NETGEAR WAX618 User Manual Download | Manualshive

Page: 60 / 263

background image

7. Specify the WiFi security by selecting an option from the Authentication menu and,

if applicable, by specifying a passphrase in the Passphrase field or selecting an
option from the Encryption menu:

•

Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do

not

use a legacy open

WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check
box displays.

-

Enhanced Open check box cleared: The WiFi network is a legacy open
network without any security. This is the default option for an open network.
Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled (see Step 8).

-

Enhanced Open check box selected: The WiFi enhanced open feature is
enabled. This feature is based on opportunistic wireless encryption (OWE).
The encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory (see Step 8). If you select the Enhanced Open
check box, the Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open enhanced
feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.

•

WPA2 Personal: This option, which is the same as WPA2-PSK, is the default
setting and uses AES encryption. This type of security enables only WiFi devices
that support WPA2 to join the VAP.
WPA2 provides a secure connection but some legacy WiFi devices do not detect
WPA2 and support only WPA. If your network includes such older devices, select
WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.

•

WPA2/WPA Personal: This option, which is the same as WPA2-PSK/WPA-PSK,
enables WiFi devices that support either WPA2 or WPA to join the VAP. This
option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and
limits the speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.

User Manual

60

Manage the Basic WiFi Features
for a WiFi network

Insight Managed WiFi 6 AX3000 Access Point Model WAX618

«
...
58
59
60
61
62
...
»

Summary of Contents for WAX618

Page 1: ...User Manual Insight Managed WiFi 6 AX3000 Access Point WAX618 NETGEAR Inc 350 E Plumeria Drive January 2023 San Jose CA 95134 USA 202 12641 01 ...

Page 2: ... are agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period Do not use this device outdoors The PoE source is intended for intra building connection only Applicable to 6 GHz devices only Only use the device indoors The operation of 6 GHz devices is prohibited on oil pla...

Page 3: ...n 21 Connect over the Internet using the NETGEAR Insight Cloud Portal 22 Connect over WiFi using the NETGEAR Insight app 24 Connect over WiFi to the local browser UI for initial configuration 26 Connect over the LAN to the local browser UI for initial configuration 31 Configure the access point offline using a directly connected computer 36 Log in to the access point after initial setup 41 What to...

Page 4: ...t 81 Chapter 6 Manage the Basic Radio Features Manage the basic WiFi settings for the radios 84 Turn a radio on or off 87 Change the WiFi mode for a radio 88 Change the channel width for a radio 90 Change the guard interval for a radio 91 Change the output power for a radio 93 Change the channel for a radio 94 Manage Quality of Service for a WiFi radio 95 Chapter 7 Set Up and Manage a Captive Port...

Page 5: ...le or disable Ethernet LLDP 143 Enable or disable UPnP 144 Manage the multicast DNS gateway 145 Enable the multicast DNS gateway and add a policy 146 Change or remove a multicast DNS policy 147 Chapter 10 Manage and Maintain the Access Point Change the management mode to NETGEAR Insight or Web browser 150 Change the country or region of operation 152 Change the admin user account password 153 Chan...

Page 6: ...ridge connection 195 View alarms and notifications 196 Chapter 12 Manage the Advanced WiFi Features for a WiFi network Set NAT mode or Bridge mode for addressing and traffic 199 Enable or disable client isolation for a WiFi network 200 Enable or disable URL tracking for a WiFi network 202 Change the format of the DHCP offer messages in a WiFi network 204 Select a MAC ACL for a WiFi network 205 Set...

Page 7: ...not connect 241 Troubleshoot WiFi connectivity for a WiFi client device 242 Troubleshoot Internet browsing 243 You cannot log in to the access point over a LAN connection 244 Changes are not saved 245 You enter the wrong password and can no longer log in to the access point 245 Troubleshoot your network using the ping utility 246 Test the LAN path to your access point 246 Test the path from your c...

Page 8: ...rnet port supports a high speed up to 2 5 Gbps This chapter contains the following sections About the local browser user interface and NETGEAR Insight Additional documentation Note For more information about the topics that are covered in this manual visit the support website at netgear com support Note Firmware updates with new features and bug fixes are made available from time to time at netgea...

Page 9: ...or information about the NETGEAR Insight Cloud Portal and Insight app visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 If you install the access point as a NETGEAR Insight managed device the settings for features that you can manage through the Insight Cloud Portal and Insight app are masked out in the lo...

Page 10: ... model WAX618 is an indoor access point that supports the 2 4 GHz and 5 GHz WiFi bands The chapter contains the following sections Unpack the access point Top panel with LEDs Hardware interfaces Access point label Safety instructions and warnings for an indoor access point 10 ...

Page 11: ...ter the type of power adapter varies by region If you ordered model WAX618 but prefer to use the access point without a PoE connection you can order a power adapter separately For information about the mounting options see Mount the Access Point to a Wall or Ceiling on page 255 Top panel with LEDs The LEDs that provide the status of the access point are located on the top panel of the access point...

Page 12: ... setup is in progress Solid amber during operation The PoE power that the access point received is not at the 802 3at PoE level Off No power is supplied to the access point Solid green A 2 5 Gbps Ethernet link is detected on the LAN port LAN LED Blinking green 2 5 Gbps traffic activity is detected on the LAN port Solid amber An Ethernet link at a speed lower than 2 5 Gbps is detected on the LAN po...

Page 13: ...t button LAN PoE port Figure 2 Hardware interfaces The bottom panel contains the following components DC power connector If you do not use a PoE switch to provide power to the access point connect an optional power adapter to the DC power connector LAN PoE port Use the LAN PoE Gigabit Ethernet RJ 45 LAN port to connect the access point to a PoE switch or if you use an optional power adapter to a n...

Page 14: ...t button for 10 seconds or longer Note If you added the access point to a NETGEAR Insight network location you must first use the Insight Cloud Portal or Insight app to remove the access point from your Insight network location before the factory default settings function of the Reset button is available For more information see Use the Reset button to reset the access point on page 170 Access poi...

Page 15: ...mation about the environment in which this product must operate see the environmental specifications in the appendix or the data sheet If you want to connect the product over an Ethernet cable to a device located outdoors the outdoor device must be properly grounded and surge protected and you must install an Ethernet surge protector inline between the indoor product and the outdoor device Failure...

Page 16: ...et environment If the product gets wet see the appropriate section in your troubleshooting guide or contact your trained service provider Do not push any objects into the openings of your product Doing so can cause fire or electric shock by shorting out interior components Use the product only with approved equipment If applicable to your product allow the product to cool before removing covers or...

Page 17: ...tings limit for the extension cable or power strip To help protect your system from sudden transient increases and decreases in electrical power use a surge suppressor line conditioner or uninterruptible power supply UPS Position system cables power adapter cables and PoE Ethernet cables carefully Route cables so that they cannot be stepped on or tripped over Be sure that nothing rests on any cabl...

Page 18: ...etup What to do if you get a browser security warning CAUTION This device must be professionally installed It is the installer s responsibility to follow local country regulations including operations within legal frequency channels output power and DFS requirements The vendor reseller or distributor is not responsible for illegal wireless operations For more details see the device s terms and con...

Page 19: ...o provide network access Tips for positioning your access point Place your access point near the center of the area where the WiFi clients operate A line of sight between the access point and the WiFi clients is not required for good performance If you use a power adapter make sure that the access point is within reach of an AC power outlet Place the access point in an elevated location minimizing...

Page 20: ...ing it to a PoE switch If you ordered a package without a power adapter but do not want to use a PoE connection you can still order a power adapter as an option If connected to 2 5 Gbps equipment the access point LAN PoE port supports Ethernet speeds up to 2 5 Gbps within your LAN The following figure show a NETGEAR MS510TXUP switch which supports speeds of 2 5 Gbps and higher as well as PoE If yo...

