English dropdown-ico

NETGEAR WNDAP620 manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of NETGEAR WNDAP620, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of NETGEAR WNDAP620 one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of NETGEAR WNDAP620. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of NETGEAR WNDAP620 should contain:
- informations concerning technical data of NETGEAR WNDAP620
- name of the manufacturer and a year of construction of the NETGEAR WNDAP620 item
- rules of operation, control and maintenance of the NETGEAR WNDAP620 item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of NETGEAR WNDAP620 alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of NETGEAR WNDAP620, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the NETGEAR service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of NETGEAR WNDAP620.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the NETGEAR WNDAP620 item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    350 East Plumeria Drive San Jose, CA 95134 USA October 2012 202-10983-02 v2.0 Pr oSaf e Pr emium 3 x 3 Dual-Ban d W ir e less -N A ccess P o in t WND AP6 20 Refe ren c e M a nu a l[...]

  • Page 2

    2 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Support Thank you for choosing NETGEAR. After installing your device, locate the serial number on the labe l of your product and use it to register your product at https://my .n etgear .com . Y ou must register yo ur product befor e you can use NETGEAR telephone support. NETGEAR re[...]

  • Page 3

    3 Contents Chapter 1 Introduction About the ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 System Requirements . . . . . . [...]

  • Page 4

    4 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Chapter 3 Wireless Configur ation and Security Wireless Data Sec urity Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Before You Change the SS[...]

  • Page 5

    5 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Ethernet LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Configure Hotspot Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 06 Configure Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . .[...]

  • Page 6

    6 1 1. Intr oduc ti o n This chapter introduces the NETGEAR® ProSafe® Premium 3 x 3 Dua l-Band Wireless-N Access Point WNDAP620 a nd descr ibes some of the key features. The chapte r includes the following sections: • About the ProSafe Premium 3 x 3 Dual-Band W ireless-N Access Point WNDAP620 • What Is in the Box? • System Requirement s •[...]

  • Page 7

    Introduction 7 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 chains and three receive radio chains, also refe rred to as 3x3 multiple input, multiple output (MIMO), can increase wireless throughput con siderably . The wireless acce ss point provides wireless connectivi ty to multiple wireless network devices within a fixed range[...]

  • Page 8

    Introduction 8 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 System R equirements Before installing the wireless acce ss point, make sure that your system meets these requirements: • A 10/10 0/1000 Mbp s local area network device such as a hub or switch • The Catego ry 5 UTP straight-through Ethernet c able with RJ-45 connect[...]

  • Page 9

    Introduction 9 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • DHCP server and client . The DHCP server of the wireless access point can provide a dynamic IPv4 or IPv6 address to wireless cl ients. The wireless a cce ss point can also act as a client and obt ain an IPv4 or IPv6 address from a DHCP server on the LAN. • SNMP .[...]

  • Page 10

    Introduction 10 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • QoS . Quality of Service (QoS) support let s you configure parameters tha t affect tra ffic flowing from the wireless access point to th e client station and tra ffic flowing from the client st ation to the wireless access point: - The QoS settings let you prioriti[...]

  • Page 11

    Introduction 11 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 802.11b/g/n and 802.11a/n Standards–Based Wireless Networking The wireless access point prov ides a bridge between wired Et hernet LANs and 802.1 1b/g/n- and 802.1 1a/n-compatible wireless L AN networks. It provides connectivity between wired Ethernet networks and r[...]

  • Page 12

    Introduction 12 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 1. T able 1. T op pane l LEDs Item LED Description 1 Power/T est Off Power is of f. On (green) Power is on. Amber , then blinking gree n A self-test is running or software is being loaded. During startup, the LED is first steady amber , then goes off, and then b[...]

  • Page 13

    Introduction 13 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Re ar P a ne l Figure 2. The rear p anel component s of the wireless access poin t, from lef t to right, are described in the following list: 1. First reverse SMA connector for an optional 2.4 GHz antenna. 2. Factory def ault Reset button. Using a sharp object, press [...]

  • Page 14

    Introduction 14 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 3. R egister the Wireless Access P oint T o qualify for product updates and product warranty , NETGEAR encourages yo u to register your product. The first time that you connect to the wireless access point while it is connected to the Internet, you have the opti[...]

  • Page 15

    Introduction 15 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 5. 3. Enter the information in the blank fields. The serial number , model number , and date of purchase are entered automatically . 4. Click Regi ster . The reg istration web page displays:[...]

  • Page 16

    Introduction 16 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 6. 5. Complete the registration form. 6. Click su bmit .[...]

  • Page 17

    17 2 2. Inst allati on and Basi c Conf igur ati on This chapter describes how to inst all and confi gure the wireless access p oint for wireless connectivity to your LAN. This basic confi guration en ables computers with either 2.4 GHz 802.1 1b/g/n or 5 GHz 802.1 1a/n wireless adapters to conn ect to the Internet or access printers and files on you[...]

  • Page 18

    Inst allation and B asic Configuration 18 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Failure to follow these guideli nes can result in sig nificant performance degradation or inability to connect wire lessly to the wireless access point. For complete performance specifications, see Appendix A, Supplement al Information .[...]

  • Page 19

    Inst allation and Basic Configuration 19 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Hardware R equirements for Computers on Y our LAN T o connect to the wireless access point on your network, each computer needs to h ave an 802.1 1b/g/n or 802.1 1a/n wireless adapter installed. NETGEAR recommen ds using the wireless access po[...]

  • Page 20

    Inst allation and B asic Configuration 20 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Install and Configure the Wireless Access P o int Install and configu re your wireless access poi nt in the ord er of the following sections: 1. Connect the Wireless Access Point to a Co mputer 2. Log In to the Wireless Access Point 3. Configu[...]

  • Page 21

    Inst allation and Basic Configuration 21 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 7. 5. T urn on your computer . 6. Conn ect the power adapter to the wireless access point. Tip: T he wireless access point supports Power ove r Ethernet (PoE). If you have a switch that provides PoE, you do not nee d to use the power ad[...]

  • Page 22

    Inst allation and B asic Configuration 22 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Log In to the Wireless Access P oint The default IP address of your wirele ss access point is 192.168 .0.100. By default, the DHCP client on the wireless access point is disable d so you can log in using the default IP a ddress.  T o log in[...]

  • Page 23

    Inst allation and Basic Configuration 23 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 10. These buttons have th e following functions: • Edit . Allows you to edit the existing configuration . • Canc el . Cancels all configuration changes that you made on the screen. • App ly . Saves and applies all configuration ch[...]

  • Page 24

    Inst allation and B asic Configuration 24 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 2. Configure the settings as explained in the following table: 3. Click Apply to save your settings.  T o configure time settings: 1. Select Confi guratio n > System > Basic > Ti me . The T ime screen displays: Figure 12. 2. Config[...]

  • Page 25

    Inst allation and Basic Configuration 25 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the IPv4 Settings Note: For information about how t o configure the IPv6 settings, see Configure the IPv6 Settings on p age 99 . W ARNING: If you enable the DHCP clien t, the IP address of the wi[...]

  • Page 26

    Inst allation and B asic Configuration 26 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 13. 2. Configure the IPv4 settings as explained in the following table: 3. Click Apply to save your settings. T able 4. IPv4 set tings Setting Description DHCP Client By default, the Dynamic Host Configu rati on Protocol (DHCP) client i[...]

  • Page 27

    Inst allation and Basic Configuration 27 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure the Optional DHCPv4 Server The wireless access point provides a built-in DHCPv4 server for wireless clients only , which can be especially useful in small networks . When the DHCP server is enabled, the wireless access point provides[...]

  • Page 28

    Inst allation and B asic Configuration 28 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the Basic Wireless Settings For proper compliance and comp atibility between similar products in your coverage area, you need to configure the 802.1 1b/g/n or 802.1 1a/n wireless adapter settings[...]

  • Page 29

    Inst allation and Basic Configuration 29 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Note: The radio wave icon ( ) displays next to the enabled wire less mode . Figure 15. 2. S pecify the wireless mode in the 2.4 GHz band by selecting one of the following radio buttons: • 11 b . Both 802.1 1n- and 802.1 1g-compliant devices [...]

  • Page 30

    Inst allation and B asic Configuration 30 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. S pecify the remaining wireless settings as explained the following table: T able 6. Basic 2.4 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set i dentifier (SSID); t he [...]

  • Page 31

    Inst allation and Basic Configuration 31 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 6. Click Apply to save your settings and enable the selected wireless mode. Note: For information about how t o configure advanced wireless settings, see Configure Advanced W ireless Settings on p age 107 . Configure 802.11a/na Wireless Settin[...]

  • Page 32

    Inst allation and B asic Configuration 32 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 16. 2. S pecify the wireless mode in the 5 GHz band by selecting one of the following radio buttons: • 11 a . 802.1 1n-compliant devices can connect to the access point because they are backward compatible . • 1 1na . This is the de[...]

  • Page 33

    Inst allation and Basic Configuration 33 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. S pecify the remaining wireless settings as explained the following table: T able 7. Basic 5 GHz band wireless settings Setting Descriptions Wireless Network Name (SSID) Enter a 32-character (maximum) service set identifier (SSID); the char[...]

  • Page 34

    Inst allation and B asic Configuration 34 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Click Apply to save your settings and enable the selected wireless mode. Note: For information about how to configure advanced wire less settings, see Configure Advanced W ireless Settings on p age 107 . T e st Basic Wireless Connectivity A[...]

  • Page 35

    Inst allation and Basic Configuration 35 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 NETGEAR recommends that you comple te the following tasks before you deploy the wireless access point in your ne twork: • Con figure wireless security and other wire less features as described in Chapter 3, Wireless Configura tion and Securi[...]

  • Page 36

    Inst allation and B asic Configuration 36 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Do not plac e the wireless access point in a false ceiling space facing up.  T o instal l the wireless access point using the ceiling i nst allation kit: 1. V erify the package content s of the ceiling installation kit. 2. Det ach the[...]

  • Page 37

    Inst allation and Basic Configuration 37 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 4. Attach the mounting plate to the clamp. 5. Conn ect the cables to the wireless access point. 6. Att ach the wireless access point to the mounting plate.[...]

  • Page 38

    Inst allation and B asic Configuration 38 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. Attach the cover to the wireless access point. W all Installation The best location for wall inst allation is at the center of you r wireless coverage area, a nd within line of sight of all mobile devices. Make sure the top (the dome side) [...]

  • Page 39

    Inst allation and Basic Configuration 39 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 2. Detach the mounting plate from the wireless access point. 3. Att ach the mounting plate to the wall. 4. Conn ect the cables to the wireless access point. Mounting plate Screws and wall support s[...]

  • Page 40

    Inst allation and B asic Configuration 40 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Attach the wireless access point to the mounting plate. 6. Att ach the cover to the wireless access point.[...]

  • Page 41

    Inst allation and Basic Configuration 41 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Desk Installation  T o install th e wireless access point on a desk: Attach the rubber f eet to the holes in the bottom of the wireless access point. Rubber feet[...]

  • Page 42

    42 3 3. Wir el ess Co nfigu r a tio n a nd S ecurit y This chapter describes how to configure the wirele ss features of the wire less access point. The chapter includes the followin g sections: • Wireless Data Security Options • Security Profiles • Configure RADIUS Server Settings • Restrict Wireless Access by MAC Address • Schedule the W[...]

  • Page 43

    Wireless Configuration and Security 43 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Unlike wired network dat a, your wireless dat a transmissions can extend beyond you r walls and can be received by anyon e with a compatible ada pter . For this reason, use the security features of your wireless equipment. The wire less access p[...]

  • Page 44

    Wireless Configuration and Security 44 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • WP A and WP A-PSK (TKIP) . Wi-Fi Protected Access (WP A) data en cryption provides strong data secu rity with T emporal Key Integrity Protocol (TKIP) encryption. The very strong authentication along with dynamic pe r-frame rekeying of WP A ma[...]

  • Page 45

    Wireless Configuration and Security 45 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 T o set up a security profile, select its network auth entication type, data encryptio n, wireless client security separation, and VLAN ID: • Network authentication The wireless access point is set by default as an open syst em with no authent[...]

  • Page 46

    Wireless Configuration and Security 46 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Before Y ou Change the SSID , WEP , and WP A Settings For a new wireless network, print or copy one of t he following forms and fill in the settings. For an existing wireless network, the network administrator can provide this information . Be su[...]

  • Page 47

    Wireless Configuration and Security 47 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 F orm for 802.11a/an Modes Print this page and store th e security information in a safe place: • SSID : T he service set identifier (SSID) identifies the wireless local area network. Y ou can customize it by using up to 32 alphanumeric charac[...]

  • Page 48

    Wireless Configuration and Security 48 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure and Enable Security P rofiles T o configure and enable a security profile , you need to enable the associated radio: • For 80 2.1 1b/bg/ng modes, the 2.4 GHz radio needs to be enab led (see Configure 802.1 1b/bg/ng Wireless Settings o[...]

  • Page 49

    Wireless Configuration and Security 49 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 19. The following ta ble explains the fields of the Profile Settings screen: 3. T o configure a wireless security prof ile, select the corresponding radio button to the left of the wireless security profile. The Edit Security Profile scre[...]

  • Page 50

    Wireless Configuration and Security 50 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 20. 4. S pecify the settings of the Profile Definition section of the Edit Secu rity Profile screen as explained in the following table: T able 9. Profile definition settings Setting Description Profile Name Enter a unique name of th e wir[...]

  • Page 51

    Wireless Configuration and Security 51 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. S pecify the settings of the Authentication Set tings section of the Edit Security Profile screen as explained in the following table. The wireless access point is set by default as an open syst em with no authentication. W hen you configure [...]

  • Page 52

    Wireless Configuration and Security 52 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Optional: In the QoS Policies section of the screen, select a QoS policy from the Incoming drop-down list, Outgoing drop-down list, or both. Depending on your selection, the policy is applied to incoming packets, outgoing packet s, or both inc[...]

  • Page 53

    Wireless Configuration and Security 53 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 W ARNING: If you use a wireless computer to configure wireless sec urity settings, you are disconnected when you click Apply . Reconfigure your wireless computer to match the new settings, or ac cess the wireless access point from a wired comput[...]

  • Page 54

    Wireless Configuration and Security 54 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 22. Configure Legacy 802.1X T o use legacy 802.1X security , you need to de fine RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Se rver Settings on p age 57 . When you select Legacy 802.1X from the Netwo[...]

  • Page 55

    Wireless Configuration and Security 55 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 23. Configure WP A with RADIUS , WP A2 wi th RADIUS, and WP A & WP A2 with RADIUS WP A, WP A2, and WP A & WP A2 security requires RADIUS-based 802.1x authentication, so you also need to define RADIUS server settings . For informat[...]

  • Page 56

    Wireless Configuration and Security 56 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure WP A-PSK , WP A2-PSK , and WP A-PSK & WP A2-PSK WP A-PSK, WP A-PSK, and WP A-PSK & WP A2-PSK authentication use a pre-shared key (PSK, also called a p assphrase or a network ke y) and do not require authentication from a RADIUS [...]

  • Page 57

    Wireless Configuration and Security 57 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • WP A-PSK & WP A2-PSK Figure 29. Configure RADIUS Server Settings For authentication, accounting, or both aut hentication and accounting using RADIUS, you need to configure primary servers an d optional secondary servers. These RADIUS ser[...]

  • Page 58

    Wireless Configuration and Security 58 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620  T o configure the RADIUS server settings: 1. Select Configuration > Security > Advanced > Radius Server Settings . The Radius Server Settings screen displays. Figure 30. 2. S pecify the settings as explained in the following table: T[...]

  • Page 59

    Wireless Configuration and Security 59 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Secondary Authentication Serve r IPv4 Address or IPv6 Address Enter the IP ad dress of the secon dary RADIUS server for authentication. The secondary RA DIUS server is used when th e primary RADIUS server is[...]

  • Page 60

    Wireless Configuration and Security 60 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 R estrict Wireless Access by MA C Address For increased security , you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on thei r MAC addresses. Y ou can restrict access to only trusted compu[...]

  • Page 61

    Wireless Configuration and Security 61 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. Click Refresh to refresh the Available Wireless S tations table. The wi re le s s a cc e ss p o in t places the MAC addresses of the att ached wireless stations in this t able. 6. Popula te the T r usted Wireless S tations t able by one of th[...]

  • Page 62

    Wireless Configuration and Security 62 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 32. 2. S pecify the settings as explained in the following table: 3. Click Apply to save your settings. Configure Basic Wireless Quality of Service Wi-Fi Multimedia (WMM) is a subset of the 802.1 1e standard. WMM allows wireless traf fic t[...]

  • Page 63

    Wireless Configuration and Security 63 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • V ideo . The second highest p riority queue with low delay is given to this q ueue. V ideo applications are routed to this queue. • Best Effort . The medium priority que ue with medium delay is given to this queu e. Most standard IP applic[...]

  • Page 64

    64 4 4. M anagemen t and Monitor ing This chapter describes how to use the ma nagement and monitoring features of the wireless access point. The chapter includes t he following sections: • Enable Remote Management • Upgrade the Wireless Access Point Sof tware • Manage the Configuration File or Reset to Factory Defaults • Change the Administ[...]

  • Page 65

    Management and M onitoring 65 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 34. 2. S pecify the settings as explained in the following table: 3. Click App ly to save your settings. T a bl e 16 . SNMP se tt in gs Setting Description SNMP Select the Enable radio button to allow the SNMP network management software, such as [...]

  • Page 66

    Management and Monito ring 66 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Secure Shell and T elnet Management  T o configure remote console features: 1. Select Ma intenance > Remote Management > Remote Console . The Remote Console screen displays: Figure 35. 2. Enable or disable the remote console features: • Secure [...]

  • Page 67

    Management and M onitoring 67 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 36. 4. Enter the login name and password ( admin and password are the default s). After successful login, the > prompt ap pears, preceded by the name of the wireless access point. In this example, the pro mpt is netgear334408. 5. Ente r the CLI[...]

  • Page 68

    Management and Monito ring 68 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Y ou cannot perform the sof tware upgrade from a comp uter that is connected to the wireless access point over a wireless link. Y ou need to use a computer that is connecte d to the wireless access point over an Ethernet cable. W ARNING: When upload[...]

  • Page 69

    Management and M onitoring 69 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. Click Browse and locate the image (.zip) upgrade file. 6. Click App ly to initiate the upgrade process. During the upgrade process, the wireless ac cess point auto matically restart s. The upgrade process typically t akes severa l minutes. When the T [...]

  • Page 70

    Management and Monito ring 70 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. V erify that the new software file has been installed by selecting Monitoring > System . The System screen displays (see Figure 46 on p ag e 78 ). The firmware version is shown in the Access Point Information section of the screen. Manage the Config[...]

  • Page 71

    Management and M onitoring 71 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 R estore the Configuration IMPORT ANT : During the restoration process, do not try to go online , turn off the wireless access point, shut down the computer , or do anything else to the wireless access point unti l it finishes rest arting!  T o restor[...]

  • Page 72

    Management and Monito ring 72 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: After you have restored the factory default sett ings on the wireless access point: * All custo m configurations are lost. * The login password is p assword. * The de fault LAN IP address is 19 2.168.0.100 . * The DHCP client is disabled. * The Acce[...]

  • Page 73

    Management and M onitoring 73 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Use the R eset Button to R est ore Factory Default Settings T o restore the factory default settings when y ou do not know the login user name, login password, or IP add ress, you need to use the Reset button o n the rear p anel of the wireless access po[...]

  • Page 74

    Management and Monito ring 74 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The reboot process typically t akes about 1 minute. When the T est LED turns off, wait a few more seconds before doing a nything with the wireless access point. Change the Administrator P assword The default password is pas sw o rd . NETGEAR recommends th[...]

  • Page 75

    Management and M onitoring 75 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Manage User Accounts The admin user account is the defau lt user account, which you cannot delete. However , you can add other user account s, modify them, and delete them. Users for whom you set up an account can access the web management inte rfac e wi[...]

  • Page 76

    Management and Monito ring 76 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620  T o change the name for a user account: 1. On the User Accounts screen, in the lower p art of the screen, select the user from the Existing Users drop-down list. 2. In the User Name field, modify the name. 3. Click Modi fy . 4. Click Apply to save you[...]

  • Page 77

    Management and M onitoring 77 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 45. S pecify the settings as explained in the following t able: 2. Click App ly to save your settings. Monitor the Wireless Access P oint • V iew System Information • Monitor Wireless S tations • V iew the Activity Log • T raffic S tatisti[...]

  • Page 78

    Management and Monito ring 78 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620  T o view the System screen: Select Monitoring > System . Figure 46.[...]

  • Page 79

    Management and M onitoring 79 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 The following ta ble explains the fields of the System screen: T a bl e 19 . Syst em sc reen fiel ds Setting Description Access Point Information Access Point Name The NetBIOS name . For information abo ut how to change the defa ult name, see Configure B[...]

  • Page 80

    Management and Monito ring 80 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Monitor Wireless Stations The Wireless S tatio ns screen contains the A vailable Wireless S tations t able. This table shows all IP devices that are associa ted with the wireless access point in the wireless network that is defined by the wireless network[...]

  • Page 81

    Management and M onitoring 81 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 47. T o update the list, click Refresh . If the wireless access point is rebooted, th e wireless station dat a is lost until the wireless access point rediscovers the devices. T o force the wireless access point to lo ok for associated devices, cl[...]

  • Page 82

    Management and Monito ring 82 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The following t able explains the fields of the Wireless S tations Details screen: T able 20. Wireless st ations det ails fields Setting Description MAC Address The MAC address of the wireless station. BSSID The BSSID that the wirel ess station is using. [...]

  • Page 83

    Management and M onitoring 83 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 View the Activity Log Y ou can vie w the wireless access point’s activity log s onscreen and save the logs.  T o display the activity log and save it: 1. Select Monitoring > Logs . The Logs screen displays: Figure 49. 2. Click Save As to sa ve th[...]

  • Page 84

    Management and Monito ring 84 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 50. T o update the statistics inf ormation, click Refresh . The following t able explains the fiel ds of the S t atistics screen: T able 21. St atistics field s Setting Description Wired Ethernet Packets The number of packets received and transmitt[...]

  • Page 85

    Management and M onitoring 85 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Enable R ogue AP Detection and Monitor Access P oints • Enable and Configure Rogue AP Detection • V iew and Save Access Point Lists Enable and Configure R ogue AP Detection The wireless access point can d etect rogue ac cess p oints and prevent them [...]

  • Page 86

    Management and Monito ring 86 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 51. 2. Optional: T o enable and configure rogu e AP detection for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. Select the T urn Rogu e AP Detection On check box to enable rogue AP detection. 4. S pecify the detection policy by making a sele[...]

  • Page 87

    Management and M onitoring 87 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • Select the Merge radio button to add the imported list of access point s to the existing Known AP List . 2. Click Br owse an d locate the file that contains the li st o f ac ce ss p oi nts . This file needs to be a simple text file with one MAC addre[...]

  • Page 88

    Management and Monito ring 88 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 3. Click Save to export the list of unknown or known APs to a file. A window opens so you can browse to the location where you want to save the file. The default file name is macList.txt. If you wish, you can now import the saved list int o the Known AP L[...]

  • Page 89

    Management and M onitoring 89 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and P r evention • Configure Wirele ss Intrusion Detection and Prevention Po licy Settings • Configure Wirele ss Intrusion Detection and Prevention Mail Settings • Monitor T raps, Counters, and Ad Hoc Networks[...]

  • Page 90

    Management and Monito ring 90 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Unauthentica ted association • Att ack . Multiple unauthenticated associati on request s (5 or more) that use spoofed MAC addresses of legitimate clients are sent to the wireless access point. • R esult . The client association table overflows, causin[...]

  • Page 91

    Management and M onitoring 91 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 EAPOL-start attack • Attack . Multiple EAPOL st art frames (5 or more) are sent to the wireless access point to i nitia te the RADIUS authentication process for clients. • Res ult . Wireless service is disrupted. • Solution . The wireless access po[...]

  • Page 92

    Management and Monito ring 92 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 RF jamming attack • Att ack . Multiple RF transmissions (100 or more) are sent to the wireless access poin t, jamming the radio frequen cy . • R esult . Wireless service is disrupted. Note: The IDS detects this attack, but the IPS does not take action[...]

  • Page 93

    Management and M onitoring 93 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Known client associating with ad-hoc network • Detection . Clients that should be connected to the secured wireless network are instea d connected to wireless access points that are part of an ad hoc network. • Res ult . Wireless security might be co[...]

  • Page 94

    Management and Monito ring 94 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620  T o enable and configure the IDS/IPS: 1. Select Configuration > IDS/IPS . The IDS/IPS screen displays: Figure 54. 2. Select the Enable radio button. By default , the IDS/IPS is disabled. 3. S pecify the detection policy by making a selection from t[...]

  • Page 95

    Management and M onitoring 95 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and Prevention Mail Settings For the IDS/IPS to send a not ification according to the policy rule, you need to configure th e email settings.  T o configure IDS/IPS email settings: 1. Select Con figuration > I[...]

  • Page 96

    Management and Monito ring 96 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Monitor T raps, Counters, and Ad Hoc Networks The IDS/IPS monitoring screens provide information about the most recent att acks, the number of occurrences per att ack, and ad hoc networks. This inf ormation is read only . Most Recent Attacks  T o displ[...]

  • Page 97

    Management and M onitoring 97 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 57. T o update the information onscreen, click Refresh . Ad Hoc Networks  T o display the ad hoc networks and their associated client s: Select Monit oring > IPS/IDS > Adhoc Networks . The Adhoc Network screen displays.[...]

  • Page 98

    Management and Monito ring 98 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 58. T o update the information onscreen, click Refresh . The following t able explains the fiel ds of the Adhoc Networks scre en: T able 27. Ad hoc network fields Setting Description Client MAC Address The MAC address of the client that i s connect[...]

  • Page 99

    99 5 5. Advan ce d Con figu r a tio n This chapter describes how to configure the advanced feat ures of the wireless access point. The chapter includes the followin g sections: • Configure IPv6 Se ttings and Optional DHCPv6 Server Settings • Configure Spa nning T ree Protocol, 802.1Q VLAN, and Link Layer Discovery Protocol • Configure Hot s p[...]

  • Page 100

    Advanced Configuration 100 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 W ARNING: If you enable the DHCP client, the IP address of the wireless access point changes when you c lick Apply , causing you to lose your connection to the wireless access point. Y ou then need to use the new IP address to reconnect to the wireles s acce[...]

  • Page 101

    Advanced Configuration 101 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the Optional DHCPv6 Server The wireless access point provides a built-in DHCPv6 server for wireless clients only , which can be especially useful in small networks . When the DHCP server is enabled, the wirele[...]

  • Page 102

    Advanced Configuration 102 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 60. 2. Configure the settings as explained in the following table: T able 29. DHCP server settings for IPv6 Setting Description Select the DHCPv6 Server Enable radio button to enable the DHCP se rver . Use the default settings or specify the pool of I[...]

  • Page 103

    Advanced Configuration 103 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure Spanning T ree Protocol, 802.1Q VLAN , and Link Layer Discovery P rotocol • Configure STP and VLANs • Configure Ethernet LLDP As part of the advanced syst em configuration, you ca n enabl e the S panning T[...]

  • Page 104

    Advanced Configuration 104 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Select the Unt agged VLAN check box only if the hubs and switches on your LAN support the 802.1Q VL AN p rotocol. Likewise, change the untagged VLAN value only if the hub s and switches on your LAN support the 802.1Q VLAN protocol. • T agged VLAN . W[...]

  • Page 105

    Advanced Configuration 105 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 2. S pecify the settings as explained in the following table: W ARNING: Selecting the Unt agged VLAN check box or changing the unt agged VLAN value causes loss of IP connectivity if the hubs and switches on your LAN have not yet been c onfigured with the co[...]

  • Page 106

    Advanced Configuration 106 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 62. 2. Select the Disable radio button. By default, the Enable radio button is selected. 3. Click Apply to save your settings. Configure Hotspot Settings If the wireless access point functions a s a public access p oint and you want it to capture an d[...]

  • Page 107

    Advanced Configuration 107 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 63. 2. T o enable HTT P redirection, select the Enable radio button. By default, the Disable radio button is selected. 3. In the Re direct URL field, enter the URL of the web server to which you wish to redirect HTTP requests. 4. Click App ly to save[...]

  • Page 108

    Advanced Configuration 108 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 64. 2. Optional: T o configure adva nced wireless settings for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. S pecify the settings as explained in the following table: T able 31. Advanced wireless settings Setting Description RTS Threshold (0?[...]

  • Page 109

    Advanced Configuration 109 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Beacon Interval (100–10 00) Enter the interval between 100 ms and 1000 ms for each beacon transmission, which a llows the wir eless access point to synchronize the wireless network. The default setting is 100. Aggregation Len gth (1024 –65535) Note: Thi[...]

  • Page 110

    Advanced Configuration 11 0 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Click Apply to save your settings. Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) que ue settings work well. For information about how to con figure basic QoS, see Configure Ba sic Wireless Quality [...]

  • Page 111

    Advanced Configuration 111 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 65. 2. Optional: T o configure advanced QoS for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. S pecify the settings as explained in the following table: T a bl e 32 . EDCA set ti ngs Setting Description AP EDCA parameters AIFS Enter the Arbitr[...]

  • Page 112

    Advanced Configuration 11 2 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Click Apply to save your settings. Configure Quality of Service P olicies The wireless access point let s you configure an d apply QoS policies to wireless clients. In each QoS policy , you can specify multiple classi fications (match clauses) and apply [...]

  • Page 113

    Advanced Configuration 11 3 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • EtherT ype. Indicates the EtherT ype field in Ethernet-II frame header . • Sou rce MAC. Indicates the source MAC address in Etherne t-II frame header . • Destin ation MAC. Indicates the destinat ion MAC address in Ethernet-II frame header . • Sou[...]

  • Page 114

    Advanced Configuration 11 4 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Depending on your selection from the Match Frame Fie lds drop-down list, Match Classifications appears either as a drop-down list from wh ich you need to make a selection or a field in which you need to enter information. T able 33. QoS clas sificatio[...]

  • Page 115

    Advanced Configuration 11 5 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Match Frame Fields and Match Classifications (continued) 802.1P From the Match Classifications drop-down list, select the CoS priority value against which the information in the IP header needs to be matched: • Routine(0) • Priority(1) • Immediat e(2[...]

  • Page 116

    Advanced Configuration 11 6 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Optional: S pecify rate limiting for the classification as explained in the follo wing table: 7. Click Add to add the classification to the Classifica tions field. 8. T o add another classification to the Qo S policy , repeat St e p 5 , St e p 6 , and St[...]

  • Page 117

    Advanced Configuration 11 7 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Note: Rate limiting for the wireless interface is an op tional setting that applies to all traf fic on the wireless interface. Unlike classification rate limiting, which you can spec ify for each classification, rate limiting for the wireless interface nee[...]

  • Page 118

    Advanced Configuration 11 8 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multipoint Wireless Network • Configure the Wirele ss Access Point to Re peat the Wireless Signal Using Point-to-Multipoint Bridge Mode The wireless acces[...]

  • Page 119

    Advanced Configuration 11 9 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 67.  T o configure a point-to-point wireless network: 1. Con figure the wireless access point (AP1 on LAN Segmen t 1 in the previous figure) as a point-to-point bridge: a. Select Co nfiguration > Wireless Bridge . The Bridging screen displays [...]

  • Page 120

    Advanced Configuration 120 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 e. If you want to enable wireless client association while the wireless access point functions as a point-to-point bridge, select the Enable W ireless Client Associati on check box . f. Click Edit to configure the security profile sett ings. The Edit Securit[...]

  • Page 121

    Advanced Configuration 121 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 h. Click Apply to save your security profile settings. The Bridging screen displays again. i. I f the correct profile name and security option are displayed in the ta ble, select the check box in the Enable colu mn. j. Click Apply on th e Bridging screen to[...]

  • Page 122

    Advanced Configuration 122 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other compu ters or servers connected to LAN Segment 1 or LAN Segment 2. Configure a P oint -to-Multipoint Wireless Network In a point-to-multipoint[...]

  • Page 123

    Advanced Configuration 123 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 71. b. Optional: T o disp lay the Bridging screen for the 802. 1 1a/ na modes, click t he 80 2.1 1a/na tab . c. Select the Enable Wireless Bridging check box. The Local MAC Ad dress field is a nonconfigurable field that shows the MAC address of the w[...]

  • Page 124

    Advanced Configuration 124 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 g. S pecify the settings as explained in the following tab le: h. Click Apply to save your security profile settings. The Bridging screen displays again. i. Repeat St e p c through Ste p h for any other security profile that you want to edit. T able 37. Poin[...]

  • Page 125

    Advanced Configuration 125 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 For example, first co nfigure security p r ofile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profil e NETGEAR-WDS-2 with the MAC address of AP3 (s ee Figure 70 on p age 122 ). 2. Activate the wireless access point (AP1 on LAN Segm[...]

  • Page 126

    Advanced Configuration 126 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Y ou can extend this mult ipoint bridging configuration by ad ding additional wireless access po ints t hat are configured in point-to-point mode for each additional LAN segment . Furthermore, you can extend the range of the wireless n etwork with NETG[...]

  • Page 127

    Advanced Configuration 127 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620  T o configure the wireless access point to repeat the wire less signal: 1. Configure the security profiles on the wireless access point (AP2 in the previous figure): a. Select Co nfiguration > Wireless Bridge . The Bridging screen displays (see the f[...]

  • Page 128

    Advanced Configuration 128 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 75. g. S pecify the settings as explained in the following tab le: T able 38. Wireless signal repeati ng profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember . The defaul[...]

  • Page 129

    Advanced Configuration 129 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 h. Click Apply to save your security profile settings. The Bridging screen displays again. i. Rep eat St e p e through Ste p h for any other security profile that you want to edit. For example, first co nfigure security p r ofile NETGEAR-WDS-1 with the MAC [...]

  • Page 130

    Advanced Configuration 130 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. V erify the following for all wireless access points: • All APs are on the same LAN, that is, the LAN IP addre sses of all APs are in the same network as the LAN devices. • If you use DHCP , all wireless access points ca n obtain IP addresses automati[...]

  • Page 131

    131 6 6. Tr o u b l e s h o o t i n g This chapter provides information about troubleshooting the wireless access point. Af ter each problem description, instructions are given to help you diagnose and solve the proble m. For the common problems listed, go to the section in dicated. • Is the wireless access point on? Go to Basic Functioning on p [...]

  • Page 132

    T roubleshooting 132 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Basic F unctioning • V erify the Correct Sequence of Events at S tartup • No LEDs Are Lit on the Wire less Access Point • The Active LED or the LAN LED Is Not Lit • The WLAN LED Does Not Light Up Note: For descriptions o f the LEDs, see T op Panel on page [...]

  • Page 133

    T roubleshooting 133 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620  If you use a power cord to provide power to the wireless access point, check these items: • Make sure that the power cord is connected to the wireless a ccess point. • Make sure that the power adapter is connected to a functioning power o utlet. If it is [...]

  • Page 134

    T roubleshooting 134 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Y ou Cannot Access the Inte rnet or the LAN from a Wireless - Capable Computer There is a configuration problem.  Check these items: • Y ou might not have resta rted the computer with the wireless adapter to allow TCP/IP changes take e ffect. Rest art the com[...]

  • Page 135

    T roubleshooting 135 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • Make sure that your browser has Java, JavaScript, or ActiveX enab led. If you are using Internet Explorer , click Refresh to be sure that the Java applet is loaded. • T ry quitting the browser , clearing the cache, deleting th e cookies, and launching t he [...]

  • Page 136

    T roubleshooting 136 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T est the LAN P ath to Y our Wireless Access P oint Y ou can ping the wireless access po int from your co mputer to verify that the LAN p ath to your wireless access point is set up correctly .  T o ping the wireless access point from a computer running W indow[...]

  • Page 137

    T roubleshooting 137 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 T est the P ath from Y o ur Co mputer to a R emote Device After verifying that the LAN p ath works correctly , test the path from your computer to a remote device. 1. F rom the Windows toolbar , click the Star t button, and select Run . 2. In the Windows Run wind[...]

  • Page 138

    T roubleshooting 138 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the P a cket Capture T ool Y ou can capture wir eless packet s to analyze traf fic p atterns with a network traf fic analyzer tool. The captured packet flow can show if traffic is flowing correctly to it s destinations or if packet s are dropped. There is a li[...]

  • Page 139

    139 A A. Supplemental Inf or mation This appendix provides facto ry default settings and technical sp ecifications for the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620. The appendix includes the following sections: • T echnical Specifications • Factory Default Settings T e chnical Specifications T a b le 39 . T echnica l sp [...]

  • Page 140

    Supplement al Information 140 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 802.1 1ng MCS index an d data rates (continued) Data rates for a 40 MHz channel width and a long guard in terval (800 ms): 0 / 13.5 Mbps, 1 / 27 Mbps, 2 / 40.5 Mbps , 3 / 54 Mbps, 4 / 81 Mbp s, 5 / 108 Mbps, 6 / 121.5 Mbps, 7 / 135 Mbps, 8 / 27 Mbps, 9 / [...]

  • Page 141

    Supplement al Information 141 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 802.1 1a/na operating frequencies • 5.180–5.240 GHz (US, lower frequencies) • 5.260–5.320 GHz (US, middle frequen cies) • 5.180–5240 GHz (CE [EU], lower frequencies) • 5.260–5.320 GHz (CE [EU], middle frequencies) • 5.500–5.680 GHz (C[...]

  • Page 142

    Supplement al Information 142 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Factory Default Settings Y ou can use the Reset button locat ed on the rear of the wireless access poin t to reset all settings to their factory default s. This is called a hard reset. T o perform a hard reset, u s e a sh ar p o bj e ct t o p ress and hol[...]

  • Page 143

    Supplement al Information 143 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Hotspot Disabled Secure T elnet Disabled T ime zone USA-Pacific NTP client Enabled Custom NTP server Disabled Port speed 10/100/1000 Ethernet MAC address See bottom label DHCP server IPv4 DHCPv4 server Disabled DHCPv4 server VLAN ID 1 DHCPv4 server IP ra[...]

  • Page 144

    Supplement al Information 144 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Wireless mode 11 n g Wireless network name (SSID) NETGEAR_1 1ng Broadcast network name SSID Enabled 802.1 1ng radio frequency channel Auto MCS index/data rate (transmission speed) Best Note: Maximum wireless signal rate derived from IEEE Standard 80 2.11 [...]

  • Page 145

    Supplement al Information 145 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 QoS policies None Wireless bridging Disabled Default wireless profile and profile secu rity Profile name NETGEAR Profile state Enabled Wireless network name (SSID) NETGEAR_1 1ng Broadcast wireless network name (SSID) Enabled Network authentication Open s[...]

  • Page 146

    146 B B. Co mmand-L ine R ef er ence The wireless access point can be configured through eith er the command-line interface (CLI), a web browser , or a MIB browser . The CLI allows viewing and modification of the conf igu ration from a terminal or computer through a T elnet or SSH connection. Keyword Description ------------------------------------[...]

  • Page 147

    Command-Line Refe rence 147 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | |-send-notifications --Administrator/superuser mail addre ss | | | |-interface> --Select wireless lan interface | | |-wlan> --Wireless LAN interface setting | | | |-2.4GHz> --2.4 GHz wireless LAN interface set ting | | | | |-aggregation-length[...]

  • Page 148

    Command-Line Reference 148 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-delete-outgoing-QoSpolicy--Delete outgoing QoS policy | | | | | | | | | | | |-2> --2nd security profile | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --[...]

  • Page 149

    Command-Line Refe rence 149 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-presharedkey --Pre-shared key | | | | | | |-security-separation --Disable associated wireless client communication | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id --VLAN id | | | | | [...]

  • Page 150

    Command-Line Reference 150 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | | | | | | |-key1 --Wireless wep key 1 | | | | | | |-key2 --Wireless wep key 2 | | | | | | |-key3 --Wi[...]

  • Page 151

    Command-Line Refe rence 151 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-authentication-failure-attack --Authentication failure a ttack status | | | | | | |-authentication-flood --Authentication flood att ack status | | | | | | |-cts-flood --CTS flood attack status | | | | | | |-rts-flood --RTS flood attack status[...]

  • Page 152

    Command-Line Reference 152 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-presharedkey --Preshared key | | | | | | | |-remote-mac --Remote MAC | | | | | | | |-status --Profile status | | | | | | | |-wep-pass-phrase --Wireless wep passp[...]

  • Page 153

    Command-Line Refe rence 153 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | |-security-profile> --Create security profile | | | | | |-1> --1st security profile | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | |[...]

  • Page 154

    Command-Line Reference 154 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |-apply-incoming-QoS[...]

  • Page 155

    Command-Line Refe rence 155 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | | | | | | |-key1 --Wireless wep key 1 | | | | | | |-key2 --Wireless wep key 2 | | | | | | |-key3 --Wireless wep key 3 | | | | | | |-key4 --Wireless wep key 4 |[...]

  • Page 156

    Command-Line Reference 156 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-wep-pass-phras --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type | | | | | | |-apply-incoming-QoSpolicy --Apply QoS policy as a incoming | | | | | | |-apply-outgoing-QoSpolicy --Apply QoS policy as a outgoing | | | [...]

  • Page 157

    Command-Line Refe rence 157 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-presharedkey --Preshared key | | | | | | | |-remote-mac --Remote MAC | | | | | | | |-status --Profile status | | | | | | | |-wep-pass-phrase --Wireless wep pas[...]

  • Page 158

    Command-Line Reference 158 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | |-default-gateway --IPv6 address of default gateway | | |-dhcp-client --Enable dhcpv6 client | | |-dns-server --IPv6 address of DNS server | | |-network-integrity-check | | | |-log> --Syslog setting | | |-syslog-status --Enable syslog client | | |-sys[...]

  • Page 159

    Command-Line Refe rence 159 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | |-write-community --SNMP WriteCommunity | | | |-spanning-tree --Enable spanning tree protocol | | | |-time> --Time Setting | | |-custom-ntp-server --Custom NTP server host name | | |-ntp-client --NTP client host name | | |-ntp-server --NTP server ho[...]

  • Page 160

    Command-Line Reference 160 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | |-log> --System log | |-system --System setting | |-time --System time settings | |[...]

  • Page 161

    161 C C. Notif i cati on of C omp li ance NET GEAR Dual Band - W ir eless Regulatory Compliance Information This section includes user requ irement s for operating this product in acco rdance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applica b l e re qu i r e men t s ma[...]

  • Page 162

    Notification of Compliance 162 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Es pañol [S pan ish] Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplica bles o exigibles de la Directiva 1999/5/CE. Ελληνική [G reek] ΜΕ ΤΗΝ ΠΑΡΟ [...]

  • Page 163

    Notification of Compliance 163 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 This device is a 2.4 GHz wideband tran smission system (tra nsceiver), intended for use in all EU member states and EFT A countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the nation[...]

  • Page 164

    Notification of Compliance 164 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • This transmitter must not be co-l ocated or operati ng in con junction with any other antenna or transmitter . • For o peration within 5.15 ~ 5.25GHz frequen cy range, it is restricted to ind oor environment. This device meets all the other require[...]

  • Page 165

    Notification of Compliance 165 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Avertissement Les dispositifs fonctionnant dans la bande 5150 - 5250 MHz sont réservés uniquement pour une utilisa tion à l'intérieur afin d e réduire les risques de brouillage préjudi ciable aux systèmes de satell ites mobile s util isant l[...]

  • Page 166

    166 Inde x Numerics 1 1a and 1 1na wireless modes 32 1 1b, 1 1bg, and 1 1ng wireless modes 29 2.4 GHz antenna, connectors for 13 2.4 GHz or 5 GHz operation 9 64-bit, 128-bit, and 152-bit WEP 54 802.1 1b/g/n and 802.1 1a/n wireless adapters 19 wireless settings 28 – 34 802.1 1d support 109 802.1P , Qo S policies 115 802.1Q VLAN 9 , 105 A access, r[...]

  • Page 167

    167 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 burst rate, QoS policies 116 – 117 bytes, received and transmitted Ethernet connection 84 wireless connection 82 C capturing packets 138 Carrier Sense Multiple Access (CSMA) 108 Category 5 Ethernet cable 7 channel width (802.1 1na) 33 channel width and offset (802.1 1 ng) 30 ch[...]

  • Page 168

    168 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Ethernet packets and bytes, received and transmitte d 84 extended servi ce set (ESS) 45 Extensible Auth entication Protocol EAPOL) att acks 91 external an tennas connecting 13 enabling 109 F factory default settings list of 142 – 145 restoring 71 firmware backing up 70 factory d[...]

  • Page 169

    169 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 lease DHCPv4 28 DHCPv6 103 LEDs behavior 21 described 12 troubleshooting 132 legacy 802.1X (wireless security) 51 , 54 LLDP (Link Layer Discovery Protocol) 105 local MAC addresse s 60 location, country and region 24 logging activities 83 logging in 22 login URL, name, and p asswo[...]

  • Page 170

    170 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 RADIUS serve rs 58 SNMP manager , traps 65 syslog server 77 power adapter specifications 141 power socket 13 Power/T est LED behavior 21 described 12 troubleshooting 132 powersavin g, WMM 63 preamble type 109 prefix length default 142 DHCPv6 clients 103 wireless access point 79 , [...]

  • Page 171

    171 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 software backing up 70 factory defaults 71 restoring from backup fi le 71 upgrading 68 version, viewing 79 source port, QoS policies 116 S panning Tree Protocol (STP), enabling 105 specifications, technical 139 SSH (Secure Shell), enabling 66 SSIDs (service set identifiers) broad[...]

  • Page 172

    172 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 video traffic advanced QoS 110 WMM QoS 63 virtual access points (V APs) 109 virtual carrier attack 92 VLANs DHCPv4 server VLAN ID 27 DHCPv6 server VLAN ID 102 identifiers (IDs) 45 , 52 tagged, untagged, and management, enabling 103 V oIP (voice over IP) traf fic advanced QoS 110 W[...]