NETGEAR Insight WAC540, User Manual

Page 1: ...User Manual Insight Managed Smart Cloud Wireless Access Point Model WAC510 NETGEAR Inc 350 E Plumeria Drive August 2019 San Jose CA 95134 USA 202 11840 06 ...

Page 2: ...ng the EU Declaration of Conformity visit https www netgear com about regulatory See the regulatory compliance document before connecting the power supply Do not use this device outdoors If you connect cables or devices that are outdoors to this device see http kb netgear com 000057103 for safety and warranty information Trademarks NETGEAR Inc NETGEAR and the NETGEAR Logo are trademarks of NETGEAR...

Page 3: ...n page 13 We made major changes to the following sections Connect over WiFi using a WiFi enabled computer or mobile device on page 29 Connect over Ethernet using a computer connected to the same network on page 33 Connect over Ethernet using a directly connected computer on page 37 Set up an open or secure WiFi network on page 45 Enable or disable band steering with 802 11k RRM and 802 11v WiFi ne...

Page 4: ...he DHCP client and specify a fixed WAN IP address on page 131 Router mode Enable the DHCP client and let the access point obtain a WAN IP address on page 136 Perform a ping test on page 214 We made other minor changes and corrections throughout the manual July 2018 202 11840 04 We added Connect over the Internet using the NETGEAR Insight Cloud portal on page 27 and throughout the manual informatio...

Page 5: ...ter and configure Facebook Wi Fi for the access point on page 71 Set up a click through captive portal for a WiFi network on page 65 Unregister the access point from Facebook Wi Fi on page 75 Manage the advanced WiFi settings for the radios on page 91 Manage neighbor AP detection on page 120 Set up RADIUS servers on page 126 Disable the DHCP client and configure a LAN or WAN IP address on page 129...

Page 6: ...mputer connected to the same network on page 33 Connect over Ethernet using a directly connected computer on page 37 Set up an open or secure WiFi network on page 45 Block specific URLs and keywords for Internet access on page 108 Change the system mode to Router mode or AP mode on page 162 In addition we made minor changes to other sections and updated some figures April 2017 202 11686 02 First p...

Page 7: ...int with a connection to your Internet modem 24 Connect to the access point for initial configuration 25 Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device 26 Connect over the Internet using the NETGEAR Insight Cloud portal 27 Connect over WiFi using a WiFi enabled computer or mobile device 29 Connect over Ethernet using a computer connected to the same network 33 C...

Page 8: ...o on or off 80 Change the WiFi mode for a radio 81 Change the MCS index and data rate for a radio 82 Change the channel width for a radio 83 Change the output power for a radio 85 Change the guard interval for a radio 86 Change the channel for a radio 87 Manage Quality of Service for a WiFi radio 88 Chapter 4 Manage the Advanced WiFi and Radio Features Manage the advanced radio features 91 Manage ...

Page 9: ...agement VLAN 138 AP mode Set the 802 1Q VLAN and management VLAN 138 Router mode Set the 802 1Q VLAN and management VLAN 140 AP mode only Specify an existing domain name 142 Enable or disable Spanning Tree Protocol 143 Enable or disable the network integrity check function 144 Enable or disable IGMP snooping 145 Enable or disable Ethernet LLDP 146 Enable or disable UPnP 147 Router mode only Manage...

Page 10: ...le Secure Shell 183 Enable SNMP and manage the SNMP settings 184 Manage the LEDs 186 Chapter 8 Monitor the Access Point and the Network View the access point Internet IP and system settings 189 View the WiFi radio settings 192 View unknown and known neighbor access points 195 View client distribution connected clients and client trends 197 View WiFi and WAN traffic traffic statistics and channel u...

Page 11: ...re not saved 224 You enter the wrong password and can no longer log in to the access point 224 Troubleshoot your network using the ping utility 225 Test the LAN path to your access point 225 Test the path from your computer to a remote device 226 Appendix A Factory Default Settings and Technical Specifications Factory default settings 228 Technical specifications 231 11 Insight Managed Smart Cloud...

Page 12: ...ing sections About NETGEAR Insight Related documentation Unpack the access point Top panel with LEDs Back panel Product label Safety instructions and warnings Note For more information about the topics that are covered in this manual visit the support website at netgear com support Note Firmware updates with new features and bug fixes are made available from time to time at netgear com support dow...

Page 13: ...in the local browser interface However using the local browser interface you can still manage the settings for certain features that are not yet supported in Insight For more information visit the NETGEAR knowledge base at netgear com support product insight aspx and search for What is Hybrid Management Mode Related documentation The following related documentation is available at netgear com supp...

Page 14: ...an IP address from a DHCP server Power LED If the serial number begins with 4W8 or 4W9 If the serial number begins with 5B4 or 5B5 Insight LED Off The access point functions either in standalone mode or in Insight mode but is not connected to the Insight cloud based management platform Solid green The access point functions in Insight mode and is connected to the Insight cloud based management pla...

Page 15: ...ctivity is detected on the LAN port Solid green A 1000 Mbps Ethernet link is detected on the LAN port Blinking green 1000 Mbps traffic activity is detected on the LAN port LAN LED Off The 2 4 GHz WiFi radio is off Solid green The 2 4 GHz WiFi radio is on Solid blue One or more WLAN clients are connected to the 2 4 GHz WiFi radio Blinking blue Traffic is detected on the 2 4 GHz WiFi radio 2 4G WLAN...

Page 16: ...d connect the access point to your network or Internet modem on page 22 Note The Reset button is located on the left side panel of the access point Press the Reset button for about 2 seconds to reboot the access point or for more than 10 seconds to reset the access point to factory default settings If you added the access point to a NETGEAR Insight network location you must first use the Insight a...

Page 17: ... be covered by NETGEAR s warranty to the extent permissible by applicable law Observe and follow service markings Do not service any product except as explained in your system documentation Some devices should never be opened If applicable to your device opening or removing covers that are marked with the triangular symbol with a lightning bolt can expose you to electrical shock We recommend that ...

Page 18: ...To avoid damaging your system if your device uses a power supply with a voltage selector be sure that the selector is set to match the power at your location 115V 60 Hz in most of North and South America and some Far Eastern countries such as South Korea and Taiwan 100V 50 Hz in eastern Japan and 100V 60 Hz in western Japan 230V 50 Hz in most of Europe the Middle East and the Far East Be sure that...

Page 19: ...ings Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip To help protect your system from sudden transient increases and decreases in electrical power use a surge suppressor line conditioner or uninterruptible power supply UPS Position system cables power...

Page 20: ...how you can install and access the access point in your network The chapter contains the following sections Position your access point Set up and connect the access point to your network or Internet modem Connect to the access point for initial configuration Log in to the access point after initial setup 20 ...

Page 21: ...access point according to the following guidelines Place your access point near the center of the area where your computers and other devices operate and within line of sight to your WiFi devices If you use a power adapter make sure that the access point is within reach of an AC power outlet Place the access point in an elevated location minimizing the number walls and ceilings between the access ...

Page 22: ...et up the access point with a connection to your Internet modem To set up your access point follow the procedure in one of these sections Set up the access point with a PoE network connection You can connect the access point to a Power over Ethernet PoE switch in your network The switch must be connected to a network router that is connected to the Internet If you use a PoE connection the access p...

Page 23: ...network connection You can connect the access point to a regular switch that is a non Power over Ethernet switch in your network The switch must be connected to a network router that is connected to the Internet If you use a regular switch the access point requires a power adapter which is an option that you can purchase In the access point default AP mode WiFi clients can connect to the access po...

Page 24: ...nd access your network and the Internet and you also can attach a switch to the access point to enhance your network Because you cannot use Power over Ethernet PoE in this setup the access point requires a power adapter which is an option that you can purchase Figure 7 Set up the access point with a connection to a LAN port on your Internet modem To connect the access point to your Internet modem ...

Page 25: ...mode see Change the system mode to Router mode or AP mode on page 162 Connect to the access point for initial configuration After you set up the access point you can use several methods to connect to it for initial configuration You can connect to the access point by using the NETGEAR Insight app on an iOS or Android mobile device by accessing the Insight Cloud portal or by using the local browser...

Page 26: ...up the access point and perform many other tasks as well IMPORTANT If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud portal the admin password for the access point changes That is the Insight network password for that location replaces the admin password To access the local browser interface you must then enter th...

Page 27: ... address and password for your account and tap LOG IN After you log in to your account the IP address of the access point displays in the device list 6 Write down the access point IP address and save it for later use 7 To use the Insight app to configure and manage the access point tap the access point and follow the prompts to register the access point and add it to an Insight network location Co...

Page 28: ...ord to access the local browser interface until you manually change the admin password on the access point For more information about the Insight Cloud portal and the configuration and management options that are available through the Insight Cloud portal visit insight netgear com and see the NETGEAR knowledge base at netgear com support product insight aspx To connect to the access point over the...

Page 29: ...ng Google Chrome If Google Chrome displays a Your connection is not private message click the ADVANCED link Then click the Proceed to 192 168 1 1 unsafe link in which x x x x represents the IP address of the switch and install a security certificate Apple Safari If Apple Safari displays a This connection is not private message click the Show Details button Then click the visit this website link If...

Page 30: ...P server in your network 4 Write down the IP address of the access point 5 Select the Web browser radio button Note After you save the basic settings that are shown on the page the Day Zero Easy Setup page no longer displays when you log in Instead a login window opens After you log in the Dashboard page displays 6 Enter the settings that are described in the following table User Manual 30 Install...

Page 31: ...name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a hyphen By default the system name is Netgearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address AP Name Enter a new admin password This is t...

Page 32: ...r a new passphrase network key or WiFi password for the WiFi network Passphrase 7 Click the Apply button Your settings are saved and you are disconnected from the access point If you changed the default country the access point restarts 8 Reconnect over WiFi to the access point s WiFi network using the new SSID and passphrase that you just defined on the Day Zero Easy Setup page 9 In the web brows...

Page 33: ...security message and does not let you proceed do one of the following Google Chrome If Google Chrome displays a Your connection is not private message click the ADVANCED link Then click the Proceed to 192 168 1 1 unsafe link in which x x x x represents the IP address of the switch and install a security certificate Apple Safari If Apple Safari displays a This connection is not private message clic...

Page 34: ...button Note After you save the basic settings that are shown on the page the Day Zero Easy Setup page no longer displays when you log in Instead a login window opens After you log in the Dashboard page displays 5 Enter the settings that are described in the following table User Manual 34 Install the Access Point in Your Network and Access It for Initial Configuration Insight Managed Smart Cloud Wi...

Page 35: ...name for the access point The name must contain alphanumeric characters must contain at least one alphabetical character cannot be longer than 15 characters and can contain hyphens but cannot start or end with a hyphen By default the system name is Netgearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address AP Name Enter a new admin password This is t...

Page 36: ...nd WPA2 clients use AES After you complete the setup process you can set up WPA2 Enterprise security with RADIUS servers For more information see Set up an open or secure WiFi network on page 45 Authentication Unless you select Open from the Authentication Type menu enter a new passphrase network key or WiFi password for the WiFi network Passphrase 6 Click the Apply button Your settings are saved ...

Page 37: ...name is admin The password is the one that you just defined on the Day Zero Easy Setup page The user name and password are case sensitive The Dashboard page displays You can now customize the access point settings for your network environment Connect over Ethernet using a directly connected computer If your network does not include a DHCP server or router that functions as a DHCP server you can us...

Page 38: ...ther pop up window opens to let you confirm changes to your certificate trust settings enter your Mac user name and password and click the Update Setting button Mozilla Firefox If Mozilla Firefox displays a Your connection is not secure message click the ADVANCED button Then click the Add Exception button In the pop up window that opens click the Confirm Security Exception button and install a sec...

Page 39: ...ate the access point in a region other than the regions listed in the menu If your country or region is not listed check with your local government agency Country Region From the menu select the time zone for the country and region in which the access point is operating Time Zone By default the DHCP client of the access point allows the access point to receive an IP address from a DHCP server or r...

Page 40: ...ial characters except for quotation marks and a backslash SSID From the menu select one of the following authentication types for the WiFi network Open Authentication is not required and data encryption is not supported This setting does not provide any security and is not appropriate for most situations WPA2 Personal This option allows only WiFi clients that support WPA2 to connect to the SSID Se...

Page 41: ...ccess point we recommend that you enter https rather than http However if you enter http the browser automatically redirects your request to https If you did not yet install the access point s security certificate your browser might display a security message You can either ignore this message or install the security certificate Consider the following examples Google Chrome If Google Chrome displa...

Page 42: ... assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are ...

Page 43: ... glance For more information about the Dashboard page and its various panes see Monitor the Access Point and the Network on page 188 User Manual 43 Install the Access Point in Your Network and Access It for Initial Configuration Insight Managed Smart Cloud Wireless Access Point WAC510 User Manual ...

Page 44: ...ttings see Manage the Advanced WiFi and Radio Features on page 90 Tip If you want to change the settings of the access point s WiFi network use a wired connection to avoid being disconnected when the new WiFi settings take effect The chapter includes the following sections Set up and manage WiFi networks Set up and manage captive portals for WiFi networks Manage the basic radio features 44 ...

Page 45: ...z band and the 5 GHz band This is the SSID that you were required to rename when you logged in to the access point for the first time You can add more SSIDs The access point supports four SSIDs for each radio for a total of eight SSIDs If you enable four SSIDs on both radios the maximum number of SSIDs is reached SSID stands for service set identifier which is the WiFi network name When you create...

Page 46: ...ged the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select and add an SSID 5 Click the button to the l...

Page 47: ...page 151 VLAN ID 7 Specify the WiFi security by selecting an option from the Authentication menu and if applicable by specifying a passphrase in the Passphrase field or selecting an option from the Encryption menu as described in the following table Description Setting An open WiFi network does not provide any security Any WiFi device can join the network We recommend that you do not use an open W...

Page 48: ... provides a secure connection but some older WiFi devices do not detect WPA2 and support only WPA Therefore if your network includes such older devices select TKIP AES security WPA2 Enterprise 8 Optionally disable the WiFi broadcast or set up a WiFi activity schedule by selecting one of the following radio buttons Always ON When you set up an SSID you are creating a new virtual access point VAP By...

Page 49: ...o steer WiFi devices that are dual band capable to the 2 4 GHz or 5 GHz band of the VAP Compared to the 2 4 GHz band generally more channels and bandwidth are available in the 5 GHz band causing less interference and allowing for a better user experience 802 11k RRM and 802 11v WiFi network management affect the network in the following ways 802 11k RRM This feature lets the access point and 802 1...

Page 50: ...e URL tracking for all URLs that are requested by WiFi clients that are connected to the SSID select the Enable radio button For information about how to view the tracked URLs per SSID or per WiFi client see View or download tracked URLs on page 203 URL Tracking Although you could also configure a captive portal a MAC ACL and bandwidth rate limits while you set up a WiFi network these features are...

Page 51: ...network SSID or VAP or any custom WiFi network To view or change the settings of a WiFi network 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but ...

Page 52: ... to connect to your network with its old settings before you changed the settings update the WiFi network selection in your WiFi enabled computer or mobile device to match the current settings for your network Does your WiFi device display as a connected client See View client distribution connected clients and client trends on page 197 If it does it is connected to the network Are you using the c...

Page 53: ...tion see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left the SSID The settings for the selected SSID display 6 Under Schedule select one of the following radio buttons Always ON The WiFi network is e...

Page 54: ...t user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information...

Page 55: ... access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter...

Page 56: ...n the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight ne...

Page 57: ...to automatically select the best access point for initial connection or for roaming 802 11v WiFi network management This feature lets the access point steer its WiFi clients to the 2 4 GHz or 5 GHz band based on the access point s channel load In an environment with multiple access points 802 11v WiFi network management helps WiFi clients that are roaming to select the best access point The access...

Page 58: ...band capable to the 2 4 GHz or 5 GHz band of the VAP 7 Click the Apply button Your settings are saved Change the VLAN ID for a WiFi network If the access point functions in Router mode you can use the VLAN ID to assign a particular DHCP server to the WiFi clients on the SSID see Add a DHCP server for a WiFi network on page 151 By default the VLAN ID for a WiFi network is 1 The VLAN ID for a WiFi n...

Page 59: ... a WiFi network is 1 7 Click the Apply button Your settings are saved Enable or disable PMF for a WiFi network Protected Management Frames PMF according to the 802 11w standard is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes This feature is disabled by default but you can enable it To enable or disable PMF for a ...

Page 60: ...y button Your settings are saved Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients that are connected to a WiFi network SSID or VAP This feature is disabled by default but you can enable it For information about how to view the tracked URLs per SSID or per WiFi client see View or download tracked URLs on page 203 ...

Page 61: ...Apply button Your settings are saved Select a MAC ACL for a WiFi network After you set up one or more local MAC access control lists ACLs also referred to as access lists see Manage local MAC access control lists on page 110 you can select an ACL for use with an SSID You can also set up a RADIUS server see Set up RADIUS servers on page 126 and select the RADIUS MAC ACL You must define the ACL on t...

Page 62: ...network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click th...

Page 63: ... that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the a...

Page 64: ...portal for which the splash page is stored on the access point For each WiFi network you can set up a unique click through captive portal External captive portal A portal that is hosted by an external captive portal vendor You can apply an external captive portal to multiple WiFi networks or you can apply a unique external captive portal to each WiFi network Facebook Wi Fi captive portal A Faceboo...

Page 65: ...ays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed t...

Page 66: ...er must be directed If the Redirect URL check box is cleared a user is directed to a default web page Redirect URL Enter the title that is displayed on the captive portal login page If you do not customize the title the default title displays on the captive portal login page Title Enter a message to the user This message is displayed on the captive portal login page If you do not customize the mes...

Page 67: ...hows an example that is the figure does not show the default captive portal but a customized one 10 Click the Apply button Your settings are saved WiFi clients attempting to connect to the SSID are presented with the captive portal login page Note An HTTPS session is blocked until after the captive portal authentication occurs Set up an external captive portal for a WiFi network An external captiv...

Page 68: ...e that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Andr...

Page 69: ...e Portal radio button 9 Specify the external captive portal settings as described in the following table User Manual 69 Manage the Basic WiFi and Radio Features Insight Managed Smart Cloud Wireless Access Point WAC510 User Manual ...

Page 70: ...ication server The vendor might also require an accounting RADIUS server Specify the following settings for each RADIUS server as directed by the vendor IPv4 Address Enter the IP address of the server The IP address is provided by the vendor Port Enter the port number that is used by the server The IP port number is provided by the vendor By default an authentication server uses port number 1812 a...

Page 71: ... and click the Remove button Remove all URLs Select the Select All check box and click the Remove button Walled Garden 10 Click the Apply button Your settings are saved WiFi clients attempting to connect to the SSID are presented with the captive portal login page Register and configure Facebook Wi Fi for the access point Before you can set up Facebook Wi Fi on the access point so that you can pro...

Page 72: ...or that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic Facebook Wi Fi The Facebook Wi Fi page displays 5 Select the Register with Facebook Wi Fi Yes radio button The capability to register is enabled By default this capability is disabled 6 C...

Page 73: ... saved The name of the selected Facebook business page displays on the Facebook Wi Fi configuration page along with the Change Page button which lets you replace the selected Facebook business page with another one 14 To allow clients that are connected to the Facebook captive portal to establish a secure HTTP HTTPS session before the captive portal authentication occurs select the Allow HTTPS Ena...

Page 74: ...al enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic The page that displays lets you select an SSID 5 Click the button to the left the SSID The settings for the selected SSID display 6 Click the Advanc...

Page 75: ... connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you...

Page 76: ...r a WiFi radio For information about the advanced radio features see Manage the advanced radio features on page 91 Manage the basic settings for the radios The basic WiFi settings for the radios apply to all WiFi networks VAPs or SSIDs You can specify the radio settings for the 2 4 GHz and 5 GHz radios individually For information about the advanced radio settings see Manage the advanced WiFi sett...

Page 77: ...d the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic Wireless Settings 5 Configure the settings as described in the following table The d...

Page 78: ...i modes for the 5 GHz radio 11a 802 11ac 802 11na and 802 11a WiFi clients can connect to the access point However the speed of 802 11ac and 802 11na clients is limited to the maximum speed that is supported by 802 11a about 54 Mbps 11na 802 11ac 802 11na and 802 11a WiFi clients can connect to the access point However the speed of 802 11ac clients is limited to the maximum speed that is supported...

Page 79: ...ments for total radio frequency RF output power in your country Output Power From the menu select the value that protects radio transmissions from interference An Auto guard interval which is the default improves performance but some legacy devices can operate only with a long 800ns guard interval The guard interval and channel width determine the available MCS index and data transmit rates Guard ...

Page 80: ...tup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password ...

Page 81: ...ssword is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App o...

Page 82: ...The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Change the MCS index and data rate for a radio You can change the modulation and coding scheme MCS index and data transmit rate for a radio By default the setting is Best The settings that are available also depend on the selected channel width see Change the channel width for ...

Page 83: ...Click the Apply button A pop up warning window opens 7 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Change the channel width for a radio Use the following guidelines when you determine the channel width for a radio A wider channel improves the performance The 802 11n specification allows a 40 MHz wide ...

Page 84: ... portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Basic Wireless Settings The Wireless Settings page displays 5 From the Channel Width menu select one of the following settings 20 MHz 40 MHz 80 MHz T...

Page 85: ...page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for tha...

Page 86: ...assword The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over...

Page 87: ...window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network locati...

Page 88: ... window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously adde...

Page 89: ...very suitable for applications such as VoIP and streaming media Video The second highest priority queue with low delay Video applications are routed to this queue Best effort The medium priority queue with medium delay Most standard IP applications use this queue Background The low priority queue with high throughput Applications such as FTP that are not time sensitive but require high throughput ...

Page 90: ...ttings see Manage the Basic WiFi and Radio Features on page 44 Tip If you want to change the settings of the access point s WiFi network use a wired connection to avoid being disconnected when the new WiFi settings take effect The chapter includes the following sections Manage the advanced radio features Set a data volume limit for the access point Set up a WiFi bridge between access points 90 ...

Page 91: ...he radios 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access poin...

Page 92: ...he Request to Send RTS threshold The range is from 256 to 2346 The default is 2346 If the packet size is equal to or less than the RTS threshold the radio uses the Carrier Sense Multiple Access with Collision Detection CSMA CD mechanism and the data frame is transmitted immediately after the silence period If the packet size is larger than the RTS threshold the system uses the CSMA with Collision ...

Page 93: ...hich lets the access point automatically adjust the multicast traffic transmission rate Fixed Multicast Rate Move the slider to specify the delivery traffic indication message DTIM interval or the data beacon rate which indicates the beacon delivery traffic indication message period in multiples of beacon intervals This value must be between 1 and 255 The default is 2 DTIM Interval 1 255 Multicast...

Page 94: ... GHz radio 802 11h 6 Click the Apply button A pop up warning window opens 7 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Manage the maximum number of clients for a radio The number of clients that are allowed to associate with a radio affects the reliability and throughput of the WiFi connection A smal...

Page 95: ... the radio The default is 64 WiFi clients for the radio 6 Click the Apply button A pop up warning window opens 7 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Manage the broadcast and multicast settings for a radio Because multicast and broadcast traffic can adversely affect the throughput and latency o...

Page 96: ...n see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration Wireless Advanced The Wireless Settings page displays 5 To change the multicast and broadcast rate limiting settings for a radio under Broadcast Multicast Rate Limiting take one of the following actions in To change the rate limiting sett...

Page 97: ...rk as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password T...

Page 98: ... are allowed up to 90 percent of the utilization rate of the radio 7 Click the Apply button A pop up warning window opens 8 Click the OK button The pop up window closes and your settings are saved The radio or radios restart and WiFi clients might need to reconnect Set a data volume limit for the access point You can set a total monthly data volume limit that applies to all WiFi networks that you ...

Page 99: ...definable percentage of the profile data volume limit for an SSID either the data is dropped for all WiFi clients of the SSID or those WiFi clients are disconnected To set a data volume limit for the access point 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP ...

Page 100: ...a volume limit of 500 GB applies to all SSIDs collectively The default value is 1024 MB 1 GB The maximum that you can enter is 100 TB 100000 GB b Data limit control by From the menu select if the data volume limit applies to downloaded data to uploaded data or to both combined c Reset data limit counters Specify the day and time of the month when the counter is reset and the data volume usage for ...

Page 101: ...e data volume for the SSID might be less than 300 GB if the data consumption on other SSIDs causes the total monthly data volume limit to be reached before the SSID consumes 300 GB c Per Client If you set a percentage for an SSID set a monthly data volume limit that applies to each WiFi client of the SSID by entering the monthly data volume limit in MB per WiFi client Take the total monthly data v...

Page 102: ...e View the data volume consumption on page 208 Set up a WiFi bridge between access points If the access point functions in AP mode you can configure a wireless distribution system WDS that consists of point to point WiFi bridge connections between two access points Each WiFi bridge connection requires a WDS profile for which the settings must match on the access points that make up the bridge WDS ...

Page 103: ...guration page of the local browser interface WiFi repeater The access point functions as the slave and sends all traffic from its local WiFi or wired computers to the WiFi base station the master To configure this mode you must know the MAC address of the base station By default the access point functions in dual band concurrent mode If you enable the WiFi repeater in either radio band the WiFi ba...

Page 104: ...browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup o...

Page 105: ...displayed for your information Enter this MAC address on the remote access point of the WDS connection Local MAC Address The MAC address of the remote WDS radio interface that is the MAC address of the remote radio on which the WDS is established Remote MAC Address By default the selection from the menu is Open in which case authentication and data encryption are not applicable To secure the WDS c...

Page 106: ...shed 11 Verify connectivity across the LANs of both access points If the configuration is set up correctly a computer on any WiFi or wired LAN segment of the access point that functions as the WiFi repeater can connect to the Internet or share files and printers with any other computer or server connected to the access point that functions as the WiFi base station User Manual 106 Manage the Advanc...

Page 107: ...udes the following sections Block specific URLs and keywords for Internet access Manage local MAC access control lists Manage user accounts Manage neighbor AP detection Set up RADIUS servers Note For information about essential WiFi security network authentication and encryption see Set up an open or secure WiFi network on page 45 107 ...

Page 108: ... security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the ac...

Page 109: ...n are blocked For example if you enter and add www google com all web pages in the www google com domain are blocked including for example www google com finance Blocked Keywords To add a keyword entry to the blacklist enter the keyword in the lower field to the left of the lower Add button and click the lower Add button To remove a keyword entry from the blacklist select the check box for the ent...

Page 110: ...e Select a MAC ACL for a WiFi network on page 61 You can apply a MAC ACL to more than one WiFi network The following sections describe how you can manage MAC ACLs Manually set up a MAC access control List Import an existing MAC access control list Manually set up a MAC access control List You can compose up to eight access control lists ACLs that are each based on up to 256 MAC addresses The acces...

Page 111: ...ogin window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network l...

Page 112: ...for the eight MAC ACLs are Management Guest Guest1 Custom Custom 1 Custom 2 Custom 3 and Custom 4 7 Select the ACL Policy Allow or Deny radio button If you select the Allow radio button a WiFi device for which you place the MAC address in the ACL is allowed access to the WiFi network but all other WiFi devices are denied access to the WiFi network If you select the Deny radio button a WiFi device ...

Page 113: ...ou selected the Deny radio button in Step 7 do the following To manually add a device to the Untrusted Stations table enter the MAC address in the format 00 00 00 00 00 00 in the field below the Untrusted Stations table and click the Add button The device is added to the Untrusted Stations table To move a device from the Available Stations table to the Untrusted Stations table select the check box...

Page 114: ...You can apply a MAC ACL to more than one WiFi network To import an existing MAC ACL 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a s...

Page 115: ...ment Guest Guest1 Custom Custom 1 Custom 2 Custom 3 and Custom 4 7 Select the ACL Policy Allow or Deny radio button If you select the Allow radio button a WiFi device for which you import the MAC address into the ACL is allowed access to the WiFi network but all other WiFi devices are denied access to the WiFi network If you select the Deny radio button a WiFi device for which you import the MAC a...

Page 116: ...the device is once again placed in the Available Stations table For an ACL for which you selected the Deny radio button in Step 7 do the following a Replace or merge the MAC addresses in the import list with the MAC addresses in the Untrusted Stations table if any are already in the table by selecting one of the following radio buttons Replace MAC addresses in the Untrusted Stations table are repl...

Page 117: ...escribe how you can manage user accounts Add a user account Change the settings for a user account Remove a user account For information about changing the password for the default admin user account see Change the admin user account password on page 164 Add a user account To add a user account 1 Open a web browser from a computer that is connected to the same network as the access point or direct...

Page 118: ...lay 6 Specify the settings for the new user account User Name Enter a user name Password Enter a password between 8 and 64 characters in length The password must contain at least one uppercase letter one lowercase letter and one number The following special characters are allowed Privilege From the menu select Read Write or Read Only Session Timeout Use the Hours and Minutes fields to specify the ...

Page 119: ...ged the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration System Advanced User Accounts The existing user accounts display 5 To the right of the user accou...

Page 120: ...ou logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard...

Page 121: ...can detect neighbor access points APs and lets you classify them as known APs After you enable neighbor AP detection the access point maintains a list of access points it detects in the area Initially all detected access points are displayed in the Unknown AP List You can manually move access points from the Unknown AP List to the Known AP List By default neighbor access point detection is disable...

Page 122: ... 4GHz or 5GHz 5 Click the button to the left of the radio band The Neighbor AP page displays for the selected radio band 6 Select the Enable Neighbor AP check box 7 Click the Apply button Your settings are saved Neighbor AP detection is now enabled 8 From the Detection Policy menu select the scan method Mild The access point scans for neighbor access points every 15 minutes This is the default set...

Page 123: ...nts once more display in the Unknown AP List 10 Click the Apply button Your settings are saved Import an existing neighbor access point list in the Known AP List You can import a list with MAC addresses of known neighbor access points in the Known AP List The file with MAC addresses must be in the following format Entries in the file must be MAC addresses only in hexadecimal format with each octet...

Page 124: ...ss point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the ...

Page 125: ...he ones in the import list Merge MAC addresses in the Known AP List are merged with the ones in the import list b Click the Browse button and navigate to and select the import file The MAC addresses on the import list are placed in the Known AP List c To remove a MAC address from the Known AP List select the MAC address and click the Delete button When you remove a device from the Known AP List af...

Page 126: ... client MAC address is 00 0a 95 9d 68 16 specify it as 000a959d6816 in the RADIUS server To set up RADIUS servers 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the...

Page 127: ...n or accounting process By default the password is sharedsecret 6 Configure the following authentication settings which apply to all RADIUS server that you set up Reauthentication time Enter the interval in seconds after which the supplicant the WiFi client must be reauthenticated with the RADIUS server The default interval is 3600 seconds 1 hour Enter 0 to disable reauthentication Update Global K...

Page 128: ...ns Disable the DHCP client and configure a LAN or WAN IP address Enable the DHCP client Set the 802 1Q VLAN and management VLAN AP mode only Specify an existing domain name Enable or disable Spanning Tree Protocol Enable or disable the network integrity check function Enable or disable IGMP snooping Enable or disable Ethernet LLDP Enable or disable UPnP Router mode only Manage DHCP servers 128 ...

Page 129: ... see the following sections AP mode Disable the DHCP client and specify a fixed IP address Router mode Disable the DHCP client and specify a fixed WAN IP address Router mode Specify WAN Point to Point Protocol over Ethernet settings AP mode Disable the DHCP client and specify a fixed IP address To disable the DHCP client and specify a fixed IP address if the access point functions in AP mode 1 Ope...

Page 130: ...ct the Disable radio button 6 Specify the settings that are described in the following table Description Setting IP address in the range that is used by your LAN IP Address The subnet mask must be compatible with your LAN The subnet mask is usually 255 255 255 0 Subnet Mask IP address of the gateway on your LAN Gateway IP address of the primary Domain Name System DNS server on your LAN Primary DNS...

Page 131: ...ty message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access po...

Page 132: ...our Internet modem Primary DNS IP address of the secondary DNS server that is used by your Internet modem or leave this field blank Secondary DNS 7 Click the Apply button Your settings are saved The access point restarts with the new IP settings and establishes a connection with your ISP This process might take a while Router mode Specify WAN Point to Point Protocol over Ethernet settings To confi...

Page 133: ... is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGE...

Page 134: ... manual connection mode all other fields are automatically populated when the access point obtains an IP address from your ISP That is the ISP assigns the IP address and all other all related PPPoE settings However the WAN Interface field is fixed at WAN Ethernet Port 7 Click the Apply button Your settings are saved If you specified an automatic connection mode the access point establishes a PPPoE...

Page 135: ...rom a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41...

Page 136: ... enable the DHCP client of the access point if the access point functions in Router mode the access point can automatically obtain an IP address from your ISP This is the default setting if the access point functions in Router mode To enable the DHCP client if the access point functions in Router mode 1 Open a web browser from a computer that is connected to the same network as the access point or...

Page 137: ...on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration IP WAN The page that displays lets you specify the WAN settings 5 From the WAN Interface Type menu select Dynamic Note All fields are automatically populated when the access point obtains an IP address from your Internet service provider ISP That is the ISP assigns the IP address and all oth...

Page 138: ...eceive an 802 1Q header If a port is a member of a single VLAN its traffic can be untagged The following sections describe how you can set up the 802 1Q VLAN and management VLAN AP mode Set the 802 1Q VLAN and management VLAN Router mode Set the 802 1Q VLAN and management VLAN AP mode Set the 802 1Q VLAN and management VLAN To set the 802 1Q VLAN and management VLAN when the access point functions...

Page 139: ...nds untagged frames from its Ethernet interface Incoming untagged frames are assigned to the untagged VLAN By default the untagged VLAN is VLAN 1 but you can enter another VLAN ID in the field if that VLAN ID is supported on your network Tagged VLAN Clear the Untagged VLAN check box only if the hubs and switches on your LAN support the 802 1Q VLAN protocol The access point tags all frames that it ...

Page 140: ...gin window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network lo...

Page 141: ...l frames that it sends from its Ethernet interface Only the incoming frames that are tagged with known VLAN IDs are accepted Similarly change the ID for the untagged VLAN only if the hubs and switches on your LAN support the 802 1Q VLAN protocol and the new VLAN ID is supported on your network 6 To change the VLAN ID for the management VLAN enter another VLAN ID in the Management VLAN field By def...

Page 142: ...connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you ...

Page 143: ...mend that you enable STP To enable or disable Spanning Tree Protocol 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message...

Page 144: ...he network integrity check function The network integrity check function enables the access point to validate whether the upstream link is active before the access point allows WiFi associations Make sure that the default gateway is configured correctly By default the network integrity check function is disabled To enable or disable the network integrity check function 1 Open a web browser from a ...

Page 145: ...GMP snooping allows IP multicast packets to be transmitted only to the members of a corresponding multicast group Enabling IGMP snooping prevents flooding of multicast traffic to all the ports in a broadcast domain By default IGMP snooping is disabled on the access point To enable or disable IGMP snooping 1 Open a web browser from a computer that is connected to the same network as the access poin...

Page 146: ...r example LLDP lets network devices such as switches and management devices discover the access point in a network LLDP can also detect if the access point receives power through PoE By default LLDP is enabled To enable or disable the LLDP 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi...

Page 147: ...he Apply button Your settings are saved Enable or disable UPnP Universal Plug and Play UPnP lets the access point be discovered by other devices in the network that support UPnP UPnP is enabled by default To enable or disable UPnP 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connecti...

Page 148: ...to Router mode or AP mode on page 162 you can add up to seven Dynamic Host Configuration Protocol DHCP servers in addition to the default DHCP server The access point can support a total of eight DHCP servers Each DHCP server can issue IP addresses from a unique address pool to the clients of a WiFi network with a unique VLAN ID Each DHCP server corresponds to a unique VLAN ID The access point del...

Page 149: ...point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you pr...

Page 150: ...on Setting Enter the starting IP address of the DHCP IP address range By default the address is 192 160 0 2 Starting Address Enter the ending IP address of the DHCP IP address range By default the address is 192 168 0 50 Ending Address Enter the subnet mask that is used for all IP addresses in the DHCP IP address range By default the mask is 255 255 255 0 Subnet Mask The IP address of the gateway ...

Page 151: ...stem mode of the access point is Router mode see Change the system mode to Router mode or AP mode on page 162 If it is the default DHCP server of the access point is enabled and you can also add up to seven additional DHCP servers for WiFi clients only IMPORTANT You can add an additional DHCP server only after you set up a WiFi network with a unique VLAN ID that is not yet serviced by an existing ...

Page 152: ...nfiguration IP LAN DHCP Server Settings If you did not yet add any DHCP servers only Add Server displays 5 Click the button to the left of Add Server Servers that you add are designated Server 2 through Server 7 By default the Enable radio button is selected 6 Specify the settings that are described in the following table Description Setting From the VLAN ID menu select the VLAN ID for the WiFi ne...

Page 153: ...e Lease 7 Click the Apply button Your settings are saved 8 To view the SSIDs to which the DHCP server is assigned click the SSID link just below the VLANID field at the top of the page View or change the settings for a DHCP server The information in this section applies only when the system mode of the access point is Router mode see Change the system mode to Router mode or AP mode on page 162 If ...

Page 154: ... 26 The Dashboard page displays 4 Select Management Configuration IP LAN DHCP Server Settings 5 Click the button to the left the DHCP server The settings for the selected DHCP server display 6 Change the settings for the DHCP server as needed For detailed descriptions of the settings see Add a DHCP server for a WiFi network on page 151 7 If you made changes click the Apply button Your settings are...

Page 155: ...int to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration IP LAN DHCP Server Settings 5 Click the button ...

Page 156: ... admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR ...

Page 157: ...e Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Clo...

Page 158: ...th ID 1 displays To disable inter VLAN routing select the Disable radio button 6 Click the Apply button Your settings are saved User Manual 158 Manage the Local Area Network and IP Settings Insight Managed Smart Cloud Wireless Access Point WAC510 User Manual ...

Page 159: ...r region of operation Change the admin user account password Change the system name Specify a custom NTP server Set the time zone Manage the syslog settings Manage the firmware of the access point Manage the configuration file of the access point Reboot the access point from the local browser interface Schedule the access point to reboot Return the access point to its factory default settings Enab...

Page 160: ...epresents the last six hexadecimal digits of the access point s MAC address The MAC address is listed on the product label The default WiFi passphrase is sharedsecret Web browser mode You can manage the access point locally from a WiFi or wired device through the local browser interface In this mode the access point functions as a standalone device and is not connected to the Insight cloud based m...

Page 161: ...de page displays 5 Select one of the following radio buttons NETGEAR Insight The access point functions in NETGEAR Insight management mode Web browser The access point functions in Web browser management mode WARNING When you change the management mode from Web browser mode to NETGEAR Insight mode the configuration of the access point is reset cleared with the exception of the IP address access po...

Page 162: ... see Set up and connect the access point to your network or Internet modem on page 22 To change the system mode to AP mode or Router mode 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your b...

Page 163: ...ess point operates Note the following Make sure that the country is set to the location where the device is operating You are responsible for complying with the local regional and national regulations that are set for channels power levels and frequency ranges It might not be legal to operate the access point in a country or region other than those listed in the menu If your country or region is n...

Page 164: ...on menu 6 Click the Apply button A pop up warning window opens 7 Click the OK button The pop up window closes and your settings are saved The access point restarts with the default WiFi settings that are specific to the selected country or region Change the admin user account password This admin user account password is the password that you must use to log in to the local browser interface of the...

Page 165: ...onfiguration System Advanced User Accounts The page that displays lets you change the user accounts 5 Next to admin in the Password field enter the new password 6 In the Confirm Password field enter the same new password Note You cannot change the user name The name must remain admin 7 Click the Apply button Your settings are saved The next time that you log in to the access point you must use the...

Page 166: ... Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration System Basic The General page displays the basic system settings 5 Enter a new name in the System Name field Using the following ...

Page 167: ...point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Configuration System Basic Time By default the Enable radio...

Page 168: ... is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password a...

Page 169: ...n window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously add...

Page 170: ...rom the server and upgrade the firmware of the access point The following sections describe the firmware management methods Check for new firmware and upgrade the access point Manually download firmware and upgrade the access point Revert to the backup firmware Use an SFTP server to upgrade the access point Check for new firmware and upgrade the access point For you to check for new firmware the a...

Page 171: ...rmware downloads it and begins the upgrade WARNING To avoid the risk of corrupting the firmware do not interrupt the upgrade For example do not close the browser click a link or load a new page Do not turn off the access point Wait until the access point finishes restarting and the Power LED remains solid green The firmware upgrade process takes several minutes When the upgrade is complete your ac...

Page 172: ...o the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 4 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 5 Enter the access point user nam...

Page 173: ...e is saved as backup firmware so that you can revert to it IMPORTANT When you revert to the backup firmware and the backup firmware is an earlier version than the firmware version that is running on the access point the configuration of the access point is reset cleared with the exception of the IP address access point name and password for the local browser interface The access point restarts and...

Page 174: ... up warning window opens IMPORTANT When you revert to the backup firmware the configuration of the access point is reset cleared with the exception of the IP address access point name and password for the local browser interface The access point restarts and broadcasts SSID Netgearxxxxxx in which xxxxxx represents the last six hexadecimal digits of the access point s MAC address The MAC address is...

Page 175: ...ecified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile de...

Page 176: ...f the current configuration settings If necessary you can restore the configuration settings later Note The backup file is saved in a binary format so that it is protected and cannot be opened by a regular application To back up the access point s configuration settings 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point th...

Page 177: ...he access point or enter a unique password The password must be 8 to 63 characters in length and must contain at least one uppercase letter one lowercase letter and one number The following special characters are allowed Tip We recommend that you write down the password because you must enter it again if you restore the configuration from the backup file 7 Choose a location to store the file on yo...

Page 178: ...etwork location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Maintenance Upgrade Backup and Restore Restore Settings The Restore Settings page displ...

Page 179: ...hrough an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you s...

Page 180: ...d see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight...

Page 181: ...er if you cannot find the IP address or lost the password to access the access point you must use the Reset button After you reset the access point to factory default settings the user name is admin the password is password the LAN IP address is 192 168 0 100 the access point s DHCP client is enabled the default SSID is shown in the format NETGEARxxxxxx SETUP and the default password for WiFi acce...

Page 182: ...re do not interrupt the reset Do not turn off the access point Wait until the access point finishes restarting and the Power LED turns solid green Use the local browser interface to reset the access point You can use the access point s local browser interface to return the access point to its factory default settings CAUTION This process erases all settings that you configured in the access point ...

Page 183: ...tore Defaults button A pop up warning window opens 6 Click the Restore button The pop up windows closes and the configuration is reset to factory default settings When the reset is complete the access point reboots This process takes about two minutes WARNING To avoid the risk of corrupting the firmware do not interrupt the reset For example do not close the browser click a link or load a new page...

Page 184: ...ance Remote Management The Remote Management page displays 5 Select one of the following Secure Shell SSH radio buttons Enable SSH is enabled This is the default setting Disable SSH is disabled 6 Click the Apply button Your settings are saved Enable SNMP and manage the SNMP settings You can access the access point over a Simple Network Management Protocol SNMP connection which allows SNMP network ...

Page 185: ...ng the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Maintenance Remote Management The Remote Management page displays 5 Select the SNMP Enable radio button By default SNMP is disabled 6 Specify the following settings Read Only Community Name The community string that allows the SNMP manager to read the access point s MIB objects ...

Page 186: ...but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and ...

Page 187: ...led Enable Power LED All LEDs are disabled except for the Power LED 6 Click the Apply button Your settings are saved User Manual 187 Manage and Maintain the Access Point Insight Managed Smart Cloud Wireless Access Point WAC510 User Manual ...

Page 188: ...t IP and system settings View the WiFi radio settings View unknown and known neighbor access points View client distribution connected clients and client trends View WiFi and WAN traffic traffic statistics and channel utilization View or download tracked URLs View save download or clear the logs View a WiFi bridge connection View the data volume consumption View alarms and notifications 188 ...

Page 189: ...password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App...

Page 190: ...nformation pane The System Information pane is in the center at the top of the Dashboard if the page width on your device is sufficient otherwise it might be elsewhere and displays the following System name of the access point and country or region of operation Ethernet MAC address The serial number Device uptime Firmware version The date and time that the access point itself or someone manually l...

Page 191: ...ame The access point NetBIOS name System Mode The access point system mode AP or Router Wan MAC Address The MAC address of the WAN Ethernet port of the access point Lan MAC Address The MAC address of the LAN Ethernet port of the access point Wireless MAC Address for 2 4 GHz The MAC address of 2 4 GHz WiFi interface radio of the access point Wireless MAC Address for 5 GHz The MAC address of 5 GHz W...

Page 192: ...displayed IPv4 Address The IPv4 address of the access point Subnet Mask The subnet mask of the access point Default Gateway The default gateway for the access point DHCP Client The status of DHCP client Enabled or Disabled Wireless Settings section The following settings are displayed with separate columns for the 2 4 GHz and 5 GHz radios Wireless Mode The operating WiFi mode of the radio Channel ...

Page 193: ...ion see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Locate the Radio Information pane at the top right corner of the Dashboard page if the page width on your device is sufficient otherwise it might be elsewhere The following settings are displayed Radio status If the 2 4 GHz or 5 GHz icon is displayed as gray the radio...

Page 194: ...reless MAC Address for 5 GHz The MAC address of 5 GHz WiFi interface radio of the access point Ethernet LLDP The status of Ethernet LLDP feature Enabled or Disabled LLDP Neighbour The name of the LLDP neighbour if any Country Region The country or region in which the access point operates or for which the access point is licensed Current Firmware Version The version of the firmware that is running...

Page 195: ...ency The channel and frequency that are used by the radio View unknown and known neighbor access points If you enabled neighbor access point AP detection see Manage neighbor AP detection on page 120 you can view the unknown access points in the Unknown AP list and the known access points in the Known AP list To view the detected neighbor access points 1 Open a web browser from a computer that is c...

Page 196: ...OS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Monitoring Neighbor AP At the top of the page for each radio band the page states the total number of unknown access points 5 To display the most recent unknown access points click the Refresh button 6 To view the Known AP list click the Known AP tab At the top of the page for each radio band the page states the...

Page 197: ...the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For m...

Page 198: ...ess and SSID WiFi clients only for the client You can also view more information including very detailed information see Step 11 8 To view trends about clients scroll down to the Hours Trend pane The Hours Trend pane shows a graph with the number of clients the traffic in MB or the channel utilization over a period that you can select The previous figure shows the trend for the last 48 hours By de...

Page 199: ...For information about wired clients see Step 13 For each radio the page displays the number of connected clients and the maximum number of supported clients For each radio and each WiFi client the page displays the SSID MAC address IP address host name operating system OS and WiFi mode User Manual 199 Monitor the Access Point and the Network Insight Managed Smart Cloud Wireless Access Point WAC510...

Page 200: ...f traffic transmission of the client Rx Rate The rate of traffic reception of the client RSSI The RSSI threshold value of the client Tx Bytes The number of bytes that the client transmitted Rx Bytes The number of bytes that the client received State The QoS state of the connection Type The type of WiFi security that is used for the connection Device Type The type of device that the client is Mode ...

Page 201: ...in window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network loc...

Page 202: ... 5 GHz radio click the 5 GHz button c To view more information point to a bar 7 To change the period over which information is filtered and displayed select the number of recent hours from the menu to the right of the buttons 8 To view traffic statistics select Management Monitoring Statistics The page displays the network traffic statistics for both the WiFi and wired Ethernet interfaces of the a...

Page 203: ... displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and man...

Page 204: ...formation by WiFi client do the following a From the menu select Client The table shows the MAC addresses of the WiFi clients each with the client host name and the first URL of the list of URLs that the client accessed b To view all URLs that a WiFi client accessed click the link to the right of the first URL A pop up window opens and displays all URLs that the WiFi client accessed c Click the Cl...

Page 205: ...oad or clear the logs You can view and manage the activity logs of the access point You can also download a detailed log file Note If the access point functions in the NETGEAR Insight management mode you can also view and manage the cloud activity logs which show the connection of the access point to the Insight cloud based management platform If the access point functions in the NETGEAR Insight m...

Page 206: ...ght network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Select Management Monitoring Logs The page shows the following information for each log entry Date and time The date and time that the entry was logged Action The action that occurred such as whether a WLAN conne...

Page 207: ... bridge connection 1 Open a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the ac...

Page 208: ...on 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is the one that you specified the first time that you logged i...

Page 209: ...window opens and for each SSID displays details in a graphic b Click the X in the upper right corner The pop up window closes 6 To display the most recent information click the Refresh button View alarms and notifications You can view the alarms and notifications from any access point page The following procedure describes how you can view them from the Dashboard page To view the alarms and notifi...

Page 210: ...e Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device on page 26 The Dashboard page displays 4 Locate the alarm bell icon at the top right of the page The icon shows a number indicating the total number of new alarms and notifications since the last time that you viewed alarms and notifications 5 Cli...

Page 211: ...d Ethernet packets Perform a ping test Check the Internet speed Quick tips for troubleshooting Troubleshoot with the LEDs Troubleshoot the WiFi connectivity Troubleshoot Internet browsing You cannot log in to the access point over a LAN connection Changes are not saved You enter the wrong password and can no longer log in to the access point Troubleshoot your network using the ping utility 211 ...

Page 212: ...the access point through an Ethernet cable or WiFi connection 2 Enter the IP address that is assigned to the access point A login window opens If your browser does not open the login window but displays a security message and does not let you proceed see Log in to the access point after initial setup on page 41 3 Enter the access point user name and password The user name is admin The password is ...

Page 213: ...s from 64 to 4096 KB The default is 64 KB Max Capture File Size 64 4096 KB To enable the access point to capture packets in promiscuous mode select the Enable check box By default promiscuous mode is disabled In promiscuous mode the radio or radios receive all traffic on the channel including traffic that is not destined for the access point While the radio or radios are operating in promiscuous m...

Page 214: ...op button 8 To download the file with captured packets do the following a Click the Download button b Follow the directions of your browser to save the file to your computer 9 To display the latest information on the page click the Refresh button Perform a ping test You can ping the IP address of a device or network location from the access point and view the results of the ping test To perform a ...

Page 215: ...cribed in the following table Description Setting The number of pings that the access point must send The default number is 16 Ping Count The size of each ping packet The default size is 64 bytes Packet Size in Bytes The interval between pings The default interval is 1 second Ping Interval in sec The period after which a ping times out The default period is 60 seconds Ping Timeout in sec The IP ad...

Page 216: ...ied the first time that you logged in The user name and password are case sensitive If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal enter the Insight network password for that location For more information see Connect over WiFi using the NETGEAR Insight App on an iOS or Android mobile device...

Page 217: ...e Connect to the access point for initial configuration on page 25 Make sure that your WiFi device supports the security that you are using for your WiFi network WPA2 Personal or WPA2 Personal Mixed For more information see View or change the settings of a WiFi network on page 51 Make sure that your WiFi device is not too far from the access point or too close To see if the signal strength improve...

Page 218: ...ify the following The WAN PoE LED lights solid amber or solid green The Insight LED lights solid blue or solid green see Top panel with LEDs on page 14 The 2 4G WLAN LED 5G WLAN LED or both LEDs light solid green or solid blue or blink blue unless one or both WiFi radios are turned off If a LAN device is connected to the LAN port the LAN LED lights solid amber or solid green You can use the LEDs f...

Page 219: ...e that you are using the NETGEAR 12V 2 5A power adapter for this product If the error persists a hardware problem might exist For recovery instructions or help with a hardware problem contact technical support at netgear com support Power LED remains solid amber When you turn on the power to the access point the Power LED lights solid amber temporarily and then turns solid green indicating that th...

Page 220: ...ess point is connected to a PoE switch non PoE switch or Internet modem and the WAN PoE LED lights amber or green but the Insight LED is off the access point functions either in the PC Web browser mode or in the NETGEAR Insight App mode but is not connected to the Insight cloud based management platform If the access point functions in the PC Web browser mode the Insight LED is off This is normal ...

Page 221: ... instructions or help with a hardware problem contact technical support at netgear com support WAN PoE LED or LAN LED is off while a device is connected When a powered on network device such as a PoE switch non PoE switch or Internet modem is connected to the WAN PoE port of the access point the WAN PoE LED lights amber or green depending on the speed of the connection Similarly when a network dev...

Page 222: ...tion about the SSID broadcast see Set up and manage WiFi networks on page 45 Does your WiFi device support the security that you are using for your WiFi network WPA2 Personal or WPA2 Personal Mixed For more information see Set up and manage WiFi networks on page 45 Tip If you want to change the WiFi settings of the access point s network use a wired connection to avoid being disconnected when the ...

Page 223: ...ddress when you connected the access point to network or Internet modem see Disable the DHCP client and configure a LAN or WAN IP address on page 129 change the IP address and subnet mask on your computer to so that the IP addresses of your computer and the access point are in the same IP subnet If your access point s IP address was changed for example the DHCP server in your network issued an IP ...

Page 224: ...o the access point is blocked for five minutes The blockage period depends on the number of failed login attempts During the blockage period any attempts to log in to the access point are ignored even if you enter the correct password You must wait until the blockage is lifted and then you get a single opportunity to enter the correct password If you enter the wrong password again the blockage per...

Page 225: ... that sends an echo request packet to the designated device The device then responds with an echo reply You can easily troubleshoot a network using the ping utility in your computer or workstation Test the LAN path to your access point You can ping the access point from your computer to verify that the LAN path to your access point is set up correctly To ping the access point from a Windows based ...

Page 226: ...th works correctly test the path from your computer to a remote device To test the path from your computer to a remote device 1 From the Windows toolbar click the Start button and select Run 2 In the field provided enter ping n 10 IP address IP address is the IP address of a remote device such as a remote DNS server If the path is functioning correctly replies as described in Test the LAN path to ...

Page 227: ...A Factory Default Settings and Technical Specifications This appendix includes the following sections Factory default settings Technical specifications 227 ...

Page 228: ...m settings AP mode By default Router mode is disabled including NAT and the DHCP server function Operating mode Enabled so that the access point receives an IP address from a DHCP server or router in the network DHCP client Enabled NTP client Disabled Spanning Tree Protocol Disabled Network integrity check Untagged VLAN with VLAN ID 1 802 1Q VLAN VLAN ID 1 Management VLAN Disabled Syslog Enabled E...

Page 229: ...ch is WPA2 PSK Network authentication AES Data encryption sharedsecret Passphrase Disabled 802 11w PMF Disabled URL tracking None assigned MAC ACL None Rate limit None Captive portal Basic WiFi settings for all WiFi networks SSIDs or VAPs Both the 2 4 GHz radio and the 5 GHz radio are enabled Radios 2 4 GHz radio 11ng mode which also supports 11b and 11bg 5 GHz radio 11ac mode which also support 1...

Page 230: ...abled with a limit of 50 packets per second Broadcast multicast rate limiting Auto Fixed multicast rate Enabled for the 5 GHz radio nonconfigurable for the 2 4 GHz radio MU MIMO Disabled for the 5 GHz radio nonconfigurable for the 2 4 GHz radio 802 11h Disabled Load balancing between radios None Data volume limit None configured Wireless bridge General security None URL filtering None configured R...

Page 231: ...clients IEEE 802 11ac Wave 2 standard WiFi Multimedia Prioritization WMM Wireless distribution system WDS WiFi standards WPA2 Personal WPA2 Personal Mixed and WPA2 Enterprise 802 11 security 2 4 GHz band US and Canada 2 412 2 462 GHz Europe 2 412 2 472 GHz Australia 2 412 2 472 GHz Japan 2 412 2 472 GHz 5 GHz band US and Canada 5 18 5 24 5 745 5 825 GHz Europe 5 18 5 24 GHz and DFS 5 25 5 35 5 50 ...

Page 232: ...CFR FCC Part 15 Subpart C Section 15 247 47 CFR FCC Part 15 Subpart E Section 15 407 FCC Part 2 Section 2 1091 KDB 447498 D03 Regulatory compliance US 47 CFR FCC Part 15 Subpart B Class B ICES 003 2016 Issue 6 Class B Canada RSS 247 Issue 1 2015 05 Canada RSS Gen Issue 4 2014 11 Regulatory compliance Canada EN 55032 2012 AC 2013 CISPR 32 2012 EN 61000 3 2 2014 EN 61000 3 3 2013 EN 55024 2010 EN 30...