NETGEAR WAX628 User Manual Download Page 252

Page: 252 / 264

Table 3. Factory default settings (Continued)

Default Setting

Feature

Enabled

DHCP offer broadcast to
unicast

None

Captive portal

None assigned

MAC ACL

None

Rate limit

Fixed multicast rate: Auto
Rate control: Disabled

Advanced rate selection

Basic radio settings that apply to all WiFi networks (SSIDs or VAPs)

2.4 GHz radio: Enabled
5 GHz radio: Enabled

Radio broadcast

2.4 GHz radio: 11ax mode, which also supports 11b, 11bg, and 11na
5 GHz radio: 11ax mode, which also support 11a, 11na, and 11ac

WiFi mode

2.4 GHz radio: 20 MHz
5 GHz radio: 40 MHz

Channel width

2.4 GHz radio: Long-800 ns
5 GHz radio: Long-800 ns

Guard interval

2.4 GHz radio: Maximum (100%)
5 GHz radio: Maximum (100%)

Output power

2.4 GHz radio: Auto
5 GHz radio: Auto

Channel

2.4 GHz radio: Enabled
5 GHz radio: Enabled

Wi-Fi Multimedia (WMM)

2.4 GHz radio: Enabled
5 GHz radio: Enabled

WMM Powersave

Advanced radio settings that apply to all WiFi networks (SSIDs or VAPs)

2.4 GHz radio: 128 default (also the maximum number)
5 GHz radio: 200 default (also the maximum number)

Number of WiFi clients

2.4 GHz radio: Enabled at 2346
5 GHz radio: Enabled at 2346

RTS threshold

2.4 GHz radio: 100 millisec.
5 GHz radio: 100 millisec.

Beacon interval

2.4 GHz radio: Disabled (QAM applies in the 11ng WiFi mode only)
5 GHz radio: Nonconfigurable

802.11n 256 QAM

2.4 GHz radio: Enabled
5 GHz radio: Enabled

MU-MIMO

User Manual

252

Factory Default Settings and
Technical Specifications

Insight Managed WiFi 6 AX5400 Access Point Model WAX628

Summary of Contents for WAX628

Page 1: ...User Manual Insight Managed WiFi 6 AX5400 Access Point WAX628 NETGEAR Inc 350 E Plumeria Drive September 2022 San Jose CA 95134 USA 202 12625 01...

Page 2: ...agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period Do not use thi...

Page 3: ...e Internet using the NETGEAR Insight Cloud Portal 22 Connect over WiFi using the NETGEAR Insight app 24 Connect over WiFi to the local browser UI for initial configuration 26 Connect over the LAN to t...

Page 4: ...ic WiFi settings for the radios 83 Turn a radio on or off 86 Change the WiFi mode for a radio 87 Change the channel width for a radio 89 Change the guard interval for a radio 90 Change the output powe...

Page 5: ...ion capability 144 Enable link aggregation for the LAN 2 port 145 Disable link aggregation for the LAN 2 port 146 Chapter 10 Manage and Maintain the Access Point Change the management mode to NETGEAR...

Page 6: ...tion WiFi repeater and WiFi bridge requirements 200 Set up a WiFi bridge between access points 201 Chapter 13 Manage the Advanced WiFi Features for a WiFi network Set NAT mode or Bridge mode for addre...

Page 7: ...hoot WiFi connectivity for a WiFi client device 243 Troubleshoot Internet browsing 244 You cannot log in to the access point over a LAN connection 245 Changes are not saved 246 You enter the wrong pas...

Page 8: ...s point without a PoE connection you can order a power adapter separately The PoE Ethernet port supports a high speed up to 2 5 Gbps A second Ethernet LAN port supports a speed of 1 Gbps for a link ag...

Page 9: ...tal and Insight app Insight Cloud Portal Lets you configure and manage the access point remotely through the portal of the Insight cloud based management platform Insight app Lets you configure and ma...

Page 10: ...Model WAX628 is an indoor access point that supports the 2 4 GHz and 5 GHz WiFi bands The chapter contains the following sections Unpack the access point Top panel with LEDs Hardware interfaces Access...

Page 11: ...ter the type of power adapter varies by region If you ordered model WAX628 but prefer to use the access point without a PoE connection you can order a power adapter separately For information about th...

Page 12: ...at the 802 3at PoE level Off No power is supplied to the access point Solid green A 2 5 Gbps Ethernet link is detected on the LAN 1 port LAN 1 LED Blinking green 2 5 Gbps traffic activity is detected...

