ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Reference M anua l 350 East Plumeria Drive San Jose, CA 95134 USA October 2012 202-10984-01 v2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Support Thank you for choosing NETGEAR. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com.
Contents Chapter 1 Introduction About the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Key Features and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Chapter 3 Wireless Configuration and Security Wireless Data Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Before You Change the SSID, WEP, and WPA Settings . . . . . . . . . . . . 46 Configure and Enable Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Configure Ethernet LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Configure Hotspot Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106 Configure Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 107 Configure Advanced Quality of Service Settings . . . . . . . . . . . . . . . . . . . 111 Configure Quality of Service Policies . . . . . . . . . . . . .
1. Introduction 1 This chapter introduces the NETGEAR® ProSafe® Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 and describes some of the key features.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 transmit radio chains and three receive radio chains, also referred to as 3x3 multiple input, multiple output (MIMO), can increase wireless throughput considerably. The wireless access point provides wireless connectivity to multiple wireless network devices within a fixed range or area of coverage—interacting with a wireless network interface card (NIC) through an antenna.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 System Requirements Before installing the wireless access point, make sure that your system meets these requirements: • A 10/100/1000 Mbps local area network device such as a hub or switch • The Category 5 UTP straight-through Ethernet cable with RJ-45 connector included in the package, or one like it • A 100–120V, 50–60 Hz AC power source • A computer with the TCP/IP protocol installed and a web browser for configuration, such as Micr
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • DHCP server and client. The DHCP server of the wireless access point can provide a dynamic IPv4 or IPv6 address to wireless clients. The wireless access point can also act as a client and obtain an IPv4 or IPv6 address from a DHCP server on the LAN. • SNMP. The wireless access point supports Simple Network Management Protocol (SNMP) for Management Information Base (MIB) management. • STP and LLDP.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • QoS. Quality of Service (QoS) support lets you configure parameters that affect traffic flowing from the wireless access point to the client station and traffic flowing from the client station to the wireless access point: - The QoS settings let you prioritize traffic, such as voice and video traffic, so that packets do not get dropped.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • VLAN security profiles. Each security profile is automatically allocated a VLAN ID when the security profile is modified. 802.11b/g/n and 802.11a/n Standards–Based Wireless Networking The wireless access point provides a bridge between wired Ethernet LANs and 802.11b/g/nand 802.11a/n-compatible wireless LAN networks.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Top Panel The LEDs of the wireless access point are described in the following figure and table: 2 1 3 4 5 6 Figure 1. Table 1. Top panel LEDs Item 1 2 3 4 LED Description Power/Test Off Active LAN 1 LAN 2 Power is off. On (green) Power is on. Amber, then blinking green A self-test is running or software is being loaded.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 1. Top panel LEDs (continued) Item 5 LED 2.4 Ghz 5 6 Description WLAN WLAN Off Wireless 802.11b/g/n (2.4 GHz) LAN is not ready, or no wireless activity is detected. On or blinking (green) Wireless 802.11b/g/n (2.4 GHz) LAN is ready, or wireless activity is detected. Off Wireless 802.11n/a (5 GHz) LAN is not ready, or no wireless activity is detected. On or blinking (green) Wireless 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 8. Power socket for a 12 VDC, 1.5A power adapter. 9. Third reverse SMA connector for an optional 2.4 GHz antenna. Note: The wireless access point can support up to three optional 2.4 GHz antennas. Bottom Panel with Product Label The product label on the bottom of the wireless access point’s enclosure displays factory default settings, regulatory compliance, and other information: Figure 3.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 4. 2. Click Register. A new screen displays in your browser: Figure 5. 3. Enter the information in the blank fields. The serial number, model number, and date of purchase are entered automatically. 4. Click Register.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 6. 5. Complete the registration form. 6. Click submit.
2. Installation and Basic Configuration 2 This chapter describes how to install and configure the wireless access point for wireless connectivity to your LAN. This basic configuration enables computers with 2.4 GHz 802.11b/g/n and 5 GHz 802.11a/n wireless adapters to connect to the Internet or access printers and files on your LAN. In planning your wireless network, consider the level of security required.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: Failure to follow these guidelines can result in significant performance degradation or inability to connect wirelessly to the wireless access point. For complete performance specifications, see Appendix A, Supplemental Information.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Hardware Requirements for Computers on Your LAN To connect to the wireless access point on your network, each computer needs to have an 802.11b/g/n or 802.11a/n wireless adapter installed. NETGEAR recommends using the wireless access point with computers that have the NETGEAR N600 Wireless Dual Band USB Adapter (WNDA3100) installed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Install and Configure the Wireless Access Point Install and configure your wireless access point in the order of the following sections: 1. Connect the Wireless Access Point to a Computer 2. Log In to the Wireless Access Point 3. Configure Basic General System Settings and Time Settings 4. Configure the IPv4 Settings 5. Configure the Optional DHCPv4 Server 6.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 A Ethernet cable B Ethernet port Figure 7. 5. Turn on your computer. 6. Connect the power adapter to the wireless access point. Tip: The wireless access point supports Power over Ethernet (PoE) with power redundancy. Both Ethernet ports can provide power. If you have a switch that provides PoE, you do not need to use the power adapter to power the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 2.4 Ghz WLAN LED. The 2.4 GHz WLAN LED is lit or blinks green when the wireless LAN (WLAN) is ready. 5 Ghz WLAN LED. The 5 GHz WLAN LED is lit or blinks green when the wireless LAN (WLAN) is ready. Log In to the Wireless Access Point The default IP address of your wireless access point is 192.168.0.100. By default, the DHCP client on the wireless access point is disabled so you can log in using the default IP address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 9. The bottom right corner of all screens that allow you to make configuration changes show the Apply and Cancel buttons, and on several screens the Edit button. Figure 10. These buttons have the following functions: • Edit. Allows you to edit the existing configuration. • Cancel. Cancels all configuration changes that you made on the screen. • Apply. Saves and applies all configuration changes that you made on the screen.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 2. Configure the settings as explained in the following table: Table 2. Basic general system settings Setting Description Access Point Name This unique name is the wireless access point NetBIOS name. The name is printed on the rear label of the wireless access point. The default is netgearxxxxxx, in which xxxxxx represents the last 6 digits of the wireless access point MAC address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 3. Time system settings (continued) Setting Description NTP Client Enable the Network Time Protocol (NTP) client to synchronize the time of the wireless access point with an NTP server. By default the Enable radio button is selected. Use Custom NTP Server Select this check box if you want to use a custom NTP server. Note: You need to have an Internet connection to use an NTP server that is not on your local network.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 13. 2. Configure the IPv4 settings as explained in the following table: Table 4. IPv4 settings Setting Description DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Configure the Optional DHCPv4 Server The wireless access point provides a built-in DHCPv4 server for wireless clients only, which can be especially useful in small networks. When the DHCP server is enabled, the wireless access point provides preconfigured TCP/IP configurations to all connected wireless stations. Note: For information about how to configure the DHCPv6 server, see Configure the Optional DHCPv6 Server on page 101.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 5. DHCP server settings for IPv4 (continued) Setting Description Ending IPv4 Address Enter the last address in the range of IPv4 addresses to be assigned to DHCP clients. The default address is 192.168.1.50. Subnet Mask Enter the subnet mask to be used by DHCP clients. The default mask is 255.255.255.0. Gateway IPv4 Address Enter the IPv4 address of the default routing gateway to be used by DHCP clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: The radio wave icon ( (b, bg, or ng). ) displays next to the enabled wireless mode Figure 15. 2. Specify the wireless mode in the 2.4 GHz band by selecting one of the following radio buttons: • 11b. Both 802.11n- and 802.11g-compliant devices can connect to the access point because they are backward compatible. • 11bg. 802.11n-compliant devices can connect to the access point because they are backward compatible. • 11ng.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Specify the remaining wireless settings as explained the following table: Table 6. Basic 2.4 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive. The default is NETGEAR_11ng.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 6. Basic 2.4 GHz band wireless settings (continued) Setting Descriptions 11b and 11bg modes only Data Rate Output Power From the drop-down list, select the transmission power of the wireless access point: Full, Half, Quarter, Eighth, Minimum. The default is Full. From the drop-down list, select the transmit data rate of the wireless network. The default setting is Best.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 16. 2. Specify the wireless mode in the 5 GHz band by selecting one of the following radio buttons: • 11a. 802.11n-compliant devices can connect to the access point because they are backward compatible. • 11na. This is the default setting. If you keep the default setting, go to Step 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Specify the remaining wireless settings as explained the following table: Table 7. Basic 5 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive. The default is NETGEAR_11na.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 7. Basic 5 GHz band wireless settings (continued) Setting Descriptions 11a mode only Data Rate Output Power From the drop-down list, select the transmission power of the wireless access point: Full, Half, Quarter, Eighth, Minimum. The default is Full. From the drop-down list, select the transmit data rate of the wireless network. The default setting is Best.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 NETGEAR recommends that you complete the following tasks before you deploy the wireless access point in your network: • Configure wireless security and other wireless features as described in Chapter 3, Wireless Configuration and Security. • Configure any additional features that you might need as described in Chapter 4, Management and Monitoring, and Chapter 5, Advanced Configuration.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: Do not place the wireless access point in a false ceiling space facing up. To install the wireless access point using the ceiling installation kit: 1. Verify the package contents of the ceiling installation kit. Mounting plate Clamp with screws 2. Detach the mounting plate from the wireless access point. 3. Attach the clamp to the ceiling rail.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 4. Attach the mounting plate to the clamp. 5. Connect the cables to the wireless access point. 6. Attach the wireless access point to the mounting plate.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 7. Attach the cover to the wireless access point. Wall Installation The best location for wall installation is at the center of your wireless coverage area, and within line of sight of all mobile devices. Make sure the top (the dome side) of the wireless access point is directed toward the users and not the wall. To install the wireless access point using the wall installation kit: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Screws and wall supports Mounting plate 2. Detach the mounting plate from the wireless access point. 3. Attach the mounting plate to the wall. 4. Connect the cables to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Attach the wireless access point to the mounting plate. 6. Attach the cover to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Desk Installation To install the wireless access point on a desk: Attach the rubber feet to the holes in the bottom of the wireless access point.
3. Wireless Configuration and Security 3 This chapter describes how to configure the wireless features of the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Unlike wired network data, your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The wireless access point provides highly effective security features that are covered in detail in this chapter. Deploy the security features appropriate to your needs. Figure 17.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • WPA and WPA-PSK (TKIP). Wi-Fi Protected Access (WPA) data encryption provides strong data security with Temporal Key Integrity Protocol (TKIP) encryption. The very strong authentication along with dynamic per-frame rekeying of WPA makes it virtually impossible to compromise. WPA uses RADIUS-based 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To set up a security profile, select its network authentication type, data encryption, wireless client security separation, and VLAN ID: • Network authentication The wireless access point is set by default as an open system with no authentication. When you configure network authentication, bear in mind that not all wireless adapters support WPA or WPA2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Before You Change the SSID, WEP, and WPA Settings For a new wireless network, print or copy the following forms and fill in the settings. For an existing wireless network, the network administrator can provide this information. Be sure to set the country or region correctly as the first step. Form for 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Form for 802.11a/an Modes Print this page and store the security information in a safe place: • SSID: The service set identifier (SSID) identifies the wireless local area network. You can customize it by using up to 32 alphanumeric characters. Write your SSID on the line. SSID: ___________________________________ The SSID in the wireless access point is the SSID you configure on the wireless adapter card.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Configure and Enable Security Profiles To configure and enable a security profile, you need to enable the associated radio: • For 802.11b/bg/ng modes, the 2.4 GHz radio needs to be enabled (see Configure 802.11b/bg/ng Wireless Settings on page 28). • For 802.11a/na modes, the 5 GHz radio needs to be enabled. (see Configure 802.11a/na Wireless Settings on page 31). Both radios can function concurrently.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 19. The following table explains the fields of the Profile Settings screen: Table 8. Profile settings Setting Description Profile Name The unique name of the wireless security profile that makes it easy to recognize the profile. SSID The wireless network name (SSID) for the wireless security profile. Security The configured wireless authentication method for the wireless security profile.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 20. 4. Specify the settings of the Profile Definition section of the Edit Security Profile screen as explained in the following table: Table 9. Profile definition settings Setting Description Profile Name Enter a unique name of the wireless security profile that makes it easy to recognize the profile. The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on, through NETGEAR-7.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 9. Profile definition settings (continued) Setting Description Broadcast Wireless Network Name (SSID) Select the Yes radio button to enable the wireless access point to broadcast its SSID, allowing wireless stations that have a null (blank) SSID to adopt the wireless access point’s SSID. Yes is the default setting. To prevent the SSID from being broadcast, select the No radio button. 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 10. Profile authentication settings (continued) Setting Description Network Authentication and Data Encryption (continued) WPA & WPA2 with Configure the RADIUS server setting. TKIP + AES Radius encryption is the default encryption. See Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS on page 55. Note: This setting allows clients to connect through either WPA with TKIP or WPA2 with AES.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 WARNING: If you use a wireless computer to configure wireless security settings, you are disconnected when you click Apply. Reconfigure your wireless computer to match the new settings, or access the wireless access point from a wired computer to make further changes. To change the QoS policy selection on the Edit Security Profile screen: 1. From the drop-down list from which you want select another QoS policy, select None. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 22. Table 11. WEP encryption settings Setting Descriptions Data Encryption Select the encryption key size from the drop-down list: • 64-bit WEP. Standard WEP encryption, using 40/64-bit encryption. • 128-bit WEP. Standard WEP encryption, using 104/128-bit encryption. • 152-bit WEP. Proprietary WEP encryption mode, using 128+24 bit encryption. This mode functions only with other wireless stations that support this mode.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 23. Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS WPA, WPA2, and WPA & WPA2 security requires RADIUS-based 802.1x authentication, so you also need to define RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Server Settings on page 57.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 12. Settings for WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS Setting Descriptions TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation. NETGEAR recommends WPA2 authentication with AES encryption if you want to use the 11n rates and speed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • WPA-PSK & WPA2-PSK Figure 29. Table 13. Settings for WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK Setting Descriptions Data Encryption TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation. NETGEAR recommends WPA2 authentication with AES encryption if you want to use the 11n rates and speed.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To configure the RADIUS server settings: 1. Select Configuration > Security > Advanced > Radius Server Settings. The Radius Server Settings screen displays. Figure 30. 2. Specify the settings as explained in the following table: Table 14.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 14. RADIUS server settings for IPv4 and IPv6 (continued) Setting Descriptions Secondary IPv4 Address or Enter the IP address of the secondary RADIUS server for Authentication Server IPv6 Address authentication. The secondary RADIUS server is used when the primary RADIUS server is not available.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Restrict Wireless Access by MAC Address For increased security, you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on their MAC addresses. You can restrict access to only trusted computers so that unknown computers cannot connect wirelessly to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Click Refresh to refresh the Available Wireless Stations table. The wireless access point places the MAC addresses of the attached wireless stations in this table. 6. Populate the Trusted Wireless Stations table by one of the following methods: • Select MAC addresses from the Available Wireless Stations table: a. Select individual check boxes for MAC addresses, or select all MAC addresses by selecting the check box in the heading. • b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 32. 2. Specify the settings as explained in the following table: Table 15. Wireless radio on/off settings Setting Description Wireless On-Off Select the On radio button to enable the timer. By default, the Off radio button is selected. Radio off schedule Select check boxes to specify the days when you want to schedule the radios to be turned off. By default, Saturday and Sunday are selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 WMM defines the following four queues in decreasing order of priority: • Voice. The highest priority queue with minimum delay, which makes it ideal for applications like VoIP and streaming media. • Video. The second highest priority queue with low delay is given to this queue. Video applications are routed to this queue. • Best Effort. The medium priority queue with medium delay is given to this queue.
4. Management and Monitoring 4 This chapter describes how to use the management and monitoring features of the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 34. 2. Specify the settings as explained in the following table: Table 16. SNMP settings Setting Description SNMP Select the Enable radio button to allow the SNMP network management software, such as HP OpenView, to manage the wireless access point through SNMPv1/v2 protocol. By default, the Disable radio button is selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Secure Shell and Telnet Management To configure remote console features: 1. Select Maintenance > Remote Management > Remote Console. The Remote Console screen displays: Figure 35. 2. Enable or disable the remote console features: • Secure Shell (SSH). To enable this feature, select the Enable radio button, which is the default setting. Select the Disable button to disable the feature. • Telnet.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 36. 4. Enter the login name and password (admin and password are the defaults). After successful login, the > prompt appears, preceded by the name of the wireless access point. In this example, the prompt is netgear334408. 5. Enter the CLI commands that you want to use. You can enter show configuration to display the available CLI commands. The CLI commands are also listed in Appendix B, Command-Line Reference.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: You cannot perform the software upgrade from a computer that is connected to the wireless access point over a wireless link. You need to use a computer that is connected to the wireless access point over an Ethernet cable. WARNING: When uploading software to the wireless access point, do not interrupt the web browser by closing the window, clicking a link, or loading a new page.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Click Browse and locate the image (.zip) upgrade file. 6. Click Apply to initiate the upgrade process. During the upgrade process, the wireless access point automatically restarts. The upgrade process typically takes several minutes. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. 7. Verify that the new software file has been installed by selecting Monitoring > System.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 7. Verify that the new software file has been installed by selecting Monitoring > System. The System screen displays (see Figure 46 on page 78). The firmware version is shown in the Access Point Information section of the screen.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Restore the Configuration IMPORTANT: During the restoration process, do not try to go online, turn off the wireless access point, shut down the computer, or do anything else to the wireless access point until it finishes restarting! To restore your settings from a saved configuration file: 1. Select Maintenance > Upgrade > Restore Settings. The Restore Settings screen displays: Figure 40. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: After you have restored the factory default settings on the wireless access point: * All custom configurations are lost. * The login password is password. * The default LAN IP address is 192.168.0.100. * The DHCP client is disabled. * The Access Point Name field is reset to the name printed on the label on the bottom of the unit.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Use the Reset Button to Restore Factory Default Settings To restore the factory default settings when you do not know the login user name, login password, or IP address, you need to use the Reset button on the rear panel of the wireless access point (see Figure 2 on page 13). To restore the factory default settings using the Reset button: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The reboot process typically takes about 1 minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. Change the Administrator Password The default password is password. NETGEAR recommends that you change this password to a more secure password. You cannot change the administrator login name (admin).
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Manage User Accounts The admin user account is the default user account, which you cannot delete. However, you can add other user accounts, modify them, and delete them. Users for whom you set up an account can access the web management interface with read-only or read-write privileges. Note: Only the administrator can create, change, and delete user accounts. To add a new user account: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 4. Click Apply to save your settings. To change the name for a user account: 1. On the User Accounts screen, in the lower part of the screen, select the user from the Existing Users drop-down list. 2. In the User Name field, modify the name. 3. Click Modify. 4. Click Apply to save your settings. To change the privilege for a user account: 1.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 45. Specify the settings as explained in the following table: Table 18. Syslog settings Setting Description Enable Syslog Select the check box to enable the syslog option. By default, the syslog option is disabled. Syslog Server IP Address Enter the IP address of the syslog server to which the wireless access point sends the syslog files. Port Number Enter the port number that is configured on the syslog server.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To view the System screen: Select Monitoring > System. Figure 46.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The following table explains the fields of the System screen: Table 19. System screen fields Setting Description Access Point Information Access Point Name The NetBIOS name. For information about how to change the default name, see Configure Basic General System Settings and Time Settings on page 23. Ethernet MAC Address The MAC address of the wireless access point’s Ethernet port.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 19. System screen fields (continued) Setting Description DHCP Client Enabled indicates that the current IP address was obtained from a DHCPv6 server on your LAN network. Disabled indicates a static IP configuration. Current Wireless Settings for 802.11b, 802.11g, or 802.11ng and Current Wireless Settings for 802.11a or 802.11na Note: The section heading depends on the configured wireless mode.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 47. To update the list, click Refresh. If the wireless access point is rebooted, the wireless station data is lost until the wireless access point rediscovers the devices. To force the wireless access point to look for associated devices, click Refresh. The Available Wireless Stations table shows the MAC address, BSSID, SSID, channel, rate, state, type, AID, mode, and status for each device.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The following table explains the fields of the Wireless Stations Details screen: Table 20. Wireless stations details fields Setting Description MAC Address The MAC address of the wireless station. BSSID The BSSID that the wireless station is using. SSID The SSID that the wireless station is using. Channel The channel that the wireless station is using. Rate The transmit data rate in Mbps of the wireless station.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 View the Activity Log You can view the wireless access point’s activity logs onscreen and save the logs. To display the activity log and save it: 1. Select Monitoring > Logs. The Logs screen displays: Figure 49. 2. Click Save As to save the log contents to a file on your computer or to a disk drive. To update the display onscreen, click Refresh; to clear the log content, click Clear.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 50. To update the statistics information, click Refresh. The following table explains the fields of the Statistics screen: Table 21. Statistics fields Setting Description Wired Ethernet Packets The number of packets received and transmitted over the Ethernet connection since the wireless access point was restarted.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 21. Statistics fields (continued) Setting Description Wireless 802.11b, Wireless 802.11bg, or Wireless 801.11ng and Wireless 802.11a or Wireless 802.11na Note: The section heading depends on the configured wireless mode. Unicast Packets The number of unicast packets received and transmitted over the wireless connection since the wireless access point was restarted.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To enable and configure rogue AP detection: 1. Select Configuration > Security > Advanced > Rogue AP. The Rogue AP screen displays. (The following figure shows examples in the Known AP List and Unknown AP List.) Figure 51. 2. Optional: To enable and configure rogue AP detection for the 802.11a/na modes, click the 802.11a/na tab. 3. Select the Turn Rogue AP Detection On check box to enable rogue AP detection. 4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To import a file with a precompiled list of access points into the Known AP List: 1. Take one of the following actions: • Select the Replace radio button to let the imported list of access points replace the existing Known AP List. • Select the Merge radio button to add the imported list of access points to the existing Known AP List. 2. Click Browse and locate the file that contains the list of access points.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The following table explains the fields of the Unknown AP List screen: Table 22. Unknown AP List fields Setting Description MAC Address The MAC address of the unknown AP. SSID The SSID that the unknown AP is using. Privacy Indicates whether security is enabled (1 means enabled; 0 means disabled). Channel The channel that the unknown AP is using. Rate The transmit data rate in Mbps of the unknown the AP. Beacon Int.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The following table explains the fields of the Known AP List screen: Table 23. Known AP List fields Setting Description MAC Address The MAC address of the known AP. SSID The SSID that the known AP is using. Channel The channel that the known AP is using. 3. Click Save to export the list of known access points to a file. A window opens so you can browse to the location where you want to save the file. The default file name is macList.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 24. IDS/IPS policies and policy rules Policy Description Policy Rule Threshold Authentication flood • • • Association flood • • • Unauthenticated association • • • Association table overflow • • • Authentication failure attack • • • Deauthentication broadcast attack • • Notification Attack.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 24. IDS/IPS policies and policy rules (continued) Policy Description Policy Rule Threshold Disassociation flood • • Attack. Multiple disassociation frames (5 or more) that use the 5 spoofed MAC address of the wireless access point are sent to a legitimate client. Result. The client is disconnected from the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 24. IDS/IPS policies and policy rules (continued) Policy CTS flood Description • • • RTS flood • • • RF jamming attack • • Policy Rule Threshold Notification 60 Trap Attack. Multiple request-to-send (RTS) frames (60 or more) are 60 sent to the wireless access point. Result. Wireless service is disrupted. Solution.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 24. IDS/IPS policies and policy rules (continued) Policy Ad-hoc network detected Description • • Policy Rule Threshold Notification 0 Trap 0 Trap Detection. Clients that should be connected to the secured wireless network are instead connected to wireless access points that are part of an ad hoc network. Result. Wireless security might be compromised. Solution. The clients are disconnected from the ad hoc network.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 24. IDS/IPS policies and policy rules (continued) Policy Description Policy Rule Threshold Device probing for access points • • • PS poll flood attack • • • Notification Detection. Multiple probe requests (30 or more) are sent to 30 collect information about the wireless access point for possible future attacks. For example, it is suspect when there are too many probe requests with a different SSID from same MAC address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 3. Specify the detection policy by making a selection from the IDS/IPS Detection Policy drop-down list: • Mild. The wireless access point scans for attacks every 10 seconds. • Moderate. The wireless access point scans for attacks every 5 seconds. This is the default setting. • Aggressive. The wireless access point scans for attacks every second. 4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 25. IDS/IPS mail settings (continued) Setting Description Port Number The port number of the outgoing email SMTP server of your ISP. The default port number is 25. This server requires authentication If the SMTP server requires authentication, select the This server requires authentication check box, and enter the user name and password. User Name The user name for SMTP server authentication.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 The following table explains the fields of the Traps screen: Table 26. Traps fields Setting Description Attack Name The name of the attack that corresponds to a policy in Table 24 on page 90. Time Stamp The time that the attack occurred. IPS If the IPS has prevented the attack, the field displays Yes. If the IPS did not prevent the attack, or the IPS is not applicable to the attack, the field displays No.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Attack Counter To display the number of occurrences per attacks: Select Monitoring > IPS/IDS > Counters. The Counters screen displays. Figure 58. To update the information onscreen, click Refresh.
5. Advanced Configuration 5 This chapter describes how to configure the advanced features of the wireless access point. The chapter includes the following sections: • Configure IPv6 Settings and Optional DHCPv6 Server Settings • Configure Spanning Tree Protocol, 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 WARNING: If you enable the DHCP client, the IP address of the wireless access point changes when you click Apply, causing you to lose your connection to the wireless access point. You then need to use the new IP address to reconnect to the wireless access point.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 28. IPv6 settings (continued) Setting Description Default Gateway Enter the IPv6 address of the ISP gateway to which the wireless access point connects. Dynamic IPv6 Address The dynamic IPv6 address that is assigned by the DHCPv6 server on your network. This address does not overwrite the address in the IPv6 Address field. Primary DNS Server Enter the IP address of the primary and secondary DNS servers.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 60. 2. Configure the settings as explained in the following table: Table 29. DHCP server settings for IPv6 Setting Description Select the DHCPv6 Server Enable radio button to enable the DHCP server. Use the default settings or specify the pool of IPv6 addresses to be assigned by setting the starting IPv6 address and ending IPv6 address.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 29. DHCP server settings for IPv6 (continued) Setting Description Prefix Length Enter the prefix length to be used by DHCP clients. The default length is 64. Gateway IPv6 Address Enter the IPv6 address of the default routing gateway to be used by DHCP clients. The default address is 2001:05c0:9168::1. Primary DNS Address Enter the IP address of the primary Domain Name System (DNS) server available to DHCP clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: Select the Untagged VLAN check box only if the hubs and switches on your LAN support the 802.1Q VLAN protocol. Likewise, change the untagged VLAN value only if the hubs and switches on your LAN support the 802.1Q VLAN protocol. • Tagged VLAN. When you clear the Untagged VLAN check box, the wireless access point tags all frames that are sent from its Ethernet interface.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 2. Specify the settings as explained in the following table: Table 30. STP and VLAN settings Setting Description Spanning Tree Protocol Spanning Tree Protocol Select the Enable radio button to enable STP to prevent path redundancy. By default, the Disable radio button is selected. 802.1Q VLAN Untagged VLAN Select the Untagged VLAN check box to configure one VLAN as an untagged VLAN. By default, the Untagged VLAN check box is selected.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 62. 2. Select the Disable radio button. By default, the Enable radio button is selected. 3. Click Apply to save your settings. Configure Hotspot Settings If the wireless access point functions as a public access point and you want it to capture and redirect all HTTP requests (over TCP, port 80), set up a hotspot server to redirect the requests to the specified URL and manage the clients.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 63. 2. To enable HTTP redirection, select the Enable radio button. By default, the Disable radio button is selected. 3. In the Redirect URL field, enter the URL of the web server to which you wish to redirect HTTP requests. 4. Click Apply to save your settings. All HTTP requests are now redirected to the specified URL.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 64. 2. Optional: To configure advanced wireless settings for the 802.11a/na modes, click the 802.11a/na tab. 3. Specify the settings as explained in the following table: Table 31. Advanced wireless settings Setting Description RTS Threshold (0–2347) Enter the Request to Send (RTS) threshold. The default setting is 2347.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 31. Advanced wireless settings (continued) Setting Description Fragmentation Length (256–2346) Enter the maximum packet size that is used for the fragmentation of data packets. Packets that are larger than the specified fragmentation length are broken up into smaller packets before being transmitted. The fragmentation length needs to be an even number. The default setting is 2346.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 31. Advanced wireless settings (continued) Setting Description Client Isolation From the drop-down list, select one of the following options: • Enable. Communication between wireless clients that are associated to different virtual access points (VAPs) is blocked. • Disable. Communication between wireless clients that are associated to different VAPs is allowed. This is the default setting. Max.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) queue settings work well. For information about how to configure basic QoS, see Configure Basic Wireless Quality of Service on page 62.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 65. 2. Optional: To configure advanced QoS for the 802.11a/na modes, click the 802.11a/na tab. 3. Specify the settings as explained in the following table: Table 32. EDCA settings Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the wait time (in milliseconds) between data frames. A higher AIFS value means a higher priority for a queue.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 32. EDCA settings (continued) Setting Description Max. Burst Enter the maximum burst value that specifies the maximum burst length (in microseconds) allowed for packet bursts on the wireless network. A packet burst is a collection of multiple frames transmitted without header information. Decreasing this value increases the priority of the queue.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • EtherType. Indicates the EtherType field in Ethernet-II frame header. • Source MAC. Indicates the source MAC address in Ethernet-II frame header. • Destination MAC. Indicates the destination MAC address in Ethernet-II frame header. • Source IP. Indicates the source IP address in the IP header. • Destination IP. Indicates the destination IP address in the IP header. • Source port.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Specify a classification for the QoS policy as explained in the following table. Note: Depending on your selection from the Match Frame Fields drop-down list, Match Classifications appears either as a drop-down list from which you need to make a selection or a field in which you need to enter information. Table 33.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 33. QoS classification settings (continued) Setting Description Match Frame 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 33. QoS classification settings (continued) Setting Description Match Frame Source IP Fields and Match Classifications Destination IP (continued) Apply Classification In the Match Classifications field, enter the source IP address against which the information in the IP header needs to be matched. In the Match Classifications field, enter the destination IP address against which the information in the IP header needs to be matched.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: Rate limiting for the wireless interface is an optional setting that applies to all traffic on the wireless interface. Unlike classification rate limiting, which you can specify for each classification, rate limiting for the wireless interface needs to be specified only once. To specify rate limiting for the wireless interface: 1. Specify rate limiting for the entire wireless interface as explained in the following table: Table 35.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multipoint Wireless Network • Configure the Wireless Access Point to Repeat the Wireless Signal Using Point-to-Multipoint Bridge Mode The wireless access point supports a wireless distributing system (WDS) that lets you build large bridged wireless networks.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Wireless PC card in a notebook computer Wireless PC card in a notebook computer Point-to-point bridge mode Point-to-point bridge mode Router Hub or switch Figure 67. To configure a point-to-point wireless network: 1. Configure the wireless access point (AP1 on LAN Segment 1 in the previous figure) as a point-to-point bridge: a. Select Configuration > Wireless Bridge. The Bridging screen displays (see the following figure). b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 e. If you want to enable wireless client association while the wireless access point functions as a point-to-point bridge, select the Enable Wireless Client Association check box. f. Click Edit to configure the security profile settings. The Edit Security Profile screen displays: Figure 69. g. Specify the settings as explained in the following table: Table 36.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 36. Point-to-point bridge profile and authentication settings (continued) Setting Description Network Authentication and Data Encryption (continued) Open System Although you can use the bridge communication without any authentication and encryption, NETGEAR recommends that you use WEP if you do select an open system. From the Data Encryption drop-down list, select one of the following: • None. No authentication and encryption.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other computers or servers connected to LAN Segment 1 or LAN Segment 2. Configure a Point-to-Multipoint Wireless Network In a point-to-multipoint bridge, the wireless access point is the master for a group of bridge-mode wireless access points. All traffic is sent to the master rather than to the other wireless access points.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 71. b. Optional: To display the Bridging screen for the 802.11a/na modes, click the 802.11a/na tab. c. Select the Enable Wireless Bridging check box. The Local MAC Address field is a nonconfigurable field that shows the MAC address of the wireless access point. d. Select the Wireless Point-to-Multi-Point Bridge radio button. The screen adjusts. e. The profile table shows four security profiles.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 g. Specify the settings as explained in the following table: Table 37. Point-to-multipoint bridge profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 For example, first configure security profile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profile NETGEAR-WDS-2 with the MAC address of AP3 (see Figure 70 on page 123). 2. Activate the wireless access point (AP1 on LAN Segment 1 in Figure 70 on page 123) as a point-to-multipoint bridge (that is, it is the master in the wireless network): a. On the Bridging screen, select the Enable Wireless Bridging check box. b.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Note: You can extend this multipoint bridging configuration by adding additional wireless access points that are configured in point-to-point mode for each additional LAN segment. Furthermore, you can extend the range of the wireless network with NETGEAR wireless antenna accessories.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 To configure the wireless access point to repeat the wireless signal: 1. Configure the security profiles on the wireless access point (AP2 in the previous figure): a. Select Configuration > Wireless Bridge. The Bridging screen displays (see the following figure). b. Optional: To display the Bridging screen for the 802.11a/na modes, click the 802.11a/na tab. c. Select the Enable Wireless Bridging check box.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Figure 75. g. Specify the settings as explained in the following table: Table 38. Wireless signal repeating profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 38. Wireless signal repeating profile and authentication settings (continued) Setting Description Network Authentication WPA-PSK and Data Encryption (continued) WPA2-PSK TKIP (Temporal Key Integrity Protocol) is the standard encryption method used with WPA-PSK and the only selection possible from the Data Encryption drop-down list. In the WPA Passphrase (Network Key) field, enter a passphrase.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 5. Verify the following for all wireless access points: • All APs are on the same LAN, that is, the LAN IP addresses of all APs are in the same network as the LAN devices. • If you use DHCP, all wireless access points can obtain IP addresses automatically (as DHCP clients). For more information, see Configure the Optional DHCPv4 Server on page 27 or Configure the Optional DHCPv6 Server on page 101.
6. Troubleshooting 6 This chapter provides information about troubleshooting the wireless access point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the wireless access point on? Go to Basic Functioning on page 133. • Have I connected the wireless access point correctly? Go to Basic Functioning on page 133. • I cannot access the Internet or the LAN.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Basic Functioning • Verify the Correct Sequence of Events at Startup • No LEDs Are Lit on the Wireless Access Point • The Active LED or the LAN LED Is Not Lit • The WLAN LED Does Not Light Up Note: For descriptions of the LEDs, see Top Panel on page 12.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 If you use a power cord to provide power to the wireless access point, check these items: • Make sure that the power cord is connected to the wireless access point. • Make sure that the power adapter is connected to a functioning power outlet. If it is in a power strip, make sure that the power strip is turned on. If it is plugged directly into the wall, verify that it is not a switched outlet.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 You Cannot Access the Internet or the LAN from a Wireless-Capable Computer There is a configuration problem. Check these items: • You might not have restarted the computer with the wireless adapter to allow TCP/IP changes take effect. Restart the computer. • The computer with the wireless adapter might not have the correct TCP/IP settings to communicate with the network.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • Make sure that your browser has Java, JavaScript, or ActiveX enabled. If you are using Internet Explorer, click Refresh to be sure that the Java applet is loaded. • Try quitting the browser, clearing the cache, deleting the cookies, and launching the browser again. • Make sure that you are using the correct login information. The factory default login name is admin, and the password is password.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Test the LAN Path to Your Wireless Access Point You can ping the wireless access point from your computer to verify that the LAN path to your wireless access point is set up correctly. To ping the wireless access point from a computer running Windows 95 or later: 1. From the Windows toolbar, click the Start button, and select Run. 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Test the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly, test the path from your computer to a remote device. 1. From the Windows toolbar, click the Start button, and select Run. 2. In the Windows Run window, type: ping -n 10 where is the IP address of a remote device such as the DNS server of your ISP.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Use the Packet Capture Tool You can capture wireless packets to analyze traffic patterns with a network traffic analyzer tool. The captured packet flow can show if traffic is flowing correctly to its destinations or if packets are dropped. There is a limit to the size of the packet flow that you can capture in a file. To capture packets: 1. Select Monitoring > Packet Capture. The Packet Capture screen displays: Figure 76. 2.
A. Supplemental Information A This appendix provides factory default settings and technical specifications for the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660. The appendix includes the following sections: • Technical Specifications • Factory Default Settings Technical Specifications Table 39. Technical specifications Feature Description 802.11b/bg/ng wireless specifications 802.11b data rates 1, 2, 5.5, and 11 Mbps, and auto-rate capable 802.11bg data rates 1, 2, 5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 39. Technical specifications (continued) Feature Description 802.11ng MCS index and Data rates for a 40 MHz channel width and a long guard interval (800 ms): data rates 0 / 13.5 Mbps, 1 / 27 Mbps, 2 / 40.5 Mbps, 3 / 54 Mbps, 4 / 81 Mbps, 5 / 108 Mbps, (continued) 6 / 121.5 Mbps, 7 / 135 Mbps, 8 / 27 Mbps, 9 / 54 Mbps, 10 / 81 Mbps, 11 / 108 Mbps, 12 / 162 Mbps, 13 / 216 Mbps, 14 / 243 Mbps, 15 / 270 Mbps, 16 / 40.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 39. Technical specifications (continued) Feature Description 802.11a/na operating frequencies • • • • • 5.180–5.240 GHz (US, lower frequencies) 5.260–5.320 GHz (US, middle frequencies) 5.180–5240 GHz (CE [EU], lower frequencies) 5.260–5.320 GHz (CE [EU], middle frequencies) 5.500–5.680 GHz (CE [EU], upper frequencies) 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Factory Default Settings You can use the Reset button located on the rear of the wireless access point to reset all settings to their factory defaults. This is called a hard reset. To perform a hard reset, use a sharp object to press and hold the Reset button for approximately 5 seconds (until the Test LED blinks rapidly). This returns the wireless access point to the factory configuration settings that are shown in the following table.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 40. Default configuration settings (continued) Feature Description Hotspot Disabled Secure Telnet Disabled Time zone USA-Pacific NTP client Enabled Custom NTP server Disabled Port speed 10/100/1000 Ethernet MAC address See bottom label DHCP server IPv4 IPv6 DHCPv4 server Disabled DHCPv4 server VLAN ID 1 DHCPv4 server IP range start address 192.168.0.2 DHCPv4 server IP range start address 192.168.0.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 40. Default configuration settings (continued) Feature Description Wireless modes 11ng 11na Wireless network names (SSIDs) NETGEAR_11ng NETGEAR_11na Broadcast network names (SSIDs) Enabled Radio frequency channels 11ng: Auto 11na: Auto MCS index/data rate (transmission speed) Best Note: Maximum wireless signal rate derived from IEEE Standard 802.11 specifications. Actual throughput will vary.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Table 40. Default configuration settings (continued) Feature Description WMM powersave Enabled AP EDCA parameters (QoS settings) See Table 32 on page 112.
B. Command-Line Reference B The wireless access point can be configured through either the command-line interface (CLI), a web browser, or a MIB browser. The CLI allows viewing and modification of the configuration from a terminal or computer through a Telnet or SSH connection.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | |-smtp-server-authentication --SMTP server status | | |-username --Username of the Administrator/superuser | | |-password --Password of the Administrator/superuser | | |-send-notifications --Administrator/superuser mail address | | | |-interface> --Select wireless lan interface | | |-wlan> --Wireless LAN interface setting | | | |-2.4GHz> --2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |-apply-incoming-QoSpolicy --Apply QoS policy as a incoming | | | | | | |-apply-outgoing-QoSpolicy --Apply QoS policy as a outgoing | | | | | | |-delete-incoming-QoSpolicy --Delete incoming QoS
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-delete-outgoing-QoSpolicy --Delete outgoing QoS policy | | | | | | | | | | | |-4> --4th security profile | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | | | | | | |-key1 --Wireless wep key 1 | | | | | | |-key2 --Wireless wep key 2 | | | | | | |-key3 --Wireless wep key 3 | | | | | | |-key4 --Wireless wep k
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-key3 --Wireless wep key 3 | | | | | | |-key4 --Wireless wep key 4 | | | | | | |-keyno --Key number | | | | | | |-name --Profile name | | | | | | |-presharedkey --Pre-shared key | | | | | | |-security-separation --Disable associated wireless client communication | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --Wi
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |-apply-incoming-QoSpolicy --Apply QoS policy as a incoming | | | | | | |-apply-outgoing-QoSpolicy --Apply QoS policy as a outgoing | | | | | | |-delete-incoming-QoSpolicy --Delete incoming QoS policy | | | | | | |-delete-outgoing-QoSpolicy --Delete outgoing QoS policy | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | | |-authentication --Authentication type | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-presharedkey --Preshared key | | | | | | | |-remote-mac --Remote MAC | | | | | | | |-status --Profile status | | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | | |-wepkey --Wireless wep key | | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | |-5GHz> --5.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-delete-incoming-QoSpolicy --Delete incoming QoS policy | | | | | | |-delete-outgoing-QoSpolicy --Delete outgoing QoS policy | | | | | | | | | | | |-2> --2nd security profile | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | | | | | | |-key1 --Wireless wep key 1 | | | | | | |-key2 --Wireless wep key 2 | | | |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-key2 --Wireless wep key 2 | | | | | | |-key3 --Wireless wep key 3 | | | | | | |-key4 --Wireless wep key 4 | | | | | | |-keyno --Key number | | | | | | |-name --Profile name | | | | | | |-presharedkey --Pre-shared key | | | | | | |-security-separation --Disable associated wireless client communication | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id --VL
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | |-status --Profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |-apply-incoming-QoSpolicy --Apply QoS policy as a incoming | | | | | | |-apply-outgoing-QoSpolicy --Apply QoS policy as a outgoing | | | | | | |-delete-incoming-QoSpolicy --Delete incoming QoS policy | | | | | | |-delete-outgoing-QoSpolicy
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | | | | | | | | | | |-ids-ips-profile> | | | | | |-ips-status --IDS/IPS (Intrusion detection & prevention system) status | | | | | |-ips-detection-policy --IDS/IPS (Intrusion detection & prevention system) policies | | | | | |-attack-status> --IDS/IPS attack configurations | | | | | | |-EAPOL-logoff-attack --EAPOL logoff attack status | | | | | | |-EAPOL-start-attack --EAPOL start attack status | | | | | | |-adhoc-network-
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | | |-wepkey --Wireless wep key | | | | | | | |-wepkeytype --Wireless wep key type | | | | | | | | | | | | | |-3> --3rd security profile | | | | | | | |-authentication --Authentication type | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-presharedkey --Preshared key | | | | | | | |-remote-mac --Remote MAC
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | |-default-gateway --IPv6 address of default gateway | | |-dhcp-client --Enable dhcpv6 client | | |-dns-server --IPv6 address of DNS server | | |-network-integrity-check | | | |-log> --Syslog setting | | |-syslog-status --Enable syslog client | | |-syslog-server-ip --Syslog server IP address | | |-syslog-server-port --Syslog server port number | | | |-lldp-status --Enable/Disable LLDP | | | |-radiusv4> --Radiusv4 settings
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | |-read-community --SNMP ReadCommunity | | |-snmp-status --SNMP status | | |-trap-community --SNMP ReadCommunity | | |-trap-server --SNMP TrapServer IP address | | |-write-community --SNMP WriteCommunity | | | |-spanning-tree --Enable spanning tree protocol | | | |-time> --Time Setting | | |-custom-ntp-server --Custom NTP server host name | | |-ntp-client --NTP client host name | | |-ntp-server --NTP server host name |
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 | | | | |-trusted-stationlist --Trusted station list | | | | |-knownaplist --Known access point list | | | | |-unknownaplist --Unknown access point list | | | | |-ids-ips-statistics --IDS/IPS statistics | | | | |-ids-ips-thresholds --IDS/IPS thresholds | | | | |-ids-ips-traps --IDS/IPS trap list | | | | |-qos-policies --QoS policy list | | | | | | | | | | |-log> --System log | |-system --System setting | |-time --System tim
C. Notification of Compliance N ETGE A R D ua l B a nd - Wi reles s C Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Español [Spanish] Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Ελληνική [Greek] ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕΚ. Français [French] Par la présente NETGEAR Inc.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Íslenska [Icelandic] Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar kröfur, sem gerðar eru í tilskipun 1999/5/EC. Norsk [Norwegian] NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF. This device is a 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 • This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. • For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment. This device meets all the other requirements specified in Part 15E, Section 15.407 of the FCC Rules. • This device complies with Part 15 of the FCC Rules.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Avertissement Les dispositifs fonctionnant dans la bande 5150 - 5250 MHz sont réservés uniquement pour une utilisation à l'intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux. De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-à-d.
Index Numerics Arbitration Inter-Frame Spacing (AIFS) interval 112 associated identifier (AID) 82 association flood and table overflow 90 associations, wireless clients 85 attacks detecting and preventing 90 monitoring 96 authentication network 45 RADIUS servers 57–58 authentication flood and failure attack 90 autosensing over Ethernet 10 11a and 11na wireless modes 32 11b, 11bg, and 11ng wireless modes 29 2.4 GHz antenna, connectors for 13 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 monitoring 81 burst rate, QoS policies 117–118 bytes, received and transmitted Ethernet connection 84 wireless connection 82 data rates 802.11a mode 34 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 Ethernet packets and bytes, received and transmitted 84 extended service set (ESS) 45 Extensible Authentication Protocol EAPOL) attacks 91 external antennas connecting 13 enabling 109 installation order 20 interface rate limiting and burst rate 118 interference 18 internal antenna, disabling 109 Internet browsing, troubleshooting 135 intrusion detection system (IDS) and intrusion prevention system (IPS) 10, 89 IP addresses NTP servers 25 QoS
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 lease DHCPv4 28 DHCPv6 103 LEDs behavior 21 described 12 troubleshooting 133 legacy 802.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 received signal strength indicator (RSSI) 82, 110 redirecting HTTP requests 106 Reduced Interframe Space (RIFS) transmission 109 region, wireless location 24 registering product 14 remote devices, troubleshooting 138 remote MAC addresses 60 remote management, options 64 repeating wireless signal 127 Request to Send (RTS) threshold 108 Reset button 13, 73, 143 restoring factory defaults 71 password 74 settings, from backup file 71 restricting
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 statistics 83 WMM QoS 63 traffic classes, QoS policies 117 transmission opportunity (TXOP) limit 113 transmission output power 2.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 video traffic advanced QoS 111 WMM QoS 63 virtual access points (VAPs) 110 virtual carrier attack 92 VLANs DHCPv4 server VLAN ID 27 DHCPv6 server VLAN ID 102 identifiers (IDs) 45, 52 tagged, untagged, and management, enabling 103 VoIP (voice over IP) traffic advanced QoS 111 WMM QoS 63 2.4 GHz band 29 5 GHz band 32 monitoring 80 wireless network name (SSID) broadcasting 50 broadcasting and security 43 broadcasting for 802.
