NETGEAR WAX625 User Manual Download Page 1

Page: 1 / 270

User Manual

Insight Managed WiFi 6 AX6000
Tri-band Multi-Gig Access Point

WAX630

NETGEAR, Inc.
350 E. Plumeria Drive

September 2022

San Jose, CA 95134, USA

202-12194-05

Summary of Contents for WAX625

Page 1: ...User Manual Insight Managed WiFi 6 AX6000 Tri band Multi Gig Access Point WAX630 NETGEAR Inc 350 E Plumeria Drive September 2022 San Jose CA 95134 USA 202 12194 05...

Page 2: ...t privacy policy By using this device you are agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purc...

Page 3: ...rowser UI for initial configuration on page 27 Connect over the LAN to the local browser UI for initial configuration on page 32 Configure the access point offline using a directly connected computer...

Page 4: ...he Internet using the NETGEAR Insight Cloud Portal 23 Connect over WiFi using the NETGEAR Insight app 25 Connect over WiFi to the local browser UI for initial configuration 27 Connect over the LAN to...

Page 5: ...ttings for the radios 85 Turn a radio on or off 88 Change the WiFi mode for a radio 89 Change the channel width for a radio 91 Change the guard interval for a radio 93 Change the output power for a ra...

Page 6: ...lity 146 Enable link aggregation for the LAN 2 port 147 Disable link aggregation for the LAN 2 port 148 Chapter 10 Manage and Maintain the Access Point Change the management mode to NETGEAR Insight or...

Page 7: ...etwork Set NAT mode or Bridge mode for addressing and traffic 201 Enable or disable client isolation for a WiFi network 202 Enable or disable URL tracking for a WiFi network 204 Change the format of t...

Page 8: ...6 Troubleshoot WiFi connectivity for a WiFi client device 248 Troubleshoot Internet browsing 249 You cannot log in to the access point over a LAN connection 249 Changes are not saved 250 You enter the...

Page 9: ...dered model WAX630 but prefer to use the access point without a PoE connection you can order a power adapter separately The PoE Ethernet port supports a high speed up to 2 5 Gbps A second Ethernet LAN...

Page 10: ...sight app Insight Cloud Portal Lets you configure and manage the access point remotely through the portal of the Insight cloud based management platform Insight app Lets you configure and manage the a...

Page 11: ...Tri band Multi Gig Access Point model WAX630 is an indoor access point The chapter contains the following sections Unpack the access point Top panel with LEDs Hardware interfaces Access point label S...

Page 12: ...of power adapter varies by region If you ordered model WAX630 but prefer to use the access point without a PoE connection you can order a power adapter separately For information about the mounting op...

Page 13: ...2 3bt PoE level Off No power is supplied to the access point Solid green A 2 5 Gbps Ethernet link is detected on the LAN 1 port LAN 1 LED Blinking green 2 5 Gbps traffic activity is detected on the LA...

Page 14: ...e connected to the 5 GHz high band WiFi radio Blinking blue Traffic is detected on the 5 GHz high band WiFi radio Off The 5 GHz high band WiFi radio is off Solid green The 5 GHz low band WiFi radio is...

Page 15: ...ss point s Internet connection also functions at 2 5 Gbps Otherwise the Internet connection functions at 1 Gbps which is a common speed For more information about the LAN 1 PoE port connection see Set...

Page 16: ...tton is available For more information see Use the Reset button to reset the access point on page 171 Access point label The access point label on the bottom panel shows the QR code serial number MAC...

Page 17: ...efore connecting the product to outdoor cables or wired outdoor devices see https kb netgear com 000057103 for additional safety and warranty information Failure to follow these guidelines can result...

Page 18: ...system and peripheral power cables into properly grounded power outlets If applicable to your product the peripheral power cables are equipped with three prong plugs to help ensure proper grounding D...

Page 19: ...tup What to do if you get a browser security warning CAUTION This device must be professionally installed It is the installer s responsibility to follow local country regulations including operations...

Page 20: ...network access Tips for positioning your access point Place your access point near the center of the area where the WiFi clients operate A line of sight between the access point and the WiFi clients i...

Page 21: ...PoE switch If you ordered a package without a power adapter but do not want to use a PoE connection you can still order a power adapter as an option If connected to 2 5 Gbps equipment the access point...

Page 22: ...Cloud LED turns solid green or solid blue and the access point is ready for you to perform the initial configuration For information about accessing the access point for initial configuration see Con...

Page 23: ...to the Internet For more information about the Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear co...

Page 24: ...location configuration This might take up to 10 minutes during which time the access point will restart The access point is now an Insight managed device that is connected to the Insight cloud based m...

Page 25: ...ght and download the Insight app 2 On your mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the access p...

Page 26: ...e top bar and do one of the following Tap the SCAN BARCODE OR QR CODE button and then scan the access point s code which is on the access point label Tap the Enter Serial Number and MAC Address link a...

Page 27: ...t using the NETGEAR Insight app and complete the initial configuration To connect over WiFi to the local browser UI for initial configuration 1 From your computer or mobile device connect over WiFi to...

Page 28: ...ogin page displays After you log in the Dashboard page displays 5 To let the access point check for the latest firmware click the Check for Upgrade button the button is not shown in the previous figur...

Page 29: ...o button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access p...

Page 30: ...utomatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Tran...

Page 31: ...in again You are disconnected from the access point If you changed the default country the access point restarts 9 Reconnect over WiFi to the access point s WiFi network using the new SSID and passph...

Page 32: ...and select Properties to display the IP address Note You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiF...

Page 33: ...est firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the fi...

Page 34: ...o button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access p...

Page 35: ...utomatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Tran...

Page 36: ...see Change the authentication and encryption for a WiFi network on page 72 8 Click the Apply button Your settings are saved A pop up window displays the IP address and the new WiFi network and passwo...

Page 37: ...he IP address in the address bar of the web browser Your browser might display a security warning because of the self signed certificate on the access point which is expected behavior You can proceed...

Page 38: ...168 0 254 range with the exception of IP address 192 168 0 100 which is the default IP address of the access point For more information about changing the IP address on your computer see the help or d...

Page 39: ...est firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the fi...

Page 40: ...o button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access p...

Page 41: ...utomatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Tran...

Page 42: ...rom the access point If you changed the default country the access point restarts 11 After a few minutes if the login window does not display automatically enter 192 168 0 100 in the address bar of yo...

Page 43: ...tion see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and...

Page 44: ...Proceed to x x x x unsafe link in which x x x x represents the domain name or IP address of the device Apple Safari Click the Show Details button Then click the visit this website link If a warning po...

Page 45: ...browser UI to set up a mesh WiFi connection to a root access point For information about how you can manage and monitor the extender access point with the Insight Cloud Portal and Insight app and visi...

Page 46: ...ccess point that provides Internet connectivity The extender access point is not connected to your network over a wired connection but over a WiFi connection 3 3 4 5 1 2 Figure 6 Mesh network with an...

Page 47: ...h network A mesh network can be a good solution if you want to bring WiFi to the following environments Nearby rooms where cabling is not available in line of sight and in range of the current WiFi re...

Page 48: ...ents for placing an extender access point in an Insight Instant Mesh WiFi network The existing WiFi network must include at least one mesh capable access point that runs the latest firmware version On...

Page 49: ...Cloud Portal to connect the access point as an extender to a root access point The root access point must be set up with a wired connection to a router or Internet gateway so that the root access poin...

Page 50: ...A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz high or low radio band The extender access point can use any band to establish the backha...

Page 51: ...d to the same network as the root access point or to the Internet You can also use an optional power adapter 6 Access the Insight Cloud Portal by visiting insight netgear com enter your NETGEAR email...

Page 52: ...vice in the Insight Instant Mesh WiFi network If the Power Cloud LED does not stop blinking amber green and blue see Power Cloud LED does not stop blinking amber green and blue on page 245 When the co...

Page 53: ...Insight app 2 Launch the Insight app 3 If you do not already have an Insight account you can create an account now For information about creating an Insight Premium account or upgrading to an Insight...

Page 54: ...n the Insight Instant Mesh WiFi network 4 A network switch 5 A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz high or low radio band The ex...

Page 55: ...e the extender access point less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root access point 5 Connect the extender access point to a power source The Power Cloud L...

Page 56: ...might take up to 10 minutes The extender access point might restart during the configuration process 10 Wait for the extender access point to go through the initial connection and configuration proce...

Page 57: ...the Insight cloud The extender access point is automatically configured to broadcast extend the root access point s WiFi network If you are experiencing difficulty connecting the extender access poin...

Page 58: ...or broadcast the SSID for a WiFi network Change the VLAN ID for a WiFi network Change the authentication and encryption for a WiFi network Enable or disable PMF for a WiFi network Set up Multi PSK for...

Page 59: ...s see Set up RADIUS servers on page 130 To set up a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point throug...

Page 60: ...match the SSID of the VAP Wireless Network Name SSID By default the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their scanned network lists To turn off the SSID broadcast selec...

Page 61: ...hat support the WiFi enhanced open feature and clients that do not For clients that do not support the WiFi open enhanced feature traffic is not encrypted If you clear the Allow Devices to Connect wit...

Page 62: ...option WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP If you select this option 802 11w PMF is automatically set to mandatory see Step 8 WPA3 provides a secu...

Page 63: ...f you select Enhanced Open authentication WPA3 Personal authentication or WPA3 Enterprise authentication the radio button for PMF is set to Mandatory and you cannot change it Optional This option lets...

Page 64: ...11 59 p m you specify the time or times that the VAP is disabled 11 Optionally select a single radio band only Select a radio button for a single band 2 4 GHz or 5 GHz or keep the default selection By...

Page 65: ...you cannot configure the RSSI threshold manually 13 To set the addressing and traffic mode configure client isolation configure URL tracking configure if a DHCP Offer message is unicast or broadcast...

Page 66: ...configure WiFi client isolation By default client isolation is disabled for the VAP and the Disable radio button is selected Client isolation and Multi PSK see Step 9 are mutually incompatible To blo...

Page 67: ...ompatible Manage local MAC access control lists on page 117 and Select a MAC ACL for a WiFi network on page 207 Set bandwidth rate limits for a WiFi network on page 208 Although you can also configure...

Page 68: ...point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a securi...

Page 69: ...r WiFi enabled computer or mobile device to match the current settings for your network Does your WiFi device display as a connected client See Display client distribution connected clients and client...

Page 70: ...dow displays 6 Click the Delete button The pop window closes and the WiFi network is removed Hide or broadcast the SSID for a WiFi network By default a WiFi network SSID or VAP broadcasts its network...

Page 71: ...guration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Under Broadcast SSID select one of the fo...

Page 72: ...nter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 25 The Dashboard page displays 4 Select Management Configuration Wi...

Page 73: ...name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network...

Page 74: ...onal This option which is the same as WPA2 PSK is the default setting and uses AES encryption This type of security enables only WiFi devices that support WPA2 to join the VAP WPA2 provides a more sec...

Page 75: ...vices might not yet detect WPA3 and support only WPA2 If your network also includes WPA2 devices select WPA3 WPA2 Personal authentication In the Passphrase field enter a phrase of 8 to 63 characters T...

Page 76: ...ts old settings before you changed the settings update the WiFi network selection in your WiFi enabled computer or mobile device to match the current settings for your network Does your WiFi device di...

Page 77: ...displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Under...

Page 78: ...work s passphrase and VLAN are replaced by the passphrases and VLANs that are part of the Multi PSK configuration Note Multi PSK is supported only if the WiFi security is WPA2 Personal or WPA2 WPA Per...

Page 79: ...hernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for...

Page 80: ...at a user must enter to let the WiFi client connect to the associated VLAN of the WiFi network Key Identifier The phrase or term that lets you identify the VLAN in the WiFi network for monitoring purp...

Page 81: ...isplays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point us...

Page 82: ...ndwidth are available in the 5 GHz bands causing less interference and allowing for a better user experience Band steering includes 802 11k radio resource management RRM and 802 11v WiFi network manag...

Page 83: ...me and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the...

Page 84: ...If the change is not specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the basic WiFi settings for the radios Turn a rad...

Page 85: ...owser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access p...

Page 86: ...lowing wireless modes WiFi modes for the 2 4 GHz radio 11ax 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point This is the default setting 11ng 802 11ax 802 11ng 802 1...

Page 87: ...of 802 11ax 802 11ac 802 11na clients is limited to the maximum speed that is supported by 802 11a up to about 54 Mbps Channel Width From the menu select the channel width for the radio Your selection...

Page 88: ...nel spacing of four channels between adjacent access points for example in the 2 4 GHz band use channels 1 and 5 or 6 and 10 6 Click the Apply button A warning pop up window displays 7 Click the OK bu...

Page 89: ...Turn Radio ON check box for the radio Turn a radio off Clear the Turn Radio ON check box for the radio 6 Click the Apply button A warning pop up window displays 7 Click the OK button The pop up windo...

Page 90: ...i clients can connect to the access point However the speed of 802 11ax clients is limited to the maximum speed that is supported by 802 11ng about 400 Mbps 11bg 802 11ax 802 11ng 802 11bg and 802 11b...

Page 91: ...de a more stable connection in a demanding situation such as an environment with a long distance between the access point and WiFi clients and more than normal interference The 802 11n specification a...

Page 92: ...ight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 25 The Dashboard page displays 4 Select Management Config...

Page 93: ...the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more informati...

Page 94: ...ry To change the output power for a radio 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or...

Page 95: ...ss points reduce interference by selecting different channels for adjacent access points We recommend a channel spacing of four channels between adjacent access points for example in the 2 4 GHz band...

Page 96: ...eparately These settings are enabled by default for each radio Disabling QoS for a radio might impact the throughput and speed of WiFi traffic on the access point To manage the QoS settings for a WiFi...

Page 97: ...he following four queues in decreasing order of priority Voice The highest priority queue with minimum delay which makes it very suitable for applications such as VoIP and streaming media Video The se...

Page 98: ...e external captive portal to each WiFi network Facebook Wi Fi captive portal A Facebook business page that serves as a portal You can configure a single Facebook Wi Fi captive portal on the access poi...

Page 99: ...add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin Th...

Page 100: ...rect URL check box is cleared a user is directed to the default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the default t...

Page 101: ...the captive portal login page select the EULA check box EULA Max 1 KB 9 To preview the captive portal login page click the Preview button The following figure shows an example that is the figure does...

Page 102: ...e security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin The password is the one t...

Page 103: ...tion URL Enter the web authentication URL that is provided by the vendor Key Enter the key credential that is provided by the vendor This field is optional and depends on the authentication requiremen...

Page 104: ...they get a message Oops Something went wrong Please try after some time 12 Select one of the following Allow HTTPS buttons to specify when secure HTTP HTTPS traffic is allowed to pass through Enable...

Page 105: ...e IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information...

Page 106: ...d configure the settings d To limit the session length click the Session length Edit button and configure the settings Clients are automatically logged out when the session length is exceeded 10 Refre...

Page 107: ...ge 44 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access...

Page 108: ...on for a captive portal or you want to use another Facebook account you can unregister the access point from Facebook Wi Fi and remove the access point s entry To unregister the access point from Face...

Page 109: ...tton The capability to register is disabled However the access point s entry on the Facebook business page is not yet removed 6 Click the Apply button Your settings are saved 7 Go to the Facebook busi...

Page 110: ...al MAC access control lists Manage neighbor AP detection Set up RADIUS servers Enable L2 security Note For information about essential WiFi security network authentication and encryption see Set up an...

Page 111: ...rning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password...

Page 112: ...domain are blocked For example if you add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword entry to...

Page 113: ...s point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or...

Page 114: ...By default a session expires after 45 minutes 7 Click the Apply button Your settings are saved Change the time out period for a user session When a user logs in to the local browser UI the session tim...

Page 115: ...ation System Advanced User Accounts 5 Under Session Timeout use the Hours and Minutes fields to specify the period after which a session automatically expires and the user must log in again By default...

Page 116: ...unts display 5 To the right of the user account change the existing settings as needed User Name Enter another user name Password Enter another password between 8 and 64 characters in length The passw...

Page 117: ...p up window displays 6 Click the Delete button The pop up windows closes and the user account is removed Manage local MAC access control lists The access point supports eight local access control list...

Page 118: ...enabled allows access to trusted stations by default Custom 3 If enabled allows access to trusted stations by default Custom 4 If enabled allows access to trusted stations by default By default these...

Page 119: ...e for the MAC ACL that you want to set up The previous figure shows some examples Devices in the Available Stations table are automatically detected by the access point and are common to all MAC ACLs...

Page 120: ...box for the device and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device the devic...

Page 121: ...format with each octet separated by a hyphen for example 00 11 22 33 44 55 You must separate entries with a comma The file must be in text format that is with a txt or cfg extension You can use a MAC...

Page 122: ...cess point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as connected 6 To change...

Page 123: ...s on the import list are placed in the Trusted Stations table c To remove a MAC address from the Trusted Stations table select the MAC address and click the Remove button You can search the Trusted St...

Page 124: ...access points APs in a radio band and you can classify them as known APs If you enable neighbor AP detection for a radio band the access point regularly scans the WiFi network collects information abo...

Page 125: ...he access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can pro...

Page 126: ...scans for neighbor access points every hour This is the default setting Moderate The access point scans for neighbor access points every 30 minutes Aggressive The access point scans for neighbor acces...

Page 127: ...access points from the Known AP List After being detected these access points once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing neighbor ac...

Page 128: ...r add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin...

Page 129: ...are replaced with the ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the import file...

Page 130: ...e 117 If you use a RADIUS MAC ACL you must define the ACL on the RADIUS server using the format in the following example for client MAC addresses in the RADIUS server If the client MAC address is 00 0...

Page 131: ...word Enter the password shared key that is used between the access point and the RADIUS server during the authentication or accounting process By default the password is sharedsecret 6 To enable accou...

Page 132: ...igned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you ge...

Page 133: ...6 Click the Apply button Your settings are saved User Manual 133 Manage Access and Security Insight Managed WiFi 6 AX6000 Tri band Multi Gig Access Point Model WAX630...

Page 134: ...2 1Q VLAN and management VLAN Set an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disa...

Page 135: ...warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and passwor...

Page 136: ...LAN Primary DNS IP address of the secondary DNS server on your LAN or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the new IP se...

Page 137: ...ser name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app ent...

Page 138: ...d To set the 802 1Q VLAN and management VLAN 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable...

Page 139: ...ess point tags all frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN only if the...

Page 140: ...cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the se...

Page 141: ...aunch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that i...

Page 142: ...correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Launch a web browser from a computer that is connected to the same net...

Page 143: ...web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assign...

Page 144: ...ess point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a se...

Page 145: ...rnet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for th...

Page 146: ...LAG connection both ports must function at the same speed Therefore for a LAG connection the speed of the LAN 1 port is limited to 1 Gbps However if you use the LAG connection for increased throughpu...

Page 147: ...in window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on...

Page 148: ...roceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name i...

Page 149: ...p up window closes and your settings are saved The link aggregation capability is disabled User Manual 149 Manage the Local Area Network and IP Settings Insight Managed WiFi 6 AX6000 Tri band Multi Gi...

Page 150: ...zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser UI Schedule the access point t...

Page 151: ...esents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can manage the...

Page 152: ...ne of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode CAUTION When you c...

Page 153: ...gh an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an except...

Page 154: ...cess point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser sec...

Page 155: ...ble or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the secur...

Page 156: ...he IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information...

Page 157: ...he time zone When the access point synchronizes its clock with a Network Time Protocol NTP server the page shows the date and time If the page does not show the correct date and time you might need to...

Page 158: ...ording to your settings For information about other time settings see Specify a custom NTP server on page 156 Manage the syslog settings If a syslog server is present on your network you can configure...

Page 159: ...is stored in flash memory You can check to see if new firmware is available and update the access point to the new firmware You can also visit the NETGEAR support website download the firmware manuall...

Page 160: ...re and update the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connec...

Page 161: ...oard page 8 Read the new firmware release notes to determine whether you must reconfigure the access point after updating Manually download firmware and update the access point Downloading firmware to...

Page 162: ...word The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and...

Page 163: ...in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret To revert to th...

Page 164: ...o not interrupt the reversion For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud...

Page 165: ...cify the following server settings Firmware File The name of the access point firmware file on the SFTP server SFTP Server IP The IP address of the SFTP server on your network User Name The user name...

Page 166: ...A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warni...

Page 167: ...the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18 21_16 44 1...

Page 168: ...AC address or the system name dd is the date mm is the month yy is the year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NE...

Page 169: ...ty warning on page 44 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously...

Page 170: ...is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access...

Page 171: ...the access point you must use the Reset button After you reset the access point to factory default settings the password for the admin user name is password the access point s DHCP client is enabled...

Page 172: ...rn off the access point Wait until the access point finishes restarting and the Power Cloud LED turns solid green or solid blue Use the local browser UI to reset the access point You can use the acces...

Page 173: ...the Restore Defaults button A warning pop up window displays 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset is complete...

Page 174: ...ser name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app ent...

Page 175: ...point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a securi...

Page 176: ...mal operation Note the following restrictions Wireless distribution system EEM is mutually exclusive with a wireless distribution system WDS see Set up a WiFi Bridge on page 215 Neighbor AP detection...

Page 177: ...ecified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or In...

Page 178: ...cess points Display client distribution connected clients and client trends View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization View or download tracked URLs View save do...

Page 179: ...sword is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through th...

Page 180: ...ashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet MAC addre...

Page 181: ...e following settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN1 MAC Address The MAC address of the LAN 1 Ethernet port of the access point...

Page 182: ...e The current system time of the access point Uptime The time since the access point was last restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates th...

Page 183: ...that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud P...

Page 184: ...d System Name The access point NetBIOS name System Mode The access point system mode AP LAN1 MAC Address The MAC address of the LAN 1 Ethernet port of the access point LAN2 MAC Address The MAC address...

Page 185: ...e The current system time of the access point Uptime The time since the access point was last restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates th...

Page 186: ...ity warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin The password is the one that you...

Page 187: ...onnected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window...

Page 188: ...click the Radio button in the Client Distribution pane The page adjusts and shows the types of clients for each radio 6 To display recent clients for all networks or a single network in the Connected...

Page 189: ...the Channel Utilization button For more information see View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization on page 191 9 To display more information point to a node on...

Page 190: ...x Rate The rate of traffic transmission of the client Rx Rate The rate of traffic reception of the client RSSI The RSSI threshold value of the client Tx Bytes The number of bytes that the client trans...

Page 191: ...If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter t...

Page 192: ...w channel utilization do the following a Click the Channel Utilization button The graph shows the channel utilization for the 2 4 GHz radio b To view the channel utilization for a 5 GHz radio click th...

Page 193: ...nformation click the Refresh button View or download tracked URLs If you enabled URL tracking for a WiFi network see Enable or disable URL tracking for a WiFi network on page 204 you can view the trac...

Page 194: ...t through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 25 The Dashboard...

Page 195: ...lick the Close button The pop up window closes 8 To download a URL tracking report as a csv file click the Download button and follow the directions of your browser 9 To clear all URL tracking informa...

Page 196: ...The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and mana...

Page 197: ...form the WiFi bridge To view a WiFi bridge connection 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethern...

Page 198: ...e or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the securit...

Page 199: ...ou viewed alarms and notifications 5 Click the alarm bell icon The pop up window shows the alarms indicated by a red bell and notifications indicated by a blue bell with a description and time 6 To vi...

Page 200: ...rk Enable or disable URL tracking for a WiFi network Change the format of the DHCP offer messages in a WiFi network Select a MAC ACL for a WiFi network Set bandwidth rate limits for a WiFi network Con...

Page 201: ...ter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more inform...

Page 202: ...to use This IP address must be different from the WLAN network address that you set in the previous step 8 Click the Apply button Your settings are saved Enable or disable client isolation for a WiFi...

Page 203: ...SID display 6 Scroll down and click the Advanced tab The page expands 7 Under Wireless Client Isolation select one of the following radio buttons Disable Client isolation is disabled for the WiFi netw...

Page 204: ...utton 10 Click the Apply button Your settings are saved Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients that are...

Page 205: ...Tracking is enabled for the WiFi network Disable URL Tracking is disabled for the WiFi network 8 Click the Apply button Your settings are saved Change the format of the DHCP offer messages in a WiFi...

Page 206: ...d the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page...

Page 207: ...of WiFi security for the WiFi network see Change the authentication and encryption for a WiFi network on page 72 Before you select a MAC ACL for a WiFi network review the policy of the ACL ACL policy...

Page 208: ...L policy MAC addresses in the ACL or both click the link next to the group For more information see Manage local MAC access control lists on page 117 Select the Radius MAC ACL radio button This option...

Page 209: ...tion and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insi...

Page 210: ...onnections in a wireless distribution system WDS or Insight Instant Mesh WiFi network Advanced rate selection lets you configure the following settings for the 2 4 GHz and 5 GHz radio bands in a WiFi...

Page 211: ...o describe the density level is that a selected level is mapped to a corresponding client density level WiFi mode minimum legacy rate beacon rate and minimum Modulation Coding Scheme MCS rate To confi...

Page 212: ...6 Scroll down and click the Advanced Rate Selection tab Note For the selected SSID you can specify the radio settings for the 2 4 GHz 5 GHz Low and 5 GHz High radio bands individually The description...

Page 213: ...pendent components for which a setting is assigned by the position of the slider but which you cannot set individually Density of the WiFi clients In the default 11ax WiFi mode for the radios the sett...

Page 214: ...ow the WiFi mode of a radio affects these components and how these components depend on each other 10 Click the Apply button Your settings are saved User Manual 214 Manage the Advanced WiFi Features f...

Page 215: ...see Install the Access Point in an Insight Instant Mesh WiFi Network on page 45 The chapter includes the following sections WiFi base station WiFi repeater and WiFi bridge requirements Set up a WiFi...

Page 216: ...e station The following figure shows two access points in a WiFi repeating setup with a WiFi base station on the left side and a single WiFi repeater on the right side Figure 10 WiFi bridge configurat...

Page 217: ...r CAUTION Before you set up a WiFi bridge between two access points enable STP on the access points see Enable or disable Spanning Tree Protocol on page 141 and on the switches to which the access poi...

Page 218: ...Management Configuration Wireless Bridge The page that displays lets you select a WDS profile WDS 1 WDS 2 WDS 3 or WDS 4 5 Click the button to the left of a WDS profile The WDS profile page displays...

Page 219: ...u cannot change this setting Passphrase The passphrase for the WDS connection For you to enable the WDS connection the passphrase on the remote access point must match the passphrase that you define i...

Page 220: ...radio If the change is not specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the advanced WiFi settings for the radios M...

Page 221: ...r that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A l...

Page 222: ...ttings for the 2 4 GHz 5 GHz high band and 5 GHz low band radios individually but the check box for the 802 11n 256 QAM feature applies to the 2 4 GHz radio only the feature is always enabled for the...

Page 223: ...de is 802 11n you can select the 802 11n 256 QAM check box to enable the 2 4 GHz radio to function over 256 quadrature amplitude modulation QAM which can increase the 2 4 GHz radio throughput for 802...

Page 224: ...is selected and 802 11h is disabled You can enable or disable 802 11h for the 5 GHz radios but not for the 2 4 GHz radio 802 11h 6 Click the Apply button A warning pop up window displays 7 Click the O...

Page 225: ...r the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 25 The Dashboard page displays 4 Select Management Configuration Wirel...

Page 226: ...ensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password...

Page 227: ...ing types of load balancing are enabled with their default settings Load balancing based on the maximum number of clients The access point allows client associations up to the specified maximum number...

Page 228: ...user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight ne...

Page 229: ...ociated slider to specify the maximum percentage of channel load that is allowed on the radio before it stops accepting new client associations For each radio the minimum percentage of channel load is...

Page 230: ...the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more informati...

Page 231: ...n for the security warning For more information see What to do if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin The password is t...

Page 232: ...point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or ad...

Page 233: ...ancements are disabled This is the default setting 6 Click the Apply button Your settings are saved User Manual 233 Manage the Advanced Radio Features Insight Managed WiFi 6 AX6000 Tri band Multi Gig...

Page 234: ...point and root access point cannot connect Troubleshoot WiFi connectivity for a WiFi client device Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes a...

Page 235: ...if you get a browser security warning on page 44 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case...

Page 236: ...et capture process normal functioning of the access point is not affected The packet capture capability can be useful for analyzing a WiFi deployment monitoring a WiFi network debugging protocols dete...

Page 237: ...the following interfaces on which packets must be captured br lan All packets are captured that is packets on the Ethernet interfaces 2 4 GHz radio 5 GHz low band radio and 5 GHz high band radio This...

Page 238: ...t enter the MAC address in hexadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 Client Filter MAC Address Enter the maximum duration of the capture process that is if...

Page 239: ...ecified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or In...

Page 240: ...tion see Connect to the access point for initial configuration on page 22 Make sure that the WiFi client device supports the authentication and encryption that you are using for the WiFi network For m...

Page 241: ...nsight cloud based management platform Solid blue The access point functions in Insight mode and is connected to the Insight cloud based management platform 2 When the startup procedure is complete ve...

Page 242: ...to the access point and that the power adapter is correctly connected to a functioning power outlet If it is plugged into a power strip make sure that the power strip is turned on If it is plugged dir...

Page 243: ...y the access point did not receive an IP address from a DHCP server Check to make sure that the DHCP client of the access point is enabled see Enable the DHCP client on page 136 that your network incl...

Page 244: ...NETGEAR Insight management mode If the access point functions in the Web browser management mode the Power Cloud LED lights green This is normal LED behavior However if the access point functions in t...

Page 245: ...access point as an extender to a root access point using the Insight app on page 53 If the Power Cloud LED does not stop blinking amber green and blue the extender access point cannot connect Check t...

Page 246: ...s point as an extender to an Insight network location that includes one or more root access points see Connect the access point as an extender to a root access point using the Insight app on page 53 w...

Page 247: ...he Insight Instant Mesh WiFi network If the Power Cloud LED does not stop blinking amber green and blue see Power Cloud LED does not stop blinking amber green and blue on page 245 When the configurati...

Page 248: ...device driver is updated to the latest version on the WiFi client device Does the WiFi client device find the WiFi network If not check the WLAN LEDs If a WLAN LED is off the associated WiFi radio is...

Page 249: ...n your LAN and use the access point s local browser UI check the following Make sure that you are using the correct login information The user name is admin and the password is the one that you specif...

Page 250: ...cess point does not save the changes that you make on a page do the following When entering configuration settings always click the Apply button before moving to another page or tab or your changes ar...

Page 251: ...ter for failed login attempts is reset after 24 hours For example if you enter the wrong password five times but enter the correct password at the sixth login attempt the five failed login attempts ar...

Page 252: ...ong physical connections Check that the appropriate LEDs are on for your network devices If your access point and computer are connected to a separate Ethernet switch make sure that the link LEDs are...

Page 253: ...is connected as the default router If the IP configuration of your computer is assigned by DHCP this information is not visible in your computer s Network Control Panel Check to see that the network a...

Page 254: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 254...

Page 255: ...over WiFi using the NETGEAR Insight app on page 25 AP login password WiFi network settings for initial setup and WiFi login The SSID for initial setup is NETGEARxxxxxx SETUP where xxxxxx is the last...

Page 256: ...EDs Disabled Energy Efficiency Mode WLAN settings for an individual WiFi network SSID or VAP Enabled Broadcast SSID 1 VLAN ID for WiFi clients WPA2 Personal which is WPA2 PSK The nonconfigurable data...

Page 257: ...radio 40 MHz Channel width 2 4 GHz radio Long 800 ns 5 GHz L radio Long 800 ns 5 GHz H radio Long 800 ns Guard interval 2 4 GHz radio Maximum 100 5 GHz L radio Maximum 100 5 GHz H radio Maximum 100 Ou...

Page 258: ...ps 5 GHz L radio Enabled with a limit of 50 pps 5 GHz H radio Enabled with a limit of 50 pps Broadcast and multicast rate limiting 2 4 GHz radio Not applicable 5 GHz L radio Disabled 5 GHz H radio Dis...

Page 259: ...t settings Continued Default Setting Feature Remote management Disabled SNMP User Manual 259 Factory Default Settings and Technical Specifications Insight Managed WiFi 6 AX6000 Tri band Multi Gig Acce...

Page 260: ...put 2 4 GHz radio 200 5 GHz L radio 200 5 GHz H radio 200 The access point can support a maximum of 600 clients with all radios enabled Maximum number of supported clients WPA3 Personal WPA3 Enterpris...

Page 261: ...02 3at PoE power We recommend that you use 802 3bt PoE power For more information see The access point functions as a PoE PD and the Power Cloud LED remains solid amber on page 243 Hardware interfaces...

Page 262: ...t you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed Before you mount the access point first set up and...

Page 263: ...11 Mounting plate Figure 12 Metal bracket with T bar lock screw and 4 short screws Figure 13 3 tall screws and anchors for wall mounting User Manual 263 Mount the Access Point to a Wall or Ceiling Ins...

Page 264: ...a soft mallet until the anchors are flush with the wall 5 Use the screws to attach the mounting plate to the wall Note Do not insert the screws into the wall without anchors 6 Connect an Ethernet cabl...

Page 265: ...ccess point to a T bar To mount the access point to a T bar 1 Slide the T bar partially into the metal bracket 2 Attach the metal bracket to the ceiling bar 3 Push the T bar over the ceiling bar User...

Page 266: ...le if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the ceiling surface...

Page 267: ...attach it to the mounting plate 8 Turn the access point clockwise until it locks in the mounting plate User Manual 267 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX6000 Tri ba...

Page 268: ...User Manual 268 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX6000 Tri band Multi Gig Access Point Model WAX630...

Page 269: ...n the center of the LEDs and your finger on the other side of the access point directly opposite the thumb 2 Press and hold the latch down to release the lock and keep the lock open 3 Turn the access...

Page 270: ...t from the mounting plate The mounting plate remains attached to the ceiling or the wall User Manual 270 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX6000 Tri band Multi Gig Ac...

Search results

Summary of Contents for WAX625

Reviews:

Related manuals for WAX625

Brands by name

Popular brands

NETGEAR WAX625, User Manual

Search results

Summary of Contents for WAX625

Reviews:

Related manuals for WAX625

Brands by name

Popular brands