ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Reference M anua l 350 East Plumeria Drive San Jose, CA 95134 USA October 2012 202-10983-02 v2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Support Thank you for choosing NETGEAR. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com.
Contents Chapter 1 Introduction About the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Key Features and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Chapter 3 Wireless Configuration and Security Wireless Data Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Before You Change the SSID, WEP, and WPA Settings . . . . . . . . . . . . 46 Configure and Enable Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Ethernet LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Configure Hotspot Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 Configure Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 107 Configure Advanced Quality of Service Settings . . . . . . . . . . . . . . . . . . . 110 Configure Quality of Service Policies . . . . . . . . . . . . .
1. Introduction 1 This chapter introduces the NETGEAR® ProSafe® Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 and describes some of the key features.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 chains and three receive radio chains, also referred to as 3x3 multiple input, multiple output (MIMO), can increase wireless throughput considerably. The wireless access point provides wireless connectivity to multiple wireless network devices within a fixed range or area of coverage—interacting with a wireless network interface card (NIC) through an antenna.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 System Requirements Before installing the wireless access point, make sure that your system meets these requirements: • A 10/100/1000 Mbps local area network device such as a hub or switch • The Category 5 UTP straight-through Ethernet cable with RJ-45 connector included in the package, or one like it • A 100–120V, 50–60 Hz AC power source • A computer with the TCP/IP protocol installed and a web browser for configuration, such as Micr
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • DHCP server and client. The DHCP server of the wireless access point can provide a dynamic IPv4 or IPv6 address to wireless clients. The wireless access point can also act as a client and obtain an IPv4 or IPv6 address from a DHCP server on the LAN. • SNMP. The wireless access point supports Simple Network Management Protocol (SNMP) for Management Information Base (MIB) management. • STP and LLDP.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • QoS. Quality of Service (QoS) support lets you configure parameters that affect traffic flowing from the wireless access point to the client station and traffic flowing from the client station to the wireless access point: - The QoS settings let you prioritize traffic, such as voice and video traffic, so that packets do not get dropped.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 802.11b/g/n and 802.11a/n Standards–Based Wireless Networking The wireless access point provides a bridge between wired Ethernet LANs and 802.11b/g/nand 802.11a/n-compatible wireless LAN networks. It provides connectivity between wired Ethernet networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 2 1 3 4 5 Figure 1. Table 1. Top panel LEDs Item LED 1 Power/Test Off 2 Active 3 4 5 Description LAN 2.4 Ghz 5 WLAN WLAN Power is off. On (green) Power is on. Amber, then blinking green A self-test is running or software is being loaded. During startup, the LED is first steady amber, then goes off, and then blinks green before turning steady green after about 45 seconds.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Rear Panel 1 2 3 4 5 6 7 8 Figure 2. The rear panel components of the wireless access point, from left to right, are described in the following list: 1. First reverse SMA connector for an optional 2.4 GHz antenna. 2. Factory default Reset button. Using a sharp object, press and hold this button for about 5 seconds to reset the wireless access point to factory defaults settings.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 3. Register the Wireless Access Point To qualify for product updates and product warranty, NETGEAR encourages you to register your product. The first time that you connect to the wireless access point while it is connected to the Internet, you have the option to register your product. At any time, you can register your product from the web management interface, or you can go to the NETGEAR website for registration at https://my.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 5. 3. Enter the information in the blank fields. The serial number, model number, and date of purchase are entered automatically. 4. Click Register.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 6. 5. Complete the registration form. 6. Click submit.
2. Installation and Basic Configuration 2 This chapter describes how to install and configure the wireless access point for wireless connectivity to your LAN. This basic configuration enables computers with either 2.4 GHz 802.11b/g/n or 5 GHz 802.11a/n wireless adapters to connect to the Internet or access printers and files on your LAN. In planning your wireless network, consider the level of security required.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Failure to follow these guidelines can result in significant performance degradation or inability to connect wirelessly to the wireless access point. For complete performance specifications, see Appendix A, Supplemental Information.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Hardware Requirements for Computers on Your LAN To connect to the wireless access point on your network, each computer needs to have an 802.11b/g/n or 802.11a/n wireless adapter installed. NETGEAR recommends using the wireless access point with computers that have the NETGEAR N600 Wireless Dual Band USB Adapter (WNDA3100) installed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Install and Configure the Wireless Access Point Install and configure your wireless access point in the order of the following sections: 1. Connect the Wireless Access Point to a Computer 2. Log In to the Wireless Access Point 3. Configure Basic General System Settings and Time Settings 4. Configure the IPv4 Settings 5. Configure the Optional DHCPv4 Server 6.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 A Ethernet cable B Ethernet port Figure 7. 5. Turn on your computer. 6. Connect the power adapter to the wireless access point. Tip: The wireless access point supports Power over Ethernet (PoE). If you have a switch that provides PoE, you do not need to use the power adapter to power the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Log In to the Wireless Access Point The default IP address of your wireless access point is 192.168.0.100. By default, the DHCP client on the wireless access point is disabled so you can log in using the default IP address. To log in to the wireless access point: 1. Open a web browser such as Microsoft Internet Explorer 6.0 or later, or Mozilla Firefox 1.5 or later. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 10. These buttons have the following functions: • Edit. Allows you to edit the existing configuration. • Cancel. Cancels all configuration changes that you made on the screen. • Apply. Saves and applies all configuration changes that you made on the screen.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 2. Configure the settings as explained in the following table: Table 2. Basic general system settings Setting Description Access Point Name This unique name is the wireless access point NetBIOS name. The name is printed on the rear label of the wireless access point. The default is netgearxxxxxx, in which xxxxxx represents the last 6 digits of the wireless access point MAC address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 3. Time system settings (continued) Setting Description NTP Client Enable the Network Time Protocol (NTP) client to synchronize the time of the wireless access point with an NTP server. By default the Enable radio button is selected. Use Custom NTP Server Select this check box if you want to use a custom NTP server. Note: You need to have an Internet connection to use an NTP server that is not on your local network.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 13. 2. Configure the IPv4 settings as explained in the following table: Table 4. IPv4 settings Setting Description DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure the Optional DHCPv4 Server The wireless access point provides a built-in DHCPv4 server for wireless clients only, which can be especially useful in small networks. When the DHCP server is enabled, the wireless access point provides preconfigured TCP/IP configurations to all connected wireless stations. Note: For information about how to configure the DHCPv6 server, see Configure the Optional DHCPv6 Server on page 101.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 5. DHCP server settings for IPv4 (continued) Setting Description Ending IPv4 Address Enter the last address in the range of IPv4 addresses to be assigned to DHCP clients. The default address is 192.168.1.50. Subnet Mask Enter the subnet mask to be used by DHCP clients. The default mask is 255.255.255.0. Gateway IPv4 Address Enter the IPv4 address of the default routing gateway to be used by DHCP clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: The radio wave icon ( ) displays next to the enabled wireless mode. Figure 15. 2. Specify the wireless mode in the 2.4 GHz band by selecting one of the following radio buttons: • 11b. Both 802.11n- and 802.11g-compliant devices can connect to the access point because they are backward compatible. • 11bg. 802.11n-compliant devices can connect to the access point because they are backward compatible. • 11ng.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Specify the remaining wireless settings as explained the following table: Table 6. Basic 2.4 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive. The default is NETGEAR_11ng.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 6. Basic 2.4 GHz band wireless settings (continued) Setting Descriptions 11b and 11bg modes only Data Rate Output Power From the drop-down list, select the transmission power of the wireless access point: Full, Half, Quarter, Eighth, Minimum. The default is Full. From the drop-down list, select the transmit data rate of the wireless network. The default setting is Best.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 16. 2. Specify the wireless mode in the 5 GHz band by selecting one of the following radio buttons: • 11a. 802.11n-compliant devices can connect to the access point because they are backward compatible. • 11na. This is the default setting. If you keep the default setting, go to Step 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Specify the remaining wireless settings as explained the following table: Table 7. Basic 5 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive. The default is NETGEAR_11na.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 7. Basic 5 GHz band wireless settings (continued) Setting Descriptions 11a mode only Data Rate Output Power From the drop-down list, select the transmission power of the wireless access point: Full, Half, Quarter, Eighth, Minimum. The default is Full. From the drop-down list, select the transmit data rate of the wireless network. The default setting is Best.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 NETGEAR recommends that you complete the following tasks before you deploy the wireless access point in your network: • Configure wireless security and other wireless features as described in Chapter 3, Wireless Configuration and Security. • Configure any additional features that you might need as described in Chapter 4, Management and Monitoring, and Chapter 5, Advanced Configuration.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Do not place the wireless access point in a false ceiling space facing up. To install the wireless access point using the ceiling installation kit: 1. Verify the package contents of the ceiling installation kit. Mounting plate Clamp with screws 2. Detach the mounting plate from the wireless access point. 3. Attach the clamp to the ceiling rail.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Attach the mounting plate to the clamp. 5. Connect the cables to the wireless access point. 6. Attach the wireless access point to the mounting plate.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. Attach the cover to the wireless access point. Wall Installation The best location for wall installation is at the center of your wireless coverage area, and within line of sight of all mobile devices. Make sure the top (the dome side) of the wireless access point is directed toward the users and not the wall. To install the wireless access point using the wall installation kit: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Screws and wall supports Mounting plate 2. Detach the mounting plate from the wireless access point. 3. Attach the mounting plate to the wall. 4. Connect the cables to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Attach the wireless access point to the mounting plate. 6. Attach the cover to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Desk Installation To install the wireless access point on a desk: Attach the rubber feet to the holes in the bottom of the wireless access point.
3. Wireless Configuration and Security 3 This chapter describes how to configure the wireless features of the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Unlike wired network data, your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The wireless access point provides highly effective security features that are covered in detail in this chapter. Deploy the security features appropriate to your needs. Figure 17.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • WPA and WPA-PSK (TKIP). Wi-Fi Protected Access (WPA) data encryption provides strong data security with Temporal Key Integrity Protocol (TKIP) encryption. The very strong authentication along with dynamic per-frame rekeying of WPA makes it virtually impossible to compromise. WPA uses RADIUS-based 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To set up a security profile, select its network authentication type, data encryption, wireless client security separation, and VLAN ID: • Network authentication The wireless access point is set by default as an open system with no authentication. When you configure network authentication, bear in mind that not all wireless adapters support WPA or WPA2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Before You Change the SSID, WEP, and WPA Settings For a new wireless network, print or copy one of the following forms and fill in the settings. For an existing wireless network, the network administrator can provide this information. Be sure to set the country or region correctly as the first step. Form for 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Form for 802.11a/an Modes Print this page and store the security information in a safe place: • SSID: The service set identifier (SSID) identifies the wireless local area network. You can customize it by using up to 32 alphanumeric characters. Write your SSID on the line. SSID: ___________________________________ The SSID in the wireless access point is the SSID you configure on the wireless adapter card.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure and Enable Security Profiles To configure and enable a security profile, you need to enable the associated radio: • For 802.11b/bg/ng modes, the 2.4 GHz radio needs to be enabled (see Configure 802.11b/bg/ng Wireless Settings on page 28). • For 802.11a/na modes, the 5 GHz radio needs to be enabled. (see Configure 802.11a/na Wireless Settings on page 31). To configure and enable a security profile: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 19. The following table explains the fields of the Profile Settings screen: Table 8. Profile settings Setting Description Profile Name The unique name of the wireless security profile that makes it easy to recognize the profile. SSID The wireless network name (SSID) for the wireless security profile. Security The configured wireless authentication method for the wireless security profile.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 20. 4. Specify the settings of the Profile Definition section of the Edit Security Profile screen as explained in the following table: Table 9. Profile definition settings Setting Description Profile Name Enter a unique name of the wireless security profile that makes it easy to recognize the profile. The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on, through NETGEAR-7.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 9. Profile definition settings (continued) Setting Description Broadcast Wireless Network Name (SSID) Select the Yes radio button to enable the wireless access point to broadcast its SSID, allowing wireless stations that have a null (blank) SSID to adopt the wireless access point’s SSID. Yes is the default setting. To prevent the SSID from being broadcast, select the No radio button. 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 10. Profile authentication settings (continued) Setting Description Network Authentication and Data Encryption (continued) WPA & WPA2 with Configure the RADIUS server setting. TKIP + AES Radius encryption is the default encryption. See Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS on page 55. Note: This setting allows clients to connect through either WPA with TKIP or WPA2 with AES.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 WARNING: If you use a wireless computer to configure wireless security settings, you are disconnected when you click Apply. Reconfigure your wireless computer to match the new settings, or access the wireless access point from a wired computer to make further changes. To change the QoS policy selection on the Edit Security Profile screen: 1. From the drop-down list from which you want select another QoS policy, select None. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 22. Table 11. WEP encryption settings Setting Descriptions Data Encryption Select the encryption key size from the drop-down list: • 64-bit WEP. Standard WEP encryption, using 40/64-bit encryption. • 128-bit WEP. Standard WEP encryption, using 104/128-bit encryption. • 152-bit WEP. Proprietary WEP encryption mode, using 128+24 bit encryption. This mode functions only with other wireless stations that support this mode.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 23. Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS WPA, WPA2, and WPA & WPA2 security requires RADIUS-based 802.1x authentication, so you also need to define RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Server Settings on page 57.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 12. Settings for WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS Setting Descriptions TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation. NETGEAR recommends WPA2 authentication with AES encryption if you want to use the 11n rates and speed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • WPA-PSK & WPA2-PSK Figure 29. Table 13. Settings for WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK Setting Descriptions Data Encryption TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation. NETGEAR recommends WPA2 authentication with AES encryption if you want to use the 11n rates and speed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To configure the RADIUS server settings: 1. Select Configuration > Security > Advanced > Radius Server Settings. The Radius Server Settings screen displays. Figure 30. 2. Specify the settings as explained in the following table: Table 14.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 14. RADIUS server settings for IPv4 and IPv6 (continued) Setting Descriptions Secondary IPv4 Address or Enter the IP address of the secondary RADIUS server for Authentication Server IPv6 Address authentication. The secondary RADIUS server is used when the primary RADIUS server is not available.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Restrict Wireless Access by MAC Address For increased security, you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on their MAC addresses. You can restrict access to only trusted computers so that unknown computers cannot connect wirelessly to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Click Refresh to refresh the Available Wireless Stations table. The wireless access point places the MAC addresses of the attached wireless stations in this table. 6. Populate the Trusted Wireless Stations table by one of the following methods: • Select MAC addresses from the Available Wireless Stations table: a. Select individual check boxes for MAC addresses, or select all MAC addresses by selecting the check box in the heading. • b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 32. 2. Specify the settings as explained in the following table: Table 15. Wireless radio on/off settings Setting Description Wireless On-Off Select the On radio button to enable the timer. By default, the Off radio button is selected. Radio off schedule Select check boxes to specify the days when you want to schedule the radio to be turned off. By default, Saturday and Sunday are selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • Video. The second highest priority queue with low delay is given to this queue. Video applications are routed to this queue. • Best Effort. The medium priority queue with medium delay is given to this queue. Most standard IP applications use this queue. • Background. Low priority queue with high throughput. Applications, such as FTP, that are not time-sensitive but require high throughput can use this queue.
4. Management and Monitoring 4 This chapter describes how to use the management and monitoring features of the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 34. 2. Specify the settings as explained in the following table: Table 16. SNMP settings Setting Description SNMP Select the Enable radio button to allow the SNMP network management software, such as HP OpenView, to manage the wireless access point through SNMPv1/v2 protocol. By default, the Disable radio button is selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Secure Shell and Telnet Management To configure remote console features: 1. Select Maintenance > Remote Management > Remote Console. The Remote Console screen displays: Figure 35. 2. Enable or disable the remote console features: • Secure Shell (SSH). To enable this feature, select the Enable radio button, which is the default setting. Select the Disable button to disable the feature. • Telnet.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 36. 4. Enter the login name and password (admin and password are the defaults). After successful login, the > prompt appears, preceded by the name of the wireless access point. In this example, the prompt is netgear334408. 5. Enter the CLI commands that you want to use. You can enter show configuration to display the available CLI commands. The CLI commands are also listed in Appendix B, Command-Line Reference.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: You cannot perform the software upgrade from a computer that is connected to the wireless access point over a wireless link. You need to use a computer that is connected to the wireless access point over an Ethernet cable. WARNING: When uploading software to the wireless access point, do not interrupt the web browser by closing the window, clicking a link, or loading a new page.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Click Browse and locate the image (.zip) upgrade file. 6. Click Apply to initiate the upgrade process. During the upgrade process, the wireless access point automatically restarts. The upgrade process typically takes several minutes. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. 7. Verify that the new software file has been installed by selecting Monitoring > System.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. Verify that the new software file has been installed by selecting Monitoring > System. The System screen displays (see Figure 46 on page 78). The firmware version is shown in the Access Point Information section of the screen.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Restore the Configuration IMPORTANT: During the restoration process, do not try to go online, turn off the wireless access point, shut down the computer, or do anything else to the wireless access point until it finishes restarting! To restore your settings from a saved configuration file: 1. Select Maintenance > Upgrade > Restore Settings. The Restore Settings screen displays: Figure 40. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: After you have restored the factory default settings on the wireless access point: * All custom configurations are lost. * The login password is password. * The default LAN IP address is 192.168.0.100. * The DHCP client is disabled. * The Access Point Name field is reset to the name printed on the label on the bottom of the unit.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the Reset Button to Restore Factory Default Settings To restore the factory default settings when you do not know the login user name, login password, or IP address, you need to use the Reset button on the rear panel of the wireless access point (see Figure 2 on page 13). To restore the factory default settings using the Reset button: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The reboot process typically takes about 1 minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. Change the Administrator Password The default password is password. NETGEAR recommends that you change this password to a more secure password. You cannot change the administrator login name (admin).
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Manage User Accounts The admin user account is the default user account, which you cannot delete. However, you can add other user accounts, modify them, and delete them. Users for whom you set up an account can access the web management interface with read-only or read-write privileges. Note: Only the administrator can create, change, and delete user accounts. To add a new user account: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To change the name for a user account: 1. On the User Accounts screen, in the lower part of the screen, select the user from the Existing Users drop-down list. 2. In the User Name field, modify the name. 3. Click Modify. 4. Click Apply to save your settings. To change the privilege for a user account: 1. On the User Accounts screen, in the lower part of the screen, select the user from the Existing Users drop-down list. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 45. Specify the settings as explained in the following table: Table 18. Syslog settings Setting Description Enable Syslog Select the check box to enable the syslog option. By default, the syslog option is disabled. Syslog Server IP Address Enter the IP address of the syslog server to which the wireless access point sends the syslog files. Port Number Enter the port number that is configured on the syslog server.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To view the System screen: Select Monitoring > System. Figure 46.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The following table explains the fields of the System screen: Table 19. System screen fields Setting Description Access Point Information Access Point Name The NetBIOS name. For information about how to change the default name, see Configure Basic General System Settings and Time Settings on page 23. Ethernet MAC Address The MAC address of the wireless access point’s Ethernet port.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 19. System screen fields (continued) Setting Description DHCP Client Enabled indicates that the current IP address was obtained from a DHCPv6 server on your LAN network. Disabled indicates a static IP configuration. Current Wireless Settings for 802.11b, 802.11g, or 802.11ng or Current Wireless Settings for 802.11a or 802.11na Note: The section heading depends on the configured wireless mode.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 47. To update the list, click Refresh. If the wireless access point is rebooted, the wireless station data is lost until the wireless access point rediscovers the devices. To force the wireless access point to look for associated devices, click Refresh. The Available Wireless Stations table shows the MAC address, BSSID, SSID, channel, rate, state, type, AID, mode, and status for each device.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The following table explains the fields of the Wireless Stations Details screen: Table 20. Wireless stations details fields Setting Description MAC Address The MAC address of the wireless station. BSSID The BSSID that the wireless station is using. SSID The SSID that the wireless station is using. Channel The channel that the wireless station is using. Rate The transmit data rate in Mbps of the wireless station.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 View the Activity Log You can view the wireless access point’s activity logs onscreen and save the logs. To display the activity log and save it: 1. Select Monitoring > Logs. The Logs screen displays: Figure 49. 2. Click Save As to save the log contents to a file on your computer or to a disk drive. To update the display onscreen, click Refresh; to clear the log content, click Clear.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 50. To update the statistics information, click Refresh. The following table explains the fields of the Statistics screen: Table 21. Statistics fields Setting Description Wired Ethernet Packets The number of packets received and transmitted over the Ethernet connection since the wireless access point was restarted.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 21. Statistics fields (continued) Setting Description Broadcast Packets The number of broadcast packets received and transmitted over the wireless connection since the wireless access point was restarted. Multicast Packets The number of multicast packets received and transmitted over the wireless connection since the wireless access point was restarted.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 51. 2. Optional: To enable and configure rogue AP detection for the 802.11a/na modes, click the 802.11a/na tab. 3. Select the Turn Rogue AP Detection On check box to enable rogue AP detection. 4. Specify the detection policy by making a selection from the Rogue AP Detection Policy drop-down list: • Mild. The wireless access point scans for rogue access points every 10 seconds. • Moderate.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • Select the Merge radio button to add the imported list of access points to the existing Known AP List. 2. Click Browse and locate the file that contains the list of access points. This file needs to be a simple text file with one MAC address per line. 3. Select the file, and click Open. 4. Click Apply to upload the list of access points to the Known AP List.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 22. Unknown AP List fields (continued) Setting Description # of Beacons The number of beacons transmitted by the unknown AP that the wireless access point has detected. Last Beacon The time stamp that indicates the time when the most recent beacon was detected. 3. Click Save to export the list of unknown or known APs to a file. A window opens so you can browse to the location where you want to save the file.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and Prevention • Configure Wireless Intrusion Detection and Prevention Policy Settings • Configure Wireless Intrusion Detection and Prevention Mail Settings • Monitor Traps, Counters, and Ad Hoc Networks Configure Wireless Intrusion Detection and Prevention Policy Settings The wireless access point provides a wireless intrusion detection system (WIDS) and wireless intrusion prevention system (WIPS)
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. IDS/IPS policies and policy rules (continued) Policy Description Policy Rule Threshold Unauthenticated association • • • Association table overflow • • • Authentication failure attack • • • Deauthentication broadcast attack • • Notification Attack. Multiple unauthenticated association requests (5 or 5 more) that use spoofed MAC addresses of legitimate clients are sent to the wireless access point. Result.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. IDS/IPS policies and policy rules (continued) Policy Description Policy Rule Threshold EAPOL-start attack • • • EAPOL-logoff attack • • • Premature EAP failure attack • • Notification Attack. Multiple EAPOL start frames (5 or more) are sent to the 5 wireless access point to initiate the RADIUS authentication process for clients. Result. Wireless service is disrupted. Solution.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. IDS/IPS policies and policy rules (continued) Policy Description Policy Rule Threshold RF jamming attack • • Attack. Multiple RF transmissions (100 or more) are sent to the 100 wireless access point, jamming the radio frequency. Result. Wireless service is disrupted. Notification Trap Note: The IDS detects this attack, but the IPS does not take action against this attack.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. IDS/IPS policies and policy rules (continued) Policy Known client associating with ad-hoc network Description • • • AP property changed • • Policy Rule Threshold Notification Detection. Clients that should be connected to the secured wireless network are instead connected to wireless access points that are part of an ad hoc network. Result. Wireless security might be compromised. Solution.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To enable and configure the IDS/IPS: 1. Select Configuration > IDS/IPS. The IDS/IPS screen displays: Figure 54. 2. Select the Enable radio button. By default, the IDS/IPS is disabled. 3. Specify the detection policy by making a selection from the IDS/IPS Detection Policy drop-down list: • Mild. The wireless access point scans for attacks every 10 seconds. • Moderate. The wireless access point scans for attacks every 5 seconds.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and Prevention Mail Settings For the IDS/IPS to send a notification according to the policy rule, you need to configure the email settings. To configure IDS/IPS email settings: 1. Select Configuration > IDS/IPS Mail Settings. The IDS/IPS Mail Settings screen displays: Figure 55. 2. Configure the settings as explained in the following table. Table 25.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Monitor Traps, Counters, and Ad Hoc Networks The IDS/IPS monitoring screens provide information about the most recent attacks, the number of occurrences per attack, and ad hoc networks. This information is read only. Most Recent Attacks To display the last 50 attacks against the wireless access point and its clients: Select Monitoring > IPS/IDS > Traps. The Traps screen displays. Figure 56.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 57. To update the information onscreen, click Refresh. Ad Hoc Networks To display the ad hoc networks and their associated clients: Select Monitoring > IPS/IDS > Adhoc Networks. The Adhoc Network screen displays.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 58. To update the information onscreen, click Refresh. The following table explains the fields of the Adhoc Networks screen: Table 27. Ad hoc network fields Setting Description Client MAC Address The MAC address of the client that is connected to the ad hoc network. BSSID The BSSID of the ad hoc network.
5. Advanced Configuration 5 This chapter describes how to configure the advanced features of the wireless access point. The chapter includes the following sections: • Configure IPv6 Settings and Optional DHCPv6 Server Settings • Configure Spanning Tree Protocol, 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 WARNING: If you enable the DHCP client, the IP address of the wireless access point changes when you click Apply, causing you to lose your connection to the wireless access point. You then need to use the new IP address to reconnect to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 28. IPv6 settings (continued) Setting Description Default Gateway Enter the IPv6 address of the ISP gateway to which the wireless access point connects. Dynamic IPv6 Address The dynamic IPv6 address that is assigned by the DHCPv6 server on your network. This address does not overwrite the address in the IPv6 Address field. Primary DNS Server Enter the IP address of the primary and secondary DNS servers.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 60. 2. Configure the settings as explained in the following table: Table 29. DHCP server settings for IPv6 Setting Description Select the DHCPv6 Server Enable radio button to enable the DHCP server. Use the default settings or specify the pool of IPv6 addresses to be assigned by setting the starting IPv6 address and ending IPv6 address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 29. DHCP server settings for IPv6 (continued) Setting Description Prefix Length Enter the prefix length to be used by DHCP clients. The default length is 64. Gateway IPv6 Address Enter the IPv6 address of the default routing gateway to be used by DHCP clients. The default address is 2001:05c0:9168::1. Primary DNS Address Enter the IP address of the primary Domain Name System (DNS) server available to DHCP clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Select the Untagged VLAN check box only if the hubs and switches on your LAN support the 802.1Q VLAN protocol. Likewise, change the untagged VLAN value only if the hubs and switches on your LAN support the 802.1Q VLAN protocol. • Tagged VLAN. When you clear the Untagged VLAN check box, the wireless access point tags all frames that are sent from its Ethernet interface.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 2. Specify the settings as explained in the following table: Table 30. STP and VLAN settings Setting Description Spanning Tree Protocol Spanning Tree Protocol Select the Enable radio button to enable STP to prevent path redundancy. By default, the Disable radio button is selected. 802.1Q VLAN Untagged VLAN Select the Untagged VLAN check box to configure one VLAN as an untagged VLAN. By default, the Untagged VLAN check box is selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 62. 2. Select the Disable radio button. By default, the Enable radio button is selected. 3. Click Apply to save your settings. Configure Hotspot Settings If the wireless access point functions as a public access point and you want it to capture and redirect all HTTP requests (over TCP, port 80), set up a hotspot server to redirect the requests to the specified URL and manage the clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 63. 2. To enable HTTP redirection, select the Enable radio button. By default, the Disable radio button is selected. 3. In the Redirect URL field, enter the URL of the web server to which you wish to redirect HTTP requests. 4. Click Apply to save your settings. All HTTP requests are now redirected to the specified URL.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 64. 2. Optional: To configure advanced wireless settings for the 802.11a/na modes, click the 802.11a/na tab. 3. Specify the settings as explained in the following table: Table 31. Advanced wireless settings Setting Description RTS Threshold (0–2347) Enter the Request to Send (RTS) threshold. The default setting is 2347.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 31. Advanced wireless settings (continued) Setting Description Beacon Interval (100–1000) Enter the interval between 100 ms and 1000 ms for each beacon transmission, which allows the wireless access point to synchronize the wireless network. The default setting is 100. Aggregation Length (1024–65535) Enter the maximum length of aggregated MAC protocol data unit (A-MPDU) packets.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Click Apply to save your settings. Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) queue settings work well. For information about how to configure basic QoS, see Configure Basic Wireless Quality of Service on page 62.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 65. 2. Optional: To configure advanced QoS for the 802.11a/na modes, click the 802.11a/na tab. 3. Specify the settings as explained in the following table: Table 32. EDCA settings Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the wait time (in milliseconds) between data frames. A higher AIFS value means a higher priority for a queue.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 32. EDCA settings (continued) Setting Description Max. Burst Enter the maximum burst value that specifies the maximum burst length (in microseconds) allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information. Decreasing this value increases the priority of the queue.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • EtherType. Indicates the EtherType field in Ethernet-II frame header. • Source MAC. Indicates the source MAC address in Ethernet-II frame header. • Destination MAC. Indicates the destination MAC address in Ethernet-II frame header. • Source IP. Indicates the source IP address in the IP header. • Destination IP. Indicates the destination IP address in the IP header. • Source port.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Depending on your selection from the Match Frame Fields drop-down list, Match Classifications appears either as a drop-down list from which you need to make a selection or a field in which you need to enter information. Table 33.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 33. QoS classification settings (continued) Setting Description Match Frame 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 33. QoS classification settings (continued) Setting Description Match Frame Source IP Fields and Match Classifications Destination IP (continued) Apply Classification In the Match Classifications field, enter the source IP address against which the information in the IP header needs to be matched. In the Match Classifications field, enter the destination IP address against which the information in the IP header needs to be matched.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Rate limiting for the wireless interface is an optional setting that applies to all traffic on the wireless interface. Unlike classification rate limiting, which you can specify for each classification, rate limiting for the wireless interface needs to be specified only once. To specify rate limiting for the wireless interface: 1. Specify rate limiting for the entire wireless interface as explained in the following table: Table 35.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multipoint Wireless Network • Configure the Wireless Access Point to Repeat the Wireless Signal Using Point-to-Multipoint Bridge Mode The wireless access point supports a wireless distributing system (WDS) that lets you build large bridged wireless networks.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Wireless PC card in a notebook computer Wireless PC card in a notebook computer Point-to-point bridge mode Point-to-point bridge mode Router Hub or switch Figure 67. To configure a point-to-point wireless network: 1. Configure the wireless access point (AP1 on LAN Segment 1 in the previous figure) as a point-to-point bridge: a. Select Configuration > Wireless Bridge. The Bridging screen displays (see the following figure). b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 e. If you want to enable wireless client association while the wireless access point functions as a point-to-point bridge, select the Enable Wireless Client Association check box. f. Click Edit to configure the security profile settings. The Edit Security Profile screen displays: Figure 69. g. Specify the settings as explained in the following table: Table 36.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 36. Point-to-point bridge profile and authentication settings (continued) Setting Description Network Authentication and Data Encryption (continued) Open System Although you can use the bridge communication without any authentication and encryption, NETGEAR recommends that you use WEP if you do select an open system. From the Data Encryption drop-down list, select one of the following: • None. No authentication and encryption.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other computers or servers connected to LAN Segment 1 or LAN Segment 2. Configure a Point-to-Multipoint Wireless Network In a point-to-multipoint bridge, the wireless access point is the master for a group of bridge-mode wireless access points. All traffic is sent to the master rather than to the other wireless access points.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 71. b. Optional: To display the Bridging screen for the 802.11a/na modes, click the 802.11a/na tab. c. Select the Enable Wireless Bridging check box. The Local MAC Address field is a nonconfigurable field that shows the MAC address of the wireless access point. d. Select the Wireless Point-to-Multi-Point Bridge radio button. The screen adjusts. e. The profile table shows four security profiles.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 g. Specify the settings as explained in the following table: Table 37. Point-to-multipoint bridge profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 For example, first configure security profile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profile NETGEAR-WDS-2 with the MAC address of AP3 (see Figure 70 on page 122). 2. Activate the wireless access point (AP1 on LAN Segment 1 in Figure 70 on page 122) as a point-to-multipoint bridge (that is, it is the master in the wireless network): a. On the Bridging screen, select the Enable Wireless Bridging check box. b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: You can extend this multipoint bridging configuration by adding additional wireless access points that are configured in point-to-point mode for each additional LAN segment. Furthermore, you can extend the range of the wireless network with NETGEAR wireless antenna accessories.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 To configure the wireless access point to repeat the wireless signal: 1. Configure the security profiles on the wireless access point (AP2 in the previous figure): a. Select Configuration > Wireless Bridge. The Bridging screen displays (see the following figure). b. Optional: To display the Bridging screen for the 802.11a/na modes, click the 802.11a/na tab. c. Select the Enable Wireless Bridging check box.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 75. g. Specify the settings as explained in the following table: Table 38. Wireless signal repeating profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 38. Wireless signal repeating profile and authentication settings (continued) Setting Description Network Authentication WPA-PSK and Data Encryption (continued) WPA2-PSK TKIP (Temporal Key Integrity Protocol) is the standard encryption method used with WPA-PSK and the only selection possible from the Data Encryption drop-down list. In the WPA Passphrase (Network Key) field, enter a passphrase.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Verify the following for all wireless access points: • All APs are on the same LAN, that is, the LAN IP addresses of all APs are in the same network as the LAN devices. • If you use DHCP, all wireless access points can obtain IP addresses automatically (as DHCP clients). For more information, see Configure the Optional DHCPv4 Server on page 27 or Configure the Optional DHCPv6 Server on page 101.
6. Troubleshooting 6 This chapter provides information about troubleshooting the wireless access point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the wireless access point on? Go to Basic Functioning on page 132. • Have I connected the wireless access point correctly? Go to Basic Functioning on page 132. • I cannot access the Internet or the LAN.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Basic Functioning • Verify the Correct Sequence of Events at Startup • No LEDs Are Lit on the Wireless Access Point • The Active LED or the LAN LED Is Not Lit • The WLAN LED Does Not Light Up Note: For descriptions of the LEDs, see Top Panel on page 11.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 If you use a power cord to provide power to the wireless access point, check these items: • Make sure that the power cord is connected to the wireless access point. • Make sure that the power adapter is connected to a functioning power outlet. If it is in a power strip, make sure that the power strip is turned on. If it is plugged directly into the wall, verify that it is not a switched outlet.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 You Cannot Access the Internet or the LAN from a Wireless-Capable Computer There is a configuration problem. Check these items: • You might not have restarted the computer with the wireless adapter to allow TCP/IP changes take effect. Restart the computer. • The computer with the wireless adapter might not have the correct TCP/IP settings to communicate with the network.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to be sure that the Java applet is loaded. • Try quitting the browser, clearing the cache, deleting the cookies, and launching the browser again. • Make sure that you are using the correct login information. The factory default login name is admin, and the password is password.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Test the LAN Path to Your Wireless Access Point You can ping the wireless access point from your computer to verify that the LAN path to your wireless access point is set up correctly. To ping the wireless access point from a computer running Windows 95 or later: 1. From the Windows toolbar, click the Start button, and select Run. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Test the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly, test the path from your computer to a remote device. 1. From the Windows toolbar, click the Start button, and select Run. 2. In the Windows Run window, type: ping -n 10 where is the IP address of a remote device such as the DNS server of your ISP.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the Packet Capture Tool You can capture wireless packets to analyze traffic patterns with a network traffic analyzer tool. The captured packet flow can show if traffic is flowing correctly to its destinations or if packets are dropped. There is a limit to the size of the packet flow that you can capture in a file. To capture packets: 1. Select Monitoring > Packet Capture. The Packet Capture screen displays: Figure 76. 2.
A. Supplemental Information A This appendix provides factory default settings and technical specifications for the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620. The appendix includes the following sections: • Technical Specifications • Factory Default Settings Technical Specifications Table 39. Technical specifications Feature Description 802.11b/bg/ng wireless specifications 802.11b data rates 1, 2, 5.5, and 11 Mbps, and auto-rate capable 802.11bg data rates 1, 2, 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 39. Technical specifications (continued) Feature Description 802.11ng MCS index and Data rates for a 40 MHz channel width and a long guard interval (800 ms): data rates 0 / 13.5 Mbps, 1 / 27 Mbps, 2 / 40.5 Mbps, 3 / 54 Mbps, 4 / 81 Mbps, 5 / 108 Mbps, (continued) 6 / 121.5 Mbps, 7 / 135 Mbps, 8 / 27 Mbps, 9 / 54 Mbps, 10 / 81 Mbps, 11 / 108 Mbps, 12 / 162 Mbps, 13 / 216 Mbps, 14 / 243 Mbps, 15 / 270 Mbps, 16 / 40.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 39. Technical specifications (continued) Feature Description 802.11a/na operating frequencies • • • • • 5.180–5.240 GHz (US, lower frequencies) 5.260–5.320 GHz (US, middle frequencies) 5.180–5240 GHz (CE [EU], lower frequencies) 5.260–5.320 GHz (CE [EU], middle frequencies) 5.500–5.680 GHz (CE [EU], upper frequencies) 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Factory Default Settings You can use the Reset button located on the rear of the wireless access point to reset all settings to their factory defaults. This is called a hard reset. To perform a hard reset, use a sharp object to press and hold the Reset button for approximately 5 seconds (until the Test LED blinks rapidly). This returns the wireless access point to the factory configuration settings that are shown in the following table.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 40. Default configuration settings (continued) Feature Description Hotspot Disabled Secure Telnet Disabled Time zone USA-Pacific NTP client Enabled Custom NTP server Disabled Port speed 10/100/1000 Ethernet MAC address See bottom label DHCP server IPv4 IPv6 DHCPv4 server Disabled DHCPv4 server VLAN ID 1 DHCPv4 server IP range start address 192.168.0.2 DHCPv4 server IP range start address 192.168.0.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 40. Default configuration settings (continued) Feature Description Wireless mode 11ng Wireless network name (SSID) NETGEAR_11ng Broadcast network name SSID Enabled 802.11ng radio frequency channel Auto MCS index/data rate (transmission speed) Best Note: Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput will vary.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 40.
B. Command-Line Reference B The wireless access point can be configured through either the command-line interface (CLI), a web browser, or a MIB browser. The CLI allows viewing and modification of the configuration from a terminal or computer through a Telnet or SSH connection.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-send-notifications --Administrator/superuser mail address | |-interface> --Select wireless lan interface | |-wlan> --Wireless LAN interface setting | | |-2.4GHz> --2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-encryption | | | | |-name | | | | |-presharedkey | | | | |-remote-mac | | | | |-status | | | | |-
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-encryption | | | | | | |-name | | | | | | |-presharedkey | | | | | | |-remote-mac | | | | | | |-status | | | | | | |-wep-pass-phrase | | | | | | |-wepkey | | | | | | |-wepkeytype | | | | | | | | | | | |-3> | | | | | | |-authentication | | | | | | |-encryption | | | | | | |-name | | | | | | |-presharedkey | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-default-gateway --IPv6 address of default gateway | |-dhcp-client --Enable dhcpv6 client | |-dns-server --IPv6 address of DNS server | |-network-integrity-check | |-log> --Syslog setting | |-syslog-status --Enable syslog client | |-syslog-server-ip --Syslog server IP address | |-syslog-server-port --Syslog server port number |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | |-write-community | | | |-spanning-tree | | | |-time> | | |-custom-ntp-server | | |-ntp-client | | |-ntp-server | | |-time-zone | | | |-vlan> | | |-management-vlan | | |-untagged-vlan | | |-untagged-vlan-status | | | |-exit |-file |-firmware-upgrade |-firmware-upgrade-tftp |-password |-reboot |-restore-configuration |-restore-default-password |-restore-factory-default |-show> | |-configuration | |-interface> | | |-eth> | | | |-statistics
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-log> |-system |-time | --System log --System setting --System time settings Command-Line Reference 160
C. Notification of Compliance N ETGE A R D ua l B a nd - Wi reles s C Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Español [Spanish] Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Ελληνική [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕΚ. Français [French] Par la présente NETGEAR Inc.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Íslenska [Icelandic] Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar kröfur, sem gerðar eru í tilskipun 1999/5/EC. Norsk [Norwegian] NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF. This device is a 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. • For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. • This device complies with Part 15 of the FCC Rules.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Avertissement Les dispositifs fonctionnant dans la bande 5150 - 5250 MHz sont réservés uniquement pour une utilisation à l'intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux. De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-à-d.
Index Numerics Arbitration Inter-Frame Spacing (AIFS) interval 111 associated identifier (AID) 82 association flood and table overflow 89–90 associations, wireless clients 85 attacks detecting and preventing 89 monitoring 96 authentication network 45 RADIUS servers 57–58 authentication flood and failure attack 89–90 autosensing over Ethernet 10 11a and 11na wireless modes 32 11b, 11bg, and 11ng wireless modes 29 2.4 GHz antenna, connectors for 13 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 burst rate, QoS policies 116–117 bytes, received and transmitted Ethernet connection 84 wireless connection 82 data rates 802.11a mode 34 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Ethernet packets and bytes, received and transmitted 84 extended service set (ESS) 45 Extensible Authentication Protocol EAPOL) attacks 91 external antennas connecting 13 enabling 109 installation order 20 interface rate limiting and burst rate 117 interference 18 internal antenna, disabling 109 Internet browsing, troubleshooting 134 intrusion detection system (IDS) and intrusion prevention system (IPS) 10, 89 IP addresses NTP servers 25 QoS
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 lease DHCPv4 28 DHCPv6 103 LEDs behavior 21 described 12 troubleshooting 132 legacy 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 redirecting HTTP requests 106 Reduced Interframe Space (RIFS) transmission 109 region, wireless location 24 registering product 14 remote devices, troubleshooting 137 remote MAC addresses 60 remote management, options 64 repeating wireless signal 126 Request to Send (RTS) threshold 108 Reset button 13, 73, 142 restoring factory defaults 71 password 74 settings, from backup file 71 restricting access by MAC address 43, 60 RF jamming attack 92
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 statistics 83 WMM QoS 62 traffic classes, QoS policies 116 transmission opportunity (TXOP) limit 112 transmission output power 2.4 GHz radio 31 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 video traffic advanced QoS 110 WMM QoS 63 virtual access points (VAPs) 109 virtual carrier attack 92 VLANs DHCPv4 server VLAN ID 27 DHCPv6 server VLAN ID 102 identifiers (IDs) 45, 52 tagged, untagged, and management, enabling 103 VoIP (voice over IP) traffic advanced QoS 110 WMM QoS 62 monitoring 80 wireless network name (SSID) broadcasting 50 broadcasting and security 43 broadcasting for 802.11a/na modes 33 broadcasting for 802.
