background image

Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.

You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.

Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.

(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.

By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building connection
only.

Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz
devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that
operation of this device is permitted in large aircraft while flying above 10,000 feet.
Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or
communications with unmanned aircraft systems.

Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.

Revision History

Comments

Publish Date

Publication Part
Number

First publication.

September 2022

202-12625-01

2

Insight Managed WiFi 6 AX5400 Access Point Model WAX628

Содержание WAX628

Страница 1: ...User Manual Insight Managed WiFi 6 AX5400 Access Point WAX628 NETGEAR Inc 350 E Plumeria Drive September 2022 San Jose CA 95134 USA 202 12625 01...

Страница 2: ...agreeing to NETGEAR s Terms and Conditions at https www netgear com about terms and conditions If you do not agree return the device to your place of purchase within your return period Do not use thi...

Страница 3: ...e Internet using the NETGEAR Insight Cloud Portal 22 Connect over WiFi using the NETGEAR Insight app 24 Connect over WiFi to the local browser UI for initial configuration 26 Connect over the LAN to t...

Страница 4: ...ic WiFi settings for the radios 83 Turn a radio on or off 86 Change the WiFi mode for a radio 87 Change the channel width for a radio 89 Change the guard interval for a radio 90 Change the output powe...

Страница 5: ...ion capability 144 Enable link aggregation for the LAN 2 port 145 Disable link aggregation for the LAN 2 port 146 Chapter 10 Manage and Maintain the Access Point Change the management mode to NETGEAR...

Страница 6: ...tion WiFi repeater and WiFi bridge requirements 200 Set up a WiFi bridge between access points 201 Chapter 13 Manage the Advanced WiFi Features for a WiFi network Set NAT mode or Bridge mode for addre...

Страница 7: ...hoot WiFi connectivity for a WiFi client device 243 Troubleshoot Internet browsing 244 You cannot log in to the access point over a LAN connection 245 Changes are not saved 246 You enter the wrong pas...

Страница 8: ...s point without a PoE connection you can order a power adapter separately The PoE Ethernet port supports a high speed up to 2 5 Gbps A second Ethernet LAN port supports a speed of 1 Gbps for a link ag...

Страница 9: ...tal and Insight app Insight Cloud Portal Lets you configure and manage the access point remotely through the portal of the Insight cloud based management platform Insight app Lets you configure and ma...

Страница 10: ...Model WAX628 is an indoor access point that supports the 2 4 GHz and 5 GHz WiFi bands The chapter contains the following sections Unpack the access point Top panel with LEDs Hardware interfaces Access...

Страница 11: ...ter the type of power adapter varies by region If you ordered model WAX628 but prefer to use the access point without a PoE connection you can order a power adapter separately For information about th...

Страница 12: ...at the 802 3at PoE level Off No power is supplied to the access point Solid green A 2 5 Gbps Ethernet link is detected on the LAN 1 port LAN 1 LED Blinking green 2 5 Gbps traffic activity is detected...

Страница 13: ...are connected 5 GHz WLAN LED Solid blue One or more WLAN clients are connected to the 5 GHz WiFi radio Blinking blue Traffic is detected on the 5 GHz WiFi radio Off The 5 GHz WiFi radio is off Note Fo...

Страница 14: ...ess point to the same switch as the LAN 1 port for a link aggregation LAG connection The switch must be capable of supporting a LAG connection which you must configure on the switch For more informati...

Страница 15: ...Figure 3 Access point label location Figure 4 Access point label User Manual 15 Hardware Overview Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Страница 16: ...product Before connecting the product to outdoor cables or wired outdoor devices see https kb netgear com 000057103 for additional safety and warranty information Failure to follow these guidelines c...

Страница 17: ...k plug any system and peripheral power cables into properly grounded power outlets If applicable to your product the peripheral power cables are equipped with three prong plugs to help ensure proper g...

Страница 18: ...tup What to do if you get a browser security warning CAUTION This device must be professionally installed It is the installer s responsibility to follow local country regulations including operations...

Страница 19: ...provide network access Tips for positioning your access point Place your access point near the center of the area where the WiFi clients operate A line of sight between the access point and the WiFi...

Страница 20: ...ng it to a PoE switch If you ordered a package without a power adapter but do not want to use a PoE connection you can still order a power adapter as an option If connected to 2 5 Gbps equipment the a...

Страница 21: ...ss point is ready for you to perform the initial configuration For information about accessing the access point for initial configuration see Connect to the access point for initial configuration on p...

Страница 22: ...connected to the Internet For more information about the Insight Cloud Portal visit the following pages netgear com business services insight subscription netgear com support product insight aspx kb...

Страница 23: ...Insight location configuration This might take up to 10 minutes during which time the access point will restart The access point is now an Insight managed device that is connected to the Insight clou...

Страница 24: ...GEAR Insight and download the Insight app 2 On your mobile device connect over WiFi to the access point s setup WiFi network using one of the following methods Scan the QR code Scan the QR code on the...

Страница 25: ...icon in the top bar and do one of the following Tap the SCAN BARCODE OR QR CODE button and then scan the access point s code which is on the access point label Tap the Enter Serial Number and MAC Addr...

Страница 26: ...ice without using the NETGEAR Insight app and complete the initial configuration To connect over WiFi to the local browser UI for initial configuration 1 From your computer or mobile device connect ov...

Страница 27: ...ays when you log in Instead the login page displays After you log in the Dashboard page displays 5 To let the access point check for the latest firmware click the Check for Upgrade button If new firmw...

Страница 28: ...able radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the...

Страница 29: ...w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Ope...

Страница 30: ...n you log in again You are disconnected from the access point If you changed the default country the access point restarts 9 Reconnect over WiFi to the access point s WiFi network using the new SSID a...

Страница 31: ...address Note You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 2...

Страница 32: ...scribed in the following table Description Setting From the menu select the country and region in which the access point is operating Note Make sure that the country is set to the location where the d...

Страница 33: ...se letter one lowercase letter and one number The following special characters are allowed Save the password for future use AP Login New Password Enter exactly the same password that you entered in th...

Страница 34: ...clients use TKIP and WPA2 clients use AES In the Passphrase field enter a new passphrase for the WiFi network WPA3 Personal This option allows only WiFi clients that support WPA3 to connect to the SS...

Страница 35: ...also use the NETGEAR Insight app to discover the IP address that is assigned to the access point For more information see Connect over WiFi using the NETGEAR Insight app on page 24 Then launch a brow...

Страница 36: ...2 192 168 0 254 range with the exception of IP address 192 168 0 100 which is the default IP address of the access point For more information about changing the IP address on your computer see the he...

Страница 37: ...he access point check for the latest firmware click the Check for Upgrade button If new firmware is available for the access point we recommend that you upgrade the firmware After the firmware upgrade...

Страница 38: ...able radio button Additional fields display b Specify the IP address IP subnet mask IP address of the default gateway and IP address of the DNS server DHCP Client As an option enter a new name for the...

Страница 39: ...w PMF is automatically set to mandatory Allow Clients to Authenticate using Legacy Open OWE Transition Mode If you select the Enhanced Open check box the Allow Clients to Authenticate using Legacy Ope...

Страница 40: ...nnected from the access point If you changed the default country the access point restarts 11 After a few minutes if the login window does not display automatically enter 192 168 0 100 in the address...

Страница 41: ...re information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The use...

Страница 42: ...click the Proceed to x x x x unsafe link in which x x x x represents the domain name or IP address of the device Apple Safari Click the Show Details button Then click the visit this website link If a...

Страница 43: ...browser UI to set up a mesh WiFi connection to a root access point For information about how you can manage and monitor the extender access point with the Insight Cloud Portal and Insight app and visi...

Страница 44: ...o a root access point that provides Internet connectivity The extender access point is not connected to your network over a wired connection but over a WiFi connection 3 3 4 5 1 2 Figure 6 Mesh networ...

Страница 45: ...mesh network A mesh network can be a good solution if you want to bring WiFi to the following environments Nearby rooms where cabling is not available in line of sight and in range of the current WiF...

Страница 46: ...ements for placing an extender access point in an Insight Instant Mesh WiFi network The existing WiFi network must include at least one mesh capable access point that runs the latest firmware version...

Страница 47: ...use the Insight Cloud Portal to connect the access point as an extender to a root access point The root access point must be set up with a wired connection to a router or Internet gateway so that the...

Страница 48: ...network switch 5 A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz radio band The extender access point can use any band to establish the ba...

Страница 49: ...connected to the same network as the root access point or to the Internet You can also use an optional power adapter 6 Access the Insight Cloud Portal by visiting insight netgear com enter your NETGE...

Страница 50: ...anaged device in the Insight Instant Mesh WiFi network If the Power Cloud LED does not stop blinking amber green and blue see Power Cloud LED does not stop blinking amber green and blue on page 240 Wh...

Страница 51: ...load the Insight app 2 Launch the Insight app 3 If you do not already have an Insight account you can create an account now For information about creating an Insight Premium account or upgrading to an...

Страница 52: ...r access point in the Insight Instant Mesh WiFi network 4 A network switch 5 A network router that is connected to the Internet Broadcast in the 2 4 GHz radio band Broadcast in the 5 GHz radio band Th...

Страница 53: ...ction place the extender access point less than 25 feet 7 5 m in a line of sight with minimal obstacles from the closest root access point 5 Connect the extender access point to a power source The Pow...

Страница 54: ...on process might take up to 10 minutes The extender access point might restart during the configuration process 10 Wait for the extender access point to go through the initial connection and configura...

Страница 55: ...nnected to the Insight cloud The extender access point is automatically configured to broadcast extend the root access point s WiFi network If you are experiencing difficulty connecting the extender a...

Страница 56: ...i network Change the authentication and encryption for a WiFi network Enable or disable PMF for a WiFi network Set up Multi PSK for a WiFi network Disable or enable a WiFi network or set up a WiFi act...

Страница 57: ...rk first set up RADIUS servers see Set up RADIUS servers on page 128 To set up a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or direct...

Страница 58: ...ice must match the SSID of the VAP Wireless Network Name SSID By default the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their scanned network lists To turn off the SSID broadc...

Страница 59: ...clients that support the WiFi enhanced open feature and clients that do not For clients that do not support the WiFi open enhanced feature traffic is not encrypted If you clear the Allow Devices to Co...

Страница 60: ...entication option WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP If you select this option 802 11w PMF is automatically set to mandatory see Step 8 WPA3 provi...

Страница 61: ...network If you select Enhanced Open authentication WPA3 Personal authentication or WPA3 Enterprise authentication the radio button for PMF is set to Mandatory and you cannot change it Optional This op...

Страница 62: ...lly select a single radio band only Select a radio button for a single band 2 4 GHz or 5 GHz or keep the default selection By default the Both radio button is selected which lets the access point broa...

Страница 63: ...t is Bridge mode which means that WiFi clients receive IP addresses from a DHCP server or a router that functions as a DHCP server in your network This is usually the same DHCP server that assigns an...

Страница 64: ...k VLAN are identical by default both are VLAN 1 and you enable client isolation the Allow Access to AP UI check box displays By default this check box is selected allowing an admin user to access the...

Страница 65: ...ge 214 20 Click the Apply button Your settings are saved 21 Make sure that you can connect to the new WiFi network If you cannot connect to the new WiFi network check the following If your WiFi enable...

Страница 66: ...ty warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously...

Страница 67: ...default WiFi network The default WiFi network is the SSID that you renamed and for which you set a new passphrase when you initially connected to the access point This SSID is displayed as SSID1 in th...

Страница 68: ...network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP add...

Страница 69: ...n get IP addresses over the new VLAN To change the VLAN ID for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access...

Страница 70: ...played as SSID1 in the local browser UI Before you change the authentication and encryption consider the types of clients that must be able to connect to the WiFi network WPA3 provides a more secure c...

Страница 71: ...Open A legacy open WiFi network does not provide any security Any WiFi device can join the network We recommend that you do not use a legacy open WiFi network but configure WiFi security However a le...

Страница 72: ...ssphrase field enter a phrase of 8 to 63 characters To join the VAP a user must enter this passphrase To view the passphrase in clear text click the eye icon WPA2 Enterprise This enterprise level secu...

Страница 73: ...uthorization and Accounting AAA management For WPA3 Enterprise security to function you must set up RADIUS servers see Set up RADIUS servers on page 128 If you select this option 802 11w PMF is automa...

Страница 74: ...or disabled You can also set it manually To enable or disable PMF for a WiFi network 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to th...

Страница 75: ...WiFi network into different VLANs each accessible with a unique passphrase In a way Multi PSK lets you create different sub WiFi networks on a single WiFi network When connecting to the WiFi network t...

Страница 76: ...PSK in different WiFi networks If inter VLAN routing is disabled in the network that the access point is connected to the following applies WiFi clients that are connected to different VLANs on the s...

Страница 77: ...For more information see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select...

Страница 78: ...he WiFi network or you can set up a schedule that specifies when the WiFi network is active Scheduling a WiFi network a green feature that allows you to turn off the WiFi network during scheduled vaca...

Страница 79: ...ect one of the following radio buttons Always ON The WiFi network is enabled Always OFF The WiFi network is disabled Custom The WiFi network is enabled or disabled according to a schedule that you mus...

Страница 80: ...band based on the access point s channel load In an environment with multiple access points 802 11v WiFi network management helps WiFi clients that are roaming to select the best access point The acc...

Страница 81: ...ttings for the selected SSID display 6 Under Band Steering 802 11 k v select one of the following radio buttons Disable Band steering is disabled for the VAP This is the default setting Enabled Under...

Страница 82: ...he change affects all WiFi networks on the access point The chapter includes the following sections Manage the basic WiFi settings for the radios Turn a radio on or off Change the WiFi mode for a radi...

Страница 83: ...er displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access poin...

Страница 84: ...an connect to the access point This is the default setting 11ng 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax clients is limited to...

Страница 85: ...hannel improves the performance no or minimal interference and better data rates The 802 11n specification allows a 40 MHz wide channel in addition to the legacy 20 MHz channel that is available with...

Страница 86: ...ed to reconnect Turn a radio on or off By default both the 2 4 GHz and 5 GHz radios broadcast Turning off a radio disables WiFi access for the associated band which affects all WiFi networks VAPs or S...

Страница 87: ...y default all types of WiFi clients can access a WiFi network on the access point that is the WiFi modes on the access point support 802 11ax 802 11ac 802 11na 802 11ng 802 11bg 802 11b and 802 11a cl...

Страница 88: ...aximum speed that is supported by 802 11bg about 54 Mbps 11b 802 11ax 802 11ng 802 11bg and 802 11b WiFi clients can connect to the access point However the speed of 802 11ax 802 11n and 802 11bg clie...

Страница 89: ...low an 80 MHz wide channel in addition to the 20 MHz and 40 MHz channels that are available with other WiFi modes The 802 11ax specification for the 5 GHz radio allows a 160 MHz wide channel in additi...

Страница 90: ...s 20 MHz This is the default setting for the 2 4 GHz radio 40 MHz This is the default settings for the 5 GHz radio 80 MHz This selection is available only for the 5 GHz radio 160 MHz This selection is...

Страница 91: ...he password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point thro...

Страница 92: ...displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42...

Страница 93: ...me network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your...

Страница 94: ...ess point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed o...

Страница 95: ...makes it very suitable for applications such as VoIP and streaming media Video The second highest priority queue with low delay Video applications are routed to this queue Best effort The medium prior...

Страница 96: ...e external captive portal to each WiFi network Facebook Wi Fi captive portal A Facebook business page that serves as a portal You can configure a single Facebook Wi Fi captive portal on the access poi...

Страница 97: ...roceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name i...

Страница 98: ...f the Redirect URL check box is cleared a user is directed to the default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the...

Страница 99: ...e EULA on the captive portal login page select the EULA check box EULA Max 1 KB 9 To preview the captive portal login page click the Preview button The following figure shows an example that is the fi...

Страница 100: ...on for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is...

Страница 101: ...uthentication URL Enter the web authentication URL that is provided by the vendor Key Enter the key credential that is provided by the vendor This field is optional and depends on the authentication r...

Страница 102: ...et Instead they get a message Oops Something went wrong Please try after some time 12 Select one of the following Allow HTTPS buttons to specify when secure HTTP HTTPS traffic is allowed to pass throu...

Страница 103: ...Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more inf...

Страница 104: ...button and configure the settings d To limit the session length click the Session length Edit button and configure the settings Clients are automatically logged out when the session length is exceeded...

Страница 105: ...ning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added...

Страница 106: ...that option for a captive portal or you want to use another Facebook account you can unregister the access point from Facebook Wi Fi and remove the access point s entry To unregister the access point...

Страница 107: ...radio button The capability to register is disabled However the access point s entry on the Facebook business page is not yet removed 6 Click the Apply button Your settings are saved 7 Go to the Face...

Страница 108: ...al MAC access control lists Manage neighbor AP detection Set up RADIUS servers Enable L2 security Note For information about essential WiFi security network authentication and encryption see Set up an...

Страница 109: ...curity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and...

Страница 110: ...Ls in the domain are blocked For example if you add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword...

Страница 111: ...the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can p...

Страница 112: ...in again By default a session expires after 45 minutes 7 Click the Apply button Your settings are saved Change the time out period for a user session When a user logs in to the local browser UI the se...

Страница 113: ...t Configuration System Advanced User Accounts 5 Under Session Timeout use the Hours and Minutes fields to specify the period after which a session automatically expires and the user must log in again...

Страница 114: ...user accounts display 5 To the right of the user account change the existing settings as needed User Name Enter another user name Password Enter another password between 8 and 64 characters in length...

Страница 115: ...arning pop up window displays 6 Click the Delete button The pop up windows closes and the user account is removed Manage local MAC access control lists The access point supports eight local access con...

Страница 116: ...ustom 2 If enabled allows access to trusted stations by default Custom 3 If enabled allows access to trusted stations by default Custom 4 If enabled allows access to trusted stations by default By def...

Страница 117: ...group name for the MAC ACL that you want to set up The previous figure shows some examples Devices in the Available Stations table are automatically detected by the access point and are common to all...

Страница 118: ...the check box for the device and click the Remove button You can search the Trusted Stations table When you remove a device from the Trusted Stations table after the access point redetects the device...

Страница 119: ...adecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 You must separate entries with a comma The file must be in text format that is with a txt or cfg extension You can u...

Страница 120: ...by the access point and are common to all MAC ACLs which allows you to add a device to more than one MAC ACL A neighboring station displays as Neighbor and a connected station displays as connected 6...

Страница 121: ...C addresses on the import list are placed in the Trusted Stations table c To remove a MAC address from the Trusted Stations table select the MAC address and click the Remove button You can search the...

Страница 122: ...neighbor access points APs in a radio band and you can classify them as known APs If you enable neighbor AP detection for a radio band the access point regularly scans the WiFi network collects infor...

Страница 123: ...nt or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security...

Страница 124: ...s points every hour This is the default setting Moderate The access point scans for neighbor access points every 30 minutes Aggressive The access point scans for neighbor access points every 15 minute...

Страница 125: ...an delete access points from the Known AP List After being detected these access points once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing ne...

Страница 126: ...rowser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access...

Страница 127: ...wn AP List are replaced with the ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the i...

Страница 128: ...sts on page 115 If you use a RADIUS MAC ACL you must define the ACL on the RADIUS server using the format in the following example for client MAC addresses in the RADIUS server If the client MAC addre...

Страница 129: ...1812 Password Enter the password shared key that is used between the access point and the RADIUS server during the authentication or accounting process By default the password is sharedsecret 6 To en...

Страница 130: ...hat is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do...

Страница 131: ...6 Click the Apply button Your settings are saved User Manual 131 Manage Access and Security Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Страница 132: ...2 1Q VLAN and management VLAN Set an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disa...

Страница 133: ...security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name an...

Страница 134: ...r on your LAN Primary DNS IP address of the secondary DNS server on your LAN or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the...

Страница 135: ...ied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insigh...

Страница 136: ...be untagged To set the 802 1Q VLAN and management VLAN 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ether...

Страница 137: ...l The access point tags all frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN onl...

Страница 138: ...Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception f...

Страница 139: ...tocol 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP addre...

Страница 140: ...nfigured correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Launch a web browser from a computer that is connected to the...

Страница 141: ...Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that...

Страница 142: ...as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser dis...

Страница 143: ...gh an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an except...

Страница 144: ...bps For a LAG connection both ports must function at the same speed Therefore for a LAG connection the speed of the LAN 1 port is limited to 1 Gbps However if you use the LAG connection for increased...

Страница 145: ...oint A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security...

Страница 146: ...you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The u...

Страница 147: ...ton The pop up window closes and your settings are saved The link aggregation capability is disabled User Manual 147 Manage the Local Area Network and IP Settings Insight Managed WiFi 6 AX5400 Access...

Страница 148: ...zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser UI Schedule the access point t...

Страница 149: ...xxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can m...

Страница 150: ...5 Select one of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode CAUTION...

Страница 151: ...oint through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add...

Страница 152: ...to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a b...

Страница 153: ...hernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for...

Страница 154: ...2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more i...

Страница 155: ...155 Set the time zone When the access point synchronizes its clock with a Network Time Protocol NTP server the page shows the date and time If the page does not show the correct date and time you mig...

Страница 156: ...usted according to your settings For information about other time settings see Specify a custom NTP server on page 154 Manage the syslog settings If a syslog server is present on your network you can...

Страница 157: ...firmware is stored in flash memory You can check to see if new firmware is available and update the access point to the new firmware You can also visit the NETGEAR support website download the firmwar...

Страница 158: ...ew firmware and update the access point 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or Wi...

Страница 159: ...the Dashboard page 8 Read the new firmware release notes to determine whether you must reconfigure the access point after updating Manually download firmware and update the access point Downloading fi...

Страница 160: ...e and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network loc...

Страница 161: ...gearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret To re...

Страница 162: ...irmware do not interrupt the reversion For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Pow...

Страница 163: ...SFTP 6 Specify the following server settings Firmware File The name of the access point firmware file on the SFTP server SFTP Server IP The IP address of the SFTP server on your network User Name The...

Страница 164: ...ess point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser secu...

Страница 165: ...ear hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are WAX6XX NETGEAR1A2B3C 06 18 21_16 44 12 config tar and WAX6XX WAX6XX 1A2B3C 06 18...

Страница 166: ...point s MAC address or the system name dd is the date mm is the month yy is the year hh is the hour in 24 hour format mm is the minutes and ss is the seconds Examples of the name of a backup file are...

Страница 167: ...ser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password are case sensitive If you p...

Страница 168: ...user name is admin The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed t...

Страница 169: ...to access the access point you must use the Reset button After you reset the access point to factory default settings the password for the admin user name is password the access point s DHCP client is...

Страница 170: ...Do not turn off the access point Wait until the access point finishes restarting and the Power Cloud LED turns solid green or solid blue Use the local browser UI to reset the access point You can use...

Страница 171: ...ys 5 Click the Restore Defaults button A warning pop up window displays 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset i...

Страница 172: ...fied The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insig...

Страница 173: ...he access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser display...

Страница 174: ...resume normal operation Note the following restrictions Wireless distribution system EEM is mutually exclusive with a wireless distribution system WDS see Set up a WiFi Bridge on page 199 Neighbor AP...

