User Manual Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610, indoor model WAX610Y, outdoor model October 2020 202-12099-02 NETGEAR, Inc. 350 E.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
Contents Chapter 1 Introduction About NETGEAR Insight......................................................................9 Additional documentation...................................................................9 Chapter 2 Hardware Overview Indoor Model WAX610 Unpack indoor model WAX610.......................................................11 Top panel with LEDs, indoor model WAX610................................11 Hardware interfaces indoor model WAX610..................................
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Chapter 5 Install the Access Point in an Insight Instant Mesh WiFi Network What are a root access point and an extender access point?......50 What is an Insight Instant Mesh WiFi network?...............................52 Requirements for placing an extender access point in a mesh WiFi network................................................................................................
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Set up an external captive portal for a WiFi network...................104 Register and configure Facebook Wi-Fi for the access point.....107 Set up a Facebook Wi-Fi captive portal for a WiFi network........110 Unregister the access point from Facebook Wi-Fi.......................111 Chapter 9 Manage Access and Security Block specific URLs and keywords for Internet access................114 Manage user accounts..................
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Manually download firmware and upgrade the access point.160 Revert to the backup firmware...................................................162 Use an SFTP server to upgrade the access point....................163 Manage the configuration file of the access point.......................164 Back up the access point configuration....................................164 Restore the access point configuration..........................
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Troubleshoot with the LEDs............................................................220 Power/Cloud LED remains off....................................................221 Power/Cloud LED remains solid amber...................................222 Power/Cloud LED is blinking amber slowly, continuously.....222 The access point functions as a PoE PD and the Power/Cloud LED remains solid amber........................................
1 Introduction This manual is for the following NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point models: • WAX610. NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point for indoor use. • WAX610Y. NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point for outdoor use. Models WAX610 and WAX610Y, in this manual referred to as the access point, support IEEE 802.11ax, four streams of WiFi 6, and dual-band concurrent operation at 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y About NETGEAR Insight The access point supports the NETGEAR Insight app, which lets you set up and manage the access point from your iOS or Android mobile device and connects to the Insight cloud-based management platform. For Insight Premium or Insight Pro subscribers, the access point also supports the Insight Cloud portal, which is the website that provides access to the Insight cloud-based management platform.
2 Hardware Overview Indoor Model WAX610 The NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point Model WAX610 is an indoor access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Unpack indoor model WAX610 The package contains the following items: • WAX610 access point • Mounting bracket with screw holes for mounting to a solid ceiling or 15/16 in. (23.8 mm) T-bar • Mounting bracket without screw holes for mounting to a 9/16 in. (14.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 1. LED descriptions indoor model WAX610 LED Icon Color Power/Cloud LED Description Solid amber initially and then blinking amber slowly. The access point is starting or in the process of getting an IP address. Solid green. The access point started up and functions either as a standalone access point or as an Insight discovered access point that is not connected to the Insight cloud-based management platform.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 1. LED descriptions indoor model WAX610 (Continued) LED Icon Color 2.4G WLAN LED Description Solid green. The 2.4 GHz WiFi radio is on but no clients are connected. Solid blue. One or more WLAN clients are connected to the 2.4 GHz WiFi radio. Blinking blue. Traffic is detected on the 2.4 GHz WiFi radio. Off. The 2.4 GHz WiFi radio is off. 5G WLAN LED Solid green.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Hardware interfaces indoor model WAX610 The bottom panel of the access point has a LAN/PoE+ port, Reset button, and DC power connector for an optional power adapter. Figure 2. Hardware interfaces of indoor model WAX610 The bottom panel contains the following components: • Reset button. You can use the Reset button to restart the access point or to reset the access point to its factory default settings.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • LAN/PoE+ port. You can use the LAN/PoE+ Gigabit Ethernet RJ-45 LAN port to connect the access point to a PoE+ switch, or if you use an optional power adapter, to a non-PoE switch. The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps when connected to 2.5 Gbps equipment. Your Internet connection, modem, and switch all need to support a speed of 2.5 Gbps.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Safety instructions and warnings for an indoor access point Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions: • This product is designed for indoor use only in a temperature-controlled and humidity-controlled environment.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Do not spill food or liquids on your product components, and never operate the product in a wet environment. If the product gets wet, see the appropriate section in your troubleshooting guide, or contact your trained service provider. • Do not push any objects into the openings of your product. Doing so can cause fire or electric shock by shorting out interior components. • Use the product only with approved equipment.
3 Hardware Overview Outdoor Model WAX610Y The NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point Model WAX610Y is an outdoor access point. Tems of Use: This device must be professionally installed. It is the installer’s responsibility to follow local country regulations including operations within legal frequency channels, output power and DFS requirements. Vendor or Reseller or Distributor is not responsible for illegal wireless operations.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Unpack model outdoor model WAX610Y The package contains the following items: • WAX610Y access point • Pole mounting strap • Wall-mount screws and anchors • Screw placement guide • Installation guide Note: A power adapter is not supported for this model. You power up the access point by connecting it to a PoE+ switch.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 2. LED descriptions outdoor model WAX610Y LED Icon Color Power/Cloud LED Description Solid amber initially and then blinking amber slowly. The access point is starting or in the process of getting an IP address. Solid green. The access point started up and functions either as a standalone access point or as an Insight discovered access point that is not connected to the Insight cloud-based management platform.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 2. LED descriptions outdoor model WAX610Y (Continued) LED Icon Color 5G WLAN LED Description Solid green. The 5 GHz WiFi radio is on but no clients are connected. Solid blue. One or more WLAN clients are connected to the 5 GHz WiFi radio. Blinking blue. Traffic is detected on the 5 GHz WiFi radio. Off. The 5 GHz WiFi radio is off.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The bottom panel contains the following components: • Reset button. You can use the Reset button to restart the access point or to reset the access point to its factory default settings. To restart the access point, press the Reset button for about two seconds. Pressing the Reset for 10 seconds or longer resets the access point to factory default settings.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Safety instructions and warnings for an outdoor access point Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions: • This product is designed for outdoor use.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Do not paint the product. • Do not push any objects into the openings of your product. Doing so can cause fire or electric shock by shorting out interior components. • Use the product only with approved equipment. • If applicable to your product, allow the product to cool before removing covers or touching internal components.
4 Install the Access Point in Your Network and Access It for Initial Configuration This chapter describes how you can install and access the access point in your network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Position your access point for best performance Before you install and mount your access point as described in the installation guide, consider how you can position the access point for best performance. The access point lets you access your network anywhere within the operating range of your WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y - Aluminum studs - Fish tanks (indoor model WAX610 only) - Mirrors (indoor model WAX610 only) - Brick - Concrete If you are using adjacent access points, use different radio frequency channels to reduce interference. Set up and connect the access point to your network The procedure that you use to set up and connect the access point to your network depends on the model.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Figure 7. Set up model WAX610 with a PoE+ connection to your network To set up the access point with an Ethernet connection to your network: 1. Connect an Ethernet cable to the LAN/PoE+ port on the access point. 2. Connect the other end of the Ethernet cable to a port on a switch that is connected to your network and to the Internet. If you use a PoE+ connection, the port must be a PoE+ port on a PoE+ switch.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y you use a PoE+ switch that is located indoors, you must install a PoE+ Ethernet surge protector on the cable from the switch to the access point located outdoors. Note: Model WAX610Y does not provide a power connector, nor requires a power adapter. You power up this model only by connecting an Ethernet cable to a PoE+ switch. The access point LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The access point requires 802.3at (PoE+) input. For optimal functioning, make sure that you use an 802.3at (PoE+) switch and not an 802.3af (PoE) switch. While the access point is starting or in the process of getting an IP address from a DHCP server (or router functioning as a DHCP server) in your network, the Power/Cloud LED initially lights solid amber and then blinks amber slowly.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Connect over WiFi using the NETGEAR Insight app You can install the NETGEAR Insight app on an iOS or Android mobile device and set up the access point (and perform many other tasks as well). IMPORTANT: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud portal, the admin password for the access point changes.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. To use the Insight app to configure and manage the access point, tap the access point and follow the prompts to register the access point and add it to an Insight network location. Connect over the Internet using the NETGEAR Insight Cloud portal The Insight Cloud portal is available for Insight Premium or Insight Pro subscribers.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Connect over WiFi to the local browser UI for initial configuration This section describes how to connect to the access point for the first time over WiFi using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight app) and complete the initial configuration. Note: The figures in this section show model WAX610. If you use model WAX610Y, the local browser UI shows model WAX610Y.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y pop-up window displays, click the Visit Website button. If another pop-up window displays to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button. • Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure message, click the ADVANCED button. Then, click the Add Exception button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window displays. After you log in, the Dashboard page displays. 6. Enter the settings that are described in the following table. Setting Description Country/Region From the menu, select the country and region in which the access point is operating.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description SSID You cannot use the default SSID for regular operation. The default SSID is for setup only. Enter a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). Authentication From the menu, select one of the following authentication types for the WiFi network: • Open.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 11. Enter the access point user name and password. The user name is admin. The password is the one that you just defined on the Day Zero Easy Setup page. The user name and password are case-sensitive. The Dashboard page displays. You can now customize the access point settings for your network environment.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. If your browser displays a security message and does not let you proceed, do one of the following: • Google Chrome. If Google Chrome displays a Your connection is not private message, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe) link, in which x.x.x.x represents the IP address of the switch. • Apple Safari.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window displays. After you log in, the Dashboard page displays. 6. Enter the settings that are described in the following table.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description AP Name As an option, enter a new name for the access point. The name must contain alphanumeric characters, must contain at least one alphabetical character, cannot be longer than 15 characters, and can contain hyphens but cannot start or end with a hyphen.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you specified a static IP address, save the IP address information because you must enter the IP address when you log in again. If you changed the default country, the access point restarts. Note: Do not close the page! After a short period, the Dashboard page displays automatically. If the Dashboard page does not display, for example, because you assigned a static IP address, see the next step.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Configure indoor model WAX610 offline using a directly connected computer Note: This procedure does not apply to outdoor model WAX610Y because it requires a PoE+ connection to a PoE+ switch. (A directly connected computer cannot provide PoE+ to the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y IMPORTANT: If your browser does not display the Day Zero login page, see the following step. 5. If your browser displays a security message and does not let you proceed, do one of the following: • Google Chrome. If Google Chrome displays a Your connection is not private message, click the ADVANCED link. Then, click the Proceed to 192.168.0.100 (unsafe) link. • Apple Safari.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window displays. After you log in, the Dashboard page displays. 8. Enter the settings that are described in the following table.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description AP Name As an option, enter a new name for the access point. The name must contain alphanumeric characters, must contain at least one alphabetical character, cannot be longer than 15 characters, and can contain hyphens but cannot start or end with a hyphen.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you specified a static IP address, save the IP address information because you must enter the IP address when you log in again. You are disconnected from the access point. If you changed the default country, the access point restarts. 10. After a few minutes, if the login window does not display automatically, enter 192.168.0.100 in the address bar of your browser.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure message, click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that displays, click the Confirm Security Exception button. • Microsoft Internet Explore.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Dashboard page displays various panes that let you see the status of your access point at a glance. For more information about the Dashboard page and its various panes, see Monitor the Access Point and the Network on page 176.
5 Install the Access Point in an Insight Instant Mesh WiFi Network In addition to functioning as a regular standalone access point, the access point can function in an Insight Instant Mesh WiFi network as either a root access point or an extender access point. This chapter describes how you can use the NETGEAR Insight app to connect the access point to a root access point and let it function as an extender access point in an Insight Instant Mesh WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y What are a root access point and an extender access point? Both model WAX610 and WAX610Y can function in an Insight Instant Mesh WiFi network as a root access point, while model WAX610 can also function as an extender access point: • Root access point. A mesh-capable access point that is set up with a wired connection to your network and functions as a gateway to another mesh-capable access point that functions as an extender.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 1 2 4 3 3 5 Figure 9. Mesh network with an extender access point and a wired root access point Number or Icon and Description 1 A root access point that is connected over Ethernet to a network switch. 2 An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point. If model WAX610 functions as an extender, it must be powered by a power adapter rather than by PoE.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y What is an Insight Instant Mesh WiFi network? A mesh WiFi network consists of at least one mesh-capable root access point and one or more extender access points that connect to the root access point over WiFi (see What are a root access point and an extender access point? on page 50). The root access point is connected over Ethernet to a router or Internet gateway and provides Internet access to its extender access points.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Requirements for placing an extender access point in a mesh WiFi network The following are the requirements for placing an extender access point in an Insight Instant Mesh WiFi network: • The existing WiFi network must include at least one mesh-capable access point that runs the latest firmware version. On the root access point, use one Ethernet port for the connection to your network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network Before you can add the access point to an Insight Instant Mesh WiFi network, you must install the NETGEAR Insight app on an iOS or Android mobile device. For more information about the Insight app, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 1 2 4 3 3 5 Figure 10. Connect the extender access point to a wired root access point Number or Icon and Description 1 A root access point that is connected over Ethernet to a network switch. 2 An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point. If model WAX610 functions as an extender, it must be powered by a power adapter rather than by PoE.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y to the 5 GHz band as the preferred band for its backhaul connection. Using the NETGEAR Insight app, you can change the preferred band for the backhaul connection. To use the NETGEAR Insight app to connect the extender access point to a root access point in an existing WiFi network: 1. For a reliable WiFi connection, place the extender access point less than 25 feet (7.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: The initial connection and configuration process might take up to 10 minutes. The extender access point might restart during the configuration process. 6. Wait for the extender access point to go through the initial connection and configuration process and for the Power/Cloud LED to stop blinking amber, green, and blue and to light solid blue.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Connect over the Internet using the NETGEAR Insight Cloud portal The NETGEAR Insight Cloud portal is available for Insight Premium and Insight Pro subscribers. After you install the access point in an Insight Instant Mesh WiFi network, you can use the Insight Cloud portal to configure, manage, and monitor the access point.
6 Manage the Basic WiFi Features This chapter describes how you can manage the basic WiFi settings of the access point. The access point can support eight WiFi networks, each with its own unique WiFi settings, including WiFi security. Tip: If you want to change the settings of the access point’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Set up an open or secure WiFi network The access point provides one default SSID that is enabled by default and that broadcasts on the 2.4 GHz band and the 5 GHz band. This is the SSID that you were required to rename when you logged in to the access point for the first time. You can add more SSIDs: The access point can support a total of eight SSIDs. The access point can simultaneously support the 2.4 GHz band for 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Click the + button to the left of Add SSID. The previous figure shows SSID2 as an example. 6. Specify the WiFi network name (SSID), select whether the SSID is broadcast, and specify the VLAN ID as described in the following table. Setting Description Wireless The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a maximum Network Name of 32 characters.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Specify the WiFi security by selecting an option from the Authentication menu and, if applicable, by specifying a passphrase in the Passphrase field or selecting an option from the Encryption menu, as described in the following table. Setting Description Open A legacy open WiFi network does not provide any security. Any WiFi device can join the network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description WPA3 This option is the most secure personal authentication option. WPA3 uses SAE encryption Personal and enables only WiFi devices that support WPA3 to join the VAP. If you select this option, 802.11w (PMF) is automatically set to mandatory (see Step 9). WPA3 provides a secure connection but some legacy WiFi devices do not detect WPA3 and support only WPA2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 9. Optionally, enable 802.11w Protected Management Frames (PMF), select a single radio band only, enable band steering with 802.11k radio resource management (RRM) and 802.11v WiFi network management, or do all of this, as described in the following table. Setting Description 802.11w (PMF) Protected Management Frames (PMF), according to the 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 11. Configure the client isolation, URL tracking, and DHCP Offer message settings as described in the following table. Setting Description Wireless Client By default, client isolation is disabled for the VAP, and the Disable radio button is selected. Isolation To block communication between WiFi clients that are associated with the same SSID or different SSIDs on the access point, select the Enable radio button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 12.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y View or change the settings of a WiFi network You can view or change the settings of the default WiFi network (SSID or VAP) or any custom WiFi network. To view or change the settings of a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you cannot connect over WiFi, check the following: • If your WiFi-enabled computer or mobile device is already connected to another WiFi network in your area, disconnect it from that WiFi network and connect it to the correct WiFi network. Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Remove a WiFi network You can remove a custom WiFi network (SSID or VAP) that you no longer need. You cannot remove the default WiFi network. To remove a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Before you change the authentication and encryption, consider the types of clients that must be able to connect to the WiFi network. WPA3 provides a more secure connection than WPA2, but many WiFi devices might not yet detect WPA3 and support only WPA2. Similarly, WPA2 provides a more secure connection than WPA, but some legacy WiFi devices do not detect WPA2 and support only WPA.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Setting Description Open A legacy open WiFi network does not provide any security. Any WiFi device can join the network. We recommend that you do not use a legacy open WiFi network but configure WiFi security. However, a legacy open network might be appropriate for a WiFi hotspot. If you select Open from the Authentication menu, the Enhanced Open check box displays. • Enhanced Open check box cleared.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description WPA3 Personal This option is the most secure personal authentication option. WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP. If you select this option, 802.11w (PMF) is automatically set to mandatory (see Enable or disable PMF for a WiFi network on page 79).
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Hide or broadcast the SSID for a WiFi network By default, a WiFi network (SSID or VAP) broadcasts its network name (also referred to as the SSID) so that WiFi clients can detect the SSID in their scanned network lists. For additional security, you can turn off the SSID broadcast and hide the SSID so that users must know the SSID to be able to join the WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Click the Apply button. Your settings are saved. Enable or disable client isolation for a WiFi network By default, client isolation is disabled for a WiFi network (SSID or VAP), allowing communication between WiFi clients that are associated with the same or different WiFi networks on the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 6. Click the > Advanced tab. The page expands. 7. Under Client Isolation, select one of the following radio buttons: • Disable. Client isolation is disabled for the WiFi network. This is the default setting. • Enable. Client isolation is enabled for the WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y In an environment with multiple access points, 802.11v WiFi network management helps WiFi clients that are roaming to select the best access point. The access point sets the received signal strength indicator (RSSI) threshold automatically. (That is, you cannot configure the RSSI threshold manually.) To enable or disable band steering with 802.11k RRM and 802.11v WiFi network management for a WiFi network: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Change the VLAN ID for a WiFi network The VLAN ID for a WiFi network is not the same as the 802.1Q VLAN ID that is used for the wired network (see Set the 802.1Q VLAN and management VLAN on page 140). CAUTION: Before you change the VLAN ID, be sure that the VLAN is configured on the network switch and the DHCP server and that the access point and its clients can get IP addresses over the new VLAN.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Enable or disable PMF for a WiFi network Protected Management Frames (PMF), according to the 802.11w standard, is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes. This feature is disabled by default, but you can enable it as either optional or mandatory. To enable or disable PMF for a WiFi network: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Click the Apply button. Your settings are saved. Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients that are connected to a WiFi network (SSID or VAP). This feature is disabled by default, but you can enable it. For information about how to view the tracked URLs per SSID or per WiFi client, see View or download tracked URLs on page 190.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Under URL Tracking, select one of the following radio buttons: • Enable. URL Tracking is enabled for the WiFi network. • Disable. URL Tracking is disabled for the WiFi network. 8. Click the Apply button. Your settings are saved.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Click the > Advanced tab. The page expands. 7. Under DHCP Offer Broadcast to Unicast, select one of the following radio buttons: • Enable. The access point forwards DHCP offer messages as unicast packets in the WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To select a MAC ACL for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Your settings are saved. Set bandwidth rate limits for a WiFi network You can set rate limits for the upload and download bandwidths for devices that are connected to a WiFi network. The minimum bandwidth rate is 64 Kbps, the maximum bandwidth rate is 1024 Mbps. You can set one rate for the upload bandwidth and another rate for the download bandwidth.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Select the Rate Limit check box. 8. Specify the values: • Upload. For the upload bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. • Download. For the download bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. 9. Click the Apply button. Your settings are saved.
7 Manage the Basic Radio Features This chapter describes how you can manage the basic radio settings of the access point. For information about the advanced radio settings, see Manage the Advanced Radio Features on page 202. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio feature on the 5 GHz radio, the change affects all WiFi networks that broadcast on the 5 GHz radio.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Manage the basic WiFi settings for the radios The basic WiFi settings for the radios apply to all WiFi networks (VAPs or SSIDs). You can specify the radio settings for the 2.4 GHz and 5 GHz radios individually. To manage the basic WiFi settings for the radios: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Configure the settings as described in the following table. The descriptions in the table apply to both radios, but you can specify the radio settings for the 2.4 GHz and 5 GHz radios individually. Setting Description Turn Radio On By default, the Turn Radio On check box is selected and the radio broadcasts.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description Channel Width From the menu, select the channel width for the radio. Your selection from the Wireless Mode menu determines if you can set the channel width, and if so, which channel widths are available. Use the following guidelines: • A wider channel improves the performance (no or minimal interference and better data rates). • The 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description Output Power From the menu, select the transmission power of the radio. You can select 100%(Max), 50%, 25%, 12.5%, or 4%(Min). The default is 100%(Max). Note: If two or more access points are operating in the same area and on the same channel, interference can occur. In this a situation, you might want to decrease the output power for the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y limited to the maximum speed that is supported by 802.11na (about 450 Mbps). - 11a. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the access point. However, the speed of 802.1ax, 802.11ac, 802.11na clients is limited to the maximum speed that is supported by 802.11a (up to about 54 Mbps). 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To change the channel width for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Change the guard interval for a radio From the menu, select the guard interval, which protects radio transmissions from interference. The WiFi mode (see Change the WiFi mode for a radio on page 91) determines if you can set the guard interval, and if so, which guard intervals are available. For the 11a, 11b, and 11bg WiFi modes, you cannot set the guard interval at all.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Long-800 ns. This option is available in the 11ax, 11ac, 11na, and 11ng modes. In the 11ax WiFi mode, this option is the default setting. • Double Long-1600 ns. This option is available only in the 11ax WiFi mode. • Quadruple Long-3200 ns. This option is available only in the 11ax WiFi mode. 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > Wireless > Basic > Wireless Settings. The Wireless Settings page displays. 5. From the Output Power menu, select 100%(Max), 50%, 25%, 12.5%, or 4%(Min). The default is 100%(Max). 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button. The pop-up window closes and your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic > QoS Settings. 5. Enable or disable the following features for a radio by selecting the applicable Enable or Disable radio buttons: • • Wi-Fi Multimedia (WMM). WiFi Multimedia (WMM) is a subset of the 802.
8 Set Up and Manage a Captive Portal This chapter describes how you can set up and manage a captive portal on the access point. A captive portal is a web page that users see when they attempt to connect to a WiFi network. A captive portal includes a splash page and usually requires some form of authentication for the user. The access point supports three types of captive portals: • Click-through captive portal. A basic portal for which the splash page is stored on the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Set up a click-through captive portal for a WiFi network A click-through captive portal is a basic portal for which the splash page is stored on the access point, that is, it is not an external captive portal. Use a click-through captive portal to welcome or instruct WiFi users and limit their sessions. You can require users to agree to an end user license agreement (EULA) and redirect them a specific website.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. Specify the click-through settings as described in the following table. Setting Description Session Timeout (in Enter the number of minutes from 1 to 1440 after which a WiFi session is terminated min) and a user must log in again. The default is 60 minutes. Redirect URL To redirect a user to a specific website after login, select the Redirect URL check box and enter the URL.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description JPEG/JPG Image To customize the image that is displayed on the captive portal login page, click the (Max 500 KB) Browse button and navigate to and select an image. If you do not customize the image, the default image displays on the captive portal login page. EULA (Max 1 KB) The field includes a default end user license agreement (EULA). You can enter or copy custom text into the field.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Set up an external captive portal for a WiFi network An external captive portal is a portal that is hosted by an external captive portal vendor. That is, this type of portal is not stored on the access point. For an external captive portal, you generally must register your devices with and purchase licenses from the vendor.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. Click the External Captive Portal radio button. 9. Specify the external captive portal settings as described in the following table.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Setting Description Splash Page URL Enter the URL that is provided by the vendor. This URL redirects a user to the splash page on the website that hosts the captive portal. Captive Portal The access point supports two types of external captive portal authentication. These Authentication Type types are mutually exclusive. Web/HTTP.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description Allow HTTPS Select one of the following radio buttons: • Enable. Before authentication occurs, secure HTTP (HTTPS) traffic is allowed to pass through. • Disable. This is the default setting. HTTPS traffic is allowed only after authentication occurs. Walled Garden The walled garden specifies the external applications and sites that a user can access from the captive portal.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To register and configure Facebook Wi-Fi for the access point: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. Log in to the Facebook account with which the Facebook business page is associated. 9. From the Select a Page menu, select the Facebook business page. 10. Select one of the following bypass mode options: • To allow customers to skip check-in, select the Skip check-in link radio button. If you enable this option, users can either check in to the selected Facebook business page or skip the check-in.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y By default, the Allow HTTPS Disable radio button is selected and clients that are connected to the Facebook captive portal cannot establish an HTTPS session until after the captive portal authentication occurs. 15. Click the Apply button. Your settings are saved. Set up a Facebook Wi-Fi captive portal for a WiFi network You can provide customers WiFi access by letting them check in to a Facebook business page.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The page expands. 7. Select the Captive Portal check box. The page adjusts. By default, the Click Through radio button is selected. 8. Select the Facebook Wi-Fi radio button. The page adjusts again because you do not need to specify any further settings on the page. Customers receive WiFi access by checking in to a Facebook business page.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
9 Manage Access and Security This chapter describes how you can manage access and security features and user accounts. The chapter includes the following sections: • • • • • Block specific URLs and keywords for Internet access Manage user accounts Manage local MAC access control lists Manage neighbor AP detection Set up RADIUS servers Note: For information about essential WiFi security (network authentication and encryption), see Set up an open or secure WiFi network on page 60.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Block specific URLs and keywords for Internet access You can set up a blacklist by specifying URLs (web addresses) for which Internet access must be blocked. You can also specify keywords that cause the access point to reject URLs that contain those keywords. To set up a blacklist with URLs and keywords for which Internet access must be blocked: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Select the Enable radio button. 6. Compose the blacklist in the following ways: • Blocked URLs. To add a URL to the blacklist, type or copy the URL in the upper field (to the left of the upper Add button) and click the upper Add button. You can also select one or more URLs from the Popular URL list by selecting the check boxes for the URLS and clicking the << Move button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Manage user accounts User accounts provide either read/write or read-only access to the local browser UI of the access point. You cannot delete the admin user account or change its user name, but you can change its password. You can add accounts for other users, and you can change or delete these accounts.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Click the add user account icon. Additional fields and a menu display. 6. Specify the settings for the new user account: • User Name. Enter a user name. • Password. Enter a password between 8 and 64 characters in length. The password must contain at least one uppercase letter, one lowercase letter, and one number. The following special characters are allowed: !@#$%^&*() • Privilege.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y An ACL takes effect only after you apply it to a WiFi network. For information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 82. You can apply a MAC ACL to more than one WiFi network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you select the Allow radio button, a WiFi device for which you place the MAC address in the ACL is allowed access to the WiFi network, but all other WiFi devices are denied access to the WiFi network. If you select the Deny radio button, a WiFi device for which you place the MAC address in the ACL is denied access to the WiFi network, but all other WiFi devices are allowed access to the WiFi network. 8.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 9. Click the Apply button. Your settings are saved. For more information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 82. WiFi devices in the Trusted Stations table can access the WiFi network to which you apply the ACL. WiFi devices in the Untrusted Stations table cannot access the WiFi network to which you apply the ACL.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > Security > MAC ACL. 5.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you select the Deny radio button, a WiFi device for which you import the MAC address into the ACL is denied access to the WiFi network, but all other WiFi devices are allowed access to the WiFi network. 8. To download a sample of a MAC ACL in the format that is required for importing, click the Download Sample link. 9.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y c. To remove a MAC address from the Untrusted Stations table, select the MAC address and click the Remove button. You can search the Untrusted Stations table. When you remove a device from the Untrusted Stations table, after the access point redetects the device, the device is once again placed in the Available Stations table. 10. Click the Apply button. Your settings are saved.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Enable neighbor access point detection and move access points to the Known AP List The access point can detect neighbor access points (APs) and lets you classify them as known APs. After you enable neighbor AP detection, the access point maintains a list of access points it detects in the area. Initially all detected access points are displayed in the Unknown AP List.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Your settings are saved. Neighbor AP detection is now enabled. 8. From the Detection Policy menu, select the scan method: • Mild. The access point scans for neighbor access points every 15 minutes. This is the default setting. • Moderate. The access point scans for neighbor access points every 5 minutes. • Aggressive. The access point scans for neighbor access points every 1 minute.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 9. To view detected neighbor access points and move them from the Unknown AP List to the Known AP List, do the following: a. Click the Unknown AP List tab. b. If no access points display, click the Refresh button. c. Select the check boxes for the access points that you are familiar with and that you trust. d. Click the << Move to Known AP List button. e. Click the Known AP List tab.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • You must separate entries with a comma. • The file must be in text format (that is, with a .txt or .cfg extension). For information about enabling neighbor AP detection, see Enable neighbor access point detection and move access points to the Known AP List on page 128. To import a list with MAC addresses of known neighbor access points in the Known AP List: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Click the > button to the left of the radio band. 6. To download a sample of an AP list in the format that is required for importing in the Known AP List, click the Download Sample link. 7. Import and compose the Known AP List in the following way: a. Replace or merge the MAC addresses in the import list with the MAC addresses in the Known AP List by selecting one of the following radio buttons: • Replace.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. Click the Apply button. Your settings are saved. Set up RADIUS servers If you use WPA2 Enterprise security or a RADIUS MAC ACL, you must set up RADIUS servers for authentication, accounting, or both authentication and accounting using RADIUS. You must set up primary IPv4 servers and you can set up secondary IPv4 servers.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Dashboard page displays. 4. Select Management > Configuration > Security > RADIUS Settings. 5. For each RADIUS server that you want to set up, configure the following settings: • IPv4 Address. Enter the IPv4 address of the RADIUS server. The access point must be able to reach this IP address. • Port. Enter the number of the UDP port on the access point that is used to access the RADIUS server.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Update Global Key. Select the check box to allow the global key update, and enter the interval in seconds. The check box is selected by default, and the default interval is 1800 seconds (30 minutes). Clear the check box to prevent the global key update. 7. Click the Apply button. Your settings are saved.
10 Manage the Local Area Network and IP Settings This chapter describes how you can manage the local area network (LAN) and IP settings of the access point. The chapter includes the following sections: • • • • • • • • • Disable the DHCP client and specify a fixed IP address Enable the DHCP client Set the 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Disable the DHCP client and specify a fixed IP address By default, the DHCP client of the access point is enabled and the access point receives an IP address from a DHCP server (or a router that functions as a DHCP server) in your network. If your network does not include a DHCP server or you prefer to specify a fixed (static) IP address, disable the DHCP client of the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Select the Disable radio button. The fields are now unmasked. 6. Specify the settings that are described in the following table. Setting Description IP Address IP address in the range that is used by your LAN (usually 255.255.255.0). Subnet Mask The subnet mask must be compatible with your LAN. Gateway IP address of the gateway on your LAN.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To enable the DHCP client: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Set the 802.1Q VLAN and management VLAN The 802.1Q VLAN protocol on the access point logically separates traffic on the same physical (wired) network. This protocol can work with tagged and untagged VLANs, as follows: • Untagged VLAN. The access point sends untagged frames from its Ethernet interface. Incoming untagged frames are assigned to the untagged VLAN. By default, the untagged VLAN is VLAN 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > IP > LAN. 5. To change the 802.1Q VLAN, either clear or select the Untagged VLAN check box: • Untagged VLAN. By default, the Untagged VLAN check box is selected. The access point sends untagged frames from its Ethernet interface. Incoming untagged frames are assigned to the untagged VLAN.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The FQDN must be a domain name that is registered with a Domain Name System (DNS) provider. The following are the requirements for the FQDN: • The length can be from 1 to 64 characters. • Alphanumeric characters are allowed (a–z and 1–9) • A dot (.) and a hyphen (-) are allowed but the name cannot start with either. An example is myap01_firstfloor_myorganization.com. To specify a FQDN: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > IP > LAN. 5. In the Fully Qualified Domain Name field, specify the FQDN. 6. Click the Apply button. Your settings are saved. The access point attempts to resolve the FDQN to an IP address. Enable or disable Spanning Tree Protocol For locations where multiple access points are active and redundant network paths might be present, Spanning Tree Protocol (STP) can prevent network loops.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5. Select a Network Integrity Check radio button: • Enable. The network integrity check function is enabled. • Disable. The network integrity check function is disabled.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5. Select an IGMP Snooping radio button: • Enable. IGMP snooping is enabled. • Disable. IGMP snooping is disabled. This is the default setting. 6. Click the Apply button. Your settings are saved. Enable or disable Ethernet LLDP Link Layer Discovery Protocol (LLDP), as specified in IEEE 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > System > Advanced > Ethernet LLDP. The Ethernet LLDP page displays. 5. Select a radio button: • Enable. LLDP is enabled. This is the default setting. • Disable. LLDP is disabled. CAUTION: If the access point receives power from a PoE switch and you disable LLDP, power to the access point might be turned off after you click the Apply button. In that case, restart the access point. 6.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The UPnP page displays. 5. Select a radio button: • Enable. UPnP is enabled. This is the default setting. • Disable. UPnP is disabled. 6. Click the Apply button. Your settings are saved.
11 Manage and Maintain the Access Point This chapter describes how you can manage and maintain the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Change the management mode to NETGEAR Insight or Web-browser The access point can function in either of the following management modes: • NETGEAR Insight mode. You can manage the access point remotely from a mobile device on which the NETGEAR Insight app is installed or, if you are an Insight Premium or Insight Pro subscriber, through the Insight Cloud portal. The NETGEAR Insight mode is the default setting.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Change the country or region of operation You can change the country or region in which the access point operates. Note the following: • Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The pop-up window closes and your settings are saved. The access point restarts with the default WiFi and radio settings that are specific to the selected country or region. Change the admin user account password This admin user account password is the password that you use to log in to the local browser UI of the access point with the user name admin. (It is not the passphrase that you use for WiFi access.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Click the Apply button. Your settings are saved. The next time that you log in to the access point, you must use the new password. If you forget the new password, you must reset the access point to factory default settings. Doing so restores the password to the default password. Change the system name The system name (also referred to as access point name, or AP name) is a unique NetBIOS name for the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • The name cannot start or end with a hyphen. • The name must contain at least one alphabetical character. 6. Click the Apply button. Your settings are saved. Specify a custom NTP server By default, the access point receives its time from a default NETGEAR Network Time Protocol (NTP) server, but you can also specify a custom NTP server. To specify a custom NTP server: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y By default, the Enable radio button is selected and the access point receives its time from a default NETGEAR NTP server. 5. Select the Use Custom NTP Server check box. 6. Take one of the following actions: • Enter the host name of the NTP server. By default, the Hostname radio button is selected. • Select the IP address radio button and enter the IP address of the NTP server. 7. Click the Apply button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > System > Basic > Time. The page that displays lets you change the time settings. 5. From the Time Zone menu, select the time zone for the area in which the access point operates. 6. Click the Apply button. Your settings are saved. When the access point connects over the Internet to an NTP server, the date and time that display on the page are adjusted according to your settings.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > System > Advanced > Syslog. 5. Specify the IP address and port number for the syslog server: • Syslog Server IP Address. Enter the IP address of the syslog server on your network. • Port Number. Enter the port number at which the syslog can be reached. By default, the port number is 514. 6. To enable the syslog server function, select the Enable Syslog check box. 7.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Check for new firmware and upgrade the access point For you to check for new firmware, the access point must be connected to the Internet. To check for new firmware and upgrade your access point: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 7. Verify that the access point runs the new firmware version by logging back in to the access point. The firmware version is displayed on the Dashboard page. 8. Read the new firmware release notes to determine whether you must reconfigure the access point after upgrading.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 6. Select Management > Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade page displays. 7. Make sure that Local is selected from the Upgrade Options menu. Local is the default selection. 8.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Revert to the backup firmware After you upgrade the access point to new firmware, the old firmware is saved as backup firmware so that you can revert to it.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y IMPORTANT: When you revert to the backup firmware, the configuration of the access point is reset (cleared) with the exception of the IP address, access point name, and password for the local browser UI. The access point restarts and broadcasts SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal digits of the access point’s MAC address. The MAC address is listed on the product label.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade page displays. 5. From the Upgrade Options menu, select SFTP. 6. Specify the following server settings: • Firmware File. The name of the access point firmware file on the SFTP server.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: The backup file is saved in a binary format so that it is protected and cannot be opened by a regular application. To back up the access point’s configuration settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The name of the backup file is WAX6XX-NETGEARYYYYYY-dd-mm-yy_hh-mm-ss-config.tar, in which 6XX represents the model number, YYYYYY represents the last six hexadecimal digits of the access point’s MAC address (or the system name), dd is the date, mm is the month, yy is the year, hh is the hour (in 24-hour format), mm is the minutes, and ss is the seconds.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y the access point’s MAC address (or the system name), dd is the date, mm is the month, yy is the year, hh is the hour (in 24-hour format), mm is the minutes, and ss is the seconds. An example of a name of a backup file is WAX6XX-NETGEAR1A2B3C-03-06-20_16-45-35-config.tar. 6. Click the Restore button. A pop-up window displays. 7. Enter the password that you specified when you saved the backup file, and click the Continue button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Select Management > Maintenance > Reset > Reboot AP. The Reboot AP page displays. 5. Click the Enable Scheduled Reboot button so that the button displays blue. The scheduling controls display. 6.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y After you reset the access point to factory default settings, the password for the admin user name is password, the LAN IP address is 192.168.0.100, the access point’s DHCP client is enabled, the default SSID is shown in the format NETGEARxxxxxx-SETUP, and the default password for WiFi access is sharedsecret. For an extensive list of factory default settings, see Factory default settings on page 246.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: If you hold the Reset button for less than 10 seconds and then release it, the access point reboots rather than returns to its factory default settings. 3. Release the Reset button. The configuration is reset to factory default settings. When the reset is complete, the access point reboots. This process takes about two minutes. WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Release the Reset button. The configuration is reset to factory default settings. When the reset is complete, the access point reboots. This process takes about two minutes. WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset. Do not turn off the access point. Wait until the access point finishes restarting and the Power/Cloud LED turns solid green or solid blue.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The pop-up windows closes and the configuration is reset to factory default settings. When the reset is complete, the access point reboots. This process takes about two minutes. WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset. For example, do not close the browser, click a link, or load a new page. Do not turn off the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Select the SNMP Enable radio button. By default, SNMP is disabled. 6. Specify the following settings: • Read-Only Community Name. The community string that allows the SNMP manager to read the access point’s MIB objects. The default is public. • Read-Write Community Name. The community string that allows the SNMP manager to read and write the access point’s MIB objects. The default is private. • Trap Community Name.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To enable or disable the LEDs: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
12 Monitor the Access Point and the Network This chapter describes how you can monitor the access point and the network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y View the access point Internet, IP, and system settings To view the access point, Internet, IP, and system settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • • Connection Status Information pane. This pane is in the top, left corner of the Dashboard (if the page width on your device is sufficient; otherwise, it might be elsewhere) and displays the following: - Status of the connection to the NETGEAR Insight cloud-based management platform, if any. - Status of the Internet connection. - Functioning mode of the access point, which is always Access Point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The page shows four sections: • System Information section. The following settings are displayed: - System Name. The access point NetBIOS name. - System Mode. The access point system mode (AP). - LAN MAC Address. The MAC address of the LAN Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz. The MAC address of 2.4 GHz WiFi interface (radio) of the access point. - Wireless MAC Address for 5 GHz.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y - Current Time. The current system time of the access point. - Uptime. The time since the access point was last restarted. • AP Interface Status. A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use. • IPv4 Settings section. The following settings are displayed: • - IPv4 Address. The IPv4 address of the access point. - Subnet Mask.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31. The Dashboard page displays. 4. Locate the Radio Information pane at the top, right corner of the Dashboard page (if the page width on your device is sufficient; otherwise, it might be elsewhere). The following settings are displayed: • Radio status (If the 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 6. To view more detailed information, select Management > Monitoring > System. The page shows four sections: • System Information section. The following settings are displayed: - System Name. The access point NetBIOS name. - System Mode. The access point system mode (AP). - LAN MAC Address. The MAC address of the LAN Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz. The MAC address of 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y - Serial Number. The serial number of the access point. - Current Time. The current system time of the access point. - Uptime. The time since the access point was last restarted. • AP Interface Status. A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use. • IPv4 Settings section. The following settings are displayed: • - IPv4 Address.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y At the top of the page, for each radio band, the page displays the total number of known access points. 7. To display the most recent known access points, click the Refresh button. View client distribution, connected clients, and client trends To view the clients that are connected to the access point over WiFi: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Client Distribution pane shows the types of clients (Windows, Mac, iOS, Android, Linux, and other operating systems) and how these clients are distributed over the networks. (By default, the Network button is selected.) The Recent Clients pane shows the top 5 recently connected clients list. 5. To see how the clients are distributed over the radios, click the Radio button in the Client Distribution pane.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 11. To view more information about currently connected WiFi, select Management > Monitoring > Connected Clients. For each radio, the page displays the number of connected clients and the maximum number of supported clients. For each radio and each WiFi client, the page displays the SSID, MAC address, IP address, host name, operating system (OS), and WiFi mode. 12.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Device Type. The type of device that the client is. • Mode. The WiFi mode of the connection. • Status. The security status of the connection. • Idle Time. The time that the client remained idle. • Assoc Time Stamp. The time that is associated with the information on the Detailed Client Information page. 13. If you opened the Detailed Client Information page, click the Close button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y By default, the Clients button is selected. 5. To view traffic information, do the following: a. Click the Traffic button. The graph shows the information for Ethernet (wired LAN) traffic, total WiFi traffic, WiFi traffic for the 2.4 GHz radio, and WiFi traffic for the 5 GHz radio. b. To view more information, point to a node on one of the lines on the graph. 6. To view channel utilization, do the following: a.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. To view traffic statistics, select Management > Monitoring > Statistics. The page displays the network traffic statistics for both the WiFi and Ethernet interfaces of the access point since the access point started or rebooted. The page also displays the number of clients that are associated with each radio.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 46. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 6. To view URL tracking information by WiFi client, do the following: a. From the menu, select Client. The table shows the MAC addresses of the WiFi clients, each with the client host name, and the first URL of the list of URLs that the client accessed. b. To view all URLs that a WiFi client accessed, click the … link to the right of the first URL. A pop-up window displays all URLs that the WiFi client accessed. c.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To view, save, download, or clear the logs: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Target. The name, IP address, or MAC address of a target device, application, or website, if applicable. 5. To save the logs, do the following: a. Click the Save button. b. Follow the directions of your browser to save the file to your computer. 6. To download the detailed log entries, do the following: a. Click the Download Detailed Logs button.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 31.
13 Set up a WiFi Bridge This chapter describes how you can configure a wireless distribution system (WDS) that consists of point-to-point WiFi bridge connections between two access points. Each WiFi bridge connection requires a WDS profile for which the settings must match on the access points that make up the bridge. A WDS is not the same as a NETGEAR Insight Instant Mesh WiFi network, which requires a root access point (see Install the Access Point in an Insight Instant Mesh WiFi Network on page 49).
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y WiFi base station, WiFi repeater, and WiFi bridge requirements If the access point is connected to the Internet over a wired connection, the access point can function as the WiFi base station for up to four other access points that function as WiFi repeaters. The access point itself can also function as a WiFi repeater if it is connected to another access point that functions as a WiFi base station.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The base station also handles local WiFi and wired traffic. To configure this mode, you must know the MAC address of the 2.4 GHz or 5 GHz radio on the repeater. • WiFi repeater. The repeater sends all traffic from its local WiFi or wired devices to the WiFi base station. Similarly, the repeater receives all traffic for its local WiFi or wired computers from the base station.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To set up a WiFi bridge between two access points: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 8. Configure the WDS profile settings as described in the following table. Setting Description Wireless Network The WiFi network name on which the WDS is established. The default name is Name (SSID) Netgear-WDS-x, in which x is the number of the WDS (1, 2, 3, or 4). Local MAC Address The MAC address of the local WDS radio interface, that is, the MAC address of the local radio on which the WDS is established.
14 Manage the Advanced Radio Features This chapter describes how you can manage the advanced radio features of the access point. For information about the basic radio features, see Manage the Basic Radio Features on page 86. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio feature on the 5 GHz radio, the change affects all WiFi networks that broadcast on the 5 GHz radio.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Manage the advanced WiFi settings for the radios The advanced WiFi settings for the radios apply to all WiFi networks (VAPs or SSIDs). Although these settings work fine for most network environments and it is unlikely that you need to change them, you can change the radio settings, and you can do so for the 2.4 GHz and 5 GHz radios individually.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > Wireless > Advanced. 5. Configure the settings as described in the following table. The descriptions in the table apply to both radios. You can specify the radio settings for the 2.4 GHz and 5 GHz radios individually, but the check box for the 802.11n 256 QAM feature applies to the 2.4 GHz radio only (the feature is always enabled for the 5 GHz radio) and the 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Setting Description Max. Wireless Clients Enter the maximum number of WiFi clients that can simultaneously associate with the radio. The range is from 1 to 200. The default is 200 WiFi clients. RTS Threshold Enter the Request to Send (RTS) threshold. The range is from 256 to 2346. The default (256-2346) is 2346.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y (Continued) Setting Description MU-MIMO By default, the MU-MIMO Enable radio button is selected and multiuser MIMO (MU-MIMO) is enabled. To disable MU-MIMO, select the MU-MIMO Disable radio button. MU-MIMO enables multiple users to receive data from the access point simultaneously using the same channel. With MU-MIMO, the access point can transmit to multiple clients simultaneously using the same channel.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To manage the maximum number of clients for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y By default, multicast and broadcast rate limiting is enabled to improve the overall network performance by limiting the number of packets that are transmitted across the network. By default, the setting is 50 (the maximum possible value), which specifies a maximum rate limit of 50 packets per second. You can lower this number. To manage the broadcast and multicast settings for a radio: 1.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Manage sticky clients During roaming, sticky clients do not change to an access point with a better signal but remain associated with (that is, stick to) their initial access point, even though the quality of the connection to that access point is degraded. Such a situation causes delay for other clients that are associated with that access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Dashboard page displays. 4. Select Management > Configuration > Wireless > Advanced > Load Balancing. The Load Balancing page displays. 5. Either select or clear the Force Sticky Clients To Disassociate check box. Selecting the check box forces sticky clients to disassociate from a radio. Clearing the check box allows sticky clients to remain associated with a radio. 6. Click the Apply button. Your settings are saved.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: If a client is rejected but persistently tries to associate with the access point, the access point grants access to that client. • Load balancing based on the RSSI of the client. Clients with an RSSI that is equal to or higher than the defined minimum are allowed to associate with the access point. Clients with an RSSI below the defined minimum are rejected.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > Wireless > Advanced > Load Balancing. 5. To globally enable load balancing for the radios, select the Load Balancing Mode Enable radio button. The page adjusts and displays a slider for each type of load balancing and each radio. By default, load balancing is disabled. When you enable load balancing, all three types of load balancing are enabled.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y which the radio does not accept the client association. For each radio, the minimum RSSI value is 1, the maximum value is 50, and the default value is 23. 8. Click the Apply button. Your settings are saved. Manage the ARP proxy By default, the ARP proxy is enabled on the access point, allowing it to inspect all ARP broadcast packets for its clients.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Disable. The ARP proxy is disabled. Broadcast traffic on the radios might increase. 6. Click the Apply button. Your settings are saved. Manage the amount of broadcast traffic The access point supports broadcast enhancements that reduce the broadcast traffic on the radios, and therefore on all WiFi networks that you configure on the access point.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Configuration > Wireless > Advanced > Broadcast Enhancements. The Broadcast Enhancements page displays. 5. Select one of the following radio buttons • Enable. The broadcast enhancements are enabled. • Disable. The broadcast enhancements are disabled. This is the default setting. 6. Click the Apply button. Your settings are saved.
15 Diagnostics and Troubleshooting This chapter describes how you can capture WiFi packets and troubleshoot the access point and network.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Perform a ping test You can ping the IP address of a device or network location from the access point and view the results of the ping test. To perform a ping test: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Setting Description Ping Count The number of pings that the access point must send. The default number is 16. Packet Size (in Bytes) The size of each ping packet. The default size is 64 bytes. Ping Interval (in sec) The interval between pings. The default interval is 1 second. Ping Timeout (in sec) The period after which a ping times out. The default period is 60 seconds.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Select Management > Diagnostics > Speed Check. The Internet Speed Check page displays. 5. To view the privacy policy, click the Privacy Policy link. The Privacy Policy pop-up window displays. 6. To close the pop-up window, click the X in the upper right corner. 7. Click the Test Speed button. After a short delay, the page displays the measured latency in ms, download speed in Mbps, and upload speed in Mbps. 8.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: If the access point’s WiFi authentication and encryption is set to WPA3 Personal, make sure that the WiFi adapter device driver is updated to the latest version on your WiFi device. • Make sure that your WiFi device is not too far from the access point or too close. To see if the signal strength improves, move your WiFi device near the access point but at least 6 feet (1.8 meters) away.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • The 2.4G WLAN LED and 5G WLAN LED light solid green. If clients are connected to a radio, the associated WLAN LED lights solid blue. If a radio processes traffic, the associated WLAN LED blinks blue. You can use the LEDs for troubleshooting.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If the error persists, a hardware problem might exist. For recovery instructions or help with a hardware problem, contact technical support at netgear.com/support.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The access point functions as a PoE PD and the Power/Cloud LED remains solid amber When you connect the access point to a power source, the Power/Cloud LED lights solid amber initially, then blinks amber slowly, and finally turns solid green or solid blue, indicating that the startup procedure is complete and the access point is ready.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Make sure that the access point is connected to the Internet and that the Internet connection is good. 4. Make sure that the access point is running the latest firmware version. For more information, see Manage the firmware of the access point on page 158. 5. Disconnect and reconnect the Ethernet cable at the LAN/PoE+ port and wait five minutes to see if the Power/Cloud LED lights solid blue.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Remove the extender access point from your Insight network location and from your Insight account. Then, add the extender access point to your Insight account again and to your Insight network location. 2.4G or 5G WLAN LED is off If the 2.4G WLAN LED or 5G WLAN LED is off, do the following: • • Check to see if a radio is disabled (see Turn a radio on or off on page 90).
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y The Power/Cloud LED on the extender access point lights solid amber. 3. Wait for the extender access point to go through the initial connection and configuration process and for the Power/Cloud LED to stop blinking amber, green, and blue and to light solid blue. Note: The initial connection and configuration process might take up to 10 minutes. The extender access point might restart during the configuration process.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Troubleshoot WiFi connectivity If a WiFi device cannot connect to the access point or the WiFi connectivity is not normal, try to isolate the problem: • Make sure that the WiFi settings in the WiFi device and access point match exactly. For a device that is connected over WiFi, the WiFi network name (SSID) and WiFi security settings of the access point and WiFi device must match exactly.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Troubleshoot Internet browsing If a WiFi device is connected to the access point but unable to load any web pages from the Internet, it might be for one of the following reasons: • The WiFi device might not recognize any DNS server addresses. If you manually entered a DNS address when you set up the access point (that is, the access point uses static IP address settings), restart the WiFi device and verify the DNS address.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y • Make sure that Java, JavaScript, or ActiveX is enabled in your browser. If you are using Internet Explorer, click the Refresh button to be sure that the Java applet is loaded. • Try quitting the browser and launching it again. • Make sure that you are using the correct login information. The user name is admin and the password is the one that you specified. The user name and password are case-sensitive.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 3. Login blockage periods Number of failed attempts Blockage period in minutes 3 5 4 10 5 20 6 40 And so on And so on In addition, the following rules apply to the number of failed login attempts: • If the number of failed login attempts is smaller than the number of allowed retry attempts, the counter for failed login attempts is reset after 30 minutes.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Test the LAN path to your access point You can ping the access point from your computer to verify that the LAN path to your access point is set up correctly. To ping the access point from a Windows-based computer: 1. From the Windows taskbar, click the Start button and find and select Run. 2. In the field provided, enter ping followed by the IP address of the access point, as in this example: ping 192.168.0.100 3.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y If the path is functioning correctly, replies as described in Test the LAN path to your access point on page 231 display. If you do not receive replies, do the following: • Check to see that your computer lists the IP address of the router to which the access point is connected as the default router.
A Mount Indoor Model WAX610 to a Wall or Ceiling The access point package includes wall-mounting and ceiling-mounting components. You can mount the access point to a solid surface (a wall or a ceiling) or to a ceiling with a 9/16 in. (14.3 mm) or 15/16 in. (23.8 mm) T-bar, or you can install the access point freestanding on a flat surface. We recommend that you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Mount indoor model WAX610 to a wall To mount the access point to a wall: 1. The bottom of the access point includes two holes that let you mount the access point on two screws inserted in a wall. 2. Mark the wall where you want to insert the provided anchors and screws, which must be 3.875 in. (98.5 mm) apart. 3. Insert the anchors and screws, but leave about 0.25 in.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Line up the holes on the bottom of the access point with the screws in the wall and mount the access point to the wall. Mount indoor model WAX610 to a solid ceiling To mount the access point to a solid ceiling: 1. Using the anchors and screws provided, attach the 15/16 in. (23.8 mm) bracket with the screw holes to the ceiling. The rectangular protruding part of the bracket must be facing the ceiling. 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Line up the guides on the bottom of the access point with the bracket. 4. Slide the access point into the bracket until it locks in place.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Note: To unlock the access point, push the locking tab toward the ceiling and slide the access point out of the bracket. The following figure shows a side view of the access point attached to the ceiling. The green arrow indicates the locking tab. Mount indoor model WAX610 to a T-bar Depending on the size of the T-bar, use either the 9/16 in. (14.3 mm) or the 15/16 in. (23.8 mm) bracket. Figure 12. 9/16 in. (14.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y To mount the access point to a T-bar: 1. Slide either the 9/16 in. (14.3 mm) or the 15/16 in. (23.8 mm) bracket between the guides on the bottom the access point until it locks in place. The locking tab must be at the front of the access point. 2. Hold the access point upside down. Note: If you can reach behind the T-bar, hold the T-bar with one hand and the access point with your other hand. 3.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 5. Hook the bracket onto the other side of the T-bar until the bracket locks onto the T-bar.
B Mount Outdoor Model WAX610Y to a Wall or Pole The access point package includes wall-mounting and pole-mounting components. You can mount the access point to an outdoor wall. The package includes two screws, two washers, and a paper screw placement guide. You can also mount the access point to a pole. The package includes a pole mounting strap.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Mount outdoor model WAX610Y to a wall To mount the access point to a wall: 1. Locate the two holes for wall mounting on the back of the access point. The arrows in the following figure show the holes. 2. Using the screw placement guide, mark the location for the holes on the wall where you want to mount the access point. The holes must be 3.15 in. (80 mm) apart, center to center. 0 1 2 3 4 5 6 7 8 0 1 2 3 4 5 6 7 8 3.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 4. Insert the anchors into the wall and tighten the screws with a No. 2 Phillips screwdriver. Leave about 0.25 in. (6 mm) of each screw protruding from the wall so that you can insert the screws into the holes on the back of the access point. 5. Line up the holes on the back of the access point with the screws in the wall and mount the access point to the wall.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 3. Insert the strap through one of the openings on the back of the access point. 4. With the strap still open, wrap the strap with the attached access point around the pole. 5. Close the strap but do not tighten it.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y 6. Move the strap with the access point attached to its permanent position. 7. Using the screwdriver, tighten the screw to secure the strap and access point to the pole.
C Factory Default Settings and Technical Specifications This appendix includes the following sections: • • • Factory default settings Technical specifications indoor model WAX610 Technical specifications outdoor model WAX610Y 245
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Factory default settings You can reset the access point to the factory default settings, which are shown in the following table. For more information about resetting the access point to its factory settings, see Return the access point to its factory default settings on page 169. Table 4.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 4. Factory default settings (Continued) Feature Default Setting DHCP client Enabled so that the access point receives an IP address from a DHCP server or router in the network. NTP client Enabled Spanning Tree Protocol Disabled Network integrity check Disabled IGMP snooping Disabled 802.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 4. Factory default settings (Continued) Feature Default Setting Basic radio settings that apply to all WiFi networks (SSIDs or VAPs) Radio broadcast 2.4 GHz radio: Enabled 5 GHz radio: Enabled WiFi mode 2.4 GHz radio: 11ax mode, which also supports 11b, 11bg, and 11na 5 GHz radio: 11ax mode, which also support 11a, 11na, and 11ac Channel width 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 4. Factory default settings (Continued) Feature Default Setting Force sticky clients to disassociate Disabled ARP proxy Disabled Broadcast enhancements Disabled Wireless bridge None configured General security URL filtering Disabled RADIUS servers None configured Neighbor AP detection 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Technical specifications indoor model WAX610 The following table shows the technical specifications for indoor model WAX610. Table 5. Technical specifications indoor model WAX610 Feature Description WiFi modes 2.4 GHz radio: 802.11ax, 802.11ng, 801.11bg, and 802.11b 5 GHz radio: 802.11ax, 802.11ac, 802.11na, and 802.11a The access point supports 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 5. Technical specifications indoor model WAX610 (Continued) Feature Description Hardware interface One RJ-45 LAN/PoE+ Ethernet port that supports 2.5 Gbps, 1 Gbps, 100 Mbps, and 10 Mbps. The port also supports Auto Uplink (Auto MDI-X). Without a power adapter, the LAN/PoE+ port requires 802.3at (PoE+) power but might also function with 802.3af (PoE) power. We recommend that you use 802.3at (PoE+) power.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Technical specifications outdoor model WAX610Y The following table shows the technical specifications for outdoor model WAX610Y. Table 6. Technical specifications outdoor model WAX610Y Feature Description WiFi modes 2.4 GHz radio: 802.11ax, 802.11ng, 801.11bg, and 802.11b 5 GHz radio: 802.11ax, 802.11ac, 802.11na, and 802.11a The access point supports 2.
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y Table 6. Technical specifications outdoor model WAX610Y (Continued) Feature Description Hardware interface One RJ-45 LAN/PoE+ Ethernet port that supports 2.5 Gbps, 1 Gbps, 100 Mbps, and 10 Mbps. The port also supports Auto Uplink (Auto MDI-X). Without a power adapter, the LAN/PoE+ port requires 802.3at (PoE+) power but might also function with 802.3af (PoE) power. We recommend that you use 802.3at (PoE+) power.
