Sophos AP15 User Manual

Operating Instructions

Sophos Access Points

Operating Instructions

Foreword

We are pleased to welcome you as a new Sophos Access Point customer.

These operating instructions will help you install and configure the access point
and provide technical specifications of all Sophos access point models. In addition,
please also see the following documents that contain useful information on safety,
regulatory compliance, and configuration options:

Ì Sophos Access Points Safety Instructions and Regulatory Information

Ì Sophos UTM Administration Guide: Configuring the

UTM hardware and software appliance

The instructions must be read carefully prior to using the device and should be kept
in a safe place. You may download all user manuals and additional documentation
from the Sophos Knowledgebase at http://www.sophos.com/en-us/support/

knowledgebase.aspx.

Introduction

UTM Wireless Protection simplifies the operation of secure and reliable wireless
networks. It combines affordable and configuration-less access points through a built­in wireless controller in the in Sophos UTM. The wireless controller itself centrally
manages all wireless access points; all you need to do is plug in the device anywhere
in your network. The access point will find the controller, fetch its configuration and
become operable within seconds. In addition, it easily provides wireless guest Internet
access during the initial setup, unless you explicitly deny automatic configuration.

Installation

AP 10/15/30/50/100

Preliminary steps

Please update your UTM appliance to the latest version available. Note that you also
need a valid UTM Wireless Protection subscription to operate the Sophos Access
Points.

Connect the access point to the internal network

Decide where you would prefer to place the access point, and put the access point in
that location. For mounting instructions, see below. Now connect the access point to
your internal network by plugging in the network cable to the access point’s RJ45 or
LAN (PoE) Ethernet interface, respectively.

1Wireless Access Points

Operating Instructions

Connect the access point to the power supply

The AP 30, AP 50, and AP 100 can be powered directly through the Power-over­Ethernet-injector. Note that it is also possible to power them by a PoE-compliant
switch. For more information on PoE-injectors, see below.

Connect the AP 10 and AP 15 to the power supply. Please use the power supply from
the scope of supply. Note that the AP15 can also be operated through a PoE-injector
or PoE-compliant switch.

Start the communication between the access point and the UTM appliance

When connected to the network, the access point will try to receive an IP address via
DHCP. Therefore, you need either the UTM appliance (with a DHCP server enabled
and listening on the interface the access point is connected to) or any other DHCP
server to provide an IP address for the access point.

After successfully receiving an IP address, the access point will communicate with
the UTM appliance. For this to happen, the UTM appliance needs to be put in the
upstream of the access points, either being the default gateway of the access points
(which was provided by the DHCP service) or on the default route (most likely your
route to the Internet).

Please note that the actual Internet access is not necessary to use UTM Wireless
Protection. While waiting for DHCP and searching for the UTM appliance, the access
point’s power LED will blink slowly.

Enable UTM Wireless Protection on the UTM appliance

In WebAdmin, navigate to the Wireless Protection menu entry. On the Global Settings
tab, click the Enable button. When enabling Wireless Protection for the first time,
the Initial Setup frame will appear. It shows the configuration which will be created:
A separate Wireless “Guest” network using WPA2 personal with DHCP for wireless
clients, which will be allowed to use DNS on the UTM appliance and the “Web
Surfing” service.

The pre-shared key is auto-generated and will only be shown in this section. This
configuration is intended as a template, you can edit the settings at any time on the
Wireless Protection > Wireless Networks tab. You can also skip the initial setup by
ticking the checkbox on the bottom of the section.

2Wireless Access Points

Operating Instructions

Accepting the access point

The UTM appliance will start to communicate with the access point and they will
show up as “Pending” on the Wireless Protection > Access Points tab in WebAdmin.
The ID of the Access Points, shown in square brackets, is also printed on the bottom
of the device. It can be used to distinguish the access point. By clicking the Accept
button, you are given the option to select the channel this access point will transmit
on. When leaving the channel setting on “Auto”, the access point will use the least
used channel.

We also suggest to give the access point a meaningful location (e.g., “Meeting Room”)
as this will ease handling multiple access points. After clicking the Save button,
the access points will reboot. Upon reconnect, the access point will check if a more
recent firmware is available. If so, they will automatically perform a firmware update.
During the firmware update, the access point’s power LED will blink rapidly.

Important note: Do not unplug the power while the firmware is updating. Otherwise
the access point will be rendered inoperable and must be returned to the reseller.

The access point will then reboot to complete the firmware update. If no new
firmware is available, the access point is operational and appears as “Active” in
WebAdmin.

3Wireless Access Points

Operating Instructions

AP 10

Scope of supply

Sophos AP 10 Security Notes Power supply Detachable dipole antenna Ethernet cable

Mounting instructions

The Sophos AP 10 can be mounted on the wall. Screws are not included in delivery.
Only use screws whose dimensions correspond with the mounting holes on the back
side.

AP 10

Controls

Power (LED display)

Off Power off

On continuously Power on

Blinking rapidly Firmware update

Blinking slowly No connection to the Sophos UTM

LAN connection (LED display)

On continuously Network connection, no activity

Blinking Network activity

WLAN access (LED display)

Reset10/100 Base-TXPower

On continuously Network connection, no activity

Blinking Network activity

Interfaces and buttons

DC-IN Power

RJ45 10/100 Base-TX interface

Reset Currently not supported

4Wireless Access Points

Operating Instructions

Technical specifications

Sophos AP 10

Chassis Plastic housing, white

Maximum throughput 150 Mbit/s

LAN interfaces 1 x 10/100 Base-TX

Supported WLAN standards 802.11 b/g/n 2.4 GHz

Antenna 1 x detachable dipole antenna (2 dBi) Connector type: RP-SMA

Frequencies / channels 2.412~2.462 GHz Channels 1-11

Power supply 100-240 VAC, 50/60 Hz, max. 0.3 A

Power consumption 8 W (max.)

Power-over-Ethernet No

Dimensions W x H x D 124 x 25 x 96 mm

Weight 130 g

Temperature range Operating: 0°C to 45°C Storage: -20°C to 70°C

Humidity (non-condensing) 5% to 95%

Mounting Desktop / wall

Supported security standards WPA/WPA2, WEP, 802.1X (RADIUS)

Number of supported SSIDs 8

Regulatory compliance CE FCC MIC/VCCI (Japan)

Radio: EN 300328 CFR 47, Part 15

EMC: EN 301489-1, EN

301489-17

EMF: EN 50385 FCC 1.1310, IEEE C95.1 N/a

Safety: EN 60950-1 N/a N/a

Subpart C

CFR 47, Part 15
Subpart B

Certification ID:
201 WW 11215237

V-3/2011.04
V-4/2010.04

AP 10 Mounting template

Do not shrink to fit when printing

8,85 cm (3,48 in)

2mm

5mm

16mm

5Wireless Access Points