Home

Reference Manual - FTP Directory Listing

1. 0 cece ccc ee eect n eee e eee 89 Configure a Point to Point Wireless Network 0 00 eee eae 89 Configure a Point to Multipoint Wireless Network 0 92 Configure the Wireless Access Point to Repeat the Wireless Signal Using Point to Multipoint Bridge Mode 0 0 eee 94 Chapter 6 Troubleshooting Basic FPUNCHONINO 6226 4 cee 4st heatndutosata ERRAN EEEE E a snes a a 99 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Verify the Correct Sequence of Events at Start Up 45 99 No LEDs Are Lit on the Wireless Access Point 0 0 c eee eens 99 The Active LED or the LAN LED Is Not Lit 0 0 0 0 0c eae 100 The WLAN LED Does Not Light UD 242 c cceescusaviectechetseeenaaas 100 You Cannot Access the Internet or the LAN froma Wireless Capable Computer 0 cece cece cece ence n teen nes 101 You Cannot Configure the Wireless Access Point from a Browser 101 When You Enter a URL or IP Address a Time Out Error Occurs 102 Troubleshoot a TCP IP Network Using the Ping Utility 102 Test the LAN Path to Your Wireless Access Point 0006 103 Test the Path from Your Computer to a Remote Device 104 Problems with Date and Time 0 cc cece cence een ees 104 Use the Packet Capture Tool si hosscdccadediedtadeeeeetedeaehebasdudars 105 Appendix A Supplemental Information Tec
2. Troubleshooting 102 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Test the LAN Path to Your Wireless Access Point You can ping the wireless access point from your computer to verify that the LAN path to your wireless access point is set up correctly gt To ping the wireless access point from a computer running Windows 95 or later 1 From the Windows toolbar click the Start button and select Run 2 Inthe field provided type ping followed by the IP address of the wireless access point as in this example ping 192 168 0 100 3 Click OK You should see a message like this one Pinging lt IP address gt with 32 bytes of data If the path is working you see this message Reply from lt IP address gt bytes 32 time NN ms TTL xxx If the path is not working you see this message Request timed out If the path is not functioning correctly you could have one of the following problems e Wrong physical connections Make sure that the Active LED and LAN LED are on If one or both of these LEDs are off follow the instructions in The Active LED or the LAN LED Is Not Lit on page 100 Check that the corresponding link LEDs are on for your network interface card and for the hub ports if any that are connected to your workstation and wireless access point e Wrong network configuration Verify that the Ethernet card driver software and TCP IP software are both installed and configured on your computer
3. Dec 31 1999 16 39 g alert clusterd 18196 Verifiying Cluster Matching Behaviour between 192 168 0 100 amp 192 168 0 100 Al Dec 31 1999 16 38 ai alert clusterd 18196 Verifiying Cluster Matching Behaviour between 192 168 0 100 amp 192 168 0 100 APs Dec 31 1999 16 38 49 alert clusterd 18196 Verifying Cluster Matching Behaviour between 192 168 0 100 7 amp 192 168 0 100 APs l 2 Click the Save As button to save the log contents to a file on your computer or to a disk drive 3 To update the display click the Refresh button 4 To clear the log content click the Clear button Traffic Statistics The Statistics page displays information for both wired LAN and wireless WLAN network traffic gt To display the Statistics page 1 Select Monitoring gt Statistics NETGEAR Cq WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Configuration Monitorin Maintenance Statistics Wired Ethernet Packets 20174 16960 Bytes 2562154 8745774 Wireless 802 11 Unicast Packets 0 0 Multicast Packets 0 9771 Total Packets 0 9771 Total Bytes 0 0 Wireless 802 11 a na ac Unicast Packets 0 0 Multicast Packets 0 9770 Total Packets 0 9770 Total Bytes 0 0 Client Association 802 11 bgn Radio 0 802 11 a na ac Radio 0 2 To update the statistics information click the Refresh button Management and Monitoring 66 ProSAFE Dual Ban
4. Technical Specifications Table 2 Technical specifications Feature Description S 802 11bg ng bgn wireless specifications 802 11b data rates 1 2 5 5 and 11 Mbps and auto rate capable 802 11bg data rates 1 2 5 5 6 9 11 12 18 24 36 48 54 Mbps and auto rate capable 802 11bgn MCS index Data rates for a 20 MHz channel width and an automatic guard interval and data rates 0 7 2 Mbps 1 14 4 Mbps 2 21 7 Mbps 3 28 9 Mbps 4 43 3 Mbps 5 57 8 Mbps 6 65 Mbps 7 72 2 Mbps 8 14 44 Mbps 9 28 88 Mbps 10 43 33 Mbps 11 57 77 Mbps 12 86 66 Mbps 13 115 56 Mbps 14 130 Mbps 15 144 44 Mbps 16 21 7 Mbps 17 43 3 Mbps 18 65 Mbps 19 86 7 Mbps 20 130 7 Mbps 21 173 3 Mbps 22 195 Mbps 23 216 7 Mbps and auto rate capable Data rates for a 20 MHz channel width and a long guard interval 800 ms 0 6 5 Mbps 1 13 Mbps 2 19 5 Mbps 3 26 Mbps 4 39 Mbps 5 52 Mbps 6 58 5 Mbps 7 65 Mbps 8 13 Mbps 9 26 Mbps 10 39 Mbps 11 52 Mbps 12 78 Mbps 13 104 Mbps 14 117 Mbps 15 130 Mbps 16 19 5 Mbps 17 39 Mbps 18 58 5 Mbps 19 78 Mbps 20 117 Mbps 21 156 Mbps 22 175 5 Mbps 23 195 Mbps and auto rate capable Data rates for a 40 MHz channel width and an automatic guard interval 0 15 Mbps 1 30 Mbps 2 45 Mbps 3 60 Mbps 4 90 Mbps 5 120 Mbps 6 135 Mbps 7 150 Mbps 8 30 Mbps 9 60 Mbps 10 90 Mbps 11 120 Mbps 12 180 Mbps 13
5. Verify that the IP address for your wireless access point and your workstation are correct and that the addresses are on the same subnet Troubleshooting 103 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Test the Path from Your Computer to a Remote Device After verifying that the LAN path works correctly test the path from your computer to a remote device 1 2 From the Windows toolbar click the Start button and select Run In the Windows Run window type ping n 10 lt P address gt where lt P address gt is the IP address of a remote device such as the DNS server of your ISP If the path is functioning correctly replies as in the previous section display If you do not receive replies Check that your computer has the IP address of your router listed as the default wireless access point If the IP configuration of your computer is assigned by DHCP this information is not visible in your computer s Network Control Panel Verify that the IP address of the router is listed as the default wireless access point Check to see that the network address of your computer the portion of the IP address specified by the netmask is different from the network address of the remote device Check that your cable or DSL modem is connected and functioning If your ISP assigned a host name to your computer enter that host name as the account name in the basis General system settings page see Configure Basic Gen
6. setting Description Match Frame 802 1P From the Match Classifications menu select the CoS priority value Fields and Match against which the information in the IP header needs to be matched Classifications Routine 0 continued Priority 1 Immediate 2 Flash 3 Flash Override 4 Critic CCP 5 Inter Control 6 Network Control 7 IP Protocol In the Match Classifications field enter the IP protocol value against which the information in the IP header needs to be matched A list of protocol values is available at http www iana org assignments protocol numbers protocol numbers xml Ether Type In the Match Classifications field enter the Ether type value against which the information in the IP header needs to be matched A list of Ether type values is available at http standards ieee org develop regauth ethertype eth txt Source MAC In the Match Classifications field select or enter the source MAC address against which the information in the IP header needs to be matched To select the MAC address of a wireless client that is connected to the wireless access point 1 Select the radio button to the left of the Match Classifications menu 2 From the menu select a MAC address To enter a MAC address 1 Select the radio button to the right of the Match Classifications menu 2 In the field to the right of the radio button enter a MAC address Destination In the Match Classifications field select or enter the des
7. 162 Mbps 20 243 Mbps 21 324 Mbps 22 364 5 Mbps 23 405 Mbps and auto rate capable 802 11a a na 5 180 5 240 GHz US lower frequencies operating frequencies 5 260 5 320 GHz US middle frequencies 5 180 5240 GHz CE EU lower frequencies 5 260 5 320 GHz CE EU middle frequencies 5 500 5 680 GHz CE EU upper frequencies 802 11 a a na encryption WPA PSK amp WPA2 PSK AES TKIP Management and Other Specifications Network management Remote configuration and management through the web management interface through SNMP or through Telnet or SSH with the command line interface CLI SNMP management supports SNMP MIB II 802 11 MIB and proprietary configuration MIB Maximum clients Limited by the amount of wireless network traffic generated by each node a maximum of 400 clients is supported Supplemental Information 108 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Table 2 Technical specifications continued Feature Description Status LEDs Power Test LED Activity LED Ethernet LAN Wireless LAN 2 4 GHz and 5 GHz Electrical and Physical Specifications Power adapter 12 VDC 2 5A plug is localized to country of sale Physical specifications e Dimensions h x w x d 197 3 x 197 3 x 40mm 7 76 x 7 76 x 1 57 in e Weight 762 g 1 6 Ib Environmental Operating temperature 0 to 40 C 32 to 131 F specifications Operating humidity 10 90 noncondensing Electr
8. Matos somo Wireless Bridge Bridging cee Enable Wireless Bridging 1 NETGEAR WDS 1 2 NETGEAR WDS 2 3 NETGEAR WDS 3 4 NETGEAR WDS 4 2 4GHz v 50 6A 03 80 58 60 2 4 GHz v 50 6A 03 80 58 60 2 4GHz v 50 6A 03 80 58 60 2 4GHz 50 6A 03 80 58 60 Open System Open System Open System Open System b Select the Enable Wireless Bridging check box The Local MAC Address field is a nonconfigurable field that shows the MAC address of the wireless access point c Select the Wireless Point to Point Bridge radio button The page adjusts d If you want to enable wireless client association while the wireless access point functions as a point to point bridge select the Enable Wireless Client Association check box e Click Edit to configure the security profile settings The Edit Security Profile page displays Advanced Configuration 90 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 f Specify the settings as explained in the following table setting __ Description Profile Definition Profile Name Enter a profile name that is easy to remember The default name is NETGEAR WDS 1 Remote MAC Address Enter the MAC address of the remote wireless access point the MAC address of AP2 on LAN Segment 1 in Figure 5 on page 90 Authentication Settings Network From the Network Authentication menu select Open System WPA PSK or Authentication and WPA2 PSK Your selection determine
9. RTS Threshold 0 65535 65535 Fragmentation Length 256 2346 2346 Beacon Interval 20 2000 100 AMPDU Enable Disable RIFS Transmission Enable Disable DTIM Interval 1 255 2 802 11d Wireless Client Security Separation Disable Max Wireless Clients 200 Frame Burst Enable Disable Fixed Multicast Rate Auto Broadcast Multicast Rate Limiting j Wireless Settings 802 11 a a na ac RTS Threshold 0 65535 65535 Fragmentation Length 256 2346 2346 Beacon Interval 20 2000 100 AMPDU Enable Disable RIFS Transmission Enable Disable DTIM Interval 1 255 2 Wireless Client Security Separation Disable Max Wireless Clients 200 2 Specify the settings as explained in the following table setting Description S RTS Threshold 0 2347 Enter the Request to Send RTS threshold The default setting is 2347 If the packet size is equal to or less than the RTS threshold the wireless access point uses the Carrier Sense Multiple Access with Collision Detection CSMA CD mechanism and the data frame is transmitted immediately after the silence period If the packet size is larger than the RTS threshold the wireless access point uses the CSMA with Collision Avoidance CSMA CA mechanism In this situation the transmitting station sends an RTS packet to the receiving station and waits for the receiving station to return a Clear to Send CTS packet before sending the actual packet data Fragmentati
10. including current IP settings and current wireless settings This information is read only so any changes must be made on other pages gt To view the System page Select Monitoring gt System Management and Monitoring 61 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 NETGEAR W WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp i Ji ai je AF Log tatisi 5 j i Ensemt System Access Point Information Access Point Name netgear80586f Ethernet MAC Address 50 6A 03 80 58 6F Wireless MAC Address for 2 4 GHz 50 6A 03 80 58 60 Wireless MAC Address for 5 GHz 50 6A 03 80 58 70 Ethernet LLDP Enabled Country Region United States Firmware Version 3 1 0 2 Serial Number 4D8156E300021 Current Time Fri Dec 31 1999 14 51 24 PST AP Uptime 0 days 2 hours 51 minutes Current IPv4 Settings IPv4 Address 192 168 0 100 Subnet Mask 255 255 255 0 Default Gateway DHCP Client Enabled Current IPv6 Settings IPv6 Address a Prefix Length 0 Dynamic IPv6 Address n a Default Gateway rf LAN IPv6 Link Local Address fe80 526a 3ff fe80 586f 64 DHCP Client Disabled The following table explains the fields of the System page Setting Description S Access Point Information Access Point Name The NetBIOS name For information about how to change the default name see Configure Basic General System Settings and Time Settings on page 16 Ethernet MAC Address The MAC address of
11. 3 Click the Apply button Your settings are saved Enable the Syslog Server You can enable the syslog option if your LAN includes a syslog server If syslog is enabled the wireless access point sends its syslog files to the syslog server gt To enable a syslog server 1 Select Configuration gt System gt Advanced gt Syslog NETGEAR COJ WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp F eless ecurit ess Bridge Ensemble aptive Port Basic Syslog Advanced General Enable Syslog S g Syslog Server IP Address Ethernet LLDP Port Number 514 Bonjour e User Accounts Management and Monitoring 60 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Specify the settings as explained in the following table Setting Description S Enable Syslog Select the check box to enable the syslog option By default the syslog option is disabled Syslog Server IP Address Enter the IP address of the syslog server to which the wireless access point sends the syslog files Port Number Enter the port number that is configured on the syslog server The default port number is 514 2 Click the Apply button Your settings are saved Monitor the Wireless Access Point e View System Information e Monitor Wireless Stations e View the Activity Log e Traffic Statistics View System Information You can view a summary of the current wireless access point configuration settings
12. see Configure Advanced Wireless Settings on page 76 Test Basic Wireless Connectivity After you have configured the wireless access point test the computers on your LAN for wireless connectivity before you position and mount the wireless access point at its permanent position gt To test for wireless connectivity 1 Configure the wireless adapters of your computers so that they all use the same SSID and channel that you configured on the wireless access point 2 Verify that your computers acquired a wireless link to the wireless access point 3 Verify network connectivity by using a browser such as Internet Explorer 6 0 or later or Mozilla Firefox 1 5 or later to browse the Internet or check for file and printer access on your network Note If you experience trouble connecting to the wireless access point see Chapter 6 Troubleshooting We recommend that you complete the following tasks before you deploy the wireless access point in your network e Configure wireless security and other wireless features as described in Chapter 3 Wireless Configuration and Security e Configure any additional features that you might need as described in Chapter 4 Management and Monitoring and Chapter 5 Advanced Configuration After you complete the configuration of the wireless access point you can reconfigure the computer that you used for this process back to its original TCP IP settings Mount the Wireless Access Point The foll
13. IP header needs to be matched Apply From the Apply Classification menu select the traffic class that needs to be applied to Classification the packets that match the selection in the Match Classifications field Best Effort 0 Background 1 Spare 2 Excellent 3 Control Load 4 Video lt 100 ms Latency 5 Voice lt 10 ms Latency 6 Network Control 7 5 Optional Specify rate limiting for the classification as explained in the following table setting Description Bits Per Sec Enter a value between 0 and 300 000 000 bps to specify the maximum data rate up to which packets that match the classification are queued for transmission and sent immediately over the wireless interface This value applies only to traffic that matches the classification Note When the maximum rate is exceeded packets are retained in the queue and sent when the transmission falls again below the maximum rate Classification Rate Limiting Burst Rate Enter a value between 0 and 37 500 000 bytes to specify the maximum Bytes amount of data that can be transmitted in a burst for packets that match the classification This value applies only to traffic that matches the classification 6 Click the Add button to add the classification to the Classifications field 7 To add another classification to the QoS policy repeat Step 4 Step 5 and Step 6 8 Click the Apply button to save your settings The QoS policy is saved Advanced Configura
14. Profile Definition Profile Name Wireless Network Name SSID Broadcast Wireless Network Name SSID Band Steering to 5GHz Rssi Threshold 5GHz 100 to 10 Authentication Settings NETGEAR NETGEAR_11ng Yes J No Enable Disable 70 Network Authentication Open System El Data Encryption None v VLAN ID 4 Qos Policies Mode Apply Policy Incoming Outgoing Policy Details None v None 2 Bandwidth Limit bits per second o 0 Captive Portal Profile Name None v Wireless Configuration and Security 36 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 Specify the settings of the Profile Definition section as explained in the following table setting Description S Profile Name Enter a unique name of the wireless security profile that makes it easy to recognize the profile The default names are NETGEAR NETGEAR 1 NETGEAR 2 and so on through NETGEAR 7 You can enter a value of up to 32 alphanumeric characters Wireless Network Name The wireless network name SSID for the wireless security profile The default SSID names depend on the selected radio band e 802 11bg ng bgn The default names are NETGEAR_11ng NETGEAR_11ng 1 NETGEAR_11ng 2 and so on through NETGEAR_11ng 7 for the eighth profile 802 11a na The default names are NETGEAR_11ac NETGEAR_11ac 1 NETGEAR_11ac 2 and so on through NETGEAR_11ac 7 for the eighth profile Broadcast Wireless Select
15. The default values are Data 0 15 Data 1 15 Data 2 7 Data 3 3 cwMax Enter the maximum contention window cwMax value that specifies the upper limit in milliseconds for the doubling of the random back off value Decreasing this value increases the priority of the queue The value for cwMax needs to be higher than the value for cwMin Valid values are 0 1 3 7 15 31 63 127 255 511 and 1023 The default values are Data 0 63 Data 1 1023 Data 2 15 Data 3 7 cwMin Enter the minimum contention window cwMin value that specifies the upper limit in milliseconds of a range from which the initial random back off wait time is determined Decreasing this value increases the priority of the queue The value for cwMin needs to be lower than the value for cwMax Valid values are 0 1 3 7 15 31 63 127 255 511 and Advanced Configuration 80 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 setting Description Max Burst Enter the maximum burst value that specifies the maximum burst length in microseconds allowed for packet bursts on the wireless network A packet burst is a collection of multiple frames transmitted without header information Decreasing this value increases the priority of the queue Valid values for maximum burst length are all multiples of 32 between 0 and 8192 inclusive of 0 and 8192 The default values are Data 0 0 Data 1 0 Data 2 3008 Data 3 1504 Station EDCA parameters
16. a dynamic configuration aware group of APs in the same subnet of a network Each ensemble can include up to 16 members up to 10 APs of the same model Only one ensemble per wireless network is supported However a network subnet can include multiple ensembles Ensembles allow APs to share various configuration information such as VAP settings and QoS queue parameters Ensemble members share the configuration of the dominant AP An ensemble can be formed between two APs if the following conditions are met e The APs use the same radio mode e The APs are connected on the same bridged segment e The APs joining the ensemble have the same ensemble name e Ensemble mode is enabled on both APs Management and Monitoring 67 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure Ensemble Mode To configure Ensemble mode on the access point 1 Select Configuration gt Ensemble NETGEAR COJ WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin G Monitoing Maintenance Sump Ensemble General Management Ensemble Mode O Start Stop Secured Ensemble Ensemble Name default Advanced AP Name netgear80586f Priority 0 255 0 2 To enable Ensemble mode select the Start radio button 3 In the Ensemble Name field enter the ensemble name 4 Set the access point s priority in the ensemble The lowest numbered AP becomes the dominant AP 5 Click the Apply button to save
17. admin and 2 this device must accept any interference d d received including interference that may cause MAC password passwor undesired operation 272 12481 02 NETGEAR INC amp 24 Made in China tA 12V 2 5A NETGEAR AE ProSAFE Dual Band Wireless AC Access Point pens WAC720 AMAR MMRR AC HAR fe ORD l JE ARE 5G SSID O DIOE R XXX XXXXXX TJ T XXXXXXXXXX This device complies with par 18 of iha FEC Rules SERIAL Operation is a to ne e two conditions Frail IP http 192 168 0 100 1 this device may not cause harmful interference User Name admin erie incklty mioriree neg weyeccce MAC password password undesired operatio 7 A 12V 2 5A 272 12480 O2 134 Made in China lis NETGEAR INC CMIIT ID XXXXXXXXXX Figure 3 Product label Hardware Setup 10 Initial Setup This chapter covers the following topics What You Need Before You Begin Install and Configure the Wireless Access Point Test Basic Wireless Connectivity Mount the Wireless Access Point What You Need Before You Begin You must consider the following guidelines and requirements before you can set up your wireless access point System Requirements Before installing the access point make sure that your system includes the following A 10 100 1000 Mbps local area network device such as a hub or switch The Category 5 UTP straight through Ethernet cable with RJ 45 connector included in the package or one like it A
18. button is selected Read Only Community Name Enter the community string to allow the SNMP manager to read the wireless access point s Management Information Base MIB objects The default is public Read Write Community Name Enter the community string to allow the SNMP manager to read and write the wireless access point s MIB objects The default is private Trap Community Name Enter the community string to allow the SNMP manager to send traps The default is trap IP Address to Receive Traps Enter the IP address of the SNMP manager to receive traps sent from the wireless access point Trap Port Enter the number of the SNMP manager port to receive traps sent from the wireless access point The default is 162 3 Click the Apply button Management and Monitoring 50 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Your settings are saved Secure Shell and Telnet Management gt To configure remote console features gt 1 Select Maintenance gt Remote Management gt Remote Console NETGEAR CCOO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L varad i Up i Remote Console Secure Shell SSH Enable Disable Telnet Enable Disable 2 Enable or disable the remote console features Secure Shell SSH To enable this feature select the Enable radio button which is the default setting Select the Disable button to disable the feature Telne
19. four security profiles are NETGEAR WDS 1 NETGEAR WDS 2 NETGEAR WDS 3 and NETGEAR WDS 4 Remote MAC Address Enter the MAC address of the remote wireless access point the MAC address of AP2 or AP 3 on LAN Segment 1 in Figure 6 on page 92 Authentication Settings Network Authentication From the Network Authentication menu select Open System WPA PSK or and WPA2 PSK Your selection determines the options that the Data Encryption Data Encryption menu provides and whether the WPA Passphrase Network Key field displays WPA PSK TKIP Temporal Key Integrity Protocol is the standard encryption method used with WPA PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive WPA2 PSK AES Advanced Encryption Standard is the standard encryption method used with WPA2 PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive Note NETGEAR recommends WPA2 PSK authentication with AES encryption if you want to use the 11n rates and speed g Click Apply to save your security profile settings The Bridging page displays again h Repeat Step b through Step g for any other security profile that you want to edit For example first configure se
20. gt To change the QoS policy selection on the Edit Security Profile page 1 From the menu from which you want select another QoS policy select None 2 Click the Apply button The old policy is removed from the security profile 3 Select the new QoS policy from the same menu 4 Click the Apply button Your settings are saved Configure Legacy 802 1X To use legacy 802 1X security you must define RADIUS server settings For information about RADIUS servers see Configure RADIUS Server Settings on page 41 When you select Legacy 802 1X from the Network Authentication menu the Data Encryption menu is automatically set to None To use legacy 802 1X security you must define the RADIUS servers only Wireless Configuration and Security 39 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure WPA With RADIUS and WPA amp WPA2 With RADIUS WPA and WPA amp WPAZ2 security requires RADIUS based 802 1x authentication so you also must define RADIUS server settings For information about RADIUS servers see Configure RADIUS Server Settings on page 41 The selections that are available from the Data Encryption menu depend on the type of WPA authentication that you select from the Network Authentication menu and are shown in the following table Setting Descriptions S Advanced Encryption Standard AES is the standard encryption method used with WPA2 Note Although some wireless clients might support AES with WPA the W
21. network performance by limiting the number of packets transmitted across the network By default the Multicast Broadcast Rate Limiting option is disabled The default and maximum rate limit setting is 50 packets per second The default and maximum rate limit burst setting is 75 packets per second 3 Click Apply to save your settings Advanced Configuration 78 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure Advanced Quality of Service Settings For most networks the default Quality of Service QOS queue settings work well For information about how to configure basic QoS see Configure Basic Wireless Quality of Service on page 47 You can specify the settings on multiple queues for increased throughput and better performance of differentiated wireless traffic such as Voice over IP VoIP other types of audio video and streaming media as well as traditional IP data The advanced QoS options on the wireless access point are as follows e AP EDCA parameters Specify the access point AP Enhanced Distributed Channel Access EDCA settings for different types of data transmitted from the wireless access point to wireless clients e Station EDCA parameters Specify the station EDCA parameters for different types of data transmitted from the wireless clients to the wireless access point If WMM is disabled you cannot configure the Station EDCA parameters For information about how to enable WMM see Configu
22. of the web management interface provide access to all the configuration functions of the wireless access point and remain constant The menu items in the blue bar change according to the navigation tab that is selected The top right corner of all pages that allow you to make configuration changes show the Apply and Cancel buttons and on several pages the Edit button These buttons provide the following functions e Edit Allows you to edit the existing configuration e Cancel Cancels all configuration changes that you made on the page e Apply Saves and applies all configuration changes that you made on the page Configure Basic General System Settings and Time Settings Note After you successfully log in to the wireless access point the basic General system settings page displays Initial Setup 16 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 gt To configure basic system settings 1 Select Configuration gt System gt Basic gt General NETGEAR WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin A General Time Access Point Name netgear80586f Je Advanced Country Region US United States M 2 Configure the settings as explained in the following table setting Description Access Point Name_ This unique name is the wireless access point NetBIOS name The name is printed on the rear label of the wireless access point The default is netgearxxxxxx in whi
23. password After successful login the gt prompt appears preceded by the name of the wireless access point In this example the prompt is netgear334408 5 Enter the CLI commands that you want to use You can enter show configuration to display the available CLI commands The CLI commands are also listed in Appendix B Command Line Reference Note You can also access the wireless access point remotely over a Telnet or SSH session using an application such as PuTTY if such an encryption application is allowed by law in your country After you connect to the wireless access point enter the login name and password to access the CLI Upgrade the Wireless Access Point Software The software of the wireless access point is stored in flash memory and can be upgraded as NETGEAR releases new software You can download upgrade files from the NETGEAR website If the upgrade file is compressed zip file you first must extract the image rmt file before sending it to the wireless access point You can send the upgrade file using your browser Two methods are available to perform a software upgrade which are described in the following sections e Web Browser Upgrade Procedure e TFTP Server Upgrade Procedure Note The web browser that you use to upload new firmware into the wireless access point needs to support HT TP uploads Use a browser such as Microsoft Internet Explorer 6 0 or later or Mozilla 1 5 or later Management and Monitori
24. stations and to view details for a wireless station 1 Select Monitoring gt Wireless Stations NETGEAR CCO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Wireless Stations Available Wireless Stations 802 11 bg ng bgn PU MAC Address BSID SSD Chamel Rate Swie Type TrByes Rx Byles Mode Suns Available Wireless Stations 802 11 a a na ac CT AC Address BSID SSD Chamel Rae Ste Type TxByes RxByis Mode Status The Available Wireless Stations table shows the MAC address BSSID SSID channel rate state type AID mode and status for each device For information about these and more fields see the following table 2 To update the list click Refresh If the wireless access point is rebooted the wireless station data is lost until the wireless access point rediscovers the devices To force the wireless access point to look for associated devices click Refresh Management and Monitoring 64 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 To view details of a wireless station select the corresponding radio button and then click Details The Wireless Stations Details page displays The following table explains the fields of the Wireless Stations Details page setting Description S AID The associated identifier AID of the wireless station Status The wireless status of the wireless station Associated RSSI The received signal strength indicator RSSI of the wire
25. the Add button The user account is added 4 Click the Apply button Your settings are saved gt To change the name for a user account 1 On the User Accounts page in the lower part of the page select a user from the Existing Users menu 2 In the User Name field modify the name 3 Click the Modify button The user name is changed 4 Click the Apply button Your settings are saved gt To change the privilege for a user account 1 On the User Accounts page in the lower part of the page select a user from the Existing Users menu 2 From the Privilege menu select another privilege Management and Monitoring 59 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 Click the Reset Password button The password is reset to the default password which is password 4 Click the Apply button Your settings are saved gt Toreset the password for a user account 1 On the User Accounts page in the lower part of the page select a user from the Existing Users menu 2 Click Reset Password The password is reset to the default password which is password 3 Click Apply to save your settings Note If you want to modify a password delete the user account and then recreate the user account with the password of your choice gt To delete a user account 1 On the User Accounts page in the lower part of the page select a user from the Existing Users menu 2 Click the Delete button
26. the wireless access point s Ethernet port Wireless MAC Address The MAC address of the wireless access point s wireless card when operating at 2 4 for 2 4 GHz GHz Wireless MAC Address The MAC address of the wireless access point s wireless card when operating at 5 for 5 GHz GHZ Ethernet LLDP Enabled indicates that LLDP is enabled Disabled indicates that it is not Country Region The country or region for which the wireless access point is licensed for use For information about how to change the country or region see Configure Basic General System Settings and Time Settings on page 16 Note It might not be legal to operate this wireless access point in a country or region other than one of those identified in this field Firmware Version The version of the firmware that is currently installed Management and Monitoring 62 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Serial Number The serial number of the wireless access point The current time For information about how to change the time settings see Current Time Configure Basic General System Settings and Time Settings on page 16 AP Uptime The length of time since the access point became active Current IPv4 Settings For information about how to change any of these IP settings see Configure the IPv4 Settings on page 18 IP Address The IPv4 address of the wireless access point Subnet Mask The subnet mask for the address of the
27. time format 3 Click the Apply button Your settings are saved Configure Basic Wireless Quality of Service Wi Fi Multimedia WMM is a subset of the 802 11e standard WMM allows you to specify a range of priorities depending on the type of data Time dependent information such as video or audio has a higher priority than normal traffic For WMM to function correctly wireless clients must also support WMM By enabling WMM you allow Quality of Service QoS control for upstream traffic flowing from a wireless station to the wireless access point and for downstream traffic flowing from the wireless access point to a wireless station WMM defines the following four queues in decreasing order of priority e Voice The highest priority queue with minimum delay which makes it ideal for applications like VolP and streaming media e Video The second highest priority queue with low delay is given to this queue Video applications are routed to this queue e Best Effort The medium priority queue with medium delay is given to this queue Most standard IP applications use this queue Wireless Configuration and Security 47 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 e Background Low priority queue with high throughput Applications such as FTP that are not time sensitive but require high throughput can use this queue The WMM Powersave feature saves power for battery powered equipment by increasing the eff
28. turned on If it is plugged directly into the wall verify that it is not a switched outlet Make sure that you are using the correct NETGEAR power adapter that is supplied with your wireless access point The Active LED or the LAN LED Is Not Lit There is a hardware connection problem Check these items Make sure that the cable connectors are securely plugged in at the wireless access point and the network device hub PoE switches or router Make sure that the connected device is turned on Make sure that the correct cable is used Use a standard Category 5 Ethernet patch cable If the network device has Auto Uplink MDI MDIX ports you can use either a crossover cable or a normal patch cable The WLAN LED Does Not Light Up The wireless access point s antenna is not working Check these items If the WLAN LED remains off either disconnect the cables to the PoE switches and then reconnect them again or disconnect the adapter from its power source and then plug it in again Make sure that optional external antennas are tightly connected to the wireless access point Contact NETGEAR technical support if the WLAN LED remains off Troubleshooting 100 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 You Cannot Access the Internet or the LAN from a Wireless Capable Computer There is a configuration problem gt Check these items You might not have restarted the computer with the wireless adapte
29. 0 6A 03 80 58 6F yes 3 1 0 2 None Upload Firmware New Firmware Image Choose File No file chosen Upgrade Caution Uploading the new firmware may take several minutes Please do not refresh the page or navigate to another page while uploading the new firmware or the firmware upload will be aborted When the process is complete the access point will restart and resume normal operation N Click the Choose File button Select a firmware file to upload Select the members of the ensemble that you would like to upgrade Click the Upgrade button E a You can also use a TFTP server to upgrade the firmware by selecting Maintenance gt Ensemble Upgrade gt Firmware Upgrade TFTP gt To manage an ensemble s password 1 Select Configuration gt Ensemble gt Secured Ensemble NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OLH Montong Maiterance swot O l Ensemble Basic Secured Ensemble Ensemble General Management Ensemble Status Stopped Secure Mode Enabled Disabled Advanced Passphrase 8 63 characters Re authentication Timeout 300 86400 secs 300 Choose the Enabled radio button Enter a passphrase between 8 and 63 characters in the passphrase field Enter a timeout period between 300 and 86400 seconds Click the Apply button e ad Management and Monitoring 69 ProSAFE Dual Band Wireless AC Access Point WAC7
30. 2 inclusive of 0 and 8192 The default values are Data 0 0 Data 1 0 Data 2 3008 Data 3 1504 3 Click Apply to save your settings Configure Quality of Service Policies The wireless access point lets you configure and apply QoS policies to wireless clients In each QoS policy you can specify multiple classifications match clauses and apply traffic to eight priority queues based on the following information in the Layer 2 Layer 3 Layer 3 IP headers and Layer 4 e IP precedence Indicates the IP Type of Service ToS or precedence in the IP headers e IP DSCP Indicates the Differentiated Services Code Point DSCP marking in the IP header e IP protocol 119 Indicates the IP protocol field in the IP header with value 119 e 802 1P Indicates the 3 bit Class of Service CoS field in the class header e IP protocol Indicates the protocol field in the IP header e EtherType Indicates the EtherType field in Ethernet ll frame header Advanced Configuration 81 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Source MAC Indicates the source MAC address in Ethernet ll frame header Destination MAC Indicates the destination MAC address in Ethernet ll frame header Source IP Indicates the source IP address in the IP header Destination IP Indicates the destination IP address in the IP header Source port Indicates the source port number in the port header Destination port Indicates the destination port num
31. 20 WAC730 Monitor an Ensemble You can monitor the status of an ensemble from the ensemble dashboard You can also monitor the devices connected to members of the ensemble as well as monitor networks neighboring the ensemble gt To monitor the status of the Ensemble 1 Select Monitor gt Ensemble gt Access Point NETGEAR CCO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OL sS Wireless Neighborhood APName MAC Address IP Address Ensemble Priority Master AP Firmware version 2 4GHz Channel netgear80586f 50 6A 03 80 58 6F 192 168 0 100 0 no 3 1 0 2 1 36 0 days 0 hours 0 minutes Connected NOTE This table takes few minutes to get updated 2 Click the Refresh button gt To monitor the devices connected to the Ensemble 1 Select Monitor gt Ensemble gt Wireless Stations NETGEAR OS gt WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin Ensemble Wireless Stations Wireles tations Wireless Neighborhood AP Name Station MAC Station Idle Time Rate RSSI Tx Bytes Rx Bytes Error Rate NOTE Maximum of 20 clients per radio of each AP will be displayed To view all clients please access individual AP 2 Click the Refresh button The devices connected to the ensemble display listed by MAC address gt To monitor the networks neighboring the Ensemble 1 Select Monitor gt Ensemble gt Wireless Neighborhood NETGEAR i ee ll WAC720 ProSAFE
32. 240 Mbps 14 270 Mbps 15 300 Mbps 16 45 Mbps 17 90 Mbps 18 135 Mbps 19 180 Mbps 20 270 Mbps 21 360 Mbps 22 405 Mbps 23 450 Mbps and auto rate capable 802 11bgn MCS index Data rates for a 40 MHz channel width and a long guard interval 800 ms and data rates 0 13 5 Mbps 1 27 Mbps 2 40 5 Mbps 3 54 Mbps 4 81 Mbps 5 108 Mbps continued 6 121 5 Mbps 7 135 Mbps 8 27 Mbps 9 54 Mbps 10 81 Mbps 11 108 Mbps 12 162 Mbps 13 216 Mbps 14 243 Mbps 15 270 Mbps 16 40 5 Mbps 17 81 Mbps 18 121 5 Mbps 19 162 Mbps 20 243 Mbps 21 324 Mbps 22 364 5 Mbps 23 405 Mbps and auto rate capable 802 11bg ng bgn 2 412 2 462 GHz US operating frequencies 2 457 2 462 GHz Spain 2 410 2 484 GHz Japan 11b 2 410 2 472 GHz Japan 11ng 2 457 2 472 GHz France 2 412 2 472 GHz Europe ETSI 2 412 2 472 GHz China 802 11 bg ng bgn WPA PSK amp WPA2 PSK encryption AES TKIP 802 11a a na ac wireless specifications Supplemental Information 107 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Table 2 Technical specifications continued Feature Description U 802 11a data rates 6 9 12 18 24 36 48 54 Mbps and auto rate capable 802 11a a na ac data Data rates for a 20 MHz channel width and an automatic guard interval rates 0 7 2 Mbps 1 14 4 Mbps 2 21 7 Mbps 3 28 9 Mbps 4 43 3 Mbps 5 57 8 Mbps 6 65 Mbps 7 72 2 Mbps 8 14 4
33. 4 Mbps 9 28 88 Mbps 10 43 33 Mbps 11 57 77 Mbps 12 86 66 Mbps 13 115 56 Mbps 14 130 Mbps 15 144 44 Mbps 16 21 7 Mbps 17 43 3 Mbps 18 65 Mbps 19 86 7 Mbps 20 130 7 Mbps 21 173 3 Mbps 22 195 Mbps 23 216 7 Mbps and auto rate capable Data rates for a 20 MHz channel width and a long guard interval 800 ms 0 6 5 Mbps 1 13 Mbps 2 19 5 Mbps 3 26 Mbps 4 39 Mbps 5 52 Mbps 6 58 5 Mbps 7 65 Mbps 8 13 Mbps 9 26 Mbps 10 39 Mbps 11 52 Mbps 12 78 Mbps 13 104 Mbps 14 117 Mbps 15 130 Mbps 16 19 5 Mbps 17 39 Mbps 18 58 5 Mbps 19 78 Mbps 20 117 Mbps 21 156 Mbps 22 175 5 Mbps 23 195 Mbps and auto rate capable Data rates for a 40 MHz channel width and an automatic guard interval 0 15 Mbps 1 30 Mbps 2 45 Mbps 3 60 Mbps 4 90 Mbps 5 120 Mbps 6 135 Mbps 7 150 Mbps 8 30 Mbps 9 60 Mbps 10 90 Mbps 11 120 Mbps 12 180 Mbps 13 240 Mbps 14 270 Mbps 15 300 Mbps 16 45 Mbps 17 90 Mbps 18 135 Mbps 19 180 Mbps 20 270 Mbps 21 360 Mbps 22 405 Mbps 23 450 Mbps and auto rate capable Data rates for a 40 MHz channel width and a long guard interval 800 ms 0 13 5 Mbps 1 27 Mbps 2 40 5 Mbps 3 54 Mbps 4 81 Mbps 5 108 Mbps 6 121 5 Mbps 7 135 Mbps 8 27 Mbps 9 54 Mbps 10 81 Mbps 11 108 Mbps 12 162 Mbps 13 216 Mbps 14 243 Mbps 15 270 Mbps 16 40 5 Mbps 17 81 Mbps 18 121 5 Mbps 19
34. 5 0 Default Gateway Primary DNS Server Secondary DNS Server Network Integrity Check 2 Configure the IPv4 settings as explained in the following table setting Deseription DHCP Client By default the Dynamic Host Configuration Protocol DHCP client is enabled The wireless access point receives its IP address subnet mask and default gateway settings automatically from the DHCP server on your network when you connect the wireless access point to your LAN IP Address Enter the IP address of your wireless access point The default IP address is 192 168 0 100 To change the address enter an unused IP address from the address range used on your LAN or enable DHCP the server IP Subnet Mask Enter the network number portion of an IP address Unless you are implementing subnetting enter 255 255 0 0 as the subnet mask Default Gateway Enter the IP address of the ISP gateway to which the wireless access point connects Primary DNS Server Enter the IP address of the primary and secondary DNS servers A DNS server is a host on the Internet that translates Internet names such as www netgear com to numeric IP addresses Typically your ISP transfers the IP address of one or two DNS servers to your wireless access point during login If Secondary DNS Server the ISP does not transfer an address you must obtain it from the ISP and enter it manually in this field Network Integrity Check Select this check box to validate that the upstream li
35. AC720 and WAC730 wireless access points do not support WPA with AES TKIP AES The TKIP AES encryption method is supported both for WPA and WPA2 Broadcast packets use TKIP For unicast point to point transmissions WPA clients use TKIP and WPA2 clients use AES For the WPA amp WPA2 mixed mode TKIP AES is the only supported data encryption method Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK WPA PSK WPA PSK and WPA PSK amp WPA2 PSK authentication use a pre shared key PSK also called a passphrase or a network key and do not require authentication from a RADIUS server The selections that are available from the Data Encryption menu depend on the type of WPA PSK authentication that you select from the Network Authentication menu and are shown in the following table Setting Descriptions Data Encryption Advanced Encryption Standard AES is the standard encryption method used with WPA2 Note Although some wireless clients might support AES with WPA the WAC720 and WAC730 wireless access points do not support WPA with AES TKIP AES TKIP AES supports both WPA and WPA2 Broadcast packets use TKIP For unicast point to point transmissions WPA clients use TKIP and WPA2 clients use AES For the WPA amp WPA2 mixed mode TKIP AES is the only supported data encryption method Wireless Configuration and Security 40 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Setting Desc
36. AIFS Enter the Arbitration Inter Frame Spacing AIFS interval that specifies the wait time in milliseconds between data frames A higher AIFS value means a higher priority for a queue Valid values for AIFS are 0 through 8 The default values are Data 0 3 Data 1 7 Data 2 2 Data 3 2 cwMin Enter the minimum contention window cwMin value that specifies the upper limit in milliseconds of a range from which the initial random back off wait time is determined Decreasing this value increases the priority of the queue The value for cwMin needs to be lower than the value for cwMax Valid values are 0 1 3 7 15 31 63 127 255 511 and 1023 The default values are Data 0 15 Data 1 15 Data 2 7 Data 3 3 cwMax Enter the maximum contention window cwMax value that specifies the upper limit in milliseconds for the doubling of the random back off value Decreasing this value increases the priority of the queue The value for cwMax needs to be higher than the value for cwMin Valid values are O 1 3 7 15 31 63 127 255 511 and 1023 The default values are Data 0 1023 Data 1 1023 Data 2 15 Data 3 7 TXOP Limit Enter the transmission opportunity TXOP value that specifies the time interval in microseconds in which a client station can initiate transmissions on the wireless medium WM Decreasing this value increases the priority of the queue Valid values for TXOP Limit are all multiples of 32 between 0 and 819
37. Any four digit group of zeroes within an IPv6 address can be reduced to a single zero or altogether omitted The following errors invalidate an IPv6 address e More than eight groups of hexadecimal quartets e More than four hexadecimal characters in a quartet e More than two colons in a row Initial Setup 13 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Install and Configure the Wireless Access Point Install and configure your wireless access point in the order of the following sections Connect the Wireless Access Point to a Computer Log In to the Wireless Access Point Contigure Basic General System Settings and Time Settings re YS Configure the IPv4 Settings 5 Configure the Basic Wireless Settings Before installing the wireless access point make sure that your Ethernet network functions After you connect the wireless access point to the Ethernet network computers with 802 11b g a n ac wireless adapters are able to communicate with the Ethernet network For this to work correctly verify that you meet all the system requirements shown in Hardware Description on page 7 Connect the Wireless Access Point to a Computer Tip Before you place the wireless access point in an elevated position that is difficult to reach first set up and test the wireless access point to verify wireless network connectivity gt To set up the wireless access point 1 Unpack the box and verify the contents 2 Prepare a compu
38. D are on to verify that the Ethernet connection is okay If your computer uses a fixed static IP address ensure that it is using an IP address in the range of the wireless access point The wireless access point s default IP address is 192 168 0 100 and its subnet mask is 255 255 255 0 with DHCP disabled Make sure that your network configuration settings are correct If you are using the NetBIOS name of the wireless access point to connect ensure that your computer and the wireless access point are on the same network segment or that there is a WINS server on your network If your computer is set to obtain an IP address automatically DHCP client restart it Troubleshooting 101 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 e Make sure that your browser has Java JavaScript or ActiveX enabled If you are using Internet Explorer click Refresh to be sure that the Java applet is loaded e Try quitting the browser clearing the cache deleting the cookies and launching the browser again e Make sure that you are using the correct login information The factory default login name is admin and the password is password Make sure that Caps Lock is off when entering this information gt If the wireless access point does not save changes you have made in the web management interface check the following e When entering configuration settings be sure to click the Apply button before moving to another page or tab
39. D is first steady amber then goes off and then blinks green before turning steady green after about 45 seconds The Active LED is lit or blinks green when there is Ethernet traffic The LAN LED indicates the LAN speed green for 1000 Mbps amber for 100 Mbps and no light for 10 Mbps The WLAN LED is lit or blinks green when the wireless LAN WLAN is ready If any of these conditions does not occur see to the appropriate following section No LEDs Are Lit on the Wireless Access Point It takes a few seconds for the Power LED to light up Wait a minute and check the Power LED status on the wireless access point If the wireless access point has no power If you use one or more PoE switches to provide power to the wireless access point check these items Make sure that the Ethernet cables between the wireless access point and the PoE switches are correctly connected at both ends Make sure that the power cords of the PoE switches are plugged into working power outlets or power strips Make sure that the PoE switches are functioning normally Troubleshooting 99 gt ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 If you use a power cord to provide power to the wireless access point check these items Make sure that the power cord is connected to the wireless access point Make sure that the power adapter is connected to a functioning power outlet If it is in a power strip make sure that the power strip is
40. Dual Band Wireless AC Access Point Welcome admin amp Menting Maintenance Supp a Wireless Neighborhood Wireless Stations Neighbor APs In Ensemble Not in Ensemble Both In Ensemble 2 Select the kind of neighboring APs to display from the Neighbor APs menu You can select either APs in the ensemble APs not in the ensemble or both The APs display in the Wireless Neighborhood table Management and Monitoring 70 Advanced Configuration This chapter describes how to configure the advanced features of the wireless access point The chapter includes the following sections Configure IPv6 Settings Configure Spanning Tree Protocol 802 1Q VLAN and Link Layer Discovery Protoco Configure Advanced Wireless Settings Configure Advanced Quality of Service Settings Configure Quality of Service Policies Configure Wireless Bridging 71 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure IPv6 Settings The wireless access point supports IPv6 e You can manage the wireless access point from an IPv6 address e The wireless access point can function as an IPv6 DHCP client Configure the IPv6 Settings Note For information about how to configure the IPv4 settings see Configure the IPv4 Settings on page 18 AN WARNING If you enable the DHCP client the IP address of the wireless access point changes when you click the Apply button causing you to lose your connection to the wireless
41. LEDs of the wireless access point are described in the following figure and table Hardware Setup 7 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 12 3 4 Figure 1 Top panel Table 1 Top panel LEDs Description Amber then blinking A self test is running or software is being loaded green During startup the LED is first steady amber then goes off and then blinks green before turning steady green after about 45 seconds If after one minute the LED remains amber or continues to blink green it indicates a system fault Off The Wireless 802 11b g n 2 4 GHz LAN is not ready or no wireless activity is detected On or blinking green The Wireless 802 11b g n 2 4 GHz LAN is ready or wireless activity is detected Off The Wireless 802 11n a 5 GHz LAN is not ready or no wireless activity is detected On or blinking green The Wireless 802 11n a 5 GHz LAN is ready or wireless activity is detected Hardware Setup 8 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Rear Panel RESET 1 2 3 4 5 Figure 2 Read panel The rear panel components of the wireless access point from left to right are described in the following list 1 2 Cable security lock receptacle for an optional lock Console port for connecting to an optional console terminal The port provides an RJ 45 connector and supports the following settings 115200 K default bau
42. NETGEAR ProSAFE Dual Band Wireless AC Access Points WAC720 and WAC730 Reference Manual October 2015 202 11607 01 350 East Plumeria Drive San Jose CA 95134 USA ProSAFE Dual Band Wireless AC Access Points WAC720 and WAC730 Support Thank you for purchasing this NETGEAR product You can visit www netgear com support to register your product get help access the latest downloads and user manuals and join our community We recommend that you use only official NETGEAR support resources Conformity For the current EU Declaration of Conformity visit http kb netgear com app answers detail a_id 11621 Compliance For regulatory compliance information visit http www netgear com about regulatory See the regulatory compliance document before connecting the power supply Trademarks NETGEAR Inc NETGEAR and the NETGEAR Logo are trademarks of NETGEAR Inc Any non NETGEAR trademarks are used for reference purposes only Contents Chapter 1 Hardware Setup Unpack Your Access Point auc oteceese oesdecdccs tdacsteeerennsyeoaucatens 7 Hardware DESCription 0 ccc cc tne rerea 7 WO POMEL WEPENER EAEE T ETE E ade 7 Real PANG E TE AEE E EEEE TL EEEE E EE EE 9 Bottom Panel With Product Label 0ci cacbedaveieudescaeeeaverek es 10 Chapter 2 Initial Setup What You Need Before You Begin 0 0 eect cence eens 11 System Requirements 623302540544 ccndecs thisoneeteeebestotet dete s 11 Wireless Equip
43. NETGEAR 1 NETGEAR_11ac 1 Open System NETGEAR 2 NETGEAR_11ac 2 Open System NETGEAR 3 NETGEAR_11ac 3 Open System NETGEAR 4 NETGEAR_ NETGEAR 5 NETGEAR_11ac 5 Open System NETGEAR 6 NETGEAR_11ac 6 Open System 1 1 1 1 11ac 4 Open System 1 1 1 NETGEAR 7 NETGEAR_11ac 7 Open System 1 nN OD Om amp WN The following table explains the fields of the Profile Settings page Setting Description S U Profile Name The unique name of the wireless security profile that makes it easy to recognize the profile SSID The wireless network name SSID for the wireless security profile The configured wireless authentication method for the wireless security profile Wireless Configuration and Security 35 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 setting Description S VLAN The default VLAN ID that is associated with the wireless security profile WMF Enable The check box that lets you select the wireless security profile so that you can enable it by clicking the Apply button 2 To configure a wireless security profile select the corresponding radio button to the left of the wireless security profile The Edit Security Profile page contains three sections Profile Definition see Step 3 Authentication Settings see Step 4 QoS Policies see Step 5 NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Lai BETE Edit Security Profile Advanced Welcome admin B
44. PoE switch or a 12V 2 5A DC power source A web browser for configuration At least one computer with the TCP IP protocol installed 802 11bg ng bgn compliant or 802 11a a na ac compliant devices Wireless Equipment Placement and Range Guidelines The range of your wireless connection can vary significantly based on the location of the wireless access point The latency data throughput performance and power consumption of wireless adapters also vary depending on your configuration choices 11 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note Failure to follow these guidelines can result in significant performance degradation or inability to connect wirelessly to the wireless access point For complete performance specifications see Appendix A Supplemental Information Note Before you position and mount the wireless access point at its permanent position first configure the wireless access point and test the computers on your LAN for wireless connectivity as explained in this chapter For best results place your wireless access point according to the following general guidelines Near the center of the area in which the wireless devices will operate In an elevated location such as a high shelf where the wirelessly connected devices have line of sight access even if through walls Away from sources of interference such as computers microwaves ovens and 2 4 GHz cordless phones Away from large metal surfaces
45. Turn on the radio by selecting the Turn Radio On check box A pop up page displays Note Under normal conditions you want the radio to be turned on Turning off the radio disables access through the wireless access point which can be helpful for configuration network tuning or troubleshooting activities 4 Click OK to confirm the change of wireless mode The change does not take effect until you click the Apply button after you have completed the wireless configuration 5 Specify the remaining wireless settings as explained the following table setting Descriptions S Wireless Network Name Enter a 32 character maximum service set identifier SSID the characters are SSID case sensitive The default is NETGEAR_11ng The SSID assigned to a wireless device must match the wireless access point s SSID for the wireless device to communicate with the wireless access point If the SSIDs do not match you do not get a wireless connection to the wireless access point Broadcast Wireless Select the Yes radio button to enable the wireless access point to broadcast its Network Name SSID SSID allowing wireless stations with a null blank SSID to adopt the wireless access point s SSID Yes is the default setting To prevent the SSID from being broadcast select the No radio button Channel Frequency From the menu select the channel you want to use for your wireless LAN The wireless channels and frequencies depend on the country a
46. a classification see Step 4 through Step 6 in the procedure to configure a new QoS policy You can also change the name of the policy Click the Apply button to save your settings gt To delete a QoS policy 1 2 3 From the Create Policy menu select the policy that you want to delete Click the Delete Policy button Click the Apply button to save your settings Advanced Configuration 86 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure Captive Portal Captive portal allows you to set up a login page so that only users with a valid user name and password may access the internet through the access point You must first configure the captive portal and add users before enabling it on the access point gt To configure a captive portal 1 Select Configuration gt Captive Portal gt Web Customization NETGEAR SE WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp a OO OO iv a ee Web Customization Profile Settings User Configuration Captive Portal Web Locale Captive Portal Web Locale Parameters Upload Logo 2 Select Create from the Captive Portal Web Locale menu 3 Enter a name for the Web Locale in the Web Local Name field 4 Select an instance for the captive portal from the Captive Portal Instances menu You may edit the look of the captive portal login page using the following fields Fit Description S Logo Image Name This drop dow
47. a network traffic analyzer tool The captured packet flow can show if traffic is flowing correctly to its destinations or if packets are dropped There is a limit to the size of the packet flow that you can capture in a file gt To capture packets 1 Select Monitoring gt Packet Capture The Packet Capture page displays NETGEAR ees WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Packet Capture Ensemt Current Capture Status Not started Packet Capture Time 00 00 00 Packet Capture File Size 0 kB Figure 8 2 Click Start to start capturing wireless packets leaving or entering the wireless access point on the active operating channel Packets on the 2 4 GHz interface and 5 GHz interface are captured Normal functioning of the wireless access point is not affected during the packet capture process If any previously captured packets exist you are prompted to delete them and only then can you capture new packets 3 Click Stop to stop capturing packets 4 Click Save as to save the pacture pcap file on your computer or to a disk drive Troubleshooting 105 Supplemental Information This appendix provides factory default settings and technical specifications for the ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 The appendix includes the following sections e Technical Specifications e Factory Default Settings 106 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730
48. access point You then must use the new IP address to reconnect to the wireless access point Tip If you enable the DHCP client on the wireless access point you can discover the new IP address of the wireless access point by accessing the DHCP server on your LAN or by using a network IP address scanner application gt To configure the IPv6 settings 1 Select Configuration gt IP gt IPv6 Settings NETGEAR eres WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin IPv6 Settings DHCP Client Enable Disable IPv6 Address Prefix Length 0 Default Gateway Dynamic IPv6 Address Primary DNS Server Secondary DNS Server Network Integrity Check Advanced Configuration 72 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 2 Configure the IPv6 settings as explained in the following table setting Description DHCP Client By default the Dynamic Host Configuration Protocol DHCP client is disabled If you have a DHCPV6 server on your LAN and you select the Enable radio button the wireless access point receives its dynamic IPv6 address prefix length and default gateway settings automatically from the DHCPv6 server on your network when you connect the wireless access point to your LAN IPv6 Address Enter the IP address of your wireless access point The default IP address is 2001 21c cOff fe69 To change the address enter an unused IPv6 address from the address range used on you
49. ber in the port header For each classification in a QoS policy you can configure rate limiting by specifying the maximum bit rate and maximum burst rate Packets that exceed the maximum bit rate are retained in the traffic queue and are processed when transmission falls again below the maximum bit rate You can also configure the overall maximum bit rate and maximum burst rate for the entire wireless interface You can configure up to eight QoS policies To configure a new QoS policy 1 Select Configuration gt Wireless gt Advanced gt QoS Policies NETGEAR uE WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Configuration Monitoring Maintenance Spt eee Basic Advanced QoS Policies 802 11 bg ng bgn e Wireless Settings Create Policy NEW v QoS Settings Policy Name NEW Load Balancing Classifications Match Frame Fields IP Precedence v Match Classifications Routine 0 7 Apply Classification Best Effort 0 v Add Classification Rate Limiting Basic Rate 1 1000000 kBytes sec Burst Rate 1 204800000 bytes sec QoS Policies 802 11 a a na ac Create Policy NEW M Policy Name NEW Classifications From the Create Policy menu select NEW If you have not created any QoS policies NEW is the only selection possible In the Policy Name field enter a name for the new QoS policy Specify a classification for the QoS policy as explained in the following tab
50. ch XXXXXX represents the last 6 digits of the wireless access point MAC address You can replace the default name with a unique name up to 15 characters long The access point name can be retrieved through SNMP Country Region From the Country Region menu select the country where the wireless access point is installed Note It might not be legal to operate this wireless access point in a region other than one of those identified in this field 3 Click the Apply button Your settings are saved gt To configure time settings 1 Select Configuration gt System gt Basic gt Time NETGEAR SC Mee WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin E a OO Basic 5 Time General Time Zone USA Pacific Advanced Current Time Fri Dec 31 1999 12 14 09 PST NTP Client Enable Disable Use Custom NTP Server a Hostname IP Address time b netgear com Initial Setup 17 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 2 Configure the settings as explained in the following table setting Description S o Select the time zone to match your location This is a nonconfigurable field that displays the current date and time NTP Client Enable the Network Time Protocol NTP client to synchronize the time of the wireless access point with an NTP server By default the Enable radio button is selected Use Custom NTP Server Select this check box if you want to use a cu
51. curity profile NETGEAR WDS 1 with the MAC address of AP2 and then configure security profile NETGEAR WDS 2 with the MAC address of AP3 see Figure 6 on page 92 2 Activate the wireless access point AP1 on LAN Segment 1 in Figure 6 on page 92 as a point to multipoint bridge that is it is the master in the wireless network a On the Bridging page select the Enable Wireless Bridging check box Advanced Configuration 93 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 b Select the Wireless Point to Multi Point Bridge radio button c Select the Enable Wireless Client Association check box to enable wireless client association Note If you do not select the Enable Wireless Client Association check box the wireless access point does not function in point to multipoint bridge but in repeater mode d If the correct profile names and security options are displayed in the table select the check boxes in the Enable column for all security profiles that you want to enable e Click Apply on the Bridging page to activate your point to multipoint bridge settings 3 Configure AP2 on LAN Segment 2 see Figure 6 on page 92 in point to point bridge mode with the remote MAC address of AP 1 4 Configure AP3 on LAN Segment 3 see Figure 6 on page 92 in point to point bridge mode with the remote MAC address of AP 1 5 Verify the following for all wireless access points e Only AP1 on LAN Segment 1 is configured in point t
52. cy channel unless you notice interference problems or you place the wireless access point near another wireless access point If you do change the operating frequency observe the following guidelines e Wireless access points use a fixed channel You can select a channel that provides the least interference and best performance In the United States and Canada 11 channels are available e lf you use multiple wireless access points it is better if adjacent wireless access points use different channels to reduce interference The recommended channel spacing between adjacent wireless access points is five channels for example use Channels 1 and 6 or 6 and 11 e In infrastructure mode which is the default mode for the wireless access point wireless stations normally scan all channels looking for a wireless access point If more than one wireless access point can be used the one with the strongest signal is used This is possible only if the wireless access points use the same SSID Requirements for Entering IP Addresses IP addresses assigned to the access points must follow the following requirements for IPv4 and IPv6 addresses IPv4 The fourth octet of an IP address must be between 0 and 255 both inclusive This requirement applies to any IP address that you enter on the wireless access point s web management interface IPv6 IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons
53. d Wireless AC Access Point WAC720 WAC730 NETGEAR el WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin Fonte maieranee J sion Wireless Basic Advanced Wireless Settings AP EDCA parameters 1 3 wil v 15 Data 0 Voice QoS Settings 802 11 bg ng bgn QoS Policies l Load EEN Data 1 Video a 7 v 15 M am Data 2 Best Effort 3 15 63 j 0 Data 3 Background 7 15 v 1023 v fo Station EDCA ane Data 0 Voice 2 Va elif ejaz Data 1 Video 2 7 v 15 94 Data 2 Best Effort 3 15 1023 v o Data 3 Background 7 fas wv 1023 v fo QoS Settings 802 11 a a na ac AP EDCA parameters l O Queue AIFS cwltin owMax MaxBurst 3 v 7 v 15 Data 0 Voice 1 Data 1 Video 1 7 v 15 v 3 0 Data 2 Best Effort 3 paS H a 0 Data 3 Background 7 15 v 1023 v fo Data 0 Voice 2 Data 1 Video 2 7 v 15 v 94 Data 2 Best Effort 3 15 1023 0 Data 3 Background 7 15 v 1023 v 0 Station EDCA ake j 3 X 7 v a7 2 Specify the settings as explained in the following table Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter Frame Spacing AIFS interval that specifies the wait time in milliseconds between data frames A higher AIFS value means a higher priority for a queue Valid values for AIFS are 0 through 8 The default values are Data 0 3 Data 1 7 Data 2 1 Data 3 1 1023
54. d Wireless AC Access Point WAC720 WAC730 The following table explains the fields of the Statistics page Setting Description S O Wired Ethernet Packets The number of packets received and transmitted over the Ethernet connection since the wireless access point was restarted Bytes The number of bytes received and transmitted over the Ethernet connection since the wireless access point was restarted Wireless 802 11bgn and Wireless 802 11a na ac Note The section heading depends on the configured wireless mode Unicast Packets The number of unicast packets received and transmitted over the wireless connection since the wireless access point was restarted Broadcast Packets The number of broadcast packets received and transmitted over the wireless connection since the wireless access point was restarted Multicast Packets The number of multicast packets received and transmitted over the wireless connection since the wireless access point was restarted Total Packets The total number of packets received and transmitted over the wireless connection since the wireless access point was restarted Total Bytes The total number of bytes received and transmitted over the wireless connection since the wireless access point was restarted Client Association 802 11bgn Radio The number of associated clients connected to the radio in the configured 802 11a na ac Radio wireless modes Enable and Configure Ensemble Mode An AP ensemble is
55. d rate 8 data bits no N parity bit and one 1 stop bit Factory default Reset button Using a sharp object press and hold this button for about five seconds to reset the wireless access point to factory defaults settings All configuration settings are lost and the default password is restored For more information see Restore the Wireless Access Point to the Factory Default Settings on page 56 10 100 1000BASE T Gigabit Ethernet RJ 45 port with Auto Uplink Auto MDI X with IEEE 802 3af Power over Ethernet PoE support for connection to a switch or router Power socket for an optional 12 VDC 2 5A power adapter Note The WAC720 access point can support up to two optional 2 4GHz 5GHz dual band antennas The WAC730 access point can support up to three optional 2 4GHz 5GHz dual band antennas Hardware Setup 9 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Bottom Panel With Product Label The product label on the bottom of the wireless access point s enclosure displays factory default settings regulatory compliance and other information NETGEAR a Oooo ProSAFE Dual Band Wireless AC Access Point pens WAC730 Pine NMR AC EA CEOI FE E CC ID PY315300321 IC 4054A 15300321 SERIAL DEFAULT ACCESS This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions J 47I 5 IP http 192 168 0 100 1 this device may not cause harmful interference User Name
56. e Internet or the LAN from a Wireless Capable Computer on page 101 cannot access the wireless access point from a browser Go to You Cannot Configure the Wireless Access Point from a Browser on page 101 A time out occurs Go to When You Enter a URL or IP Address a Time Out Error Occurs on page 102 have problems with the LAN connection Go to Troubleshoot a TCP IP Network Using the Ping Utility on page 102 cannot remember the wireless access point s configuration password Go to Change the Administrator Password on page 58 want to clear the configuration and start over again Go to Restore the Wireless Access Point to the Factory Default Settings on page 56 The date or time is not correct Go to Problems with Date and Time on page 104 The wireless access point provides a packet capture tool that enables you to perform problem diagnoses For information about how to use this tool see Use the Packet Capture Tool on page 105 98 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Basic Functioning gt Verify the Correct Sequence of Events at Start Up No LEDs Are Lit on the Wireless Access Point The Active LED or the LAN LED Is Not Lit The WLAN LED Does Not Light Up Note For descriptions of the LEDs see Top Panel on page 7 Verify the Correct Sequence of Events at Start Up After you turn on power to the wireless access point check that the following sequence of events occurs The Power Test LE
57. e button and locate the image tar upgrade file 6 Click the Apply button to initiate the upgrade process Management and Monitoring 53 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 During the upgrade process the wireless access point automatically restarts The upgrade process typically takes several minutes When the Test LED turns off wait a few more seconds before doing anything with the wireless access point 7 Verify that the new software file was installed by selecting Monitoring gt System The System page displays see Figure on page 62 The firmware version is shown in the Access Point Information section of the page TFTP Server Upgrade Procedure To use this method you must have a TF TP server set up gt To use a TFTP server to upgrade the wireless access point firmware 1 Download the new software file from the NETGEAR website and save it to your hard disk 2 Place the software file in your TFTP server location p If available read the release notes before upgrading the software 4 Select Maintenance gt Upgrade gt Firmware Upgrade TFTP NETGEAR CCO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Firmware Upgrade TFTP Firmware Upgrade TFTP Backup Settings Firmware File Name Restore Settings TFTP Server IP 5 Specify the following information e Firmware File Name The name of the software file e TFTP Server IP The IP address of you
58. econdary Accounting Server i 1813 IPv6 RADIUS Server ee Primary Authentication Server 1812 oo Secondary Authentication Server 1812 Primary Accounting Server 2 1813 eevee Secondary Accounting Server 1813 Authentication Settings Reauthentication Time secs 3600 7 Update Global Key Every secs 1800 Wireless Configuration and Security 41 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 2 Specify the settings as explained in the following table Setting Descriptions RADIUS Server Settings Primary IPv4 Address or Enter the IP address of the primary RADIUS server for Authentication Server Pv6 Address authentication Port Enter the number of the UDP port on the wireless access point that is used to access the primary RADIUS server for authentication The default port number is 1812 Shared Secret Enter the shared key that is used between the wireless access point and the primary RADIUS server during authentication IPv4 Address or Enter the IP address of the secondary RADIUS server for IPv6 Address authentication The secondary RADIUS server is used when the primary RADIUS server is not available Port Enter the number of the UDP port on the wireless access point that is used to access the secondary RADIUS server for authentication The default port number is 1812 Secondary Authentication Server Shared Secret Enter the shared key that is used between the wireles
59. eless network names SSIDs NETGEAR_11ng NETGEAR_11ac Broadcast wireless network names SSIDs Enabled Network authentication Open system no authentication Data encryption None Wireless client security separation Disabled lt lt gt Z Supplemental Information 112 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Table 3 Default configuration settings continued eS oj RADIUS reauthentication time Supplemental Information 113
60. eral System Settings and Time Settings on page 16 Problems with Date and Time The Time Settings page that is accessible through the Configuration gt System gt Basic gt Time menu choices displays the current date and time of day The wireless access point uses the Network Time Protocol NTP to obtain the current time from a network time server on the Internet that you specify in the Time Settings page see Configure Basic General System Settings and Time Settings on page 16 Each entry on the Logs page is stamped with the date and time of day Problems with the date and time function can include the following Date and time shown is Fri Dec 31 00 00 00 1999 or a similar incorrect date and time Cause The wireless access point has not yet successfully reached the network time server Check that your Internet access settings are configured correctly If you have just completed configuring the wireless access point wait at least 5 minutes and check the date and time again The day is correct or one day ahead or behind and the hours are ahead or behind Cause You have selected an incorrect time zone for your area Specify the correct time zone in the basic General system settings page see Configure Basic General System Settings and Time Settings on page 16 Troubleshooting 104 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Use the Packet Capture Tool You can capture wireless packets to analyze traffic patterns with
61. ess Network Name Enter a 32 character maximum service set identifier SSID the characters are case sensitive The default is NETGEAR_11ac The SSID assigned to a wireless device needs to match the wireless access point s SSID for the wireless device to communicate with the wireless access point If the SSIDs do not match you do not get a wireless connection to the wireless access point Broadcast Wireless Select the Yes radio button to enable the wireless access point to broadcast its Network Name SSID SSID allowing wireless stations with a null blank SSID to adopt the wireless access point s SSID Yes is the default setting To prevent the SSID from being broadcast select the No radio button Channel Frequency From the menu select the channel you wish to use on your wireless LAN The wireless channels and frequencies depend on the country and wireless mode The default setting is Auto Note It should not be necessary to change the wireless channel unless you experience interference indicated by lost connections or slow data transfers If this happens you might want to experiment with different channels to see which is the best For more information see the guidelines following this table Note For more information about available channels and frequencies see Technical Specifications on page 107 11a na ac mode only MCS Index Data From the menu select a Modulation and Coding Scheme MCS index and trans
62. ess access point with the least interference or best performance Wireless Configuration and Security 34 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Configure and Enable Security Profiles To configure and enable a security profile you must enable the associated radio e For 802 11bg ng bgn modes the 2 4 GHz radio needs to be enabled see Configure 802 11bg ng bgn Wireless Settings on page 20 e For 802 11a a na ac modes the 5 GHz radio needs to be enabled see Configure 802 11a a na ac Wireless Settings on page 22 Both radios can function concurrently gt To configure and enable a security profile 1 Select Configuration gt Security gt Profile Settings The Profile Settings page for the 802 11bg ng bgn and 802 11a a na ac modes shows eight wireless security profiles for each mode If the 2 4 GHz radio is disabled the Enable column is masked out NETGEAR OMe WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L Profile Settings 802 11 bg ng bgn NETGEAR NETGEAR_11ng Open System 1 NETGEAR 1 NETGEAR_11ng 1 Open System 1 NETGEAR 2 NETGEAR_11ng 2 Open System 1 NETGEAR 3 NETGEAR_11ng 3 Open System 1 1 1 1 1 Advanced NETGEAR 4 NETGEAR_11ng 4 Open System NETGEAR 5 NETGEAR_11ng 5 Open System NETGEAR 6 NETGEAR_11ng 6 Open System NETGEAR 7 NETGEAR_11ng 7 Open System nO On amp WH Profile Settings 802 11 a a na ac NETGEAR NETGEAR_11ac Open System
63. fore you set up wireless security and additional wireless features that are described in this chapter connect the wireless access point get the Internet connection working and configure the 802 11bg ng bgn and 802 11a a na ac wireless settings as described in Chapter 2 Initial Setup The wireless access point functions with an Ethernet LAN connection Make sure that you verify wireless connectivity before you set up wireless security and additional wireless features A WARNING If you are configuring the wireless access point from a wireless computer and you change the wireless access point s SSID channel or wireless security settings you lose your wireless connection when you click the Apply button You must then change the wireless settings of your computer to match the wireless access point s new settings Wireless Data Security Options Indoors computers can connect over 802 11ac wireless networks at a maximum range of 300 feet Typically a wireless access point inside a building works best with devices within a 31 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 100 foot radius Such distances can allow for others outside your immediate area to access your network Unlike wired network data your wireless data transmissions can extend beyond your walls and can be received by anyone with a compatible adapter For this reason use the security features of your wireless equipment The wireless access point provide
64. g is 3 Antenna Select one of the following radio buttons to specify the antenna e Internal Enables the internal antenna This is the default setting e External Enables an optional external antenna or antennas 802 11d Select this check box to enable support for additional regulatory l l domains that are not in the current standard support includes the Note This setting does not apply addition of a country information element to beacons probe requests to the 802 11a a na ac modes and probe responses This check box is selected by default Wireless Client Security From the menu select one of the following options Separation e Enable Communication between wireless clients that are associated to different virtual access points VAPs is blocked e Disable Communication between wireless clients that are associated to different VAPs is allowed This is the default setting Max Wireless Clients Enter the maximum number of wireless clients that can simultaneously connect to the wireless access point at one time The default setting is 128 clients Frame Burst Frame burst support boosts the downstream throughput It is disabled by default Fixed Multicast Rate Select the multicast traffic transmission rate you want the AP to support The default value is Auto For 2 4GHz radio Auto value is 1 Mbps For 5GHz radio Auto value is 6 Mbps Broadcast Multicast Rate Enabling multicast and broadcast rate limiting may improve overall
65. gs The Edit Security Profile page displays for the selected security profile The following figure contains an example Advanced Configuration 95 g ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Specify the settings as explained in the following table Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember The default names for the four security profiles are NETGEAR WDS 1 NETGEAR WDS 2 NETGEAR WDS 3 and NETGEAR WDS 4 Remote MAC Address Enter the MAC address of the remote wireless access point the MAC address of AP1 or AP3 in Figure 7 on page 95 Authentication Settings Network Authentication From the Network Authentication menu select Open System WPA PSK or and WPA2 PSK Your selection determines the options that the Data Encryption Data Encryption menu provides and whether the WPA Passphrase Network Key field displays WPA PSK TKIP Temporal Key Integrity Protocol is the standard encryption method used with WPA PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive WPA2 PSK AES Advanced Encryption Standard is the standard encryption method used with WPA2 PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The pa
66. h the correct SSID can connect This nullifies the wireless network discovery feature of some products such as Windows XP but the data is still exposed For information about how to turn off broadcast of the SSID see Configure and Enable Security Profiles on page 35 e Legacy 802 1X Legacy 802 1X uses RADIUS based 802 1x authentication but no data encryption For information about how to configure Legacy 802 1X see Configure and Enable Security Profiles on page 35 and Configure Legacy 802 1X on page 39 e WPA and WPA PSK TKIP Wi Fi Protected Access WPA data encryption provides strong data security with Temporal Key Integrity Protocol TKIP encryption The very strong authentication along with dynamic per frame rekeying of WPA makes it virtually impossible to compromise Wireless Configuration and Security 32 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 WPA uses RADIUS based 802 1x authentication For more information see Configure and Enable Security Profiles on page 35 and Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 WPA PSK uses a pre shared key PSK for authentication For more information see Configure and Enable Security Profiles on page 35 and Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 WPA2 and WPA2 PSK AES Wi Fi Protected Access version 2 WPA2 data encryption provides strong data security with Advanced Encryption Standard AES encryption The very stro
67. hat Legacy 802 1X Configure the RADIUS server settings Encryption is not display onpage depend supported on your selection from See Configure Legacy 802 1X on page 39 the Network Authentication menu WPA with RADIUS Configure the RADIUS server settings and select TKIP or TKIP AES encryption See Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 WPA2 with Configure the RADIUS server settings and select AES or RADIUS TKIP AES encryption See Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 Note Select this setting only if all clients support WPA2 WPA amp WPA2 with Configure the RADIUS server setting TKIP AES RADIUS encryption is the default encryption See Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 Note This setting allows clients to connect through either WPA with TKIP or WPA2 with AES WPA PSK Enter a WPA passphrase and select TKIP or TKIP AES encryption See Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 WPA2 PSK Enter a WPA passphrase and select AES or TKIP AES encryption See Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 Note Select this setting only if all clients support WPA2 WPA PSK amp Enter a WPA passphrase TKIP AES encryption is the WPA2 PSK default encryption See Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 Note This setting allows clients to connect
68. hnical Specifications c66 2 xehawawsbaeewds b604 dose eenses serena kawees 107 Factory Default Settings o602ws cots dadacevedhitenenge edad adenewnbahss 110 Hardware Setup This chapter covers the following topics e Unpack Your Access Point e Hardware Description For more information about the topics covered in this manual visit the support website at http support netgear com Firmware updates with new features and bug fixes are made available from time to time at downloadcenter netgear com Some products can regularly check the site and download new firmware or you can check for and download new firmware manually If the features or behavior of your product does not match what is described in this guide you might need to update your firmware ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Unpack Your Access Point Your package contains the following items e ProSAFE Dual Band Wireless AC Access Point e Straight through Category 5 Ethernet cable e Installation guide e Ceiling mount kit Contact your reseller or customer support in your area if any parts are missing or damaged Visit the NETGEAR website at support netgear com general contact default aspx for the telephone number of customer support in your area Hardware Description The following sections describe the top and rear hardware functions of the wireless access point e Top Panel e Rear Panel e Bottom Panel With Product Label Top Panel The
69. iciency and flexibility of data transmission Note For information about how to configure advanced wireless QoS that is to configure specific Enhanced Distributed Channel Access EDCA settings see Configure Advanced Quality of Service Settings on page 79 To configure basic wireless QoS 1 Select Configuration gt Wireless gt Basic gt QoS Settings NETGEAR CCO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin QoS Settings e Wireless Settings E e Wireless Scheduling Mode Enable Disable Advanced QoS Settings 802 11 bg ng bgn Enable Wi Fi Multimedia WMM Enable Disable WMM Powersave Enable Disable QoS Settings 802 11 a a na ac Enable Wi Fi Multimedia WWMM Enable Disable WMM Powersave Enable Disable 2 Enable or disable the WMM features e Enable Wi Fi Multimedia WMM To enable this feature select the Enable radio button which is the default setting Select the Disable radio button to disable the feature e WMM Powersave To enable this feature select the Enable radio button which is the default setting Select the Disable radio button to disable the feature 3 Click the Apply button Your settings are saved Wireless Configuration and Security 48 Management and Monitoring This chapter describes how to use the management and monitoring features of the wireless access point The chapter includes the following sections Enable Rem
70. ile requires a unique name and needs to include the MAC address of the remote wireless access point You can configure up to four such security profiles NETGEAR WDS 1 NETGEAR WDS 2 and so on The following figure shows an example in which AP1 AP2 and AP3 repeat the wireless Signal in point to multipoint bridge mode AP2 requires a security profile for AP1 and another one for AP3 Internet AP1 F AP2 Multipoint bridge mode repeating only Multipoint bridge mode repeating only E AP3 Router Multipoint 192 168 0 1 i m m LAN PCs Segment 1 Hub or switch LAN JCJ Segment 3 rcs Figure 7 gt To configure the wireless access point to repeat the wireless signal 1 Configure the security profiles on the wireless access point AP2 in the previous figure a b Select Configuration gt Wireless Bridge The Bridging page displays see the following figure Optional To display the Bridging page for the 802 11a na modes click the 802 11a na tab Select the Enable Wireless Bridging check box The Local MAC Address field is a nonconfigurable field that shows the MAC address of the wireless access point Select the Wireless Point to Multi Point Bridge radio button The page adjusts The profile table shows four security profiles Choose a security profile to edit by selecting the corresponding radio button to the left of the profile Click Edit to configure the selected security profile settin
71. ing to the management VLAN are not given any 802 1Q header when they are sent over the trunk If a port is in a single VLAN it can be untagged However if the port is a member of multiple VLANs it needs to be tagged gt To configure STP and VLANs 1 Select Configuring gt System gt Advanced gt General NETGEAR Are WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp eee IF ireless Secu less Bridge Ensemble aptive Porta Syslog Ethernet LLDP Bonjour Spanning Tree Protocol Enable Disable 802 10 VLAN User Accounts iZi Untagged VLAN 1 Management VLAN 1 2 Specify the settings as explained in the following table setting Deseription S Spanning Tree Protocol Spanning Tree Protocol Select the Enable radio button to enable STP to prevent path redundancy By default the Disable radio button is selected Advanced Configuration 74 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 setting Description S 802 1Q VLAN Untagged VLAN Select the Untagged VLAN check box to configure one VLAN as an untagged VLAN By default the Untagged VLAN check box is selected Specify a VLAN ID The default VLAN ID is 1 Management VLAN Specify an ID for the VLAN from which the wireless access point can be managed The default VLAN ID is 1 Note If you configure the management VLAN ID as 0 zero the wireless access point can be managed over any VLAN and fra
72. interval is 1800 seconds 30 minutes Clear the check box to prevent the global key update Wireless Configuration and Security 42 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 Click the Apply button Your settings are saved Wireless Configuration and Security 43 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Restrict Wireless Access by MAC Address For increased security you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on their MAC addresses You can restrict access to only trusted computers so that unknown computers cannot connect wirelessly to the wireless access point MAC address filtering adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed Note For wireless adapters you can usually find the MAC address printed on the wireless adapter gt Torestrict access based on MAC addresses 1 Select Configuration gt Security gt Advanced gt MAC Authentication NETGEAR Cq WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin Configuration Malton E o C CSCSCSCi i s Profile Settings Advanced Trusted MAC List e Rogue AP Import MAC Address List from a file Replace Merge MAC Authentication Choose File No file chosen Dewninnd Sample Trusted Wireless Stations RADIUS Server Settings MAC Authenticati
73. ion gt Security gt Advanced gt Rogue AP Wireless Configuration and Security 45 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OIL a Profile Settings Advanced Rogue AP 802 11 bg ng bgn Turn Rogue AP Detection On e MAC Authentication Rogue AP Detection Policy Mild e RADIUS Server Settings Import AP List from a file Replace Merge Choose File No file chosen Known AP List Unknown AP List SSID Channet RIE MAC Address SSID Chanel Rogue AP 802 11 a a na ac Turn Rogue AP Detection On Rogue AP Detection Policy Mild Import AP List from a file Replace Merge Choose File No file chosen Known AP List Unknown AP List SSID Channel RAA MACAddress SSID Chanel 2 Select the Turn Rogue AP Detection On check box 3 Select a detection policy from the Rogue AP Detection Policy menu e Mild The AP scans for unknown APs every 180 seconds e Moderate The AP scans for unknown APs every 60 seconds e Aggressive The AP scans for unknown APs every 10 seconds 4 To import a list of known APs click the Choose File button The file you import must be a plain text file with a t xt or cfg extension Entries in the file are MAC addresses in hexadecimal format with each octet separated by colons for example 00 11 22 33 44 55 Separate entries with a single space For the AP to accept the file it must contain on
74. ireless Access Point 0 cece eee cece eee eee ees 61 View System Information 6 606ec lt s lt dedadsasee de bedeedatesinadas 61 Monitor Wireless Stations lt 144 24 006se nerbeteonesasaus tee hecaunucas 64 View the Activity LOG ccc cece een een n nee n ee eees 65 Wal ie Statstles f cies Sed eeegeteenansneatseaandeekudewtevcaseouses 66 Enable and Configure Ensemble Mode 0 00 ccc cece eee een ees 67 Configure Ensemble Mode 0 ccc cece nent eens 68 Manage an Ensemble 0 ccc ce eee een n eee n eens 68 Monitor an Ensemble 2c cancudatae ered de deena deus eeeeneyaneonen is 70 Chapter 5 Advanced Configuration Configure IPy6 Settings ncsvuuscaccbabsdndadotuareemeenstatankasaades 72 Configure the IPv6 Settings 144 54 21acccccesudvecaasacatcoeduwaade de 72 Configure Spanning Tree Protocol 802 1Q VLAN and Link Layer Discovery ProtoCO 4 5 40bdcecacbebseuebereaiunege adn eas 73 Configure STP and VLANS 0 cece ce cece eect nent n tenes 73 Configure Ethernet LLDP s4 0dvcc is eteosieeederceeesasadshtadeedas 75 On Ure BONJOU 4c on024n 050 Fee dened E etdd ne adore 76 Configure Advanced Wireless Settings 0 cece cece ence teens 76 Configure Advanced Quality of Service SettingS 0 00 e eee eee 79 Configure Quality of Service PolicieS 1 0 cece ee eens 81 Configure Captive Portal 0 0 cece ccc cece cee n eee eens 87 Configure Wireless Bridging
75. is detected LAN LED The LAN LED indicates the LAN speed for LAN port 1 green for 1000 Mbps amber for 100 Mbps and no light for 10 Mbps If the LAN LED is not lit make sure that the Ethernet cable is securely attached at both ends WLAN LED The 2 4 GHz WLAN LED is lit or blinks green when the wireless LAN WLAN is ready WLAN LED The 5 GHz WLAN LED is lit or blinks green when the wireless LAN WLAN is ready Log In to the Wireless Access Point The default IP address of your wireless access point is 192 168 0 100 By default the DHCP client on the wireless access point is enabled If you have a DHCP server on the network but want to access the access point using the default IP address you must remove the DHCP server from the network gt To log in to the wireless access point 1 Open a web browser such as Microsoft Internet Explorer 11 or later 2 Connect to the wireless access point by entering its default address of 192 168 0 100 into your browser use http and not https Initial Setup 15 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 WAC720 ProSAFE Dual Band Wireless AC Access Point Login Usemame Password 3 Enter the default user name of admin and the default password of password 4 Click the Login button The web browser displays the basic General system settings page under the Configuration tab of the main menu Web Management Interface The navigation tabs across the top
76. le Advanced Configuration 82 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note Depending on your selection from the Match Frame Fields menu Match Classifications appears either as a menu from which you must make a selection or a field in which you must enter information setting Description Match Frame IP DCSP From the Match Classifications menu select the DSCP traffic class Fields and Match against which the information in the IP header needs to be matched Classifications e Routine 0 Priority 1 Immediate 2 Flash 3 Flash Override 4 Critic CCP 5 Inter Control 6 Network Control 7 against which the information in the IP header needs to be matched e Best Effort Assured Forwarding Class 1 Low Assured Forwarding Class 1 Medium Assured Forwarding Class 1 High Assured Forwarding Class 2 Low Assured Forwarding Class 2 Medium Assured Forwarding Class 2 High Assured Forwarding Class 3 Low Assured Forwarding Class 3 Medium Assured Forwarding Class 3 High Assured Forwarding Class 4 Low Assured Forwarding Class 4 Medium Assured Forwarding Class 4 High Class Selector 1 Class Selector 2 Class Selector 3 Class Selector 4 Class Selector 5 Class Selector 6 Class Selector 7 Expedited Forwarding IP Protocol119 Traffic is matched against value 119 in the IP protocol field in the IP header Advanced Configuration 83 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730
77. less station Idle Time The time since the last frame was received from the wireless station Tx Sequence The sequence number of the last frame that was transmitted to the wireless station Rx Sequence The sequence number of the last frame that was received from the wireless station Capability The summary of the capability of the wireless station that was detected during association Cipher The cipher that the wireless station is using and that defines the type of encryption SNR The signal to noise ratio SNR that indicates how much the signal of the wireless station has been corrupted by noise Trans byes P Address Channel Width View the Activity Log You can view the wireless access point s activity logs and save the logs Management and Monitoring 65 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 gt To display the activity log and save it 1 Select Monitoring gt Logs NETGEAR OMe gt WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp i Logs Dec 31 1999 16 39 Sal alert clusterd 18196 Verifiying Cluster Matching Behaviour between 192 168 0 100 a amp 192 168 0 100 AP Dec 31 1999 16 39 29 alert clusterd 18196 Verifiying Cluster Matching Behaviour between 192 168 0 100 amp 192 168 0 100 APs Dec 31 1999 16 39 19 alert clusterd 18196 Verifying Cluster Matching Behaviour between 192 168 0 100 amp 192 168 0 100 APs
78. ly MAC addresses 5 Click the Apply button Your settings are saved Schedule the Wireless Radios to Be Turned Off Scheduling the wireless radios to be turned off is a green feature that allows you to turn off the wireless radios during scheduled vacations office shutdowns on evenings or on weekends gt To schedule the radios to be turned on and off 1 Select Configuration gt Wireless gt Basic gt Wireless Scheduling Wireless Configuration and Security 46 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 NETGEAR 1 WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Configuration Basic rs Wireless Scheduling e Wireless Settings Wireless Scheduling Wireless Scheduling Enable Disable e QoS Settings Radio Off Schedule MEGT fe F Advanced Radio On Time 24 hour 7 00 Radio Off Time 24 hour 18 130 2 Specify the settings as explained in the following table setting beseription S Wireless Scheduling Select the Enable radio button to enable the timer By default the Disable radio button is selected Radio Off Schedule Select check boxes to specify the days when you want to schedule the radios to be turned off By default Saturday and Sunday are selected Radio On Time Enter the time that you want the radios to be turned back on Use 24 hour time format Radio Off Time Enter the time that you want the radios to be turned off Use 24 hour
79. ment Placement and Range Guidelines 11 Ethernet Cabling Requirements 0 cece cece nes 12 LAN Configuration Requirements 0 0 0 ccc cece cece een eens 12 Hardware Requirements for Computers on Your LAN 005 13 Operating Frequency Guidelines 0 cc cc cece n ees 13 Requirements for Entering IP Addresses 0 cece cee eens 13 Install and Configure the Wireless Access Point 00 0 eee e eens 14 Connect the Wireless Access Point to a Computer 005 14 Log In to the Wireless Access Point cece cece cee eee eens 15 Configure Basic General System Settings and Time Settings 16 Configure the IPv4 Settings 2200 02 cneneedceeaudtatedvendsswaasaws 18 Configure the Basic Wireless SettingS 0 0 0 cece cece eee ees 19 Test Basic Wireless Connectivity 0 cc cece cece ene eee eens 25 Mount the Wireless Access Point 0 ccc cece cece cette ences 25 Ceiling INStallANON a6 lt ciocecadodetodacesdsevaceoneededwhsnsetasde as 26 Wal petala On oGack oiteoteesocueehe te cet attae tones tcanedeaus ue 28 Chapter 3 Wireless Configuration and Security Wireless Data Security Options 0 0c ccc eee een eens 31 e P OE asarrea aaa a a aar GN 33 Configure and Enable Security Profiles 0 0 ccc cece eens 35 Configure RADIUS Server SettingS 220 s ican dient ceasavewevewadsbhdwdade 41 Restric
80. mes that belong to the management VLAN are not tagged with an 802 1Q header when sent over the trunk A WARNING Selecting the Untagged VLAN check box or changing the untagged VLAN value causes loss of IP connectivity if the hubs and switches on your LAN have not yet been configured with the corresponding VLAN 3 Click Apply to save your settings Configure Ethernet LLDP Link Layer Discovery Protocol LLDP IEEE 802 1ab is a management tool that delivers link layer messages to adjacent network devices For example LLDP messages enable networking devices such as switches and management tools to discover the wireless access point in the network and might indicate whether the wireless access point receives power through a PoE connection LLDP is inter vendor compatible By default LLDP is enabled on the wireless access point gt To turn off LLDP 1 Select Configuring gt System gt Advanced gt Ethernet LLDP NETGEAR ees WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OIL Basic Advanced Ethernet LLDP General Ethernet LLDP Enable Disable Syslog Ethemet LLDP Bonjour e User Accounts 2 Select the Disable radio button By default the Enable radio button is selected Advanced Configuration 75 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 Click Apply to save your settings Configure Bonjour Bonjour allows computers on the network to di
81. mit data rate for the wireless network The default setting is Best For a list of all options that you can select from in 11a na ac mode see Factory Default Settings on page 110 Channel Width From the menu select a channel width The options are 20 MHz 40 MHz and 80 MHz The default is 80 MHz Guard Interval From the menu select the guard interval to protect transmissions from interference The default is Auto or you can select Long 800 ns Some legacy devices can operate only with a long guard interval Note For most networks the default settings work fine 11a mode only Data Rate From the menu select the transmit data rate of the wireless network The default setting is Best For a list of all options that you can select from in 11a mode see Factory Default Settings on page 110 Output Power From the menu select the transmission power of the wireless access point Full Half Quarter Eighth Minimum The default is Full Note Increasing the power improves performance but if two or more wireless access points are operating in the same area and on the same channel interference can occur Note Make sure that you comply with the regulatory requirements for total radio frequency RF output power in your country 6 Click Apply button Your settings are saved Initial Setup 24 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note For information about how to configure advanced wireless settings
82. mode see Factory Default Settings on page 110 Output Power From the menu select the transmission power of the wireless access point Full Half Quarter Eighth Minimum The default is Full Note Increasing the power improves performance but if two or more wireless access points are operating in the same area and on the same channel interference can occur Note Make sure that you comply with the regulatory requirements for total radio frequency RF output power in your country 6 Click Apply button Your settings are saved Note For information about how to configure advanced wireless settings see Configure Advanced Wireless Settings on page 76 Configure 802 11a a na ac Wireless Settings gt To configure the 802 11a a na ac wireless settings 1 Select Configuration gt Wireless gt Basic gt Wireless Settings Initial Setup 22 NETGEAR Basic e Wireless Scheduling QoS Settings ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 ys WAC720 ProSAFE Dual Band Wireless AC Access Point Wireless Settings 802 11 bg ng bgn Welcome admin Bb a amble gt 4 Wireless Securit Wireless Mode Turn Radio On 2 4 GHz Band 11bg 1ing 11bgn CA Advanced Wireless Network Name SSID NETGEAR_11ng Broadcast Wireless Network Name SSID Yes No Channel Frequency Auto y MCS Index Data Rate Best Channel Width 20 MHz v Guard Interval Auto v O
83. n in locations where multiple wireless access points are active by preventing path redundancy We recommend that you enable STP if you have more than one active wireless access point at your location Advanced Configuration 73 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 The 802 1Q VLAN protocol on the wireless access point logically separates traffic on the same physical network e Untagged VLAN When the wireless access point sends frames that are associated with the untagged VLAN from its Ethernet interface those frames are untagged When the wireless access point receives untagged frames over its Ethernet interface those frames are assigned to the untagged VLAN Note Select the Untagged VLAN check box only if the hubs and switches on your LAN support the 802 1Q VLAN protocol Likewise change the untagged VLAN value only if the hubs and switches on your LAN support the 802 1Q VLAN protocol e Tagged VLAN When you clear the Untagged VLAN check box the wireless access point tags all frames that are sent from its Ethernet interface Only incoming frames that are tagged with known VLAN IDs are accepted e Management VLAN The management VLAN can be active only when the wireless access point functions as a point to point or point to multipoint bridge see Configure Wireless Bridging on page 89 The management VLAN is used for managing traffic Telnet SNMP and HTTP to and from the wireless access point Frames belong
84. n menu displays the names of image files that have been uploaded to the AP for use with a captive portal Image must be no larger than 5 Kb in size You can upload logo images on the Upload Logo page Browser Title The browser title appears in the title bar of the browser Browser Content This is the text that will appear on the body of the page You can enter instructions for logging into the portal here Acceptance Use Policy Text entered here will display in a user agreement Welcome Title This is the title of the welcome page that displays after the user has successfully logged in Welcome Content This is the content of the welcome page that displays after the user has successfully logged in 5 Click the Apply button to save your changes Advanced Configuration 87 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 gt Add users to a captive portal 1 10 oO SS amp Y BN Select Configuration gt Captive Portal gt User Configuration NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OILE Haiii User Configuration Profile Settings Captive Portal User Name Web Customization Upload Logo User List Enter the name of the user in the Captive Portal User Name field Click the Apply button to create the user Select the user from the user list Click the Edit button Enter the user s password in the User Password field Enter an away time between zer
85. nd Wireless AC Access Point Welcome admin amp Upgrad Ensemble Upgrade C A Reboot AF Reboot AP Restore Defaults Reboot Yes No 2 Select the Yes radio button By default the No radio button is selected 3 Click the Apply button to reboot the wireless access point Management and Monitoring 57 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 The reboot process typically takes about one minute When the Test LED turns off wait a few more seconds before doing anything with the wireless access point Change the Administrator Password The default password is password We recommend that you change this password to a more secure password You cannot change the administrator login name admin The ideal password contains no dictionary words from any language and is a mixture of letters both uppercase and lowercase numbers and symbols Your password can be up to 30 characters gt To change the administrator password 1 Select Maintenance gt Password gt Change Password NETGEAR COJ WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp i race Ense e Upnarade Change Password Current Password New Password Repeat New Password Restore Default Password Yes No 2 Take one of the following actions e Enter a new password twice once in the New Password field and again in the Repeat New Password field e Next to Restore Default Password select the Yes
86. nd wireless mode The default setting is Auto Note It is not be necessary to change the wireless channel unless you experience interference indicated by lost connections or slow data transfers If this happens you might want to experiment with different channels to see which is the best For more information see Operating Frequency Guidelines on page 13 Note For more information about available channels and frequencies see Technical Specifications on page 107 11ng and 11bgn modes MCS Index Data From the menu select a Modulation and Coding Scheme only MCS index and transmit data rate for the wireless network The default setting is Best For a list of all options that you can select from in 11ng and 11bgn modes see Factory Default Settings on page 110 settings work fine Channel Width From the menu select a channel width The options are 20 MHz and 40 MHz The default is 40 MHz Note For most networks the default Guard Interval From the menu select the guard interval to protect transmissions from interference The default is Auto or you can select Long 800 ns Some legacy devices can operate only with a long guard interval Initial Setup 21 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Setting Descriptions 11bg modes only Data Rate From the menu select the transmit data rate of the wireless network The default setting is Best For a list of all options that you can select from in 11bg
87. ng 52 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note You cannot perform the software upgrade from a computer that is connected to the wireless access point over a wireless link You must use a computer that is connected to the wireless access point over an Ethernet cable A WARNING When uploading software to the wireless access point do not interrupt the web browser by closing the window clicking a link or loading a new page If the browser is interrupted the upload might fail corrupt the software and render the wireless access point inoperable IMPORTANT In some cases such as a major upgrade you might need to erase the configuration and manually reconfigure your wireless access point after upgrading it See the release notes included with the software to find out if you must reconfigure the wireless access point Web Browser Upgrade Procedure To use a web browser to upgrade the wireless access point firmware 1 Download the new software file from the NETGEAR website and save it to your hard disk 2 f necessary unzip the new software file 3 If available read the release notes before upgrading the software 4 Select Maintenance gt Upgrade gt Firmware Upgrade NETGEAR Oe WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp Firmware Upgrade TFTP Backup Settings Select file Choose File No file chosen Restore Settings 5 Click the Brows
88. ng authentication along with dynamic per frame rekeying of WPA2 makes it virtually impossible to compromise WPA2 uses RADIUS based 802 1x authentication For more information see Configure and Enable Security Profiles on page 35 and Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 WPA2 PSK uses a pre shared key PSK for authentication For more information see Configure and Enable Security Profiles on page 35 and Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 WPA amp WPA2 and WPA PSK amp WPA2 PSK mixed modes These modes support data encryption either with both WPA and WPA2 clients or with both WPA PSK and WPA2 PSK clients and provide the most reliable security WPA amp WPA2 uses RADIUS based 802 1x authentication For more information see Configure and Enable Security Profiles on page 35 and Configure WPA With RADIUS and WPA amp WPA2 With RADIUS on page 40 WPA PSK amp WPA2 PSK uses a pre shared key PSK for authentication for more information see Configure and Enable Security Profiles on page 35 and Configure WPA PSK WPA2 PSK and WPA PSK amp WPA2 PSK on page 40 Security Profiles Security profiles let you configure unique security settings for each SSID on each radio of the wireless access point For each radio the wireless access point supports up to eight security profiles BSSIDs that you can configure on the individual Edit Wireless Network pages that are accessible from
89. ng bgn Wireless Scheduling Wireless Mode 2 4GHz Band 11bg 11ng 11bgn QoS Settings Advanced Turn Radio On Wireless Network Name SSID Broadcast Wireless Network Name SSID Channel Frequency MCS Index Data Rate Channel Width Guard Interval Output Power Wireless Settings 802 11 a a na ac 4 NETGEAR_11ng Yes V No Auto Best 20 MHz Auto Full lt lt lt lt Wireless Mode Turn Radio On Wireless Network Name SSID Broadcast Wireless Network Name SSID Channel Frequency MCS Index Data Rate Channel Width Guard Interval Output Power Wireless Settings AP 5 GHz Band 11a w NETGEAR_11ac 9 Yes No Auto Best 80 MHz Auto Full 11a na ac Wireless Scheduling Status Disabled 2 Select the wireless mode in the 2 4 GHz 11bg 802 11b compliant devices and 802 11g compliant devices can connect to the access point 11ng 802 11n compliant devices and 802 11g compliant devices can connect to the access point 11bgn This is the default setting 802 11b compliant devices 802 11n compliant devices and 802 11g compliant devices can connect to the access point If you keep the default setting go to Step 5 Initial Setup 20 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 When you change the wireless mode the Turn Radio On check box is automatically cleared and all fields buttons and menus onpage are masked out 3
90. nk is active before allowing wireless associations Ensure that the default gateway is configured 3 Click Apply button Your settings are saved Configure the Basic Wireless Settings For proper compliance and compatibility between similar products in your coverage area you must configure the 802 11bg ng bgn and 802 11a a na ac wireless adapter settings correctly including the operating channel and country You also must configure the basic wireless Initial Setup 19 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 network settings for wireless devices to connect to your network For other wireless features including wireless security see Chapter 3 Wireless Configuration and Security AN WARNING If you configure the wireless access point from a wireless computer and you change the wireless access point s SSID channel or wireless security settings you lose your wireless connection when you click Apply You then must change the wireless settings of your computer to match the wireless access point s new settings Configure 802 11bg ng bgn Wireless Settings gt To configure the 802 11bg ng bgn wireless settings 1 Select Configuration gt Wireless gt Basic gt Wireless Settings NETGEAR W WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin ORL J Monitoing Maintenance Suppo eee Brig Ensemble j D ta Wireless securi z Configuration st Wireless Settings 802 11 bg
91. nt association For information about how to change the mode see Configure Wireless Bridging on page 89 Management and Monitoring 63 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Setting Description Channel Frequency The channel that the wireless port is using For information about how to change the channel and frequency see Configure 802 11bg ng bgn Wireless Settings on page 20 and Configure 802 11a a na ac Wireless Settings on page 22 Rogue AP Detection Enabled indicates that rogue AP detection is enabled Disabled indicates that it is not Monitor Wireless Stations The Wireless Stations page contains the Available Wireless Stations table This table shows all IP devices that are associated with the wireless access point in the wireless network that is defined by the wireless network name SSID The table headings indicate the wireless modes 802 11bg 802 11ng or 802 11bgn for the 2 4 GHz band and 802 11a 802 11na or 802 11ac for the 5 GHz band Note A wireless network can include multiple wireless access points all using the same network name SSID This uniformity extends the reach of the wireless network and allows users to roam from one wireless access point to another providing seamless network connectivity Under these circumstances be aware that the Available Wireless Stations table includes only the stations associated with this wireless access point gt To view the attached wireless
92. o and 1440 minutes The user will be logged out if they are idle longer than the time you enter Enter the max bandwidth upstream allowed to the user in megabits per second in the Max Bandwidth Upstream field Enter the max bandwidth downstream allowed to the user in megabits per second in the Max Bandwidth Downstream field Click the Apply button to save your changes To enable a captive portal 1 Select Configuration gt Captive Portal gt Captive Portal NETGEAR CCO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin OL Captive Portal Profile Settings User Configuration Captive Portal Mode Enable Disable Web Customization Upload Logo Select the Enable radio button Click the Apply button Select Configuration gt Security gt Profile Settings Select the SSID that you want to use captive portal Click the Edit button In the Captive Portal section select the profile name of the captive portal you want to enable on this SSID from the drop down menu Click the Apply button Advanced Configuration 88 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 The captive portal is enabled on the selected SSID Configure Wireless Bridging The wireless access point supports a wireless distributing system WDS that lets you build large bridged wireless networks You can select from the following wireless access point modes Wireless point to point bridge In this mode
93. o multipoint bridge mode and all others APs are configured in point to point bridge mode e AP2 and AP3 the point to point APs have AP1 s MAC address in their Remote MAC Address field e AllAPs are on the same LAN that is the LAN IP addresses of all APs are in the same network as the LAN devices e All wireless access points use the same channel authentication mode and security settings 6 Verify connectivity across the LANs A computer on any LAN segment should be able to connect to the Internet or share files and printers with any other devices or servers connected to any of the three LAN segments Note You can extend this multipoint bridging configuration by adding additional wireless access points that are configured in point to point mode for each additional LAN segment Furthermore you can extend the range of the wireless network with NETGEAR wireless antenna accessories Configure the Wireless Access Point to Repeat the Wireless Signal Using Point to Multipoint Bridge Mode You can configure the wireless access point to repeat the wireless signal without communication with other wireless clients All traffic is sent to the remote or downstream Advanced Configuration 94 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 wireless access point You can configure up to four security profiles to enable the wireless access point to repeat the wireless signal for four remote wireless access points Each security prof
94. oint to Multipoint Bridge Mode on page 94 Note You cannot configure wireless bridging when automatic channel selection is enabled On the basic Wireless Settings page make sure that Auto is not selected from the Channel Frequency menu see Configure the Basic Wireless Settings on page 19 Configure a Point to Point Wireless Network In point to point bridge mode the wireless access point communicates with another bridge mode wireless station Use wireless security to protect this communication The following figure shows an example in which two wireless access points APs function in point to point bridge mode Advanced Configuration 89 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 AP1 Wireless PC card in a notebook computer Router INTERNET 192 168 0 1 J LAN PCs Segment 1 Figure 5 Point to point bridge mode eer ll a e a Ze Ve al 7 7 aa A rd Wireless PC card in a notebook computer Point to point bridge mode Hub or switch JI LAN PCs P Segment 2 gt To configure a point to point wireless network 1 Configure the wireless access point AP1 on LAN Segment 1 in the previous figure as a point to point bridge a Select Configuration gt Wireless Bridge NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L Pees
95. omagnetic FCC Part 15 SubPart B compliance FCC Part 15 SubPart C FCC Part 15 SubPart E CE C TICK Supplemental Information 109 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Factory Default Settings You can use the Reset button located on the rear of the wireless access point to reset all settings to their factory defaults This is called a hard reset To perform a hard reset use a sharp object to press and hold the Reset button for approximately 5 seconds until the Test LED blinks rapidly This returns the wireless access point to the factory configuration settings that are shown in the following table Note Pressing the Reset button for a shorter period of time simply causes the wireless access point to reboot Table 3 Default configuration settings Feature Description Login for management and configuration LAN IPv4 management address Subnet mask for IPv4 management address LAN IPv6 management address User name case sensitive for login itunes CU password case sensitive for login LAN and LAN and management features features es O Supplemental Information 110 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Table 3 Default configuration settings continued Description Access point infrastructure mode Wireless access point name netgearxxxxxx where xxxxxx are the last 6 digits of the wireless access point MAC address Country and region Varies by region Wireless comm
96. on 802 11 bg ng bgn Turn Access Control On Select Access Control Database Local MAC Address Database v Move Available Wireless Stations MAC Authentication 802 11 a a na ac Turn Access Control On Select Access Control Database Local MAC Address Database v Available Wireless Stations 2 Select the Turn Access Control On check box to enable the access control feature 3 From the Select Access Control Database menu select a database option Local MAC Address Database The wireless access point uses the local MAC address database for access control This is the default setting Remote MAC Address Database The wireless access point uses the MAC address database on an external RADIUS server on the LAN for access control If you select this database you first must configure the RADIUS server settings see Configure RADIUS Server Settings on page 41 4 Click the Refresh button to refresh the Available Wireless Stations table Wireless Configuration and Security 44 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 The wireless access point places the MAC addresses of the attached wireless stations in this table 5 Populate the Trusted Wireless Stations table by one of the following methods e Select MAC addresses from the Available Wireless Stations table a Select individual check boxes for MAC addresses or select all MAC addresses by selecting the check box in the heading b Click the Move bu
97. on Length 256 2346 Enter the maximum packet size that is used for the fragmentation of data packets Packets that are larger than the specified fragmentation length are broken up into smaller packets before being transmitted The fragmentation length needs to be an even number The default setting is 2346 Beacon Interval 100 1000 Enter the interval between 100 ms and 1000 ms for each beacon transmission which allows the wireless access point to synchronize the wireless network The default setting is 100 Advanced Configuration 77 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 setting Description S Select the Enable radio button to allow the aggregation of several MAC frames into a single large frame to achieve higher throughput Enabling the aggregated MAC protocol data unit A MPDU could lead to better network performance By default the Enable radio button is selected RIFS Transmission Select the Enable radio button to allow transmission of successive frames at different transmit powers Enabling reduced interframe space RIFS could lead to better network performance By default the Disable radio button is selected DTIM Interval 1 255 Enter the delivery traffic indication message DTIM interval also referred to as the data beacon rate which indicates the beacon delivery traffic indication message period in multiples of beacon intervals This value needs to be between 1 and 255 The default settin
98. or water Placing an external antenna in a vertical position provides best side to side coverage Placing an external antenna in a horizontal position provides best up and down coverage An external antenna does not come standard with the wireless access point If you are using multiple wireless access points it is better if adjacent wireless access points use different radio frequency channels to reduce interference The recommended channel spacing between adjacent wireless access points is five channels for example use Channels 1 and 6 or 6 and 11 or 1 and 11 The time it takes to establish a wireless connection can vary depending on both your security settings and placement Ethernet Cabling Requirements The wireless access point connects to your LAN using twisted pair Category 5 Ethernet cable with RJ 45 connectors LAN Configuration Requirements For the initial configuration of your wireless access point you must connect a computer to the wireless access point Initial Setup 12 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Hardware Requirements for Computers on Your LAN To connect to the wireless access point on your network an 802 11bg ng bgn or 802 11a a na ac wireless adapter must be installed on each computer We recommend using the wireless access point with computers with the NETGEAR A6210 WiFi USB Adapter installed Operating Frequency Guidelines You do not need to change the operating frequen
99. or your changes are lost e Click the Refresh or Reload button in the web browser The changes might have occurred but the web browser might be caching the old configuration When You Enter a URL or IP Address a Time Out Error Occurs A number of things could be causing this gt Try the following troubleshooting steps e Check whether other computers on the LAN work correctly If they do ensure that your computer s TCP IP settings are correct If you use a fixed static IP address check the subnet mask default gateway DNS and IP addresses of the wireless access point see Configure the IPv4 Settings on page 18 e f the computer is configured correctly but still not working ensure that the wireless access point is connected and turned on Access it and check its settings If you cannot connect to the wireless access point check the LAN and power connections e lf the wireless access point is configured correctly check your Internet connection for example your cable modem to make sure that it is working correctly Troubleshoot a TCP IP Network Using the Ping Utility e Test the LAN Path to Your Wireless Access Point e Test the Path from Your Computer to a Remote Device Most TCP IP terminal devices and routers contain a ping utility that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a TCP IP network by using the ping utility in your computer
100. ote Management Upgrade the Wireless Access Point Software Manage the Configuration File or Reset to Factory Defaults Change the Administrator Password Manage User Accounts Enable the Syslog Server Monitor the Wireless Access Point View the Activity Log Enable and Configure Ensemble Mode 49 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Enable Remote Management Both Simple Network Management Protocol SNMP and the remote console Secure Shell SSH are enabled by default which allows for remote management of the wireless access point from a client running SNMP management software as well as from an SSH client The Telnet console is disabled by default e SNMP Management e Secure Shell and Telnet Management SNMP Management gt To set up an SNMP management interface 1 Select Maintenance gt Remote Management gt SNMP NETGEAR CMe WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L ade Ense Uparade Q gt SNE SNMP Remote Console SNMP Enable Disable Read Only Community Name public Read Write Community Name private Trap Community Name NETGEAR IP Address to Receive Traps Trap Port 162 2 Specify the settings as explained in the following table setting Description S SNMP Select the Enable radio button to allow the SNMP network management software such as HP OpenView to manage the wireless access point through SNMPv1 v2 protocol By default the Disable radio
101. otspots and other public access situations By default wireless client separation is disabled For more information see Configure and Enable Security Profiles on page 35 VLAN ID If this feature is enabled and if the network devices hubs and switches on your LAN support the VLAN 802 1Q standard the default VLAN ID for the wireless access point is associated with each profile The default VLAN ID needs to match the IDs that are used by the other network devices For more information see Configure and Enable Security Profiles on page 35 Some concepts and guidelines regarding the SSID are explained in the following list A basic service set BSS is a group of wireless stations and a single wireless access point all using the same security profile or service set identifier BSSID The actual identifier in the BSSID is the MAC address of the wireless radio A wireless radio can be assigned multiple MAC addresses one for each security profile An extended service set ESS is a group of wireless stations and multiple wireless access points all using the same identifier ESSID Different wireless access points within an ESS can use different channels To reduce interference specify that adjacent wireless access points use different channels Roaming is the ability of wireless stations to connect wirelessly when they physically move from one BSS to another one within the same ESS The wireless station automatically changes to the wirel
102. owing sections explain how to mount your wireless access point We recommend that you review the information in Wireless Equipment Placement and Range Guidelines on page 11 before you mount the wireless access point at its permanent position e Ceiling Installation e Wall Installation Initial Setup 25 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Ceiling Installation The best location for ceiling installation is at the center of your wireless coverage area and within line of sight of all mobile devices Make sure that the top the dome side of the wireless access point is directed toward the users and not the ceiling Note Do not place the wireless access point in a false ceiling space facing up gt To install the wireless access point using the ceiling installation kit 1 Verify the package contents of the ceiling installation kit Mounting plate with screws 2 Attach the mounting bracket to the access point using the six mounting screws Initial Setup 26 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 ya i a ri A a 3 Attach the mounting plate to the ceiling rail 1 7 1 1 4 1 1 1 t 4 iA 4 Secure the mounting plate with the included screws Initial Setup 27 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Wall Installation The best location for wall installation is at the cen
103. page 95 in repeater mode with the remote MAC address of AP2 Configure AP3 on LAN Segment 3 see Figure 7 on page 95 in repeater mode with the remote MAC address of AP2 Verify the following for all wireless access points e All APs are on the same LAN that is the LAN IP addresses of all APs are in the same network as the LAN devices e All wireless access points use the same channel authentication mode and security settings Verify connectivity across the LANs A computer on any LAN segment should be able to connect to the Internet or share files and printers with any other devices or servers connected to any of the two LAN segments Note You can extend repetition of the wireless signal by adding up to two more wireless access points that are configured in point to multipoint bridge mode without client association Also you can extend the range of the wireless network with NETGEAR wireless antenna accessories Advanced Configuration 97 Troubleshooting This chapter provides information about troubleshooting the wireless access point After each problem description instructions are given to help you diagnose and solve the problem For the common problems listed go to the section indicated Is the wireless access point on Go to Basic Functioning on page 99 Have connected the wireless access point correctly Go to Basic Functioning on page 99 cannot access the Internet or the LAN Go to You Cannot Access th
104. point automatically restarts The restoration process typically takes about one minute When the Test LED turns off wait a few more seconds before doing anything with the wireless access point Use the Reset Button to Restore Factory Default Settings To restore the factory default settings when you do not know the login user name login password or IP address you must use the Reset button on the rear panel of the wireless access point see Figure 2 on page 9 gt To restore the factory default settings using the Reset button 1 Using a sharp object press and hold the Reset button for about five seconds until the Test LED blinks rapidly to reset the wireless access point to factory defaults settings Note Pressing the Reset button for a shorter time simply causes the wireless access point to reboot 2 Release the Reset button During the restoration process the wireless access point automatically restarts The restoration process typically takes about one minute When the Test LED turns off wait a few more seconds before doing anything with the wireless access point Reboot the Wireless Access Point Without Restoring the Default Configuration If you do not have physical access to the wireless access point to switch it off and on again you can use the software to reboot the wireless access point gt To reboot the wireless access point 1 Select Maintenance gt Reset gt Reboot AP NETGEAR O WAC720 ProSAFE Dual Ba
105. r LAN Prefix Length Enter the prefix length for the IPv6 address The default prefix length us 64 Default Gateway Enter the IPv6 address of the ISP gateway to which the wireless access point connects Dynamic IPv6 Address The dynamic IPv6 address that is assigned by the DHCPV6 server on your network This address does not overwrite the address in the IPv6 Address field Primary DNS Server Enter the IP address of the primary and secondary DNS servers A DNS server is a host on the Internet that translates Internet names such as www netgear com to numeric IP addresses Typically your ISP transfers the IP address of one or two DNS servers to your wireless access point during login If Secondary DNS Server the ISP does not transfer an address you must obtain it from the ISP and enter it manually in this field Network Integrity Check Select this check box to validate that the upstream link is active before allowing wireless associations Ensure that the default gateway is configured 3 Click Apply to save your settings Configure Spanning Tree Protocol 802 1Q VLAN and Link Layer Discovery Protoco As part of the advanced system configuration you can enable the Spanning Tree Protocol STP configure the VLANs and enable Ethernet Link Layer Discovery Protocol LLDP as described in the following sections e Configure STP and VLANs e Configure Ethernet LLDP Configure STP and VLANs STP provides network traffic optimizatio
106. r TFTP server 6 Click the Apply button to initiate the upgrade process During the upgrade process the wireless access point automatically restarts The upgrade process typically takes several minutes When the Test LED turns off wait a few more seconds before doing anything with the wireless access point 7 Verify that the new software file has been installed by selecting Monitoring gt System The System page displays see Figure on page 62 The firmware version is shown in the Access Point Information section of the page Manage the Configuration File or Reset to Factory Defaults The wireless access point settings are stored in the configuration file You can save this file back it up to a computer restore it from a computer or reset it to factory default settings Management and Monitoring 54 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 e Save the Configuration e Restore the Configuration e Restore the Wireless Access Point to the Factory Default Settings e Reboot the Wireless Access Point Without Restoring the Default Configuration Save the Configuration gt To save your settings 1 Select Maintenance gt Upgrade gt Backup Settings NETGEAR ee WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L ane Sea Backup Settings Firmware Upgrade TFTP Restore Settings Backup a copy of the current settings to a file 2 Click the Backup button Your browser extrac
107. r to allow TCP IP changes take effect Restart the computer The computer with the wireless adapter might not have the correct TCP IP settings to communicate with the network Restart the computer and check that TCP IP is set up correctly for that network In Windows the usual setting for Network Properties is to obtain an IP address automatically The wireless access point s default values might not work with your network Check the wireless access point s default configuration against the configuration of other devices in your network Make sure that the SSID network authentication and data encryption settings of the computer with the wireless adapter are the same as those of the wireless access point Ping the IP address of the wireless access point to verify that there is a wireless connection between the computer with the wireless adapter and the wireless access point If the ping fails check the network configuration for the wireless access point see Configure the IPv4 Settings on page 18 Ping the default gateway to verify that there is a path from the computer with the wireless adapter to the default gateway If the ping fails check the network configuration or call the Internet service provider ISP You Cannot Configure the Wireless Access Point from a Browser gt Check these items The wireless access point is correctly installed it is powered on and LAN connections are okay Check that the Active LED and LAN LE
108. radio button to restore the default password By default the No radio button is selected 3 Click the Apply button to save your settings If you restored the default password the login password is password If you configured a new password write it down in a secure place Manage User Accounts The admin user account is the default user account which you cannot delete However you can add other user accounts modify them and delete them Users for whom you set up an account can access the web management interface with read only or read write privileges Note Only the administrator can create change and delete user accounts Management and Monitoring 58 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 gt To add anew user account 1 Select Configuration gt System gt Advanced gt User Accounts NETGEAR E WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp i Basic Advanced Add User Accounts e General User Name Syslog Password Ethernet LLDP Privilege Select Privilege Bonjour Add Update User Accounts Existing Users Select User User Name Password Privilege Select Privilege 2 Configure the settings in the upper part of the page as explained in the following table User Name Enter a new user name Password Enter a password between 4 and 12 characters in length Privilege From the Privilege menu select Read Write or Read Only 3 Click
109. re Basic Wireless Quality of Service on page 4 7 When you configure the EDCA settings the wireless access point can leverage existing information in the IP packet header that is related to the Type of Service ToS The wireless access point examines the ToS field in the headers of all packets that it processes Based on the value in a packet s ToS field the wireless access point prioritizes the packet for transmission by assigning it to one of the queues A different type of data is associated with each queue You can configure how the wireless access point treats each queue The queues defined for different types of data transmitted from AP to station and Station to AP are as follows e Data 0 Best Effort Medium priority queue medium throughput and delay Most traditional IP data is sent to this queue e Data 1 Background Lowest priority queue high throughput Bulk data that requires maximum throughput and is not time sensitive is sent to this queue FTP data for example e Data 2 Video Highest priority queue minimum delay Time sensitive video data is automatically sent to this queue e Data 3 Voice Highest priority queue minimum delay Time sensitive data such as VoIP and streaming media are automatically sent to this queue gt To configure advanced QoS 1 Select Configuration gt Wireless gt Advanced gt QoS Settings The advanced QoS Settings page displays Advanced Configuration 79 ProSAFE Dual Ban
110. riptions Passphrase Enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive The default passphrase is sharedsecret You can display the actual passphrase by selecting the Show Passphrase in Clear Text Yes radio button Show Passphrase Select the Yes radio button to display the actual passphrase in the Passphrase field The in Clear Text default setting is No Configure RADIUS Server Settings For authentication accounting or both authentication and accounting using RADIUS you must configure primary servers and optional secondary servers These RADIUS server settings can apply to all devices that are connected to the wireless access point You can configure both IPv4 and IPv6 servers In the IPv4 RADIUS Server Settings section enter IPv4 addresses only In the IPv6 RADIUS Server Settings section enter IPv6 addresses only gt To configure the RADIUS server settings 1 Select Configuration gt Security gt Advanced gt RADIUS Server Settings NETGEAR u WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L a C cance Ay Profile Settings RADIUS Server Settings Advanced Rogue AP IPv4 RADIUS Server Settings E MAC Authentication opt adcoss Port Sharad Secret eR z Primary Authentication Server 192 168 1 1 181412 _ eveees RADIUS Server Settings Secondary Authentication Server 1812 Primary Accounting Server 192 168 1 1 1813 eesse S
111. s e Both wireless access points are configured to operate in the same LAN network address range as the LAN devices e Both wireless access points use the same channel authentication mode and security settings Verify connectivity across the LAN 1 and LAN 2 Advanced Configuration 91 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other computers or servers connected to LAN Segment 1 or LAN Segment 2 Configure a Point to Multipoint Wireless Network In a point to multipoint bridge the wireless access point is the master for a group of bridge mode wireless access points All traffic is sent to the master rather than to the other wireless access points Use wireless security to protect this communication For each wireless access point that you want the master to be able to connect to you must configure a security profile with a unique name and the MAC address of the wireless access point You can configure up to four such security profiles NETGEAR WDS 1 NETGEAR WDS 2 and so on The following figure shows an example in which AP1 functions in point to multipoint bridge mode and AP2 and AP3 function in point to point bridge mode AP2 o AP3 e ka N Me ba pt PAg N Se N els E AF 4 Bee OOE d 7 m aA Wireless PC card Point to point Poin
112. s access point and the secondary RADIUS server during authentication Primary Pv4 Address or Enter the IP address of the primary RADIUS server for Accounting Server IPv6 Address accounting Port Enter the number of the UDP port on the wireless access point that is used to access the primary RADIUS server for accounting The default port number is 1813 Shared Secret Enter the shared key that is used between the wireless access point and the primary RADIUS server during the accounting process IPv4 Address or Enter the IP address of the secondary RADIUS server for IPv6 Address accounting The secondary RADIUS server is used when the Secondary Accounting Server primary RADIUS server is not available Port Enter the number of the UDP port on the wireless access point that is used to access the secondary RADIUS server for accounting The default port number is 1813 Shared Secret Enter the shared key that is used between the wireless access point and the secondary RADIUS server during the accounting process Authentication Settings Reauthentication The interval in seconds after which the supplicant is reauthenticated with the Time Seconds RADIUS server The default interval is 3600 seconds 1 hour Enter 0 to disable reauthentication Update Global Key Select the check box to allow the global key update and enter the interval in Every Seconds seconds The check box is selected by default and the default
113. s highly effective security features that are covered in detail in this chapter Deploy the security features appropriate to your needs Wireless Data Security Options i Range Up to 500 feet RADIUS 4 ijd a 1 No security Easy but no security 2 MAC Access List No data security 3 WEP Secure but vulnerable 4 WPA or WPA PSK Strong security 5 WPA2 or WPA2 PSK Very strong security Figure 4 You can enhance the security of your wireless network in several ways e Use multiple BSSIDs combined with VLANs You can configure combinations of VLANS and BSSIDs security profiles with stronger or less restrictive access security according to your requirements For example visitors could be given wireless Internet access but be excluded from any access to your internal network For information about how to configure BSSIDs see Configure and Enable Security Profiles on page 35 e Restrict access based on MAC address You can allow only trusted devices to connect so that unknown devices cannot wirelessly connect to the wireless access point Restricting access by MAC address adds an obstacle against unwanted access to your network but the data broadcast over the wireless link is fully exposed For information about how to restrict access by MAC address see Restrict Wireless Access by MAC Address on page 44 e Turn off the broadcast of the wireless network name SSID If you disable broadcast of the SSID only devices wit
114. s the options that the Data Encryption Data Encryption menu provides and whether the WPA Passphrase Network Key field displays WPA PSK TKIP Temporal Key Integrity Protocol is the standard encryption method used with WPA PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive WPA2 PSK AES Advanced Encryption Standard is the standard encryption method used with WPA2 PSK and the only selection possible from the Data Encryption menu In the WPA Passphrase Network Key field enter a passphrase The passphrase length needs to be between 8 and 63 characters inclusive Note We recommend WPA2 PSK authentication with AES encryption if you want to use the 11n rates and speed g Click Apply to save your security profile settings The Bridging page displays again h If the correct profile name and security option are displayed in the table select the check box in the Enable column i Click Apply on the Bridging page to save your point to point bridge settings Configure a second wireless access point AP2 on LAN Segment 2 see Figure 5 on page 90 in point to point bridge mode AP1 needs to have AP2 s MAC address in its Remote MAC Address field and AP2 needs to have AP1 s MAC address in its Remote MAC Address field Verify the following settings for both wireless access point
115. scover the access point more easily after it connects to a LAN that includes a DHCP server gt To enable Bonjour 1 Select Configuration gt System gt Advanced gt Bonjour NETGEAR oo Ss WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp F ireiess ecurit ass Ide nsembie ap Po Syslog e Ethernet LLDP 2 Select the Enable radio button 3 Click the Apply button to save your changes Configure Advanced Wireless Settings You can configure and enable various WLAN settings for the 802 11b bg ng and 802 11a na modes Band steering is an advanced wireless feature that reduces the client density in the 2 4 GHz band and increases the wireless network capacity The default WLAN settings normally work well However you can use the advanced settings to fine tune the overall performance of the wireless access point for your specific environment gt To configure advanced wireless settings 1 Select Configuration gt Wireless gt Advanced gt Wireless Settings Advanced Configuration 76 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 NETGEAR o gt WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin Ll __ Monitoring Maintenance Support Pe Basic Advanced Wireless Settings AP Wireless Settings Antenna Internal External QoS Settings QoS Policies Wireless Settings 802 11 bg ng bgn Load Balancing S re
116. ssphrase length needs to be between 8 and 63 characters inclusive Note NETGEAR recommends WPA2 PSK authentication with AES encryption if you want to use the 11n rates and speed Click Apply to save your security profile settings The Bridging page displays again Repeat Step e through Step h for any other security profile that you want to edit For example first configure security profile NETGEAR WDS 1 with the MAC address of AP1 and then configure security profile NETGEAR WDS 2 with the MAC address of AP3 see Figure 7 on page 95 2 Activate repeater mode on the wireless access point AP2 in Figure 7 on page 95 a b Cc On the Bridging page select the Enable Wireless Bridging check box Select the Wireless Point to Multi Point Bridge radio button Clear the Enable Wireless Client Association check box to disable wireless client association see the red circle in Figure e on page 95 Advanced Configuration 96 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note If you do not clear the Enable Wireless Client Association check box the wireless access point functions in regular point to multipoint bridge mode d lf the correct profile names and security options are displayed in the table select the check boxes in the Enable column for all security profiles that you want to enable e Click Apply on the Bridging page to activate your repeater settings Configure AP1 on LAN Segment 1 see Figure 7 on
117. stom NTP server Note You need an Internet connection to use an NTP server that is not on your local network Hostname Enter the host name or IP address of the custom NTP server IP Address The default is time b netgear com Note If you use a host name make sure that you have configured a DNS server 3 Click Apply button Your settings are saved Configure the IPv4 Settings Note For information about how to configure the IPv6 settings see Configure the IPv6 Settings on page 72 AN WARNING If you enable the DHCP client the IP address of the wireless access point changes when you click the Apply button causing you to lose your connection to the wireless access point You must use the new IP address to reconnect to the wireless access point Tip If you enable the DHCP client on the wireless access point you can discover the new IP address of the wireless access point by accessing the DHCP server on your LAN or by using a network IP address scanner application gt To configure the IPv4 settings 1 Select Configuration gt IP gt IP Settings Initial Setup 18 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 NETGEAR W WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin amp en reless Secur lireless Bridge Enseml ptive Porta IP Settings IP Settings IPv6 Settings DHCP Client Enable Disable IP Address 192 168 0 100 IP Subnet Mask 255 255 25
118. t To enable this feature select the Enable radio button Select the Disable button to disable the feature which is the default setting 3 Click the Apply button Your settings are saved To manage the wireless access point over a Telnet connection 1 2 Connect an Ethernet cable to the console port of the wireless access point Connect the other end of the cable to a V1T100 ANSI terminal or a workstation If you attach a PC Apple Macintosh or UNIX workstation start a secure terminal emulation program and configure the terminal emulation program to use the following settings Baud rate 9600 bps Data bits 8 Parity none Stop bit 1 Flow control none Start a secure Telnet session from the terminal or workstation to the wireless access point A page similar to the following displays Management and Monitoring 51 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 oe Telnet 192 168 0 236 Telnet gt Telnet open 192 168 868 236 etqears34468 login admin Password netgearss4468Hshow configuration ap information apname netqears344h8 macaddress HAI22 3F 8H 1B8 9h Firmnware version WAAP2Z16_1 6 BETA2 country region unitedstates http redirect disable http redirect url http www netqear com spanning tree disable time zone usa pacific ssh disable telnet enable syslog disable 4 Enter the login name and password The default login name is admin and the default password is
119. t Wireless Access by MAC Address 0 00 c cece cece eee eens 44 Enable Rogue AP Detection 4 0s4ividdeoectdeleeuees deed dew ew dh iade 45 Schedule the Wireless Radios to Be Turned Off 0 0 e ee eee 46 Configure Basic Wireless Quality of Service 0 0 c cece eee 47 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Chapter 4 Management and Monitoring Enable Remote Management 0c ccc eee eect teen eaes 50 SNMP WanSGCINGNE 244 0 lt 242ecgencadeehdGiweee cdaeeaeescsacades 50 Secure Shell and Telnet Management 0 ce cece eee es 51 Upgrade the Wireless Access Point Software 0 cee cece ees 52 Web Browser Upgrade Procedure 0 ccc eee cece teen eens 53 TFTP Server Upgrade Procedure ss oo nd iii b5dss e053 oben deeetedasiws 54 Manage the Configuration File or Reset to Factory Defaults 54 Save the Configuration 0 0c ccc cece ene teen eens 55 Restore the Configuration 0 0 cece ccc eee teen ne 55 Restore the Wireless Access Point to the Factory Default Settings 56 Reboot the Wireless Access Point Without Restoring the Default Configuration cucavducacecusesdesetaeddttottiateaeseeacages 57 Change the Administrator Password 0 00 ccc e cece enn eens 58 Manage User ACCOUNTS ss ssaasrrierintent tiri anari NARA a 58 Enable the Syslog Server ccc ccc ccc cece etn e nent n en enes 60 Monitor the W
120. t to point in a notebook computer bridge mode bridge mode e Multipoint Router bridge mod Hub or switch INTERNET 192 168 0 1 i LAN Hub or switch m Segment 2 a LAN si te Segment 3 LAN Segment 1 Ee Figure 6 gt To configure a point to multipoint wireless network 1 Configure the security profiles on the wireless access point AP1 on LAN Segment 1 in the previous figure a Select Configuration gt Wireless Bridge The Bridging page displays The following figure shows the page after you have completed Step c b Select the Enable Wireless Bridging check box The Local MAC Address field is a nonconfigurable field that shows the MAC address of the wireless access point c Select the Wireless Point to Multi Point Bridge radio button The page adjusts Advanced Configuration 92 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 d The profile table shows four security profiles Choose a security profile to edit by selecting the corresponding radio button to the left of the profile e Click Edit to configure the selected security profile settings The Edit Security Profile page displays for the selected security profile The following figure contains an example f Specify the settings as explained in the following table Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember The default names for the
121. ter of your wireless coverage area and within line of sight of all mobile devices Make sure that the top the dome side of the wireless access point is directed toward the users and not the wall gt To install the wireless access point using the wall installation kit 1 Place the mounting bracket on the wall where you want to mount the access point 2 Mark the wall where the two mounting holes are 3 Attach the mounting bracket to the access point using the six mounting screws as shown Initial Setup 28 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 4 Attach the wall anchors and screws to the wall where you previously marked Leave a space 1 8 of an inch 3 5 mm wide between the heads of the screws and the wall 5 Hang the access point on the screws by inserting the screws into the larger portion of the slot and sliding the unit down Initial Setup 29 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Initial Setup 30 Wireless Configuration and Security This chapter describes how to configure the wireless features of the wireless access point The chapter includes the following sections Wireless Data Security Options Security Profiles Configure RADIUS Server Settings Restrict Wireless Access by MAC Address Enable Rogue AP Detection Schedule the Wireless Radios to Be Turned Off Configure Basic Wireless Quality of Service Be
122. ter with an Ethernet adapter If this computer is already part of your network record its TCP IP configuration settings Configure the computer with a static IP address of 192 168 0 210 and 255 255 255 0 as the subnet mask Connect an Ethernet cable from the wireless access point to the computer Securely insert the other end of the cable into the wireless access point s Ethernet port Turn on your computer oy SS YS Connect the wireless access point to a PoE switch or power adapter Tip The wireless access point supports Power over Ethernet PoE with power redundancy If you are using a switch that provides PoE you do not need to use a power adapter to power the wireless access point Using PoE can be especially convenient when the wireless access point is installed in a high location far away from a power outlet 7 Verify the following Initial Setup 14 wT 2 4 Ghz 5 Ghz ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Power Test LED The Power Test LED blinks when the wireless access point is first turned on To be exact during startup the LED is first steady amber then goes off and then blinks green After about 45 seconds the LED stays lit steady green If after oneminute the Power Test LED is not lit or is still blinking check the connections and see if the power outlet is controlled by a wall switch that is turned off Active LED The Active LED is lit or blinks green when Ethernet traffic
123. the Edit Security Profile page see Configure and Enable Security Profiles on page 35 To set up a security profile select its network authentication type data encryption wireless client security separation and VLAN ID Network authentication The wireless access point is set by default as an open system with no authentication When you configure network authentication bear in mind that not all wireless adapters support WPA or WPA2 Windows XP Windows 2000 with Service Pack 3 and Windows Vista do include the client software that supports WPA However client software is required on the client Consult the product documentation for your wireless adapter and WPA or WPA2 client software for instructions about how to configure WPA2 settings Wireless Configuration and Security 33 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 For information about the types of network authentication that the wireless access point supports see Configure and Enable Security Profiles on page 35 Data encryption Select the data encryption that you want to use The available options depend on the network authentication setting otherwise the default is None The data encryption settings are explained in Configure and Enable Security Profiles on page 35 Wireless client security separation If this feature is enabled the associated wireless clients using the same SSID are not able to communicate with each other This feature is useful for h
124. the Yes radio button to enable the wireless access point to broadcast its Network Name SSID SSID allowing wireless stations with a null blank SSID to adopt the wireless access point s SSID Yes is the default setting To prevent the SSID from being broadcast select the No radio button 4 Specify the settings of the Authentication Settings section as explained in the following table The wireless access point is set by default as an open system with no authentication When you configure network authentication bear in mind the following e Ifyou are using access point mode which is the default mode if you did not enable wireless bridging then all options are available In other modes such as bridge mode some options might be unavailable e Not all wireless adapters support WPA or WPA2 Windows XP Windows 2000 with Service Pack 3 and Windows Vista do include the client software that supports WPA However client software is required on the client Consult the product documentation Wireless Configuration and Security 37 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 for your wireless adapter and WPA or WPA2 client software for instructions about how to configure WPA2 settings Setting Description Network Authentication Open System This is the default setting Use an open system without any and Data Encryption encryption See Configure Legacy 802 1X on page 39 Note The data I a pag encryption fields t
125. the wireless access point can communicate with another bridge mode wireless station and as an option also with wireless clients Use WPA PSK or WPA2 PSK to secure the communication For information about how to configure this mode see Configure a Point to Point Wireless Network on page 89 Wireless point to multipoint bridge In this mode the wireless access point is the master for a group of bridge mode wireless stations As an option the wireless access point can also communicate with wireless clients You can configure up to four profiles The other bridge mode wireless stations must be set to point to point bridge mode using the MAC address of the master wireless access point Rather than communicating directly with each other all other bridge mode wireless stations send their traffic to the master wireless access point Use WPA PSK or WPA2 PSK to secure the communication For information about how to configure this mode see Configure a Point to Multipoint Wireless Network on page 92 Repeating the wireless signal In this mode this wireless access point repeats the wireless signal does not support communication with wireless clients and sends all traffic to a remote access point In this mode wireless clients cannot associate with the wireless access point Use WPA PSK or WPA2 PSK to secure the communication For information about how to configure this mode see Configure the Wireless Access Point to Repeat the Wireless Signal Using P
126. through either WPA with TKIP or WPA2 with AES Wireless Configuration and Security 38 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Setting Description S Wireless Client Security If you enable wireless client security separation by selecting Enable from the Separation menu the associated wireless clients cannot communicate with each other By default Disable is selected from the menu This feature is intended for hotspots and other public access situations VLAN ID Enter the VLAN ID to be associated with this wireless security profile The default VLAN ID is 1 The VLAN ID needs to match the VLAN ID that is used by the other devices in your network 5 Optional In the QoS Policies section select a QoS policy from the Incoming menu Outgoing menu or both Depending on your selection the policy is applied to incoming packets outgoing packets or both incoming and outgoing packets and is displayed in the Policy Details fields Note Tobe able to select a QoS policy you must first configure one or more policies see Configure Quality of Service Policies on page 81 6 Click the Apply button Your settings are saved A N WARNING If you use a wireless computer to configure wireless security settings you are disconnected when you click the Apply button Reconfigure your wireless computer to match the new settings or access the wireless access point from a wired computer to make further changes
127. tination MAC MAC address against which the information in the IP header needs to be matched To select the MAC address of a wireless client that is connected to the wireless access point 1 Select the radio button to the left of the Match Classifications menu 2 From the menu select a MAC address To enter a MAC address 1 Select the radio button to the right of the Match Classifications menu 2 In the field to the right of the radio button enter a MAC address Advanced Configuration 84 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 setting Description Match Frame Source IP In the Match Classifications field enter the source IP address against Fields and Match which the information in the IP header needs to be matched Classifications continued Destination IP_ In the Match Classifications field enter the destination IP address against which the information in the IP header needs to be matched Source Port The Match Classifications field is separated into two sections In the left section enter the source port number and optionally in the right section enter the associated IP address against which the information in the IP header needs to be matched Destination The Match Classifications field is separated into two sections In the Port left section enter the destination port number and optionally in the right section enter the associated IP address against which the information in the
128. tion 85 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Note Rate limiting for the wireless interface is an optional setting that applies to all traffic on the wireless interface Unlike classification rate limiting which you can specify for each classification rate limiting for the wireless interface you only must specify once gt To specify rate limiting for the wireless interface 1 2 Specify rate limiting for the entire wireless interface as explained in the following table setting Description Bits Per Sec Enter a value between 0 and 300 000 000 bps to specify the maximum data rate up to which packets are queued for transmission and sent immediately over the wireless interface This value applies to all traffic on the wireless interface Interface Note When the maximum rate is exceeded packets are retained in Rate Limiting the queue and sent when the transmission falls again below the maximum rate Burst Rate Enter a value between 0 and 37 500 000 bytes to specify the maximum Bytes amount of data that can be transmitted in a burst over the wireless interface This value applies to all traffic on the wireless interface Click the Apply button to save your settings gt To modify a QoS policy 1 2 3 4 From the Create Policy menu select the policy that you want to modify To delete a classification select it in the Classification field and click Delete Classification To add
129. ts the configuration file the file name is config from the wireless access point and prompts you for a location on your computer to store the file 3 Follow the instructions of your browser to save the file Restore the Configuration IMPORTANT During the restoration process do not try to go online turn off the wireless access point shut down the computer or do anything else to the wireless access point until it finishes restarting gt To restore your settings from a saved configuration file 1 Select Maintenance gt Upgrade gt Restore Settings NETGEAR _ _ WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin O L Firmware Upgrade Firmware Upgrade TFTP Backup Settings Restore saved settings from a file Choose File No file chosen Restore Settings Management and Monitoring 55 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 2 Click the Browse button and locate the backup configuration file the file name is config 3 Click the Apply button to initiate the restoration process During the restoration process the wireless access point automatically restarts The restoration process typically takes about one minute When the Test LED turns off wait a few more seconds before doing anything with the wireless access point Restore the Wireless Access Point to the Factory Default Settings You can restore the wireless access point to the factory default settings by
130. tton to transfer the MAC addresses from the Available Wireless Stations table to the Trusted Wireless Stations table e Enter MAC addresses manually a Enter a MAC address directly in the Trusted Wireless Stations table b Click the Add button To delete a MAC address from the Trusted Wireless Stations table select individual check boxes for MAC addresses or select all MAC addresses by selecting the check box in the heading and then click the Delete button 6 Click the Apply button Your settings are saved Now only devices in the Trusted Wireless Stations table are allowed to connect to the wireless access point over a wireless connection A WARNING When configuring the wireless access point from a wireless computer whose MAC address is not on the access control list you lose your wireless connection when you click the Apply button You then must access the wireless access point from a wired computer or from a wireless computer that is on the access control list to make any further changes Enable Rogue AP Detection Unidentified access points that use the SSID of a legitimate network can present a serious security threat Detecting rogue access points involves scanning the wireless environment on all available channels looking for unidentified access points When Rouge AP Detection is enabled the access point will only interact with devices in the Known AP list gt To enable Rouge AP detection 1 Select Configurat
131. two methods that are described in the following sections e Use the Web Management Interface to Restore Factory Default Settings e Use the Reset Button to Restore Factory Default Settings Note After you restore the factory default settings on the wireless access point the following occurs All custom configurations are lost The login password is password The default LAN IP address is 192 168 0 100 The DHCP client is disabled The Access Point Name field is reset to the name printed on the label on the bottom of the unit Use the Web Management Interface to Restore Factory Default Settings IMPORTANT During the restoration process do not try to go online turn off the wireless access point shut down the computer or do anything else to the wireless access point until it finishes restarting gt To restore the factory default settings using the web management interface 1 Select Maintenance gt Reset gt Restore Defaults NETGEAR WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin Reboot AP Restore Defaults Restore De Restore to Factory Default Settings Yes No 2 Select the Yes radio button By default the No radio button is selected Management and Monitoring 56 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 3 Click the Apply button The wireless access point is reset to the factory default settings During the restoration process the wireless access
132. unication 2 4 GHz radio enabled 5 GHz radio enabled Wireless modes 11bg ng bgn 11a a na ac Wireless network names SSIDs NETGEAR_11ng NETGEAR_11ac Broadcast network names SSIDs Enabled Radio frequency channels 11ng Auto 11ac Auto MCS index data rate transmission speed Best Note Maximum wireless signal rate derived from IEEE Standard 802 11 specifications Actual throughput will vary Network conditions and environmental factors including volume of network traffic building materials and construction and network overhead lower actual data throughput rate 11ac Dynamic 20 40 MHz Fragmentation length 2346 Supplemental Information 111 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 Table 3 Default configuration settings continued Description ani O OO Beacon interval 65535 MPDU Enabled RIFS transmission Disabled DTIM interval Preamble type Auto Internal 802 11d Enabled gt Maximum wireless clients Wi Fi Multimedia WMM Enabled WMM powersave Enabled gt gt gt gt Q D 2 D gt 4 D gt Q Q Q a O D 4p gt Q mp D gt U m J O gt Oo a D D T QoS settings See Configure Quality of Service Policies on page 81 Station EDCA parameters QoS settings QoS policies None Wireless bridging Disabled Default wireless profile and profile security Profile name NETGEAR Profile state Enabled Wir
133. utput Power Full i Wireless Settings 802 11 a a na ac Wireless Mode 5 GHz Band 11a 11a na ac Turn Radio On e Wireless Network Name SSID NETGEAR_11ac Broadcast Wireless Network Name SSID Yes No Channel Frequency Auto v MCS Index Data Rate Best Channel Width 80 MHz a Guard Interval Auto v Output Power Full Y Wireless Settings AP Wireless Scheduling Status Disabled 2 Select the wireless mode in the 5 GHz band e 11a 802 11n compliant devices can connect to the access point because they are backward compatible e 11a na ac This is the default setting If you keep the default setting go to Step 5 When you change the wireless mode the Turn Radio On check box is automatically cleared and all fields buttons and menus on the page are masked out 3 Turn on the radio by selecting the Turn Radio On check box A pop up page displays Note Under normal conditions you want the radio to be turned on Turning off the radio disables access through the wireless access point which can be helpful for configuration network tuning or troubleshooting activities 4 Click OK to confirm the change of wireless mode The change does not take effect until you click the Apply button after you have completed the wireless configuration Initial Setup 23 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 5 Specify the remaining wireless settings as explained the following table setting Descriptions S Wirel
134. wireless access point Default Gateway The default IPv4 gateway for the wireless access point communication DHCP Client Enabled indicates that the current IP address was obtained from a DHCP v4 server on your LAN network Disabled indicates a static IP configuration Current IPv6 Settings For information about how to change any of these IP settings see Configure IPv6 Settings on page 72 IPv6 Address The default IPv6 address of the wireless access point Prefix Length The prefix length for the address of the wireless access point Dynamic IPv6 Address The dynamically assigned IPbv6 address if the DHCPv6 server has the stateful option enabled Default Gateway The default IPv6 gateway for the wireless access point communication LAN IPv6 Link Local This is an automatically generated IPv6 address that uses the IPv4 address in the Address interface portion of its address DHCP Client Enabled indicates that the current IP address was obtained from a DHCPV6 server on your LAN network Disabled indicates a static IP configuration Current Wireless Settings for 802 11b 802 11g or 802 11ng and Current Wireless Settings for 802 11a or 802 11na Note The section heading depends on the configured wireless mode Access Point Mode The operating mode of the wireless access point One of the following modes is indicated e Access Point e Point to Point Bridge e Point to Point Bridge with Access Point e Multi Point Bridge with without clie
135. your settings Manage an Ensemble An ensemble can be managed through the dominant access point s web management interface or through a configured IP address of the ensemble You can manage an ensemble s channel assignment settings upgrade settings and security settings To manage an Ensemble s channel assignment settings 1 Select Configuration gt Ensemble gt Advanced gt Channel Assignment Settings NETGEAR CCOO WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin O a O somon O O Ensemble Basic Advanced Channel Assignment Ensemble Status Started Channel Assignment Settings Channel Interference Limit 75 Channel Selection Interval 1 Day 2 From the Channel Interference Limit menu select an interference limit percentage 3 Select an channel selection interval from the Channel Selection Interval menu 4 Click Apply to save your settings You can monitor the channel s used by the access points in the ensemble by selecting Configuration gt Ensemble gt Advanced gt Channel Assignment Management and Monitoring 68 ProSAFE Dual Band Wireless AC Access Point WAC720 WAC730 gt To manage an Ensemble s firmware versions 1 Select Maintenance gt Ensemble Upgrade gt Firmware Upgrade NETGEAR eS WAC720 ProSAFE Dual Band Wireless AC Access Point Welcome admin L a Firmware Upgrade Member Selection Firmware Upgrade TFTP a en 1 192 168 0100 5

Reference Manual - FTP Directory Listing

Contents

Download Pdf Manuals

Related Search

Related Contents