Страница 175: ...hat you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Po...

Страница 176: ...cess points Display client distribution connected clients and client trends View WiFi and Ethernet traffic traffic and ARP statistics and channel utilization View or download tracked URLs View save do...

Страница 177: ...n The password is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point t...

Страница 178: ...p of the Dashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet...

Страница 179: ...The page shows four sections System Information section The following settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The M...

Страница 180: ...e since the access point was last restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates that the interface is not in use IPv4 Settings section The fol...

Страница 181: ...sword is the one that you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through th...

Страница 182: ...settings are displayed System Name The access point NetBIOS name System Mode The access point system mode AP LAN MAC Address The MAC address of the LAN Ethernet port of the access point Wireless MAC A...

Страница 183: ...restarted AP Interface Status A green icon indicates that the interface is in use A gray icon indicates that the interface is not in use IPv4 Settings section The following settings are displayed IPv4...

Страница 184: ...ity warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and pas...

Страница 185: ...ients and client trends To display the clients that are connected to the access point over WiFi 1 Launch a web browser from a computer that is connected to the same network as the access point or dire...

Страница 186: ...ecently connected clients list 5 To display how the clients are distributed over the radios click the Radio button in the Client Distribution pane The page adjusts and shows the types of clients for e...

Страница 187: ...To display more information point to a node on one of the lines on the graph 10 To change the period over which information is filtered and displayed select the number of recent hours from the menu to...

Страница 188: ...ent Tx Bytes The number of bytes that the client transmitted Rx Bytes The number of bytes that the client received State The QoS state of the connection Type The type of WiFi security that is used for...

Страница 189: ...displays If your browser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42...

Страница 190: ...he graph 6 To view channel utilization do the following a Click the Channel Utilization button The graph shows the channel utilization for the 2 4 GHz radio b To view the channel utilization for the 5...

Страница 191: ...d The page also displays the number of clients that are associated with each radio If the ARP proxy is enabled see Manage the ARP proxy on page 228 the page also displays the ARP statistics including...

Страница 192: ...isplays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access point us...

Страница 193: ...h with the client host name and the first URL of the list of URLs that the client accessed b To view all URLs that a WiFi client accessed click the link to the right of the first URL A pop up window d...

Страница 194: ...t management mode this is option is available from the Dashboard page by selecting Management Monitoring Cloud Logs To view save download or clear the logs 1 Launch a web browser from a computer that...

Страница 195: ...d log entries do the following a Click the Download Detailed Logs button Depending on the size of the file downloading the detailed log entries might take several minutes b Follow the directions of yo...

Страница 196: ...ser displays a security warning you can proceed or add an exception for the security warning For more information see What to do if you get a browser security warning on page 42 3 Enter the access poi...

Страница 197: ...g For more information see What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified...

Страница 198: ...d by a red bell and notifications indicated by a blue bell with a description and time 6 To view more alarms and notification scroll down in the pop up window User Manual 198 Monitor the Access Point...

Страница 199: ...see Install the Access Point in an Insight Instant Mesh WiFi Network on page 43 The chapter includes the following sections WiFi base station WiFi repeater and WiFi bridge requirements Set up a WiFi...

Страница 200: ...nd a single WiFi repeater on the right side 3 3 4 5 1 2 Figure 10 WiFi bridge configuration between two access points in the 5 GHz radio band To use a WiFi bridge you cannot use the auto channel featu...

Страница 201: ...ocol on page 139 and on the switches to which the access points are connected If your switches do not support STP after the WiFi bridge is established disconnect one of the access points from its swit...

Страница 202: ...Management Configuration Wireless Bridge The page that displays lets you select a WDS profile WDS 1 WDS 2 WDS 3 or WDS 4 5 Click the button to the left of a WDS profile The WDS profile page displays 6...

Страница 203: ...AES and you cannot change this setting Passphrase The passphrase for the WDS connection For you to enable the WDS connection the passphrase on the remote access point must match the passphrase that yo...

Страница 204: ...rk Enable or disable URL tracking for a WiFi network Change the format of the DHCP offer messages in a WiFi network Select a MAC ACL for a WiFi network Set bandwidth rate limits for a WiFi network Con...

Страница 205: ...ction 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proceed or add an exception for the security warning For m...

Страница 206: ...you want to use This IP address must be different from the WLAN network address that you set in the previous step 8 Click the Apply button Your settings are saved Enable or disable client isolation f...

Страница 207: ...selected SSID display 6 Scroll down and click the Advanced tab The page expands 7 Under Wireless Client Isolation select one of the following radio buttons Disable Client isolation is disabled for the...

Страница 208: ...Remove button 10 Click the Apply button Your settings are saved Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients...