Page 13: ...are connected 5 GHz WLAN LED Solid blue One or more WLAN clients are connected to the 5 GHz WiFi radio Blinking blue Traffic is detected on the 5 GHz WiFi radio Off The 5 GHz WiFi radio is off Note Fo...

Page 14: ...ess point to the same switch as the LAN 1 port for a link aggregation LAG connection The switch must be capable of supporting a LAG connection which you must configure on the switch For more informati...

Page 15: ...Figure 3 Access point label location Figure 4 Access point label User Manual 15 Hardware Overview Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Page 16: ...product Before connecting the product to outdoor cables or wired outdoor devices see https kb netgear com 000057103 for additional safety and warranty information Failure to follow these guidelines c...

Page 17: ...k plug any system and peripheral power cables into properly grounded power outlets If applicable to your product the peripheral power cables are equipped with three prong plugs to help ensure proper g...

Page 18: ...tup What to do if you get a browser security warning CAUTION This device must be professionally installed It is the installer s responsibility to follow local country regulations including operations...

Page 19: ...provide network access Tips for positioning your access point Place your access point near the center of the area where the WiFi clients operate A line of sight between the access point and the WiFi...

Page 20: ...ng it to a PoE switch If you ordered a package without a power adapter but do not want to use a PoE connection you can still order a power adapter as an option If connected to 2 5 Gbps equipment the a...

Page 21: ...ss point is ready for you to perform the initial configuration For information about accessing the access point for initial configuration see Connect to the access point for initial configuration on p...

Page 22: ...connected to the Internet For more information about the Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb...

Page 23: ...Insight location configuration This might take up to 10 minutes during which time the access point will restart The access point is now an Insight managed device that is connected to the Insight clou...

Page 24: ...GEAR Insight and download the Insight app 2 On your mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the...

Page 25: ...icon in the top bar and do one of the following Tap the SCAN BARCODE OR QR CODE button and then scan the access point s code which is on the access point label Tap the Enter Serial Number and MAC Addr...

Page 26: ...ice without using the NETGEAR Insight app and complete the initial configuration To connect over WiFi to the local browser UI for initial configuration 1 From your computer or mobile device connect ov...

Page 27: ...ays when you log in Instead the login page displays After you log in the Dashboard page displays 5 To let the access point check for the latest firmware click the Check for Upgrade button If new firmw...

Page 28: ...able radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the...

Page 29: ...w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Ope...

Page 30: ...n you log in again You are disconnected from the access point If you changed the default country the access point restarts 9 Reconnect over WiFi to the access point s WiFi network using the new SSID a...

Page 31: ...address Note You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 2...

Page 32: ...scribed in the following table Description Setting From the menu select the country and region in which the access point is operating Note Make sure that the country is set to the location where the d...

Page 33: ...se letter one lowercase letter and one number The following special characters are allowed Save the password for future use AP Login New Password Enter exactly the same password that you entered in th...

Page 34: ...clients use TKIP and WPA2 clients use AES In the Passphrase field enter a new passphrase for the WiFi network WPA3 Personal This option allows only WiFi clients that support WPA3 to connect to the SS...

Page 35: ...also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 24 Then launch a brow...

Page 36: ...2 192 168 0 254 range with the exception of IP address 192 168 0 100 which is the default IP address of the access point For more information about changing the IP address on your computer see the he...

Page 37: ...he access point check for the latest firmware click the Check for Upgrade button If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade...

Page 38: ...able radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the...

Page 39: ...w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Ope...

Page 40: ...nnected from the access point If you changed the default country the access point restarts 11 After a few minutes if the login window does not display automatically enter 192 168 0 100 in the address...

Page 41: ...re information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The use...

Page 42: ...click the Proceed to x x x x unsafe link in which x x x x represents the domain name or IP address of the device Apple Safari Click the Show Details button Then click the visit this website link If a...

Page 43: ...browser UI to set up a mesh WiFi connection to a root access point For information about how you can manage and monitor the extender access point with the Insight Cloud Portal and Insight app and visi...

Page 44: ...o a root access point that provides Internet connectivity The extender access point is not connected to your network over a wired connection but over a WiFi connection 3 3 4 5 1 2 Figure 6 Mesh networ...

Page 45: ...mesh network A mesh network can be a good solution if you want to bring WiFi to the following environments Nearby rooms where cabling is not available in line of sight and in range of the current WiF...

Page 46: ...ements for placing an extender access point in an Insight Instant Mesh WiFi network The existing WiFi network must include at least one mesh capable access point that runs the latest firmware version...

Page 47: ...use the Insight Cloud Portal to connect the access point as an extender to a root access point The root access point must be set up with a wired connection to a router or Internet gateway so that the...

Page 48: ...network switch 5 A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz radio band The extender access point can use any band to establish the ba...

Page 49: ...connected to the same network as the root access point or to the Internet You can also use an optional power adapter 6 Access the Insight Cloud Portal by visiting insight netgear com enter your NETGE...

Page 50: ...anaged device in the Insight Instant Mesh WiFi network If the Power Cloud LED does not stop blinking amber green and blue see Power Cloud LED does not stop blinking amber green and blue on page 240 Wh...

Page 51: ...load the Insight app 2 Launch the Insight app 3 If you do not already have an Insight account you can create an account now For information about creating an Insight Premium account or upgrading to an...

Page 52: ...r access point in the Insight Instant Mesh WiFi network 4 A network switch 5 A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz radio band Th...

Page 53: ...ction place the extender access point less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root access point 5 Connect the extender access point to a power source The Pow...

Page 54: ...on process might take up to 10 minutes The extender access point might restart during the configuration process 10 Wait for the extender access point to go through the initial connection and configura...

Page 55: ...nnected to the Insight cloud The extender access point is automatically configured to broadcast extend the root access point s WiFi network If you are experiencing difficulty connecting the extender a...

Page 56: ...i network Change the authentication and encryption for a WiFi network Enable or disable PMF for a WiFi network Set up Multi PSK for a WiFi network Disable or enable a WiFi network or set up a WiFi act...

Page 57: ...rk first set up RADIUS servers see Set up RADIUS servers on page 128 To set up a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or direct...

Page 58: ...ice must match the SSID of the VAP Wireless Network Name SSID By default the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their scanned network lists To turn off the SSID broadc...

Page 59: ...clients that support the WiFi enhanced open feature and clients that do not For clients that do not support the WiFi open enhanced feature traffic is not encrypted If you clear the Allow Devices to Co...

Page 60: ...entication option WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP If you select this option 802 11w PMF is automatically set to mandatory see Step 8 WPA3 provi...

Page 61: ...network If you select Enhanced Open authentication WPA3 Personal authentication or WPA3 Enterprise authentication the radio button for PMF is set to Mandatory and you cannot change it Optional This op...

Page 62: ...lly select a single radio band only Select a radio button for a single band 2 4 GHz or 5 GHz or keep the default selection By default the Both radio button is selected which lets the access point broa...

Page 63: ...t is Bridge mode which means that WiFi clients receive IP addresses from a DHCP server or a router that functions as a DHCP server in your network This is usually the same DHCP server that assigns an...

Page 64: ...k VLAN are identical by default both are VLAN 1 and you enable client isolation the Allow Access to AP UI check box displays By default this check box is selected allowing an admin user to access the...

Page 65: ...ge 214 20 Click the Apply button Your settings are saved 21 Make sure that you can connect to the new WiFi network If you cannot connect to the new WiFi network check the following If your WiFi enable...

Page 66: ...ty warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously...

Page 67: ...default WiFi network The default WiFi network is the SSID that you renamed and for which you set a new passphrase when you initially connected to the access point This SSID is displayed as SSID1 in th...

Page 68: ...network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP add...

Page 69: ...n get IP addresses over the new VLAN To change the VLAN ID for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access...

Page 70: ...played as SSID1 in the local browser UI Before you change the authentication and encryption consider the types of clients that must be able to connect to the WiFi network WPA3 provides a more secure c...

Page 71: ...Open A legacy open WiFi network does not provide any security Any WiFi device can join the network We recommend that you do not use a legacy open WiFi network but configure WiFi security However a le...

Page 72: ...ssphrase field enter a phrase of 8 to 63 characters To join the VAP a user must enter this passphrase To view the passphrase in clear text click the eye icon WPA2 Enterprise This enterprise level secu...

Page 73: ...uthorization and Accounting AAA management For WPA3 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 128 If you select this option 802 11w PMF is automa...

Page 74: ...or disabled You can also set it manually To enable or disable PMF for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to th...

Page 75: ...WiFi network into different VLANs each accessible with a unique passphrase In a way Multi PSK lets you create different sub WiFi networks on a single WiFi network When connecting to the WiFi network t...

Page 76: ...PSK in different WiFi networks If inter VLAN routing is disabled in the network that the access point is connected to the following applies WiFi clients that are connected to different VLANs on the s...

Page 77: ...For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select...

Page 78: ...he WiFi network or you can set up a schedule that specifies when the WiFi network is active Scheduling a WiFi network a green feature that allows you to turn off the WiFi network during scheduled vaca...

Page 79: ...ect one of the following radio buttons Always ON The WiFi network is enabled Always OFF The WiFi network is disabled Custom The WiFi network is enabled or disabled according to a schedule that you mus...

Page 80: ...band based on the access point s channel load In an environment with multiple access points 802 11v WiFi network management helps WiFi clients that are roaming to select the best access point The acc...

Page 81: ...ttings for the selected SSID display 6 Under Band Steering 802 11 k v select one of the following radio buttons Disable Band steering is disabled for the VAP This is the default setting Enabled Under...

Page 82: ...he change affects all WiFi networks on the access point The chapter includes the following sections Manage the basic WiFi settings for the radios Turn a radio on or off Change the WiFi mode for a radi...

Page 83: ...er displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access poin...

Page 84: ...an connect to the access point This is the default setting 11ng 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax clients is limited to...

Page 85: ...hannel improves the performance no or minimal interference and better data rates The 802 11n specification allows a 40 MHz wide channel in addition to the legacy 20 MHz channel that is available with...

Page 86: ...ed to reconnect Turn a radio on or off By default both the 2 4 GHz and 5 GHz radios broadcast Turning off a radio disables WiFi access for the associated band which affects all WiFi networks VAPs or S...

Page 87: ...y default all types of WiFi clients can access a WiFi network on the access point that is the WiFi modes on the access point support 802 11ax 802 11ac 802 11na 802 11ng 802 11bg 802 11b and 802 11a cl...

Page 88: ...aximum speed that is supported by 802 11bg about 54 Mbps 11b 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax 802 11n and 802 11bg clie...

Page 89: ...low an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other WiFi modes The 802 11ax specification for the 5 GHz radio allows a 160 MHz wide channel in additi...

Page 90: ...s 20 MHz This is the default setting for the 2 4 GHz radio 40 MHz This is the default settings for the 5 GHz radio 80 MHz This selection is available only for the 5 GHz radio 160 MHz This selection is...

Page 91: ...he password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point thro...

Page 92: ...displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42...

Page 93: ...me network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your...

Page 94: ...ess point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed o...

Page 95: ...makes it very suitable for applications such as VoIP and streaming media Video The second highest priority queue with low delay Video applications are routed to this queue Best effort The medium prior...

Page 96: ...e external captive portal to each WiFi network Facebook Wi Fi captive portal A Facebook business page that serves as a portal You can configure a single Facebook Wi Fi captive portal on the access poi...

Page 97: ...roceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name i...

Page 98: ...f the Redirect URL check box is cleared a user is directed to the default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the...

Page 99: ...e EULA on the captive portal login page select the EULA check box EULA Max 1 KB 9 To preview the captive portal login page click the Preview button The following figure shows an example that is the fi...

Page 100: ...on for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is...

Page 101: ...uthentication URL Enter the web authentication URL that is provided by the vendor Key Enter the key credential that is provided by the vendor This field is optional and depends on the authentication r...

Page 102: ...et Instead they get a message Oops Something went wrong Please try after some time 12 Select one of the following Allow HTTPS buttons to specify when secure HTTP HTTPS traffic is allowed to pass throu...

Page 103: ...Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more inf...

Page 104: ...button and configure the settings d To limit the session length click the Session length Edit button and configure the settings Clients are automatically logged out when the session length is exceeded...

Page 105: ...ning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added...

Page 106: ...that option for a captive portal or you want to use another Facebook account you can unregister the access point from Facebook Wi Fi and remove the access point s entry To unregister the access point...

Page 107: ...radio button The capability to register is disabled However the access point s entry on the Facebook business page is not yet removed 6 Click the Apply button Your settings are saved 7 Go to the Face...

Page 108: ...al MAC access control lists Manage neighbor AP detection Set up RADIUS servers Enable L2 security Note For information about essential WiFi security network authentication and encryption see Set up an...

Page 109: ...curity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and...

Page 110: ...Ls in the domain are blocked For example if you add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword...

Page 111: ...the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can p...

Page 112: ...in again By default a session expires after 45 minutes 7 Click the Apply button Your settings are saved Change the time out period for a user session When a user logs in to the local browser UI the se...

Page 113: ...t Configuration System Advanced User Accounts 5 Under Session Timeout use the Hours and Minutes fields to specify the period after which a session automatically expires and the user must log in again...

Page 114: ...user accounts display 5 To the right of the user account change the existing settings as needed User Name Enter another user name Password Enter another password between 8 and 64 characters in length...

Page 115: ...arning pop up window displays 6 Click the Delete button The pop up windows closes and the user account is removed Manage local MAC access control lists The access point supports eight local access con...

Page 116: ...ustom 2 If enabled allows access to trusted stations by default Custom 3 If enabled allows access to trusted stations by default Custom 4 If enabled allows access to trusted stations by default By def...

Page 117: ...group name for the MAC ACL that you want to set up The previous figure shows some examples Devices in the Available Stations table are automatically detected by the access point and are common to all...

Page 118: ...the check box for the device and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device...

Page 119: ...adecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 You must separate entries with a comma The file must be in text format that is with a txt or cfg extension You can u...

Page 120: ...by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as connected 6...

Page 121: ...C addresses on the import list are placed in the Trusted Stations table c To remove a MAC address from the Trusted Stations table select the MAC address and click the Remove button You can search the...

Page 122: ...neighbor access points APs in a radio band and you can classify them as known APs If you enable neighbor AP detection for a radio band the access point regularly scans the WiFi network collects infor...

Page 123: ...nt or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security...

Page 124: ...s points every hour This is the default setting Moderate The access point scans for neighbor access points every 30 minutes Aggressive The access point scans for neighbor access points every 15 minute...

Page 125: ...an delete access points from the Known AP List After being detected these access points once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing ne...

Page 126: ...rowser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access...

Page 127: ...wn AP List are replaced with the ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the i...

Page 128: ...sts on page 115 If you use a RADIUS MAC ACL you must define the ACL on the RADIUS server using the format in the following example for client MAC addresses in the RADIUS server If the client MAC addre...

Page 129: ...1812 Password Enter the password shared key that is used between the access point and the RADIUS server during the authentication or accounting process By default the password is sharedsecret 6 To en...

Page 130: ...hat is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do...

Page 131: ...6 Click the Apply button Your settings are saved User Manual 131 Manage Access and Security Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Page 132: ...2 1Q VLAN and management VLAN Set an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disa...

Page 133: ...security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name an...

Page 134: ...r on your LAN Primary DNS IP address of the secondary DNS server on your LAN or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the...

Page 135: ...ied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insigh...

Page 136: ...be untagged To set the 802 1Q VLAN and management VLAN 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ether...

Page 137: ...l The access point tags all frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN onl...

Page 138: ...Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception f...

Page 139: ...tocol 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP addre...

Page 140: ...nfigured correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Launch a web browser from a computer that is connected to the...

Page 141: ...Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that...

Page 142: ...as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser dis...

Page 143: ...gh an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an except...

Page 144: ...bps For a LAG connection both ports must function at the same speed Therefore for a LAG connection the speed of the LAN 1 port is limited to 1 Gbps However if you use the LAG connection for increased...

Page 145: ...oint A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security...

Page 146: ...you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The u...

Page 147: ...ton The pop up window closes and your settings are saved The link aggregation capability is disabled User Manual 147 Manage the Local Area Network and IP Settings Insight Managed WiFi 6 AX5400 Access...

Page 148: ...zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser UI Schedule the access point t...

Page 149: ...xxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can m...

Page 150: ...5 Select one of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode CAUTION...

Page 151: ...oint through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add...

Page 152: ...to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a b...

Page 153: ...hernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for...

Page 154: ...2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more i...

Page 155: ...155 Set the time zone When the access point synchronizes its clock with a Network Time Protocol NTP server the page shows the date and time If the page does not show the correct date and time you mig...

Page 156: ...usted according to your settings For information about other time settings see Specify a custom NTP server on page 154 Manage the syslog settings If a syslog server is present on your network you can...

Page 157: ...firmware is stored in flash memory You can check to see if new firmware is available and update the access point to the new firmware You can also visit the NETGEAR support website download the firmwar...

Page 158: ...ew firmware and update the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or Wi...

Page 159: ...the Dashboard page 8 Read the new firmware release notes to determine whether you must reconfigure the access point after updating Manually download firmware and update the access point Downloading fi...

Page 160: ...e and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network loc...

Page 161: ...gearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret To re...

Page 162: ...irmware do not interrupt the reversion For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Pow...

Page 163: ...SFTP 6 Specify the following server settings Firmware File The name of the access point firmware file on the SFTP server SFTP Server IP The IP address of the SFTP server on your network User Name The...

Page 164: ...ess point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser secu...

Page 165: ...ear hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18...

Page 166: ...point s MAC address or the system name dd is the date mm is the month yy is the year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are...

Page 167: ...ser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you p...

Page 168: ...user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed t...

Page 169: ...to access the access point you must use the Reset button After you reset the access point to factory default settings the password for the admin user name is password the access point s DHCP client is...

Page 170: ...Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED turns solid green or solid blue Use the local browser UI to reset the access point You can use...

Page 171: ...ys 5 Click the Restore Defaults button A warning pop up window displays 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset i...

Page 172: ...fied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insig...

Page 173: ...he access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser display...

Page 174: ...resume normal operation Note the following restrictions Wireless distribution system EEM is mutually exclusive with a wireless distribution system WDS see Set up a WiFi Bridge on page 199 Neighbor AP...

Page 175: ...hat you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Po...

Page 176: ...cess points Display client distribution connected clients and client trends View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization View or download tracked URLs View save do...

Page 177: ...n The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point t...

Page 178: ...p of the Dashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet...

Page 179: ...The page shows four sections System Information section The following settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The M...

Page 180: ...e since the access point was last restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates that the interface is not in use IPv4 Settings section The fol...

Page 181: ...sword is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through th...

Page 182: ...settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The MAC address of the LAN Ethernet port of the access point Wireless MAC A...

Page 183: ...restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates that the interface is not in use IPv4 Settings section The following settings are displayed IPv4...

Page 184: ...ity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and pas...

Page 185: ...ients and client trends To display the clients that are connected to the access point over WiFi 1 Launch a web browser from a computer that is connected to the same network as the access point or dire...

Page 186: ...ecently connected clients list 5 To display how the clients are distributed over the radios click the Radio button in the Client Distribution pane The page adjusts and shows the types of clients for e...

Page 187: ...To display more information point to a node on one of the lines on the graph 10 To change the period over which information is filtered and displayed select the number of recent hours from the menu to...

Page 188: ...ent Tx Bytes The number of bytes that the client transmitted Rx Bytes The number of bytes that the client received State The QoS state of the connection Type The type of WiFi security that is used for...

Page 189: ...displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42...

Page 190: ...he graph 6 To view channel utilization do the following a Click the Channel Utilization button The graph shows the channel utilization for the 2 4 GHz radio b To view the channel utilization for the 5...

Page 191: ...d The page also displays the number of clients that are associated with each radio If the ARP proxy is enabled see Manage the ARP proxy on page 228 the page also displays the ARP statistics including...

Page 192: ...isplays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point us...

Page 193: ...h with the client host name and the first URL of the list of URLs that the client accessed b To view all URLs that a WiFi client accessed click the link to the right of the first URL A pop up window d...

Page 194: ...t management mode this is option is available from the Dashboard page by selecting Management Monitoring Cloud Logs To view save download or clear the logs 1 Launch a web browser from a computer that...

Page 195: ...d log entries do the following a Click the Download Detailed Logs button Depending on the size of the file downloading the detailed log entries might take several minutes b Follow the directions of yo...

Page 196: ...ser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access poi...

Page 197: ...g For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified...

Page 198: ...d by a red bell and notifications indicated by a blue bell with a description and time 6 To view more alarms and notification scroll down in the pop up window User Manual 198 Monitor the Access Point...

Page 199: ...see Install the Access Point in an Insight Instant Mesh WiFi Network on page 43 The chapter includes the following sections WiFi base station WiFi repeater and WiFi bridge requirements Set up a WiFi...

Page 200: ...nd a single WiFi repeater on the right side 3 3 4 5 1 2 Figure 10 WiFi bridge configuration between two access points in the 5 GHz radio band To use a WiFi bridge you cannot use the auto channel featu...

Page 201: ...ocol on page 139 and on the switches to which the access points are connected If your switches do not support STP after the WiFi bridge is established disconnect one of the access points from its swit...

Page 202: ...Management Configuration Wireless Bridge The page that displays lets you select a WDS profile WDS 1 WDS 2 WDS 3 or WDS 4 5 Click the button to the left of a WDS profile The WDS profile page displays 6...

Page 203: ...AES and you cannot change this setting Passphrase The passphrase for the WDS connection For you to enable the WDS connection the passphrase on the remote access point must match the passphrase that yo...

Page 204: ...rk Enable or disable URL tracking for a WiFi network Change the format of the DHCP offer messages in a WiFi network Select a MAC ACL for a WiFi network Set bandwidth rate limits for a WiFi network Con...

Page 205: ...ction 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For m...

Page 206: ...you want to use This IP address must be different from the WLAN network address that you set in the previous step 8 Click the Apply button Your settings are saved Enable or disable client isolation f...

Page 207: ...selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Under Wireless Client Isolation select one of the following radio buttons Disable Client isolation is disabled for the...

Page 208: ...Remove button 10 Click the Apply button Your settings are saved Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients...

Page 209: ...Enable URL Tracking is enabled for the WiFi network Disable URL Tracking is disabled for the WiFi network 8 Click the Apply button Your settings are saved Change the format of the DHCP offer messages...

Page 210: ...nd managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight ap...

Page 211: ...rent type of WiFi security for the WiFi network see Change the authentication and encryption for a WiFi network on page 70 Before you select a MAC ACL for a WiFi network review the policy of the ACL A...

Page 212: ...defined earlier To change the MAC ACL policy MAC addresses in the ACL or both click the link next to the group For more information see Manage local MAC access control lists on page 115 Select the Ra...

Page 213: ...work location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NET...

Page 214: ...t not to connections in a wireless distribution system WDS or Insight Instant Mesh WiFi network Advanced rate selection lets you configure the following settings for the 2 4 GHz and 5 GHz radio bands...

Page 215: ...ther way to describe the density level is that a selected level is mapped to a corresponding client density level WiFi mode minimum legacy rate beacon rate and minimum Modulation Coding Scheme MCS rat...

Page 216: ...ios 7 To apply basic fixed multicast rates from the Fixed Multicast Rate menu select one of the following rates depending on the radio band 2 4 GHz 1 2 5 5 or 11 Mbps or Auto By default Auto is 11 Mbp...

Page 217: ...legacy clients In the default 11ax WiFi mode for the radios the setting can be as follows 2 4 GHz 802 11b g n ax which supports 802 11b clients or 802 11g n ax which does not 5 GHz 802 11a n ac ax whi...

Page 218: ...ot specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the advanced WiFi settings for the radios Manage the maximum number...

Page 219: ...hat is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A logi...

Page 220: ...the range is from 1 to 200 WiFi clients and the default is 200 Max Wireless Clients Enter the Request to Send RTS threshold The range is from 256 to 2346 The default is 2346 If the packet size is equa...

Page 221: ...mber of packets that are transmitted across the network By default the setting is 50 the maximum possible value which specifies a maximum rate limit of 50 packets per second To change the setting move...

Page 222: ...access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proce...

Page 223: ...lower this number To manage the broadcast and multicast settings for a radio 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access...

Page 224: ...d balancing client associations depend on the maximum number of clients per radio the channel load per radio and each client s Received Signal Strength Indicator RSSI New client associations are allow...

Page 225: ...ettings for each type of load balancing or completely disable one or more types of load balancing To manage load balancing for the radios 1 Launch a web browser from a computer that is connected to th...

Page 226: ...the left of the Based On text 7 To change the load balancing settings do the following Based On Maximum Number Of Clients For each radio move the associated slider to specify the maximum number of cli...

Page 227: ...drain on WiFi resources You can force sticky clients to disassociate from the radios of the access point If load balancing based on the RSSI of the client is enabled see Manage load balancing for the...

Page 228: ...RP proxy By default the ARP proxy is enabled on the access point allowing it to inspect all ARP broadcast packets for its clients In this way the access point responds to ARP requests for its clients...

Page 229: ...formation see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced ARP Proxy The ARP Proxy page displays 5 Select...

Page 230: ...point and root access point cannot connect Troubleshoot WiFi connectivity for a WiFi client device Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes a...

Page 231: ...What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password...

Page 232: ...the packet capture process normal functioning of the access point is not affected The packet capture capability can be useful for analyzing a WiFi deployment monitoring a WiFi network debugging proto...

Page 233: ...gs that are described in the following table Description Setting From the Capture Interface menu select one of the following interfaces on which packets must be captured br lan All packets are capture...

Page 234: ...ce You must enter the MAC address in hexadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 Client Filter MAC Address Enter the maximum duration of the capture process...

Page 235: ...hat you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Po...

Page 236: ...Fi connection see Connect to the access point for initial configuration on page 21 Make sure that the WiFi client device supports the authentication and encryption that you are using for the WiFi netw...

Page 237: ...d to the Insight cloud based management platform Solid blue The access point functions in Insight mode and is connected to the Insight cloud based management platform 2 When the startup procedure is c...

Page 238: ...onnected to the access point and that the power adapter is correctly connected to a functioning power outlet If it is plugged into a power strip make sure that the power strip is turned on If it is pl...

Page 239: ...that situation the Power Cloud LED blinks amber quickly not slowly If the Power Cloud LED blinks amber slowly and continuously the access point did not receive an IP address from a DHCP server Check...

Page 240: ...Make sure that the access point is running the latest firmware version For more information see Manage the firmware of the access point on page 157 5 Disconnect and reconnect the Ethernet cable at the...

Page 241: ...ess point from your Insight network location and from your Insight account Then add the extender access point to your Insight account again and to your Insight network location 2 4G or 5G WLAN LED is...

Page 242: ...power source If you do not use a PoE connection to a PoE switch connect a power adapter to the DC power connector The Power Cloud LED on the extender access point lights solid amber 3 Wait for the ex...

Page 243: ...did not sync move the extender access point closer to the root access point and try again The extender access point must be within the root access point s WiFi coverage area to establish a good or fa...

Page 244: ...the signal strength is weak check these conditions Is the WiFi client device too far from the access point or too close Place the WiFi client device near the access point but at least 6 feet 1 8 mete...

Page 245: ...nd subnet mask on your computer to so that the IP addresses of your computer and the access point are in the same IP subnet Try quitting the browser and launching it again If you are using on older ty...

Page 246: ...access point might be blocked for five minutes The blockage period depends on the number of failed login attempts During the blockage period any attempts to log in to the access point are ignored eve...

Page 247: ...ty that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a network using the ping utility in your computer or workstation T...

Page 248: ...a remote device 1 From the Windows taskbar click the Start button and find and select Run 2 In the field provided enter ping n 10 IP address IP address is the IP address of a remote device such as a r...

Page 249: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 249...

Page 250: ...ee Connect over WiFi using the NETGEAR Insight app on page 24 AP login password WiFi network settings for initial setup and WiFi login The SSID for initial setup is NETGEARxxxxxx SETUP where xxxxxx is...

Page 251: ...enabled LEDs Disabled Energy Efficiency Mode WLAN settings for an individual WiFi network SSID or VAP Enabled Broadcast SSID 1 VLAN ID for WiFi clients WPA2 Personal which is WPA2 PSK The nonconfigur...

Page 252: ...Maximum 100 5 GHz radio Maximum 100 Output power 2 4 GHz radio Auto 5 GHz radio Auto Channel 2 4 GHz radio Enabled 5 GHz radio Enabled Wi Fi Multimedia WMM 2 4 GHz radio Enabled 5 GHz radio Enabled W...

Page 253: ...d balancing between radios Disabled Force sticky clients to disassociate Disabled ARP proxy None configured Wireless bridge General security Disabled URL filtering None configured RADIUS servers 2 4 G...

Page 254: ...eless distribution system WDS WiFi standards 6 2 4 streams 2 4 GHz radio 2 streams 5 GHz radio 4 streams WiFi streams 2 4 GHz band US 2 412 2 462 GHz Europe 2 412 2 472 GHz 5 GHz band US 5 18 5 885 Eu...

Page 255: ...90 maximum relative humidity noncondensing Operating humidity 4 to 158 F 20 to 70 C Storage temperature 5 to 95 maximum relative humidity noncondensing Storage humidity FCC Part 15 Report EMI SubPart...

Page 256: ...r you can install the access point freestanding on a flat surface Before you mount the access point first set up and test the access point to verify WiFi network connectivity This appendix includes th...

Page 257: ...ts Figure 11 Mounting plate Figure 12 Metal bracket with T bar lock screw and 4 short screws Figure 13 3 tall screws and anchors for wall mounting User Manual 257 Mount the Access Point to a Wall or C...

Page 258: ...wall with a soft mallet until the anchors are flush with the wall 5 Use the screws to attach the mounting plate to the wall Note Do not insert the screws into the wall without anchors 6 Connect an Eth...

Page 259: ...unt the access point to a T bar To mount the access point to a T bar 1 Slide the T bar partially into the metal bracket 2 Attach the metal bracket to the ceiling bar 3 Push the T bar over the ceiling...

Page 260: ...ernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the ceiling...

Page 261: ...e down and attach it to the mounting plate 8 Turn the access point clockwise until it locks in the mounting plate User Manual 261 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5...

Page 262: ...User Manual 262 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Page 263: ...the LEDs and your finger on the other side of the access point directly opposite the thumb 2 Press and hold the latch down to release the lock and keep the lock open 3 Turn the access point countercl...

Page 264: ...The mounting plate remains attached to the ceiling or the wall User Manual 264 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Search results

Summary of Contents for WAX628

Reviews:

Related manuals for WAX628

Brands by name

Popular brands

NETGEAR WAX628, User Manual

Search results

Summary of Contents for WAX628

Reviews:

Related manuals for WAX628

Brands by name

Popular brands