ProSAFE Dual-Band Wireless AC Access Points WAC720 and WAC730 Reference Manual October 2015 202-11607-01 350 East Plumeria Drive San Jose, CA 95134 USA
ProSAFE Dual-Band Wireless AC Access Points WAC720 and WAC730 Support Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Contents Chapter 1 Hardware Setup Unpack Your Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Hardware Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Top Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Chapter 4 Management and Monitoring Enable Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SNMP Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Secure Shell and Telnet Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Upgrade the Wireless Access Point Software . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Verify the Correct Sequence of Events at Start Up. . . . . . . . . . . . . . . . . . . . . 99 No LEDs Are Lit on the Wireless Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . 99 The Active LED or the LAN LED Is Not Lit . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 The WLAN LED Does Not Light Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. 1 Hardware Setup This chapter covers the following topics: • Unpack Your Access Point • Hardware Description For more information about the topics covered in this manual, visit the support website at http://support.netgear.com. Firmware updates with new features and bug fixes are made available from time to time at downloadcenter.netgear.com. Some products can regularly check the site and download new firmware, or you can check for and download new firmware manually.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Unpack Your Access Point Your package contains the following items: • ProSAFE Dual-Band Wireless AC Access Point • Straight-through Category 5 Ethernet cable • Installation guide • Ceiling-mount kit Contact your reseller or customer support in your area if any parts are missing or damaged. Visit the NETGEAR website at support.netgear.com/general/contact/default.aspx for the telephone number of customer support in your area.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 1 2 3 Figure 1. Top panel 4 5 Table 1. Top panel LEDs Item LED 1 Power/Test Off 2 Active 3 4 Description LAN 2.4 Ghz WLAN Power is off. On (green) Power is on. Amber, then blinking green A self-test is running or software is being loaded. During startup, the LED is first steady amber, then goes off, and then blinks green before turning steady green after about 45 seconds.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Rear Panel 1 Figure 2. Read panel 2 4 3 5 The rear panel components of the wireless access point, from left to right, are described in the following list: 1. Cable security lock receptacle for an optional lock. 2. Console port for connecting to an optional console terminal. The port provides an RJ-45 connector and supports the following settings: 115200 K default baud rate, 8 data bits, no (N) parity bit, and one (1) stop bit. 3.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Bottom Panel With Product Label The product label on the bottom of the wireless access point’s enclosure displays factory default settings, regulatory compliance, and other information: : WAC730 272-12481-02 : WAC720 ӗ૱〠 ৼ仁⇥ᰐ㓯 AC ᧕⛩ޕ CMIIT ID: XXXXXXXXXX FCC ID: PY315300321 IC: 4054A-15300321 This device complies with part 15 of the FCC Rules.
2. 2 Initial Setup This chapter covers the following topics: • What You Need Before You Begin • Install and Configure the Wireless Access Point • Test Basic Wireless Connectivity • Mount the Wireless Access Point What You Need Before You Begin You must consider the following guidelines and requirements before you can set up your wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: Failure to follow these guidelines can result in significant performance degradation or inability to connect wirelessly to the wireless access point. For complete performance specifications, see Appendix A, Supplemental Information.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Hardware Requirements for Computers on Your LAN To connect to the wireless access point on your network, an 802.11bg/ng/bgn or 802.11a/a-na-ac wireless adapter must be installed on each computer. We recommend using the wireless access point with computers with the NETGEAR A6210 WiFi USB Adapter installed.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Install and Configure the Wireless Access Point Install and configure your wireless access point in the order of the following sections: 1. Connect the Wireless Access Point to a Computer 2. Log In to the Wireless Access Point 3. Configure Basic General System Settings and Time Settings 4. Configure the IPv4 Settings 5. Configure the Basic Wireless Settings Before installing the wireless access point, make sure that your Ethernet network functions.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Power/Test LED. The Power/Test LED blinks when the wireless access point is first turned on. (To be exact, during startup, the LED is first steady amber, then goes off, and then blinks green.) After about 45 seconds, the LED stays lit (steady green). If after oneminute the Power/Test LED is not lit or is still blinking, check the connections and see if the power outlet is controlled by a wall switch that is turned off. Active LED.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Enter the default user name of admin and the default password of password. 4. Click the Login button. The web browser displays the basic General system settings page under the Configuration tab of the main menu. Web Management Interface The navigation tabs across the top of the web management interface provide access to all the configuration functions of the wireless access point and remain constant.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 To configure basic system settings: 1. Select Configuration > System > Basic > General. 2. Configure the settings as explained in the following table: Setting Description Access Point Name This unique name is the wireless access point NetBIOS name. The name is printed on the rear label of the wireless access point. The default is netgearxxxxxx, in which xxxxxx represents the last 6 digits of the wireless access point MAC address.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Configure the settings as explained in the following table: Setting Description Time Zone Select the time zone to match your location. Current Time This is a nonconfigurable field that displays the current date and time. NTP Client Enable the Network Time Protocol (NTP) client to synchronize the time of the wireless access point with an NTP server. By default the Enable radio button is selected.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Configure the IPv4 settings as explained in the following table: Setting Description DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is enabled. The wireless access point receives its IP address, subnet mask, and default gateway settings automatically from the DHCP server on your network when you connect the wireless access point to your LAN. IP Address Enter the IP address of your wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 network settings for wireless devices to connect to your network. For other wireless features, including wireless security, see Chapter 3, Wireless Configuration and Security. WARNING: If you configure the wireless access point from a wireless computer and you change the wireless access point’s SSID, channel, or wireless security settings, you lose your wireless connection when you click Apply.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 When you change the wireless mode, the Turn Radio On check box is automatically cleared, and all fields, buttons, and menus onpage are masked out. 3. Turn on the radio by selecting the Turn Radio On check box. A pop-up page displays. Note: Under normal conditions, you want the radio to be turned on.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Descriptions 11bg modes only Data Rate Output Power From the menu, select the transmission power of the wireless access point: Full, Half, Quarter, Eighth, Minimum. The default is Full. From the menu, select the transmit data rate of the wireless network. The default setting is Best. For a list of all options that you can select from in 11bg mode, see Factory Default Settings on page 110.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Select the wireless mode in the 5 GHz band: • 11a. 802.11n-compliant devices can connect to the access point because they are backward compatible. • 11a-na-ac. This is the default setting. If you keep the default setting, go to Step 5. When you change the wireless mode, the Turn Radio On check box is automatically cleared, and all fields, buttons, and menus on the page are masked out. 3.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 5. Specify the remaining wireless settings as explained the following table: Setting Descriptions Wireless Network Name Enter a 32-character (maximum) service set identifier (SSID); the characters are (SSID) case-sensitive. The default is NETGEAR_11ac. The SSID assigned to a wireless device needs to match the wireless access point’s SSID for the wireless device to communicate with the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: For information about how to configure advanced wireless settings, see Configure Advanced Wireless Settings on page 76. Test Basic Wireless Connectivity After you have configured the wireless access point, test the computers on your LAN for wireless connectivity before you position and mount the wireless access point at its permanent position. To test for wireless connectivity: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Ceiling Installation The best location for ceiling installation is at the center of your wireless coverage area, and within line of sight of all mobile devices. Make sure that the top (the dome side) of the wireless access point is directed toward the users and not the ceiling. Note: Do not place the wireless access point in a false ceiling space facing up. To install the wireless access point using the ceiling installation kit: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Attach the mounting plate to the ceiling rail. 4. Secure the mounting plate with the included screws.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Wall Installation The best location for wall installation is at the center of your wireless coverage area, and within line of sight of all mobile devices. Make sure that the top (the dome side) of the wireless access point is directed toward the users and not the wall. To install the wireless access point using the wall installation kit: 1. Place the mounting bracket on the wall where you want to mount the access point. 2.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 4. Attach the wall anchors and screws to the wall where you previously marked. Leave a space 1/8 of an inch (3.5 mm) wide between the heads of the screws and the wall. 5. Hang the access point on the screws by inserting the screws into the larger portion of the slot and sliding the unit down.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Initial Setup 30
3. Wireless Configuration and Security 3 This chapter describes how to configure the wireless features of the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 100-foot radius. Such distances can allow for others outside your immediate area to access your network. Unlike wired network data, your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The wireless access point provides highly effective security features that are covered in detail in this chapter.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 WPA uses RADIUS-based 802.1x authentication. For more information, see Configure and Enable Security Profiles on page 35 and Configure WPA With RADIUS and WPA & WPA2 With RADIUS on page 40. WPA-PSK uses a pre-shared key (PSK) for authentication. For more information, see Configure and Enable Security Profiles on page 35 and Configure WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK on page 40. • WPA2 and WPA2-PSK (AES).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 For information about the types of network authentication that the wireless access point supports, see Configure and Enable Security Profiles on page 35. • Data encryption Select the data encryption that you want to use. The available options depend on the network authentication setting (otherwise, the default is None). The data encryption settings are explained in Configure and Enable Security Profiles on page 35.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure and Enable Security Profiles To configure and enable a security profile, you must enable the associated radio: • For 802.11bg/ng/bgn modes, the 2.4 GHz radio needs to be enabled (see Configure 802.11bg/ng/bgn Wireless Settings on page 20). • For 802.11a/a-na-ac modes, the 5 GHz radio needs to be enabled. (see Configure 802.11a/a-na-ac Wireless Settings on page 22). Both radios can function concurrently.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description VLAN The default VLAN ID that is associated with the wireless security profile. WMF Enable The check box that lets you select the wireless security profile so that you can enable it by clicking the Apply button. 2. To configure a wireless security profile, select the corresponding radio button to the left of the wireless security profile.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Specify the settings of the Profile Definition section as explained in the following table: Setting Description Profile Name Enter a unique name of the wireless security profile that makes it easy to recognize the profile. The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on, through NETGEAR-7. You can enter a value of up to 32 alphanumeric characters.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 for your wireless adapter and WPA or WPA2 client software for instructions about how to configure WPA2 settings. Setting Description Network Authentication and Data Encryption Open System This is the default setting. Use an open system without any encryption. See Configure Legacy 802.1X on page 39. Legacy 802.1X Configure the RADIUS server settings. Encryption is not supported. See Configure Legacy 802.1X on page 39.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Wireless Client Security Separation If you enable wireless client security separation by selecting Enable from the menu, the associated wireless clients cannot communicate with each other. By default, Disable is selected from the menu. This feature is intended for hotspots and other public access situations. VLAN ID Enter the VLAN ID to be associated with this wireless security profile. The default VLAN ID is 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure WPA With RADIUS and WPA & WPA2 With RADIUS WPA and WPA & WPA2 security requires RADIUS-based 802.1x authentication, so you also must define RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Server Settings on page 41.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Descriptions Passphrase Enter a passphrase. The passphrase length needs to be between 8 and 63 characters (inclusive). The default passphrase is sharedsecret. You can display the actual passphrase by selecting the Show Passphrase in Clear Text Yes radio button. Show Passphrase Select the Yes radio button to display the actual passphrase in the Passphrase field. The in Clear Text default setting is No.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Specify the settings as explained in the following table: Setting Descriptions RADIUS Server Settings Primary IPv4 Address or Enter the IP address of the primary RADIUS server for Authentication Server IPv6 Address authentication. Port Enter the number of the UDP port on the wireless access point that is used to access the primary RADIUS server for authentication. The default port number is 1812.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Click the Apply button. Your settings are saved.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Restrict Wireless Access by MAC Address For increased security, you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on their MAC addresses. You can restrict access to only trusted computers so that unknown computers cannot connect wirelessly to the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The wireless access point places the MAC addresses of the attached wireless stations in this table. 5. Populate the Trusted Wireless Stations table by one of the following methods: • Select MAC addresses from the Available Wireless Stations table: a. Select individual check boxes for MAC addresses, or select all MAC addresses by selecting the check box in the heading. • b.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Select the Turn Rogue AP Detection On check box. 3. Select a detection policy from the Rogue AP Detection Policy menu: • Mild. The AP scans for unknown APs every 180 seconds. • Moderate. The AP scans for unknown APs every 60 seconds. • Aggressive. The AP scans for unknown APs every 10 seconds. 4. To import a list of known APs, click the Choose File button. The file you import must be a plain-text file with a .txt or .cfg extension.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Specify the settings as explained in the following table: Setting Description Wireless Scheduling Select the Enable radio button to enable the timer. By default, the Disable radio button is selected. Radio Off Schedule Select check boxes to specify the days when you want to schedule the radios to be turned off. By default, Saturday and Sunday are selected. Radio On Time Enter the time that you want the radios to be turned back on.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 • Background. Low priority queue with high throughput. Applications, such as FTP, that are not time-sensitive but require high throughput can use this queue. The WMM Powersave feature saves power for battery-powered equipment by increasing the efficiency and flexibility of data transmission.
4. Management and Monitoring 4 This chapter describes how to use the management and monitoring features of the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Enable Remote Management Both Simple Network Management Protocol (SNMP) and the remote console Secure Shell (SSH) are enabled by default, which allows for remote management of the wireless access point from a client running SNMP management software, as well as from an SSH client. The Telnet console is disabled by default. • SNMP Management • Secure Shell and Telnet Management SNMP Management To set up an SNMP management interface: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Your settings are saved. Secure Shell and Telnet Management To configure remote console features: 1. Select Maintenance > Remote Management > Remote Console. 2. Enable or disable the remote console features: • Secure Shell (SSH). To enable this feature, select the Enable radio button, which is the default setting. Select the Disable button to disable the feature. • Telnet. To enable this feature, select the Enable radio button.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 4. Enter the login name and password. The default login name is admin and the default password is password. After successful login, the > prompt appears, preceded by the name of the wireless access point. In this example, the prompt is netgear334408. 5. Enter the CLI commands that you want to use. You can enter show configuration to display the available CLI commands. The CLI commands are also listed in Appendix B, Command-Line Reference.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: You cannot perform the software upgrade from a computer that is connected to the wireless access point over a wireless link. You must use a computer that is connected to the wireless access point over an Ethernet cable. WARNING: When uploading software to the wireless access point, do not interrupt the web browser by closing the window, clicking a link, or loading a new page.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 During the upgrade process, the wireless access point automatically restarts. The upgrade process typically takes several minutes. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. 7. Verify that the new software file was installed by selecting Monitoring > System. The System page displays (see Figure on page 62).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 • Save the Configuration • Restore the Configuration • Restore the Wireless Access Point to the Factory Default Settings • Reboot the Wireless Access Point Without Restoring the Default Configuration Save the Configuration To save your settings: 1. Select Maintenance > Upgrade > Backup Settings. 2. Click the Backup button.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Click the Browse button and locate the backup configuration file (the file name is config). 3. Click the Apply button to initiate the restoration process. During the restoration process, the wireless access point automatically restarts. The restoration process typically takes about one minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Click the Apply button. The wireless access point is reset to the factory default settings. During the restoration process, the wireless access point automatically restarts. The restoration process typically takes about one minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The reboot process typically takes about one minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. Change the Administrator Password The default password is password. We recommend that you change this password to a more secure password. You cannot change the administrator login name (admin).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 To add a new user account: 1. Select Configuration > System > Advanced > User Accounts. 2. Configure the settings in the upper part of the page as explained in the following table: Setting Description User Name Enter a new user name Password Enter a password between 4 and 12 characters in length. Privilege From the Privilege menu, select Read Write or Read Only. 3. Click the Add button. The user account is added. 4.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Click the Reset Password button. The password is reset to the default password, which is password. 4. Click the Apply button. Your settings are saved. To reset the password for a user account: 1. On the User Accounts page, in the lower part of the page, select a user from the Existing Users menu. 2. Click Reset Password. The password is reset to the default password, which is password. 3. Click Apply to save your settings.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Specify the settings as explained in the following table: Setting Description Enable Syslog Select the check box to enable the syslog option. By default, the syslog option is disabled. Syslog Server IP Address Enter the IP address of the syslog server to which the wireless access point sends the syslog files. Port Number Enter the port number that is configured on the syslog server. The default port number is 514. 2. Click the Apply button.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The following table explains the fields of the System page: Setting Description Access Point Information Access Point Name The NetBIOS name. For information about how to change the default name, see Configure Basic General System Settings and Time Settings on page 16. Ethernet MAC Address The MAC address of the wireless access point’s Ethernet port. Wireless MAC Address for 2.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Serial Number The serial number of the wireless access point. Current Time The current time. For information about how to change the time settings, see Configure Basic General System Settings and Time Settings on page 16. AP Uptime The length of time since the access point became active. Current IPv4 Settings For information about how to change any of these IP settings, see Configure the IPv4 Settings on page 18.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Channel / Frequency The channel that the wireless port is using. For information about how to change the channel and frequency, see Configure 802.11bg/ng/bgn Wireless Settings on page 20 and Configure 802.11a/a-na-ac Wireless Settings on page 22. Rogue AP Detection Enabled indicates that rogue AP detection is enabled. Disabled indicates that it is not.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. To view details of a wireless station, select the corresponding radio button, and then click Details. The Wireless Stations Details page displays. The following table explains the fields of the Wireless Stations Details page: Setting Description MAC Address The MAC address of the wireless station. BSSID The BSSID that the wireless station is using. SSID The SSID that the wireless station is using.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 To display the activity log and save it: 1. Select Monitoring > Logs. 2. Click the Save As button to save the log contents to a file on your computer or to a disk drive. 3. To update the display, click the Refresh button. 4. To clear the log content, click the Clear button. Traffic Statistics The Statistics page displays information for both wired (LAN) and wireless (WLAN) network traffic. To display the Statistics page: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The following table explains the fields of the Statistics page: Setting Description Wired Ethernet Packets The number of packets received and transmitted over the Ethernet connection since the wireless access point was restarted. Bytes The number of bytes received and transmitted over the Ethernet connection since the wireless access point was restarted. Wireless 802.11bgn and Wireless 802.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure Ensemble Mode To configure Ensemble mode on the access point: 1. Select Configuration > Ensemble. 2. To enable Ensemble mode, select the Start radio button. 3. In the Ensemble Name field, enter the ensemble name. 4. Set the access point’s priority in the ensemble. The lowest numbered AP becomes the dominant AP. 5. Click the Apply button to save your settings.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 To manage an Ensemble’s firmware versions: 1. Select Maintenance > Ensemble Upgrade > Firmware Upgrade. 2. Click the Choose File button. 3. Select a firmware file to upload. 4. Select the members of the ensemble that you would like to upgrade. 5. Click the Upgrade button. You can also use a TFTP server to upgrade the firmware by selecting Maintenance > Ensemble Upgrade > Firmware Upgrade TFTP. To manage an ensemble’s password: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Monitor an Ensemble You can monitor the status of an ensemble from the ensemble dashboard. You can also monitor the devices connected to members of the ensemble as well as monitor networks neighboring the ensemble. To monitor the status of the Ensemble: 1. Select Monitor > Ensemble > Access Point. 2. Click the Refresh button. To monitor the devices connected to the Ensemble: 1. Select Monitor > Ensemble > Wireless Stations. 2.
5. Advanced Configuration 5 This chapter describes how to configure the advanced features of the wireless access point. The chapter includes the following sections: • Configure IPv6 Settings • Configure Spanning Tree Protocol, 802.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure IPv6 Settings The wireless access point supports IPv6: • You can manage the wireless access point from an IPv6 address. • The wireless access point can function as an IPv6 DHCP client. Configure the IPv6 Settings Note: For information about how to configure the IPv4 settings, see Configure the IPv4 Settings on page 18.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Configure the IPv6 settings as explained in the following table: Setting Description DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The 802.1Q VLAN protocol on the wireless access point logically separates traffic on the same physical network: • Untagged VLAN. When the wireless access point sends frames that are associated with the untagged VLAN from its Ethernet interface, those frames are untagged. When the wireless access point receives untagged frames over its Ethernet interface, those frames are assigned to the untagged VLAN.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description 802.1Q VLAN Untagged VLAN Select the Untagged VLAN check box to configure one VLAN as an untagged VLAN. By default, the Untagged VLAN check box is selected. Specify a VLAN ID. The default VLAN ID is 1. Management VLAN Specify an ID for the VLAN from which the wireless access point can be managed. The default VLAN ID is 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 3. Click Apply to save your settings. Configure Bonjour Bonjour allows computers on the network to discover the access point more easily after it connects to a LAN that includes a DHCP server. To enable Bonjour: 1. Select Configuration > System > Advanced > Bonjour. 2. Select the Enable radio button. 3. Click the Apply button to save your changes.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Specify the settings as explained in the following table: Setting Description RTS Threshold (0–2347) Enter the Request to Send (RTS) threshold. The default setting is 2347. If the packet size is equal to or less than the RTS threshold, the wireless access point uses the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) mechanism, and the data frame is transmitted immediately after the silence period.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description AMPDU Select the Enable radio button to allow the aggregation of several MAC frames into a single large frame to achieve higher throughput. Enabling the aggregated MAC protocol data unit (A-MPDU) could lead to better network performance. By default, the Enable radio button is selected. RIFS Transmission Select the Enable radio button to allow transmission of successive frames at different transmit powers.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) queue settings work well. For information about how to configure basic QoS, see Configure Basic Wireless Quality of Service on page 47.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 2. Specify the settings as explained in the following table: Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the wait time (in milliseconds) between data frames. A higher AIFS value means a higher priority for a queue. Valid values for AIFS are 0 through 8. The default values are Data 0: 3; Data 1: 7; Data 2: 1; Data 3: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Max. Burst Enter the maximum burst value that specifies the maximum burst length (in microseconds) allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information. Decreasing this value increases the priority of the queue. Valid values for maximum burst length are all multiples of 32 between 0 and 8192, inclusive of 0 and 8192.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 • Source MAC. Indicates the source MAC address in Ethernet-II frame header. • Destination MAC. Indicates the destination MAC address in Ethernet-II frame header. • Source IP. Indicates the source IP address in the IP header. • Destination IP. Indicates the destination IP address in the IP header. • Source port. Indicates the source port number in the port header. • Destination port. Indicates the destination port number in the port header.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: Depending on your selection from the Match Frame Fields menu, Match Classifications appears either as a menu from which you must make a selection or a field in which you must enter information.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Match Frame 802.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Setting Description Source IP Match Frame Fields and Match Classifications Destination IP (continued) Apply Classification In the Match Classifications field, enter the source IP address against which the information in the IP header needs to be matched. In the Match Classifications field, enter the destination IP address against which the information in the IP header needs to be matched.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: Rate limiting for the wireless interface is an optional setting that applies to all traffic on the wireless interface. Unlike classification rate limiting, which you can specify for each classification, rate limiting for the wireless interface you only must specify once. To specify rate limiting for the wireless interface: 1.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Configure Captive Portal Captive portal allows you to set up a login page so that only users with a valid user name and password may access the internet through the access point. You must first configure the captive portal and add users before enabling it on the access point. To configure a captive portal: 1. Select Configuration > Captive Portal > Web Customization. 2. Select Create from the Captive Portal Web Locale menu. 3.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Add users to a captive portal: 1. Select Configuration > Captive Portal > User Configuration. 2. Enter the name of the user in the Captive Portal User Name field. 3. Click the Apply button to create the user. 4. Select the user from the user list. 5. Click the Edit button. 6. Enter the user’s password in the User Password field. 7. Enter an away time between zero and 1440 minutes.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 The captive portal is enabled on the selected SSID. Configure Wireless Bridging The wireless access point supports a wireless distributing system (WDS) that lets you build large bridged wireless networks. You can select from the following wireless access point modes: • Wireless point-to-point bridge. In this mode, the wireless access point can communicate with another bridge-mode wireless station and, as an option, also with wireless clients.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Wireless PC card in a notebook computer Wireless PC card in a notebook computer Point-to-point bridge mode Point-to-point bridge mode Router Hub or switch Figure 5. To configure a point-to-point wireless network: 1. Configure the wireless access point (AP1 on LAN Segment 1 in the previous figure) as a point-to-point bridge: a. Select Configuration > Wireless Bridge. b. Select the Enable Wireless Bridging check box.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 f. Specify the settings as explained in the following table: Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default name is NETGEAR-WDS-1. Remote MAC Address Enter the MAC address of the remote wireless access point (the MAC address of AP2 on LAN Segment 1 in Figure 5 on page 90).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other computers or servers connected to LAN Segment 1 or LAN Segment 2. Configure a Point-to-Multipoint Wireless Network In a point-to-multipoint bridge, the wireless access point is the master for a group of bridge-mode wireless access points. All traffic is sent to the master rather than to the other wireless access points.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 d. The profile table shows four security profiles. Choose a security profile to edit by selecting the corresponding radio button to the left of the profile. e. Click Edit to configure the selected security profile settings. The Edit Security Profile page displays for the selected security profile. (The following figure contains an example.) f.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 b. Select the Wireless Point-to-Multi-Point Bridge radio button. c. Select the Enable Wireless Client Association check box to enable wireless client association. Note: If you do not select the Enable Wireless Client Association check box, the wireless access point does not function in point-to-multipoint bridge but in repeater mode. d.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 wireless access point. You can configure up to four security profiles to enable the wireless access point to repeat the wireless signal for four remote wireless access points. Each security profile requires a unique name and needs to include the MAC address of the remote wireless access point. You can configure up to four such security profiles (NETGEAR-WDS-1, NETGEAR-WDS-2, and so on).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 g. Specify the settings as explained in the following table: Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4. Remote MAC Address Enter the MAC address of the remote wireless access point (the MAC address of AP1 or AP3 in Figure 7 on page 95).
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Note: If you do not clear the Enable Wireless Client Association check box, the wireless access point functions in regular point-to-multipoint bridge mode. d. If the correct profile names and security options are displayed in the table, select the check boxes in the Enable column for all security profiles that you want to enable. e. Click Apply on the Bridging page to activate your repeater settings. 3.
6. 6 Troubleshooting This chapter provides information about troubleshooting the wireless access point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the wireless access point on? Go to Basic Functioning on page 99. • Have I connected the wireless access point correctly? Go to Basic Functioning on page 99. • I cannot access the Internet or the LAN.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Basic Functioning • Verify the Correct Sequence of Events at Start Up • No LEDs Are Lit on the Wireless Access Point • The Active LED or the LAN LED Is Not Lit • The WLAN LED Does Not Light Up Note: For descriptions of the LEDs, see Top Panel on page 7.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 If you use a power cord to provide power to the wireless access point, check these items: • Make sure that the power cord is connected to the wireless access point. • Make sure that the power adapter is connected to a functioning power outlet. If it is in a power strip, make sure that the power strip is turned on. If it is plugged directly into the wall, verify that it is not a switched outlet.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 You Cannot Access the Internet or the LAN from a Wireless-Capable Computer There is a configuration problem. Check these items: • You might not have restarted the computer with the wireless adapter to allow TCP/IP changes take effect. Restart the computer. • The computer with the wireless adapter might not have the correct TCP/IP settings to communicate with the network.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 • Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to be sure that the Java applet is loaded. • Try quitting the browser, clearing the cache, deleting the cookies, and launching the browser again. • Make sure that you are using the correct login information. The factory default login name is admin, and the password is password.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Test the LAN Path to Your Wireless Access Point You can ping the wireless access point from your computer to verify that the LAN path to your wireless access point is set up correctly. To ping the wireless access point from a computer running Windows 95 or later: 1. From the Windows toolbar, click the Start button, and select Run. 2.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Test the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly, test the path from your computer to a remote device. 1. From the Windows toolbar, click the Start button, and select Run. 2. In the Windows Run window, type: ping -n 10 where is the IP address of a remote device such as the DNS server of your ISP.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Use the Packet Capture Tool You can capture wireless packets to analyze traffic patterns with a network traffic analyzer tool. The captured packet flow can show if traffic is flowing correctly to its destinations or if packets are dropped. There is a limit to the size of the packet flow that you can capture in a file. To capture packets: 1. Select Monitoring > Packet Capture. The Packet Capture page displays: Figure 8. 2.
A. Supplemental Information A This appendix provides factory default settings and technical specifications for the ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Technical Specifications Table 2. Technical specifications Feature Description 802.11bg/ng/bgn wireless specifications 802.11b data rates 1, 2, 5.5, and 11 Mbps, and auto-rate capable 802.11bg data rates 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps, and auto-rate capable 802.11bgn MCS index and data rates Data rates for a 20 MHz channel width and an automatic guard interval: 0 / 7.2 Mbps, 1 / 14.4 Mbps, 2 / 21.7 Mbps, 3 / 28.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Table 2. Technical specifications (continued) Feature Description 802.11a data rates 6, 9, 12, 18, 24, 36, 48, 54 Mbps, and auto-rate capable 802.11a/a-na-ac data rates Data rates for a 20 MHz channel width and an automatic guard interval: 0 / 7.2 Mbps, 1 / 14.4 Mbps, 2 / 21.7 Mbps, 3 / 28.9 Mbps, 4 / 43.3 Mbps, 5 / 57.8 Mbps, 6 / 65 Mbps, 7 / 72.2 Mbps, 8 / 14.44 Mbps, 9 / 28.88 Mbps, 10 / 43.33 Mbps, 11 / 57.77 Mbps, 12 / 86.66 Mbps, 13 / 115.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Table 2. Technical specifications (continued) Feature Description Status LEDs • • • • Power/Test LED Activity LED Ethernet LAN Wireless LAN (2.4 GHz and 5 GHz) Electrical and Physical Specifications Power adapter 12 VDC, 2.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Factory Default Settings You can use the Reset button located on the rear of the wireless access point to reset all settings to their factory defaults. This is called a hard reset. To perform a hard reset, use a sharp object to press and hold the Reset button for approximately 5 seconds (until the Test LED blinks rapidly). This returns the wireless access point to the factory configuration settings that are shown in the following table.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Table 3.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Table 3. Default configuration settings (continued) Feature Description Beacon interval 100 Aggregation length 65535 A-MPDU Enabled RIFS transmission Disabled DTIM interval 3 Preamble type Auto Antenna Internal 802.11d Enabled Maximum wireless clients 400 Wi-Fi Multimedia (WMM) Enabled WMM powersave Enabled AP EDCA parameters (QoS settings) See Configure Quality of Service Policies on page 81.
ProSAFE Dual-Band Wireless AC Access Point WAC720 WAC730 Table 3.