Страница 209: ...Enable URL Tracking is enabled for the WiFi network Disable URL Tracking is disabled for the WiFi network 8 Click the Apply button Your settings are saved Change the format of the DHCP offer messages...

Страница 210: ...nd managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight ap...

Страница 211: ...rent type of WiFi security for the WiFi network see Change the authentication and encryption for a WiFi network on page 70 Before you select a MAC ACL for a WiFi network review the policy of the ACL A...

Страница 212: ...defined earlier To change the MAC ACL policy MAC addresses in the ACL or both click the link next to the group For more information see Manage local MAC access control lists on page 115 Select the Ra...

Страница 213: ...work location and managed the access point through the Insight Cloud Portal or Insight app enter the Insight network password for that location For more information see Connect over WiFi using the NET...

Страница 214: ...t not to connections in a wireless distribution system WDS or Insight Instant Mesh WiFi network Advanced rate selection lets you configure the following settings for the 2 4 GHz and 5 GHz radio bands...

Страница 215: ...ther way to describe the density level is that a selected level is mapped to a corresponding client density level WiFi mode minimum legacy rate beacon rate and minimum Modulation Coding Scheme MCS rat...

Страница 216: ...ios 7 To apply basic fixed multicast rates from the Fixed Multicast Rate menu select one of the following rates depending on the radio band 2 4 GHz 1 2 5 5 or 11 Mbps or Auto By default Auto is 11 Mbp...

Страница 217: ...legacy clients In the default 11ax WiFi mode for the radios the setting can be as follows 2 4 GHz 802 11b g n ax which supports 802 11b clients or 802 11g n ax which does not 5 GHz 802 11a n ac ax whi...

Страница 218: ...ot specific to one radio the change affects all WiFi networks on the access point The chapter includes the following sections Manage the advanced WiFi settings for the radios Manage the maximum number...

Страница 219: ...hat is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A logi...

Страница 220: ...the range is from 1 to 200 WiFi clients and the default is 200 Max Wireless Clients Enter the Request to Send RTS threshold The range is from 256 to 2346 The default is 2346 If the packet size is equa...

Страница 221: ...mber of packets that are transmitted across the network By default the setting is 50 the maximum possible value which specifies a maximum rate limit of 50 packets per second To change the setting move...

Страница 222: ...access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window displays If your browser displays a security warning you can proce...

Страница 223: ...lower this number To manage the broadcast and multicast settings for a radio 1 Launch a web browser from a computer that is connected to the same network as the access point or directly to the access...

Страница 224: ...d balancing client associations depend on the maximum number of clients per radio the channel load per radio and each client s Received Signal Strength Indicator RSSI New client associations are allow...

Страница 225: ...ettings for each type of load balancing or completely disable one or more types of load balancing To manage load balancing for the radios 1 Launch a web browser from a computer that is connected to th...

Страница 226: ...the left of the Based On text 7 To change the load balancing settings do the following Based On Maximum Number Of Clients For each radio move the associated slider to specify the maximum number of cli...

Страница 227: ...drain on WiFi resources You can force sticky clients to disassociate from the radios of the access point If load balancing based on the RSSI of the client is enabled see Manage load balancing for the...

Страница 228: ...RP proxy By default the ARP proxy is enabled on the access point allowing it to inspect all ARP broadcast packets for its clients In this way the access point responds to ARP requests for its clients...

Страница 229: ...formation see Connect over WiFi using the NETGEAR Insight app on page 24 The Dashboard page displays 4 Select Management Configuration Wireless Advanced ARP Proxy The ARP Proxy page displays 5 Select...

Страница 230: ...point and root access point cannot connect Troubleshoot WiFi connectivity for a WiFi client device Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes a...

Страница 231: ...What to do if you get a browser security warning on page 42 3 Enter the access point user name and password The user name is admin The password is the one that you specified The user name and password...

Страница 232: ...the packet capture process normal functioning of the access point is not affected The packet capture capability can be useful for analyzing a WiFi deployment monitoring a WiFi network debugging proto...

Страница 233: ...gs that are described in the following table Description Setting From the Capture Interface menu select one of the following interfaces on which packets must be captured br lan All packets are capture...

Страница 234: ...ce You must enter the MAC address in hexadecimal format with each octet separated by a hyphen for example 00 11 22 33 44 55 Client Filter MAC Address Enter the maximum duration of the capture process...

Страница 235: ...hat you specified The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Po...

Страница 236: ...Fi connection see Connect to the access point for initial configuration on page 21 Make sure that the WiFi client device supports the authentication and encryption that you are using for the WiFi netw...

Страница 237: ...d to the Insight cloud based management platform Solid blue The access point functions in Insight mode and is connected to the Insight cloud based management platform 2 When the startup procedure is c...

Страница 238: ...onnected to the access point and that the power adapter is correctly connected to a functioning power outlet If it is plugged into a power strip make sure that the power strip is turned on If it is pl...

