AP Controller in uOS 1.32

Zyxel_Claudia

The latest uOS 1.32 firmware brings the AP Controller function in Zyxel USG FLEX H Series firewalls, making wireless access point (AP) deployment, management, and monitoring simpler, more intelligent, and more scalable for businesses of all sizes.

What Is the AP Controller?

Zyxel's AP Controller (APC) allows uOS firewalls to centrally manage Zyxel APs through the CAPWAP protocol. With uOS 1.32:

• All Flex H-Series models (including USG FLEX 50H/HP) support AP management.
• Management capabilities include WLAN configuration, firmware updates, wireless health, logging, and mesh control.

Initial Setup: AP Controller Activation

To begin using the AP Controller:

1. Navigate to Wireless > AP Control Service.
2. Enable AP Management Service (disabled by default).
3. Once enabled, you can access wireless settings, assign APs, and configure SSIDs, security, radio, and AP groups.

📝 Note: In uOS, the AP login password is configured independently from the device GUI password—unlike ZLD where they were the same.

Wireless Configuration Highlights

SSID & Security Settings

• Simple Mode: Quick setup with open security.
• Advanced Mode: Full access to settings like WPA Personal or WPA Enterprise (supports internal or external AAA servers).
• L2 Isolation: Restrict client-to-client communication; set gateway exceptions to allow internet access.

Radio Settings

• Band Support: 2.4 GHz and 5 GHz; 6 GHz is disabled if not selected.
• Country Code: Adjusts power/channel limits automatically based on regulatory rules.

Deployment Selection

• Select per-defined deployment depends on your requirement, choose between:
  • Single AP
  • Low Density
  • Moderate Density
  • High Density
  • Custom (manually adjust power/channel settings)

AP Groups: Flexible Deployment Templates

• Use AP Groups as configuration templates.
• Each group can apply custom SSID, radio, and AP settings.
• APs are then assigned to these groups, allowing efficient deployment across multiple locations or use cases.

Management WLAN Clients

• Wireless Clients View: Shows real-time client data including SSID, MAC, hostname, and AP connection.
• Policy Client Control: Restrict clients to specific SSIDs (even if they're not yet connected).

AP Firmware Management

• Firmware can be updated directly from the APC interface.
• APC checks the cloud for new firmware versions and downloads them locally.
• Updated AP firmware will show as “Update Available” on the managed AP -click to upgrade.

Wireless Health & Optimization

• Wireless Health automatically optimizes AP settings based on performance trends.
• Available for all 13 supported AP models.

Smart Mesh Networking

New in uOS 1.32:

• Smart Mesh (one-click enable) automatically forms wireless uplinks between APs.
• A root AP (connected by LAN) can support up to 6 repeater APs over two wireless hops.
• Failover: If LAN fails, the AP switches to wireless uplink.

WC500H AP does not support Smart Mesh when managed via H-Series firewall. Considering that the WAC500H is designed as a hotel-room AP — typically with one AP deployed per room and no mesh networking needed.

APC Event Log

• User can view detailed events of APsGo to Log & Report > Log / Events > APC
• Query full event logs for each AP through the controllerGo to Log & Report > Log / Events > AP, select the AP and click “Query” to get full log from the AP

Final Notes

• Default managed AP: Each model supports up to 8 managed APs without a license.
• Secure WiFi license: Required for managing additional APs; available in 1-month, 1-year, or 2-year.