Page 21: ...ess point is ready for you to perform the initial configuration For information about accessing the access point for initial configuration see Connect to the access point for initial configuration on page 21 Connect to the access point for initial configuration After you set up the access point you can use several methods to connect to it for initial configuration For remote management of the acce...

Page 22: ...e connected to the Internet For more information about the Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 Your NETGEAR account is also your Insight account Your NETGEAR account credentials let you log in as an Insight Premium user or if you upgrade to an Insight Pro account as an In...

Page 23: ...d Insight location configuration This might take up to 10 minutes during which time the access point will restart The access point is now an Insight managed device that is connected to the Insight cloud based management platform If the Power Cloud LED was solid green it lights solid blue You can use the Insight Cloud Portal or Insight app to configure and manage the access point Note If you add th...

Page 24: ...TGEAR Insight and download the Insight app 2 On your mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the access point label on the bottom of the access point to connect to the setup WiFi network Connect manually The setup WiFi network is on the access point label and is shown in the format NETGEARxxxxx...

Page 25: ... icon in the top bar and do one of the following Tap the SCAN BARCODE OR QR CODE button and then scan the access point s code which is on the access point label Tap the Enter Serial Number and MAC Address link and then manually enter the access point s serial number and MAC address which are on the access point label 8 If prompted name the access point and tap the Next button The access point auto...

Page 26: ...vice without using the NETGEAR Insight app and complete the initial configuration To connect over WiFi to the local browser UI for initial configuration 1 From your computer or mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the access point label on the bottom of the access point to connect to the set...

Page 27: ...stead the login page displays After you log in the Dashboard page displays 5 To let the access point check for the latest firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade completes the access point restarts When the access point is ready ...

Page 28: ...sable radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a...

Page 29: ...1w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Transition Mode check box displays If you select this check box the WiFi network can accept both clients that support the WiFi enhanced open feature and clients that do not For clients that do ...

Page 30: ...en you log in again You are disconnected from the access point If you changed the default country the access point restarts 9 Reconnect over WiFi to the access point s WiFi network using the new SSID and passphrase that you just defined on the Day Zero Easy Setup page 10 Enter the access point IP address in the address bar of your browser If you changed the IP address enter the IP address that you...

Page 31: ...device icon and select Properties to display the IP address Note You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 24 2 On the computer launch a web browser and in the address bar enter the IP address that is assigned to the access point Your browser might display...

Page 32: ...for the latest firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade completes the access point restarts When the access point is ready depending on your situation go back to Step 2 or Step 3 of this procedure 6 Enter the settings that are des...

Page 33: ...sable radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a...

Page 34: ...1w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Transition Mode check box displays If you select this check box the WiFi network can accept both clients that support the WiFi enhanced open feature and clients that do not For clients that do ...

Page 35: ...nformation see Change the authentication and encryption for a WiFi network on page 71 8 Click the Apply button Your settings are saved A pop up window displays the IP address and the new WiFi network and password passphrase If you specified a static IP address save the IP address information because you must enter the IP address when you log in again If you changed the default country the access p...

Page 36: ...ght display a security warning because of the self signed certificate on the access point which is expected behavior You can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 A login window displays b Enter the access point user name and password The user name is admin The password is the one that you just defi...

Page 37: ...cumentation for your computer 3 Use an Ethernet cable to connect your computer to the LAN PoE port on the access point 4 On the computer launch a web browser and enter 192 168 0 100 in the address bar Your browser might display a security warning because of the self signed certificate on the access point which is expected behavior You can proceed or add an exception for the security warning For mo...

Page 38: ... the settings that are described in the following table Description Setting From the menu select the country and region in which the access point is operating Note Make sure that the country is set to the location where the device is operating You are responsible for complying with the local regional and national regulations that are set for channels power levels and frequency ranges Note It might...

Page 39: ...ase letter one lowercase letter and one number The following special characters are allowed Save the password for future use AP Login New Password Enter exactly the same password that you entered in the AP Login New Password field Confirm New Password You cannot use the setup SSID for regular operation The setup SSID is for initial setup only Enter a new name with a maximum of 32 characters You ca...

Page 40: ... use TKIP and WPA2 clients use AES In the Passphrase field enter a new passphrase for the WiFi network WPA3 Personal This option allows only WiFi clients that support WPA3 to connect to the SSID Select this option if all WiFi clients are capable of supporting WPA3 This option uses SAE encryption In the Passphrase field enter a new passphrase for the WiFi network WPA3 WPA2 Personal This option allo...

Page 41: ... After initial setup the access point is ready for use and you can change the settings and monitor the traffic To log in to the access point s local browser UI 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A logi...

Page 42: ...d behavior You can proceed or add an exception for the security warning To proceed with a security warning or add an exception for a security warning Google Chrome Click the ADVANCED link Then click the Proceed to x x x x unsafe link in which x x x x represents the domain name or IP address of the device Apple Safari Click the Show Details button Then click the visit this website link If a warning...

Page 43: ...he Confirm Security Exception button Microsoft Edge Select Details Go on to the webpage Microsoft Internet Explorer Click the Continue to this website not recommended link User Manual 43 Install the Access Point in Your Network and Access It for Initial Configuration Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 44: ...ser UI to set up a mesh WiFi connection to a root For information about how you can manage and monitor the node with the Insight Cloud Portal and Insight app visit netgear com insight The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear com support The chapter contains the following sections What ...

Page 45: ...ted to your network over a wired connection but over a WiFi connection 3 3 4 5 1 2 Figure 6 Mesh network with a node and a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with the Insight app or either a computer or a tablet with access to the Insight...

Page 46: ... sight and in range of the current WiFi reception Any environment in which you cannot run cables In the mesh WiFi network the node connects to the root over a WiFi connection and broadcasts extends the WiFi network to the WiFi clients Backhaul connection The WiFi connection between the root and the node is referred to as the backhaul connection Fronthaul connection The WiFi connection between the ...

Page 47: ...net port for the connection to your network The node must be in factory default state If you previously used the node in your network reset the access point to factory default settings The node must be within range of the WiFi signal of a root so that it can sync with the root During setup for a reliable WiFi connection place the node less than 25 feet 7 5 m in a line of sight with minimal obstacl...

Page 48: ...he NETGEAR Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 To connect to the access point over the Internet through the Insight Cloud Portal 1 On a computer or tablet visit insight netgear com The NETGEAR Account Login page displays 2 If you do not already have an Insight account you...

Page 49: ...ight The Insight Cloud Portal has embedded help and is documented in multiple knowledge base articles that you can access by visiting netgear com support 3 3 4 5 1 2 Figure 7 Connect the node to a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with t...

Page 50: ...ot is set to Auto For more information visit kb netgear com 000064931 3 Make sure that node is in factory default state If you previously used the access point in your network reset the access point to factory default settings 4 For a reliable WiFi connection place the node less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root 5 Connect the node to a power source ...

Page 51: ...ration process Blinking green The node is attempting to detect a root Solid green The node is making its first connection with the root that provides the strongest WiFi signal Blinking amber slowly The node is contacting the network router or DHCP server to receive an IP address If the Power Cloud LED does not stop blinking amber see Power Cloud LED is blinking amber slowly continuously on page 23...

Page 52: ...ice For more information about the NETGEAR Insight app visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 To install the Insight app to manage an Insight Instant Mesh WiFi network 1 On your mobile device go to the app store search for NETGEAR Insight and download the Insight app 2 Launch the Insight app 3 I...

Page 53: ...base articles that you can access by visiting netgear com support 3 3 4 5 1 2 Figure 8 Connect the node to a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud Portal ...

Page 54: ...d Portal For all other steps in this procedure you can use the Insight app 2 Make sure that the mesh mode for the root is set to Auto For more information visit kb netgear com 000064929 3 Make sure that node is in factory default state If you previously used the access point in your network reset the access point to factory default settings 4 For a reliable WiFi connection place the node less than...

Page 55: ...root that provides the strongest WiFi signal in the Insight Instant Mesh WiFi network Note The initial connection and configuration process might take up to 10 minutes The node might restart during the configuration process 10 Wait for the node to go through the initial connection and configuration process and for the Power Cloud LED to stop blinking amber green and blue and to light solid blue No...

Page 56: ... node functions in the Insight Instant Mesh WiFi network and is connected to the Insight cloud The node is automatically configured to broadcast extend the root s WiFi network If you are experiencing difficulty connecting the node with a root see The node and root cannot connect on page 241 For information about accessing managing and monitoring the node with the NETGEAR Insight Cloud Portal and I...

Page 57: ... or broadcast the SSID for a WiFi network Change the VLAN ID for a WiFi network Change the authentication and encryption for a WiFi network Enable or disable PMF for a WiFi network Set up Multi PSK for a WiFi network Disable or enable a WiFi network or set up a WiFi activity schedule Enable or disable band steering with 802 11k RRM and 802 11v WiFi network management Note If you want to change the...

Page 58: ...s on page 129 Note that WPA2 Enterprise security and WPA3 Enterprise security are not compatible with a multicast DNS mDNS gateway see Manage the multicast DNS gateway on page 145 To set up a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP addres...

Page 59: ... VAP the SSID on the WiFi device must match the SSID of the VAP Wireless Network Name SSID By default the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their scanned network lists To turn off the SSID broadcast select the No radio button Turning off the SSID broadcast provides additional WiFi security but users must know the SSID to be able to join the VAP Broadcast SSID You ...

Page 60: ... clients that support the WiFi enhanced open feature and clients that do not For clients that do not support the WiFi open enhanced feature traffic is not encrypted If you clear the Allow Devices to Connect with Open check box the WiFi network can only accept clients that support the WiFi enhanced open feature WPA2 Personal This option which is the same as WPA2 PSK is the default setting and uses ...

Page 61: ...hentication option WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP If you select this option 802 11w PMF is automatically set to mandatory see Step 8 WPA3 provides a secure connection but some legacy WiFi devices do not detect WPA3 and support only WPA2 If your network also includes WPA2 devices select WPA3 WPA2 Personal authentication In the Passphrase fie...

Page 62: ... network If you select Enhanced Open authentication WPA3 Personal authentication or WPA3 Enterprise authentication the radio button for PMF is set to Mandatory and you cannot change it Optional This option lets the access point automatically activate PMF based on whether devices can support PMF If you select WPA3 WPA2 Personal authentication the radio button for PMF is set to Optional but you can ...

Page 63: ...ally select a single radio band only Select a radio button for a single band 2 4 GHz or 5 GHz or keep the default selection By default the Both radio button is selected which lets the access point broadcast the SSID on both bands 12 Optionally enable band steering with 802 11k radio resource management RRM and 802 11v WiFi network management By default band steering with 802 11k RRM and 802 11v Wi...

Page 64: ...nt is Bridge mode which means that WiFi clients receive IP addresses from a DHCP server or a router that functions as a DHCP server in your network This is usually the same DHCP server that assigns an IP address to the access point itself You can also set NAT mode which enables the access point s DHCP server for WiFi clients The access point s DHCP server assigns an IP address in a different range...

Page 65: ...rk VLAN are identical by default both are VLAN 1 and you enable client isolation the Allow Access to AP UI check box displays By default this check box is selected allowing an admin user to access the local browser UI over the WiFi network If you clear the Allow Access to AP UI check box an admin user cannot access the local browser UI over the WiFi network If the management VLAN and WiFi network ...

Page 66: ...age 208 20 Click the Apply button Your settings are saved 21 Make sure that you can connect to the new WiFi network If you cannot connect to the new WiFi network check the following If your WiFi enabled computer or mobile device is already connected to another WiFi network in your area disconnect it from that WiFi network and connect it to the correct WiFi network Some WiFi devices automatically c...

Page 67: ...ity warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more...

Page 68: ... default WiFi network The default WiFi network is the SSID that you renamed and for which you set a new passphrase when you initially connected to the access point This SSID is displayed as SSID1 in the local browser UI To remove a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable ...

Page 69: ... network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see Wha...

Page 70: ...an get IP addresses over the new VLAN To change the VLAN ID for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or ...

Page 71: ...splayed as SSID1 in the local browser UI Before you change the authentication and encryption consider the types of clients that must be able to connect to the WiFi network WPA3 provides a more secure connection than WPA2 but many WiFi devices might not yet detect WPA3 and support only WPA2 Similarly WPA2 provides a more secure connection than WPA but some legacy WiFi devices do not detect WPA2 and...

Page 72: ...u Open A legacy open WiFi network does not provide any security Any WiFi device can join the network We recommend that you do not use a legacy open WiFi network but configure WiFi security However a legacy open network might be appropriate for a WiFi hotspot If you select Open from the Authentication menu the Enhanced Open check box displays Enhanced Open check box cleared The WiFi network is a le...

Page 73: ...assphrase field enter a phrase of 8 to 63 characters To join the VAP a user must enter this passphrase To view the passphrase in clear text click the eye icon WPA2 Enterprise This enterprise level security uses RADIUS for centralized Authentication Authorization and Accounting AAA management For WPA2 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 1...

Page 74: ...Authorization and Accounting AAA management For WPA3 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 129 If you select this option 802 11w PMF is automatically set to mandatory see Enable or disable PMF for a WiFi network on page 75 When you select WPA3 Enterprise security the encryption is automatically set to GCMP256 which is a 256 bit encryption ...

Page 75: ...l or disabled You can also set it manually To enable or disable PMF for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can pro...

Page 76: ... WiFi network into different VLANs each accessible with a unique passphrase In a way Multi PSK lets you create different sub WiFi networks on a single WiFi network When connecting to the WiFi network the passphrase that a user enters determines the VLAN that the WiFi client is placed in In addition to a VLAN and passphrase you can associate a key identifier with the VLAN to passphrase mapping The ...

Page 77: ...s If inter VLAN routing is disabled in the network that the access point is connected to the following applies WiFi clients that are connected to different VLANs on the same WiFi network that is the WiFi clients use different passphrases to connect to the same WiFi network cannot communicate with each other and remain isolated WiFi clients that are connected to the same VLAN on different WiFi netw...

Page 78: ...n For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display You cannot configure Multi PSK on the default WiFi network displayed as SSID1 in the local bowser UI whi...

Page 79: ...the WiFi network or you can set up a schedule that specifies when the WiFi network is active Scheduling a WiFi network a green feature that allows you to turn off the WiFi network during scheduled vacations office shutdowns on evenings or on weekends For each WiFi network you can create a single custom schedule In that schedule for each day from 12 00 a m to 11 59 p m you specify the time or times...

Page 80: ...lect one of the following radio buttons Always ON The WiFi network is enabled Always OFF The WiFi network is disabled Custom The WiFi network is enabled or disabled according to a schedule that you must set up An icon displays to the right of the radio button 7 If you selected Custom in the previous step do the following a Click the icon next to the radio button A pop up window displays b Either s...

Page 81: ...z band based on the access point s channel load In an environment with multiple access points 802 11v WiFi network management helps WiFi clients that are roaming to select the best access point The access point sets the received signal strength indicator RSSI threshold automatically That is you cannot configure the RSSI threshold manually To enable or disable band steering with 802 11k RRM and 802...

Page 82: ...ettings for the selected SSID display 6 Under Band Steering 802 11 k v select one of the following radio buttons Disable Band steering is disabled for the VAP This is the default setting Enabled Under certain channel conditions the access point steers WiFi devices that are dual band capable to the 2 4 GHz or 5 GHz band of the VAP 7 Click the Apply button Your settings are saved User Manual 82 Mana...

Page 83: ...the change affects all WiFi networks on the access point The chapter includes the following sections Manage the basic WiFi settings for the radios Turn a radio on or off Change the WiFi mode for a radio Change the channel width for a radio Change the guard interval for a radio Change the output power for a radio Change the channel for a radio Manage Quality of Service for a WiFi radio Note If you ...

Page 84: ...ser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight ...

Page 85: ...can connect to the access point This is the default setting 11ng 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax clients is limited to the maximum speed that is supported by 802 11ng about 400 Mbps 11bg 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax and 802 11ng clie...

Page 86: ...channel improves the performance no or minimal interference and better data rates The 802 11n specification allows a 40 MHz wide channel in addition to the legacy 20 MHz channel that is available with other modes The 802 11ac specification allows an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other modes The 802 11ax specification for the 5 GHz radio a...

Page 87: ...eed to reconnect Turn a radio on or off By default both the 2 4 GHz and 5 GHz radios broadcast Turning off a radio disables WiFi access for the associated band which affects all WiFi networks VAPs or SSIDs in that band Turning off a radio can be helpful during configuration network tuning or troubleshooting To turn a radio on or off 1 Launch a web browser from a computer that is connected to the s...

Page 88: ...By default all types of WiFi clients can access a WiFi network on the access point that is the WiFi modes on the access point support 802 11ax 802 11ac 802 11na 802 11ng 802 11bg 802 11b and 802 11a clients You can change the WiFi modes to limit access to certain types of clients To change the WiFi mode for a radio 1 Launch a web browser from a computer that is connected to the same network as the...

Page 89: ...maximum speed that is supported by 802 11bg about 54 Mbps 11b 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax 802 11n and 802 11bg clients is limited to the maximum speed that is supported by 802 11b about 11 Mbps 5 GHz radio Select one of the following WiFi modes for the 5 GHz radio 11ax 802 11ax 802 11ac 802 11na and 802 11a WiFi ...

Page 90: ...llow an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other WiFi modes The 802 11ax specification for the 5 GHz radio allows a 160 MHz wide channel in addition to the 20 MHz 40 MHz and 80 MHz channels that are available with other WiFi modes The 40 MHz 80 MHz and 160 MHz channels enable higher data rates but leave fewer channels available for use on the ...

Page 91: ...gs 20 MHz This is the default setting for the 2 4 GHz radio 40 MHz This is the default settings for the 5 GHz radio 80 MHz This selection is available only for the 5 GHz radio 160 MHz This selection is available only for the 5 GHz radio Dynamic 20 40 MHz This selection is available only for the 2 4 GHz radio Dynamic 20 40 80 160 MHz This selection is available only for the 5 GHz radio 6 Click the ...

Page 92: ...The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page...

Page 93: ...w displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access poin...

Page 94: ...ame network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the acces...

Page 95: ...cess point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin...

Page 96: ... makes it very suitable for applications such as VoIP and streaming media Video The second highest priority queue with low delay Video applications are routed to this queue Best effort The medium priority queue with medium delay Most standard IP applications use this queue Background The low priority queue with high throughput Applications such as FTP that are not time sensitive but require high t...

Page 97: ...ue external captive portal to each WiFi network Facebook Wi Fi captive portal A Facebook business page that serves as a portal You can configure a single Facebook Wi Fi captive portal on the access point but you can apply it to multiple WiFi networks The chapter includes the following sections Set up a click through captive portal for a WiFi network Set up an external captive portal for a WiFi net...

Page 98: ...proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access ...

Page 99: ...If the Redirect URL check box is cleared a user is directed to the default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the default title displays on the captive portal login page Title Enter a message to the user This message is displayed on the captive portal login page If you do not customize the message the default m...

Page 100: ...he EULA on the captive portal login page select the EULA check box EULA Max 1 KB 9 To preview the captive portal login page click the Preview button The following figure shows an example that is the figure does not show the default captive portal but a customized one 10 Click the Apply button Your settings are saved WiFi clients attempting to connect to the SSID are presented with the captive port...

Page 101: ...ion for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insigh...

Page 102: ...Authentication URL Enter the web authentication URL that is provided by the vendor Key Enter the key credential that is provided by the vendor This field is optional and depends on the authentication requirements of the vendor Secret Enter the secret credential that is provided by the vendor This field is optional and depends on the authentication requirements of the vendor Radius Authentication f...

Page 103: ...net Instead they get a message Oops Something went wrong Please try after some time 12 Select one of the following Allow HTTPS buttons to specify when secure HTTP HTTPS traffic is allowed to pass through Enable Before authentication occurs HTTPS traffic is allowed to pass through Disable This is the default setting HTTPS traffic is allowed only after authentication occurs 13 Configure the walled g...

Page 104: ...2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user nam...

Page 105: ... button and configure the settings d To limit the session length click the Session length Edit button and configure the settings Clients are automatically logged out when the session length is exceeded 10 Refresh the page in the local browser UI 11 To allow clients that are connected to the Facebook captive portal to establish a secure HTTP HTTPS session before the captive portal authentication oc...

Page 106: ...rning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more infor...

Page 107: ...e that option for a captive portal or you want to use another Facebook account you can unregister the access point from Facebook Wi Fi and remove the access point s entry To unregister the access point from Facebook Wi Fi and remove the access point s entry 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Et...

Page 108: ...o radio button The capability to register is disabled However the access point s entry on the Facebook business page is not yet removed 6 Click the Apply button Your settings are saved 7 Go to the Facebook business page and log in to your account 8 Select the check box for the access point s entry 9 Click the Delete button The access point s entry is removed User Manual 108 Set Up and Manage a Cap...

Page 109: ...cal MAC access control lists Manage neighbor AP detection Set up RADIUS servers Enable L2 security Note For information about essential WiFi security network authentication and encryption see Set up an open or secure WiFi network on page 58 Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual access point That is when we refer to a WiFi...

Page 110: ...ecurity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location...

Page 111: ...RLs in the domain are blocked For example if you add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword entry to the blacklist enter the keyword in the lower field to the left of the lower Add button and click the lower Add button To remove a keyword entry from the blacklist select the check box for t...

Page 112: ...o the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name ...

Page 113: ... in again By default a session expires after 45 minutes 7 Click the Apply button Your settings are saved Change the time out period for a user session When a user logs in to the local browser UI the session times out automatically after 45 minutes You can change the time out period which applies to all users including the admin user To change the time out period for a user session 1 Launch a web b...

Page 114: ...nt Configuration System Advanced User Accounts 5 Under Session Timeout use the Hours and Minutes fields to specify the period after which a session automatically expires and the user must log in again By default a session expires after 45 minutes 6 Click the Apply button Your settings are saved Your session is terminated and you must log in again Change the settings for a user account You cannot c...

Page 115: ... user accounts display 5 To the right of the user account change the existing settings as needed User Name Enter another user name Password Enter another password between 8 and 64 characters in length The password must contain at least one uppercase letter one lowercase letter and one number The following special characters are allowed Privilege From the menu select Read Write or Read Only 6 Click...

Page 116: ...warning pop up window displays 6 Click the Delete button The pop up windows closes and the user account is removed Manage local MAC access control lists The access point supports eight local access control lists ACLs that are based on MAC addresses Each local MAC ACL can contain a total number of 512 MAC addresses If you set up an ACL with a policy that allows access and you apply that ACL to a Wi...

Page 117: ...Custom 2 If enabled allows access to trusted stations by default Custom 3 If enabled allows access to trusted stations by default Custom 4 If enabled allows access to trusted stations by default By default these MAC ACLs are disabled and do not include any stations You can manually add devices import devices see Import an existing MAC access control list on page 120 or do both You can use a MAC AC...

Page 118: ... group name for the MAC ACL that you want to set up The previous figure shows some examples Devices in the Available Stations table are automatically detected by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as Connected 6 To change the group name enter a new name...

Page 119: ... the check box for the device and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device the device is once again placed in the Available Stations table For an ACL for which you selected the Deny radio button in Step 7 do the following To manually add a device to the Untrusted Stations t...

Page 120: ...xadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 You must separate entries with a comma The file must be in text format that is with a txt or cfg extension You can use a MAC ACL to control which WiFi devices can access a WiFi network You can apply a MAC ACL to more than one WiFi network To import an existing MAC ACL 1 Launch a web browser from a computer that is...

Page 121: ... by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as connected 6 To change the group name enter a new name in the Group Name field The default group names for the eight MAC ACLs are Management Guest Guest1 Custom Custom 1 Custom 2 Custom 3 and Custom 4 7 Select th...

Page 122: ...AC addresses on the import list are placed in the Trusted Stations table c To remove a MAC address from the Trusted Stations table select the MAC address and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device the device is once again placed in the Available Stations table For an ACL ...

Page 123: ...t neighbor access points APs in a radio band and you can classify them as known APs If you enable neighbor AP detection for a radio band the access point regularly scans the WiFi network collects information about all access points on the channels and maintains a list of access points it detects in the area Initially all detected access points are displayed in the Unknown AP List You can add acces...

Page 124: ...access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is adm...

Page 125: ...eighbor access points every hour This is the default setting Moderate The access point scans for neighbor access points every 30 minutes Aggressive The access point scans for neighbor access points every 15 minutes Detected neighbor access points display in the Unknown AP List User Manual 125 Manage Access and Security Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 126: ...can delete access points from the Known AP List After being detected these access points once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing neighbor access point list in the Known AP List You can import a list with MAC addresses of known neighbor access points in the Known AP List The file with MAC addresses must be in the following format...

Page 127: ... you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed th...

Page 128: ...own AP List are replaced with the ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the import file The MAC addresses on the import list are placed in the Known AP List c To remove a MAC address from the Known AP List select the MAC address and click the Delete button When you remove a d...

Page 129: ...ists on page 116 If you use a RADIUS MAC ACL you must define the ACL on the RADIUS server using the format in the following example for client MAC addresses in the RADIUS server If the client MAC address is 00 0a 95 9d 68 16 specify it as 000a959d6816 in the RADIUS server To set up RADIUS servers 1 Launch a web browser from a computer that is connected to the same network as the access point or di...

Page 130: ...s 1812 Password Enter the password shared key that is used between the access point and the RADIUS server during the authentication or accounting process By default the password is sharedsecret 6 To enable accounting on the authentication servers click the Enable Accounting button so that the button displays blue 7 Configure the following authentication settings which apply to all RADIUS server th...

Page 131: ...that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case...

Page 132: ...6 Click the Apply button Your settings are saved User Manual 132 Manage Access and Security Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 133: ...e 802 1Q VLAN and management VLAN Set an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disable Ethernet LLDP Enable or disable UPnP Manage the multicast DNS gateway Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual access ...

Page 134: ... security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network locati...

Page 135: ...er on your LAN Primary DNS IP address of the secondary DNS server on your LAN or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the new IP settings Enable the DHCP client By default the DHCP client of the access point is enabled and the access point receives an IP address from a DHCP server or a router that functions as a DHCP s...

Page 136: ...fied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configur...

Page 137: ... If a port is a member of a single VLAN its traffic can be untagged A management VLAN and the following features are mutually exclusive mDNS gateway see Manage the multicast DNS gateway on page 145 NAT mode see Set NAT mode or Bridge mode for addressing and traffic on page 199 To set the 802 1Q VLAN and management VLAN 1 Launch a web browser from a computer that is connected to the same network as...

Page 138: ... that VLAN ID is supported on your network Tagged VLAN Clear the Untagged VLAN check box only if the hubs and switches on your LAN support the 802 1Q VLAN protocol The access point tags all frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN only if the hubs and switches on your LAN...

Page 139: ...n Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the...

Page 140: ...otocol 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What ...

Page 141: ...onfigured correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If y...

Page 142: ...1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do i...

Page 143: ... as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point use...

Page 144: ...ugh an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password i...

Page 145: ...ge screen device connected to a WiFi network on VLAN 30 another mDNS gateway policy can make this possible A service can run either on a wired or WiFi device but for a WiFi client to be able to access the service the WiFi client must be connected to a WiFi network on an access point that has the mDNS gateway feature enabled In a network with multiple access points that support the mDNS gateway fea...

Page 146: ...y 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do...

Page 147: ...vice that you select from the Shared Services menu Service IP Enter the IP address of the shared device or service that you select from the Shared Services menu Allowed Wireless Network From the Allowed Wireless Network menu select the WiFi networks with their associated VLANs which include as members the WiFi devices that must be able to use the type of shared devices or service that you select f...

Page 148: ...the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration mDNS Gateway The mDNS Gateway page displays 5 To change a policy a Click the pencil and notebook icon to the right of the policy b Change the settings For more information about the settings see Enable the m...

Page 149: ...e zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser UI Schedule the access point to reboot Return the access point to its factory default settings Enable SNMP and manage the SNMP settings Manage the LEDs Manage the Energy Efficiency Mode Note In this manual WiFi network means the ...

Page 150: ...xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can manage the access point locally from a WiFi or wired device through the local browser UI In this mode the access point functions as a standalone device and is not connected to the Insight cloud based ...

Page 151: ... 5 Select one of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode CAUTION When you change the management mode from Web browser mode to NETGEAR Insight mode the configuration of the access point is reset cleared with the exception of the IP address access point name and pas...

Page 152: ...point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The ...

Page 153: ...d to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If y...

Page 154: ...thernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the on...

Page 155: ...n 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user n...

Page 156: ...e 156 Set the time zone When the access point synchronizes its clock with a Network Time Protocol NTP server the page shows the date and time If the page does not show the correct date and time you might need to set the time zone and adjust the daylight saving time setting To set the time zone and adjust the daylight saving time setting 1 Launch a web browser from a computer that is connected to t...

Page 157: ...justed according to your settings For information about other time settings see Specify a custom NTP server on page 155 Manage the syslog settings If a syslog server is present on your network you can configure the access point to send its system logs to the syslog server To manage the syslog settings and enable the syslog function 1 Launch a web browser from a computer that is connected to the sa...

Page 158: ... firmware is stored in flash memory You can check to see if new firmware is available and update the access point to the new firmware You can also visit the NETGEAR support website download the firmware manually to a local computer and update the access point to the new firmware If someone usually the network administrator places new firmware on a secure FTP SFTP server in the network you can load...

Page 159: ...new firmware and update the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warn...

Page 160: ... the Dashboard page 8 Read the new firmware release notes to determine whether you must reconfigure the access point after updating Manually download firmware and update the access point Downloading firmware to a local computer and updating the access point are two separate tasks that are combined in the following procedure After you update the access point to new firmware the old firmware is save...

Page 161: ...me and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR In...

Page 162: ...tgearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret To revert to the backup firmware on the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet ca...

Page 163: ...firmware do not interrupt the reversion For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED remains solid green or solid blue 7 Verify that the access point runs the backup firmware version by logging back in to the access point The firmware version is displayed on the Dashboar...

Page 164: ... SFTP 6 Specify the following server settings Firmware File The name of the access point firmware file on the SFTP server SFTP Server IP The IP address of the SFTP server on your network User Name The user name that is required to access the SFTP server Password The password that is required to access the SFTP server 7 Click the Upgrade button WARNING To avoid the risk of corrupting the firmware d...

Page 165: ...cess point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previous...

Page 166: ...year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18 21_16 44 12 config tar 8 Follow the directions of your browser to save the file Restore the access point configuration If you backed up the configuration file you can restore the configuration from t...

Page 167: ...s point s MAC address or the system name dd is the date mm is the month yy is the year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18 21_16 44 12 config tar 6 Click the Restore button A pop up window displays 7 Enter the password that you specified wh...

Page 168: ...wser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that locatio...

Page 169: ... user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 2...

Page 170: ... to access the access point you must use the Reset button After you reset the access point to factory default settings the password for the admin user name is password the access point s DHCP client is enabled the setup SSID is shown in the format NETGEARxxxxxx SETUP and the default password for WiFi access is sharedsecret If the access point does not receive an IP address from a DHCP server the L...

Page 171: ... Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED turns solid green or solid blue Use the local browser UI to reset the access point You can use the access point s local browser UI to return the access point to its factory default settings CAUTION This process erases all settings that you configured in the access point To reset the access poi...

Page 172: ...ays 5 Click the Restore Defaults button A warning pop up window displays 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset is complete the access point reboots This process takes about two minutes WARNING To avoid the risk of corrupting the firmware do not interrupt the reset For example do not close the browser click a l...

Page 173: ...ified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Mainten...

Page 174: ...the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user na...

Page 175: ... resume normal operation Note the following restrictions Wireless distribution system EEM is mutually exclusive with a wireless distribution system WDS see Set up a WiFi Bridge on page 213 Neighbor AP detection EEM does not let the 5 GHz radio detect neighbor APs see Manage neighbor AP detection on page 123 DFS channels When WiFi clients connect to the access point and the access point resumes nor...

Page 176: ...that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Manag...

Page 177: ...ccess points Display client distribution connected clients and client trends View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization View or download tracked URLs View save download or clear the logs View a WiFi bridge connection View alarms and notifications Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual...

Page 178: ...in The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard p...

Page 179: ...op of the Dashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet MAC address The serial number Device uptime Firmware version The date and time that the access point itself or someone manually last checked if new firmware was available This pane also contains a b...

Page 180: ...em Information section The following settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The MAC address of the LAN Ethernet port of the access point Wireless MAC Address for 2 4 GHz The MAC address of 2 4 GHz WiFi interface radio of the access point Wireless MAC Address for 5 GHz The MAC address of 5 GHz WiFi interface radio...

Page 181: ...The following settings are displayed IPv4 Address The IPv4 address of the access point Subnet Mask The subnet mask of the access point Default Gateway The default gateway for the access point DHCP Client The status of DHCP client Enabled or Disabled Wireless Settings section The following settings are displayed with separate columns for the 2 4 GHz and 5 GHz radios Antenna The type of antenna by d...

Page 182: ...rd for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Locate the Radio Information pane at the top right corner of the Dashboard page if the page width on your device is sufficient otherwise it might be elsewhere The following settings are displayed Radio status If the 2 4 GHz or 5 GHz icon is displayed as gray the ra...

Page 183: ... of 5 GHz WiFi interface radio of the access point Power Source The type of power source PoE 802 3at or Power Adapter Ethernet LLDP The status of Ethernet LLDP feature Enabled or Disabled Country Region The country or region in which the access point operates or for which the access point is licensed Current Firmware Version The version of the firmware that is running on the access point Backup Fi...

Page 184: ...iFi mode of the radio Channel Frequency The channel and frequency that are used by the radio Display unknown and known neighbor access points If you enabled neighbor access point AP detection see Manage neighbor AP detection on page 123 you can display the unknown access points in the Unknown AP list and the known access points in the Known AP list To display the detected neighbor access points 1 ...

Page 185: ...the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Monitoring Neighbor AP At the top of the page for each radio band the page displays the total number of unknown access points For information about moving unknown access points to the Known AP list see Enable neighbor access point detection and move access points to the Known AP List on page 124 5 To display the mos...

Page 186: ...tion for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insig...

Page 187: ...ss and SSID for the client You can also view more information including very detailed information see Step 11 and Step 12 8 To display trends about clients scroll down to the Hours Trend pane The Hours Trend pane shows a graph with the number of clients the traffic in MBps or the channel utilization over a period that you can select The previous figure shows the trend for the last 48 hours By defa...

Page 188: ... of the client IP Address The IP address associated with the client Host Name The host name of the client OS The operating system that runs on the client BSSID The BSSID that the client connects to SSID The SSID of the radio that the client connects to Channel The channel that the client connects to Channel Width The width of the channel that the client connects to Tx Rate The rate of traffic tran...

Page 189: ...nected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 ...

Page 190: ...int to a node on one of the lines on the graph 6 To view channel utilization do the following a Click the Channel Utilization button The graph shows the channel utilization for the 2 4 GHz radio b To view the channel utilization for the 5 GHz radio click the 5 GHz button c To view more information point to a bar 7 To change the period over which information is filtered and displayed select the num...

Page 191: ...t recent information click the Refresh button View or download tracked URLs If you enabled URL tracking for a WiFi network see Enable or disable URL tracking for a WiFi network on page 202 you can view the tracked URLs by URL WiFi client and SSID You can also download a URL tracking report as a csv file To view or download tracked URLs 1 Launch a web browser from a computer that is connected to th...

Page 192: ...ccess point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Monitoring URL Tracking By default the table shows the URLs that were accessed each with the MAC address of the WiFi client that accessed the URL the assoc...

Page 193: ...e SSID c Click the Close button The pop up window closes 8 To download a URL tracking report as a csv file click the Download button and follow the directions of your browser 9 To clear all URL tracking information do the following a Click the Clear button A warning pop up window displays b Click the OK button The pop up window closes and the information is cleared View save download or clear the ...

Page 194: ...d password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight...

Page 195: ...ints that form the WiFi bridge To view a WiFi bridge connection 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exceptio...

Page 196: ...ernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one ...

Page 197: ...ime that you viewed alarms and notifications 5 Click the alarm bell icon The pop up window shows the alarms indicated by a red bell and notifications indicated by a blue bell with a description and time 6 To view more alarms and notification scroll down in the pop up window User Manual 197 Monitor the Access Point and the Network Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 198: ...ork Enable or disable URL tracking for a WiFi network Change the format of the DHCP offer messages in a WiFi network Select a MAC ACL for a WiFi network Set bandwidth rate limits for a WiFi network Configure advanced rate selection for a WiFi network Note If you want to change the settings of a WiFi network on the access point use a wired connection to avoid being disconnected when the new WiFi se...

Page 199: ...o the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter th...

Page 200: ...s in the range from 192 168 0 1 to 192 168 0 254 a common IP address range enter a network address that is different from 192 168 0 0 b In the DNS field enter the IP address for the DNS server that you want to use This IP address must be different from the WLAN network address that you set in the previous step 8 Click the Apply button Your settings are saved Enable or disable client isolation for ...

Page 201: ...Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Und...

Page 202: ... network For example you could enter the static IP address or domain name of a network printer that you want to make available to WiFi clients A domain name on the Allowlist must resolve to a static IP address c Click the Move button The addresses and domain names are added to the Allowlist d To remove one several or all addresses and domain names select individual check boxes or the Select All ch...

Page 203: ...ded the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 C...

Page 204: ...Fi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specifie...

Page 205: ... up MAC ACL security for that SSID You can also set up a RADIUS server see Set up RADIUS servers on page 129 and select the RADIUS MAC ACL You must define the ACL on the RADIUS server using the following format for client MAC addresses in the RADIUS server If the client MAC address is 00 0a 95 9d 68 16 specify it as 000a959d6816 in the RADIUS server Note A RADIUS MAC ACL cannot function if the WiF...

Page 206: ...sight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Selec...

Page 207: ...security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network locatio...

Page 208: ...ty of clients the client density Types of clients the WiFi modes that clients can support including legacy WiFi modes Throughput speed for clients Area that the WiFi network must cover To successfully configure advanced rate selection we recommend that you determine what the clients in your network can require the types of traffic the supported WiFi modes and the expected throughput speed how many...

Page 209: ...are interdependent Density The density the number and proximity of clients in the WiFi network The density is one of the four components of the density level A setting of 0 means a very low client density A setting of 4 means a very high client density Compatibility The compatibility with WiFi modes for legacy clients in the WiFi network A setting of 0 means compatibility with 802 11b g n ax clien...

Page 210: ...rd The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on ...

Page 211: ...rol for beacon and other management frames and for control and data frames select the Rate Control check box If you select the Rate Control check box the Density Level slider becomes available 9 To set the density level for your environment move the Density Level slider to 0 1 2 3 or 4 As you move the slider the selected density level is mapped to a corresponding WiFi mode beacon rate minimum lega...

Page 212: ...upports all types of clients in the 5 GHz radio band in any position of the slider Overall performance for the WiFi clients In the default 11ax WiFi mode for the radios the setting can be reduced moderate good very good or optimal depending on the position of the slider WiFi coverage In the default 11ax WiFi mode for the radios the setting can be very narrow narrow average wide or very wide depend...

Page 213: ...Install the Access Point in an Insight Instant Mesh WiFi Network on page 44 The chapter includes the following sections WiFi base station WiFi repeater and WiFi bridge requirements Set up a WiFi bridge between access points Note If you enable Energy Efficiency Mode you cannot use a WDS To use a WDS first disable Energy Efficiency Mode For more information see Manage the Energy Efficiency Mode on p...

Page 214: ...hrough the WiFi base station The following figure shows two access points in a WiFi repeating setup with a WiFi base station on the left side and a single WiFi repeater on the right side Figure 9 WiFi bridge configuration between two access points in the 5 GHz radio band To use a WiFi bridge you cannot use the auto channel feature for the access point and the SSID broadcast must be enabled For a W...

Page 215: ...s that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are ca...

Page 216: ... on this page The MAC address is displayed for your information Enter this MAC address on the remote access point of the WDS connection Local MAC Address The MAC address of the remote WDS radio interface that is the MAC address of the remote radio on which the WDS is established Remote MAC Address By default the selection from the menu is Open in which case authentication and data encryption are n...

Page 217: ...nts If the configuration is set up correctly a computer on any WiFi or wired LAN segment of the access point that functions as the WiFi repeater can connect to the Internet or share files and printers with any other computer or server connected to the access point that functions as the WiFi base station Note After the WiFi bridge is established you cannot change the WiFi channel for the radio on w...

Page 218: ...not specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the advanced WiFi settings for the radios Manage the maximum number of clients for a radio Manage the broadcast and multicast settings for a radio Manage load balancing for the radios Manage sticky clients Manage the ARP proxy Note If you want to change the radio se...

Page 219: ...that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on...

Page 220: ...can specify the radio settings for the 2 4 GHz and 5 GHz radios individually but the check box for the 802 11n 256 QAM feature applies to the 2 4 GHz radio only the feature is always enabled for the 5 GHz radio The 802 11h feature applies to the 5 GHz radio only User Manual 220 Manage the Advanced Radio Features Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 221: ... the WiFi mode is 802 11n you can select the 802 11n 256 QAM check box to enable the 2 4 GHz radio to function over 256 quadrature amplitude modulation QAM which can increase the 2 4 GHz radio throughput for 802 11n clients that are capable of supporting 256 QAM By default 256 QAM is disabled for the 2 4 GHz radio that is the check box is cleared By default 256 QAM is enabled for the 5 GHz radio a...

Page 222: ...dio button is selected and 802 11h is disabled You can enable or disable 802 11h for the 5 GHz radio but not for the 2 4 GHz radio 802 11h 6 Click the Apply button A warning pop up window displays 7 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Manage the maximum number of clients for a radio The number...

Page 223: ...ht app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced The Wireless Settings page displays 5 In the Max Wireless Clients field for the radio enter the maximum number of WiFi clients that can simultaneously associate with the radio ...

Page 224: ...are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced Wireless...

Page 225: ...the following types of load balancing are enabled with their default settings Load balancing based on the maximum number of clients The access point allows client associations up to the specified maximum number of clients After the maximum number is exceeded new clients are rejected Even though this is a global setting it is implemented per radio Load balancing based on the channel load The access...

Page 226: ...ccess point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi u...

Page 227: ...ve the associated slider to specify the maximum percentage of channel load that is allowed on the radio before it stops accepting new client associations For each radio the minimum percentage of channel load is 50 the maximum percentage is 90 and the default percentage is 70 Based on Channel Receive Signal Strength For each radio move the associated slider to specify the minimum required RSSI valu...

Page 228: ...ion 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user...

Page 229: ...n exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through th...

Page 230: ...ot cannot connect Troubleshoot WiFi connectivity for a WiFi client device Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes are not saved You enter the wrong password and can no longer log in to the access point Troubleshoot your network using the ping utility Note In this manual WiFi network means the same as SSID service set identifier or WiFi net...

Page 231: ... What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight netwo...

Page 232: ...g the packet capture process normal functioning of the access point is not affected The packet capture capability can be useful for analyzing a WiFi deployment monitoring a WiFi network debugging protocols determining WiFi network bottlenecks and in general troubleshooting any irregularities in a WiFi network You can select to capture all packets or selected packets only Note To view the captured ...

Page 233: ...ngs that are described in the following table Description Setting From the Capture Interface menu select one of the following interfaces on which packets must be captured br lan All packets are captured that is packets on the Ethernet interface 2 4 GHz radio and 5 GHz radio This is the default setting Eth0 Only packets on the Ethernet interface are captured radio1 Only packets on the 2 4 GHz radio...

Page 234: ...ace You must enter the MAC address in hexadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 Client Filter MAC Address Enter the maximum duration of the capture process that is if you do not click the Stop button The range is from 10 to 3600 seconds By default the maximum duration is 300 seconds Capture Duration 10 3600 secs 6 To start the packet capture process cli...

Page 235: ...iFi connection see Connect to the access point for initial configuration on page 21 Make sure that the WiFi client device supports the authentication and encryption that you are using for the WiFi network For more information see Change the authentication and encryption for a WiFi network on page 71 Note If the access point s WiFi authentication and encryption is set to WPA3 Personal and the WiFi ...

Page 236: ...ted to the Insight cloud based management platform Solid blue The access point functions in Insight mode and is connected to the Insight cloud based management platform 2 When the startup procedure is complete verify the following The LAN LED lights solid green or solid amber depending on the speed of the Ethernet link If the access point processes Ethernet traffic the LAN LED blinks green or blue...

Page 237: ...connected to the access point and that the power adapter is correctly connected to a functioning power outlet If it is plugged into a power strip make sure that the power strip is turned on If it is plugged directly into the wall verify that the outlet is not switched off Make sure that you are using the NETGEAR power adapter for this product That is do not use the NETGEAR power adapter for anothe...

Page 238: ...continuously the access point did not receive an IP address from a DHCP server Check to make sure that the DHCP client of the access point is enabled see Enable the DHCP client on page 135 that your network includes a DHCP server or a router that functions as a DHCP server and that the DHCP server can reach the access point both must be on the same network In the unlikely situation that your netwo...

Page 239: ...t connected to the Insight cloud based management platform If the access point functions in the NETGEAR Insight management mode and the Power Cloud LED does not light blue try the following troubleshooting steps until the problem is resolved 1 Verify that the management mode of the access point is NETGEAR Insight For more information see Change the management mode to NETGEAR Insight or Web browser...

Page 240: ...ne root is available for the node to connect to Make sure that all roots run the latest firmware version Make sure that the output power of each radio on each root is at its maximum level By default the output power for a radio is at its maximum level For more information see Change the output power for a radio on page 93 Make sure that the node is not too far away from a root For more information...

Page 241: ...less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root To sync the node and the root after you already added the node to an Insight network location 1 Place the node in the same room as the root Use this node location only during the sync process 2 Connect the node to a power source If you do not use a PoE connection to a PoE switch connect a power adapter to the D...

Page 242: ... the node s Power Cloud LED lights solid blue the node and root synced successfully If the node and root did not sync move the node closer to the root and try again The node must be within the root s WiFi coverage area to establish a good or fair WiFi connection Troubleshoot WiFi connectivity for a WiFi client device If a WiFi client device cannot connect to the access point or the WiFi connectivi...

Page 243: ...onnected when the new WiFi settings take effect If the WiFi client device finds the WiFi network but the signal strength is weak check these conditions Is the WiFi client device too far from the access point or too close Place the WiFi client device near the access point but at least 6 feet 1 8 meters away and see whether the signal strength improves Are objects between the WiFi client device and ...

Page 244: ...fixed IP address on page 134 change the IP address and subnet mask on your computer to so that the IP addresses of your computer and the access point are in the same IP subnet Try quitting the browser and launching it again If you are using on older type of browser make sure that Java JavaScript or ActiveX is enabled in your browser For example if you are using Internet Explorer click the Refresh ...

Page 245: ...e access point might be blocked for five minutes The blockage period depends on the number of failed login attempts During the blockage period any attempts to log in to the access point are ignored even if you enter the correct password You must wait until the blockage is lifted and then you get a single opportunity to enter the correct password If you enter the wrong password again the blockage p...

Page 246: ...ity that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a network using the ping utility in your computer or workstation Test the LAN path to your access point You can ping the access point from your computer to verify that the LAN path to your access point is set up correctly To ping the access point from a Windows bas...

Page 247: ... a remote device 1 From the Windows taskbar click the Start button and find and select Run 2 In the field provided enter ping n 10 IP address IP address is the IP address of a remote device such as a remote DNS server If the path is functioning correctly replies as described in Test the LAN path to your access point on page 246 display If you do not receive replies do the following Check to see th...

Page 248: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 248 ...

Page 249: ...see Connect over WiFi using the NETGEAR Insight app on page 24 AP login password WiFi network settings for initial setup and WiFi login The SSID for initial setup is NETGEARxxxxxx SETUP where xxxxxx is the last six hexadecimal digits of the access point s MAC address Note The first time that you log in to the local browser UI you must change the SSID If you previously added the access point to a N...

Page 250: ...ficiency Mode WLAN settings for an individual WiFi network SSID or VAP Enabled Broadcast SSID 1 VLAN ID for WiFi clients WPA2 Personal which is WPA2 PSK The nonconfigurable data encryption for WPA2 Personal is AES Network authentication Disabled 802 11w PMF Disabled Multi PSK Always on Broadcast schedule All enabled Radio bands Disabled Automatic band steering includes automatic 802 11k RRM and au...

Page 251: ...ut power 2 4 GHz radio Auto 5 GHz radio Auto Channel 2 4 GHz radio Enabled 5 GHz radio Enabled Wi Fi Multimedia WMM 2 4 GHz radio Enabled 5 GHz radio Enabled WMM Powersave Advanced radio settings that apply to all WiFi networks SSIDs or VAPs 2 4 GHz radio 128 default also the maximum number 5 GHz radio 128 default also the maximum number Number of WiFi clients 2 4 GHz radio Enabled at 2346 5 GHz r...

Page 252: ...adios Disabled Force sticky clients to disassociate Disabled ARP proxy None configured Wireless bridge General security Disabled URL filtering None configured RADIUS servers 2 4 GHz radio Disabled 5 GHz radio Disabled Neighbor AP detection Eight default ACLs but none configured with MAC addresses MAC ACLs Disabled L2 security Remote management Disabled SNMP User Manual 252 Factory Default Settings...

Page 253: ...sonal WPA3 Enterprise WPA3 WPA2 Personal WPA2 Personal WPA2 Enterprise WPA2 WPA Personal Open Enhanced and Open 802 11 security WiFi Multimedia Prioritization WMM Wireless distribution system WDS WiFi standards 4 2 2 streams 2 4 GHz radio 2 streams 5 GHz radio 2 streams WiFi streams 2 4 GHz band US 2 412 2 462 GHz Europe 2 412 2 472 GHz 5 GHz band US 5 18 5 885 Europe 5 18 5 32 GHz and DFS 5 50 5 ...

Page 254: ...04ºF 0 to 40 C Operating temperature 10 to 90 maximum relative humidity noncondensing Operating humidity 4 to 158 F 20º to 70ºC Storage temperature 5 to 95 maximum relative humidity noncondensing Storage humidity FCC Part 15 Report EMI SubPart B CE EMC Report EN 55032 24 35 Report EN 301 489 1 17 EMC Report EMI certification FCC Grant FCC Authorization FCC Spectrum Report Part 15 SubPart C 15 247 ...

Page 255: ...at you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed Before you mount the access point first set up and test the access point to verify WiFi network connectivity This appendix includes the following sections Mounting parts Mount the access point on a wall Mount the access point to a T bar Unmount the a...

Page 256: ... Figure 10 Mounting plate Figure 11 Metal bracket with T bar lock lock screw and 4 short screws Figure 12 3 tall screws and anchors for wall mounting User Manual 256 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 257: ... wall with a soft mallet until the anchors are flush with the wall 5 Use the screws to attach the mounting plate to the wall Note Do not insert the screws into the wall without anchors 6 Connect an Ethernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the wall w...

Page 258: ... bar To mount the access point to a T bar 1 If the T bar lock is not yet attached to the metal bracket slide the T bar lock partially into the metal bracket 2 Attach the metal bracket to the T bar 3 Push the T bar lock over the T bar User Manual 258 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 259: ...hernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the ceiling surface when it is mounted User Manual 259 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 260: ...de down and attach it to the mounting plate 8 Turn the access point clockwise until it locks in the mounting plate User Manual 260 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 261: ...User Manual 261 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Page 262: ...our thumb on the center of the LEDs and your finger on the other side of the access point directly opposite the thumb 2 Press and hold the latch down to release the lock and keep the lock open 3 Turn the access point counterclockwise until the access point releases from the mounting plate User Manual 262 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model W...

Page 263: ...access point from the mounting plate The mounting plate remains attached to the ceiling or the wall User Manual 263 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Reviews:

No comments

Related manuals for WAX618

Brand: HAN Pages: 2

Brand: Mobility Sound Pages: 2

Brand: Skyrc Pages: 2

Brand: EnGenius Pages: 73

NanoStation 5AC Loco

Brand: Ubiquiti Pages: 18

Brand: Ubiquiti Pages: 20

Brand: Kasda Pages: 42

Brand: Cellient Pages: 23

Brand: EnGenius Pages: 117

Brand: RadioLabs Pages: 9

Brand: Zte Pages: 51

CradlePoint PHS300tw

Brand: Cradlepoint Pages: 2

Brand: EnGenius Pages: 84

Brand: HPE Pages: 4

Brand: ELTEX Pages: 74

Conduit AP MTCAP-LAP3-915-041

Brand: Multitech Pages: 27

Brand: Blake UK Pages: 13

Brand: Element Pages: 16

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands