background image

Manage user accounts

User accounts provide either read/write or read-only access to the local browser UI of
the access point. You cannot delete the admin user account or change its user name,
but you can change its password. You can add accounts for other users, and you can
change or delete these accounts.

The following sections describe how you can manage user accounts:

Add a user account

Change the time-out period for a user session

Change the settings for a user account

Remove a user account

For information about changing the password for the default admin user account, see
Change the admin user account password on page 153.

Add a user account

To add a user account:

1. Launch a web browser from a computer that is connected to the same network as

the access point or directly to the access point through an Ethernet cable or WiFi
connection.

2. Enter the IP address that is assigned to the access point.

A login window displays.

If your browser displays a security warning, you can proceed, or add an exception
for the security warning. For more information, see What to do if you get a browser
security warning 
on page 42.

3. Enter the access point user name and password.

The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.

If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight Cloud Portal or Insight app, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app 
on page 24.

The Dashboard page displays.

4. Select Management > Configuration > System > Advanced > User Accounts.

User Manual

112

Manage Access and Security

Insight Managed WiFi 6 AX3000 Access Point Model WAX618

Содержание WAX618

Страница 1: ...User Manual Insight Managed WiFi 6 AX3000 Access Point WAX618 NETGEAR Inc 350 E Plumeria Drive January 2023 San Jose CA 95134 USA 202 12641 01 ...

Страница 2: ... are agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period Do not use this device outdoors The PoE source is intended for intra building connection only Applicable to 6 GHz devices only Only use the device indoors The operation of 6 GHz devices is prohibited on oil pla...

Страница 3: ...n 21 Connect over the Internet using the NETGEAR Insight Cloud Portal 22 Connect over WiFi using the NETGEAR Insight app 24 Connect over WiFi to the local browser UI for initial configuration 26 Connect over the LAN to the local browser UI for initial configuration 31 Configure the access point offline using a directly connected computer 36 Log in to the access point after initial setup 41 What to...

Страница 4: ...t 81 Chapter 6 Manage the Basic Radio Features Manage the basic WiFi settings for the radios 84 Turn a radio on or off 87 Change the WiFi mode for a radio 88 Change the channel width for a radio 90 Change the guard interval for a radio 91 Change the output power for a radio 93 Change the channel for a radio 94 Manage Quality of Service for a WiFi radio 95 Chapter 7 Set Up and Manage a Captive Port...

Страница 5: ...le or disable Ethernet LLDP 143 Enable or disable UPnP 144 Manage the multicast DNS gateway 145 Enable the multicast DNS gateway and add a policy 146 Change or remove a multicast DNS policy 147 Chapter 10 Manage and Maintain the Access Point Change the management mode to NETGEAR Insight or Web browser 150 Change the country or region of operation 152 Change the admin user account password 153 Chan...

Страница 6: ...ridge connection 195 View alarms and notifications 196 Chapter 12 Manage the Advanced WiFi Features for a WiFi network Set NAT mode or Bridge mode for addressing and traffic 199 Enable or disable client isolation for a WiFi network 200 Enable or disable URL tracking for a WiFi network 202 Change the format of the DHCP offer messages in a WiFi network 204 Select a MAC ACL for a WiFi network 205 Set...

Страница 7: ...not connect 241 Troubleshoot WiFi connectivity for a WiFi client device 242 Troubleshoot Internet browsing 243 You cannot log in to the access point over a LAN connection 244 Changes are not saved 245 You enter the wrong password and can no longer log in to the access point 245 Troubleshoot your network using the ping utility 246 Test the LAN path to your access point 246 Test the path from your c...

Страница 8: ...rnet port supports a high speed up to 2 5 Gbps This chapter contains the following sections About the local browser user interface and NETGEAR Insight Additional documentation Note For more information about the topics that are covered in this manual visit the support website at netgear com support Note Firmware updates with new features and bug fixes are made available from time to time at netgea...

Страница 9: ...or information about the NETGEAR Insight Cloud Portal and Insight app visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 If you install the access point as a NETGEAR Insight managed device the settings for features that you can manage through the Insight Cloud Portal and Insight app are masked out in the lo...

Страница 10: ... model WAX618 is an indoor access point that supports the 2 4 GHz and 5 GHz WiFi bands The chapter contains the following sections Unpack the access point Top panel with LEDs Hardware interfaces Access point label Safety instructions and warnings for an indoor access point 10 ...

Страница 11: ...ter the type of power adapter varies by region If you ordered model WAX618 but prefer to use the access point without a PoE connection you can order a power adapter separately For information about the mounting options see Mount the Access Point to a Wall or Ceiling on page 255 Top panel with LEDs The LEDs that provide the status of the access point are located on the top panel of the access point...

Страница 12: ... setup is in progress Solid amber during operation The PoE power that the access point received is not at the 802 3at PoE level Off No power is supplied to the access point Solid green A 2 5 Gbps Ethernet link is detected on the LAN port LAN LED Blinking green 2 5 Gbps traffic activity is detected on the LAN port Solid amber An Ethernet link at a speed lower than 2 5 Gbps is detected on the LAN po...

Страница 13: ...t button LAN PoE port Figure 2 Hardware interfaces The bottom panel contains the following components DC power connector If you do not use a PoE switch to provide power to the access point connect an optional power adapter to the DC power connector LAN PoE port Use the LAN PoE Gigabit Ethernet RJ 45 LAN port to connect the access point to a PoE switch or if you use an optional power adapter to a n...

Страница 14: ...t button for 10 seconds or longer Note If you added the access point to a NETGEAR Insight network location you must first use the Insight Cloud Portal or Insight app to remove the access point from your Insight network location before the factory default settings function of the Reset button is available For more information see Use the Reset button to reset the access point on page 170 Access poi...

Страница 15: ...mation about the environment in which this product must operate see the environmental specifications in the appendix or the data sheet If you want to connect the product over an Ethernet cable to a device located outdoors the outdoor device must be properly grounded and surge protected and you must install an Ethernet surge protector inline between the indoor product and the outdoor device Failure...

Страница 16: ...et environment If the product gets wet see the appropriate section in your troubleshooting guide or contact your trained service provider Do not push any objects into the openings of your product Doing so can cause fire or electric shock by shorting out interior components Use the product only with approved equipment If applicable to your product allow the product to cool before removing covers or...

Страница 17: ...tings limit for the extension cable or power strip To help protect your system from sudden transient increases and decreases in electrical power use a surge suppressor line conditioner or uninterruptible power supply UPS Position system cables power adapter cables and PoE Ethernet cables carefully Route cables so that they cannot be stepped on or tripped over Be sure that nothing rests on any cabl...

Страница 18: ...etup What to do if you get a browser security warning CAUTION This device must be professionally installed It is the installer s responsibility to follow local country regulations including operations within legal frequency channels output power and DFS requirements The vendor reseller or distributor is not responsible for illegal wireless operations For more details see the device s terms and con...

Страница 19: ...o provide network access Tips for positioning your access point Place your access point near the center of the area where the WiFi clients operate A line of sight between the access point and the WiFi clients is not required for good performance If you use a power adapter make sure that the access point is within reach of an AC power outlet Place the access point in an elevated location minimizing...

Страница 20: ...ing it to a PoE switch If you ordered a package without a power adapter but do not want to use a PoE connection you can still order a power adapter as an option If connected to 2 5 Gbps equipment the access point LAN PoE port supports Ethernet speeds up to 2 5 Gbps within your LAN The following figure show a NETGEAR MS510TXUP switch which supports speeds of 2 5 Gbps and higher as well as PoE If yo...

Страница 21: ...ess point is ready for you to perform the initial configuration For information about accessing the access point for initial configuration see Connect to the access point for initial configuration on page 21 Connect to the access point for initial configuration After you set up the access point you can use several methods to connect to it for initial configuration For remote management of the acce...

Страница 22: ...e connected to the Internet For more information about the Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 Your NETGEAR account is also your Insight account Your NETGEAR account credentials let you log in as an Insight Premium user or if you upgrade to an Insight Pro account as an In...

Страница 23: ...d Insight location configuration This might take up to 10 minutes during which time the access point will restart The access point is now an Insight managed device that is connected to the Insight cloud based management platform If the Power Cloud LED was solid green it lights solid blue You can use the Insight Cloud Portal or Insight app to configure and manage the access point Note If you add th...

Страница 24: ...TGEAR Insight and download the Insight app 2 On your mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the access point label on the bottom of the access point to connect to the setup WiFi network Connect manually The setup WiFi network is on the access point label and is shown in the format NETGEARxxxxx...

Страница 25: ... icon in the top bar and do one of the following Tap the SCAN BARCODE OR QR CODE button and then scan the access point s code which is on the access point label Tap the Enter Serial Number and MAC Address link and then manually enter the access point s serial number and MAC address which are on the access point label 8 If prompted name the access point and tap the Next button The access point auto...

Страница 26: ...vice without using the NETGEAR Insight app and complete the initial configuration To connect over WiFi to the local browser UI for initial configuration 1 From your computer or mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the access point label on the bottom of the access point to connect to the set...

Страница 27: ...stead the login page displays After you log in the Dashboard page displays 5 To let the access point check for the latest firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade completes the access point restarts When the access point is ready ...

Страница 28: ...sable radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a...

Страница 29: ...1w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Transition Mode check box displays If you select this check box the WiFi network can accept both clients that support the WiFi enhanced open feature and clients that do not For clients that do ...

Страница 30: ...en you log in again You are disconnected from the access point If you changed the default country the access point restarts 9 Reconnect over WiFi to the access point s WiFi network using the new SSID and passphrase that you just defined on the Day Zero Easy Setup page 10 Enter the access point IP address in the address bar of your browser If you changed the IP address enter the IP address that you...

Страница 31: ...device icon and select Properties to display the IP address Note You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 24 2 On the computer launch a web browser and in the address bar enter the IP address that is assigned to the access point Your browser might display...

Страница 32: ...for the latest firmware click the Check for Upgrade button the button is not shown in the previous figure If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade completes the access point restarts When the access point is ready depending on your situation go back to Step 2 or Step 3 of this procedure 6 Enter the settings that are des...

Страница 33: ...sable radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a...

Страница 34: ...1w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Open OWE Transition Mode check box displays If you select this check box the WiFi network can accept both clients that support the WiFi enhanced open feature and clients that do not For clients that do ...

Страница 35: ...nformation see Change the authentication and encryption for a WiFi network on page 71 8 Click the Apply button Your settings are saved A pop up window displays the IP address and the new WiFi network and password passphrase If you specified a static IP address save the IP address information because you must enter the IP address when you log in again If you changed the default country the access p...

Страница 36: ...ght display a security warning because of the self signed certificate on the access point which is expected behavior You can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 A login window displays b Enter the access point user name and password The user name is admin The password is the one that you just defi...

Страница 37: ...cumentation for your computer 3 Use an Ethernet cable to connect your computer to the LAN PoE port on the access point 4 On the computer launch a web browser and enter 192 168 0 100 in the address bar Your browser might display a security warning because of the self signed certificate on the access point which is expected behavior You can proceed or add an exception for the security warning For mo...

Страница 38: ... the settings that are described in the following table Description Setting From the menu select the country and region in which the access point is operating Note Make sure that the country is set to the location where the device is operating You are responsible for complying with the local regional and national regulations that are set for channels power levels and frequency ranges Note It might...

Страница 39: ...ase letter one lowercase letter and one number The following special characters are allowed Save the password for future use AP Login New Password Enter exactly the same password that you entered in the AP Login New Password field Confirm New Password You cannot use the setup SSID for regular operation The setup SSID is for initial setup only Enter a new name with a maximum of 32 characters You ca...

Страница 40: ... use TKIP and WPA2 clients use AES In the Passphrase field enter a new passphrase for the WiFi network WPA3 Personal This option allows only WiFi clients that support WPA3 to connect to the SSID Select this option if all WiFi clients are capable of supporting WPA3 This option uses SAE encryption In the Passphrase field enter a new passphrase for the WiFi network WPA3 WPA2 Personal This option allo...

Страница 41: ... After initial setup the access point is ready for use and you can change the settings and monitor the traffic To log in to the access point s local browser UI 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A logi...

Страница 42: ...d behavior You can proceed or add an exception for the security warning To proceed with a security warning or add an exception for a security warning Google Chrome Click the ADVANCED link Then click the Proceed to x x x x unsafe link in which x x x x represents the domain name or IP address of the device Apple Safari Click the Show Details button Then click the visit this website link If a warning...

Страница 43: ...he Confirm Security Exception button Microsoft Edge Select Details Go on to the webpage Microsoft Internet Explorer Click the Continue to this website not recommended link User Manual 43 Install the Access Point in Your Network and Access It for Initial Configuration Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 44: ...ser UI to set up a mesh WiFi connection to a root For information about how you can manage and monitor the node with the Insight Cloud Portal and Insight app visit netgear com insight The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear com support The chapter contains the following sections What ...

Страница 45: ...ted to your network over a wired connection but over a WiFi connection 3 3 4 5 1 2 Figure 6 Mesh network with a node and a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with the Insight app or either a computer or a tablet with access to the Insight...

Страница 46: ... sight and in range of the current WiFi reception Any environment in which you cannot run cables In the mesh WiFi network the node connects to the root over a WiFi connection and broadcasts extends the WiFi network to the WiFi clients Backhaul connection The WiFi connection between the root and the node is referred to as the backhaul connection Fronthaul connection The WiFi connection between the ...

Страница 47: ...net port for the connection to your network The node must be in factory default state If you previously used the node in your network reset the access point to factory default settings The node must be within range of the WiFi signal of a root so that it can sync with the root During setup for a reliable WiFi connection place the node less than 25 feet 7 5 m in a line of sight with minimal obstacl...

Страница 48: ...he NETGEAR Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 To connect to the access point over the Internet through the Insight Cloud Portal 1 On a computer or tablet visit insight netgear com The NETGEAR Account Login page displays 2 If you do not already have an Insight account you...

Страница 49: ...ight The Insight Cloud Portal has embedded help and is documented in multiple knowledge base articles that you can access by visiting netgear com support 3 3 4 5 1 2 Figure 7 Connect the node to a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with t...

Страница 50: ...ot is set to Auto For more information visit kb netgear com 000064931 3 Make sure that node is in factory default state If you previously used the access point in your network reset the access point to factory default settings 4 For a reliable WiFi connection place the node less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root 5 Connect the node to a power source ...

Страница 51: ...ration process Blinking green The node is attempting to detect a root Solid green The node is making its first connection with the root that provides the strongest WiFi signal Blinking amber slowly The node is contacting the network router or DHCP server to receive an IP address If the Power Cloud LED does not stop blinking amber see Power Cloud LED is blinking amber slowly continuously on page 23...

Страница 52: ...ice For more information about the NETGEAR Insight app visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb netgear com 000061848 To install the Insight app to manage an Insight Instant Mesh WiFi network 1 On your mobile device go to the app store search for NETGEAR Insight and download the Insight app 2 Launch the Insight app 3 I...

Страница 53: ...base articles that you can access by visiting netgear com support 3 3 4 5 1 2 Figure 8 Connect the node to a wired root Number or Icon and Description 1 A root that is connected over Ethernet to a network switch 2 A node that is connected over a 5 GHz backhaul WiFi connection to the root 3 A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud Portal ...

Страница 54: ...d Portal For all other steps in this procedure you can use the Insight app 2 Make sure that the mesh mode for the root is set to Auto For more information visit kb netgear com 000064929 3 Make sure that node is in factory default state If you previously used the access point in your network reset the access point to factory default settings 4 For a reliable WiFi connection place the node less than...

Страница 55: ...root that provides the strongest WiFi signal in the Insight Instant Mesh WiFi network Note The initial connection and configuration process might take up to 10 minutes The node might restart during the configuration process 10 Wait for the node to go through the initial connection and configuration process and for the Power Cloud LED to stop blinking amber green and blue and to light solid blue No...

Страница 56: ... node functions in the Insight Instant Mesh WiFi network and is connected to the Insight cloud The node is automatically configured to broadcast extend the root s WiFi network If you are experiencing difficulty connecting the node with a root see The node and root cannot connect on page 241 For information about accessing managing and monitoring the node with the NETGEAR Insight Cloud Portal and I...

Страница 57: ... or broadcast the SSID for a WiFi network Change the VLAN ID for a WiFi network Change the authentication and encryption for a WiFi network Enable or disable PMF for a WiFi network Set up Multi PSK for a WiFi network Disable or enable a WiFi network or set up a WiFi activity schedule Enable or disable band steering with 802 11k RRM and 802 11v WiFi network management Note If you want to change the...

Страница 58: ...s on page 129 Note that WPA2 Enterprise security and WPA3 Enterprise security are not compatible with a multicast DNS mDNS gateway see Manage the multicast DNS gateway on page 145 To set up a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP addres...

Страница 59: ... VAP the SSID on the WiFi device must match the SSID of the VAP Wireless Network Name SSID By default the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their scanned network lists To turn off the SSID broadcast select the No radio button Turning off the SSID broadcast provides additional WiFi security but users must know the SSID to be able to join the VAP Broadcast SSID You ...

Страница 60: ... clients that support the WiFi enhanced open feature and clients that do not For clients that do not support the WiFi open enhanced feature traffic is not encrypted If you clear the Allow Devices to Connect with Open check box the WiFi network can only accept clients that support the WiFi enhanced open feature WPA2 Personal This option which is the same as WPA2 PSK is the default setting and uses ...

Страница 61: ...hentication option WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP If you select this option 802 11w PMF is automatically set to mandatory see Step 8 WPA3 provides a secure connection but some legacy WiFi devices do not detect WPA3 and support only WPA2 If your network also includes WPA2 devices select WPA3 WPA2 Personal authentication In the Passphrase fie...

Страница 62: ... network If you select Enhanced Open authentication WPA3 Personal authentication or WPA3 Enterprise authentication the radio button for PMF is set to Mandatory and you cannot change it Optional This option lets the access point automatically activate PMF based on whether devices can support PMF If you select WPA3 WPA2 Personal authentication the radio button for PMF is set to Optional but you can ...

Страница 63: ...ally select a single radio band only Select a radio button for a single band 2 4 GHz or 5 GHz or keep the default selection By default the Both radio button is selected which lets the access point broadcast the SSID on both bands 12 Optionally enable band steering with 802 11k radio resource management RRM and 802 11v WiFi network management By default band steering with 802 11k RRM and 802 11v Wi...

Страница 64: ...nt is Bridge mode which means that WiFi clients receive IP addresses from a DHCP server or a router that functions as a DHCP server in your network This is usually the same DHCP server that assigns an IP address to the access point itself You can also set NAT mode which enables the access point s DHCP server for WiFi clients The access point s DHCP server assigns an IP address in a different range...

Страница 65: ...rk VLAN are identical by default both are VLAN 1 and you enable client isolation the Allow Access to AP UI check box displays By default this check box is selected allowing an admin user to access the local browser UI over the WiFi network If you clear the Allow Access to AP UI check box an admin user cannot access the local browser UI over the WiFi network If the management VLAN and WiFi network ...

Страница 66: ...age 208 20 Click the Apply button Your settings are saved 21 Make sure that you can connect to the new WiFi network If you cannot connect to the new WiFi network check the following If your WiFi enabled computer or mobile device is already connected to another WiFi network in your area disconnect it from that WiFi network and connect it to the correct WiFi network Some WiFi devices automatically c...

Страница 67: ...ity warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more...

Страница 68: ... default WiFi network The default WiFi network is the SSID that you renamed and for which you set a new passphrase when you initially connected to the access point This SSID is displayed as SSID1 in the local browser UI To remove a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable ...

Страница 69: ... network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see Wha...

Страница 70: ...an get IP addresses over the new VLAN To change the VLAN ID for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or ...

Страница 71: ...splayed as SSID1 in the local browser UI Before you change the authentication and encryption consider the types of clients that must be able to connect to the WiFi network WPA3 provides a more secure connection than WPA2 but many WiFi devices might not yet detect WPA3 and support only WPA2 Similarly WPA2 provides a more secure connection than WPA but some legacy WiFi devices do not detect WPA2 and...

Страница 72: ...u Open A legacy open WiFi network does not provide any security Any WiFi device can join the network We recommend that you do not use a legacy open WiFi network but configure WiFi security However a legacy open network might be appropriate for a WiFi hotspot If you select Open from the Authentication menu the Enhanced Open check box displays Enhanced Open check box cleared The WiFi network is a le...

Страница 73: ...assphrase field enter a phrase of 8 to 63 characters To join the VAP a user must enter this passphrase To view the passphrase in clear text click the eye icon WPA2 Enterprise This enterprise level security uses RADIUS for centralized Authentication Authorization and Accounting AAA management For WPA2 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 1...

Страница 74: ...Authorization and Accounting AAA management For WPA3 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 129 If you select this option 802 11w PMF is automatically set to mandatory see Enable or disable PMF for a WiFi network on page 75 When you select WPA3 Enterprise security the encryption is automatically set to GCMP256 which is a 256 bit encryption ...

Страница 75: ...l or disabled You can also set it manually To enable or disable PMF for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can pro...

Страница 76: ... WiFi network into different VLANs each accessible with a unique passphrase In a way Multi PSK lets you create different sub WiFi networks on a single WiFi network When connecting to the WiFi network the passphrase that a user enters determines the VLAN that the WiFi client is placed in In addition to a VLAN and passphrase you can associate a key identifier with the VLAN to passphrase mapping The ...

Страница 77: ...s If inter VLAN routing is disabled in the network that the access point is connected to the following applies WiFi clients that are connected to different VLANs on the same WiFi network that is the WiFi clients use different passphrases to connect to the same WiFi network cannot communicate with each other and remain isolated WiFi clients that are connected to the same VLAN on different WiFi netw...

Страница 78: ...n For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display You cannot configure Multi PSK on the default WiFi network displayed as SSID1 in the local bowser UI whi...

Страница 79: ...the WiFi network or you can set up a schedule that specifies when the WiFi network is active Scheduling a WiFi network a green feature that allows you to turn off the WiFi network during scheduled vacations office shutdowns on evenings or on weekends For each WiFi network you can create a single custom schedule In that schedule for each day from 12 00 a m to 11 59 p m you specify the time or times...

Страница 80: ...lect one of the following radio buttons Always ON The WiFi network is enabled Always OFF The WiFi network is disabled Custom The WiFi network is enabled or disabled according to a schedule that you must set up An icon displays to the right of the radio button 7 If you selected Custom in the previous step do the following a Click the icon next to the radio button A pop up window displays b Either s...

Страница 81: ...z band based on the access point s channel load In an environment with multiple access points 802 11v WiFi network management helps WiFi clients that are roaming to select the best access point The access point sets the received signal strength indicator RSSI threshold automatically That is you cannot configure the RSSI threshold manually To enable or disable band steering with 802 11k RRM and 802...

Страница 82: ...ettings for the selected SSID display 6 Under Band Steering 802 11 k v select one of the following radio buttons Disable Band steering is disabled for the VAP This is the default setting Enabled Under certain channel conditions the access point steers WiFi devices that are dual band capable to the 2 4 GHz or 5 GHz band of the VAP 7 Click the Apply button Your settings are saved User Manual 82 Mana...

Страница 83: ...the change affects all WiFi networks on the access point The chapter includes the following sections Manage the basic WiFi settings for the radios Turn a radio on or off Change the WiFi mode for a radio Change the channel width for a radio Change the guard interval for a radio Change the output power for a radio Change the channel for a radio Manage Quality of Service for a WiFi radio Note If you ...

Страница 84: ...ser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight ...

Страница 85: ...can connect to the access point This is the default setting 11ng 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax clients is limited to the maximum speed that is supported by 802 11ng about 400 Mbps 11bg 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax and 802 11ng clie...

Страница 86: ...channel improves the performance no or minimal interference and better data rates The 802 11n specification allows a 40 MHz wide channel in addition to the legacy 20 MHz channel that is available with other modes The 802 11ac specification allows an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other modes The 802 11ax specification for the 5 GHz radio a...

Страница 87: ...eed to reconnect Turn a radio on or off By default both the 2 4 GHz and 5 GHz radios broadcast Turning off a radio disables WiFi access for the associated band which affects all WiFi networks VAPs or SSIDs in that band Turning off a radio can be helpful during configuration network tuning or troubleshooting To turn a radio on or off 1 Launch a web browser from a computer that is connected to the s...

Страница 88: ...By default all types of WiFi clients can access a WiFi network on the access point that is the WiFi modes on the access point support 802 11ax 802 11ac 802 11na 802 11ng 802 11bg 802 11b and 802 11a clients You can change the WiFi modes to limit access to certain types of clients To change the WiFi mode for a radio 1 Launch a web browser from a computer that is connected to the same network as the...

Страница 89: ...maximum speed that is supported by 802 11bg about 54 Mbps 11b 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax 802 11n and 802 11bg clients is limited to the maximum speed that is supported by 802 11b about 11 Mbps 5 GHz radio Select one of the following WiFi modes for the 5 GHz radio 11ax 802 11ax 802 11ac 802 11na and 802 11a WiFi ...

Страница 90: ...llow an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other WiFi modes The 802 11ax specification for the 5 GHz radio allows a 160 MHz wide channel in addition to the 20 MHz 40 MHz and 80 MHz channels that are available with other WiFi modes The 40 MHz 80 MHz and 160 MHz channels enable higher data rates but leave fewer channels available for use on the ...

Страница 91: ...gs 20 MHz This is the default setting for the 2 4 GHz radio 40 MHz This is the default settings for the 5 GHz radio 80 MHz This selection is available only for the 5 GHz radio 160 MHz This selection is available only for the 5 GHz radio Dynamic 20 40 MHz This selection is available only for the 2 4 GHz radio Dynamic 20 40 80 160 MHz This selection is available only for the 5 GHz radio 6 Click the ...

Страница 92: ...The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page...

Страница 93: ...w displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access poin...

Страница 94: ...ame network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the acces...

Страница 95: ...cess point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin...

Страница 96: ... makes it very suitable for applications such as VoIP and streaming media Video The second highest priority queue with low delay Video applications are routed to this queue Best effort The medium priority queue with medium delay Most standard IP applications use this queue Background The low priority queue with high throughput Applications such as FTP that are not time sensitive but require high t...

Страница 97: ...ue external captive portal to each WiFi network Facebook Wi Fi captive portal A Facebook business page that serves as a portal You can configure a single Facebook Wi Fi captive portal on the access point but you can apply it to multiple WiFi networks The chapter includes the following sections Set up a click through captive portal for a WiFi network Set up an external captive portal for a WiFi net...

Страница 98: ...proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access ...

Страница 99: ...If the Redirect URL check box is cleared a user is directed to the default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the default title displays on the captive portal login page Title Enter a message to the user This message is displayed on the captive portal login page If you do not customize the message the default m...

Страница 100: ...he EULA on the captive portal login page select the EULA check box EULA Max 1 KB 9 To preview the captive portal login page click the Preview button The following figure shows an example that is the figure does not show the default captive portal but a customized one 10 Click the Apply button Your settings are saved WiFi clients attempting to connect to the SSID are presented with the captive port...

Страница 101: ...ion for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insigh...

Страница 102: ...Authentication URL Enter the web authentication URL that is provided by the vendor Key Enter the key credential that is provided by the vendor This field is optional and depends on the authentication requirements of the vendor Secret Enter the secret credential that is provided by the vendor This field is optional and depends on the authentication requirements of the vendor Radius Authentication f...

Страница 103: ...net Instead they get a message Oops Something went wrong Please try after some time 12 Select one of the following Allow HTTPS buttons to specify when secure HTTP HTTPS traffic is allowed to pass through Enable Before authentication occurs HTTPS traffic is allowed to pass through Disable This is the default setting HTTPS traffic is allowed only after authentication occurs 13 Configure the walled g...

Страница 104: ...2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user nam...

Страница 105: ... button and configure the settings d To limit the session length click the Session length Edit button and configure the settings Clients are automatically logged out when the session length is exceeded 10 Refresh the page in the local browser UI 11 To allow clients that are connected to the Facebook captive portal to establish a secure HTTP HTTPS session before the captive portal authentication oc...

Страница 106: ...rning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more infor...

Страница 107: ...e that option for a captive portal or you want to use another Facebook account you can unregister the access point from Facebook Wi Fi and remove the access point s entry To unregister the access point from Facebook Wi Fi and remove the access point s entry 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Et...

Страница 108: ...o radio button The capability to register is disabled However the access point s entry on the Facebook business page is not yet removed 6 Click the Apply button Your settings are saved 7 Go to the Facebook business page and log in to your account 8 Select the check box for the access point s entry 9 Click the Delete button The access point s entry is removed User Manual 108 Set Up and Manage a Cap...

Страница 109: ...cal MAC access control lists Manage neighbor AP detection Set up RADIUS servers Enable L2 security Note For information about essential WiFi security network authentication and encryption see Set up an open or secure WiFi network on page 58 Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual access point That is when we refer to a WiFi...

Страница 110: ...ecurity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location...

Страница 111: ...RLs in the domain are blocked For example if you add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword entry to the blacklist enter the keyword in the lower field to the left of the lower Add button and click the lower Add button To remove a keyword entry from the blacklist select the check box for t...

Страница 112: ...o the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name ...

Страница 113: ... in again By default a session expires after 45 minutes 7 Click the Apply button Your settings are saved Change the time out period for a user session When a user logs in to the local browser UI the session times out automatically after 45 minutes You can change the time out period which applies to all users including the admin user To change the time out period for a user session 1 Launch a web b...

Страница 114: ...nt Configuration System Advanced User Accounts 5 Under Session Timeout use the Hours and Minutes fields to specify the period after which a session automatically expires and the user must log in again By default a session expires after 45 minutes 6 Click the Apply button Your settings are saved Your session is terminated and you must log in again Change the settings for a user account You cannot c...

Страница 115: ... user accounts display 5 To the right of the user account change the existing settings as needed User Name Enter another user name Password Enter another password between 8 and 64 characters in length The password must contain at least one uppercase letter one lowercase letter and one number The following special characters are allowed Privilege From the menu select Read Write or Read Only 6 Click...

Страница 116: ...warning pop up window displays 6 Click the Delete button The pop up windows closes and the user account is removed Manage local MAC access control lists The access point supports eight local access control lists ACLs that are based on MAC addresses Each local MAC ACL can contain a total number of 512 MAC addresses If you set up an ACL with a policy that allows access and you apply that ACL to a Wi...

Страница 117: ...Custom 2 If enabled allows access to trusted stations by default Custom 3 If enabled allows access to trusted stations by default Custom 4 If enabled allows access to trusted stations by default By default these MAC ACLs are disabled and do not include any stations You can manually add devices import devices see Import an existing MAC access control list on page 120 or do both You can use a MAC AC...

Страница 118: ... group name for the MAC ACL that you want to set up The previous figure shows some examples Devices in the Available Stations table are automatically detected by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as Connected 6 To change the group name enter a new name...

Страница 119: ... the check box for the device and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device the device is once again placed in the Available Stations table For an ACL for which you selected the Deny radio button in Step 7 do the following To manually add a device to the Untrusted Stations t...

Страница 120: ...xadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 You must separate entries with a comma The file must be in text format that is with a txt or cfg extension You can use a MAC ACL to control which WiFi devices can access a WiFi network You can apply a MAC ACL to more than one WiFi network To import an existing MAC ACL 1 Launch a web browser from a computer that is...

Страница 121: ... by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as connected 6 To change the group name enter a new name in the Group Name field The default group names for the eight MAC ACLs are Management Guest Guest1 Custom Custom 1 Custom 2 Custom 3 and Custom 4 7 Select th...

Страница 122: ...AC addresses on the import list are placed in the Trusted Stations table c To remove a MAC address from the Trusted Stations table select the MAC address and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device the device is once again placed in the Available Stations table For an ACL ...

Страница 123: ...t neighbor access points APs in a radio band and you can classify them as known APs If you enable neighbor AP detection for a radio band the access point regularly scans the WiFi network collects information about all access points on the channels and maintains a list of access points it detects in the area Initially all detected access points are displayed in the Unknown AP List You can add acces...

Страница 124: ...access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is adm...

Страница 125: ...eighbor access points every hour This is the default setting Moderate The access point scans for neighbor access points every 30 minutes Aggressive The access point scans for neighbor access points every 15 minutes Detected neighbor access points display in the Unknown AP List User Manual 125 Manage Access and Security Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 126: ...can delete access points from the Known AP List After being detected these access points once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing neighbor access point list in the Known AP List You can import a list with MAC addresses of known neighbor access points in the Known AP List The file with MAC addresses must be in the following format...

Страница 127: ... you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed th...

Страница 128: ...own AP List are replaced with the ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the import file The MAC addresses on the import list are placed in the Known AP List c To remove a MAC address from the Known AP List select the MAC address and click the Delete button When you remove a d...

Страница 129: ...ists on page 116 If you use a RADIUS MAC ACL you must define the ACL on the RADIUS server using the format in the following example for client MAC addresses in the RADIUS server If the client MAC address is 00 0a 95 9d 68 16 specify it as 000a959d6816 in the RADIUS server To set up RADIUS servers 1 Launch a web browser from a computer that is connected to the same network as the access point or di...

Страница 130: ...s 1812 Password Enter the password shared key that is used between the access point and the RADIUS server during the authentication or accounting process By default the password is sharedsecret 6 To enable accounting on the authentication servers click the Enable Accounting button so that the button displays blue 7 Configure the following authentication settings which apply to all RADIUS server th...

Страница 131: ...that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case...

Страница 132: ...6 Click the Apply button Your settings are saved User Manual 132 Manage Access and Security Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 133: ...e 802 1Q VLAN and management VLAN Set an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disable Ethernet LLDP Enable or disable UPnP Manage the multicast DNS gateway Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual access ...

Страница 134: ... security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network locati...

Страница 135: ...er on your LAN Primary DNS IP address of the secondary DNS server on your LAN or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the new IP settings Enable the DHCP client By default the DHCP client of the access point is enabled and the access point receives an IP address from a DHCP server or a router that functions as a DHCP s...

Страница 136: ...fied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configur...

Страница 137: ... If a port is a member of a single VLAN its traffic can be untagged A management VLAN and the following features are mutually exclusive mDNS gateway see Manage the multicast DNS gateway on page 145 NAT mode see Set NAT mode or Bridge mode for addressing and traffic on page 199 To set the 802 1Q VLAN and management VLAN 1 Launch a web browser from a computer that is connected to the same network as...

Страница 138: ... that VLAN ID is supported on your network Tagged VLAN Clear the Untagged VLAN check box only if the hubs and switches on your LAN support the 802 1Q VLAN protocol The access point tags all frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN only if the hubs and switches on your LAN...

Страница 139: ...n Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the...

Страница 140: ...otocol 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What ...

Страница 141: ...onfigured correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If y...

Страница 142: ...1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do i...

Страница 143: ... as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point use...

Страница 144: ...ugh an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password i...

Страница 145: ...ge screen device connected to a WiFi network on VLAN 30 another mDNS gateway policy can make this possible A service can run either on a wired or WiFi device but for a WiFi client to be able to access the service the WiFi client must be connected to a WiFi network on an access point that has the mDNS gateway feature enabled In a network with multiple access points that support the mDNS gateway fea...

Страница 146: ...y 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do...

Страница 147: ...vice that you select from the Shared Services menu Service IP Enter the IP address of the shared device or service that you select from the Shared Services menu Allowed Wireless Network From the Allowed Wireless Network menu select the WiFi networks with their associated VLANs which include as members the WiFi devices that must be able to use the type of shared devices or service that you select f...

Страница 148: ...the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration mDNS Gateway The mDNS Gateway page displays 5 To change a policy a Click the pencil and notebook icon to the right of the policy b Change the settings For more information about the settings see Enable the m...

Страница 149: ...e zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser UI Schedule the access point to reboot Return the access point to its factory default settings Enable SNMP and manage the SNMP settings Manage the LEDs Manage the Energy Efficiency Mode Note In this manual WiFi network means the ...

Страница 150: ...xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can manage the access point locally from a WiFi or wired device through the local browser UI In this mode the access point functions as a standalone device and is not connected to the Insight cloud based ...

Страница 151: ... 5 Select one of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode CAUTION When you change the management mode from Web browser mode to NETGEAR Insight mode the configuration of the access point is reset cleared with the exception of the IP address access point name and pas...

Страница 152: ...point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The ...

Страница 153: ...d to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If y...

Страница 154: ...thernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the on...

Страница 155: ...n 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user n...

Страница 156: ...e 156 Set the time zone When the access point synchronizes its clock with a Network Time Protocol NTP server the page shows the date and time If the page does not show the correct date and time you might need to set the time zone and adjust the daylight saving time setting To set the time zone and adjust the daylight saving time setting 1 Launch a web browser from a computer that is connected to t...

Страница 157: ...justed according to your settings For information about other time settings see Specify a custom NTP server on page 155 Manage the syslog settings If a syslog server is present on your network you can configure the access point to send its system logs to the syslog server To manage the syslog settings and enable the syslog function 1 Launch a web browser from a computer that is connected to the sa...

Страница 158: ... firmware is stored in flash memory You can check to see if new firmware is available and update the access point to the new firmware You can also visit the NETGEAR support website download the firmware manually to a local computer and update the access point to the new firmware If someone usually the network administrator places new firmware on a secure FTP SFTP server in the network you can load...

Страница 159: ...new firmware and update the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warn...

Страница 160: ... the Dashboard page 8 Read the new firmware release notes to determine whether you must reconfigure the access point after updating Manually download firmware and update the access point Downloading firmware to a local computer and updating the access point are two separate tasks that are combined in the following procedure After you update the access point to new firmware the old firmware is save...

Страница 161: ...me and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR In...

Страница 162: ...tgearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret To revert to the backup firmware on the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet ca...

Страница 163: ...firmware do not interrupt the reversion For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED remains solid green or solid blue 7 Verify that the access point runs the backup firmware version by logging back in to the access point The firmware version is displayed on the Dashboar...

Страница 164: ... SFTP 6 Specify the following server settings Firmware File The name of the access point firmware file on the SFTP server SFTP Server IP The IP address of the SFTP server on your network User Name The user name that is required to access the SFTP server Password The password that is required to access the SFTP server 7 Click the Upgrade button WARNING To avoid the risk of corrupting the firmware d...

Страница 165: ...cess point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previous...

Страница 166: ...year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18 21_16 44 12 config tar 8 Follow the directions of your browser to save the file Restore the access point configuration If you backed up the configuration file you can restore the configuration from t...

Страница 167: ...s point s MAC address or the system name dd is the date mm is the month yy is the year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18 21_16 44 12 config tar 6 Click the Restore button A pop up window displays 7 Enter the password that you specified wh...

Страница 168: ...wser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that locatio...

Страница 169: ... user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 2...

Страница 170: ... to access the access point you must use the Reset button After you reset the access point to factory default settings the password for the admin user name is password the access point s DHCP client is enabled the setup SSID is shown in the format NETGEARxxxxxx SETUP and the default password for WiFi access is sharedsecret If the access point does not receive an IP address from a DHCP server the L...

Страница 171: ... Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED turns solid green or solid blue Use the local browser UI to reset the access point You can use the access point s local browser UI to return the access point to its factory default settings CAUTION This process erases all settings that you configured in the access point To reset the access poi...

Страница 172: ...ays 5 Click the Restore Defaults button A warning pop up window displays 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset is complete the access point reboots This process takes about two minutes WARNING To avoid the risk of corrupting the firmware do not interrupt the reset For example do not close the browser click a l...

Страница 173: ...ified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Mainten...

Страница 174: ...the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user na...

Страница 175: ... resume normal operation Note the following restrictions Wireless distribution system EEM is mutually exclusive with a wireless distribution system WDS see Set up a WiFi Bridge on page 213 Neighbor AP detection EEM does not let the 5 GHz radio detect neighbor APs see Manage neighbor AP detection on page 123 DFS channels When WiFi clients connect to the access point and the access point resumes nor...

Страница 176: ...that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Manag...

Страница 177: ...ccess points Display client distribution connected clients and client trends View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization View or download tracked URLs View save download or clear the logs View a WiFi bridge connection View alarms and notifications Note In this manual WiFi network means the same as SSID service set identifier or WiFi network name or VAP virtual...

Страница 178: ...in The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard p...

Страница 179: ...op of the Dashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet MAC address The serial number Device uptime Firmware version The date and time that the access point itself or someone manually last checked if new firmware was available This pane also contains a b...

Страница 180: ...em Information section The following settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The MAC address of the LAN Ethernet port of the access point Wireless MAC Address for 2 4 GHz The MAC address of 2 4 GHz WiFi interface radio of the access point Wireless MAC Address for 5 GHz The MAC address of 5 GHz WiFi interface radio...

Страница 181: ...The following settings are displayed IPv4 Address The IPv4 address of the access point Subnet Mask The subnet mask of the access point Default Gateway The default gateway for the access point DHCP Client The status of DHCP client Enabled or Disabled Wireless Settings section The following settings are displayed with separate columns for the 2 4 GHz and 5 GHz radios Antenna The type of antenna by d...

Страница 182: ...rd for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Locate the Radio Information pane at the top right corner of the Dashboard page if the page width on your device is sufficient otherwise it might be elsewhere The following settings are displayed Radio status If the 2 4 GHz or 5 GHz icon is displayed as gray the ra...

Страница 183: ... of 5 GHz WiFi interface radio of the access point Power Source The type of power source PoE 802 3at or Power Adapter Ethernet LLDP The status of Ethernet LLDP feature Enabled or Disabled Country Region The country or region in which the access point operates or for which the access point is licensed Current Firmware Version The version of the firmware that is running on the access point Backup Fi...

Страница 184: ...iFi mode of the radio Channel Frequency The channel and frequency that are used by the radio Display unknown and known neighbor access points If you enabled neighbor access point AP detection see Manage neighbor AP detection on page 123 you can display the unknown access points in the Unknown AP list and the known access points in the Known AP list To display the detected neighbor access points 1 ...

Страница 185: ...the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Monitoring Neighbor AP At the top of the page for each radio band the page displays the total number of unknown access points For information about moving unknown access points to the Known AP list see Enable neighbor access point detection and move access points to the Known AP List on page 124 5 To display the mos...

Страница 186: ...tion for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insig...

Страница 187: ...ss and SSID for the client You can also view more information including very detailed information see Step 11 and Step 12 8 To display trends about clients scroll down to the Hours Trend pane The Hours Trend pane shows a graph with the number of clients the traffic in MBps or the channel utilization over a period that you can select The previous figure shows the trend for the last 48 hours By defa...

Страница 188: ... of the client IP Address The IP address associated with the client Host Name The host name of the client OS The operating system that runs on the client BSSID The BSSID that the client connects to SSID The SSID of the radio that the client connects to Channel The channel that the client connects to Channel Width The width of the channel that the client connects to Tx Rate The rate of traffic tran...

Страница 189: ...nected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 ...

Страница 190: ...int to a node on one of the lines on the graph 6 To view channel utilization do the following a Click the Channel Utilization button The graph shows the channel utilization for the 2 4 GHz radio b To view the channel utilization for the 5 GHz radio click the 5 GHz button c To view more information point to a bar 7 To change the period over which information is filtered and displayed select the num...

Страница 191: ...t recent information click the Refresh button View or download tracked URLs If you enabled URL tracking for a WiFi network see Enable or disable URL tracking for a WiFi network on page 202 you can view the tracked URLs by URL WiFi client and SSID You can also download a URL tracking report as a csv file To view or download tracked URLs 1 Launch a web browser from a computer that is connected to th...

Страница 192: ...ccess point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Monitoring URL Tracking By default the table shows the URLs that were accessed each with the MAC address of the WiFi client that accessed the URL the assoc...

Страница 193: ...e SSID c Click the Close button The pop up window closes 8 To download a URL tracking report as a csv file click the Download button and follow the directions of your browser 9 To clear all URL tracking information do the following a Click the Clear button A warning pop up window displays b Click the OK button The pop up window closes and the information is cleared View save download or clear the ...

Страница 194: ...d password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight...

Страница 195: ...ints that form the WiFi bridge To view a WiFi bridge connection 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exceptio...

Страница 196: ...ernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one ...

Страница 197: ...ime that you viewed alarms and notifications 5 Click the alarm bell icon The pop up window shows the alarms indicated by a red bell and notifications indicated by a blue bell with a description and time 6 To view more alarms and notification scroll down in the pop up window User Manual 197 Monitor the Access Point and the Network Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 198: ...ork Enable or disable URL tracking for a WiFi network Change the format of the DHCP offer messages in a WiFi network Select a MAC ACL for a WiFi network Set bandwidth rate limits for a WiFi network Configure advanced rate selection for a WiFi network Note If you want to change the settings of a WiFi network on the access point use a wired connection to avoid being disconnected when the new WiFi se...

Страница 199: ...o the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter th...

Страница 200: ...s in the range from 192 168 0 1 to 192 168 0 254 a common IP address range enter a network address that is different from 192 168 0 0 b In the DNS field enter the IP address for the DNS server that you want to use This IP address must be different from the WLAN network address that you set in the previous step 8 Click the Apply button Your settings are saved Enable or disable client isolation for ...

Страница 201: ...Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Und...

Страница 202: ... network For example you could enter the static IP address or domain name of a network printer that you want to make available to WiFi clients A domain name on the Allowlist must resolve to a static IP address c Click the Move button The addresses and domain names are added to the Allowlist d To remove one several or all addresses and domain names select individual check boxes or the Select All ch...

Страница 203: ...ded the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 C...

Страница 204: ...Fi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specifie...

Страница 205: ... up MAC ACL security for that SSID You can also set up a RADIUS server see Set up RADIUS servers on page 129 and select the RADIUS MAC ACL You must define the ACL on the RADIUS server using the following format for client MAC addresses in the RADIUS server If the client MAC address is 00 0a 95 9d 68 16 specify it as 000a959d6816 in the RADIUS server Note A RADIUS MAC ACL cannot function if the WiF...

Страница 206: ...sight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left of the SSID The settings for the selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Selec...

Страница 207: ...security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network locatio...

Страница 208: ...ty of clients the client density Types of clients the WiFi modes that clients can support including legacy WiFi modes Throughput speed for clients Area that the WiFi network must cover To successfully configure advanced rate selection we recommend that you determine what the clients in your network can require the types of traffic the supported WiFi modes and the expected throughput speed how many...

Страница 209: ...are interdependent Density The density the number and proximity of clients in the WiFi network The density is one of the four components of the density level A setting of 0 means a very low client density A setting of 4 means a very high client density Compatibility The compatibility with WiFi modes for legacy clients in the WiFi network A setting of 0 means compatibility with 802 11b g n ax clien...

Страница 210: ...rd The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on ...

Страница 211: ...rol for beacon and other management frames and for control and data frames select the Rate Control check box If you select the Rate Control check box the Density Level slider becomes available 9 To set the density level for your environment move the Density Level slider to 0 1 2 3 or 4 As you move the slider the selected density level is mapped to a corresponding WiFi mode beacon rate minimum lega...

Страница 212: ...upports all types of clients in the 5 GHz radio band in any position of the slider Overall performance for the WiFi clients In the default 11ax WiFi mode for the radios the setting can be reduced moderate good very good or optimal depending on the position of the slider WiFi coverage In the default 11ax WiFi mode for the radios the setting can be very narrow narrow average wide or very wide depend...

Страница 213: ...Install the Access Point in an Insight Instant Mesh WiFi Network on page 44 The chapter includes the following sections WiFi base station WiFi repeater and WiFi bridge requirements Set up a WiFi bridge between access points Note If you enable Energy Efficiency Mode you cannot use a WDS To use a WDS first disable Energy Efficiency Mode For more information see Manage the Energy Efficiency Mode on p...

Страница 214: ...hrough the WiFi base station The following figure shows two access points in a WiFi repeating setup with a WiFi base station on the left side and a single WiFi repeater on the right side Figure 9 WiFi bridge configuration between two access points in the 5 GHz radio band To use a WiFi bridge you cannot use the auto channel feature for the access point and the SSID broadcast must be enabled For a W...

Страница 215: ...s that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are ca...

Страница 216: ... on this page The MAC address is displayed for your information Enter this MAC address on the remote access point of the WDS connection Local MAC Address The MAC address of the remote WDS radio interface that is the MAC address of the remote radio on which the WDS is established Remote MAC Address By default the selection from the menu is Open in which case authentication and data encryption are n...

Страница 217: ...nts If the configuration is set up correctly a computer on any WiFi or wired LAN segment of the access point that functions as the WiFi repeater can connect to the Internet or share files and printers with any other computer or server connected to the access point that functions as the WiFi base station Note After the WiFi bridge is established you cannot change the WiFi channel for the radio on w...

Страница 218: ...not specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the advanced WiFi settings for the radios Manage the maximum number of clients for a radio Manage the broadcast and multicast settings for a radio Manage load balancing for the radios Manage sticky clients Manage the ARP proxy Note If you want to change the radio se...

Страница 219: ...that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on...

Страница 220: ...can specify the radio settings for the 2 4 GHz and 5 GHz radios individually but the check box for the 802 11n 256 QAM feature applies to the 2 4 GHz radio only the feature is always enabled for the 5 GHz radio The 802 11h feature applies to the 5 GHz radio only User Manual 220 Manage the Advanced Radio Features Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 221: ... the WiFi mode is 802 11n you can select the 802 11n 256 QAM check box to enable the 2 4 GHz radio to function over 256 quadrature amplitude modulation QAM which can increase the 2 4 GHz radio throughput for 802 11n clients that are capable of supporting 256 QAM By default 256 QAM is disabled for the 2 4 GHz radio that is the check box is cleared By default 256 QAM is enabled for the 5 GHz radio a...

Страница 222: ...dio button is selected and 802 11h is disabled You can enable or disable 802 11h for the 5 GHz radio but not for the 2 4 GHz radio 802 11h 6 Click the Apply button A warning pop up window displays 7 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Manage the maximum number of clients for a radio The number...

Страница 223: ...ht app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced The Wireless Settings page displays 5 In the Max Wireless Clients field for the radio enter the maximum number of WiFi clients that can simultaneously associate with the radio ...

Страница 224: ...are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced Wireless...

Страница 225: ...the following types of load balancing are enabled with their default settings Load balancing based on the maximum number of clients The access point allows client associations up to the specified maximum number of clients After the maximum number is exceeded new clients are rejected Even though this is a global setting it is implemented per radio Load balancing based on the channel load The access...

Страница 226: ...ccess point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi u...

Страница 227: ...ve the associated slider to specify the maximum percentage of channel load that is allowed on the radio before it stops accepting new client associations For each radio the minimum percentage of channel load is 50 the maximum percentage is 90 and the default percentage is 70 Based on Channel Receive Signal Strength For each radio move the associated slider to specify the minimum required RSSI valu...

Страница 228: ...ion 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user...

Страница 229: ...n exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through th...

Страница 230: ...ot cannot connect Troubleshoot WiFi connectivity for a WiFi client device Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes are not saved You enter the wrong password and can no longer log in to the access point Troubleshoot your network using the ping utility Note In this manual WiFi network means the same as SSID service set identifier or WiFi net...

Страница 231: ... What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight netwo...

Страница 232: ...g the packet capture process normal functioning of the access point is not affected The packet capture capability can be useful for analyzing a WiFi deployment monitoring a WiFi network debugging protocols determining WiFi network bottlenecks and in general troubleshooting any irregularities in a WiFi network You can select to capture all packets or selected packets only Note To view the captured ...

Страница 233: ...ngs that are described in the following table Description Setting From the Capture Interface menu select one of the following interfaces on which packets must be captured br lan All packets are captured that is packets on the Ethernet interface 2 4 GHz radio and 5 GHz radio This is the default setting Eth0 Only packets on the Ethernet interface are captured radio1 Only packets on the 2 4 GHz radio...

Страница 234: ...ace You must enter the MAC address in hexadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 Client Filter MAC Address Enter the maximum duration of the capture process that is if you do not click the Stop button The range is from 10 to 3600 seconds By default the maximum duration is 300 seconds Capture Duration 10 3600 secs 6 To start the packet capture process cli...

Страница 235: ...iFi connection see Connect to the access point for initial configuration on page 21 Make sure that the WiFi client device supports the authentication and encryption that you are using for the WiFi network For more information see Change the authentication and encryption for a WiFi network on page 71 Note If the access point s WiFi authentication and encryption is set to WPA3 Personal and the WiFi ...

Страница 236: ...ted to the Insight cloud based management platform Solid blue The access point functions in Insight mode and is connected to the Insight cloud based management platform 2 When the startup procedure is complete verify the following The LAN LED lights solid green or solid amber depending on the speed of the Ethernet link If the access point processes Ethernet traffic the LAN LED blinks green or blue...

Страница 237: ...connected to the access point and that the power adapter is correctly connected to a functioning power outlet If it is plugged into a power strip make sure that the power strip is turned on If it is plugged directly into the wall verify that the outlet is not switched off Make sure that you are using the NETGEAR power adapter for this product That is do not use the NETGEAR power adapter for anothe...

Страница 238: ...continuously the access point did not receive an IP address from a DHCP server Check to make sure that the DHCP client of the access point is enabled see Enable the DHCP client on page 135 that your network includes a DHCP server or a router that functions as a DHCP server and that the DHCP server can reach the access point both must be on the same network In the unlikely situation that your netwo...

Страница 239: ...t connected to the Insight cloud based management platform If the access point functions in the NETGEAR Insight management mode and the Power Cloud LED does not light blue try the following troubleshooting steps until the problem is resolved 1 Verify that the management mode of the access point is NETGEAR Insight For more information see Change the management mode to NETGEAR Insight or Web browser...

Страница 240: ...ne root is available for the node to connect to Make sure that all roots run the latest firmware version Make sure that the output power of each radio on each root is at its maximum level By default the output power for a radio is at its maximum level For more information see Change the output power for a radio on page 93 Make sure that the node is not too far away from a root For more information...

Страница 241: ...less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root To sync the node and the root after you already added the node to an Insight network location 1 Place the node in the same room as the root Use this node location only during the sync process 2 Connect the node to a power source If you do not use a PoE connection to a PoE switch connect a power adapter to the D...

Страница 242: ... the node s Power Cloud LED lights solid blue the node and root synced successfully If the node and root did not sync move the node closer to the root and try again The node must be within the root s WiFi coverage area to establish a good or fair WiFi connection Troubleshoot WiFi connectivity for a WiFi client device If a WiFi client device cannot connect to the access point or the WiFi connectivi...

Страница 243: ...onnected when the new WiFi settings take effect If the WiFi client device finds the WiFi network but the signal strength is weak check these conditions Is the WiFi client device too far from the access point or too close Place the WiFi client device near the access point but at least 6 feet 1 8 meters away and see whether the signal strength improves Are objects between the WiFi client device and ...

Страница 244: ...fixed IP address on page 134 change the IP address and subnet mask on your computer to so that the IP addresses of your computer and the access point are in the same IP subnet Try quitting the browser and launching it again If you are using on older type of browser make sure that Java JavaScript or ActiveX is enabled in your browser For example if you are using Internet Explorer click the Refresh ...

Страница 245: ...e access point might be blocked for five minutes The blockage period depends on the number of failed login attempts During the blockage period any attempts to log in to the access point are ignored even if you enter the correct password You must wait until the blockage is lifted and then you get a single opportunity to enter the correct password If you enter the wrong password again the blockage p...

Страница 246: ...ity that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a network using the ping utility in your computer or workstation Test the LAN path to your access point You can ping the access point from your computer to verify that the LAN path to your access point is set up correctly To ping the access point from a Windows bas...

Страница 247: ... a remote device 1 From the Windows taskbar click the Start button and find and select Run 2 In the field provided enter ping n 10 IP address IP address is the IP address of a remote device such as a remote DNS server If the path is functioning correctly replies as described in Test the LAN path to your access point on page 246 display If you do not receive replies do the following Check to see th...

Страница 248: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 248 ...

Страница 249: ...see Connect over WiFi using the NETGEAR Insight app on page 24 AP login password WiFi network settings for initial setup and WiFi login The SSID for initial setup is NETGEARxxxxxx SETUP where xxxxxx is the last six hexadecimal digits of the access point s MAC address Note The first time that you log in to the local browser UI you must change the SSID If you previously added the access point to a N...

Страница 250: ...ficiency Mode WLAN settings for an individual WiFi network SSID or VAP Enabled Broadcast SSID 1 VLAN ID for WiFi clients WPA2 Personal which is WPA2 PSK The nonconfigurable data encryption for WPA2 Personal is AES Network authentication Disabled 802 11w PMF Disabled Multi PSK Always on Broadcast schedule All enabled Radio bands Disabled Automatic band steering includes automatic 802 11k RRM and au...

Страница 251: ...ut power 2 4 GHz radio Auto 5 GHz radio Auto Channel 2 4 GHz radio Enabled 5 GHz radio Enabled Wi Fi Multimedia WMM 2 4 GHz radio Enabled 5 GHz radio Enabled WMM Powersave Advanced radio settings that apply to all WiFi networks SSIDs or VAPs 2 4 GHz radio 128 default also the maximum number 5 GHz radio 128 default also the maximum number Number of WiFi clients 2 4 GHz radio Enabled at 2346 5 GHz r...

Страница 252: ...adios Disabled Force sticky clients to disassociate Disabled ARP proxy None configured Wireless bridge General security Disabled URL filtering None configured RADIUS servers 2 4 GHz radio Disabled 5 GHz radio Disabled Neighbor AP detection Eight default ACLs but none configured with MAC addresses MAC ACLs Disabled L2 security Remote management Disabled SNMP User Manual 252 Factory Default Settings...

Страница 253: ...sonal WPA3 Enterprise WPA3 WPA2 Personal WPA2 Personal WPA2 Enterprise WPA2 WPA Personal Open Enhanced and Open 802 11 security WiFi Multimedia Prioritization WMM Wireless distribution system WDS WiFi standards 4 2 2 streams 2 4 GHz radio 2 streams 5 GHz radio 2 streams WiFi streams 2 4 GHz band US 2 412 2 462 GHz Europe 2 412 2 472 GHz 5 GHz band US 5 18 5 885 Europe 5 18 5 32 GHz and DFS 5 50 5 ...

Страница 254: ...04ºF 0 to 40 C Operating temperature 10 to 90 maximum relative humidity noncondensing Operating humidity 4 to 158 F 20º to 70ºC Storage temperature 5 to 95 maximum relative humidity noncondensing Storage humidity FCC Part 15 Report EMI SubPart B CE EMC Report EN 55032 24 35 Report EN 301 489 1 17 EMC Report EMI certification FCC Grant FCC Authorization FCC Spectrum Report Part 15 SubPart C 15 247 ...

Страница 255: ...at you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed Before you mount the access point first set up and test the access point to verify WiFi network connectivity This appendix includes the following sections Mounting parts Mount the access point on a wall Mount the access point to a T bar Unmount the a...

Страница 256: ... Figure 10 Mounting plate Figure 11 Metal bracket with T bar lock lock screw and 4 short screws Figure 12 3 tall screws and anchors for wall mounting User Manual 256 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 257: ... wall with a soft mallet until the anchors are flush with the wall 5 Use the screws to attach the mounting plate to the wall Note Do not insert the screws into the wall without anchors 6 Connect an Ethernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the wall w...

Страница 258: ... bar To mount the access point to a T bar 1 If the T bar lock is not yet attached to the metal bracket slide the T bar lock partially into the metal bracket 2 Attach the metal bracket to the T bar 3 Push the T bar lock over the T bar User Manual 258 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 259: ...hernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the ceiling surface when it is mounted User Manual 259 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 260: ...de down and attach it to the mounting plate 8 Turn the access point clockwise until it locks in the mounting plate User Manual 260 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 261: ...User Manual 261 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Страница 262: ...our thumb on the center of the LEDs and your finger on the other side of the access point directly opposite the thumb 2 Press and hold the latch down to release the lock and keep the lock open 3 Turn the access point counterclockwise until the access point releases from the mounting plate User Manual 262 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model W...

Страница 263: ...access point from the mounting plate The mounting plate remains attached to the ceiling or the wall User Manual 263 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX3000 Access Point Model WAX618 ...

Отзывы: