background image

User Manual

WiFi 6 AX1800/AX3600 Dual Band
PoE/PoE+ Access Points

Models

WAX214
WAX218

NETGEAR, Inc.
350 E. Plumeria Drive

December 2020

San Jose, CA 95134, USA

202-12175-01

Summary of Contents for WAX214

Page 1: ...User Manual WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points Models WAX214 WAX218 NETGEAR Inc 350 E Plumeria Drive December 2020 San Jose CA 95134 USA 202 12175 01 ...

Page 2: ...ory See the regulatory compliance document before connecting the power supply For NETGEAR s Privacy Policy visit https www netgear com about privacy policy By using this device you are agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period Do not use this device outdoor...

Page 3: ...n and Initial Log in Set up the access point in your network 22 Set up the access point with a PoE or PoE network connection 22 Set up the access point with a non PoE network connection 24 Initial log in process 26 Connect directly to the access point over WiFi and log in for the first time 26 Connect to the access point over the LAN and log in for the first time 29 When to use aplogin net and whe...

Page 4: ...gh throughput mode 64 Manage the channel or channels 65 Manage the radio transmit power 67 Change the minimum bit rate 68 Manage client limits 70 Manage the multicast and unicast streams to WiFi clients 71 Scan for neighboring access points and WiFi routers 72 Manage the 802 11ax mode for the 2 4 GHz radio 74 Set up a WiFi on off schedule for an SSID 75 Set up band steering for an SSID 77 Set up a...

Page 5: ...ting Send a ping 121 Send a traceroute request 122 Send a name server lookup request 123 Perform a speed test 124 Quick tips for WiFi troubleshooting 125 Troubleshoot with the LEDs 126 Power LED remains off 127 2 4 GHz WLAN LED 5 GHz WLAN LED or both WLAN LEDs are off 128 LAN LED is off in a setup with a power adapter 128 Troubleshoot the WiFi connectivity 129 A WiFi device cannot connect to the a...

Page 6: ...l or Ceiling Mount model WAX214 to a wall 142 Mount model WAX214 to a solid ceiling 143 Mount model WAX214 to a T bar 145 Appendix C Mount Model WAX218 to a Wall or Ceiling Mount model WAX218 to a wall 148 Mount model WAX218 to a solid ceiling 149 Mount model WAX218 to a T bar 151 6 NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 7: ...or each model Additional documentation Safety instructions and warnings for an indoor access point Note For more information about the topics that are covered in this manual visit the support website at netgear com support Note Firmware updates with new features and bug fixes are made available from time to time at netgear com support download You can check for and download new firmware manually I...

Page 8: ...bps at 5 GHz Approximate combined throughput PoE 802 at PoE 802 af Power over Ethernet1 2 5 Gbps 1 Gbps Maximum speed LAN port 8 0 x 8 0 x 1 37 in 205 7 x 205 7 x 35 8 mm 6 33 x 6 33 x 1 31 in 160 9 x 160 9 x 33 3 mm Form factor L x W x H 1 If used without a power adapter Additional documentation The following documents are available at netgear com support download Installation guides Data sheets ...

Page 9: ... Before connecting the product to outdoor cables or wired outdoor devices see https kb netgear com 000057103 for additional safety and warranty information Failure to follow these guidelines can result in damage to your NETGEAR product which might not be covered by NETGEAR s warranty to the extent permissible by applicable law Do not service the product except as explained in your product document...

Page 10: ...ny system and peripheral power cables into properly grounded power outlets If applicable to your product the peripheral power cables are equipped with three prong plugs to help ensure proper grounding Do not use adapter plugs or remove the grounding prong from a cable If you must use an extension cable use a three wire cable with properly grounded plugs Observe extension cable and power strip rati...

Page 11: ... with a combined throughput of 1 8 Gbps about 600 Mbps at 2 4 GHz and 1200 Mbps at 5 GHz A single Gigabit PoE LAN port lets you connect the access point to a PoE 802 3af switch If you use a regular switch the access point requires a power adapter which is supplied for model WAX214PA For model WAX214 a power adapter is an option that you can purchase The chapter contains the following sections Unpa...

Page 12: ... the package might also include a power adapter If you ordered a package without a power adapter you can still order a power adapter as an option For information about the mounting options see Mount Model WAX214 to a Wall or Ceiling on page 141 Top panel with LEDs for model WAX214 The LEDs that provide the status of the access point are located on the top panel of the access point Figure 1 Top pan...

Page 13: ...g blue The LAN PoE port is transmitting or receiving data Off Either no powered on Ethernet device is connected to the LAN PoE port or if a powered on Ethernet device is connected no Ethernet link is detected Solid amber The access point is powered on Power LED Off No power is supplied to the access point Note For information about troubleshooting with the LEDs see Troubleshoot with the LEDs on pa...

Page 14: ...fault settings LAN PoE port You can use the LAN PoE Gigabit Ethernet RJ 45 port to connect the access point to a PoE switch or if you use a power adapter to a non PoE switch The LAN PoE port supports Ethernet speeds up to 1 Gbps DC power connector If you do not use a PoE switch to provide power to the access point connect an optional power adapter to the DC power connector Note The back panel prov...

Page 15: ... key WiFi password for the management SSID The management SSID provides access to the local browser interface UI only That is the management SSID is not intended for general WiFi clients access Figure 3 Product label model WAX214 User Manual 15 Hardware Overview Model WAX214 NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 16: ...with a combined throughput of 3 6 Gbps about 1200 Mbps at 2 4 GHz and 2400 Mbps at 5 GHz A single 2 5 Gbps PoE LAN port lets you connect the access point to a PoE 802 3at switch If you use a regular switch the access point requires a power adapter which is supplied for model WAX218PA For model WAX218 a power adapter is an option that you can purchase The chapter contains the following sections Unp...

Page 17: ... the package might also include a power adapter If you ordered a package without a power adapter you can still order a power adapter as an option For information about the mounting options see Mount Model WAX218 to a Wall or Ceiling on page 147 Top panel with LEDs for model WAX218 The LEDs that provide the status of the access point are located on the top panel of the access point Figure 4 Top pan...

Page 18: ...g blue The LAN PoE port is transmitting or receiving data Off Either no powered on Ethernet device is connected to the LAN PoE port or if a powered on Ethernet device is connected no Ethernet link is detected Solid amber The access point is powered on Power LED Off No power is supplied to the access point Note For information about troubleshooting with the LEDs see Troubleshoot with the LEDs on pa...

Page 19: ...ect the access point to a PoE switch or if you use a power adapter to a non PoE switch The LAN PoE port supports Ethernet speeds up to 2 5 Gbps Note If you do not use a power adapter use a PoE 803 2 at switch If you use a PoE 803 2 af switch the access point might not receive sufficient power for normal operation DC power connector If you do not use a PoE switch to provide power to the access poin...

Page 20: ... key WiFi password for the management SSID The management SSID provides access to the local browser interface UI only That is the management SSID is not intended for general WiFi clients access Figure 6 Product label model WAX218 User Manual 20 Hardware Overview Model WAX218 NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 21: ...rowser UI The chapter contains the following sections Set up the access point in your network Initial log in process When to use aplogin net and when to use the assigned IP address Find the IP address of the access point Find the IP address of the access point with the NETGEAR Insight mobile app Log in to the access point after you complete the initial log in process Change the language Join a WiF...

Page 22: ...E network connection You can connect the access point to a Power over Ethernet PoE switch in your network The type of PoE switch depends on the access point model see below The switch must be connected to a network router that is connected to the Internet If you use a PoE connection the access point does not require a power adapter Figure 7 Set up model WAX214 with a PoE connection to your network...

Page 23: ... 1 Connect an Ethernet cable to the LAN PoE model WAX214 or LAN PoE model WAX218 port on the access point 2 Connect the other end of the Ethernet cable to switch that is connected to your network and to the Internet Model WAX214 Connect the cable to a PoE port on a PoE 802 3af switch You can also use a PoE 802 3at switch Model WAX218 Connect the cable to a PoE port on a PoE 802 3at switch We recom...

Page 24: ... can connect the access point to a regular switch that is a non Power over Ethernet switch in your network The switch must be connected to a network router that is connected to the Internet If you use a regular switch the access point requires a power adapter which is supplied for model WAX214PA and model WAX218PA For model WAX214 and model WAX218 a power adapter is an option that you can purchase...

Page 25: ...ion functions at 1 Gbps To set up the access point with a non PoE connection to your network 1 Connect an Ethernet cable to the LAN PoE model WAX214 or LAN PoE model WAX218 port on the access point 2 Connect the other end of the Ethernet cable to a switch that is connected to your network and to the Internet 3 Connect the power adapter to the access point and plug it into an electrical outlet 4 Ch...

Page 26: ... UI the access point no longer presents the Day Zero page but displays the regular login page that allows you to enter your local device password For more information about the initial log in process see one of the following sections Connect directly to the access point over WiFi and log in for the first time on page 26 Connect to the access point over the LAN and log in for the first time on page...

Page 27: ...of the access point WAX214 WAX214XXXXXX CONFIG ONLY WAX218 WAX218XXXXXX CONFIG ONLY In this manual we also refer to this management SSID as the CONFIG ONLY SSID The default WiFi passphrase for the management SSID which is a unique WiFi password is printed on the access point label If you cannot get a WiFi connection to the access point see You cannot connect over the 2 4 GHz management SSID on pag...

Page 28: ...roblem with this website s security certificate message click the Continue to this website not recommended link Microsoft Edge If Microsoft Edge displays a There is a problem with this website s security certificate message or a similar warning select Details Go on to the webpage 4 On the Day Zero page configure the following settings a In the AP Login New Password field specify a unique local log...

Page 29: ...fter about two minutes the login page displays 5 If you are still connected to the management SSID but the login page does not display in the address field of your web browser enter https www aplogin net Note If your browser displays a security message and does not let you proceed see Step 3 6 In the Local Device Password field enter your new local device password and click the Login button The De...

Page 30: ...ssigned to access point use one of the following options each of which is described in detail in Find the IP address of the access point on page 33 Use the automatic device detection of a Windows based computer Access your existing router or DHCP server Use the NETGEAR Insight mobile app Use a third party IP scanner 3 Launch a web browser and enter the IP address that is assigned to the access poi...

Page 31: ...roblem with this website s security certificate message click the Continue to this website not recommended link Microsoft Edge If Microsoft Edge displays a There is a problem with this website s security certificate message or a similar warning select Details Go on to the webpage 5 On the Day Zero page configure the following settings a In the AP Login New Password field specify a unique local log...

Page 32: ...he address field of your web browser enter the IP address that is assigned to the access point Note If your browser displays a security message and does not let you proceed see Step 4 7 In the Local Device Password field enter your new local device password and click the Login button The Device Status page displays You can now configure the access point for your network and environment When to use...

Page 33: ... point If you do not know the IP address that was assigned to the access point use one of the following options to find the IP address of the access point Option 1 Use the automatic device detection of a Windows based computer 1 Launch File Explorer or Windows Explorer 2 Select Network from the Navigation pane 3 Right click the access point device icon and select Properties The access point IP add...

Page 34: ... DHCP server information of your existing router modem if the modem functions as a DHCP server or dedicated DHCP server to see the devices that are connected to it including the access point The IP address that is assigned to the access point is listed Option 6 Use a third party IP scanner Use an IP scanner application they are available free of charge on the Internet in the network of your existi...

Page 35: ...browser might display a security message You can either ignore this message or install the security certificate Consider the following examples Google Chrome If Google Chrome displays a Your connection is not private message click the ADVANCED link Then click the Proceed to x x x x unsafe link in which x x x x represents the IP address of the switch Apple Safari If Apple Safari displays a This con...

Page 36: ...t displays a security message see the information in the introduction to this task 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays The Device Status page displays various panes that let you see the status of your access point at a glance You can now confi...

Page 37: ...s point use the software application that manages your WiFi connections Note By default the access point s main first WiFi network is enabled but the second third and fourth WiFi networks are disabled These WiFi networks differ from the management SSID which you can use to log in over a WiFi connection to the local browser UI of the access point To connect a device to a WiFi network on the access ...

Page 38: ...tial log in process To connect to the main WiFi network enter that WiFi passphrase 5 Click the Connect button The device connects to the WiFi network of the access point User Manual 38 Installation and Initial Log in NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 39: ...scribes how you can manage the wired network settings of the access point The chapter includes the following sections Specify a static IPv4 address Specify a link local IPv6 address Reenable the DHCP client of the access point Manage the STP settings 39 ...

Page 40: ...age 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 U...

Page 41: ...e IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays...

Page 42: ...ccess point 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the I...

Page 43: ...wing methods Windows based computer If you use a Windows based computer open Windows Explorer and click the Network link If prompted enable the Network Discovery feature Under Network Infrastructure locate and click the access point device name assuming that you did not change the device name DHCP server Access the DHCP server in your network and open the page that shows the network connections NE...

Page 44: ...you specified The password is case sensitive The Device Status page displays 4 Under Network select Basic The page that displays shows the IPv4 Settings IPv6 Settings and Spanning Tree Protocol STP Settings sections 5 In the Spanning Tree Protocol STP Settings section specify the settings that are described in the following table Description Setting Select one of the following radio buttons Enable...

Page 45: ...cess point in the spanning tree A smaller number means a higher priority The range is 0 65535 The default is 32768 Priority 6 Click the Save button Your settings are saved but not yet applied A pop up window displays The window shows the number of changes to be applied 7 In the pop up window click the Apply button Your changes are applied If the WiFi link must be reestablished the page displays th...

Page 46: ...see Manage the Advanced WiFi and Radio Settings on page 63 The chapter includes the following sections Change the device name Change the country and region of operation Configure a WiFi network that is open or secured with WPA2 or WAP3 personal security Configure a WiFi network that is secured with WPA2 or WAP3 enterprise security Configure a guest network on an SSID 2 4 GHz management SSID 46 ...

Page 47: ...essage and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Network select Wireless The Wireless Settings page displays 5 In the AP Nam...

Page 48: ...int If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proce...

Page 49: ...ou select must depend on the types of devices in your WiFi network and the level of security that your environment requires All types of WPA personal security function with a WiFi passphrase A WiFi client can only access the WiFi network with the correct WiFi passphrase To change the settings for an active SSID or enable and configure an SSID that is open or secured with WPA2 or WAP3 personal secu...

Page 50: ...efault the type of WiFi security is WPA2 Personal 6 Do one of the following Enabled SSID To change the settings for a previously enabled SSID click the Edit button for the SSID Disabled SSID To enable and then change the settings for an SSID that is not yet enabled select the Enabled check box for the SSID and then click the Edit button for the SSID A new page displays Note To allow you to focus o...

Page 51: ...dio buttons are disabled Client Isolation To prevent clients on different VLANs from communicating with each other select the Enable radio button and enter the VLAN ID in the ID field By default this option is disabled For the first SSID the default VLAN ID is 1 for the second SSID the default VLAN ID 2 for the third SSID the VLAN ID is 3 and for the fourth SSID the VLAN ID is 4 The range is from ...

Page 52: ...onal 9 If you select WPA2 Personal WAP3 Personal or WPA2 WPA3 Personal from the Security Mode menu configure the following settings a Passphrase Specify a phrase of 8 to 63 characters To join the SSID a user must enter this passphrase b Group Key Update Interval Specify a period from 30 to 3600 seconds which is the period after which the WiFi network group key changes in the background Connected u...

Page 53: ...on tasks WPA2 or WPA3 enterprise level security or a combination thereof uses RADIUS for centralized Authentication Authorization and Accounting AAA management The following procedure includes the steps to configure a RADIUS server The type of WPA enterprise security WPA2 WPA3 or a combination of both that you select must depend on the types of devices in your WiFi network and the level of securit...

Page 54: ...GHz radios but the second third and fourth SSIDs are disabled The SSID fields shows the names for the WiFi networks to which WiFi clients can connect You can change the SSID names The Security fields show the types of WiFi security that are enabled for the SSID By default the type of WiFi security is WPA2 Personal 6 Do one of the following Enabled SSID To change the settings for a previously enabl...

Page 55: ...her over the Internet Note If L2 isolation is enabled the Client Isolation radio buttons are disabled Client Isolation To prevent clients on different VLANs from communicating with each other select the Enable radio button and enter the VLAN ID in the ID field By default this option is disabled For the first SSID the default VLAN ID is 1 for the second SSID the default VLAN ID 2 for the third SSID...

Page 56: ...of the UDP port on the access point that is used to access the RADIUS authentication server The default port number is 1812 e Radius Secret Specify the shared key WiFi password that is used between the access point and the RADIUS authentication server during the authentication process 10 To enable fast roaming for WPA2 Enterprise security in the Fast Roaming section select the Enable radio button ...

Page 57: ...cess point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let yo...

Page 58: ...t is you might not get an Internet connection over this SSID Furthermore only if you are connected to the management SSID you can use https www aplogin net to access to the local browser UI For more information about https www aplogin net see When to use aplogin net and when to use the assigned IP address on page 32 IMPORTANT By default the idle time out for the management SSID is 15 minutes That ...

Page 59: ...web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access...

Page 60: ...ID However you can disable the idle time out so that the management SSID stays always on To disable the idle time out for the management SSID 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to...

Page 61: ...se are the default VLAN settings for any SSID on the access point To disable the 2 4 management SSID 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https...

Page 62: ...but not yet applied A pop up window displays The window shows the number of changes to be applied 7 In the pop up window click the Apply button Your changes are applied If the WiFi link must be reestablished the page displays the number of seconds before the access point is back online User Manual 62 Manage the Basic Radio and WiFi Settings NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Poi...

Page 63: ...annels Manage the radio transmit power Change the minimum bit rate Manage client limits Manage the multicast and unicast streams to WiFi clients Scan for neighboring access points and WiFi routers Manage the 802 11ax mode for the 2 4 GHz radio Set up a WiFi on off schedule for an SSID Set up band steering for an SSID Set up a RADIUS accounting server Configure Network Access Server settings Config...

Page 64: ...s but leave fewer channels available for use To manage the channel HT mode 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login w...

Page 65: ...ion that you selected for the access point IMPORTANT You do not need to change the channel unless you experience interference which is indicated by lost connections If you use multiple access points you can reduce interference by selecting different channels for adjacent access points We recommend a channel spacing of four channels between adjacent access points for example for 5 GHz radios use ch...

Page 66: ...ck the None button for a radio 7 Do one of the following Specific channel for a radio To select a specific channel for a radio click the button for the channel and frequency The available channels depend on the country and region that you selected for the access point Groups of channels for the 2 4 GHz radio To select a specific group of channels for the 2 4 GHz radio select a button that displays...

Page 67: ...u are responsible for complying with the local regional and national regulations that are set for channels power levels and frequency ranges To manage the radio transmit power 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access poin...

Page 68: ...Click the Save button Your settings are saved but not yet applied A pop up window displays The window shows the number of changes to be applied 8 In the pop up window click the Apply button Your changes are applied If the WiFi link must be reestablished the page displays the number of seconds before the access point is back online Change the minimum bit rate The access point automatically sends da...

Page 69: ... The password is case sensitive The Device Status page displays 4 Under Network select Wireless The Wireless Settings page displays 5 Click the Bit Rate Configuration button A new page opens 6 As a precaution write down the current minimum bit rate for each radio After you change the bit rate if WiFi devices can no longer connect to the access point you can reset the bit rate to the old value 7 On...

Page 70: ...owser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point...

Page 71: ...lients When a client tries to associate with a WiFi network and negotiates an IP address the access point converts the multicast DHCP offer message from the DHCP server to a unicast message and forwards it to the client This is the default option You can disable this option so that the access point does not convert the multicast DHCP offer messages to unicast messages Multicast messages cause more...

Page 72: ...on The access point converts multicast DHCP offer messages to unicast messages This is the default setting Keep multicast streams Select the Multicast to Unicast Stream Conversion Disable radio button The access point does not convert multicast DHCP offer messages to unicast messages 6 Click the Save button Your settings are saved but not yet applied A pop up window displays The window shows the n...

Page 73: ...n button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Network select Wireless The Wireless Settings page displays 5 Click the AP Detection Scan button for one of the radios A new page opens After the access point completes its scan for neighboring access points and WiFi routers in the selected radio band the page dis...

Page 74: ...de for the 2 4 GHz radio 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address s...

Page 75: ...ing scheduled vacations office shutdowns on evenings or on weekends You can set up and manage a WiFi on off schedule for each SSID Before you enable and set up a WiFi on off schedule make sure that the time zone settings are synchronized with your local time For more information see Manage the date and time settings on page 97 To set up a WiFi on off schedule for an SSID 1 Launch a web browser fro...

Page 76: ... From the Schedule Templates menu select one of the following templates Always available Available 8 17 daily Available 8 17 daily except weekends Custom schedule Based on your selection the Schedule Table is preconfigured You can refine the settings 6 To refine the settings in the Schedule Table do the following as needed For each day from the Available menu select available or unavailable availa...

Page 77: ...me SSID settings including WiFi security settings for the 2 4 GHz and 5 GHz bands of the SSID For more information about the SSID settings see Configure a WiFi network that is open or secured with WPA2 or WAP3 personal security on page 49 or Configure a WiFi network that is secured with WPA2 or WAP3 enterprise security on page 53 To set up a band steering for an SSID 1 Launch a web browser from a ...

Page 78: ...can still connect to the 2 4 GHz band Force 5GHz All dual band capable WiFi devices are forced to associate with the 5 GHz band A device that is already connected to the 2 4 GHz band is not disassociated An RSSI value does not apply to this option Band Balance 5GHz RSSI Specify the RSSI value of the dual band capable WiFi device below which the device is not steered to the 5 GHz band We recommend ...

Page 79: ...int or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on p...

Page 80: ...13 Radius Accounting Port Enter the password shared key that is used between the access point and the accounting RADIUS server during the authentication process Radius Accounting Secret Enter the period in seconds between each accounting update message that the access point sends to the RADIUS accounting server The default period is 600 seconds Interim Accounting Interval 7 Click the Save button Y...

Page 81: ...displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Network select Wireless The Wireless Settings page dis...

Page 82: ...located the same amount of bandwidth for downloading and uploading traffic By shaping the traffic for each SSID you can control the total bandwidth usage on the access point or you can control the way the bandwidth is allocated between the SSIDs For each SSID you can shape the traffic by limiting the bandwidth for downloading traffic and the bandwidth for uploading traffic either for the entire SS...

Page 83: ...le traffic shaping do not enter 0 Otherwise downloading traffic is disabled entirely 9 In the Upload Limit field enter the limit You can enter a limit from 1 to 999 in either Kbps or Mbps If you enable traffic shaping do not enter 0 Otherwise uploading traffic is disabled entirely 10 To apply the configured limits to each individual user of the SSID select the Per User check box If you use the SSI...

Page 84: ...u manually block a WiFi client that is kick a client see Manually block a WiFi client or connection from an SSID on page 86 an ACL that denies the MAC address of the client is automatically added to the SSID from which you blocked the client That ACL denies access to the client but allows access all other clients You can manually delete the client from the ACL after which the client is no longer d...

Page 85: ...add to the list are denied access but all other MAC address are allowed access Allow MAC in the List The MAC addresses that you add to the list are allowed access but all other MAC address are denied access By default the selection is Disabled and all MAC addresses are allowed 8 To add MAC addresses to the list do the following a Enter the MAC address of a WiFi device in the fields b Click the Add...

Page 86: ... to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does ...

Page 87: ...ettings for guest WiFi network s 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP a...

Page 88: ...with the IP address The default subnet mask is 255 255 255 0 Subnet Mask Automatic DHCP Server Settings The starting IP address in the address range from which a WiFi client on a guest network can be assigned an IP address The default starting IP address is 192 168 200 100 Starting IP Address The ending IP address in the address range from which a WiFi client on a guest network can be assigned an ...

Page 89: ...e Reboot the access point from the local browser UI Schedule the access point to reboot Back up or restore the configuration file Reset the access point to factory default settings Manage the date and time settings SNMPv1 SNMPv2 and SNMPv3 Logs Set up email alerts Change the local device password Specify an existing management VLAN Control the LEDs 89 ...

Page 90: ...window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the...

Page 91: ...over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 ...

Page 92: ...ess point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login...

Page 93: ...cess point configuration settings You can save a copy of the current configuration settings If necessary you can restore the configuration settings later To back up the access point s configuration settings 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that...

Page 94: ...ings see Back up the access point configuration settings on page 93 you can restore the configuration settings from the backup file To restore the access point s configuration settings from the backup file 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that ...

Page 95: ...n For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes When the restoration is finished the login page displays Reset the access point to factory default settings Under some circumstances for example if you lost track of the changes that you made to the configuration of the access point or you move the access poi...

Page 96: ...n page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the...

Page 97: ...the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your brows...

Page 98: ...y a different NTP server from the one that is preconfigured 6 To configure a time zone in the Time Zone section select a time zone from the Time Zone menu If you manually select a time zone you can also manually configure daylight saving time settings see the next step 7 To manually enable and configure daylight saving time settings in the Time Zone section do the following a Select the Enable Day...

Page 99: ...s If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point ...

Page 100: ...d Enable SNMPv3 and manage the settings You can enable SNMPv3 and manage the associated settings for the access point To enable SNMPv3 and manage the settings 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are dire...

Page 101: ...e From the Authorized Protocol menu select one of the following options for authentication MD5 The MD5 message digest algorithm is used for authentication You must specify an authentication key for SNMPv3 access see the Authorized Key SHA Secure Hash Algorithms SHA is used for authentication You must specify an authentication key for SNMPv3 access see the Authorized Key None A user cannot access S...

Page 102: ...n the severity of an event You can view these messages and specify the event severity that the access point logs You can also download the messages and clear the message log To view and manage the system log 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address tha...

Page 103: ...vents that provide device information are logged Notice Normal but significant device events are logged Warning The lowest level of device warnings are logged Error Device errors are logged An example is a failure to request a device token Critical The third highest device warning level An critical event is logged if a critical device malfunction occurs Alert The second highest warning level An al...

Page 104: ...that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security m...

Page 105: ...ail address to which the access point automatically can send an alerts when the configuration of the access point is changed To set up email alerts 1 Launch a web browser from a computer or mobile device that is directly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connec...

Page 106: ...lert WAX218 XX XX XX XX XX XX Configuration Changed e In the Username field enter the user name to access the originating email account f In the Password field enter the password to access the originating email account g In the SMTP Server field enter the name of the outgoing email server name h In the Port field enter the port number that the access point uses to contact the SMTP server By defaul...

Page 107: ...irectly connected over WiFi to the access point or connected to the same network as the access point 2 Enter the IP address that is assigned to the access point If you are directly connected to the CONFIG ONLY SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFI...

Page 108: ...anagement traffic is tagged with the VLAN ID CAUTION The VLAN must be defined on your network and the DHCP server switch and router to which the access point is connected must be able to reach the access point over this VLAN Otherwise when you change the VLAN connectivity problems might occur and you might be locked out from the local browser UI To specify an existing management VLAN for the acces...

Page 109: ...pplied 9 In the pop up window click the Apply button Your changes are applied If the WiFi link must be reestablished the page displays the number of seconds before the access point is back online Control the LEDs By default all LEDs are enabled and function as described in Top panel with LEDs for model WAX214 on page 12 or Top panel with LEDs for model WAX218 on page 17 You can manage whether the ...

Page 110: ...ement select Tools By default the Ping tab is selected and the Ping Test Parameters page displays 5 Select the LED tab The LED Control page displays 6 To control the Power LED select one of the following Power radio buttons Enable The Power LED is enabled This is the default setting Disable The Power LED is disabled and turned off 7 To control the 5 GHz WLAN 2 4 GHz WLAN and LAN LEDs select one of...

Page 111: ...r describes how you can monitor the access point and its network connections The chapter includes the following sections Display the access point device memory LAN and WiFi status information Display the WiFi connections Display the CPU SSID and LAN traffic loads 111 ...

Page 112: ... SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page di...

Page 113: ...arted or rebooted Uptime The firmware version For more information see Upgrade the firmware on page 90 Firmware Version The device version Device Version Shows whether management traffic is tagged or untagged For more information see Specify an existing management VLAN on page 108 Management VLAN ID The speed of the LAN PoE model WAX214 or LAN PoE model WAX218 port LAN Speed Table 5 Memory Informa...

Page 114: ...f the secondary DNS server if any Secondary DNS Shows whether the DHCP client of the access point is enabled which it is by default For more information see Reenable the DHCP client of the access point on page 42 DHCP Client Shows whether STP is enabled For more information see Manage the STP settings on page 43 Spanning Tree Protocol STP Table 7 LAN Information IPv6 section Description Setting Th...

Page 115: ...AN Information 5GHz section Description Setting The WiFi mode which is fixed at 802 11 ax ac n a Wireless Mode The WiFi channel bandwidth For for information see Manage the channel high throughput mode on page 64 Channel Bandwidth The WiFi channel For for information see Manage the channel or channels on page 65 Channel Table 10 Statistics Access Point 2 4GHz 5GHz section Description Setting The p...

Page 116: ...Y SSID you can enter https www aplogin net A login window displays If you do not know the IP address see Find the IP address of the access point on page 33 For more information about the CONFIG ONLY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complet...

Page 117: ...ens b Click the OK button The WiFi device no longer displays on the page An ACL that denies the MAC address of the WiFi device is automatically added to the SSID from which you blocked the WiFi device This ACL denies access to the WiFi device but allows access all other WiFi devices For more information see Set up a MAC filter for an SSID on page 84 A pop up window opens The window shows the numbe...

Page 118: ...t local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Overview select Realtime The page that displays shows the CPU load that is by default the Load tab is selected The page displays the current average and peak CPU traffic load each of which is expressed in a percentage is u...

Page 119: ...wired connection select the LAN tab The page displays traffic information for the LAN PoE model WAX214 or LAN PoE model WAX218 port including the current inbound and outbound traffic loads the average inbound and outbound traffic loads and the peak inbound and outbound traffic loads each of which is expressed in kilobytes per second KB s is updated every three seconds and covers a maximum period o...

Page 120: ... ping Send a traceroute request Send a name server lookup request Perform a speed test Quick tips for WiFi troubleshooting Troubleshoot with the LEDs Troubleshoot the WiFi connectivity Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes are not saved in the local browser UI Troubleshoot your network using the ping utility of your computer or mobile de...

Page 121: ...ay a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Management select Tools By defau...

Page 122: ...ay a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Management select Tools By defau...

Page 123: ...LY SSID see 2 4 GHz management SSID on page 58 If your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensi...

Page 124: ...your browser does not display a login window but displays a security message and does not let you proceed see Log in to the access point after you complete the initial log in process on page 35 3 Enter the access point local device password and click the Login button The local device password is the one that you specified The password is case sensitive The Device Status page displays 4 Under Manag...

Page 125: ... schedule for an SSID on page 75 One WLAN LED is off If only one WLAN LED is off the associated radio band 2 4 GHz or 5 GHz is probably disabled on all active WiFi networks SSIDs For example if the 5 GHz WLAN LED is off but the 2 4 GHz WLAN LED is lighting the 5 GHz radio band is probably disabled for each active SSID For more information see Configure a WiFi network that is open or secured with W...

Page 126: ...dden If the access point s SSID broadcast is disabled the WiFi network name is hidden and does not display in the WiFi device s scanning list To connect to a hidden network the user must know and enter both the network name and the WiFi password For more information about the SSID broadcast see Configure a WiFi network that is open or secured with WPA2 or WAP3 personal security on page 49 or Confi...

Page 127: ...ower budget of the PoE or PoE switch is not oversubscribed so that the switch is capable of delivering PoE or PoE power to the access point Power adapter If you use a power adapter and the Power LED and other LEDs remain off when you provide power to the access point do the following Make sure that the LEDs are not disabled see Control the LEDs on page 109 Make sure that the power adapter is corre...

Page 128: ...ery instructions or help with a hardware problem contact technical support at netgear com support LAN LED is off in a setup with a power adapter If the LAN LED is off when you use a power adapter to provide power to the access point and you did not disable the LEDs see Control the LEDs on page 109 check the following Make sure that the Ethernet cable connectors are securely plugged in at the acces...

Page 129: ...tion and encryption that is configured for the SSID For more information see Configure a WiFi network that is open or secured with WPA2 or WAP3 personal security on page 49 or Configure a WiFi network that is secured with WPA2 or WAP3 enterprise security on page 53 Note If the access point s WiFi authentication and encryption is set to WPA3 Personal make sure that the WiFi adapter device driver is...

Page 130: ...e the WiFi device near the access point but at least 6 feet 1 8 meters away Is the WiFi signal blocked Make sure that the WiFi signal is not blocked by objects between the access point and the WiFi device Is the device blocked in a MAC filter Make sure that the WiFi device is not on a MAC filter access control list that blocks access to the device see Set up a MAC filter for an SSID on page 84 Can...

Page 131: ...D on page 61 Troubleshoot Internet browsing If a WiFi device is connected to the access point but unable to load any web pages from the Internet it might be for one of the following reasons The WiFi device might not recognize any DNS server addresses If you manually entered a DNS address when you set up the access point that is the access point uses static IP address settings restart the WiFi devi...

Page 132: ...puter If you use a Windows based computer open Windows Explorer and click the Network link If prompted enable the Network Discovery feature Under Network Infrastructure locate and right click the access point device icon and select Properties The access point IP address displays Assuming that you did not change the device name the access point is shown as NETGEARXXXXXX in which XXXXXX represents t...

Page 133: ...settings remain in the web browser s cache Troubleshoot your network using the ping utility of your computer or mobile device Most network devices and routers contain a ping utility that sends an echo request packet to the designated device The device then responds with an echo reply You can troubleshoot a network using the ping utility in your computer or mobile device Test the LAN path from a Wi...

Page 134: ...onnected to the access point and computer Correct software If you are using a wired connection to the access point verify that the Ethernet card driver software and TCP IP software are both installed and configured on your computer Test the path from a Windows based computer to a remote device To test the path from a Windows based computer that is connected to the access point to a remote device 1...

Page 135: ...e remote device Check to see that your modem is connected and functioning If your ISP assigned a host name to your registered computer use that host name as the account name on your modem Your ISP might be rejecting the Ethernet MAC addresses of all but one of your computers Many broadband ISPs restrict access by allowing traffic only from the MAC address of your modem Some ISPs additionally restr...

Page 136: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 136 ...

Page 137: ...AX214 WAX218XXXXXX CONFIG ONLY XXXXXX represents the last six digits of the MAC address of the LAN interface of the access point Model WAX21 The unique WiFi password is printed on the access point label The security is WPA2 Personal WiFi passphrase for management SSID Automatically turned off after15 minutes of being idle Management SSID time out WiFi networks SSIDs for client connections By defau...

Page 138: ...nnel HT mode Automatic Auto RF Radio transmission power The available channels and the default channel depend on the configured region and country Channel Automatic Bit rate 64 for each radio Client limits Enabled Multicast to unicast stream conversion Enabled 11ax mode Other Obtained automatically from the default NTP server Date and time settings Disabled STP Disabled untagged Management VLAN Di...

Page 139: ...ires 802 3af PoE power Maximum power consumption with PoE 12 5W Power over Ethernet Note PoE might be considered a network environment 0 per IEC TR 62101 and thus the interconnected ITE circuits might be considered safety extra low voltage SELV Model WAX218 If you do not use a power adapter the LAN PoE port requires 802 3at PoE power Maximum power consumption with PoE 19 5W Model WAX214 6 33 x 6 3...

Page 140: ...z Europe 5 180 5 700 GHz The supported channels depend on the configured regulatory domain Operating frequency range 5 GHz band IEEE 802 11ax IEEE 802 11ac specification IEEE 802 11n 2 0 specification IEEE 802 11g IEEE 802 11b IEEE 802 11a Supported radio technologies 128 of which 64 are on the 2 4 GHz radio and 64 are on the 5 GHz radio The supported number of clients depends on the network and t...

Page 141: ... with a 15 16 in 23 8 mm T bar or you can install the access point freestanding on a flat surface We recommend that you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed This appendix includes the following sections Mount model WAX214 to a wall Mount model WAX214 to a solid ceiling Mount model WAX214 to a ...

Page 142: ...ant to insert the provided anchors and screws which must be 3 875 in 98 5 mm apart 3 Insert the anchors and screws but leave about 0 25 in 6 mm of each screw protruding from the wall so that you can insert the screws into the holes on the bottom of the access point 3 875in 98 5mm User Manual 142 Mount Model WAX214 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WA...

Page 143: ...Using the anchors and screws provided attach the 15 16 in 23 8 mm bracket with the screw holes to the ceiling The rectangular protruding part of the bracket must be facing the ceiling 2 Hold the access point upside down with the front of the access point facing the bracket User Manual 143 Mount Model WAX214 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 an...

Page 144: ...of the access point with the bracket 4 Slide the access point into the bracket until it locks in place User Manual 144 Mount Model WAX214 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 145: ...tes the locking tab Mount model WAX214 to a T bar To mount the access point to a T bar 1 Slide the 15 16 in 23 8 mm bracket between the guides on the bottom the access point until it locks in place The locking tab must be at the front of the access point 2 Hold the access point upside down User Manual 145 Mount Model WAX214 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access...

Page 146: ...tangular protruding part of the bracket with the T bar 4 Hook the bracket onto one side of the T bar 5 Hook the bracket onto the other side of the T bar until the bracket locks onto the T bar User Manual 146 Mount Model WAX214 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 147: ... with a 15 16 in 23 8 mm T bar or you can install the access point freestanding on a flat surface We recommend that you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed This appendix includes the following sections Mount model WAX218 to a wall Mount model WAX218 to a solid ceiling Mount model WAX218 to a ...

Page 148: ... want to insert the provided anchors and screws which must be 4 33 in 110 mm apart 3 Insert the anchors and screws but leave about 0 25 in 6 mm of each screw protruding from the wall so that you can insert the screws into the holes on the bottom of the access point 4 33in 110mm User Manual 148 Mount Model WAX218 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX2...

Page 149: ...Using the anchors and screws provided attach the 15 16 in 23 8 mm bracket with the screw holes to the ceiling The rectangular protruding part of the bracket must be facing the ceiling 2 Hold the access point upside down with the front of the access point facing the bracket User Manual 149 Mount Model WAX218 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 an...

Page 150: ...of the access point with the bracket 4 Slide the access point into the bracket until it locks in place User Manual 150 Mount Model WAX218 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Page 151: ...tes the locking tab Mount model WAX218 to a T bar To mount the access point to a T bar 1 Slide the 15 16 in 23 8 mm bracket between the guides on the bottom the access point until it locks in place The locking tab must be at the front of the access point 2 Hold the access point upside down User Manual 151 Mount Model WAX218 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access...

Page 152: ...tangular protruding part of the bracket with the T bar 4 Hook the bracket onto one side of the T bar 5 Hook the bracket onto the other side of the T bar until the bracket locks onto the T bar User Manual 152 Mount Model WAX218 to a Wall or Ceiling NETGEAR WiFi 6 AX1800 AX3600 Dual Band PoE PoE Access Points WAX214 and WAX218 ...

Reviews: