User Manual
Table Of Contents
- Contents
- 1. Introduction
- 2. Hardware Overview
- 3. Install the Access Point in Your Network and Access It for Initial Configuration
- Position your access point for best performance
- Set up and connect the access point to your network
- Connect to the access point for initial configuration
- Connect over WiFi using the NETGEAR Insight app
- Connect over the Internet using the NETGEAR Insight Cloud portal
- Connect over WiFi to the local browser UI for initial configuration
- Connect over the LAN to the local browser UI for initial configuration
- Configure the access point offline using a directly connected computer
- Log in to the access point after initial setup
- Dismiss a browser security warning
- 4. Install the Access Point in an Insight Instant Mesh WiFi Network
- What are a root access point and an extender access point?
- What is an Insight Instant Mesh WiFi network?
- Requirements for placing an extender access point in a mesh WiFi network
- Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
- Connect the access point as an extender to a root access point
- Connect over the Internet using the NETGEAR Insight Cloud portal
- 5. Manage the Basic WiFi Features for a WiFi network
- Set up an open or secure WiFi network
- View or change the settings of a WiFi network
- Remove a WiFi network
- Hide or broadcast the SSID for a WiFi network
- Change the VLAN ID for a WiFi network
- Change the authentication and encryption for a WiFi network
- Enable or disable PMF for a WiFi network
- Disable or enable a WiFi network or set up a WiFi activity schedule
- Enable or disable band steering with 802.11k RRM and 802.11v WiFi network management
- 6. Manage the Basic Radio Features
- 7. Set Up and Manage a Captive Portal
- 8. Manage Access and Security
- 9. Manage the Local Area Network and IP Settings
- Disable the DHCP client and specify a fixed IP address
- Enable the DHCP client
- Set the 802.1Q VLAN and management VLAN
- Set an existing domain name
- Enable or disable Spanning Tree Protocol
- Enable or disable the network integrity check function
- Enable or disable IGMP snooping
- Enable or disable Ethernet LLDP
- Enable or disable UPnP
- 10. Manage and Maintain the Access Point
- Change the management mode to NETGEAR Insight or Web-browser
- Change the country or region of operation
- Change the admin user account password
- Change the system name
- Specify a custom NTP server
- Set the time zone
- Manage the syslog settings
- Manage the firmware of the access point
- Manage the configuration file of the access point
- Reboot the access point from the local browser UI
- Schedule the access point to reboot
- Return the access point to its factory default settings
- Enable SNMP and manage the SNMP settings
- Manage the LEDs
- 11. Monitor the Access Point and the Network
- Display the access point Internet, IP, and system settings
- Display the WiFi radio settings
- Display unknown and known neighbor access points
- Display client distribution, connected clients, and client trends
- View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization
- View or download tracked URLs
- View, save, download, or clear the logs
- View a WiFi bridge connection
- View alarms and notifications
- 12. Manage the Advanced WiFi Features for a WiFi network
- 13. Set up a WiFi Bridge
- 14. Manage the Advanced Radio Features
- 15. Diagnostics and Troubleshooting
- Perform a ping test
- Check the Internet speed
- Quick tips for WiFi troubleshooting
- Troubleshoot with the LEDs
- Power/Cloud LED remains off
- Power/Cloud LED remains solid amber
- Power/Cloud LED is blinking amber slowly, continuously
- The access point functions as a PoE PD and the Power/Cloud LED remains solid amber
- Power/Cloud LED does not light blue in the NETGEAR Insight management mode
- Power/Cloud LED does not stop blinking amber, green, and blue
- 2.4G or 5G WLAN LED is off
- The extender access point and root access point cannot connect
- Troubleshoot WiFi connectivity for a WiFi client device
- Troubleshoot Internet browsing
- You cannot log in to the access point over a LAN connection
- Changes are not saved
- You enter the wrong password and can no longer log in to the access point
- Troubleshoot your network using the ping utility
- A. Factory Default Settings and Technical Specifications
- B. Mount the Access Point to a Wall or Ceiling
8. Click the Apply button.
Your settings are saved.
Set up RADIUS servers
If you use WPA2 Enterprise security, WPA3 Enterprise security, or a RADIUS MAC ACL,
you must set up RADIUS servers for authentication, accounting, or both authentication
and accounting using RADIUS. You must set up primary IPv4 servers and you can set
up secondary IPv4 servers. These RADIUS server settings apply either to all WiFi networks
that use WPA2 Enterprise security or WPA3 Enterprise security (see Set up an open or
secure WiFi network on page 52) or to all WiFi networks that use a RADIUS MAC ACL.
Note: Either WPA2 Enterprise security or WPA3 Enterprise security and a RADIUS MAC
ACL are mutually exclusive. If you want to use a RADIUS MAC ACL for a WiFi network,
select a different type of WiFi security (see Set
up an open or secure WiFi network on
page 52). If you want to use WPA2 Enterprise security or WPA3 Enterprise security for
a WiFi network, use a local MAC ACL (see Manage
local MAC access control lists on
page 106).
If you use a RADIUS MAC ACL, you must define the ACL on the RADIUS server, using
the format in the following example for client MAC addresses in the RADIUS server: If
the client MAC address is 00:0a:95:9d:68:16, specify it as 000a959d6816 in the RADIUS
server.
To set up RADIUS servers:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss
a browser security warning
on page 41.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual119Manage Access and Security
Insight Cloud Managed WiFi 6 AX3600 Access Point Model WAX620