Get Started with Wi-Fi in WatchGuard Cloud

Follow these steps to deploy a WatchGuard AP130, AP230W, AP330, AP332CR, AP430CR, or AP432 access point in WatchGuard Cloud:

To view these instructions in other languages, go to Additional Language Support

Troubleshoot Access Point Connectivity

It may take several minutes for the access point to connect to WatchGuard Cloud. If you do not see your access point in WatchGuard Cloud, check the following:

  • Make sure you have activated your access point with a valid device serial number and license key in your WatchGuard account. The license key must be for a WatchGuard Standard or USP Wi-Fi license for Wi-Fi in WatchGuard Cloud.
  • If you are a service provider, make sure you have allocated the activated access point to a subscriber account in WatchGuard Cloud.
  • Make sure you have added the access point to your WatchGuard Cloud subscriber account.
  • If you have configured DHCP, make sure your access point has received an IP address from DHCP and can connect to the network.
  • Access points must be able to resolve DNS queries with the DNS server the device receives from DHCP.
  • Access points must initially be able to connect to *.pool.ntp.org on NTP port 123 (TCP/UDP) for the default access point time synchronization servers, and for any custom NTP servers set for the device.
  • Access points use TCP port 443 to connect to WatchGuard Cloud. Access points must also be able to connect to these destinations:
  • *.watchguard.io for product activation and feature key updates
  • *.watchguard.com for WatchGuard Cloud registration and connections
  • If you set up an access point behind a firewall that performs inspection on HTTPS traffic, you must add *.watchguard.io to the content inspection exception / bypass list to enable the access point to receive a feature key from WatchGuard servers. On the WatchGuard Firebox, this is enabled by default for cloud-managed Fireboxes in WatchGuard Cloud.

Access Point LED Indicators

Wi-Fi in WatchGuard Cloud access points have LED indicators that can show different status conditions while booting, activation validation, feature key download, WatchGuard Cloud device registration, and the connection to WatchGuard Cloud.

The access point briefly passes through each stage until the device is connected to WatchGuard Cloud and shows a solid blue LED indicator. If the access point remains in the same state for a long period of time without a solid blue LED indicator status, there might be a network issue, activation or feature key issue, or a problem with your WatchGuard Cloud account.

Check the following table for the status of the LED indicators and how to troubleshoot the issue.

LED Color Status Troubleshooting
Solid Red or Orange Device is booting

If the access point remains in this state, the access point processes might not have started, or there might be an issue with the access point firmware.

  • Disconnect and reconnect power to reboot the access point to see whether the device connects.

  • Try to log in to the access point Web UI or command line interface (CLI) to check the device status, current firmware version, and run diagnostic tests. For more information, go to Access Point Web UI or Access Point Command Line Interface.

Flashing Red or Orange
(Fast: 100 milliseconds)

Validate access point activation and download feature key

If the access point remains in this state:

  • Make sure you have activated your access point with a valid device serial number and license key in your WatchGuard account. The license key must be for a WatchGuard Standard or USP Wi-Fi license for Wi-Fi in WatchGuard Cloud.

  • Make sure the access point is connected to the network and has received an IP address from DHCP.

  • Make sure the access point can connect to *.watchguard.io for product activation and feature key updates.

  • If you set up an access point behind a firewall that performs inspection on HTTPS traffic, you must add *.watchguard.io to the content inspection exception / bypass list to enable the access point to receive a feature key from WatchGuard servers. On the WatchGuard Firebox, this is enabled by default for cloud-managed Fireboxes in WatchGuard Cloud.

  • Use the access point Web UI or command line interface (CLI) to check the feature key status, download a feature key, and run diagnostic tests. For more information, go to Access Point Web UI or Access Point Command Line Interface.

Flashing Red or Orange
(Medium: 500 milliseconds)
WatchGuard Cloud device registration

If the access point remains in this state:

  • Make sure access point can connect to *.watchguard.com for WatchGuard Cloud device registration.

  • For service providers, make sure you have allocated the access point from your inventory to a subscriber account. For more information, go to Access Point Allocation.

  • Make sure you have added the access point to your WatchGuard Cloud subscriber account. For more information, go to Add an Access Point to WatchGuard Cloud

Flashing Red or Orange
(Slow: 2 seconds)
Connection to WatchGuard Cloud servers

If the access point remains in this state:

  • Make sure the access point can connect to *.watchguard.com for WatchGuard Cloud management connections and is not blocked by a firewall or other network device.

  • Make sure you do not have an expired MSSP license for the access point.

  • Check the access point allocation status to see whether the device was deallocated from the subscriber account.

Solid Blue Successfully connected to WatchGuard Cloud Device is online and connected to WatchGuard Cloud.
Flashing Blue Flash LED action from WatchGuard Cloud LED flashes blue for 60 seconds for identification.
Flashing Blue and Red Access point failed system integrity check If the device LEDs flash alternating blue and red every second, the device has failed a system integrity check and has rebooted in failsafe mode. You must contact WatchGuard Support to replace the device.

Troubleshoot Access Point Issues from the Web UI or Command Line Interface (CLI)

In some cases, you may need to connect directly to your device to troubleshoot issues if you cannot view or manage the access point from WatchGuard Cloud.

From the Web UI or Command Line Interface (CLI) of the device, you can perform these functions:

  • View current device statistics
  • View system and process logs
  • Check feature key status and import a new feature key
  • Update the firmware
  • Reboot the device
  • Change the IP address and VLAN settings
  • Perform troubleshooting diagnostics tasks (ping, traceroute, telnet, and more)
  • Reset the access point to factory default settings

Additional Language Support

Related Topics

About Wi-Fi in WatchGuard Cloud Access Point Licenses

Manage the Access Point Device Configuration

Monitor Access Points