name you configured in the previous section.
6. In the Password text box, type the authentication password you configured in the previous section.
7. In the Encryption key text box, type the password you configured in the previous section.
8. From the Authentication type drop-down list, select the authentication protocol you configured in the previous section. In this example, we select SHA1.
9. From the Privacy type drop-down list, select DES.



10. Leave the Context text box empty.
11. Click Ok.
12. In the Credential Mapping section, click Credential for the IP Range you just added.
    The Add Credential dialog shows.



13. Select the SNMPv3 credential you just added.



14. Click Ok.

Add Custom OID Scanning Targets

To add a custom OID scanning target in Lansweeper:

1. From the top navigation bar, select Scanning > OID Scanning targets.
   The OID Scanning Targets page opens.



2. Click Add Target.
3. From the Type drop-down list, select IP Range.
4. From the Target drop-down list, select the IP range of your APs.
5. In the Mapped SNMP data section, type a label in the Label text box, and type an OID in the OID text box. You must append a zero (0) at the end of the OID number to access the scalar value. For example, to retrieve the serial number of an AP, type serialNumber in the Label text box and type 1.3.6.1.4.1.14125.2.1.1.12.0 in the OID text box.

For more information about the OID values in the WatchGuard MIB file, go to Configure SNMP for Access Points.



6. (Optional) Click to add Mapped SNMP data.
7. Use the default values for all other settings.
8. Click Ok.

Test the Access Point and Lansweeper Integration

To test Lansweeper integration with WatchGuard access points:

1. Log in to the Lansweeper Classic web console.
2. From the top navigation bar, select Scanning > Scanning targets.
   The Scanning Targets page opens.
3. Click Scan now to start a quick scan.



4. When the scan is complete, from the top navigation bar, select Assets.
   The All Assets page opens.



5. Click the asset name to view the details.



6. Click Scanned OIDs to view the Scanned OIDs.



7. (Optional) Click Edit asset in the left navigation bar to edit your asset.

The WatchGuard access point is discovered as a Router. You can change the asset type to Wireless Access Point.

8. (Optional) From the Asset Type drop-down list, select Wireless Access point.



9. (Optional) Click Save asset.