WatchGuard Support Center

Knowledge Base - Article

 How to change a Total Wi-Fi or Secure Wi-Fi cloud-managed AP to a Basic Wi-Fi local-managed AP

How do I change a Total Wi-Fi or Secure Wi-Fi cloud-managed AP to be locally managed AP by my Firebox (Basic Wi-Fi)?
You can change a Total Wi-Fi or Secure Wi-Fi Cloud-managed AP to be a locally-managed AP (Basic Wi-Fi). The AP can then be managed by the Gateway Wireless Controller on your Firebox.

To pair the AP with a Firebox, you must first perform a factory reset of the AP.  Note the following before you reset your AP to factory default settings:
  • After a factory reset, an AP will attempt to contact cloud services for several minutes. During this time, you must block access to cloud services to prevent the AP from connecting to the cloud of your account is still active.
  • DHCP must be enabled on the network to which the AP is connected.
  • The AP will take several minutes to appear as an unpaired access point in the Gateway Wireless Controller.
  • When the AP is successfully paired with the Gateway Wireless Controller, the AP will no longer attempt to connect to cloud services until the AP is reset to factory default settings again.
To change the cloud-managed AP to a locally managed AP:
  1. To prevent the AP from contacting cloud services, on your firewall, block access from the AP for TCP ports 80/443, and also UDP port 3851 to
These ports are included in the WG-Cloud-Managed-WiFi policy template. 
  1. Reset the AP to factory default settings.
For an AP120, AP320, or AP322:
  • Use a paper clip or other small object to press the reset button through the small hole on the back of the device.
  • Power cycle the device (remove the power cable or Ethernet cable connected to PoE power, and reconnect it again).
  • As you reconnect the power source, press and hold the reset button for at least 60 seconds until the Power, LAN, and 2.4 GHz indicators are green.
For an AP125, AP225W, AP325, AP327X, or AP420:
  • Insert a pin or paperclip into the Reset button hole.
  • Press and hold the reset button for up to 10 seconds until all LEDs go off to indicate that the device has rebooted.
  1. On your Firebox, select Network > Gateway Wireless Controller, then select the Enable Gateway Wireless Controller check box.
By default, the Gateway Wireless Controller will automatically discover new APs if discovery broadcasts are enabled. If discovery broadcasts are not enabled on the network of the AP, you must allow discovery broadcasts to manually or automatically discover the AP. 

Note: After a factory reset, the AP may take several minutes to appear in the Unpaired Access Points list before you can pair the device.

For more information, see AP Discovery and Pairing in the Fireware Help.
  1. Select the discovered Access Point and click Pair.