User Manual
Table Of Contents
- Contents
- 1. Introduction
- 2. Hardware Overview Indoor Model WAX610
- 3. Hardware Overview Outdoor Model WAX610Y
- 4. Install the Access Point in Your Network and Access It for Initial Configuration
- 5. Install the Access Point in an Insight Instant Mesh WiFi Network
- What are a root access point and an extender access point?
- What is an Insight Instant Mesh WiFi network?
- Requirements for placing an extender access point in a mesh WiFi network
- Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
- Connect the access point as an extender to a root access point
- Connect over the Internet using the NETGEAR Insight Cloud portal
- 6. Manage the Basic WiFi Features
- Set up an open or secure WiFi network
- View or change the settings of a WiFi network
- Disable or enable a WiFi network or set up a WiFi activity schedule
- Remove a WiFi network
- Change the authentication and encryption for a WiFi network
- Hide or broadcast the SSID for a WiFi network
- Enable or disable client isolation for a WiFi network
- Enable or disable band steering with 802.11k RRM and 802.11v WiFi network management
- Change the VLAN ID for a WiFi network
- Enable or disable PMF for a WiFi network
- Enable or disable URL tracking for a WiFi network
- Change the format of the DHCP offer messages in a WiFi network
- Select a MAC ACL for a WiFi network
- Set bandwidth rate limits for a WiFi network
- 7. Manage the Basic Radio Features
- 8. Set Up and Manage a Captive Portal
- 9. Manage Access and Security
- 10. Manage the Local Area Network and IP Settings
- Disable the DHCP client and specify a fixed IP address
- Enable the DHCP client
- Set the 802.1Q VLAN and management VLAN
- Specify an existing domain name
- Enable or disable Spanning Tree Protocol
- Enable or disable the network integrity check function
- Enable or disable IGMP snooping
- Enable or disable Ethernet LLDP
- Enable or disable UPnP
- 11. Manage and Maintain the Access Point
- Change the management mode to NETGEAR Insight or Web-browser
- Change the country or region of operation
- Change the admin user account password
- Change the system name
- Specify a custom NTP server
- Set the time zone
- Manage the syslog settings
- Manage the firmware of the access point
- Manage the configuration file of the access point
- Reboot the access point from the local browser UI
- Schedule the access point to reboot
- Return the access point to its factory default settings
- Enable SNMP and manage the SNMP settings
- Manage the LEDs
- 12. Monitor the Access Point and the Network
- View the access point Internet, IP, and system settings
- View the WiFi radio settings
- View unknown and known neighbor access points
- View client distribution, connected clients, and client trends
- View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization
- View or download tracked URLs
- View, save, download, or clear the logs
- View a WiFi bridge connection
- View alarms and notifications
- 13. Set up a WiFi Bridge
- 14. Manage the Advanced Radio Features
- 15. Diagnostics and Troubleshooting
- Perform a ping test
- Check the Internet speed
- Quick tips for WiFi troubleshooting
- Troubleshoot with the LEDs
- Power/Cloud LED remains off
- Power/Cloud LED remains solid amber
- Power/Cloud LED is blinking amber slowly, continuously
- The access point functions as a PoE PD and the Power/Cloud LED remains solid amber
- Power/Cloud LED does not light blue in the NETGEAR Insight management mode
- Power/Cloud LED does not stop blinking amber, green, and blue
- 2.4G or 5G WLAN LED is off
- The extender access point and root access point cannot connect
- Troubleshoot WiFi connectivity
- Troubleshoot Internet browsing
- You cannot log in to the access point over a LAN connection
- Changes are not saved
- You enter the wrong password and can no longer log in to the access point
- Troubleshoot your network using the ping utility
- A. Mount Indoor Model WAX610 to a Wall or Ceiling
- B. Mount Outdoor Model WAX610Y to a Wall or Pole
- C. Factory Default Settings and Technical Specifications
7.
Specify the WiFi security by selecting an option from the Authentication menu and,
if applicable, by specifying a passphrase in the Passphrase field or selecting an
option from the Encryption menu, as described in the following table.
DescriptionSetting
A legacy open WiFi network does not provide any security. Any WiFi device can join the
network. We recommend that you do not use a legacy open WiFi network but configure
WiFi security. However, a legacy open network might be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box displays.
•
Enhanced Open check box cleared. The WiFi network is a legacy open network without
any security. This is the default option for en open network. Clients are not authenticated,
traffic is not encrypted, and 802.11w (PMF) is automatically disabled (see Step 9).
•
Enhanced Open check box selected. The WiFi network can only accept clients that
support the WiFi enhanced open feature, which is based on opportunistic wireless
encryption (OWE). Select this option only if all the clients in the WiFi network support
OWE. If you select this option, the encryption is CCM mode protocol (CCMP), and 802.11w
(PMF) is automatically set to mandatory (see Step 9).
Open
This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption.
This type of security enables only WiFi devices that support WPA2 to join the VAP.
WPA2 provides a secure connection but some legacy WiFi devices do not detect WPA2 and
support only WPA. If your network includes such older devices, select WPA2/WPA Personal
authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
WPA2
Personal
This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that support
either WPA2 or WPA to join the VAP. This option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and limits the
speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
WPA2/WPA
Personal
This enterprise-level security uses RADIUS for centralized Authentication, Authorization, and
Accounting (AAA) management. For WPA2 Enterprise security to function, you must set up
RADIUS servers (see Set up RADIUS servers on page 133).
From the Encryption menu, select the data encryption mode:
•
TKIP + AES. This type of data encryption enables WiFi devices that support either WPA
or WPA2 to join the access point’s WiFi network. This is the default mode.
•
AES. This type of data encryption provides a secure connection but some older WiFi
devices do not detect WPA2 and support only WPA. Therefore, if your network includes
such older devices, select TKIP + AES encryption.
WPA2
Enterprise
User Manual62Manage the Basic WiFi Features
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y