Страница 239: ...that situation the Power Cloud LED blinks amber quickly not slowly If the Power Cloud LED blinks amber slowly and continuously the access point did not receive an IP address from a DHCP server Check...

Страница 240: ...Make sure that the access point is running the latest firmware version For more information see Manage the firmware of the access point on page 157 5 Disconnect and reconnect the Ethernet cable at the...

Страница 241: ...ess point from your Insight network location and from your Insight account Then add the extender access point to your Insight account again and to your Insight network location 2 4G or 5G WLAN LED is...

Страница 242: ...power source If you do not use a PoE connection to a PoE switch connect a power adapter to the DC power connector The Power Cloud LED on the extender access point lights solid amber 3 Wait for the ex...

Страница 243: ...did not sync move the extender access point closer to the root access point and try again The extender access point must be within the root access point s WiFi coverage area to establish a good or fa...

Страница 244: ...the signal strength is weak check these conditions Is the WiFi client device too far from the access point or too close Place the WiFi client device near the access point but at least 6 feet 1 8 mete...

Страница 245: ...nd subnet mask on your computer to so that the IP addresses of your computer and the access point are in the same IP subnet Try quitting the browser and launching it again If you are using on older ty...

Страница 246: ...access point might be blocked for five minutes The blockage period depends on the number of failed login attempts During the blockage period any attempts to log in to the access point are ignored eve...

Страница 247: ...ty that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a network using the ping utility in your computer or workstation T...

Страница 248: ...a remote device 1 From the Windows taskbar click the Start button and find and select Run 2 In the field provided enter ping n 10 IP address IP address is the IP address of a remote device such as a r...

Страница 249: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 249...

Страница 250: ...ee Connect over WiFi using the NETGEAR Insight app on page 24 AP login password WiFi network settings for initial setup and WiFi login The SSID for initial setup is NETGEARxxxxxx SETUP where xxxxxx is...

Страница 251: ...enabled LEDs Disabled Energy Efficiency Mode WLAN settings for an individual WiFi network SSID or VAP Enabled Broadcast SSID 1 VLAN ID for WiFi clients WPA2 Personal which is WPA2 PSK The nonconfigur...

Страница 252: ...Maximum 100 5 GHz radio Maximum 100 Output power 2 4 GHz radio Auto 5 GHz radio Auto Channel 2 4 GHz radio Enabled 5 GHz radio Enabled Wi Fi Multimedia WMM 2 4 GHz radio Enabled 5 GHz radio Enabled W...

Страница 253: ...d balancing between radios Disabled Force sticky clients to disassociate Disabled ARP proxy None configured Wireless bridge General security Disabled URL filtering None configured RADIUS servers 2 4 G...

Страница 254: ...eless distribution system WDS WiFi standards 6 2 4 streams 2 4 GHz radio 2 streams 5 GHz radio 4 streams WiFi streams 2 4 GHz band US 2 412 2 462 GHz Europe 2 412 2 472 GHz 5 GHz band US 5 18 5 885 Eu...

Страница 255: ...90 maximum relative humidity noncondensing Operating humidity 4 to 158 F 20 to 70 C Storage temperature 5 to 95 maximum relative humidity noncondensing Storage humidity FCC Part 15 Report EMI SubPart...

Страница 256: ...r you can install the access point freestanding on a flat surface Before you mount the access point first set up and test the access point to verify WiFi network connectivity This appendix includes th...

Страница 257: ...ts Figure 11 Mounting plate Figure 12 Metal bracket with T bar lock screw and 4 short screws Figure 13 3 tall screws and anchors for wall mounting User Manual 257 Mount the Access Point to a Wall or C...

Страница 258: ...wall with a soft mallet until the anchors are flush with the wall 5 Use the screws to attach the mounting plate to the wall Note Do not insert the screws into the wall without anchors 6 Connect an Eth...

Страница 259: ...unt the access point to a T bar To mount the access point to a T bar 1 Slide the T bar partially into the metal bracket 2 Attach the metal bracket to the ceiling bar 3 Push the T bar over the ceiling...

Страница 260: ...ernet cable if you use a PoE switch or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate The access point sits flat on the ceiling...

Страница 261: ...e down and attach it to the mounting plate 8 Turn the access point clockwise until it locks in the mounting plate User Manual 261 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5...

Страница 262: ...User Manual 262 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Страница 263: ...the LEDs and your finger on the other side of the access point directly opposite the thumb 2 Press and hold the latch down to release the lock and keep the lock open 3 Turn the access point countercl...

Страница 264: ...The mounting plate remains attached to the ceiling or the wall User Manual 264 Mount the Access Point to a Wall or Ceiling Insight Managed WiFi 6 AX5400 Access Point Model WAX628...

Отзывы: