User Manual AC2000 802.11ac Wireless Access Point/Router Model WAC124 March 2020 202-12008-03 NETGEAR, Inc. 350 E.
AC2000 802.11ac Wireless Access Point/Router WAC124 Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/. (If this product is sold in Canada, you can access this document in Canadian French at https://www.
Contents Chapter 1 Hardware Overview of the Access Point/Router Top panel with LEDs...........................................................................12 Back panel with ports, buttons, and a power connector...............13 Position the antennas for best WiFi performance..........................14 Access point/router label..................................................................15 Chapter 2 Install and Access the Access Point/Router in Your Network About router mode and access point mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 Chapter 3 Specify the Access Point/Router Internet Settings Manually Router mode: Use the Setup Wizard................................................36 Access point mode: Specify a fixed LAN IP address......................37 Router mode: Manually set up the access point/router Internet connection...........................................................................................
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage port scan protection and denial of service protection........................................................................................77 Router mode: Set up a default DMZ server................................78 Router mode: Manage IGMP proxying.......................................79 Router mode: Manage NAT filtering...........................................80 Router mode: Manage the SIP application-level gateway........
AC2000 802.11ac Wireless Access Point/Router WAC124 Chapter 7 Manage the Network Settings Router mode: Manage the LAN IP address settings....................114 Router mode: Change the access point/router network device name..............................................................................................114 Router mode: Change the LAN IP address and subnet settings..........................................................................................
AC2000 802.11ac Wireless Access Point/Router WAC124 Change the NTP server...............................................................145 Manage the activity log...................................................................146 Specify which activities the access point/router logs..............146 View, send, or clear the logs......................................................148 View the status and statistics of the access point/router.............
AC2000 802.11ac Wireless Access Point/Router WAC124 View and manage network folders on a USB storage device.....183 View network folders on a USB storage device.......................183 Add a network folder on a USB storage device.......................184 Change a network folder on a USB storage device................185 Router mode: Approve a USB storage device.............................187 Safely remove a USB storage device.............................................
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage VPN access to your network or Internet service at your office or home....................................................213 Router mode: Use a VPN tunnel to access your Internet service at your office or home.................................................................214 Chapter 13 Manage the Advanced WiFi and Radio Features Add a WiFi schedule for a radio.....................................................
AC2000 802.11ac Wireless Access Point/Router WAC124 Chapter 15 Diagnostics and Troubleshooting Reboot the access point/router from its local browser interface.246 Quick tips...........................................................................................247 Router mode: Sequence to restart your access point/router network.........................................................................................247 Access point mode: Restart your access point/router............
1 Hardware Overview of the Access Point/Router The NETGEAR AC2000 802.11ac Wireless Access Point/Router Model WAC124, in this manual referred to as the access point/router, supports dual-band concurrent operation at 2.4 GHz and 5 GHz with combined throughput of 2000 Mbps (300 Mbps at 2.4 GHz and 1700 Mbps at 5 GHz). The access point/router is designed to function in a small office network or home network.
AC2000 802.11ac Wireless Access Point/Router WAC124 Top panel with LEDs The four status LEDs are located on the top panel of the access point/router. From left to right, the top panel contains the Power LED, Internet LED, WiFi LED, and USB LED. Figure 1. Top panel with LEDs Table 1. LED descriptions LED Description Power Solid green. The access point/router is ready. Solid green temporarily, blinking green temporarily, and finally solid green.
AC2000 802.11ac Wireless Access Point/Router WAC124 Table 1. LED descriptions (Continued) LED Description WiFi Solid green. One or both WiFi radios are operating. Blinking green. One or both WiFi radios are sending or receiving traffic. Blinking green slowly. Someone pressed the WPS button. Off. Both WiFi radios are off. For more information, see WiFi LED Is Off on page 251. USB Solid green. A USB device is connected and is ready. Off. No USB device is connected.
AC2000 802.11ac Wireless Access Point/Router WAC124 Viewed from left to right, the back panel contains the following components: • USB 2.0 port. One USB 2.0 port to connect a storage device to the access point/router. • LAN ports 4 through 1. Four Gigabit Ethernet RJ-45 LAN ports numbered LAN4 through LAN1 to connect the access point/router to Ethernet devices such as a computer and a switch. • Internet port.
AC2000 802.11ac Wireless Access Point/Router WAC124 Access point/router label The access point/router label on the bottom panel of the access point/router shows the default login information, default WiFi network name (SSID), default WiFi passphrase, serial number and MAC address of the access point/router, and other information. Figure 3.
2 Install and Access the Access Point/Router in Your Network This chapter describes how you can install and access the access point/router in your network and go through the initial log-in process. By default, the access point/router is in router mode. You can also change the mode to access point mode. IMPORTANT: For the initial log-in process, also referred to as single sign-on (SSO), the access point/router must connect to the Internet and you must log in with a NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 About router mode and access point mode Before you set up the access point/router, decide whether you will use the access point/router in its default router mode or in access point mode: • Router mode. By default, the access point/router is in router mode so that you can connect it directly to a modem such as a cable or DSL modem. In router mode, the access point/router functions as both a router for Internet access and a WiFi access point.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Advanced USB settings. • Internet traffic meter. • VLAN or bridge tag group for an IPVT device. For information about changing the system mode after initial setup, Change the system mode to access point mode or back to router mode on page 168. Note: If the access point/router is in router mode, you can always reach the local browser interface by entering http://www.routerlogin.net in the address field of your browser.
AC2000 802.11ac Wireless Access Point/Router WAC124 Connect the access point/router to the Internet and complete the initial log-in process When you connect the access point/router to the Internet and complete the initial log-in process, also referred to as single sign-on (SSO), the following are required: • The access point/router must be in its default router mode. • The access point/router must connect to the Internet through a modem or through an existing router in your network.
AC2000 802.11ac Wireless Access Point/Router WAC124 Note: If you are not sure what the type of WAN connection of your modem is, contact your ISP before you start the following procedure. Figure 4. Connect the access point/router in default router mode to your modem To connect the access point/router to a modem and log in to the local browser interface for the first time: 1. Unplug your modem’s power, leaving the modem connected to the wall jack for your Internet service. 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 LED Description Power The Power LED lights solid green, then blinks green, and then lights solid green again when the startup procedure is finished. This process takes about 90 seconds. If the Power LED does not light at all, press the Power On/Off button on the back panel. Internet The Internet LED blinks green or lights solid green when the Internet connection is established.
AC2000 802.11ac Wireless Access Point/Router WAC124 The access point/router locates and downloads the firmware and begins the update. The Firmware Upgrade Assistant page displays while the firmware of the access point/router is being updated. During the update, do not turn off the power or press the Reset button. The update process takes about three minutes, after which the access point/router restarts. c.
AC2000 802.11ac Wireless Access Point/Router WAC124 Connect the access point/router to another router and log in for the first time The easiest way to use the access point/router in access point mode is to connect it to an existing router in your network, either directly, or through a switch or hub (almost any router functions as a DHCP server). If your network includes an independent DHCP server, connect the access point/router to a switch or hub that is connected to the DHCP server.
AC2000 802.11ac Wireless Access Point/Router WAC124 LED Description Power The Power LED lights solid green, then blinks green, and then lights solid green again when the startup procedure is finished. This process takes about 90 seconds. If the Power LED does not light at all, press the Power On/Off button on the back panel. Internet The Internet LED blinks green or lights solid green when the Internet connection is established.
AC2000 802.11ac Wireless Access Point/Router WAC124 The access point/router locates and downloads the firmware and begins the update. The Firmware Upgrade Assistant page displays while the firmware of the access point/router is being updated. During the update, do not turn off the power or press the Reset button. The update process takes about three minutes, after which the access point/router restarts. c.
AC2000 802.11ac Wireless Access Point/Router WAC124 You must use this IP address if you plan to connect to the same network as the access point/router but not directly to the access point/router network. If you are directly connected to the access point/router network, you can use http://www.routerlogin.net. 12. Clear the cache of your browser. In access point mode, the access point/router functions with different IP address settings than in router mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 To log in to the access point/router when it is connected to the Internet: 1. Open a web browser from a computer or mobile device that is connected either directly to the access point/router network or to the same network as the access point/router. A direct connection to the access point/router network, which is the most common type of setup, can be through WiFi or over Ethernet: • WiFi.
AC2000 802.11ac Wireless Access Point/Router WAC124 referred to as the admin password), which is different from the registered email address and password for your NETGEAR account. To log in to the access point/router when it is not connected to the Internet: 1. Open a web browser from a computer or mobile device that is connected either directly to the access point/router network or to the same network as the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 The BASIC Home page displays a dashboard that lets you see the status of your access point/router at a glance. Use the NETGEAR Insight mobile app to discover the access point/router The NETGEAR Insight mobile app lets you discover the access point/router in your network.
AC2000 802.11ac Wireless Access Point/Router WAC124 Note: If the access point/router can reach its DNS server only over the Internet (for example, the IP address of the DNS server is 8.8.8.8), you cannot use http://www.routerlogin.net. However, if the DNS server is the IP address of the router to which the access point/router connects but the router’s Internet connection is down, you can use http://www.routerlogin.net because the access point/router can still reach the router.
AC2000 802.11ac Wireless Access Point/Router WAC124 On your computer or mobile device, the field with the ping results displays the IP address that is assigned to the access point/router. • Regardless of whether the access point/router is connected to the Internet, do one of the following: - Option 1. Use the NETGEAR Insight mobile app. To use the NETGEAR Insight mobile app to discover the IP address of the access point/router in your network, do the following: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 To change the language: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Connect to the LAN of the access point/router through an Ethernet cable You can connect a computer or other LAN device to the access point/router using an Ethernet cable and join the access point/router’s local area network (LAN). To connect a computer or LAN device to the access point/router with an Ethernet cable: 1. Make sure that the access point/router is receiving power and is connected to the Internet (both its Power LED and Internet LED are lit).
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Within two minutes, press the WPS button on your WiFi device, or follow the WPS instructions that came with the device. The WPS process automatically sets up the device with the WiFi passphrase and connects the device to the WiFi network of the access point/router.
3 Specify the Access Point/Router Internet Settings Manually Usually, the quickest way to set up the Internet connection is to allow the NETGEAR installation assistant to detect the Internet connection when you first set up and access the access point/router with a web browser. After initial setup, you can use the Setup Wizard at any time. If the access point/router is in access point mode, you can specify the LAN IP settings manually.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Use the Setup Wizard If the access point/router is in router mode, you can use the Setup Wizard to detect the WAN IP address that is issued by your Internet service provider (ISP) and automatically set up your access point/router. Although the functionality is similar, the Setup Wizard is not the same as the Smart Setup Wizard that runs the first time that you connect to your access point/router to set it up.
AC2000 802.11ac Wireless Access Point/Router WAC124 Access point mode: Specify a fixed LAN IP address If the access point/router is in access point mode, you can specify the LAN IP address for the access point/router. This is the IP address of the access point/router in your existing network. If you specify a static (fixed) IP address, make sure that it is part of the LAN subnet of the existing router that assigns the LAN IP address to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 These IP addresses must be in the LAN subnet of your existing router. c. Enter the IP address of your network’s primary DNS server. If a secondary DNS server address is available, enter it also. 7. Click the Apply button. Your settings are saved. The access point/router restarts with the new IP address. To log back in to the access point/router, use the new IP address.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select BASIC > Internet. The Internet Setup page displays. 6. Select the No radio button. This is the default setting. 7. If your Internet connection requires an account name (sometimes referred to as a host name), enter it in the Account Name field. The account name is the same as the device name, which, by default, is WAC124. 8.
AC2000 802.11ac Wireless Access Point/Router WAC124 Your settings are saved. 13. Click the Test button to test your Internet connection.
AC2000 802.11ac Wireless Access Point/Router WAC124 8. In the Login field, enter the login name that your ISP gave you. This login name is often an email address. 9. In the Password field, enter the password that you use to log in to your Internet service. 10. If your ISP requires a service name, type it in the Service Name field. 11. From the Connection Mode menu, select Always On, Dial on Demand, or Manually Connect. 12.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the NETGEAR website does not display within one minute, see one of the following sections: • Router mode: You cannot access the Internet on page 254 • Troubleshoot Internet browsing on page 258 Router mode: Specify a PPTP or L2TP Internet connection that uses a login To specify or view the settings for an ISP Internet connection that uses PPTP or L2TP and that requires a login: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 9. In the Password field, enter the password that you use to log in to your Internet service. 10. If your ISP requires a service name, type it in the Service Name field. 11. From the Connection Mode menu, select Always On, Dial on Demand, or Manually Connect. 12.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the NETGEAR website does not display within one minute, see one of the following sections: • Router mode: You cannot access the Internet on page 254 • Troubleshoot Internet browsing on page 258 Router mode: Specify an IPv6 Internet connection If the access point/router is in router mode, you can set up an IPv6 Internet connection if the router does not detect it automatically.
AC2000 802.11ac Wireless Access Point/Router WAC124 • If your Internet connection does not use PPPoE or DHCP, or is not fixed, but is IPv6, select Auto Config. Your ISP can provide this information.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > IPv6.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Use Auto Config for an IPv6 Internet connection To set up an IPv6 Internet connection through autoconfiguration: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 Most people can leave this field blank, but if your ISP gave you a specific host name, enter it here. 8. (Optional) In the DHCP Domain Name (If Required) field, enter a domain name. You can type the domain name of your IPv6 ISP. Do not enter the domain name for the IPv4 ISP here. For example, if your ISP’s mail server is mail.xxx.yyy.zzz, type xxx.yyy.zzz as the domain name. If your ISP provided a domain name, type it in this field.
AC2000 802.11ac Wireless Access Point/Router WAC124 To set up an IPv6 Internet connection by using a 6to4 tunnel: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Use These DNS Servers. If you know that your ISP requires specific servers, select this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also. 9. In the LAN Setup section, select an IP Address Assignment radio button: • Use DHCP Server. This method passes more information to LAN devices but some IPv6 systems might not support the DHCPv6 client function. • Auto Config.
AC2000 802.11ac Wireless Access Point/Router WAC124 To set up an IPv6 6rd Internet connection: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns these addresses. • Use These DNS Servers. If you know that your ISP requires specific servers, select this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also. 8. In the LAN Setup section, select an IP Address Assignment radio button: • Use DHCP Server.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > IPv6.
AC2000 802.11ac Wireless Access Point/Router WAC124 The IPv6 page displays. 6. From the Internet Connection Type menu, select Fixed. The page adjusts. 7. In the WAN Setup section, specify the fixed IPv6 addresses for the WAN connection: • IPv6 Address/Prefix Length. The IPv6 address and prefix length of the access point/router’s Internet (WAN) port. • Default IPv6 Gateway. The IPv6 address of the default IPv6 gateway for the access point/router’s Internet (WAN) port. • Primary DNS Server.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 9. Select an IPv6 Domain Name Server (DNS) Address radio button: • Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns these addresses. • Use These DNS Servers. If you know that your ISP requires specific servers, select this option. Enter the IP address of your ISP’s primary DNS server. If a secondary DNS server address is available, enter it also. 10.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays. 6. From the Internet Connection Type menu, select PPPoE. The page adjusts. The access point/router automatically detects the information in the following fields: • Router’s IPv6 Address on WAN.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Use DHCP Server. This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function. • Auto Config. This is the default setting. This setting specifies how the access point/router assigns IPv6 addresses to the devices on your home network (the LAN). 10.
4 Manage the Basic WiFi and Radio Features This chapter describes how you can manage the basic WiFi and radio settings of the access point/router. For information about the advanced WiFi and radio settings, see Manage the Advanced WiFi and Radio Features on page 215. Tip: If you want to change the settings of the access point/router’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
AC2000 802.11ac Wireless Access Point/Router WAC124 Set up or change an open or secure WiFi network The access point/router provides three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By default, the Wireless 1 network is enabled (the other two WiFi networks are disabled), its default SSID is NETGEAR-1, and its default security is WPA2-PSK with the passphrase sharedsecret.
AC2000 802.11ac Wireless Access Point/Router WAC124 Note: Make sure the country is set to the location where the device is operating. You are responsible for complying within the local, regional, and national regulations set for channels, power levels, and frequency ranges. Note: It might not be legal to operate the access point/router in a region other than the regions listed in the menu. If your country or region is not listed, check with your local government agency. 7.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Setting Description Enable SSID By default, the access point/router broadcasts its SSID so that WiFi clients can detect the Broadcast WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear the Enable SSID Broadcast check box. Turning off the SSID broadcast provides additional WiFi security, but users must know the SSID to be able to join the WiFi network of the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 • If your WiFi-enabled computer or mobile device is connected to another WiFi network in your area, disconnect it from that WiFi network and connect it to the WiFi network that the access point/router provides. Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select BASIC > Wireless. The Wireless Network page displays. 6. Select the WiFi network (Wireless 1, Wireless 2, or Wireless 3). 7. In the Security Options section, select the WPA/WPA2 Enterprise radio button. The WPA and WPA2 enterprise settings display. 8.
AC2000 802.11ac Wireless Access Point/Router WAC124 • If your WiFi-enabled computer or mobile device is connected to another WiFi network in your area, disconnect it from that WiFi network and connect it to the WiFi network that the access point/router provides. Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select BASIC > Wireless. The Wireless Network page displays. 6. Select the WiFi network (Wireless 1, Wireless 2, or Wireless 3). 7. Select one of following VAP radio buttons: • Enable. Enables the WiFi network. By default, the Wireless 2 and Wireless 3 networks are disabled, but you can enable them.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select BASIC > Wireless. The Wireless Network page displays. 6.
AC2000 802.11ac Wireless Access Point/Router WAC124 point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 To manage SSID isolation for all WiFi networks: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 port 3 and a server to LAN port 4, WiFi clients might be able to access the printer and the server. Access to LAN ports depends on the WiFi network that the clients are connected to and whether you enabled such access: • Wireless 1. By default, WiFi clients that are connected to the Wireless 1 network can access devices that are connected to the LAN ports of the access point/router. For the Wireless 1 network, you cannot disable this type of access.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Select the Wireless 2 button. The settings for the Wireless 2 network display. 7. Next to Allow access to wired ports, select a radio button: • Enable. WiFi clients that are connected to the Wireless 2 network can access devices that are connected to the LAN ports. • Disable. WiFi clients that are connected to the Wireless 2 network cannot access devices that are connected to the LAN ports.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings. The Advanced Wireless Settings page displays. 6. Do one of the following in the 2.4 GHz b/g/n wireless radio settings section, 5 GHz a/n/ac wireless radio settings section, or both sections: • Turn off the radio. Clear the Enable Wireless Router Radio check box.
AC2000 802.11ac Wireless Access Point/Router WAC124 To let a WiFi device join the access point/router’s main WiFi network using WPS with the push button method: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Use WPS with the PIN method To use the PIN method to connect a WiFi device to the access point/router’s WiFi network, you must know the PIN of the WiFi device that you are trying to connect. To let a WiFi device join the access point/router’s WiFi network using WPS with the PIN method: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 10. Within four minutes, go to the WiFi device and use its WPS software to join the network without entering a password. After the access point/router establishes a WPS connection, the WiFi LED lights and the Add WPS Client page displays a confirmation message. 11. To verify that the WiFi device is connected to the access point/router’s WiFi network, select BASIC > Attached Devices. The WiFi device displays on the page.
5 Manage the Firewall and Security The access point/router comes with a built-in firewall that helps to protect your network from unwanted intrusions from the Internet and lets you control access to the Internet.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage the basic firewall settings If the access point/router is in router mode, the basic firewall settings let you manage port scan protection and denial of service (DoS) protection, specify whether the access point/router can respond to a ping from the Internet (WAN) port, set up a DMZ server, and manage IGMP proxying, NAT filtering, and the application-level gateway (ALG) for the Session Initiation Protocol (SIP).
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 6. To enable a port scan and disable DoS protection, select the Disable Port Scan and DoS Protection check box. 7.
AC2000 802.11ac Wireless Access Point/Router WAC124 point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 6. Clear the Disable IGMP Proxying check box. By default, this check box is selected and IGMP proxying is disabled. 7. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 5. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 6. Select a NAT Filtering radio button: • Secured. Provides a secured firewall to protect the computers on the LAN from attacks from the Internet but might prevent some Internet services, point-to-point applications, or multimedia applications from functioning. By default, the Secured radio button is selected. • Open.
AC2000 802.11ac Wireless Access Point/Router WAC124 5. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 6. To disable the SIP ALG, select the Disable SIP ALG check box. The SIP ALG is enabled by default. 7. Click the Apply button. Your settings are saved. Router mode: Manage VPN pass-through VPN pass-through allows a computer on the local area network (LAN) to receive VPN traffic from the Internet over an IPSec, PPTP, or L2TP connection.
AC2000 802.11ac Wireless Access Point/Router WAC124 7. Click the Apply button. Your settings are saved. Allow or block device access to your network You can use device access control to block or allow access to your network. You define access by selecting or specifying the MAC addresses of the WiFi and wired devices that either can access your entire network or are blocked from accessing your entire network.
AC2000 802.11ac Wireless Access Point/Router WAC124 You must select this check box before you can specify an access rule and use the Allow all new devices to connect and Block all new devices from connecting buttons. When the Turn on Access Control check box is cleared, all devices are allowed to connect, even if a device is in the list of blocked devices. 7. Click the Apply button. Your settings are saved. 8. Select an access rule for new devices: • Allow all new devices to connect.
AC2000 802.11ac Wireless Access Point/Router WAC124 the MAC addresses of devices that are connected to the access point/router on the Access Control page of the local browser interface (see Add or remove a device from the allowed list on page 85 and Add or remove a device from the blocked list on page 86). Add or remove a device from the allowed list If you set up an access list that blocks all new devices from accessing your network, you must specify which devices are allowed to access your network.
AC2000 802.11ac Wireless Access Point/Router WAC124 c. On the Add Allowed Device page, click the Apply button. The device is added to the allowed list on the Access Control page. 8. To remove a device from the allowed list, do the following: a. Select the check box for the device. b. Click the Delete button. The device is removed from the allowed list. 9. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Click the View list of blocked devices not currently connected to the network link. A table displays the detected device name, MAC address, and connection type of the devices that are not connected and are blocked from accessing the network. 7. To add a device to the blocked list, do the following: a. Click the Add button. The Add Blocked Device page displays. b. Enter the MAC address and device name for the device that you want to block. c.
AC2000 802.11ac Wireless Access Point/Router WAC124 To set up keyword and domain blocking: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 9. To add more keywords or domains, repeat the previous two steps. The keyword list supports up to 32 entries. 10. Click the Apply button. Your settings are saved. Router mode: Specify a trusted device You can exempt one trusted device from blocking and logging. The device that you exempt must be assigned a fixed (static) IP address. To specify a trusted device: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 8. Click the Apply button. Your settings are saved. Router mode: Remove a keyword or domain from the blocked list If you no longer need a keyword or domain on the blocked list, you can remove the keyword or domain. To remove a keyword or domain from the blocked list: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Remove all keywords and domains from the blocked list You can simultaneously remove all keywords and domains from the blocked list. To remove all keywords and domains from the blocked list: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 you can specify if a blocking rule applies to one user, a range of users, or all users on your LAN. The access point/router lists many default services and applications that you can use in blocking rules. You can also add a service blocking rule for a custom service or application. Note: The information in this section and subsections does not apply if the access point/router is in access point mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Per Schedule. Use service blocking according to a schedule that you set. For more information, see Router mode: Set up a schedule for blocking on page 97. • Always. Use service blocking continuously. 7. Click the Add button. The Add Services Blocking page displays. 8. From the Service Type menu, select the service or application to be covered by this rule.
AC2000 802.11ac Wireless Access Point/Router WAC124 To add service blocking rule for a custom service or application: 1. Find out which protocol and port number or range of numbers the service or application uses. You can usually find this information by contacting the publisher of the service or application or through online user or news groups. 2. Open a web browser from a computer or mobile device that is connected to the access point/router network. 3. Enter http://www.routerlogin.
AC2000 802.11ac Wireless Access Point/Router WAC124 10. Specify a new service blocking rule by selecting a protocol, defining the ports, and defining a name: • Protocol. From the menu, select the protocol (TCP or UDP) that is associated with the service or application. If you are unsure, select TCP/UDP. • Starting Port. In the field, enter the start port for the service or application. • Ending Port.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Security > Block Services.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Security > Schedule.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Security > E-mail. The E-mail page displays.
AC2000 802.11ac Wireless Access Point/Router WAC124 c. From the Time menu, select the time, and select the am or pm radio button. 14. Click the Apply button. Your settings are saved. Logs are sent automatically according to the schedule that you set. If the log fills before the specified time, it is sent. After the log is sent, it is cleared from the access point/router memory. If the access point/router cannot email the log and the log buffer fills, the access point/router overwrites the log.
6 Optimize Performance This chapter describes how you can optimize the access point/router’s performance and manage the traffic flows through the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Optimize traffic with the default QoS rules You can use Quality of Service (QoS) to assign different priorities to Internet traffic, applications, and services. The access point/router provides default QoS rules. You can add custom QoS rules and manage both default and custom QoS rules (see Manage default and custom QoS rules on page 103). We recommend that you enable QoS if you use streaming Internet.
AC2000 802.11ac Wireless Access Point/Router WAC124 Your settings are saved. The access point/router assigns traffic priorities according to the QoS rules and their priority queues. Manage default and custom QoS rules You can add custom QoS rules and change and remove both default and custom QoS rules. You can add QoS rules for services and applications but also for specific devices on your network.
AC2000 802.11ac Wireless Access Point/Router WAC124 The QoS - Priority Rules page displays. 9. Specify a new QoS rule for a service or application by completing the following information: • QoS Policy for. Enter a name for the QoS rule. • Priority. Select the priority (Highest, High, Normal, or Low) that must be assigned to the service or application. The priority selections correspond to the queue columns in the QoS rules table. • Connection Type.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > QoS Setup. The QoS Setup page displays. 6. Make sure that the Turn Internet Access QoS On check box is selected. 7. Select the By Device radio button. The page adjusts and shows the Add Rules table. 8.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > QoS Setup.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > QoS Setup. The QoS Setup page displays. 6. To find out what uplink bandwidth your Internet connection supports, click the Speedtest button. The speed test checks your uplink bandwidth and the supported uplink bandwidth displays in the Uplink bandwidth Maximum field.
AC2000 802.11ac Wireless Access Point/Router WAC124 To disable WMM for one or both radios: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Note: The UPnP Portmap Table displays only if the access point/router is in router mode. To manage Universal Plug and Play: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 can range from 1 to 255. The default value for the advertisement time to live is 4 hops, which should be fine for most home networks. If you notice that some devices are not being updated or reached correctly, it might be necessary to increase this value. 9. Click the Apply button.
7 Manage the Network Settings This chapter describes how you can manage various network settings of the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage the LAN IP address settings If the access point/router is in router mode, the LAN subnet defines the LAN IP address settings for the access point/router, including the IP address at which you can access the access point/router over the local browser interface, the DHCP IP address settings, and the Router Information Protocol (RIP) settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Enter a new name in the Device Name field. 7. Click the Apply button. Your settings are saved. Router mode: Change the LAN IP address and subnet settings If the access point/router is in router mode, it is preconfigured to use private IP addresses on the LAN side and to function as a DHCP server. The access point/router’s LAN IP configuration is as follows: • LAN IP address. 192.168.0.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 6. In the IP Address fields, enter the new LAN IP address. The LAN IP address at which you can access the local browser interface of the access point/router also changes. 7. In the IP Subnet Mask fields, enter the new LAN subnet mask.
AC2000 802.11ac Wireless Access Point/Router WAC124 To change the DHCP pool of IP addresses that the access point/router assigns: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Disable the DHCP server If the access point/router is in router mode, you can use another device on your network as the DHCP server or specify the network settings of all your computers. Note: If you disable the DHCP server and do not specify another DHCP server or no other DHCP server is available on your network, you must set your computer IP addresses manually so that they can access the access point/router. To disable the DHCP server: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage the Router Information Protocol settings If the access point/router is in router mode, Router Information Protocol (RIP) lets the access point/router exchange routing information with other routers. By default, RIP is enabled in both directions (in and out) without a particular RIP version. To manage the RIP settings: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 • RIP-1. This format is universally supported. It is adequate for most networks, unless you are using an unusual network setup. • RIP-2B. This format carries more information than RIP-1, sends the routing data in RIP-2 format, and uses subnet broadcasting. • RIP-2M. This format carries more information than RIP-1, sends the routing data in RIP-2 format, and uses multicasting. 8. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 6. Below the Address Reservation table, click the Add button. The Add Address page displays. 7.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > LAN Setup.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 6. In the Address Reservation table, select the radio button for the reserved address. 7. Click the Delete button. The IP address entry is removed. Add and manage IPv4 static routes Static routes provide detailed routing information to your router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Add an IPv4 static route You can add an IPv4 static route to a destination IP address and specify the subnet mask, gateway IP address, and metric. To add an IPv4 static route: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 10. Enter the route IP address and metric settings in the following fields: • Destination IP Address. Enter the IP address for the final destination of the route. • IP Subnet Mask. Enter the IP subnet mask for the final destination of the route. If the destination is a single host, enter 255.255.255.255. • Gateway IP Address. Enter the IP address of the gateway. The IP address of the gateway must be on the access point/router LAN subnet. • Metric.
AC2000 802.11ac Wireless Access Point/Router WAC124 The Static Routes page displays. 6. In the Static Routes table, select the radio button for the route. 7. Click the Edit button. The Static Route page adjusts. 8. Change the settings for the route. For more information about the settings, see Add an IPv4 static route on page 124. 9. Click the Apply button. The route settings are updated in the table on the Static Routes page.
AC2000 802.11ac Wireless Access Point/Router WAC124 The route is removed from the table on the Static Routes page. Router mode: Enable an IPTV bridge for a port group or VLAN tag group If the access point/router is in router mode, some devices, such as an Internet Protocol television (IPTV), cannot function behind the access point/router’s Network Address Translation (NAT) service or firewall.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > VLAN / Bridge Settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 You can add custom VLAN tag groups and assign a VLAN ID, priority value, and ports to each VLAN tag group. To enable the IPTV bridge for a VLAN tag group: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 c. Select the check box for the LAN port or WiFi radio to which the device is connected. You must select at least one LAN port or WiFi radio. You can select more than one LAN port and WiFi radio. 9. Click the Apply button. Your settings are saved. If you added a VLAN tag group, the group is added to the table on the VLAN / Bridge Settings page.
AC2000 802.11ac Wireless Access Point/Router WAC124 To change the MTU size: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Table 2. Common MTU sizes (Continued) MTU Application 1472 Maximum size to use for pinging. (Larger packets are fragmented.) 1468 Used in some DHCP environments. 1436 Used in PPTP environments or with VPN.
8 Maintain and Monitor the Access Point/Router This chapter describes how you can maintain the access point/router by managing the firmware, configuration file, and logs and by setting up the traffic meter. The chapter also describes how you can monitor the access point/router and its network traffic.
AC2000 802.11ac Wireless Access Point/Router WAC124 Update the firmware of the access point/router From time to time, or as needed, NETGEAR makes new firmware (routing software) available. The firmware is stored in flash memory. You can log in to the access point/router and check if new firmware is available, or you can manually load a specific firmware version to your access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Click the Check button. The access point/router finds new firmware information if any is available and displays a message asking if you want to download and install it. 7. Click the Yes button. The access point/router locates and downloads the firmware and begins the update. WARNING: To avoid the risk of corrupting the firmware, do not interrupt the upload. For example, do not close the browser, click a link, or load a new page.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 6. Click the Login button. The NETGEAR Account Login page displays. 7. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 8. Select ADVANCED > Administration > Firmware Update.
AC2000 802.11ac Wireless Access Point/Router WAC124 The version firmware is stated in the Firmware Version field at the top right of the page. Manage the configuration file of the access point/router The configuration settings of the access point/router are stored within the access point/router in a configuration file. You can back up (save) this file to your computer or restore it. Back up the access point/router configuration file You can save a copy of the current configuration settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 The backup file ends in .cfg. 8. Follow the directions of your browser to save the file. Restore the access point/router configuration settings If you backed up the configuration file, you can restore the configuration settings from this file. To restore configuration settings that you backed up: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.
AC2000 802.11ac Wireless Access Point/Router WAC124 WARNING: To avoid the risk of corrupting the firmware, do not interrupt the restoration. For example, do not close the browser, click a link, or load a new page. Do not turn off the access point/router. Wait until the access point/router finishes restarting and the Power LED turns solid green.
AC2000 802.11ac Wireless Access Point/Router WAC124 The BASIC Home page displays. 5. Select ADVANCED > Administration > Set Password. The Set Password page displays. 6. Enter the old password. 7. Enter the new password twice. For information about password recovery, see Change the password recovery questions for the local login password on page 140. 8. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Administration > Set Password. The Set Password page displays. 6. Select the Enable Password Recovery check box. 7. Select two security questions and provide answers to them. 8. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Enter the saved answers to your security questions. 7. Click the Continue button. A window opens and displays your recovered password. 8. Click the Login again button. A login window opens. 9. With your recovered password, log in to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 Use the Reset button CAUTION: This process erases all settings that you configured in the access point/router. To reset the access point/router to factory default settings: 1. On the back of the access point/router, locate the Reset button. 2. Using a straightened paper clip, press and hold the recessed Reset button until the Power LED lights yellow, which takes about five seconds. 3. Release the Reset button.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Administration > Backup Settings. The Backup Settings page displays. 6. Click the Erase button. A warning page displays. 7. Click the Yes button. The configuration is reset to factory default settings. When the reset is complete, the access point/router reboots. This process takes about two minutes.
AC2000 802.11ac Wireless Access Point/Router WAC124 point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 View, send, or clear the logs In addition to viewing the logs, you can send them by email, and clear them. To view, send, or clear the logs: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 View the status and statistics of the access point/router You can view information about the access point/router and its ports and the status of the Internet connection and WiFi network. In addition, you can view traffic statistics for the various ports.
AC2000 802.11ac Wireless Access Point/Router WAC124 The information in the heading of each of the four panes uses the following color coding: • Green flag. The settings are fine and no problems exist. For a radio, the WiFi network is enabled and secured. • Red X. A problem exists or the connection is down. For a radio, the WiFi network is disabled or down. • Orange exclamation mark.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Field Description IP Subnet Mask The IP subnet mask that the access point/router uses. Domain Name Server The IP address of the Domain Name System (DNS) server that the access point/router uses. Field Description Wireless Settings (2.4GHz) or Wireless Settings (5GHz ) To change these settings, see Manage the Basic WiFi and Radio Features on page 59 and Manage the Advanced WiFi and Radio Features on page 215.
AC2000 802.11ac Wireless Access Point/Router WAC124 To view information about the access point/router and the IP and WiFi settings if the access point/router is in router mode: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Field Description Firmware Version The access point/router firmware version. If you update the firmware, the version changes (see Update the firmware of the access point/router on page 134). GUI Language Version The access point/router language version for the local browser interface. Serial Number The serial number of the access point/router. This number does not change.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Field Description IP Subnet Mask The IP subnet mask that the access point/router uses. Domain Name Server The IP address of the Domain Name System (DNS) server that the access point/router uses. Field Description Wireless Settings (2.4GHz) or Wireless Settings (5GHz ) To change these settings, see Manage the Basic WiFi and Radio Features on page 59 and Manage the Advanced WiFi and Radio Features on page 215.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 In access point mode, the IP address is a LAN IP address. In router mode, the IP address is a WAN IP address. • Lease Obtained. The date and time when the DHCP IP address lease was obtained. • Lease Expires. The date and time that the DHCP IP address lease expires. 7. When the access point/router receives an IP address dynamically, you can perform the following actions: • Release.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. In the LAN Port pane (in access point mode) or in the Internet Port pane (in router mode), click the Show Statistics button. The Show Statistics window opens and displays following information: • System Up Time. The time elapsed since the access point/router was last restarted. • Port. The statistics for the WAN (Internet) port, LAN (Ethernet) ports, and WLANs. For each port, the window displays the following information: - Status.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Field Description Device Name The device name, if detected. Connection For LAN devices, the connection type is always Wired. Type Field Description 2.4 GHz Wireless Devices and 5 GHz Wireless Devices Status If access control is enabled (see Allow or block device access to your network on page 83), the access control status of the device in the network (Allowed or Blocked).
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Monitor and meter Internet traffic If the access point/router is in router mode, you can enable traffic metering to monitor the volume of Internet traffic that passes through the access point/router’s Internet (WAN) port. With the traffic meter utility, you can set limits for traffic volume, set a monthly limit, and get a live update of traffic usage.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Select the Enable Traffic Meter check box. By default, no traffic limit is specified and the traffic volume or connection time is not controlled. 7. In the Traffic Counter section, set the traffic counter to begin at a specific time and date. 8. To start the traffic counter immediately, click the Restart Counter Now button. 9. Click the Apply button. Your settings are saved. The Internet Traffic Statistics section helps you to monitor the data traffic.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Select the Enable Traffic Meter check box. 7. Select the Traffic volume control by radio button. 8. From the corresponding menu, select an option: • Download only. The restriction is applied to incoming traffic only. • Both Directions. The restriction is applied to both incoming and outgoing traffic. 9. In the Monthly Limit field, enter how many MBytes (MB) per month are allowed. 10.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 12. Click the Apply button. Your settings are saved. The Internet Traffic Statistics section helps you to monitor the data traffic. For more information, see Router mode: View the Internet traffic volume and statistics on page 164.
AC2000 802.11ac Wireless Access Point/Router WAC124 8. To display more information about the data traffic and to change the polling interval, click the Traffic Status button. The Traffic Status pop-up windows opens. Router mode: Unblock the traffic meter after the traffic limit is reached If you configured the traffic meter to disconnect and disable the Internet connection after the traffic limit is reached, you cannot access the Internet until you unblock the traffic meter.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage and use remote access If the access point/router is in router mode, you can access the access point/router over the Internet to view or change its settings. You must know the access point/router’s WAN IP address to use this feature. Note: The information in this section and subsections does not apply if the access point/router is in access point mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 5. Select ADVANCED > Advanced Setup > Remote Management. The Remote Management page displays. 6. Select the Turn Remote Management On check box. 7. In the Allow Remote Access By section, specify the external IP addresses to be allowed to access the router’s remote management. Note: For enhanced security, restrict access to as few external IP addresses as practical.
AC2000 802.11ac Wireless Access Point/Router WAC124 For example, if the external address of the access point/router is 203.0.113.123 and you use port number 8443 to access the access point/router, enter http://203.0.113.123:8443 in the address field of the browser. Change the system mode to access point mode or back to router mode By default, the access point/router functions in router mode, that is, the system mode is router mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Wireless Access Point. The Wireless Access Point page displays. 6. Specify the system mode by doing one of the following: • Access point mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > LED Control Settings. The LED Control Settings page displays. By default, the first radio button is selected, which allows standard LED behavior. For more information about LEDs, see Top panel with LEDs on page 12. 6.
9 Share a USB Storage Device Attached to the Access Point/Router This chapter describes how to access and manage storage devices attached to your access point/router. ReadySHARE lets you access and share USB storage devices connected to the access point/router. (If your storage device uses special drivers, it is not compatible.) Note: The USB port on the access point/router can be used only to connect a USB storage device such as a flash drive or hard drive.
AC2000 802.11ac Wireless Access Point/Router WAC124 USB device requirements The access point/router works with most USB-compliant external flash and hard drives. For the most up-to-date list of USB devices that the access point/router supports, visit kb.netgear.com/app/answers/detail/a_id/18985/~/readyshare-usb-drives-compatibility-list. Some USB external hard drives and flash drives require you to load the drivers onto the computer before the computer can access the USB storage device.
AC2000 802.11ac Wireless Access Point/Router WAC124 Access a USB storage device that is connected to the access point/router From a computer or mobile device on the access point/router network, you can access a USB storage device that is connected to the access point/router. Access a USB storage device from a Windows-based computer To access a USB storage device that is connected to the access point/router from a Windows-based computer: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 device is available to all computers and mobile devices on the access point/router network. 3. On a Mac that is connected to the network, select Go > Connect to Server. The Connect to Server window opens. 4. In the Server Address field, enter smb://readyshare. 5. When prompted, select the Guest radio button.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Right-click the USB device and select Map network drive. The Map Network Drive window opens. 7. Select the drive letter to map to the new network folder. 8. Click the Finish button. The USB storage device is mapped to the drive letter that you specified. 9. To connect to the USB storage device as a different user, select the Connect using different credentials check box, click the Finish button, and do the following: a. Type the user name and password.
AC2000 802.11ac Wireless Access Point/Router WAC124 When you connect the USB HDD to the access point/router’s port, it might take up to two minutes before it is ready for sharing. By default, the USB HDD is available to all computers and mobile devices on the access point/router network. 3. Download ReadySHARE Vault from netgear.com/readyshare and install it on the Windows-based computer. 4. Launch ReadySHARE Vault. 5. Use the dashboard or the Backup tab to set up and run your backup.
AC2000 802.11ac Wireless Access Point/Router WAC124 8. Select the GUID Partition Table or Master Boot Record radio button. 9. In the Format menu, select Mac OS Extended (Journaled). 10. Click the OK button. 11. Click the Apply button. Your settings are saved. Prepare to back up a large amount of data Before you back up a large amount of data with Time Machine, we recommend that you follow this procedure. To prepare to back up a large amount of data: 1. Upgrade the operating system of the Mac. 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 Use Time Machine to back up onto a USB hard disk drive You can use Time Machine to back up your Mac onto a USB hard disk drive (HDD) that is connected to USB port of the access point/router. To back up your Mac onto a USB HDD: 1. Prepare your USB HDD with a compatible format and partitions. For more information, see Set up a USB hard disk drive on a Mac on page 176. 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 Note: If you do not see the USB partition that you want in the Time Machine disk list, go to Mac Finder and click that USB partition. It displays in the Time Machine list. 14. When prompted, select the Registered User radio button. 15. Enter the same credentials that you use for local login to the access point/router. Use the local login user name (admin) and your customized local login password. 16. Click the Connect button.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. To specify a name that is used to access the USB storage device that is connected to the access point/router, in the Network/Device Name field, enter a name. By default, the name is readyshare. 7. To specify a name for the workgroup that the USB storage device is a member of, in the Workgroup field, enter a name. By default, the name is Workgroup. The name works only in an operating system that supports NetBIOS, such as Microsoft Windows.
AC2000 802.11ac Wireless Access Point/Router WAC124 (Continued) Access Method Description FTP Disabled by default. You can type ftp://readyshare.routerlogin.net/shares to access the USB storage device within the access point/router network and download or upload files. In this URL, readyshare is the name that is specified in the Network/Device Name field. If you change the name in the Network/Device Name field from readyshare to another name, the link changes accordingly.
AC2000 802.11ac Wireless Access Point/Router WAC124 To enable FTP access within the access point/router network: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 View and manage network folders on a USB storage device You can view and manage network folders on a USB storage device that is attached to the USB port on an access point/router. View network folders on a USB storage device You can view the network folders on a USB storage device that is connected to the USB port on the access point/router. To view network folders on a USB storage device: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 network folder. The password for the admin user name is your customized local login password, also referred to as the admin password. When you used the Smart Setup Wizard for the initial log-in process on the access point/router, you customized the local login password. (By default, the local login password is password.) • Folder Name. Full path of the network folder. • Volume Name. Volume name from the storage device. • Total Space and Free Space.
AC2000 802.11ac Wireless Access Point/Router WAC124 The USB Storage (Advanced Settings) page displays. 6. In the Available Network Folders section, select the USB storage device. Note: By default, the USB storage device that is connected is selected. We recommend that you do not attach more than one USB storage device the USB port (for example, through a USB hub). 7. Click the Create Network Folder button. The Create Network Folder window opens.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Approve a USB storage device For more security, you can set up the access point/router to share only USB storage devices that you approve. To approve a USB storage device: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 Your settings are saved. 12. To approve another USB storage device, first click the Safely Remove USB Device button for the currently connected USB storage device, and remove that device. For more information, see Safely remove a USB storage device on page 188. Then, connect the other USB storage device, and repeat this procedure.
AC2000 802.11ac Wireless Access Point/Router WAC124 7. Click the Safely Remove USB Device button. The USB storage device goes offline. 8. Physically disconnect the USB storage device.
10 Use the Access Point/Router as a Media Server This chapter contains the following sections: • • • Specify ReadyDLNA media server settings Play music from a storage device with iTunes server Set up the access point/router to work with TiVo 190
AC2000 802.11ac Wireless Access Point/Router WAC124 Specify ReadyDLNA media server settings By default, the access point/router functions as a ReadyDLNA media server, which lets you view videos, movies, and photos on DLNA/UPnP AV-compliant media players, such as Xbox360, Playstation, and NETGEAR media players. To specify ReadyDLNA media server settings: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.
AC2000 802.11ac Wireless Access Point/Router WAC124 information, see Play music from a storage device with iTunes server on page 192. • Media Server Name. Click the Click here to change the Device Name link to change the access point/router media server name (see Router mode: Change the access point/router network device name on page 114). Note: If you change the media server device name, you can also change the LAN device name and the ReadySHARE storage folder access path.
AC2000 802.11ac Wireless Access Point/Router WAC124 To set up Home Sharing, you need an Apple account and the latest version of iTunes installed on your Windows-based computer or Mac. To set up the access point/router’s iTunes server to play music on iTunes: 1. Connect a USB storage device to the USB port on the access point/router. 2. If your USB storage device uses a power supply, connect it. You must use the power supply when you connect the USB storage device to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 The Home Sharing page displays. 12. Enter your Apple ID email address and password. 13. Click the Turn On Home Sharing button. When Home Sharing is enabled, a Home Sharing icon displays in iTunes. 14. Click the Home Sharing icon and from the menu, select the access point/router. The music that is on the USB device that is connected to the access point/router displays in iTunes.
AC2000 802.11ac Wireless Access Point/Router WAC124 access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). c. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 Set up the access point/router to work with TiVo You can set up your TiVo to access media files stored on a USB device that is connected to the access point/router. The TiVo must be on the same network as the access point/router. This feature supports the following file formats: • Video. See and play mpeg1, and mpeg2 files. • Music. See and play MP3 files. • Pictures. View images in .jpg format.
11 Router Mode: Manage Dynamic DNS and FTP Access Through the Internet If the access point/router is in router mode, with Dynamic DNS (DDNS), you can use the Internet and a domain name to access a USB storage device that is attached to a USB port on the access point/router when you are not in your office or home. If you know the IP address of the access point/router (and the IP address did not change), you can also access the USB storage device by using the IP address.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Set up and manage Dynamic DNS Internet service providers (ISPs) assign IP addresses to identify each Internet account. Most ISPs use dynamically assigned IP addresses. This means that the IP address can change at any time. You can use the IP address to access your network remotely, but most people do not know what their IP address is or when this address changes.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Dynamic DNS. The Dynamic DNS page displays. 6. Select the Use a Dynamic DNS Service check box. 7. From the Service Provider menu, select NETGEAR. 8. Select the No radio button. 9. In the Host Name field, enter the name that you want to use for your URL. The host name is also called the domain name.
AC2000 802.11ac Wireless Access Point/Router WAC124 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Dynamic DNS. The Dynamic DNS page displays. 6. Select the Use a Dynamic DNS Service check box. 7. From the Service Provider menu, select your provider. 8. Select the Yes radio button. 9.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 The access point/router must be in router mode and use a direct Internet connection. It cannot connect to a another router on your network to access the Internet. 3. Connect a USB storage device to the USB port of the access point/router. 4. If your USB device uses a power supply, connect it. You must use the power supply when you connect the USB storage device to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > USB Storage > ReadySHARE.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Use FTP to access a storage device over the Internet If you attach a USB storage device to the access point/router, before you can access the storage device through the Internet with FTP, you must first set up FTP access (see Router mode: Set up FTP access through the Internet on the access point/router on page 202). To access a USB storage device with FTP from a remote computer to download or upload a file: 1.
12 Router Mode: Set up VPN Connections with OpenVPN If the access point/router is in router mode, you can use OpenVPN software to set up VPN connections and remotely access an office or site at which an access point/router is installed. This chapter describes how to set up OpenVPN on the access point/router and on a computer or mobile device and how to initiate a VPN connection using OpenVPN.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Enable and configure OpenVPN and VPN client access on the access point/router You must enable OpenVPN and specify the OpenVPN service settings on the access point/router before you can set up a VPN connection using OpenVPN. Note: Make sure that remote clients install their VPN configuration files after you configure OpenVPN on the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 We recommend that you use the default TUN mode and TAP mode settings. However, if you know that you need other settings, you can change the TUN mode and TAP mode settings by doing the following: • To change the TUN mode service type, select the UDP or TCP radio button • To change the TUN mode service port, type the port number that you want to use in the field. The default port number is 12973.
AC2000 802.11ac Wireless Access Point/Router WAC124 A remote client can install this software on a Windows computer, Mac computer, iOS device, or Android device. Router mode: Install the OpenVPN client utility and VPN configuration files on a Windows-based computer To download and install the OpenVPN client utility and the access point/router’s VPN configuration files on a Windows-based computer: 1. Visit openvpn.net/index.php/download/community-downloads.
AC2000 802.11ac Wireless Access Point/Router WAC124 9. Unzip the configuration files and copy them to the folder in which the OpenVPN client utility is installed. 10. Modify the VPN interface name to NETGEAR-VPN by doing the following: a. In Windows, open Network Connection or Network and Sharing Center. The network connection information displays. b. In the local area connection list, find the local area connection with the device name TAP-Windows Adapter. c.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 4. Click the Login button. The NETGEAR Account Login page displays. 5. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 6. Select ADVANCED > Advanced Setup > VPN Service.
AC2000 802.11ac Wireless Access Point/Router WAC124 The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 4. Click the Login button. The NETGEAR Account Login page displays. 5. Enter your registered email address and password and click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Install the OpenVPN client utility and VPN configuration files on an Android device To download and install the OpenVPN client utility and the access point/router’s VPN configuration files on an Android device: 1. On your Android device, visit the Google Play Store and download and install the OpenVPN Connect app. 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 9. On your Android device, start the OpenVPN Connect app, and search for and import the .ovpn file. Your Android device is now ready to for you to set up a VPN connection to the access point/router. For more information about using OpenVPN on an Android device, visit vpngate.net/en/howto_openvpn.aspx#android.
AC2000 802.11ac Wireless Access Point/Router WAC124 For information about the types of VPN client connections that the access point/router supports, see Router mode: Enable and configure OpenVPN and VPN client access on the access point/router on page 206. In addition to access to your office or home network, you can either allow or block VPN client Internet access through your office or home network.
13 Manage the Advanced WiFi and Radio Features This chapter describes how you can manage the advanced WiFi and radio features of the access point/router. For information about the basic WiFi and radio settings, see Manage the Basic WiFi and Radio Features on page 59. Tip: If you want to change the settings of the access point/router’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
AC2000 802.11ac Wireless Access Point/Router WAC124 Add a WiFi schedule for a radio You can use this feature to turn off the WiFi signal from a radio on the access point/router at times when you do not need a WiFi connection. For example, you might turn it off at night, for the weekend, or for a holiday. You can add a separate WiFi schedule for each WiFi band. You can also add multiple schedules for each WiFi band.
AC2000 802.11ac Wireless Access Point/Router WAC124 7. Use the menus, radio buttons, and check boxes to set up a period during which you want to turn off the WiFi signal for the selected radio and specify whether the schedule is recurrent. 8. Click the Apply button. Your settings are saved, the Advanced Wireless Settings page displays again, and the new schedule shows in the table for the radio for which you added the schedule.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 devices to join the network but limits 802.11ac devices to functioning at up to 800 Mbps. - Up to 1733 Mbps. Performance mode. This mode allows 802.11ac, 802.11n, and 802.11a devices to join the network and allows 802.11ac devices to function at up to 1733 Mbps. This mode is the default mode. 7. Click the Apply button. Your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
AC2000 802.11ac Wireless Access Point/Router WAC124 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings. The Advanced Wireless Settings page displays. 6. From the Transmit Power Control menu for one or each radio, select 100%, 75%, 50%, or 25%. The default is 100%. 7. Click the Apply button. Your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Enter the settings as described in the following table. Except for the 20/40 MHz coexistence settings, the descriptions in the table (not the settings onscreen) apply to both the 2.4 GHz b/g/n wireless radio settings section and 5 GHz a/n/ac wireless radio settings section.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 WARNING: If you clear the Keep Existing Wireless Settings check box for a band and use WPS to add a WiFi device to the access point/router’s WiFi network, the SSID and passphrase for the band are automatically generated and other WiFi devices that are already connected to the access point/router’s WiFi network might be disconnected. 9. Click the Apply button. Your settings are saved.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 3. Click the Login button. The NETGEAR Account Login page displays. 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 4. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > Advanced Wireless Settings. The Advanced Wireless Settings page displays. 6. Scroll to the bottom of the page and clear the Enable MU-MIMO check box. 7. Click the Apply button. Your settings are saved. The radios restart and WiFi clients might need to reconnect.
AC2000 802.11ac Wireless Access Point/Router WAC124 6. Scroll to the bottom of the page and select the Enable AIRTIME FAIRNESS check box. 7. Click the Apply button. Your settings are saved. The radios restart and WiFi clients might need to reconnect. Set Up a WiFi bridge between the access/point router and another device You can use the access point/router as a WiFi bridge and connect multiple devices with WiFi, for example, at the faster 802.11ac speed.
AC2000 802.11ac Wireless Access Point/Router WAC124 To set up the access point/router as a WiFi bridge to another access point/router, WiFi router, or AP Internet connection: 1. Make a note of the WiFi settings of the other access point/router, WiFi router, or AP that is connected to the modem. You must know the SSID, WiFi security mode, WiFi password, and operating frequency (either 2.4 GHz or 5 GHz). 2.
AC2000 802.11ac Wireless Access Point/Router WAC124 10. Enter the WiFi settings of the access point/router, WiFi router, or AP that is connected to the modem (that is, the other access point/router, WiFi router, or AP): a. From the Choose a Wireless Network menu, select the WiFi band that the other access point/router, WiFi router, or AP is using. For 802.11ac mode, both routers must use the same 5 GHz band. b.
AC2000 802.11ac Wireless Access Point/Router WAC124 15. To reconnect, close your browser, relaunch it, and log in to the access point/router by entering http://www.routerlogin.net.
14 Router Mode: Manage Port Forwarding and Port Triggering As an advanced function of the firewall, you can use port forwarding and port triggering to set up port traffic rules for Internet services and applications. These rules apply specifically to ports. You need networking knowledge to set up port traffic rules. Note: The information in this chapter does not apply if the access point/router is in access point mode.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Manage port forwarding to a local server for services and applications If the access point/router is in router mode, and if a server is part of your network, you can allow certain types of incoming traffic to reach the server. For example, you might want to make a local web server, FTP server, or game server visible and available to the Internet.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 5. Click the Login button. The NETGEAR Account Login page displays. 6. Enter your registered email address and password and click the Login button. The BASIC Home page displays. 7.
AC2000 802.11ac Wireless Access Point/Router WAC124 point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account. If the access point/router is not connected to the Internet, you are prompted to sign in with the local login credentials (see Log in to the access point/router when it is not connected to the Internet on page 27). 4. Click the Login button.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Internal IP address. Either enter an IP address in the Internal IP address field or select the radio button for an attached device that is listed in the table. 10. Click the Apply button. Your settings are saved. The rule is added to the table on the Port Forwarding / Port Triggering page. Router mode: Change a port forwarding rule You can change an existing port forwarding rule. To change a port forwarding rule: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 For information about the settings, see Router mode: Add a port forwarding rule for a custom service or application on page 233. 10. Click the Apply button. Your settings are saved. The changed rule displays in the table on the Port Forwarding / Port Triggering page. Router mode: Remove a port forwarding rule You can remove a port forwarding rule that you no longer need. To remove a port forwarding rule: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode application example: Make a local web server public If you host a web server on your local network, you can use port forwarding to allow web requests from anyone on the Internet to reach your web server. To make a local web server public: 1. Assign your web server either a fixed IP address or a dynamic IP address using DHCP address reservation. In this example, your access point/router always assigns your web server an IP address of 192.168.0.
AC2000 802.11ac Wireless Access Point/Router WAC124 5. Your access point/router performs Network Address Translation (NAT) on the source IP address and sends the reply through the Internet to the computer or mobile device that sent the web page request.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router. If you do not know the IP address, see Find the IP address of the access point/router on page 29. The NETGEAR Business page displays. You are prompted to sign in with your NETGEAR account.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Service Type. Select the protocol (TCP or UDP) that is associated with the inbound connection. If you are unsure, select TCP/UDP. • Starting Port. Enter the start port number for the inbound connection. • Ending Port. Enter the end port number for the inbound connection. 9. Click the Apply button. Your settings are saved and the rule is added to the Port Triggering Portmap Table on the Port Forwarding / Port Triggering page.
AC2000 802.11ac Wireless Access Point/Router WAC124 8. Click the Edit Service button. The Port Triggering Rule page displays. 9. Change the settings. For information about the settings, see Router mode: Add a port triggering rule on page 238. 10. Click the Apply button. Your settings are saved. The changed rule displays in the Port Triggering Portmap Table on the Port Forwarding / Port Triggering page.
AC2000 802.11ac Wireless Access Point/Router WAC124 7. In the Port Triggering Portmap Table, select the radio button for the service or application name. 8. Click the Delete Service button. The rule is removed from the Port Triggering Portmap Table. If you want to reinstate the rule, you must redefine it. Router mode: Specify the time-out for port triggering The time-out period for port triggering controls how long the inbound ports stay open when the access point/router detects no activity.
AC2000 802.11ac Wireless Access Point/Router WAC124 Your settings are saved. Router mode: Disable port triggering By default, port triggering is enabled. You can disable port triggering temporarily without removing any port triggering rules. To disable port triggering: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode application example: Port triggering for Internet Relay Chat Some application servers, such as FTP and IRC servers, send replies to multiple port numbers. Using port triggering, you can tell the access point/router to open more incoming ports when a particular outgoing port starts a session. An example is Internet Relay Chat (IRC). Your computer connects to an IRC server at destination port 6667.
15 Diagnostics and Troubleshooting This chapter provides information to help you diagnose and solve problems you might experience with the access point/router. If you do not find the solution here, visit the NETGEAR support site at netgear.com/support for more product and contact information.
AC2000 802.11ac Wireless Access Point/Router WAC124 Reboot the access point/router from its local browser interface You or NETGEAR technical support can reboot the access point/router from its local browser interface, either locally or remotely, for example, if the access point/router seems to be unstable or is not operating normally. To reboot the access point/router from its local browser interface: 1.
AC2000 802.11ac Wireless Access Point/Router WAC124 Quick tips This section describes tips for troubleshooting some common problems. Router mode: Sequence to restart your access point/router network If the access point/router is in router mode and you must restart your network, follow this sequence: 1. Turn off and unplug the modem. 2. Turn off the access point/router. 3. Plug in the modem and turn it on. Wait two minutes. 4. Turn on the access point/router and wait two minutes.
AC2000 802.11ac Wireless Access Point/Router WAC124 Check the WiFi settings of your computer or mobile device If you connect over WiFi to the access point/router, make sure that the WiFi settings on your computer or mobile device and the access point/router match exactly. The access point/router’s default SSID is NETGEAR-1 and the default passphrase is sharedsecret.
AC2000 802.11ac Wireless Access Point/Router WAC124 Standard LED behavior when the access point/router is powered on After you turn on power to the access point/router, verify that the following sequence of events occurs: 1. When power is first applied, verify that the Power LED is lit. 2. After about two minutes, verify the following: • The Power LED is solid green. • The Internet LED is solid or blinking green. • The WiFi LED is solid or blinking green.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the LED stays blinking green or is blinking green at any other time, this indicates a problem with the access point/router. In that situation, do the following: • Restart the access point/router to see if the access point/router recovers. • If the access point/router does not recover, press and hold the Reset button on the back to return the access point/router to its factory default settings.
AC2000 802.11ac Wireless Access Point/Router WAC124 the first time on page 23. In access point mode, do not connect the cable directly to a modem. • Make sure that power is turned on to the connected network router and that the network router is connected to the Internet. • If the network router does not function as a DHCP server (this is very unusual), make sure that another DHCP server in the network is active.
AC2000 802.11ac Wireless Access Point/Router WAC124 cable between the computer and the LAN port on the access point/router. (Do not connect your computer to the yellow Internet port on the access point/router.) - Connect over WiFi. If you are using a WiFi-enabled computer or mobile device, check the WiFi connection between the computer or device and the access point/router. The access point/router’s default SSID is NETGEAR-1 and the default passphrase is sharedsecret.
AC2000 802.11ac Wireless Access Point/Router WAC124 Access point mode: You cannot log in to the access point/router If the access point/router is in access point mode and you are unable to log in to its local browser interface from a computer or mobile device, check the following: • Make sure that the yellow Internet port on the access point/router is connected to the Internet through an existing router in your network. The Internet LED must blink green or light solid green.
AC2000 802.11ac Wireless Access Point/Router WAC124 • Make sure that the IP address of your computer or mobile device is on the correct LAN subnet. Most computers and mobile devices function as DHCP clients. If your computer or mobile device does not, enable its DHCP client so that is can obtain an IP address automatically using DHCP. The LAN subnet to which your computer or device connects depends on the type of connection to the access point/router: - Directly connected.
AC2000 802.11ac Wireless Access Point/Router WAC124 To check the Internet WAN IP address: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field. If you are not connected to the access point/router network but to the same network as the access point/router, enter the IP address that is assigned to the access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 If the access point/router is still unable to obtain an IP address from the ISP, the problem might be one of the following: • Your ISP might require a login program. Ask your ISP whether they require PPP over Ethernet (PPPoE) or some other type of login. • If your ISP requires a login, the login name and password might be set incorrectly. • Your ISP might check for your computer’s host name.
AC2000 802.11ac Wireless Access Point/Router WAC124 Router mode: Check or manually start the PPPoE connection If the access point/router is in router mode and your ISP uses a PPPoE connection, you can check or manually start the PPPoE connection. To check or manually start the PPPoE connection: 1. Open a web browser from a computer or mobile device that is connected to the access point/router network. 2. Enter http://www.routerlogin.net in the address field.
AC2000 802.
AC2000 802.11ac Wireless Access Point/Router WAC124 default SSID is NETGEAR-1 and default WiFi pasphrase is sharedsecret. This information is also on the access point/router label (see Access point/router label on page 15). • Does the WiFi device that you are using find your WiFi network? If not, check the WiFi LED on the top of the access point/router. If the WiFi LED is off, both WiFi radios are probably off too.
AC2000 802.11ac Wireless Access Point/Router WAC124 Troubleshoot your network using the ping utility of your computer Most network devices and routers contain a ping utility that sends an echo request packet to the designated device. The device then responds with an echo reply. You can easily troubleshoot a network using the ping utility in your computer.
AC2000 802.11ac Wireless Access Point/Router WAC124 Verify that the Ethernet card driver software and TCP/IP software are both installed and configured on your computer. Verify that the IP addresses and LAN subnet for the access point/router and your computer are correct. For more information, see Check the DHCP network settings of your computer or mobile device on page 248.
A Factory Default Settings and Technical Specifications This appendix includes the following sections: • • Factory default settings Technical specifications 262
AC2000 802.11ac Wireless Access Point/Router WAC124 Factory default settings You can reset the access point/router to the factory default settings, which are shown in the following table. For more information about resetting the access point/router to its factory settings, see Return the access point/router to its factory default settings on page 142. Table 3. WAC124 access point/router factory default settings Feature Default Setting Login to the local browser interface Login URL www.routerlogin.
AC2000 802.11ac Wireless Access Point/Router WAC124 Table 3. WAC124 access point/router factory default settings (Continued) Feature Default Setting Country/region North America: United States Europe: Europe Other continents: Varies by region Channel Auto. The available channels depend on the region. WiFi throughput mode Up to 300 Mbps at 2.4 GHz Up to 1733 Mbps at 5 GHz Throughput can vary.
AC2000 802.11ac Wireless Access Point/Router WAC124 Table 3.
AC2000 802.11ac Wireless Access Point/Router WAC124 Table 4. Specifications of the WAC124 access point/router (Continued) Feature Description Weight 0.
B Position and Wall-Mount the Access Point/Router This appendix includes the following sections: • • Position the access point/router Wall-mount the access point/router 267
AC2000 802.11ac Wireless Access Point/Router WAC124 Position the access point/router Before you install the access point/router, consider how you will position the access point/router. The access point/router lets you access your network anywhere within the operating range of your WiFi network. However, the operating distance or range of your WiFi connection can vary significantly depending on the physical placement of your access point/router.
AC2000 802.11ac Wireless Access Point/Router WAC124 If you are using adjacent access points, consider to use different radio frequency channels to reduce interference (see Change the channel for a radio on page 217). Wall-mount the access point/router Wall-mounting holes are on the bottom of the access point/router. The distance between the holes is 4.13 in. (105 mm). We recommend that you use pan head Phillips wood screws, No. 6 type screw, 1 inch long (U.S.) or 3.5 x 20 mm (diameter x length, European).
