ProSafe Wireless-N Access Point WNAP210 Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA 202-10474-01 March 2009 v1.
© 2009 by NETGEAR, Inc. All rights reserved.. Technical Support Please refer to the support information card that shipped with your product. By registering your product at http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product and software upgrades. NETGEAR, INC. Support Information Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card. E-mail: support@netgear.
Note: Delete this note and the information below for products that are not wireless. Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
Français [French] Par la présente NETGEAR Inc. déclare que l'appareil Radiolan est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE. Italiano [Italian] Con la presente NETGEAR Inc. dichiara che questo Radiolan è conforme ai requisiti essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE. Latviski [Latvian] Ar šo NETGEAR Inc.
FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only. Any product changes or modifications will invalidate all applicable regulatory certifications and approvals FCC Guidelines for Human Exposure This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment.
Canadian Department of Communications Radio Interference Regulations This digital apparatus (ProSafe Wireless-N Access Point WNAP210) does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Contents About This Manual Conventions, Formats, and Scope ................................................................................... xi How to Use This Manual ..................................................................................................xii How to Print This Manual .................................................................................................xii Revision History .................................................................................................
Configuring Your Wireless Settings ..........................................................................2-8 Deploying the Access Point ..........................................................................................2-10 Verifying Wireless Connectivity .............................................................................. 2-11 Logging In Using the Default IP Address ...............................................................
Changing the Administrator Password ...........................................................................3-9 Enabling the SysLog Server .........................................................................................3-10 Using Activity Log Information ...................................................................................... 3-11 Viewing General Summary Information ........................................................................3-12 Viewing Network Traffic Statistics .....
Appendix A Default Settings and Technical Specifications Factory Default Settings ................................................................................................ A-1 Technical Specifications ................................................................................................. A-3 Appendix B Related Documents Appendix C Command Sets Index x v1.
About This Manual The NETGEAR® ProSafe™ Wireless-N Access Point WNAP210 Reference Manual describes how to install, configure and troubleshoot the ProSafe Wireless Access Point WNAP210. The information in this manual is intended for readers with intermediate computer and Internet skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in the following paragraphs: • • Typographical Conventions.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. • Scope. This manual is written for the WNAP210 Wireless Access Point according to these specifications: Product Version Version 1.0 Manual Publication Date March 2009 For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in Appendix B, “Related Documents”.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com. – Printing a PDF chapter. Use the PDF of This Chapter link at the top left corner of any page. – • Click the PDF of This Chapter link at the top left corner of any page in the chapter you want to print.
ProSafe Wireless-N Access Point WNAP210 Reference Manual xiv About This Manual v1.
Chapter 1 Introduction This chapter describes some of the key features of the NETGEAR ProSafe Wireless-N Access Point WNAP210. It also includes the minimum prerequisites for installation (“System Requirements” on page 1-5), package contents (“What Is In the Box?” on page 1-5), and a description of the front and back panels of the WNAP210 (“Hardware Description” on page 1-6).
ProSafe Wireless-N Access Point WNAP210 Reference Manual Key Features and Standards The WNAP210 Wireless-N Access Point is easy to use and provides solid wireless and networking support. It also offers a wide range of security options. Supported Standards and Conventions The following standards and conventions are supported: • Standards Compliance. The wireless access point complies with the IEEE 802.11 b/g standards for wireless LANs, and is WiFi certified for 802.11n draft 2.0 standard.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Key Features The WNAP210 Access Point provides solid functionality, including the following features: • Multiple operating modes: – Wireless Access Point. Operates as a standard 802.11b/g/n access point. – Point-to-Point Bridge. In this mode, the access point communicates only with another bridge-mode wireless station or access point. Network authentication should be used to protect this communication. – Point-to-Multi-Point Bridge.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Autosensing Ethernet connection with Auto Uplink™ interface. Connects to 10/100/1000 Mbps IEEE 802.3 Ethernet networks. • LED indicators. Power, Test, LAN speed, LAN activity, and wireless activity for each radio mode are easily identified. • Wireless Multimedia (WMM) support. WMM is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data.
ProSafe Wireless-N Access Point WNAP210 Reference Manual The wireless access point incorporates Auto UplinkTM technology. The Ethernet port automatically senses whether the Ethernet cable plugged in to the port should have a “normal” connection such as to a computer or an “uplink” connection such as to a switch or hub. That port then configures itself correctly. This feature also eliminates any concerns about crossover cables, as Auto Uplink accommodates either type of cable to make the right connection.
ProSafe Wireless-N Access Point WNAP210 Reference Manual need to return it for repair. To qualify for product updates and product warranty, NETGEAR encourages you to register on the NETGEAR Web site at http://my.netgear.com/registration/ login.aspx. Hardware Description This section describes the front and rear hardware functions of the access point. Front Panel The WNAP210 front hardware functions are described in the following figure and table.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Table 1-1. Front Panel LEDs (continued) Item LED DESCRIPTION 3 Ethernet LAN Speed Off. A 10 Mbps or no link detected. Amber. A 10/100 Mbps link detected. Green. A 1000 Mbps link detected. 4 WLAN Blinking (Blue). Indicates Wireless activity has been detected. Rear Panel 1 2 3 Figure 1-2 The access pointrear panel functions are described in the following list: 1. Power socket. This socket connects to the WNAP210 12V 1.0A power adapter. 2.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 1-8 Introduction v1.
Chapter 2 Installation and Configuration This chapter describes how to set up your ProSafe Wireless-N Access Point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n wireless adapters to connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11b/g/n wireless networks at ranges of several hundred feet or more. This distance allows others outside your area to access your network.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the access point. For complete performance specifications, see Appendix A, “Default Settings and Technical Specifications.” For best results, place your wireless access point: • Near the center of the area in which your PCs will operate.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 2-1 There are several ways you can enhance the security of your wireless network: • Restrict access based on MAC address. You can restrict access to only trusted PCs so that unknown PCs cannot wirelessly connect to the access point. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed. • Turn off the broadcast of the wireless network name (SSID).
ProSafe Wireless-N Access Point WNAP210 Reference Manual Installing the WNAP210 Wireless Access Point Before installing the ProSafe Wireless-N Access Point, you should make sure that your Ethernet network is up and working. You will be connecting the access point to the Ethernet network so that computers with 802.11b/g/n wireless adapters will be able to communicate with computers on the Ethernet network.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 2-2 3. Login. The general screen of the the access point displays as shown in Figure 2-3. The default settings should be suitable for most users and environments. • When the wireless access point is connected to the Internet, you can select the Documentation link under the Web Support menu to view the documentation for the wireless access point. • Select LOGOUT to exit the access point setup screens.
ProSafe Wireless-N Access Point WNAP210 Reference Manual This unique name is the access point NetBIOS name. The access point name is printed on the rear label of the access point. The default is netgearxxxxxx, where xxxxxxx represents the last 6 digits of the access point MAC address. You can replace the default name with a unique name up to 15 characters long. 5.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • NTP Client. Enable the NTP client to synchronize the time of the access point with an NTP server. The default is Enable. Note: You must have an Internet connection to get the current time using an NTP client. – Use Custom NTP Server. Select this check box if you have a custom NTP server. The default is not selected. – Hostname / IP Address. Enter the host name or the IP address of the custom NTP server. The default is time-b.netgear.com. 7.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • DHCP Client. By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled. If you have a DHCP server on your LAN and you enable DHCP, the wireless access point will get its IP address, subnet mask, and default gateway settings automatically from the DHCP server on your network when you connect the access point to your LAN. • IP Address. Enter the IP Address of your wireless access point.The default IP address is 192.168.0.236.
ProSafe Wireless-N Access Point WNAP210 Reference Manual . Figure 2-6 2. Configure the Wireless LAN settings based on the following field descriptions: • Wireless Mode. Select the wireless operating mode you want to use: – 11b. 802.11b wireless stations only. – 11bg. Both 802.11b and 802.11g wireless stations can be used. – 11ng. Both 802.11n, and 802.11g wireless stations can be used. The default is 11ng. • Turn Radio On.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Wireless Network Name (SSID). Enter a 32-character (maximum) service set ID in this field; the characters are case-sensitive. When the wireless access point is deployed in “infrastructure” mode, the SSID assigned to a wireless device must match the wireless access point SSID for the wireless device to communicate with the access point. If they do not match, you will not get a wireless connection to the access point. The default is NETGEAR.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 2. Connect an Ethernet cable from your access point to a LAN port on your router, switch, or hub. Note: By default, access point is set with the DHCP client disabled. If your network uses dynamic IP addresses, you must change this setting. To connect to the access point after the DHCP server on your network assigns it a new IP address, enter the wireless access point name in your Web browser.
ProSafe Wireless-N Access Point WNAP210 Reference Manual To log in using the default IP Address: 1. Open a Web browser such as Internet Explorer, Mozilla Firefox, or Netscape Navigator. Connect to the access point by entering its default address of http://192.168.0.236 into your browser. Your Web browser should automatically find the access point and display the home screen. 2.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 4. Attach the brackets to the anchors using the screws from the mounting kit as shown in (D). Figure 2-7 5. Connect an Ethernet cable from your access point to a LAN port on your router, switch, or hub. If power is not provided by PoE, connect the power adapter to the wireless access point and plug the power adapter into a power outlet. The Power, LAN, and Wireless LAN LEDs should light up.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Logging In to the Access Point The access pointis set by default with the IP address of 192.168.0.236 with DHCP disabled. Note: If you log in using the default IP address, the computer you are using to connect to the access point should be configured with an IP address in the range 192.168.0.0 to 192.168.0.255 and a subnet mask of 255.255.255.0.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Setting Basic IP Options Enter the basic IP settings for your wireless access point on this screen. The default settings will work in most cases. However, if your wireless access point is part of a more complex LAN network, then modify these settings to meet the requirements of your network. To configure the basic IP settings of your wireless access point: 1. Select Configuration > IP. The IP Settings screen will display as shown in Figure 2-9.
ProSafe Wireless-N Access Point WNAP210 Reference Manual – IP Subnet Mask. The access point will automatically calculate the subnet mask based on the IP address that you assign. Otherwise, you can use 255.255.255.0 (the default) as the subnet mask. – Default Gateway. Enter the IP address of the gateway for your LAN. For more complex networks, enter the address of the router for the network segment to which the wireless access point is connected. The default is 0.0.0.0. – Primary DNS Servers.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 2-10 2. Specfy the Wireless LAN settings based on the following field descriptions: • Wireless Mode. Select the wireless operating mode you want to use. The default is 11ng. The options are: – 11b. All 802.11b wireless stations can be used. (The 802.11g wireless stations can still be used if they can operate in 802.11b mode.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Wireless Network Name (SSID). This is the name of your wireless network. It is set to the default name of NETGEAR_11a for 802.11a/n devices and NETGEAR_11ng for 802.11b/g/n devices. • Broadcast Wireless Network Name (SSID). If you disable broadcast of the SSID, only devices that have the correct SSID can connect.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • • Channel Width=20 MHz and Guard Interval=short (400 ms). Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.56 Mbps, 130 Mbps, 144.44 Mbps. • Channel Width=40 MHz and Guard Interval=short.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring QoS Settings Wireless Multimedia (WMM) is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the type of data. Time-dependent information, such as video or audio, has a higher priority than normal traffic. For WMM to function correctly, wireless clients must also support WMM. To configure your wireless QoS settings for 11b/g/n operation: 1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Setting Up and Testing Basic Wireless Connectivity Follow the instructions in this section to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. 1. From your Web browser, log in to the WNAP210 using its default address of 192.168.0.236.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Once your PCs have basic wireless connectivity to the WNAP210, you can configure the advanced wireless security functions. Understanding Security Profiles Security profiles let you configure unique security settings for each SSID. You can configure up to eight unique 802.11b/g/n wireless security profiles on the WNAP210. The Profile Settings screen is shown in Figure 2-12.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Profile definition. Specify the following settings: – Security Profile Name. Use a name that makes it easy to recognize the profile—and to tell profiles apart. (The default names are NETGEAR_11ng, NETGEAR-1_11ng, NETGEAR-2_11ng, and so on.) You can enter a value of up to 32 alphanumeric characters. Note: Only the first profile is enabled by default. The rest of the profiles are disabled and must be enabled if configured.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Table 2-1. Network Authentication Types Typea Description WPA with RADIUS You must configure the RADIUS server settings to use this option. WPA2 with RADIUS Select this only if all clients support WPA2. If selected, you must use (WPA2 is a later version of WPA.) AES encryption and configure the RADIUS server settings. WPA and WPA2 with RADIUS This selection allows clients to use either WPA (with TKIP) or WPA2 (with AES).
ProSafe Wireless-N Access Point WNAP210 Reference Manual Passphrases and Keys are used in the following ways: – Passphrase. To use the passphrase to generate the WEP keys, enter a passphrase and click the Generate Keys button. You can also enter the keys directly. These keys must match the other wireless stations. – Key 1, Key 2, Key 3, Key 4. If you are using WEP, select the key to be used as the default key. Data transmissions are always encrypted using the default key.
ProSafe Wireless-N Access Point WNAP210 Reference Manual SSID and WEP/WPA Settings Setup Form For a new wireless network, print or copy this form and fill in the configuration parameters. For an existing wireless network, the person who set up or is responsible for the network can provide this information. Be sure to set the regulatory domain correctly as the first step. • SSID: The service set identification (SSID) identifies the wireless local area network. NETGEAR_11ng is the default WNAP210 SSID.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Use the procedures described in the following sections to configure the WNAP210. Store this information in a safe place. Configuring the RADIUS Server Settings You can set p or modify the RADIUS server settings to compliment network authentication security options. The RADIUS server must be used with Legacy 802.1x, and can be used with WPA and WPA2 network authentication.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 2-13 3. Enter the following RADIUS server settings: • • Authentication Server. This configuration is required for authentication using a RADIUS server.The IP address, port number, and shared secret are required for communication with the primary RADIUS server. You can also configure a secondary RADIUS server to use, if the primary RADIUS server fails. – IP Address. The IP address of the RADIUS server. The default is 0.0.0.0. – Port.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Setting Up a Security Profile The access point allows you to set up eight different security profiles. You can configure each profile with a different security option for network authentication. Note: If you are using a RADIUS server, configure the RADIUS settings first, as described in the “Configuring the RADIUS Server Settings” on page 2-27. . Figure 2-14 Installation and Configuration 2-29 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual To configure a security profile: 1. From your Web browser, log in to the access point using the default LAN address of http://192.168.0.236, user name admin, and password password, or use the LAN address and password that you set up. 2. Select Configuration > Security > Profile Settings. The profile settings you selected will display as shown in Figure 2-14. 3. Select the radio button of the profile you want to modify and click Edit.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • For information on how to configure WEP encryption for Open Systems or Shared Key, see “Configuring WEP” on page 2-32. • For information on how to configure WPA with RADIUS, see “Configuring WPA with RADIUS” on page 2-33. • For information on how to configure WPA2 with RADIUS, see “Configuring WPA2 with RADIUS” on page 2-35.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring WEP To configure WEP data encryption: 1. From the Network Authentication drop-down list, select either Open System or Shared Key. 2. From the Data Encryption drop-down list, select encryption strength (64 bits, 128 bits, or 152 bits). 3. You manually or automatically program the four data encryption keys. These values must be identical on all PCs and wireless access points in your network. Choose either: • Automatic.
ProSafe Wireless-N Access Point WNAP210 Reference Manual See the document “Wireless Networking Basics” for a full explanation of each of these options, as defined by the IEEE 802.11 wireless communication standard. A link to this document on the NETGEAR website is in Appendix B, “Related Documents.” 5. Wireless Client Security Separation is set to No (disabled) by default. If this feature is enabled, associated wireless clients will not be able to communicate with each other.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 4. Select Security Profile Settings. The screen for the profile settings you selected displays. When the Security Profile screen displays, check the radio button of the security profile you want to modify, and click Edit. Figure 2-17 5. Select WPA with RADIUS from the from the Network Authentication drop-down list. Data Encryption will be set to TKIP by default. 6. Wireless Client Security Separation is set to No (disabled) by default.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring WPA2 with RADIUS Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2. Consult the product document for your wireless adapter and WPA2 client software for instructions on configuring WPA2 settings. Figure 2-18 To configure WPA2 with RADIUS: 1. Select Configuration > Security >Advanced > RADIUS Server Settings. The RADIUS Server Settings screen displays.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring WPA and WPA2 with RADIUS Not all wireless adapters support WPA and WPA2. Client software is required on the client: • Windows XP and Windows 2000 with Service Pack 3, or later, do include the client software that supports WPA. The wireless adapter hardware and driver must also support WPA. • Service Pack 3 does not include the client software that supports WPA2. Make sure that your client card supports WPA2.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 5. From the Network Authentication drop-down list, select WPA & WPA2 with RADIUS from the list. By default, Data Encryption will be set to TKIP+AES. 6. Wireless Client Security Separation is set to No (disabled) by default. If this feature is enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations.) 7. Click Apply to save your settings.
ProSafe Wireless-N Access Point WNAP210 Reference Manual To configure WPA-PSK: 1. From the Network Authentication drop-down list, select WPA-PSK. By default, Data Encryption will be set to TKIP. 2. Enter the preshared key passphrase (network key). 3. Wireless Client Security Separation is set to No (disabled) by default. If this feature is enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations.) 4.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 3. Wireless Client Security Separation is set to No (disabled) by default. If this feature is enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations.) 4. Click Apply to save your settings. Configuring WPA-PSK and WPA2-PSK Not all wireless adapters support WPA and WPA2.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 3. Wireless Client Security Separation is set to No (disabled) by default. If this feature is enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations.) 4. Click Apply to save your settings.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 2-23 3. Select the Turn Access Control On check box to enable the access control feature. 4. Select the access control database options. The options are: • Local MAC Address Database. The access point will use the local MAC address table for access control. This is the default. • RADIUS MAC Address Database. The access point will use the MAC address table located on the external RADIUS server on the LAN for access control.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 2-42 Installation and Configuration v1.
Chapter 3 Management This chapter describes how to use the management and monitoring features of your ProSafe Wireless-N Access Point. To access these features, connect to the WNAP210 access point as described in “Logging In Using the Default IP Address” on page 2-11. Then select the Maintenance or Monitoring in the main menu of the browser interface.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 2. Enter the following information in the SNMP fields: • SNMP. Enable SNMP to allow the SNMP network management software, such as HP OpenView, to manage the wireless access point through SNMPv1/v2 protocol. • Read-Only Community Name. The community string to allow the SNMP manager to read the wireless access point´s MIB objects. The default is Public. • Read-Write Community Name.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-2 4. Click Apply. Management Using Telnet 1. Open a secure Telnet session from your computer to the access point. The screen shown in Figure 3-3 should display. Figure 3-3 2. Enter the login name and password (admin and password are the defaults). After successful login, the prompt should appear. In this example, the prompt is netgear334408. 3. Enter the desired CLI commands.
ProSafe Wireless-N Access Point WNAP210 Reference Manual The CLI commands are listed in Appendix C, “Command Line Reference.” Upgrading the Wireless Access Point Software The software of the WNAP210 Wireless Access Point is stored in flash memory, and can be upgraded as NETGEAR releases new software . You can download upgrade files from the Netgear website. If the upgrade file is compressed (.zip file), you must first extract the image (.rmt) file before sending it to the wireless access point.
ProSafe Wireless-N Access Point WNAP210 Reference Manual The Web browser used to upload new firmware into the WNAP210 must support HTTP uploads, such as Microsoft Internet Explorer 6.0 or above, or Netscape Navigator 4.78 or above. Figure 3-4 To upgrade the WNAP210 firmware: 1. Download the new software file from the NETGEAR website, save it to your hard disk, and unzip it. 2. Select Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade screen displays as shown in Figure 3-4. 3.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Saving the Configuration To save your settings: 1. Select Maintenance > Upgrade > Backup Settings to back up your current settings.The Backup Settings screen displays. See Figure 3-5. Figure 3-5 2. Click Backup. Your browser will extract the configuration file from the wireless access point and prompt you for a location on your computer to store the file. 3. Give the file a meaningful name, such as WNAP210.cfg, and click Save.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-6 Restoring the WNAP210 to the Factory Default Settings You can restore the wireless access point to the factory default settings using the Restore function.. To restore the factory settings: 1. Select Maintenance > Reset > Restore Defaults. The Restore Defaults screen displays. Figure 3-7 2. On the Restore Defaults screen, select the Yes radio button, as shown in Figure 3-7. Management 3-7 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 3. Click Apply to reset to the factory default settings. After a restore, the wireless access point password will be password, the WNAP210 DHCP client will be disabled, the default LAN IP address will be 192.168.0.236, and the access point name will reset to the name printed on the label on the bottom of the unit.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-8 2. First enter the old password in the Current Password field. 3. Then enter the new password twice—once in the New Password field and again in the Repeat New Password field. 4. Click Apply to save your change. Enabling the Syslog Server The Syslog screen allows you to enable the syslog option if you have a syslog server on your LAN. To enable a syslog server: 1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-9 2. Enable Syslog. Enable this option if you have a syslog server on your LAN. If this feature is enabled, you must enter the IP address of your syslog server and the port number your SysLog server is configured to use. The default is disabled. 3. Syslog Server IP Address.The access point will send all the syslog file to the specified IP address if syslog option is enabled. The default is 0.0.0.0. 4. Port Number.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-10 2. Click Refresh to update the display, click Clear to clear the log content, or click Save As to save the log contents into a file on your PC or to save the file to a disk drive. Viewing General Summary Information The System screen, under the Monitoring tab provides a summary of the current WNAP210 configuration settings, including current IP settings and current wireless settings.
ProSafe Wireless-N Access Point WNAP210 Reference Manual To access the System screen: 1. Select Monitoring > System view the System screen, shown in Figure 3-11. This screen shows the parameters listed in Table 3-1: Table 3-1. System Information Fields Field Description Access Point Information Access Point Name Indicates the NetBIOS name. The default name can be changed, if you wish. MAC Address Displays the Media Access Control address (MAC address) of the wireless access point’s Ethernet port.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-11 Viewing Network Traffic Statistics The Statistics screen displays information for both wired (LAN) and wireless (WLAN) interface network traffic. To access statistics information: 1. Select Monitoring > Statistics. The Statistics screen displays, as shown in Figure 3-12. Management 3-13 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-12 2. Click Refresh to update the statistics information for each interface. . Table 3-2 describes the information fields detailed on the Statistics screen. Table 3-2. Statistics Fields Field Description Wired Ethernet Packets The number of packets sent and received since the WNAP210 was restarted. Bytes The number of bytes sent and received since the WNAP210 was restarted.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Table 3-2. Statistics Fields Field Description Multicast Packets Themulticast packets sent and received since the WNAP210 was restarted. Total Packets The wireless packets sent and received since the WNAP210 was restarted. Total Bytes The wireless bytes sent and received since the WNAP210 was restarted.
ProSafe Wireless-N Access Point WNAP210 Reference Manual To view the Wireless Stations list: 1. Select Monitoring > Wireless Stations. The Wireless Stations list displays, as shown in Figure 3-13. Figure 3-13 2. Click Refresh to update the list. Tip: If the wireless access point is rebooted, the table data is lost until the wireless access point rediscovers the devices. To force the wireless access point to look for associated devices, click the Refresh button.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-14 2. Click Refresh to discover the APs. See “Importing Rogue AP List from a File” on page 3-17 for more information. 3. Click Move to add APs in the Unknown AP List to the Known AP List. 4. Click Delete to remove APs from the Known AP List back to the Unknown AP List. 5. Select the Turn Rogue AP Detection On check box to enable rogue AP detection, and click Apply.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 4. Click Import to upload the list to the AP. To merge a file with an existing AP list: 1. Select the Merge radio button to add the new MAC addresses to the existing list. 2. Click Browse, and navigate to the location of the file containing the device list. 3. Select the file, and click Open. 4. Click Import to upload the list to the AP. Viewing and Saving AP Lists The WNAP210 detects nearby APs and wireless stations and maintains them in a list.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 3-15 Figure 3-16 2. In the Unknown AP List or the Known AP List sections, click Refresh to update the corresponding list. Management 3-19 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 3. Click SAVE to export the list of unknown or known APs to a file. A window opens so you can browse to the location where you want to save the file. The default file name is WNAP210Rogue.cfg. You can now import the saved lists into the Rogue AP screen. Creating AP Lists Manually You can create and save lists of devices manually: Create a text file that contains the MAC address of each known AP, separated by a space.
Chapter 4 Advanced Configuration This chapter describes how to configure the advanced features of your ProSafe Wireless-N Access Point. The advanced configuration features are located under various sub-menus under Configuration and provide the following functions: • 802.1Q VLAN. Enabling untagged VLAN operation • Hotspot settings. Enabling HTTP redirect • Wireless settings. Configuring advanced wireless LAN parameters. • Access point settings. Enabling wireless bridge and repeater modes. 802.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • Management VLAN. Management VLANs are used for managing traffic (Telnet, SNMP, and HTTP) to and from the access point. Frames belonging to the management VLAN are not given any 802.1Q header when sent over the trunk. If a port is in a single VLAN, it can be untagged. But if the port needs to be a member of multiple VLANs, it must be tagged. Figure 4-1 4-2 Advanced Configuration v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Hotspot Settings If you want the wireless access point to capture and redirect all HTTP (TCP, port 80) requests, use this feature to redirect the requests to the specified URL. For example, a hotel might want all wireless connections to go to its server to start a billing transaction. Figure 4-2 Note: The redirection will occur only the first time a wireless client opens a web browser. To set up a hotspot server: 1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring Advanced Wireless Settings The Wireless Settings screen are used to configure and enable various wireless LAN parameters for 11b/g/n mode. The default wireless LAN parameters usually work well. However, you can use these settings to fine-tune the overall performance of your wireless access point for your environment. To configure advanced wireless settings: 1. Select Configuration > Wireless > Advanced > Wireless Settings.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 2. Enter the appropriate information in the following fields: • RTS Threshold (0 - 2347). Request to Send Threshold. The packet size that is used to determine if it should use the CSMA/CD (Carrier Sense Multiple Access with Collision Detection) mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD transmission mechanism, the transmitting station sends out the actual packet as soon as it has waited for the silence period.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring Advanced QoS Settings Wireless Multimedia (WMM) is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the type of data. Time-dependent information, such as video or audio, has a higher priority than normal traffic. For WMM to function correctly, Wireless clients must also support WMM. For most networks, the default QoS (Quality of Service) queue parameter settings work well.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 4-4 The QoS options on the WNAP210 are as follows: • AP EDCA parameters. Specify the AP EDCA parameters for different types of data transmitted from the access point to the wireless client. • Station EDCA parameters. Specify the Station EDCA parameters for different types of data transmitted from the wireless client to the access point. If WMM is disabled, you cannot configure Station EDCA parameters. Advanced Configuration 4-7 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Table 4-1 describes the settings for QoS queues. Table 4-1. QoS Queues and Parameters QoS Queue Description Data 0 (Voice) High-priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue. Data 1 (Video) High-priority queue, minimum delay. Time-sensitive video data is automatically sent to this queue. Data 2 (Best Effort) Medium-priority queue, medium throughput and delay.
ProSafe Wireless-N Access Point WNAP210 Reference Manual When you click the Edit button, you must enter the profile name and the MAC address (physical address) of the other bridge-mode wireless station in the fields provided. WEP, WPA-PSK, or WPA2-PSK are supported. WPA2-PSK can (and should) be used to protect this communication. • Wireless Point-to-Multi-Point Bridge. Select this only if this WNAP210 access point is the master for a group of bridge-mode wireless stations.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 4-5 On the screen shown in Figure 4-5, when you select the radio button for any option, an Edit button displays. Click this button to edit the security profile of the wireless bridge settings, as shown in Figure 4-6. 4-10 Advanced Configuration v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 4-6 Configuring a WNAP210 as a Point-to-Point Bridge To configure a point-to-point bridge as shown in Figure 4-7: 1. Select Configuration > Wireless Bridge > Bridging and Repeating. The Bridging and Repeating screen displays. 2. Configure the WNAP210 access point (AP1) on LAN Segment 1 in Point-to-Point Bridge mode. Advanced Configuration 4-11 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Figure 4-7 3. Configure the WNAP210 access point (AP2) on LAN Segment 2 in Point-to-Point Bridge mode. AP1 must have AP2’s MAC address in its Remote MAC Address field, and AP2 must have AP1’s MAC address in its Remote MAC Address field. 4. Configure and verify the following parameters for both access points: • Verify that both access points are configured to operate in the same LAN network address range as the LAN devices.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 5. Verify connectivity across the LAN 1 and LAN 2. A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other PCs or servers connected to LAN Segment 1 or LAN Segment 2. 6. Click Apply to save your settings. Configuring a Point-to-Multi-Point Wireless Bridge To configure a point-to-multi-point wireless bridge as shown in Figure 4-8: 1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 2. Configure the operating mode of the access points: • Configure WNAP210 (AP1) on LAN Segment 1 in point-to-point bridge mode with the remote MAC address of AP2. • Because it is in the central location, configure WNAP210 (AP2) on LAN Segment 2 in Point-to-Multi-Point Bridge mode. The MAC addresses of the adjacent APs are required in AP2. • Configure the WNAP210 (AP3) on LAN 3 in Point-to-Point Bridge mode with the Remote MAC Address of AP2. 3.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Configuring the WNAP210 as a Wireless Repeater To configure the WNAP210 as a wireless repeater as shown in Figure 4-9: 1. Select Configuration > Wireless Bridge > Bridging and Repeating. The Bridging and Repeating screen displays. 2. Configure the operating mode of the access points. • Configure WNAP210 (AP1) on LAN Segment 1 in Repeater mode with the remote MAC address of AP2.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • If you are using DHCP, all access points should be set to Obtain an IP address automatically (DHCP Client) in the IP Address Source portion of the Basic Settings screen. • All ProSafes use the same SSID, channel, authentication mode, if any, and encryption. 4. Verify connectivity across the LANs.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Select the Enable Wireless Bridgeing and Repeating check box. This allows you to select a bridging mode. 2. Select Client. You can now enable the MAC Clone feature. The default is Disable. If you enable the MAC Clone feature, enter the MAC Clone address. See Figure 4-11. 3. Click Apply. Figure 4-11 Advanced Configuration 4-17 v1.
ProSafe Wireless-N Access Point WNAP210 Reference Manual 4-18 Advanced Configuration v1.
Chapter 5 Troubleshooting and Debugging This chapter provides information about troubleshooting your ProSafe Wireless-N Access Point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the WNAP210 on? Go to “Installing the WNAP210 Wireless Access Point” on page 2-4. • Have I connected the wireless access point correctly? Go to “Installing the WNAP210 Wireless Access Point” on page 2-4.
ProSafe Wireless-N Access Point WNAP210 Reference Manual The Wireless LAN LED does not light up. The access point antennas are not working. • If the Wireless LAN LED stays off, disconnect the adapter from its power source, and then plug it in again. • Make sure that the antennas are securely connected to the WNAP210. • Contact NETGEAR Technical Support if the Wireless LAN LED remains off. The Ethernet LAN LED is not lit. There is a hardware connection problem.
ProSafe Wireless-N Access Point WNAP210 Reference Manual • The access point’s default values might not work with your network. Check the access point default configuration against the configuration of other devices in your network. I cannot connect to the WNAP210 to configure it. Check these items: • The WNAP210 is installed correctly, LAN connections are OK, and it is powered on. Check that the LAN port LED is green to verify that the Ethernet connection is OK.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Using the Restore Factory Settings Button to Restore Default Settings The Restore factory settings button (see “Rear Panel” on page 1-7) has two functions: • Reboot. When this button is pressed and released quickly, the WNAP210 reboots (restarts). • Reset to factory defaults. This button can also be used to clear all data and restore all settings to the factory default values. To clear all data and restore the factory default values: 1.
Appendix A Default Settings and Technical Specifications This appendix provides the factory default settings and technical specifications for the ProSafe Wireless-N Access Point. Factory Default Settings You can use the restore settings button located on the rear of your device to reset all settings to their factory defaults. This is called a hard reset. • To perform a hard reset, push and hold the restore settings button for approximately 5 seconds (until the Test LED blinks rapidly).
ProSafe Wireless-N Access Point WNAP210 Reference Manual Table A-1. Access Point Default Configuration Settings (continued) Feature Description Lan IP 192.168.0.236 Subnet Mask 255.255.255.0 Gateway Address 0.0.0.
ProSafe Wireless-N Access Point WNAP210 Reference Manual Technical Specifications Table A-2. WNAP210 Technical Specifications Parameter ProSafe Wireless-N Access Point 802.11g Data Rates 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, & 54 Mbps (Auto-rate capable) 802.11ng Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.
ProSafe Wireless-N Access Point WNAP210 Reference Manual A-4 Default Settings and Technical Specifications v1.
Appendix B Related Documents This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product. Document Link ITCP/IP Networking Basics http://documentation.netgear.com/reference/enu/tcpip/index.htm Wireless Networking Basics http://documentation.netgear.com/reference/enu/wireless/index.htm Preparing your Network http://documentation.netgear.com/reference/enu/wsdhcp/index.htm Glossary http://documentation.netgear.
ProSafe Wireless-N Access Point WNAP210 Reference Manual B-2 Related Documents v1.
Appendix C Command Line Reference The ProSafe Wireless-N Access Point (AP) can be configured through either the command line interface (CLI), a Web browser, or a MIB browser. The CLI allows viewing and modification of the configuration from a terminal or PC through a telnet connection.
ProSafe Wireless-N Access Point WNAP210 Reference Manual transmissions) | | | | |-knownap-add --add known access point | | | | |-knownap-del --delete known access point | | | | |-macacl-add --add wireless access control (ACL) | | | | |-macacl-database --delete wireless access control (ACL) database | | | | |-macacl-del --delete wireless access control (ACL) | | | | |-mcsrate --transmit data rate | | | | |-mode --enable wireless access control (ACL) | | | | |-operation-mode --wireless operation mode | | | |
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | | | | | |-name --profile name | | | | | | |-presharedkey --pre-shared key | | | | | | |-security-separation --disable associated wireless client communication | | | | | | |-ssid --network name (1-32 chars) | | | | | | |-status --profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --wireless wep passphrase key | | | | | | |-wepkeytype --wireless wep key type | | | | | | | | | | | |-3> --3rd security profile | | | | | | |-au
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | | | | |-5> --5th security profile | | | | | | |-authentication --authentication type | | | | | | |-encryption --data encryption | | | | | | |-hide-network-name --hide network name | | | | | | |-key1 --wireless wep key 1 | | | | | | |-key2 --wireless wep key 2 | | | | | | |-key3 --wireless wep key 3 | | | | | | |-key4 --wireless wep key 4 | | | | | | |-keyno --key number | | | | | | |-name --profile name | | | | | | |-presharedkey --pre-shared key
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | | | | | |-presharedkey --pre-shared key | | | | | | |-security-separation --disable associated wireless client communication | | | | | | |-ssid --network name (1-32 chars) | | | | | | |-status --profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --wireless wep passphrase key | | | | | | |-wepkeytype --wireless wep key type | | | | | | | | | | | |-8> --8th security profile | | | | | | |-authentication --authentication type
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-status --profile status | | | | | | |-wep-pass-phrase --wireless wep passphrase key | | | | | | |-wepkey --wireless wep key | | | | | | |-wepkeytype --wireless wep key type | | | | | | | | | | | |-3> --3rd security profile | | | | | | |-authentication --authentication type | | | | | | |-encryption --data encryption | | | | | | |-name --profil
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | | |-log> --syslog setting | | |-syslog --enable syslog client | | |-syslog-server-ip --syslog server IP address | | |-syslog-server-port --syslog server port number | | | |-radius> | | |-accounting-server-primary --primary accounting server | | |-accounting-server-primary-port --primary accounting server port | | |-accounting-server-primary-sharedsecret --primary accounting server shared secret | | |-accounting-server-secondary --secondary account
ProSafe Wireless-N Access Point WNAP210 Reference Manual | | |-management-vlan | | |-untagged-vlan | | |-untagged-vlan-status | | | |-exit |-file |-firmware-upgrade |-password |-restore-configuration |-restore-default-password |-show> | |-configuration | |-interface> | | |-eth> | | | |-statistics | | | | | |-wlan> | | | |-2.
Index Numerics Basic Settings menu 2-6 11b/g/Next Beacon Interval default setting 4-6 default mode 2-9 192.168.0.210, Static IP Address 2-4 192.168.0.230, default address 2-4 255.255.255.0 default subnet 2-4 802.11a default name 2-11 802.11a/g 1-4 Broadcast SSID 2-10 Broadcast Wireless Network Name 2-10 Broadcast Wireless Network Name (SSID) 2-18, 2-23 Broadcast Wireless Network Name. See SSID BSSID 1-2 802.11b/g default name 2-11 C 802.
ProSafe Wireless-N Access Point WNAP210 Reference Manual crossover cable 1-5 restoring 3-8 CSMA/CD 4-5 features 1-2 Customer support 1-ii Firmware Upgrade screen 3-5 firmware, upgrading 1-3 D Data Encryption AES 2-35, 2-38 TKIP 2-34 TKIP+AES 2-36, 2-39 Fragmentation Length default setting 4-5, 4-6 front panel diagram of 1-7 Data Rate 2-11, 2-18 G default login 2-4 default password 2-4, 2-12, 2-14 Gateway default address 2-7, 2-16 Default Settings A-1 Guard Interval 2-19 default settings 2-21 d
ProSafe Wireless-N Access Point WNAP210 Reference Manual L P LAN IP address default 5-3 package contents 1-6 LED indicators table of 1-7 passphrase use with WEP 2-32 WPA2-PSK, use with 2-38 WPA-PSK/WPA2-PSK, use with 2-39 Logging In Using the Default IP Address 2-11 login screen 2-12, 2-14 M MAC address 2-5, 2-14, 2-40 restricting access 2-3 trusted PCs 2-3 MAC Address Database Local 2-41 RADIUS 2-41 MAC Authentication 2-40 MAC Authentication screen 2-40 MAC Clone 3-17 MCS Index 2-18, 2-20 multiple
ProSafe Wireless-N Access Point WNAP210 Reference Manual Read-Write Community Name default name 3-2 rear panel diagram of 1-8 Reboot 3-9, 5-4 Receive Traps 3-2 reception range equipment placement 2-1 registering 1-ii Remote Console 3-1 remote management via Telenet 3-1 security options WEP data encryption 2-3 WPA-PSK 2-3 Security Profile Authentication Settings 2-23 Profile Definition 2-23 with WPA 2-35, 2-36 security profile about 2-22 Security Profile Name 2-23 Security Profiles screens 2-22 Remote Mana
ProSafe Wireless-N Access Point WNAP210 Reference Manual TKIP+AES 2-36, 2-39 80211.a mode 2-16 80211.
ProSafe Wireless-N Access Point WNAP210 Reference Manual configuration of 2-35 Network Authentication screen 2-35 restructions 2-35 WPA2-PSK AES 2-38 configuration of 2-38 Network Authentication screens 2-38 restrictions 2-38 WPA-PSK 2-3 configuration of 2-37 Network Authentication screens 2-37 restrictions 2-37 TKIP 2-38 WPA-PSK and WPA2-PSK configuration of 2-39 Network Authentication screens 2-39 restructions 2-39 WWM (Wireless Multimedia) 1-4 Index-6 v1.