Create Wireless Mesh with Sophos APX on Sophos XG firewall

Hi,

which model APX?

Ian

Hi Ian,

Mainly the APX320.

https://community.sophos.com/kb/en-us/127948

https://community.sophos.com/kb/en-us/122792

Which mode those the APX running? APX320 can run 2x 5ghz or 5ghz / 2,4 ghz? 

They run 2.4 Ghz and 5 Ghz.

When I want to select an AP, I see this:

When I have selected the AP (APX320), the role disappears and I can only add the AP as Mesh AP:

Thanks!

This looks odd to me. I am not quite sure about this. I do not have any running APX XG setups right now. Maybe Keyur can help out. 

Hi Bartje T. 

Thank you for providing screenshots, please let me check and I will inform you further.

Hi All,

I received the following feedback from the team - essentially the APX with the connected Ethernet connection is designated as the root AP. Our documentation will be updated accordingly.

1. Mesh is not supported between legacy APs and APX Access Points
2. For the APX, there is no need to specify the mesh role. If the mesh enabled SSID is pushed to 2 APXs, the one with the existing Ethernet connection (to the XG) becomes the root AP. Once the mesh enabled SSIDs are pushed to the APXs, it’s advisable to reboot them. During the boot sequence, if the APX has Ethernet connectivity, then it becomes the root and the one without Ethernet becomes the mesh client.

Please let me know if you had any questions.

[Edited for clarity - thanks ChrisKnight!]

Regards,

Hi All,

I received the following feedback from the team - essentially the APX with the connected Ethernet connection is designated as the root AP. Our documentation will be updated accordingly.

1. Mesh is not supported between legacy APs and APX Access Points
2. For the APX, there is no need to specify the mesh role. If the mesh enabled SSID is pushed to 2 APXs, the one with the existing Ethernet connection (to the XG) becomes the root AP. Once the mesh enabled SSIDs are pushed to the APXs, it’s advisable to reboot them. During the boot sequence, if the APX has Ethernet connectivity, then it becomes the root and the one without Ethernet becomes the mesh client.

Please let me know if you had any questions.

[Edited for clarity - thanks ChrisKnight!]

Regards,

Thanks for the clarification! We will give it a try!

I'm assuming that "the APX with the connected Ethernet connection" means the APX that has a wired connection back to the XG, as the mesh APX may also have a wired connection as its purpose may be to act as a wired bridge.

Shame about no AP/APX mixed mesh. Makes mesh upgrades a real PITA.