User Manual Insight Cloud Managed WiFi 6 AX3600 Access Point WAX620 July 2021 202-12199-02 NETGEAR, Inc. 350 E.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
Contents Chapter 1 Introduction About NETGEAR Insight......................................................................9 Additional documentation...................................................................9 Chapter 2 Hardware Overview Unpack the access point....................................................................11 Top panel with LEDs...........................................................................11 Hardware interfaces.......................................................
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Connect the access point as an extender to a root access point..47 Connect over the Internet using the NETGEAR Insight Cloud portal....................................................................................................50 Chapter 5 Manage the Basic WiFi Features for a WiFi network Set up an open or secure WiFi network..........................................52 View or change the settings of a WiFi network............................
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage neighbor AP detection.....................................................113 Enable neighbor access point detection and move access points to the Known AP List....................................................................114 Import an existing neighbor access point list in the Known AP List..................................................................................................116 Set up RADIUS servers.....................
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Chapter 11 Monitor the Access Point and the Network Display the access point Internet, IP, and system settings..........163 Display the WiFi radio settings.......................................................166 Display unknown and known neighbor access points................169 Display client distribution, connected clients, and client trends.171 View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization..............
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The access point functions as a PoE PD and the Power/Cloud LED remains solid amber............................................................222 Power/Cloud LED does not light blue in the NETGEAR Insight management mode.....................................................................222 Power/Cloud LED does not stop blinking amber, green, and blue...............................................................................................
1 Introduction This manual is for the NETGEAR Insight Managed WiFi 6 AX3600 Dual Band Access Point model WAX620. Model WAX620, in this manual referred to as the access point, supports IEEE 802.11ax, eight (4+4) streams of WiFi 6, and dual-band concurrent operation at 2.4 GHz and 5 GHz with a combined throughput of 3600 Mbps (1200 Mbps at 2.4 GHz and 2400 Mbps at 5 GHz).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 About NETGEAR Insight For NETGEAR Insight Premium and Insight Pro subscribers, the access point supports the NETGEAR Insight Cloud portal and Insight app: • Insight Cloud portal: Lets you configure and manage the access point through the portal of the Insight cloud-based management platform.
2 Hardware Overview The NETGEAR Insight Managed WiFi 6 AX3600 Dual Band Access Point Model WAX620 is an indoor access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Unpack the access point The package contains the following items: • NETGEAR WAX620 access point • Mounting bracket with screw holes for mounting to a solid ceiling or 15/16 in. (23.8 mm) T-bar • Two screws and anchors for ceiling mounting or wall-mounting • Installation guide Note: Depending on the product ordered, the package might not include a power adapter. You power up the access point by connecting it to a PoE+ switch.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 1. LED descriptions LED Icon Power/Cloud LED Color Description Solid amber initially and then blinking amber slowly: The access point is starting or in the process of getting an IP address. Solid green: The access point started up and functions either as a standalone access point or as an Insight discovered access point that is not connected to the Insight cloud-based management platform.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 1. LED descriptions (Continued) LED Icon Color 5G WLAN LED Description Solid green: The 5 GHz WiFi radio is on but no clients are connected. Solid blue: One or more WLAN clients are connected to the 5 GHz WiFi radio. Blinking blue: Traffic is detected on the 5 GHz WiFi radio. Off: The 5 GHz WiFi radio is off. Note: For information about troubleshooting with the LEDs, see Troubleshoot with the LEDs on page 219.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Note: If you added the access point to a NETGEAR Insight network location, you must first use the Insight app or Insight Cloud portal to remove the access point from your Insight network location before the factory default settings function of the Reset button is available. For more information, see Use the Reset button to reset the access point on page 156.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Safety instructions and warnings for an indoor access point Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions: • This product is designed for indoor use only in a temperature-controlled and humidity-controlled environment.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Do not spill food or liquids on your product components, and never operate the product in a wet environment. If the product gets wet, see the appropriate section in your troubleshooting guide, or contact your trained service provider. • Do not push any objects into the openings of your product. Doing so can cause fire or electric shock by shorting out interior components. • Use the product only with approved equipment.
3 Install the Access Point in Your Network and Access It for Initial Configuration This chapter describes how you can install and access the access point in your network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Position your access point for best performance Before you install and mount your access point as described in the installation guide or an appendix to this manual, consider how you can position the access point for best performance. If you are within the access point WiFi range, you can connect any of your WiFi devices to your WiFi network. The WiFi range can vary significantly depending on the physical placement of your access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 - Fish tanks - Mirrors - Brick - Concrete If you are using adjacent access points, use different radio frequency channels to reduce interference. Set up and connect the access point to your network You can connect the access point to a Power over Ethernet plus (PoE+) switch in your network. The switch must be connected to a network router that is connected to the Internet.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Figure 4. Set up the access point with a PoE+ connection to your network To set up the access point with an Ethernet connection to your network: 1. Connect an Ethernet cable to the LAN/PoE+ port on the access point. 2. Connect the other end of the Ethernet cable to a port on a switch that is connected to your network and to the Internet. If you use a PoE+ connection, the port must be a PoE+ port on a PoE+ switch. The access point requires 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Insight app and the Insight Cloud portal provide ease of access and let you configure most features that are available on the access point. The local browser UI lets you configure all features.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To connect to the access point over WiFi using an iOS or Android mobile device: 1. On your mobile device, go to the app store, search for NETGEAR Insight, and download the Insight app. 2. Connect your mobile device to the WiFi network of the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 IMPORTANT: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud portal, the admin password for the access point changes. That is, after you add the access point to an Insight network location, the Insight network password for that location replaces the admin password.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Connect over WiFi to the local browser UI for initial configuration This section describes how to connect to the access point for the first time over WiFi using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight app) and complete the initial configuration. To connect over WiFi to the local browser UI for initial configuration: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that displays, click the Confirm Security Exception button. • Microsoft Edge: Select Details > Go on to the webpage. • Microsoft Internet Explorer: Click the Continue to this website (not recommended) link. 4. Enter the access point user name and default password. The user name is admin. The default password is password.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the default SSID for regular operation. The default SSID is for setup only. Enter a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). 7.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network. • WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to connect to the SSID. This option uses AES and SAE encryption.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Connect over the LAN to the local browser UI for initial configuration The following procedure assumes that your network includes a DHCP server (or router that functions as a DHCP server) and that the access point and your computer are on the same LAN. By default, the access point functions as a DHCP client. To connect over the LAN to the local browser UI for initial configuration: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that displays, click the Confirm Security Exception button. • Microsoft Edge: Select Details > Go on to the webpage. • Microsoft Internet Explorer: Click the Continue to this website (not recommended) link. 4. Enter the access point user name and default password. The user name is admin. The default password is password.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the default SSID for regular operation. The default SSID is for setup only. Enter a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). 7.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network. • WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to connect to the SSID. This option uses AES and SAE encryption.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 9. If the Dashboard does not display automatically, do the following: a. Take one of the following actions: • If you assigned a static IP address to the access point, enter the IP address that you specified in Step 6 in the address bar of the web browser. • If you did not assign a static IP address, reenter the IP address that is displayed in the address bar of the web browser.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To connect to the access point using a computer that is connected to a LAN/PoE+ port of the access point: 1. Record the IP address and subnet mask of your computer so that you can reinstate these IP address settings later. 2. Temporarily change the IP address on your computer to 192.168.0.210 with 255.255.255.0 as the subnet mask. (You can actually use any IP address in the 192.168.0.2–192.168.0.254 range, with the exception of IP address 192.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Microsoft Edge: Select Details > Go on to the webpage. • Microsoft Internet Explorer: Click the Continue to this website (not recommended) link. 6. Enter the access point user name and default password. The user name is admin. The default password is password. The user name and password are case-sensitive. 7. Select the Web-browser radio button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the default SSID for regular operation. The default SSID is for setup only. Enter a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). 9.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network. • WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to connect to the SSID. This option uses AES and SAE encryption.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Log in to the access point after initial setup After initial setup, the access point is ready for use and you can change the settings and monitor the traffic. To log in to the access point’s local browser UI: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays various panes that let you see the status of your access point at a glance. For more information about the Dashboard page and its various panes, see Monitor the Access Point and the Network on page 162. Dismiss a browser security warning When you enter the IP address that is assigned to the access point in the address field of your browser, a security warning can display. This is normal.
4 Install the Access Point in an Insight Instant Mesh WiFi Network In addition to functioning as a regular standalone access point, the access point can function in an Insight Instant Mesh WiFi network as either a root access point or an extender access point. This chapter describes how you can use the NETGEAR Insight app to connect the access point to a root access point and let it function as an extender access point in an Insight Instant Mesh WiFi network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 What are a root access point and an extender access point? The access point can function in an Insight Instant Mesh WiFi network as a root access point or and extender access point: • Root access point: A mesh-capable access point that is set up with a wired connection to your network and functions as a gateway to another mesh-capable access point that functions as an extender.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Number or Icon and Description 3 A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud portal. The Insight app or Insight Cloud portal let you configure and manage the extender access point in the Insight Instant Mesh WiFi network. 4 A network switch. 5 A network router that is connected to the Internet. Broadcast in the 2.4 GHz radio band. Broadcast in the 5 GHz radio band.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 In the mesh WiFi network, the extender access point connects to the root access point over a WiFi connection and broadcasts (extends) the WiFi network to the WiFi clients: • Backhaul connection. The WiFi connection between the root access point and the extender access point is referred to as the backhaul connection. • Fronthaul connection.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The following NETGEAR access point models can function either as a root access point or as an extender access point: • WAX610 • WAX610Y (Although this model can function as an extender access point, you can power it through PoE only.) • WAX620 • WAX630 • WAC564 • WAC540 Note: In a mesh WiFi network with WAX610, WAX610Y, WAX620, or WAX630 models and WAC564 or WAC540 models, the WAC564 and WAC540 models must run firmware version 9.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Enter the email address and password for your account and tap LOG IN. You can now set up the access point mesh WiFi connection (see Connect the access point as an extender to a root access point on page 47). Connect the access point as an extender to a root access point Use the NETGEAR Insight app to connect the access point as an extender to a root access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Number or Icon and Description 4 A network switch. 5 A network router that is connected to the Internet. Broadcast in the 2.4 GHz radio band. Broadcast in the 5 GHz radio band. The extender access point can use any band to establish the backhaul connection to the root access point and the fronthaul connection to WiFi clients.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 to add the extender access point to your Insight account and to an Insight network location. • Not automatically detected: If the Insight app does not detect the extender access point automatically, do the following: a. Tap + in the upper-right corner. b. Manually add the extender access point to the Insight app using one of the following options: - Scan the QR code. - Scan the serial number bar code. - Type in the serial number. c.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If the Power/Cloud LED does not stop blinking amber, green, and blue, see Power/Cloud LED does not stop blinking amber, green, and blue on page 223. When the configuration is complete, the Power/Cloud LED lights as follows: • Solid blue: The configuration is complete and the extender access point is ready for operation. The extender access point functions in the Insight Instant Mesh WiFi network and is connected to the Insight cloud.
5 Manage the Basic WiFi Features for a WiFi network The access point can support eight WiFi networks, each with its own unique WiFi settings, including WiFi security. This chapter describes how you can manage the basic WiFi features for a WiFi network. For information about the advanced WiFi features for a WiFi network, see Manage the Advanced WiFi Features for a WiFi network on page 183.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Set up an open or secure WiFi network The access point provides one default SSID that is enabled by default and that broadcasts on the 2.4 GHz band and the 5 GHz band. This is the SSID that you were required to rename when you logged in to the access point for the first time. You can add more SSIDs: The access point can support a total of eight SSIDs. The access point can simultaneously support the 2.4 GHz band for 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Click the + button to the left of Add SSID. The previous figure shows SSID2 as an example. 6. Specify the WiFi network name (SSID), select whether the SSID is broadcast, and specify the VLAN ID as described in the following table. Setting Description Wireless The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a maximum Network Name of 32 characters.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 7. Specify the WiFi security by selecting an option from the Authentication menu and, if applicable, by specifying a passphrase in the Passphrase field or selecting an option from the Encryption menu: • Open: A legacy open WiFi network does not provide any security. Any WiFi device can join the network. We recommend that you do not use a legacy open WiFi network but configure WiFi security.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WPA2 Enterprise: This enterprise-level security uses RADIUS for centralized Authentication, Authorization, and Accounting (AAA) management. For WPA2 Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS servers on page 119). From the Encryption menu, select the data encryption mode: - TKIP + AES.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 servers on page 119). If you select this option, 802.11w (PMF) is automatically set to mandatory (see Step 9). When you select WPA3 Enterprise security, the encryption is automatically set to GCMP256, which is a 256-bit encryption protocol. When you select WPA3 Enterprise authentication, the Dynamic VLAN radio buttons display: - Enable: The RADIUS server can assign a VLAN ID to clients.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 you select determines if this feature is mandatory, optional, disabled. You can also set it manually. • Mandatory: This option requires devices to use PMF. Devices that do not support PMF cannot connect to the WiFi network. If you select Enhanced Open authentication, WPA3 Personal authentication, or WPA3 Enterprise authentication, the radio button for PMF is set to Mandatory, and you cannot change it.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The access point sets the received signal strength indicator (RSSI) threshold automatically. (That is, you cannot configure the RSSI threshold manually.) 12. To configure client isolation, configure URL tracking, configure if a DHCP Offer message is unicast or broadcast, or do all of this, scroll down and click the > Advanced tab. 13. Optionally, configure WiFi client isolation.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 For information about how to view the tracked URLs per SSID or per WiFi client, see View or download tracked URLs on page 176. 15. Optionally, change the DHCP Offer message settings. When a device tries to associate with the WiFi network and negotiates an IP address, the access point converts the broadcast DHCP offer message that it receives from the DHCP server to a unicast message, and forwards it to the device.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • If the WiFi authentication and encryption is set to WPA3 Personal, make sure that the WiFi adapter device driver is updated to the latest version on your WiFi-enabled computer or mobile device. View or change the settings of a WiFi network You can view or change the settings of the default WiFi network (SSID or VAP) or any custom WiFi network. To view or change the settings of a WiFi network: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Your settings are saved. 8. If you made changes, make sure that you can reconnect over WiFi to the network with its new settings. If you cannot connect over WiFi, check the following: • If your WiFi-enabled computer or mobile device is already connected to another WiFi network in your area, disconnect it from that WiFi network and connect it to the correct WiFi network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the trash can icon to the right of the SSID. A warning pop-up window displays. 6. Click the Delete button. The pop-window closes and the WiFi network is removed.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Under Broadcast SSID, select one of the following radio buttons: • No: The SSID is hidden for the WiFi network. • Yes: The SSID is broadcast for the WiFi network. 7. Click the Apply button. Your settings are saved.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. In the VLAN ID field, enter a ID (that is, a number).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WPA2 Personal: This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption. This type of security enables only WiFi devices that support WPA2 to join the VAP. WPA2 provides a more secure connection than WPA but some legacy WiFi devices do not detect WPA2 and support only WPA. If your network includes such older devices, select WPA2/WPA Personal authentication.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 to join the VAP. If you select this option, 802.11w (PMF) is automatically set to mandatory (see Enable or disable PMF for a WiFi network on page 68). WPA3 provides a more secure connection than WPA2 but many WiFi devices might not yet detect WPA3 and support only WPA2. If your network also includes WPA2 devices, select WPA3/WPA2 Personal authentication. In the Passphrase field, enter a phrase of 8 to 63 characters.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 network selection in your WiFi-enabled computer or mobile device to match the current settings for your network. • Does your WiFi device display as a connected client? (See Display client distribution, connected clients, and client trends on page 171.) If it does, it is connected to the network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The settings for the selected SSID display. 6. Under 802.11w (PMF), select one of the following radio buttons: • Mandatory: Requires devices to use PMF. Devices that do not support PMF cannot connect to the WiFi network. If you select Enhanced Open authentication, WPA3 Personal authentication, or WPA3 Enterprise authentication, the radio button for PMF is set to Mandatory, and you cannot change it.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Enable or disable band steering with 802.11k RRM and 802.11v WiFi network management Band steering lets the access point identify the WiFi devices that are dual-band capable and steer those devices to the 2.4 GHz or 5 GHz band of a WiFi network (SSID or VAP). Compared to the 2.4 GHz band, generally more channels and bandwidth are available in the 5 GHz band, causing less interference and allowing for a better user experience.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Under Band Steering / 802.
6 Manage the Basic Radio Features This chapter describes how you can manage the basic radio features of the access point. For information about the advanced radio features, see Manage the Advanced Radio Features on page 201. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio feature on the 5 GHz radio, the change affects all WiFi networks that broadcast on the 5 GHz radio.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage the basic WiFi settings for the radios The basic WiFi settings for each radio apply to all WiFi networks (VAPs or SSIDs) that are configured on the radio. You can specify the radio settings for the 2.4 GHz and 5 GHz radios individually. To manage the basic WiFi settings for the radios: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The following descriptions apply to both radios, but you can specify the radio settings for the 2.4 GHz and 5 GHz radios individually. 5. Configure the following settings: • Turn Radio On: By default, the Turn Radio On check box is selected and the radio broadcasts. Turning off a radio disables WiFi access for the band, which can be helpful during configuration, network tuning, or troubleshooting.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Use the following guidelines: - A wider channel improves the performance (no or minimal interference and better data rates). - The 802.11n specification allows a 40 MHz–wide channel in addition to the legacy 20 MHz channel that is available with other modes. - The 802.11ac specification allows an 80 MHz–wide channel in addition to the 20 MHz and 40 MHz channels that are available with other modes.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Turn a radio on or off By default, both the 2.4 GHz and 5 GHz radios broadcast. Turning off a radio disables WiFi access for the associated band, which affects all WiFi networks (VAPs or SSIDs) in that band. Turning off a radio can be helpful during configuration, network tuning, or troubleshooting. To turn a radio on or off: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Change the WiFi mode for a radio By default, all types of WiFi clients can access a WiFi network on the access point, that is, the WiFi modes on the access point support 802.11ax, 802.11ac, 802.11na, 802.11ng, 802.11bg, 802.11b, and 802.11a clients. You can change the WiFi modes to limit access to certain types of clients. To change the WiFi mode for a radio: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 - • 11b: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to the access point. However, the speed of 802.11ax, 802.11n, and 802.11bg clients is limited to the maximum speed that is supported by 802.11b (about 11 Mbps). 5 GHz radio: Select one of the following WiFi modes for the 5 GHz radio: - 11ax: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the access point. This is the default setting.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • The 802.11ac specification and the 802.11ax specification for the 5 GHz band allow an 80 MHz–wide channel in addition to the 20 MHz and 40 MHz channels that are available with other WiFi modes. • The 40 MHz and 80 MHz channels enable higher data rates but leave fewer channels available for use. Note: We recommend that leave the default options (Dynamic 20 / 40 MHz for the 2.4 GHz radio and Dynamic 20 / 40 / 80 MHz for the 5 GHz radio).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Dynamic 20 / 40 MHz. This selection is available only for the 2.4 GHz radio and is the default setting for that radio. • Dynamic 20 / 40 / 80 MHz. This selection is available only for the 5 GHz radio and is the default setting for that radio. 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button. The pop-up window closes and your settings are saved.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic > Wireless Settings. The Wireless Settings page displays. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To change the channel for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To manage the QoS settings for a WiFi radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WMM Powersave: Enabling the WMM Powersave feature saves power for battery-powered devices and fine-tunes power consumption. 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button. The pop-up window closes and your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
7 Set Up and Manage a Captive Portal This chapter describes how you can set up and manage a captive portal on the access point. A captive portal is a web page that users see when they attempt to connect to a WiFi network. A captive portal includes a splash page and usually requires some form of authentication for the user. The access point supports three types of captive portals: • Click-through captive portal: A basic portal for which the splash page is stored on the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Set up a click-through captive portal for a WiFi network A click-through captive portal is a basic portal for which the splash page is stored on the access point, that is, it is not an external captive portal. Use a click-through captive portal to welcome or instruct WiFi users and limit their sessions. You can require users to agree to an end user license agreement (EULA) and redirect them a specific website.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 8. Specify the click-through settings as described in the following table. Setting Description Session Timeout (in Enter the number of minutes from 1 to 1440 after which a WiFi session is terminated min) and a user must log in again. The default is 60 minutes. Redirect URL To redirect a user to a specific website after login, select the Redirect URL check box and enter the URL.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Setting Description JPEG/JPG Image To customize the image that is displayed on the captive portal login page, click the (Max 500 KB) Browse button and navigate to and select an image. If you do not customize the image, the default image displays on the captive portal login page. EULA (Max 1 KB) The field includes a default end user license agreement (EULA). You can enter or copy custom text into the field.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Set up an external captive portal for a WiFi network An external captive portal is a portal that is hosted by an external captive portal vendor. That is, this type of portal is not stored on the access point. For an external captive portal, you generally must register your devices with and purchase licenses from the vendor.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 8. Click the External Captive Portal radio button. 9. In the Splash Page URL field, enter the URL that is provided by the vendor. This URL redirects a user to the splash page on the website that hosts the captive portal. 10. Select one of the following Captive Portal Authentication Type radio buttons: • • Web/HTTP: Authentication for access to the splash page occurs on the access point using the HTTPS protocol.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 server. Specify the following settings for each RADIUS server, as directed by the vendor: - IPv4 Address: Enter the IP address of the server. The IP address is provided by the vendor. - Port: Enter the port number that is used by the server. The IP port number is provided by the vendor. By default, an authentication server uses port number 1812; an accounting server uses port number 1813.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Remove all URLs: Select the Select All check box, and click the Remove button. 14. Click the Apply button. Your settings are saved. WiFi clients attempting to connect to the SSID are presented with the captive portal login page.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. Click the Apply button. Your settings are saved and the Add Page button displays. 7. Click the Add Page button. A browser page launches and displays the Facebook Login page. 8. Log in to the Facebook account with which the Facebook business page is associated. 9. From the Select a Page menu, select the Facebook business page. 10.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The name of the selected Facebook business page displays on the Facebook Wi-Fi configuration page, along with the Change Page button, which lets you replace the selected Facebook business page with another one. 14. To allow clients that are connected to the Facebook captive portal to establish a secure HTTP (HTTPS) session before the captive portal authentication occurs, select the Allow HTTPS Enable radio button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Scroll down and click the > Advanced tab. The page expands. 7. Select the Captive Portal check box. The page adjusts. By default, the Click Through radio button is selected. 8. Select the Facebook Wi-Fi radio button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To unregister the access point from Facebook Wi-Fi and remove the access point’s entry: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
8 Manage Access and Security This chapter describes how you can manage access and security features and user accounts. The chapter includes the following sections: • • • • • Block specific URLs and keywords for Internet access Manage user accounts Manage local MAC access control lists Manage neighbor AP detection Set up RADIUS servers Note: For information about essential WiFi security (network authentication and encryption), see Set up an open or secure WiFi network on page 52.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Block specific URLs and keywords for Internet access You can set up a blacklist by specifying URLs (web addresses) for which Internet access must be blocked. You can also specify keywords that cause the access point to reject URLs that contain those keywords. To set up a blacklist with URLs and keywords for which Internet access must be blocked: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Select the Enable radio button. 6. Compose the blacklist in the following ways: • Blocked URLs: To add a URL to the blacklist, type or copy the URL in the upper field (to the left of the upper Add button) and click the upper Add button. You can also select one or more URLs from the Popular URL list by selecting the check boxes for the URLS and clicking the << Move button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage user accounts User accounts provide either read/write or read-only access to the local browser UI of the access point. You cannot delete the admin user account or change its user name, but you can change its password. You can add accounts for other users, and you can change or delete these accounts.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Click the add user account icon. Additional fields and a menu display. 6. Specify the settings for the new user account: • User Name: Enter a user name. • Password: Enter a password between 8 and 64 characters in length. The password must contain at least one uppercase letter, one lowercase letter, and one number. The following special characters are allowed: !@#$%^&*() • Privilege: From the menu, select Read-Write or Read-Only.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 An ACL takes effect only after you apply it to a WiFi network. For information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 188. You can apply a MAC ACL to more than one WiFi network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you select the Allow radio button, a WiFi device for which you place the MAC address in the ACL is allowed access to the WiFi network, but all other WiFi devices are denied access to the WiFi network. If you select the Deny radio button, a WiFi device for which you place the MAC address in the ACL is denied access to the WiFi network, but all other WiFi devices are allowed access to the WiFi network. 8.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 9. Click the Apply button. Your settings are saved. For more information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 188. WiFi devices in the Trusted Stations table can access the WiFi network to which you apply the ACL. WiFi devices in the Untrusted Stations table cannot access the WiFi network to which you apply the ACL.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > Security > MAC ACL. 5. Click the group name for the MAC ACL that you want to set up.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you select the Deny radio button, a WiFi device for which you import the MAC address into the ACL is denied access to the WiFi network, but all other WiFi devices are allowed access to the WiFi network. 8. To download a sample of a MAC ACL in the format that is required for importing, click the Download Sample link. 9.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 c. To remove a MAC address from the Untrusted Stations table, select the MAC address and click the Remove button. You can search the Untrusted Stations table. When you remove a device from the Untrusted Stations table, after the access point redetects the device, the device is once again placed in the Available Stations table. 10. Click the Apply button. Your settings are saved.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Enable neighbor access point detection and move access points to the Known AP List The access point can detect neighbor access points (APs) and lets you classify them as known APs. After you enable neighbor AP detection, the access point maintains a list of access points it detects in the area. Initially all detected access points are displayed in the Unknown AP List.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Your settings are saved. Neighbor AP detection is now enabled. 8. From the Detection Policy menu, select the scan method: • Mild: The access point scans for neighbor access points every hour. This is the default setting. • Moderate: The access point scans for neighbor access points every 30 minutes. • Aggressive: The access point scans for neighbor access points every 15 minutes.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 9. To view detected neighbor access points and move them from the Unknown AP List to the Known AP List, do the following: a. Click the Unknown AP List tab. b. If no access points display, click the Refresh button. c. Select the check boxes for the access points that you are familiar with and that you trust. d. Click the << Move to Known AP List button. e. Click the Known AP List tab. The selected access points display in the Known AP List.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • You must separate entries with a comma. • The file must be in text format (that is, with a .txt or .cfg extension). For information about enabling neighbor AP detection, see Enable neighbor access point detection and move access points to the Known AP List on page 114. To import a list with MAC addresses of known neighbor access points in the Known AP List: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Click the > button to the left of the radio band. 6. To download a sample of an AP list in the format that is required for importing in the Known AP List, click the Download Sample link. 7. Import and compose the Known AP List in the following way: a.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 8. Click the Apply button. Your settings are saved. Set up RADIUS servers If you use WPA2 Enterprise security, WPA3 Enterprise security, or a RADIUS MAC ACL, you must set up RADIUS servers for authentication, accounting, or both authentication and accounting using RADIUS. You must set up primary IPv4 servers and you can set up secondary IPv4 servers.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > Security > RADIUS Settings. 5. For each RADIUS server that you want to set up, configure the following settings: • IPv4 Address: Enter the IPv4 address of the RADIUS server. The access point must be able to reach this IP address.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. Configure the following authentication settings, which apply to all RADIUS server that you set up: • Reauthentication time: Enter the interval in seconds after which the supplicant (the WiFi client) must be reauthenticated with the RADIUS server. The default interval is 3600 seconds (1 hour). Enter 0 to disable reauthentication. • Update Global Key: Select the check box to allow the global key update, and enter the interval in seconds.
9 Manage the Local Area Network and IP Settings This chapter describes how you can manage the local area network (LAN) and IP settings of the access point. The chapter includes the following sections: • • • • • • • • • Disable the DHCP client and specify a fixed IP address Enable the DHCP client Set the 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Disable the DHCP client and specify a fixed IP address By default, the DHCP client of the access point is enabled and the access point receives an IP address from a DHCP server (or a router that functions as a DHCP server) in your network. If your network does not include a DHCP server or you prefer to specify a fixed (static) IP address, disable the DHCP client of the access point. To disable the DHCP client and specify a fixed IP address: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Select the Disable radio button. The fields are now unmasked. 6. Specify the settings that are described in the following table. Setting Description IP Address IP address in the range that is used by your LAN (usually 255.255.255.0). Subnet Mask The subnet mask must be compatible with your LAN. Gateway IP address of the gateway on your LAN. Primary DNS IP address of the primary Domain Name System (DNS) server on your LAN.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To enable the DHCP client: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Set the 802.1Q VLAN and management VLAN The 802.1Q VLAN protocol on the access point logically separates traffic on the same physical (wired) network. This protocol can work with tagged and untagged VLANs, as follows: • Untagged VLAN: The access point sends untagged frames from its Ethernet interface. Incoming untagged frames are assigned to the untagged VLAN. By default, the untagged VLAN is VLAN 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > IP > LAN. 5. To change the 802.1Q VLAN, either clear or select the Untagged VLAN check box: • Untagged VLAN: By default, the Untagged VLAN check box is selected. The access point sends untagged frames from its Ethernet interface. Incoming untagged frames are assigned to the untagged VLAN.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Set an existing domain name You can specify an existing fully qualified domain name (FQDN) for the access point so that you can access the access point by using a domain name instead of an IP address. The FQDN must be a domain name that is registered with a Domain Name System (DNS) provider. The following are the requirements for the FQDN: • The length can be from 1 to 64 characters.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > IP > LAN. 5. In the Fully Qualified Domain Name field, specify the FQDN. 6. Click the Apply button. Your settings are saved. The access point attempts to resolve the FDQN to an IP address. Enable or disable Spanning Tree Protocol For locations where multiple access points are active and redundant network paths might be present, Spanning Tree Protocol (STP) can prevent network loops.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5. Select a Network Integrity Check radio button: • Enable: The network integrity check function is enabled. • Disable: The network integrity check function is disabled.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > General. The General page displays. 5. Select an IGMP Snooping radio button: • Enable: IGMP snooping is enabled. • Disable: IGMP snooping is disabled. This is the default setting. 6. Click the Apply button. Your settings are saved. Enable or disable Ethernet LLDP Link Layer Discovery Protocol (LLDP), as specified in IEEE 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > System > Advanced > Ethernet LLDP. The Ethernet LLDP page displays. 5. Select a radio button: • Enable: LLDP is enabled. This is the default setting. • Disable: LLDP is disabled. CAUTION: If the access point receives power from a PoE switch and you disable LLDP, power to the access point might be turned off after you click the Apply button. In that case, restart the access point. 6.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The UPnP page displays. 5. Select a radio button: • Enable: UPnP is enabled. This is the default setting. • Disable: UPnP is disabled. 6. Click the Apply button. Your settings are saved.
10 Manage and Maintain the Access Point This chapter describes how you can manage and maintain the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Change the management mode to NETGEAR Insight or Web-browser The access point can function in either of the following management modes: • NETGEAR Insight mode: For NETGEAR Insight Premium and Insight Pro subscribers, you can manage the access point remotely from a mobile device on which the NETGEAR Insight app is installed or through the Insight Cloud portal. The NETGEAR Insight mode is the default setting.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Change the country or region of operation You can change the country or region in which the access point operates. Note the following: • Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 7. Click the OK button. The pop-up window closes and your settings are saved. The access point restarts with the default WiFi and radio settings that are specific to the selected country or region. Change the admin user account password This admin user account password is the password that you use to log in to the local browser UI of the access point with the user name admin. (It is not the passphrase that you use for WiFi access.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Note: You cannot change the user name. The name must remain admin. 7. Click the Apply button. Your settings are saved. The next time that you log in to the access point, you must use the new password. If you forget the new password, you must reset the access point to factory default settings. Doing so restores the password to the default password.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Use the following guidelines: • The name must contain alphanumeric characters, can contain hyphens, and cannot be longer than 15 characters. • The name cannot start or end with a hyphen. • The name must contain at least one alphabetical character. 6. Click the Apply button. Your settings are saved.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > System > Basic > Time. By default, the Enable radio button is selected and the access point receives its time from a default NETGEAR NTP server. 5. Select the Use Custom NTP Server check box. 6. Take one of the following actions: • Enter the host name of the NTP server. By default, the Hostname radio button is selected. • Select the IP address radio button and enter the IP address of the NTP server. 7.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > Syslog. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • LAN connection: If you are connected over the LAN to the access point, manually update the firmware from a computer or SFTP server. See Manually download firmware and update the access point on page 146 or Use an SFTP server to update the access point on page 149.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. To read the release notes if any are available, click the Release Notes link. A web page displays the release notes. 6. To download and install the new firmware, click the Upgrade Now button, and follow the prompts and dialog boxes. The access point locates the firmware, downloads it, and begins the update. WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 4. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 10. Verify that the access point runs the new firmware version by logging back in to the access point. The firmware version is displayed on the Dashboard page. Revert to the backup firmware After you upgrade the access point to new firmware, the old firmware is saved as backup firmware so that you can revert to it.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 A warning pop-up window displays. IMPORTANT: When you revert to the backup firmware, the configuration of the access point is reset (cleared) with the exception of the IP address, access point name, and password for the local browser UI. The access point restarts and broadcasts SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal digits of the access point’s MAC address. The MAC address is listed on the product label.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Select Management > Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade page displays. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage the configuration file of the access point The configuration settings of the access point are stored within the access point in a configuration file. You can back up (save) this file to your computer or restore it. Back up the access point configuration You can save a copy of the current configuration settings. If necessary, you can restore the configuration settings later.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. Enter a password to protect the backup file, and click the Continue button. You can either use your existing password (the one that you use to log in to the access point) or enter a unique password. The password must be 8 to 63 characters in length and must contain at least one uppercase letter, one lowercase letter, and one number. Special characters are not allowed.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Reboot the access point from the local browser UI If you cannot physically access the access point to reboot it (that is, disconnect the power and reconnect the power), you can use the local browser UI to reboot the access point. To reboot the access point: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Schedule the access point to reboot You can schedule the access point to reboot at a time that is more convenient for the network, for example, when you do not expect any (or only a few) WiFi clients to be connected to the access point. The schedule that you set up is a recurring schedule. To schedule the access point to reboot: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Return the access point to its factory default settings Under some circumstances (for example, if you lost track of the changes that you made to the access point settings or you move the access point to a different network), you might want to erase the configuration and reset the access point to factory default settings.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To reset the access point to factory default settings: 1. On the bottom panel of the access point, locate the recessed Reset button. 2. Using a straightened paper clip, press and hold the Reset button for at least 10 seconds. Note: If you hold the Reset button for less than 10 seconds and then release it, the access point reboots rather than returns to its factory default settings. 3. Release the Reset button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Use the local browser UI to reset the access point You can use the access point’s local browser UI to return the access point to its factory default settings. CAUTION: This process erases all settings that you configured in the access point. To erase the settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Enable SNMP and manage the SNMP settings You can access the access point over a Simple Network Management Protocol (SNMP) connection, which allows SNMP network management software such as HP OpenView to manage the access point by using the SNMPv1 or SNMPv2 protocol. By default, SNMP is disabled. To enable SNMP and manage the SNMP settings: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 By default, SNMP is disabled. 6. Specify the following settings: • Read-Only Community Name: The community string that allows the SNMP manager to read the access point’s MIB objects. The default is public. • Read-Write Community Name: The community string that allows the SNMP manager to read and write the access point’s MIB objects. The default is private.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To enable or disable the LEDs: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
11 Monitor the Access Point and the Network This chapter describes how you can monitor the access point and the network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Display the access point Internet, IP, and system settings To display the access point, Internet, IP, and system settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • • Connection Status Information pane: This pane is in the top, left corner of the Dashboard (if the page width on your device is sufficient; otherwise, it might be elsewhere) and displays the following: - Status of the connection to the NETGEAR Insight cloud-based management platform, if any. - Status of the Internet connection. - Functioning mode of the access point, which is always Access Point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The page shows four sections: • System Information section: The following settings are displayed: - System Name: The access point NetBIOS name. - System Mode: The access point system mode (AP). - LAN MAC Address: The MAC address of the LAN Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz: The MAC address of 2.4 GHz WiFi interface (radio) of the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 - Serial Number: The serial number of the access point. - Current Time: The current system time of the access point. - Uptime: The time since the access point was last restarted. • AP Interface Status: A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use. • IPv4 Settings section: The following settings are displayed: • - IPv4 Address: The IPv4 address of the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. The Dashboard page displays. 4. Locate the Radio Information pane at the top, right corner of the Dashboard page (if the page width on your device is sufficient; otherwise, it might be elsewhere). The following settings are displayed: • Radio status (If the 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. To view more detailed information, select Management > Monitoring > System. The page shows four sections: • System Information section: The following settings are displayed: - System Name: The access point NetBIOS name. - System Mode: The access point system mode (AP). - LAN MAC Address: The MAC address of the LAN Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz: The MAC address of 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 - Bootloader Version: The primary bootloader (U-Boot) version that is installed on the access point. - Serial Number: The serial number of the access point. - Current Time: The current system time of the access point. - Uptime: The time since the access point was last restarted. • AP Interface Status: A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. To view the Known AP list, click the Known AP tab. At the top of the page, for each radio band, the page displays the total number of known access points. 7. To display the most recent known access points, click the Refresh button. Display client distribution, connected clients, and client trends To display the clients that are connected to the access point over WiFi: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Locate the Client Distribution pane (shown on the left side in the following figure) and the Recent Clients pane (shown on the right side). The Client Distribution pane shows the types of clients (Windows, Mac, iOS, Android, Linux, and other operating systems) and how these clients are distributed over the networks. (By default, the Network button is selected.) The Recent Clients pane shows the top 5 recently connected clients list. 5.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 shows the trend for the last 48 hours.) By default, the client information is selected (that is, the Client button is selected) and the graph shows the total number of clients for both radios and the number of clients for each radio (2.4 GHz and 5 GHz). You can also click the Traffic button or the Channel Utilization button. For more information, see View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization on page 174.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Channel: The channel that the client connects to. • Channel Width: The width of the channel that the client connects to. • Tx Rate: The rate of traffic transmission of the client. • Rx Rate: The rate of traffic reception of the client. • RSSI: The RSSI threshold value of the client. • Tx Bytes: The number of bytes that the client transmitted. • Rx Bytes: The number of bytes that the client received.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 8. To view traffic statistics, select Management > Monitoring > Statistics. The page displays the network traffic statistics for both the WiFi and Ethernet interfaces of the access point since the access point started or rebooted. The page also displays the number of clients that are associated with each radio.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 41. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. To view URL tracking information by WiFi client, do the following: a. From the menu, select Client. The table shows the MAC addresses of the WiFi clients, each with the client host name, and the first URL of the list of URLs that the client accessed. b. To view all URLs that a WiFi client accessed, click the … link to the right of the first URL. A pop-up window displays all URLs that the WiFi client accessed. c. Click the Close button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To view, save, download, or clear the logs: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. To download the detailed log entries, do the following: a. Click the Download Detailed Logs button. Depending on the size of the file, downloading the detailed log entries might take several minutes. b. Follow the directions of your browser to save the file to your computer. 7. To refresh the log entries onscreen, click the Refresh button. WARNING: After you clear the log entries, you can no longer save or download them. 8.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays. 4. Select Management > Monitoring > Wireless Bridge. The page that displays lets you select a WDS profile (WDS 1, WDS 2, WDS 3, or WDS 4). 5. Click the > button to the left of a WDS profile. 6. To view the function, MAC address, and IP address of an access point, point your cursor to the access point. View alarms and notifications You can view the alarms and notifications from any access point page.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The Dashboard page displays. 4. Locate the alarm bell icon at the top-right of the page. The icon shows a number, indicating the total number of new alarms and notifications since the last time that you viewed alarms and notifications. 5. Click the alarm bell icon. The pop-up window shows the alarms (indicated by a red bell) and notifications (indicated by a blue bell) with a description and time. 6.
12 Manage the Advanced WiFi Features for a WiFi network This chapter describes how you can manage the advanced WiFi features for a WiFi network. For information about the basic WiFi features for a WiFi network, see Manage the Basic WiFi Features for a WiFi network on page 51. Note: In this manual, WiFi network means the same as SSID (service set identifier or WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network we mean an individual SSID or VAP.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Enable or disable client isolation for a WiFi network By default, client isolation is disabled for a WiFi network (SSID or VAP), allowing communication between WiFi clients that are associated with the same or different WiFi networks on the access point.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 7. Under Wireless Client Isolation, select one of the following radio buttons: • Disable: Client isolation is disabled for the WiFi network. This is the default setting. • Enable: Client isolation is enabled for the WiFi network. The following check boxes display: If you select the Enable radio button, two check boxes display (see the following steps). 8.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients that are connected to a WiFi network (SSID or VAP). This feature is disabled by default, but you can enable it. For information about how to view the tracked URLs per SSID or per WiFi client, see View or download tracked URLs on page 176. To enable or disable URL tracking for a WiFi network: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Disable: URL Tracking is disabled for the WiFi network. 8. Click the Apply button. Your settings are saved. Change the format of the DHCP offer messages in a WiFi network When a device tries to associate with the WiFi network and negotiates an IP address, the access point converts the broadcast DHCP offer message that it receives from the DHCP server to a unicast message, and forwards it to the device. This is the default configuration.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Scroll down and click the > Advanced tab. The page expands. 7. Under DHCP Offer Broadcast to Unicast, select one of the following radio buttons: • Enable. The access point forwards DHCP offer messages as unicast packets in the WiFi network. This is the default selection. • Disable.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To select a MAC ACL for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Your settings are saved. Set bandwidth rate limits for a WiFi network You can set rate limits for the upload and download bandwidths for devices that are connected to a WiFi network. The minimum bandwidth rate is 64 Kbps, the maximum bandwidth rate is 1024 Mbps. You can set one rate for the upload bandwidth and another rate for the download bandwidth.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 7. Select the Rate Limit check box. 8. Specify the values: • Upload: For the upload bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. • Download: For the download bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. 9. Click the Apply button. Your settings are saved.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Advanced rate selection lets you configure the following settings for each radio band in a WiFi network: • Fixed multicast rate: The multicast traffic transmission rate that you select is automatically applied. The rates that you can select are the basic multicast rates that the radio band supports. • Rate control: The rate that you select is automatically applied to beacon and other management frames and to control and data frames.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To configure advanced rate selection for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 6. Scroll down and click the Advanced Rate Selection tab. Note: For the selected SSID, you can specify the radio settings for the 2.4 GHz and 5 GHz radio bands individually. The descriptions in the following steps apply to both radios. 7. To apply basic fixed multicast rates, from the Fixed Multicast Rate menu, select one of the following rates, depending on the radio band: • 2.4 GHz: 1, 2, 5.5, or 11 Mbps or Auto.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The density level for the WiFi network is based on the following interdependent components, for which a setting is assigned by the position of the slider but which you cannot set individually: • Density of the WiFi clients: In the default 11ax WiFi mode for the radios, the setting can be very low, low, medium, high, or very high, depending on the position of the slider.
13 Set up a WiFi Bridge This chapter describes how you can configure a wireless distribution system (WDS) that consists of point-to-point WiFi bridge connections between two access points. Each WiFi bridge connection requires a WDS profile for which the settings must match on the access points that make up the bridge. A WDS is not the same as a NETGEAR Insight Instant Mesh WiFi network, which requires a root access point (see Install the Access Point in an Insight Instant Mesh WiFi Network on page 42).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 WiFi base station, WiFi repeater, and WiFi bridge requirements If the access point is connected to the Internet over a wired connection, the access point can function as the WiFi base station for up to four other access points that function as WiFi repeaters. The access point itself can also function as a WiFi repeater if it is connected to another access point that functions as a WiFi base station.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • WiFi repeater: The repeater sends all traffic from its local WiFi or wired devices to the WiFi base station. Similarly, the repeater receives all traffic for its local WiFi or wired computers from the base station. The repeater is connected to the network (and Internet) over the WiFi connection to the base station. To configure this mode, you must know the MAC address of the 2.4 GHz or 5 GHz radio on the base station.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To set up a WiFi bridge between two access points: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 8. Configure the WDS profile settings as described in the following table. Setting Description Wireless Network The WiFi network name of the network on which the WDS is established. The default Name (SSID) name is Netgear-WDS-x, in which x is the number of the WDS (1, 2, 3, or 4). Note: The WiFi network name must be identical on the WiFi base station and the WiFi repeater.
14 Manage the Advanced Radio Features This chapter describes how you can manage the advanced radio features of the access point. For information about the basic radio features, see Manage the Basic Radio Features on page 73. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio feature on the 5 GHz radio, the change affects all WiFi networks that broadcast on the 5 GHz radio.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage the advanced WiFi settings for the radios The advanced WiFi settings for the radios apply to all WiFi networks (VAPs or SSIDs). Although these settings work fine for most network environments and it is unlikely that you need to change them, you can change the radio settings, and you can do so for the 2.4 GHz and 5 GHz radios individually.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Configuration > Wireless > Advanced. 5. Configure the settings as described in the following table. The descriptions in the table apply to both radios. You can specify the radio settings for the 2.4 GHz and 5 GHz radios individually, but the check box for the 802.11n 256 QAM feature applies to the 2.4 GHz radio only (the feature is always enabled for the 5 GHz radio) and the 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Setting Description Max. Wireless Clients Enter the maximum number of WiFi clients that can simultaneously associate with the radio. The range is from 1 to 200. The default is 200 WiFi clients. RTS Threshold Enter the Request to Send (RTS) threshold. The range is from 256 to 2346. The default (256-2346) is 2346.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 (Continued) Setting Description MU-MIMO By default, the MU-MIMO Enable radio button is selected and multiuser MIMO (MU-MIMO) is enabled. To disable MU-MIMO, select the MU-MIMO Disable radio button. MU-MIMO enables multiple users to receive data from the access point simultaneously using the same channel. With MU-MIMO, the access point can transmit to multiple clients simultaneously using the same channel.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To manage the maximum number of clients for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 By default, multicast and broadcast rate limiting is enabled to improve the overall network performance by limiting the number of packets that are transmitted across the network. By default, the setting is 50 (the maximum possible value), which specifies a maximum rate limit of 50 packets per second. You can lower this number. To manage the broadcast and multicast settings for a radio: 1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage load balancing for the radios You can configure the radio utilization thresholds to enable each radio to maintain the speed and performance of the WiFi network as clients associate with and disassociate from the WiFi network. If you enable load balancing, client associations depend on the maximum number of clients per radio, the channel load per radio, and each client’s Received Signal Strength Indicator (RSSI).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 You can change the default settings for each type of load balancing, or completely disable one or more types of load balancing. To manage load balancing for the radios: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 By default, load balancing is disabled. When you enable load balancing, all three types of load balancing are enabled. You can individually disable one or more types of load balancing. 6. To individually enable or disable one or more types of load balancing, do the following: • To disable a particular type of load balancing, clear the small blue check box to the left of the Based On text.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 You can force sticky clients to disassociate from the radios of the access point. If load balancing based on the RSSI of the client is enabled (see Manage load balancing for the radios on page 208), after a client is forced to disassociate, the client can join again in the following situations: • The client can associate again if its RSSI is equal to or higher than the minimum required RSSI.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage the ARP proxy By default, the ARP proxy is enabled on the access point, allowing it to inspect all ARP broadcast packets for its clients. In this way, the access point responds to ARP requests for its clients, preventing unnecessary broadcast traffic on the radios.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Manage the amount of broadcast traffic The access point supports broadcast enhancements that reduce the broadcast traffic on the radios, and therefore on all WiFi networks that you configure on the access point. We recommend that you enable the broadcast enhancements only if you expect the access point to host less than 20 clients on the 5 GHz radio and less than 10 clients on the 2.4 GHz radio.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Disable: The broadcast enhancements are disabled. This is the default setting. 6. Click the Apply button. Your settings are saved.
15 Diagnostics and Troubleshooting This chapter describes how you can capture WiFi packets and troubleshoot the access point and network.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Perform a ping test You can ping the IP address of a device or network location from the access point and view the results of the ping test. To perform a ping test: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window displays.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Setting Description Ping Count The number of pings that the access point must send. The default number is 16. Packet Size (in Bytes) The size of each ping packet. The default size is 64 bytes. Ping Interval (in sec) The interval between pings. The default interval is 1 second. Ping Timeout (in sec) The period after which a ping times out. The default period is 60 seconds. Remote Host The IP address that the access point must ping. 6.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Select Management > Diagnostics > Speed Check. The Internet Speed Check page displays. 5. To view the privacy policy, click the Privacy Policy link. The Privacy Policy pop-up window displays. 6. To close the pop-up window, click the X in the upper right corner. 7. Click the Test Speed button. After a short delay, the page displays the measured latency in ms, download speed in Mbps, and upload speed in Mbps. 8.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Note: If the access point’s WiFi authentication and encryption is set to WPA3 Personal and the WiFi client device does support WPA3, make sure that the WiFi adapter device driver is updated to the latest version on the WiFi client device. • Make sure that the WiFi client device is not too far from the access point or too close. To see if the signal strength improves, move the WiFi client device near the access point but at least 6 feet (1.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • The 2.4G WLAN LED and 5G WLAN LED light solid green. If clients are connected to a radio, the associated WLAN LED lights solid blue. If a radio processes traffic, the associated WLAN LED blinks blue. You can use the LEDs for troubleshooting.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If the error persists, a hardware problem might exist. For recovery instructions or help with a hardware problem, contact technical support at netgear.com/support.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 The access point functions as a PoE PD and the Power/Cloud LED remains solid amber When you connect the access point to a power source, the Power/Cloud LED lights solid amber initially, then blinks amber slowly, and finally turns solid green or solid blue, indicating that the startup procedure is complete and the access point is ready.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Make sure that the access point is connected to the Internet and that the Internet connection is good. 4. Make sure that the access point is running the latest firmware version. For more information, see Manage the firmware of the access point on page 144. 5. Disconnect and reconnect the Ethernet cable at the LAN/PoE+ port and wait five minutes to see if the Power/Cloud LED lights solid blue.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 • Remove the extender access point from your Insight network location and from your Insight account. Then, add the extender access point to your Insight account again and to your Insight network location. 2.4G or 5G WLAN LED is off If the 2.4G WLAN LED or 5G WLAN LED is off, do the following: • • Check to see if a radio is disabled (see Turn a radio on or off on page 77).
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If you do not use a PoE connection to a PoE switch, connect a power adapter to the DC power connector. The Power/Cloud LED on the extender access point lights solid amber. 3. Wait for the extender access point to go through the initial connection and configuration process and for the Power/Cloud LED to stop blinking amber, green, and blue and to light solid blue. Note: The initial connection and configuration process might take up to 10 minutes.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 must be within the root access point’s WiFi coverage area to establish a good or fair WiFi connection. Troubleshoot WiFi connectivity for a WiFi client device If a WiFi client device cannot connect to the access point or the WiFi connectivity is not normal, try to isolate the problem: • Make sure that the WiFi settings in the WiFi client device and access point match exactly.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If the WiFi client device finds the WiFi network but the signal strength is weak, check these conditions: • Is the WiFi client device too far from the access point, or too close? Place the WiFi client device near the access point, but at least 6 feet (1.8 meters) away, and see whether the signal strength improves.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 21. If you still cannot find the IP address, reset the access point’s configuration to factory defaults. This sets the access point’s IP address to 192.168.0.100 and enables the DHCP client.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 enter the correct password. You must wait until the blockage is lifted, and then you get a single opportunity to enter the correct password. If you enter the wrong password again, the blockage period is extended as described in the following table. Table 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Test the LAN path to your access point You can ping the access point from your computer to verify that the LAN path to your access point is set up correctly. To ping the access point from a Windows-based computer: 1. From the Windows taskbar, click the Start button and find and select Run. 2. In the field provided, enter ping followed by the IP address of the access point, as in this example: ping 192.168.0.100 3. Click the OK button.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 If the path is functioning correctly, replies as described in Test the LAN path to your access point on page 230 display. If you do not receive replies, do the following: • Check to see that your computer lists the IP address of the router to which the access point is connected as the default router. If the IP configuration of your computer is assigned by DHCP, this information is not visible in your computer’s Network Control Panel.
A Factory Default Settings and Technical Specifications This appendix includes the following sections: • • Factory default settings Technical specifications 232
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Factory default settings You can reset the access point to the factory default settings, which are shown in the following table. For more information about resetting the access point to its factory settings, see Return the access point to its factory default settings on page 156. Table 3.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 3. Factory default settings (Continued) Feature Default Setting DHCP client Enabled so that the access point receives an IP address from a DHCP server or router in the network. NTP client Enabled Spanning Tree Protocol Disabled Network integrity check Disabled IGMP snooping Disabled 802.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 3. Factory default settings (Continued) Feature Default Setting Advanced rate selection Fixed multicast rate: Auto Rate control: Disabled Basic radio settings that apply to all WiFi networks (SSIDs or VAPs) Radio broadcast 2.4 GHz radio: Enabled 5 GHz radio: Enabled WiFi mode 2.4 GHz radio: 11ax mode, which also supports 11b, 11bg, and 11na 5 GHz radio: 11ax mode, which also support 11a, 11na, and 11ac Channel width 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 3. Factory default settings (Continued) Feature Default Setting Load balancing between radios Disabled Force sticky clients to disassociate Disabled ARP proxy Enabled Broadcast enhancements Disabled Wireless bridge None configured General security URL filtering Disabled RADIUS servers None configured Neighbor AP detection 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Technical specifications The following table shows the technical specifications. Table 4. Technical specifications Feature Description WiFi modes 2.4 GHz radio: 802.11ax, 802.11ng, 801.11bg, and 802.11b 5 GHz radio: 802.11ax, 802.11ac, 802.11na, and 802.11a The access point supports 2.4 GHz and 5 GHz concurrent operation Maximum theoretical throughput About 3600 Mbps simultaneous throughput (1200 Mbps in the 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Table 4. Technical specifications (Continued) Feature Description Hardware interface One RJ-45 LAN/PoE+ Ethernet port that supports 2.5 Gbps, 1 Gbps, 100 Mbps, and 10 Mbps. The port also supports Auto Uplink (Auto MDI-X). Note: Without a power adapter, the LAN/PoE+ port requires 802.3at (PoE+) power but might also function with 802.3af (PoE) power. We recommend that you use 802.3at (PoE+) power. Dimensions (W x D x H) 8.09 x 8.09 x 1.
B Mount the Access Point to a Wall or Ceiling The access point package includes wall-mounting and ceiling-mounting components. You can mount the access point to a solid surface (a wall or a ceiling) or to a ceiling with a 15/16 in. (23.8 mm) T-bar, or you can install the access point freestanding on a flat surface. We recommend that you use a flat Ethernet cable so that the cable fits in the narrow space between the access point and the surface on which it is mounted or placed.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Mount the access point to a wall To mount the access point to a wall: 1. The bottom of the access point includes two holes that let you mount the access point on two screws inserted in a wall. 2. Mark the wall where you want to insert the provided anchors and screws, which must be 4.33 in. (110 mm) apart. 3. Insert the anchors and screws, but leave about 0.25 in.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 4. Line up the holes on the bottom of the access point with the screws in the wall and mount the access point to the wall. Mount the access point to a solid ceiling To mount the access point to a solid ceiling: 1. Using the anchors and screws provided, attach the 15/16 in. (23.8 mm) bracket with the screw holes to the ceiling. The rectangular protruding part of the bracket must be facing the ceiling. 2.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 3. Line up the guides on the bottom of the access point with the bracket. 4. Slide the access point into the bracket until it locks in place.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 Note: To unlock the access point, push the locking tab toward the ceiling and slide the access point out of the bracket. The following figure shows a side view of the access point attached to the ceiling. The green arrow indicates the locking tab. Mount the access point to a T-bar Use the 15/16 in. (23.8 mm) bracket to mount the access point to a T-bar. Figure 8. 15/16 in. (23.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 To mount the access point to a T-bar: 1. Slide the 15/16 in. (23.8 mm) bracket between the guides on the bottom the access point until it locks in place. The locking tab must be at the front of the access point. 2. Hold the access point upside down. Note: If you can reach behind the T-bar, hold the T-bar with one hand and the access point with your other hand. 3. Align the rectangular protruding part of the bracket with the T-bar. 4.
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620 5. Hook the bracket onto the other side of the T-bar until the bracket locks onto the T-bar.
