Netgear Business Central User Manual
Business Central
Wireless Manager 2.1
Application
User Manual
December 2017
202-11633-03
350 E. Plumeria Drive
San Jose, CA 95134
USA
Business Central Wireless Manager 2.1 Application
Support
Thank you for purchasing this NETGEAR product.You can visit www.netgear.com/support to register your
product, get help, access the latest downloads and user manuals , and join our comm unity.We recommend that
you use only official NETGEAR support resources.
Trademarks
© NETGEAR, Inc., NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. An y non-NETGEAR
trademarks are used for reference purposes only.
Revision History
Publication
Part Number
202-11633-03
Date
December
2017
CommentsPublish
We added Add a Captive Portal for Facebook Wi-Fi Access to a WiFi Network
on page 59.
We added the following new features:July 2017202-11633-02
• Support for captive portals that can provide paid-for access through vouchers
(see Add a Captive Portal for Voucher Access to a WiFi Network on page
56).This new feature provides the following capabilities:
- Capability to generate vouchers with a unique code to deploy paid-for
guest WiFi service (see Sell, Generate, and Print a Voucher on page
141).
- Capability to monitor the status of sold vouchers (see View the Status of
Vouchers and Download All Vouchers on page 144).
- Capability to invite clerk collaborators who can sell vouchers (see Invite
a Manager, Customer, or Clerk to an Account on page 95).
• Fast roaming (802.11r with 802.11k) for WiFi networks that are carried by
802.11ac access points (see Enable Fast Roaming for a WiFi Network on
page 63).
• Load balancing for a location with the option to specify the maximum number
of clients that are allowed to connect to one type of access point model (see
Manage Load Balancing for a Location on page 38).
• Enhanced Auto RF management with the option to select individual corporate
channels (see Run or Schedule Automatic Radio Frequency Management
for a Location on page 36).
• Registration of a NETGEAR device while adding the de vice to a location (see
Add an Access Point to a Location on page 31 or to inventory (see Add a
Device to Inventory Without Deploying It on page 79).
• Capability to add an access point to inventory without deploying it to a location
(see Add a Device to Inventory Without Deploying It on page 79).
2
Business Central Wireless Manager 2.1 Application
Publication
Part Number
CommentsPublish
Date
(Continued)July 2017202-11633-02
(Continued)(Continued)
• Capability to change the management VLAN ID for an access point (see
Change the Management VLAN for an Access Point on page 74).
• Enhanced device firmware upgrade management and status view with the
following new capabilities:
- Capability to let upgrades occur automatically when a new major firmware
release is available (see Schedule to Upgrade Devices at a Location to
the Latest Firmware Version on page 42).
- Capability to select beta firmware for automatic upgrades (see Schedule
to Upgrade Devices at a Location to the Latest Firmware V ersion on page
42).
• Improved alarm categorization and alarm notification (see View Alarms for a
Device, Claim Alarms, and Resolve Alarms on page 131).
• Enhanced account management that restricts access of an application user
with a customer role to read-only (see Invite a Manager, Customer, or Clerk
to an Account on page 95).
• Support for up to six custom fields for the splash page of a captive portal for
free access (see Add a Captive P ortal for Free Access to a WiFi Network on
page 53).
First publication.March 2016202-11633-01
3
Contents
Chapter 1 Introduction to the Business Central Wireless Manager 2.1
Business Central Wireless Manager 2.1 Application Concepts.............................8
System Architecture Concepts...............................................................................8
Service Location Concepts...............................................................................8
Automatic Network Provisioning Concepts.......................................................9
Key Functions......................................................................................................10
Provisioning Functions....................................................................................10
Configuring and Managing Functions.............................................................10
Monitoring Functions.......................................................................................11
Account Management Functions.....................................................................11
Application Roles.................................................................................................12
Plan a Location With WiFi Networks and Hotspots..............................................12
Determine the Location Requirements............................................................13
Determine the Management VLAN.................................................................13
Plan the Client Authentication and Data Encryption........................................13
Plan the Hotspots With Free Access and Paid-For Access.............................14
Other Planning Considerations.......................................................................14
Compatible NETGEAR WiFi Access Points.........................................................16
Definitions of Access Point Terms........................................................................17
Location Functions.....................................................................................10
WiFi Network Functions..............................................................................11
Access Point Functions..............................................................................11
Chapter 2 Get Started With Cloud Management
Add Your First Location........................................................................................19
Add a First WiFi Network to a Location................................................................20
Add a First Access Point to a Location................................................................23
Chapter 3 Manage Locations
Add a Location.....................................................................................................27
Add a WiFi Network to a Location........................................................................28
Add an Access Point to a Location......................................................................31
Change the Basic Settings for a Location............................................................33
Manage the Radio and Antenna Settings for a Location......................................33
Run or Schedule Automatic Radio Frequency Management for a Location........36
Manage Load Balancing for a Location................................................................38
Upgrade Firmware on Devices at a Location.......................................................40
Upgrade Devices at a Location to a Specific Firmware Version......................40
Schedule to Upgrade Devices at a Location to the Latest Firmware Version...42
Reboot a Location................................................................................................44
Change the Device Credentials for a Location.....................................................45
Remove a Location..............................................................................................46
4
Business Central Wireless Manager 2.1 Application
Chapter 4 Manage WiFi Networks
Change the Broadcast, Advertisement, and VLAN Settings f or a WiFi Netw ork...48
Change the Authentication and Encryption for a WiFi Networ k...........................49
Add a Captive Portal for Free or Paid-For Access to a WiFi Network..................52
Add a Captive Portal for Free Access to a WiFi Network................................53
Add a Captive Portal for Voucher Access to a WiFi Network...........................56
Add a Captive Portal for Facebook Wi-Fi Access to a WiFi Network...............59
Set Bandwidth Caps for a WiFi Networ k..............................................................62
Enable Fast Roaming for a WiFi Network............................................................63
Enable Client Isolation for a WiFi Network...........................................................64
Set Up or Change a Radio On/Off Broadcast Schedule for a WiFi Networ k........65
Remove a WiFi Network......................................................................................66
Chapter 5 Manage Devices and Device Inventory
Change the Device Name....................................................................................69
Add or Change Building and Floor Labels for a Device.......................................69
Change the Radio and WiFi Settings for a Device...............................................70
Change the IP and Management VLAN Settings for a Device.............................72
Configure a Static IP Address for an Access Point.........................................72
Configure an Access Point as a DHCP Client.................................................73
Change the Management VLAN for an Access Point......................................74
Reboot a Device...................................................................................................75
Remove a Device From a Location......................................................................76
Manage the Device Inventor y..............................................................................77
View the Device Inventor y...............................................................................77
Add a Device to Inventor y Without Deploying It..............................................79
Deploy a Device in Inventory at a Location.....................................................80
Decommission a Device From a Location and Keep It in Inventory................82
Remove a Device From Inventory...................................................................83
Chapter 6 Manage Accounts and Licenses
Accounts Overview..............................................................................................87
Licenses Overview...............................................................................................87
About the Trial Per iod...........................................................................................87
View the Trial Balance and Trial Expiration Date During the Trial Period.........88
What Happens at the End of the Free Trial Period?........................................88
Create a New Account.........................................................................................89
Add a License to an Account...............................................................................90
View License Information for an Account.............................................................92
Add a Location to an Account..............................................................................93
Remove a Location From an Account..................................................................94
View the Devices Managed Under an Account....................................................95
Invite a Manager, Customer, or Clerk to an Account...........................................95
Accept an Invitation and Sign Up for and Activate a Manager, Customer, or Clerk
Account................................................................................................................96
Remove a Manager, Customer, or Clerk From an Account.................................98
Change the Name for an Account........................................................................99
5
Business Central Wireless Manager 2.1 Application
Remove an Account...........................................................................................100
Change Your Account Email Address and Password.........................................101
Chapter 7 Monitor Your Locations, Networks, and Devices
Overview of the Monitoring Options...................................................................103
View Alarms for Your Account, Claim Alarms, and Resolve Alarms...................104
Set Up Email Notification Profiles for License Accounts and Locations.............108
Change or Remove an Email Notification Profile...............................................109
View the Status of All Locations and Devices Under Your Account...................110
Monitor a Single Location..................................................................................113
View WiFi Usage at a Location......................................................................113
View the Status of Devices at a Location......................................................115
View Neighbor and Rogue Access Points at a Location...............................117
View Clients Connected at a Location...........................................................119
View the Event Logs for a Location...............................................................120
Monitor a Single WiFi Network at a Location.....................................................122
View Usage of a WiFi Networ k......................................................................122
View Clients Connected to a WiFi Networ k...................................................124
View the Event Logs for a WiFi Network.......................................................125
View Captive Portal Sessions........................................................................127
Monitor a Single Device at a Location................................................................128
View WiFi Usage on a Device.......................................................................129
View Clients Connected to a Device.............................................................130
View Alarms for a Device, Claim Alarms, and Resolve Alarms.....................131
View the Event Logs for a Device..................................................................134
Chapter 8 Diagnostics and Troubleshooting
Download the Diagnostics File for an Access Point...........................................138
Troubleshooting a WiFi Network........................................................................139
Appendix A Manage Vouchers With a Clerk User Account
Sell, Generate, and Print a Voucher...................................................................141
View the Status of Vouchers and Download All Vouchers..................................144
Appendix B Cloud-Managed Access Points
View the Access Point Inventory and Connection Status in the Application......148
View the Cloud Connection and Activity Status on a Cloud-Enabled Access
Point...................................................................................................................149
How the Configuration of a Cloud-Managed Access Point Can Be Changed....151
Convert an Access Point From Cloud-Managed to Standalone.........................151
Appendix C Technical Specifications
6
Introduction to the Business Central Wireless Manager 2.1
This chapter provides an introduction to the NETGEAR Business Central Wireless Manager (BCWM) 2.1
application.
For more information about the BCWM 2.1 application, visit businesscentral.netgear.com.
For information about preparing your access points for cloud management and subscribing to the BCWM 2.1
application, see the Business Central Wireless Manager How to Start Guide, which you can download from
downloadcenter.netgear.com.
This chapter includes the following sections:
• Business Central Wireless Manager 2.1 Application Concepts on page 8
• System Architecture Concepts on page 8
• Key Functions on page 10
• Application Roles on page 12
• Plan a Location With WiFi Networks and Hotspots on page 12
1
• Compatible NETGEAR WiFi Access Points on page 16
• Definitions of Access Point Terms on page 17
For more information about the topics covered in this manual, visit the support website at
Note
netgear.com/support.
This manual uses the following conventions:Note
• WiFi and wireless are interchangeable terms.
• A WiFi network provides access without a captive portal.
• A hotspot is a WiFi network that provides access through a captive portal.
7
Business Central Wireless Manager 2.1 Application
Business Central Wireless Manager 2.1 Application Concepts
The NETGEAR Business Central Wireless Manager (BCWM) 2.1 application is a cloud management
application that you can access from any computer to centrally manage cloud-enabled NETGEAR access
points. Using the BCWM 2.1 application, you can add, configure, and monitor WiFi networks in the cloud.
The BCWM 2.1 cloud management solution is intended primarily for small and medium-sized businesses
and organizations, for e xample, retail and hospitality b usinesses and healthcare organizations.This manual
is intended primarily for cloud network administrators.
In this manual, the BCWM 2.1 application is referred to as the application.
System Architecture Concepts
The application lets you manage multiple WiFi networks and NETGEAR WiFi access points (APs) over a
secure connection using Secure Sockets Layer (SSL).
You can add existing and new access points to the application, which is based on access point licensing.
You assign both networks and access points to a location.
You can set up multiple locations, each with its own networks and access points, and manage them from
the application. By default, an account with a free trial subscription or paid-for subscription can support up
to 4,000 access points.
Service Location Concepts
Service locations, in this manual referred to simply as locations, are physical addresses where WiFi networks
and access points are installed. In the application, these locations can include multiple Layer 2 or Layer 3
network segments.
When you set up a location with one or more WiFi networks and assign access points to that location, the
application automatically assigns the networks to the pool of access points for that location.That is, you do
not assign a network to an access point.The application assigns the network automatically to one or more
access points, depending on the number of WiFi netw orks and the number of access points at the location.
You can add multiple locations, for e xample , for branches and remote offices, which can be in different time
zones.The application integrates Google Maps to display the locations. For each location, you can monitor
its health, usage, and security, as well as its WiFi networks, building, floors, and access points.You can
add a building label and a floor label to an access point that you assign to a location.
The following diagram shows the location-based hierarchy of the application.
Introduction to the Business Central Wireless Manager 2.1
8
Business Central Wireless Manager 2.1 Application
Figure 1. Locations with their access points and WiFi networks
Automatic Network Provisioning Concepts
With standalone access points, you add a WiFi network to an access point.With the application, the entire
provisioning process is location based.You add a WiFi network to a location and you add an access point
to the same location.
All networks configured at a location are automatically applied to all access points at that location.Typically ,
a single access point can support eight networks per radio. If an access point supports only a single radio,
the application configures the networks only on that radio.
Optional building and floor labels can help you to organize your access points and you can group access
points together by building and by floor.
Offline provisioning is possible.You can set up locations and WiFi networks while access points are offline.
Then, add access points and assign them to locations, allowing the networks to go online.
Introduction to the Business Central Wireless Manager 2.1
9
Business Central Wireless Manager 2.1 Application
Key Functions
The application provides key functions such as provisioning, configuring, managing, and monitoring.
Provisioning Functions
Provisioning lets you add locations, WiFi networks, and access points.Typically, you add a location, set up
a WiFi network at the location, and bring the WiFi networks online by adding access points to the location.
For more information, see Get Started With Cloud Management on page 18.
You could also start by adding access points to a temporary location and decommissioning them just to get
them into inventory. (While decommissioned, access points do not use license credits.) Then, add locations ,
add WiFi networks to the locations, and bring the WiFi networks online by assigning the access points to
the locations. F or information about managing the inventory, see Manage the Device Inventory on page 77.
Configuring and Managing Functions
You can configure and manage features for each location, each WiFi network, and each access point.
Location Functions
For each location, you can configure and manage multiple features. For detailed configuration procedures,
see Manage Locations on page 26, except where otherwise indicated in the following list.
You can configure and manage the following features:
• Add WiFi networks to the location.
For detailed configuration procedures, see Manage WiFi Networks on page 47.
• Add access points to the location.
For detailed configuration procedures, see Manage Devices and Device Inventory on page 68.
• Configure and manage global WiFi, access point, and security settings for the location, including the
following components:
- Automatic radio resource management (Auto RRM) for access point radios
- Management of access point radios, including the WiFi mode, channel frequency, output power,
channel bandwidth, Wi-Fi Multimedia (WMM) settings, maximum number of clients, and antenna
settings
- Radio broadcast on/off schedule
- Access point credentials (that is, setting a global password for accessing the web management
interfaces of cloud-managed access points)
- Firmware management for access points
Introduction to the Business Central Wireless Manager 2.1
10
Business Central Wireless Manager 2.1 Application
WiFi Network Functions
For each WiFi network that you set up at a location, you can configure and manage multiple features. For
detailed configuration procedures, see Manage WiFi Networks on page 47.
You can configure and manage the following features:
• Set the security, including broadcast of the network name (SSID) and client separation for the WiFi
network.
• Specify the tagged VLAN for the WiFi network.
• Select the radio (for dual-band access points) for the WiFi network.
• Manage the authentication and encryption for the WiFi network.
• Create a captive portal for free or paid-for access to the WiFi network.
• Set upload and download bandwidth caps for the WiFi network.
• Enable fast roaming for the WiFi network.
• Enable client isolation for the WiFi network.
• Set a radio broadcast on/off schedule for the WiFi network.
Access Point Functions
For each access point that you assign to a location, you can configure and manage multiple features.You
can also decommission the access point from its current location and deploy it to a different location. For
detailed configuration procedures, see Manage Devices and Device Inventory on page 68.
You can configure and manage the following features:
• Assign a name, building, and floor label to the access point.
• Manage the IP address settings for the access point, including the DHCP and DNS server settings.
• Configure the management VLAN (by default, VLAN 1) for the access point.
• Manage the radio settings for the access point, including the WiFi mode, channel frequency, output
power , channel bandwidth, Wi-Fi Multimedia (WMM) settings , maximum number of clients, and antenna
settings.
Monitoring Functions
Monitoring lets you display WiFi network and access point health;WiFi network and access point usage;
WiFi network location maps; alarms and alarm trends; and statistics for networks, access points, traffic,
clients, and neighboring access points. For detailed configuration procedures, see Monitor Your Locations,
Networks, and Devices on page 102.
Account Management Functions
Account management lets you assign locations to license accounts, manage licenses, and in vite application
users (referred to as collaborators). For detailed configuration procedures, see Manage Accounts and
Licenses on page 86.
Introduction to the Business Central Wireless Manager 2.1
11
Business Central Wireless Manager 2.1 Application
Application Roles
The application supports the following roles for users who can log in to the application.These users are
different from WiFi users and hotspot users who can connect to a network that is part of the cloud but who
cannot log in to the application.
• Owner. A user who subscribed to the application and owns all license accounts that are set up under
his or her application subscription. An owner can perform any action, including inviting collaborators
(managers, customers, and clerks).
• Manager. A user who can perf orm most administrative functions. A manager (also ref erred to as a cloud
network administrator) is authorized to perform many application functions for license accounts that he
or she does not own.
Although a manager can set up his or her own new license account (and therefore become owner of
that account), a manager can also access other license accounts (that is, accounts that were set up by
other users) and can invite collaborators for other license accounts. However, a manager cannot add
or remove a location from another license account, decommission or remove devices from a location
for another license account, or entirely remove another license account.
• Customer. A user with read-only access to the license account to which he or she w as invited, including
all locations, WiFi networks, and access points that are assigned to that license account. Although a
customer can set up his or her own license account (and therefore become owner of that account), a
customer cannot access other license accounts to which he or she was not invited and cannot invite
collaborators for other license accounts.
• Clerk. A user who can only sell, print, and email vouchers and monitor their use for paid-for captive
portal access for the license account to which he or she was invited. A clerk is also referred to as a
voucher clerk or hotspot clerk. As with other users, a clerk can set up his or her own license account
(and therefore become owner of that account).
Owners, managers, customers, and clerks are referred to as collaborators.
Plan a Location With WiFi Networks and Hotspots
Before you set up a location with one or more large WiFi networks, plan accordingly and perform a site
survey so that you can determine how many access points the location requires. Plan the types of network
authentication and data encryption for WiFi access, the nature of hotspots , whether y ou need usage plans,
and which user groups you must set up.
The following sections describe planning concepts:
• Determine the Location Requirements on page 13
• Determine the Management VLAN on page 13
• Plan the Client Authentication and Data Encryption on page 13
• Plan the Hotspots With Free Access and Paid-For Access on page 14
• Other Planning Considerations on page 14
Introduction to the Business Central Wireless Manager 2.1
12
Business Central Wireless Manager 2.1 Application
Determine the Location Requirements
For each location, before y ou set up the location, configure the WiFi netw orks, and assign the access points,
determine its requirements:
• Number of users that must be able to receive WiFi service over managed networks
• Type of security and encryption for the managed networks
• Number of users that must be able to receive WiFi service over a WiFi network or hotspot
• Type of security, encryption, and access for the WiFi network or hotspot
• Number of access points required to provide seamless coverage for all WiFi networks and hotspots
through all buildings and floors of the location
• Number of licenses required to cover all access points at the location
• 802.11 frequency bands and channels that are optimal for WiFi usage
For each large location that you plan to set up, we recommend that you perform a site survey:
• To determine the current RF behavior and detect both 802.11 and non-802.11 noise, run a spectrum
analysis of the channels of the site.
• To determine the maximum throughput that is achievable on clients, run a test to check connectivity
between access points and clients.
• Identify potential RF obstructions and interference sources.
• Determine areas where denser coverage might be required because of heavier usage.
Determine the Management VLAN
To enable all access points at a location to connect over the Internet to the cloud, make sure that the
management VLAN is set up correctly at the location and that all access points at the location use the correct
management VLAN.The default management VLAN ID is ID 1. However, you can change the management
VLAN for individual access points. F or more inf ormation, see Change the Management VLAN for an Access
Point on page 74.
Plan the Client Authentication and Data Encryption
A WiFi user must authenticate to the WiFi network to be able to access WiFi resources. A WiFi network can
support several types of security methods, including those methods that require a RADIUS authentication
server.The encryption option that is available depends on the authentication method that you selected.The
following table lists the authentication and corresponding encryption methods that you configure through
the application.
Introduction to the Business Central Wireless Manager 2.1
13
Business Central Wireless Manager 2.1 Application
Table 1. Authentication and encryption options
Authentication
Method
WPA Personal
WPA Enterprise
Type of
Authentication
Network key
(passphrase)
Shared secret
(passphrase)
Encryption
Options
TKIP+AES
TKIP+AES
Authentication
Server
NoneNoneNoneOpen
NoneTKIP or
RADIUS serverTKIP or
Plan the Hotspots With Free Access and Paid-For Access
A captive portal blocks clients from accessing a WiFi network until they are verified. Such a WiFi network
is often referred to as a hotspot.
Plan the hotspots that you want to offer at a location.The type of hotspots that the application supports are
hotspots that offer free access and hotpots that offer paid-for access with a voucher.
The application supports the following authentication methods for hotspots:
• Click-through. No authentication and no email address are required to click through to a hotspot.
• Click-through with custom fields. No authentication is required but other information can be required
to click through to a hotspot.You can specify up to six fields to customize the required information,
which can include a name, email address, mobile phone number, and so on.
• Voucher. A voucher number is required to sign in to a paid-for hotspot.
Although it is a less common approach, you could also use the voucher option to
Note
generate passwords for guest use in an office environment.
For more information, see Add a Captive Portal for Free or Paid-For Access to a WiFi Network on page 52.
Other Planning Considerations
The application functions with the following concepts:
• A WiFi network broadcasts in an entire location, not in an individual building or on a floor only.
• An access point might be configured with a label for a floor in a building at a location b ut carries all WiFi
networks that broadcast at that location.
• All access points at a location function with the same WiFi and radio settings for that location (see
Manage WiFi Networks on page 47 and Manage the Radio and Antenna Settings for a Location on
page 33).
If you disable the broadcast of a WiFi network, the WiFi network stops broadcasting at the entire location.
That is, you cannot stop a WiFi network from broadcasting in a particular building only or on a particular
floor only . It’s either on or off for the entire location. However, you can circumvent these limitations by setting
up more than one location.
Introduction to the Business Central Wireless Manager 2.1
14
Business Central Wireless Manager 2.1 Application
Consider the following example:
In a single building (for example, a high-rise, multifloor tower) you want to use the application to manage
the WiFi networks and hotspots through the cloud.The configuration of companies in the building varies:
Some companies occupy an entire floor , some companies share a floor , and some companies occup y more
than one floor. Each floor requires at least one access point and each company requires at least one WiFi
network, but some floors require more access points and some companies require more WiFi networks. All
companies are connected to the Internet through the same high-speed broadband WAN connection.The
following three scenarios cover configuration options for the building:
• For a single company that occupies a single floor, you can do the following:
1. Set up one location for the company.
2. Add all access points that the company requires to the location.
3. Add all WiFi networks that the company requires to the location.
If one or more simultaneous dual-band access points are assigned to the location, you can set up
a maximum of 16 WiFi networks for the location.
• For a single company that occupies several floors, you can do the following:
1. Set up one location for the company.
2. Add all access points that the company requires to the location.
If the company is spread out over floors that are not adjacent, you must set up at least one access
point per floor.
3. Add floor labels to the access points.
Each floor label can represent the floor on which access points are located. Floor labels allow you
to organize the access points by floors.
4. Add all WiFi networks that the company requires to the location.
If the company is spread out over floors that are not adjacent, you must set up at least one WiFi
network per floor.
If one or more simultaneous dual-band access points are assigned to the location, you can set up
a maximum of 16 WiFi networks for the location.
• For different companies that share a single floor, you can do the following:
1. Set up one location for the floor.
2. Add a sufficient number of access points to the location so that the WiFi requirements for all
companies on the floor are covered.
3. For each company on the floor, add one or more WiFi networks to the location.
If one or more simultaneous dual-band access points are assigned to the location, you can set up
a maximum of 16 WiFi networks for the location.
Introduction to the Business Central Wireless Manager 2.1
15
Business Central Wireless Manager 2.1 Application
Compatible NETGEAR WiFi Access Points
Before the application can manage an access point, the access point must run the required firmware version
that is cloud enabled.This release supports the following NETGEAR WiFi access points running cloud-enabled
firmware:
• WAC730 ProSAFE 3x3 Dual-Band Wireless AC Access Point
• WAC720 ProSAFE 2x2 Dual-Band Wireless AC Access Point
• WNDAP660 ProSAFE Dual-Band Wireless-N Access Point
• WNDAP360 ProSAFE Dual-Band Wireless-N Access Point
• WNDAP350 ProSAFE Dual-Band Wireless-N Access Point
• WNAP320 ProSAFE Wireless-N Access Point
• WNAP210v2 ProSAFE Wireless-N Access Point
The following table lists the minimum required standalone firmware version that an access point must run
for you to be able to upgrade the access point to the required cloud-enabled firmware version.
Table 2. Firmware requirements for upgrade to the cloud-enabled firmware version
Access Point Model
Minimum Required Standalone
Firmware for Upgrade to
Cloud-Enabled Firmware
If your access point runs a standalone firmware version that is earlier than the minimum required standalone
firmware version, you first must upgrade the access point to the minimum required standalone firmware
version before you can upgrade the access point to the required cloud-enabled firmware version.
CAUTION:
If you do not first upgrade to the minimum required standalone firmware version but
attempt to upgrade directly to the required cloud-enabled firmware version, y ou might be
locked out of the access point. In that situation, you must log in to the access point over
an SSH connection with the user name admin and the password that is configured for
the access point and issue the restore-factory-default command to reset the
access point to factory default settings.
Required
Cloud-Enabled
Firmware
v3.5.6.0 or laterv3.1.1.0 or a later standalone versionWAC730 ProSAFE 3x3 Dual-Band Wireless AC Access Point
v3.5.6.0 or laterv3.1.1.0 or a later standalone versionWAC720 ProSAFE 2x2 Dual-Band Wireless AC Access Point
v3.5.5.0 or laterv2.0.5 or a later standalone versionWNDAP660 ProSAFE Dual Band Wireless-N Access Point
v3.5.5.0 or laterv2.1.12 or a later standalone versionWNDAP360 ProSAFE Dual Band Wireless-N Access Point
v3.5.5.0 or laterv2.1.9 or a later standalone versionWNDAP350 ProSAFE Dual Band Wireless-N Access Point
v3.5.5.0 or laterv2.1.6 or a later standalone versionWNAP320 ProSAFE Wireless-N Access Point
v3.5.5.0 or laterv2.1.5 or a later standalone versionWNAP210v2 ProSAFE Wireless-N Access Point
If your access point runs the minimum required standalone firmware version, you must load the required
cloud-enabled firmware version onto the access point. Using the web management interface of the access
Introduction to the Business Central Wireless Manager 2.1
16
Business Central Wireless Manager 2.1 Application
point, upgrade the access point to the cloud-enabled firmware version, and reset the access point to f actory
default settings. For more information about preparing your access points for cloud management, see the
NETGEAR Business Central Wireless Manager How to Start Guide, which you can download from
downloadcenter.netgear.com.
Once you perform the one-time cloud-enabled firmware upgrade for the access point, the application can
centrally manage future firmware upgrades for the cloud-managed access point.
For more information about cloud-managed access points, see Manage De vices and
Note
Device Inventory on page 68.
Definitions of Access Point Terms
This manual uses the following definitions of access point terms:
• Cloud-managed access point. A NETGEAR access point that is installed at a location and is controlled
by the application.
• Neighbor access point. An access point that is within the radio range of and discovered by a
cloud-managed access point.The access point can be another cloud managed access point or an
access point that is not cloud managed.The access point can be known, unknown, or rogue.
• Rogue access point. An access point that is broadcasting an SSID that is identical to the SSID of a
cloud-managed access point.This type of rogue access point is also referred to as an evil twin. Howe ver ,
a cloud-managed access point can be rogue if it is deployed at another location or belongs to another
user.
• Known AP. Either a NETGEAR access point that is cloud managed and that the application automatically
classified as a known access point or another access point that is not cloud managed and that you or
a collaborator classified as a known access point.
• Unknown AP. An unknown access point that is within the radio range of and discovered by a cloud
managed access point and that you or a collaborator could mark as a known access point. A
cloud-managed access point can be unknown if it is deployed at another location or belongs to another
user.
Introduction to the Business Central Wireless Manager 2.1
17
Get Started With Cloud Management
Before you can manage WiFi networks in the cloud, you must set up a least one location, add one or more WiFi
networks to the location, and add one or more access points to the location.
This chapter includes the following sections:
• Add Your First Location on page 19
• Add a First WiFi Network to a Location on page 20
• Add a First Access Point to a Location on page 23
For information about preparing your access points and subscribing to the BCWM application,
Note
see the NETGEAR Business Central Wireless Manager How to Start Guide, which you can
download from downloadcenter.netgear.com.
2
18
Business Central Wireless Manager 2.1 Application
Add Your First Location
Before you can add WiFi networks and access points, you must set up at least one location. For access
points (and therefore WiFi networks) to become active, you must assign the location to a license account.
To add your first location and assign it to a license account:
1. Open a browser on your computer.
2. In the address bar, enter https://bc.netgear.com.
The application login page displays.
3. Enter the email address and password for your BCWM and click the Login button.
The Monitoring page displays.
4. Select Configuration.
The Configuration page displays and does not yet show any locations.
5. Click the + New Location button.
6. In the Location Search field, enter a name or address and select the location that Google search
generates.
The location displays on the map.
7. Make sure that the correct country is selected from the Country menu.
When you complete the Location Search field, the country is automatically selected from the Country
menu.
The selection from the Country menu determines the radio settings for access points at the location.
Once the location is created, you cannot change the country selection.
Get Started With Cloud Management
19
Business Central Wireless Manager 2.1 Application
8. Enter the location name, contact name, and contact email address that you want to be associated with
the location.
9. In the Device Password field, enter the password for accessing the web management interf ace of any
cloud-managed access point that is assigned to the location.
Click the eye icon to make the password visible.
This password is pushed to all access points that you assign to the location.
The Device Username field shows the fixed user name (admin) for accessing the
Note
web management interface of any cloud-managed access point that is assigned to
the location.You cannot change this name.
10. From the Account menu, select the account to which the location must be assigned.
An account is a set of locations that are funded by the same license. Each location must be assigned
to an account with an active license (which can be a trial license) for access points to be licensed and
active.The Accounts menu lists the available license accounts. If you did not create a license account,
only the default license account is available from the menu.
11. Click the Save button.
Your settings are saved.The location displays in the Locations tree on the left. Below the location in
the tree, the Wireless Networks and Devices headings display.
Add a First WiFi Network to a Location
When you add a location (see Add Your First Location on page 19), the application automatically adds a
WiFi Networks heading for the location in the Locations tree on the Configuration page , but you m ust define
one or more WiFi networks that can broadcast at the location.
To add a first WiFi network to a location:
1. Open a browser on your computer.
2. In the address bar, enter https://bc.netgear.com.
The application login page displays.
3. Enter the email address and password for your BCWM and click the Login button.
The Monitoring page displays.
Get Started With Cloud Management
20
Business Central Wireless Manager 2.1 Application
4. Select Configuration.
The Configuration page displays and shows the location that you added (see Add Your First Location
on page 19).
5. In the Locations tree, click Wireless Networks.
The page displays the following message: There are no wireless networks configured for this location.
6. Click the + New Wireless Network button.
7. In the SSID field, enter a WiFi network name (SSID).
You can use up to and including 32 ASCII printable (typeable) characters. Do not use extended ASCII
characters, control ASCII characters, or ASCII characters that you compose with the Alt key on your
keyboard.
By default, the application broadcasts the SSID. If you want to hide the SSID so that only users who
know the SSID can access it, clear the Broadcast SSID check box.
8. From the Bands menu, select the WiFi band or bands.
The default setting is 2.4GHz and 5.0GHz Radios, which applies to dual-band access points only. If
an access points supports a single band only, the access points broadcasts on that band, unless your
selection from the Bands menu disables that band.
9. To specify a tagged VLAN, select the Specify a tagged VLAN check box, and in the VLAN ID field,
enter the VLAN ID.
Get Started With Cloud Management
21
Business Central Wireless Manager 2.1 Application
The VLAN ID is a 12-bit number that identifies the tagged VLAN. If the connection from the access
points to the Internet gateway requires an IEEE 802.1Q VLAN tag, you must specify a VLAN ID. If
multiple WiFi networks operate over the same physical Ethernet link, VLANs can provide isolation and
separation.
10. From the Authentication Type menu, select the type of authentication:
• Open.You do not need to specify any additional information because the network functions without
authentication and encryption.
• WPA Personal. In the Password field, you must specify the password that is required to access
the network.You can enter up to 63 alphanumeric and special characters.
The default encryption method is TKIP+AES, but you can select the Change Data Encryption
check box and, from the Data Encryption menu, select TKIP.
• WPA Enterprise.You must specify a RADIUS profile and the network must be connected to a
RADIUS server.
For more information, see Change the Authentication and Encryption for a WiFi Network on page
49.
11. To assign a captive portal to the WiFi network, click the +Add a Captive Portal button.
For information about configuring a captive portal, see Add a Captive Portal for Free Access to a WiFi
Network on page 53.
12. To specify bandwidth caps, select the Enable Bandwidth Caps check box and adjust the upload and
download bandwidth caps.
By default, the upload and download bandwidth caps are 1000 Kbps each. For each type of bandwidth
cap, the minimum value is 64 Kbps and the maximum value is 10 Gbps.
13. If you select WPA Personal (with TKIP + AES) or WPA Enterprise from the Authentication Type
menu, you can configure fast roaming (802.11r) for the WAC720 and WAC730 access points by doing
the following:
a. Select the Enable Fast Roaming check box.
For more information about fast roaming and associated restrictions, see Enable Fast Roaming for
a WiFi Network on page 63.
If you select the Enable Fast Roaming chec k bo x, the Exchange F ast Roaming Info Over Wired
Network check box displays.
b. To enable fast roaming information to be exchanged over the wired network, select the Exchange
Fast Roaming Info Over Wired Network check box.
If you enable f ast roaming, b y def ault, f ast roaming information is exchanged ov er the WiFi network
instead of the wired network.
14. To enable client isolation, select the Enable Client Isolation check box.
Enabling client isolation on a WiFi netw ork for a location with 802.11ac access points
Note
enables client isolation for all WiFi networks for those access points.
15. To set up a radio on/off broadcast schedule, select the Create Schedule check box.
Get Started With Cloud Management
22
Business Central Wireless Manager 2.1 Application
For information about configuring a radio on/off broadcast schedule, see Set Up or Change a Radio
On/Off Broadcast Schedule for a WiFi Network on page 65.
16. Click the Save button.
Your settings are saved. In the Locations tree on the left, the WiFi network displays under the Wireless
Networks heading for the location.
Add a First Access Point to a Location
When you add a location (see Add Your First Location on page 19), the application automatically adds a
Devices heading for the location in the Locations tree on the Configuration page , b ut y ou must add at least
one access point that can carry the WiFi networks that you configure at the location.
CAUTION:
If you add an access point to a location but do not add a WiFi network to the location,
the access point continues to broadcast its default SSIDs and provides open networks
without any security. Make sure that you add a WiFi network to the location (see Add
a First WiFi Network to a Location on page 20) so that you can control WiFi security.
To add a first access point to a location:
1. Open a browser on your computer.
2. In the address bar, enter https://bc.netgear.com.
The application login page displays.
3. Enter the email address and password for your BCWM and click the Login button.
The Monitoring page displays.
4. Select Configuration.
The Configuration page displays and shows the location that you added (see Add Your First Location
on page 19).
Get Started With Cloud Management
23
Business Central Wireless Manager 2.1 Application
5. In the Locations tree, click Devices.
The page displays the following message: There are no devices configured for this location.
6. Click the + New Device button.
7. In the Serial Number field, enter the precise serial number for the access point.
If you do not enter a correct serial number, you cannot add the access point to the network. After you
enter a correct serial number, an image of the associated model displays in the Model field, and the
gray Invalid Serial button changes into the Save button.
8. In the Device Name field, enter a name for the access point.
The name does not need to be the factory default name.
9. To register the access point with NETGEAR, keep the Register this device check box selected and
enter your date of purchase in the Purchase Date field.
By default, the Register this device check box is selected. If you do not need or want to register the
access point, clear the check box.
10. Click the Save button.
Your settings are saved. In the Locations tree on the left, the access point displays under the Devices
heading for the location.
Get Started With Cloud Management
24
Business Central Wireless Manager 2.1 Application
Note the following about access point states:
• If the access point is not connected to the Internet, the application displays the status Waiting.
• If the location to which you added the access point is assigned to an unlicensed account, the access point
displays the status Unlicensed and does not become active until y ou add a license to the account (see Add
a License to an Account on page 90).
CAUTION:
If an access point remains unlicensed and is not active, it broadcasts its default
SSIDs and provides open networks without any security. Make sure that the
account to which you assigned the location is licensed so that the access point
becomes active.
• If the access point is connected to the Internet and connects to the application for the first time, it might take
between 5 and 10 minutes before the access point is connected and the application displays the status
Online. During this period, the application might need to push the latest firmware to the access point,
automatically reboot the access point, push the configuration to the access point, and automatically reboot
the access point again.
The following figure shows the status Online.
Get Started With Cloud Management
25
Manage Locations
Locations form the key building b locks of y our cloud network.Y ou can set up new and manage e xisting locations,
add WiFi networks and access points to a location, manage radio settings for a location, and manage firmware
and device credentials for all access points assigned to a location.
This chapter includes the following sections:
• Add a Location on page 27
• Add a WiFi Network to a Location on page 28
• Add an Access Point to a Location on page 31
• Change the Basic Settings for a Location on page 33
• Manage the Radio and Antenna Settings for a Location on page 33
• Run or Schedule Automatic Radio Frequency Management for a Location on page 36
• Manage Load Balancing for a Location on page 38
• Upgrade Firmware on Devices at a Location on page 40
• Reboot a Location on page 44
3
• Change the Device Credentials for a Location on page 45
• Remove a Location on page 46
For information about moving a location from one account to another account, see Remov e
Note
a Location From an Account on page 94 and Add a Location to an Account on page 93.
26
Business Central Wireless Manager 2.1 Application
Add a Location
A location is a physical address where WiFi netw orks and access points are installed.You can add multiple
locations, for example, for branches and remote offices.
To add a location and assign it to a license account.
1. Open a browser on your computer.
2. In the address bar, enter https://bc.netgear.com.
The application login page displays.
3. Enter the email address and password for your BCWM and click the Login button.
The Monitoring page displays.
4. Select Configuration.
The Configuration page displays any existing locations.
5. Click the + New Location button.
6. In the Location Search field, enter a name or address and select the location that Google search
generates.
The location displays on the map.
7. Make sure that the correct country is selected from the Country menu.
When you complete the Location Search field, the country is automatically selected from the Country
menu.
The selection from the Country menu determines the radio settings for access points at the location.
Once the location is created, you cannot change the country selection.
Manage Locations
27
Business Central Wireless Manager 2.1 Application
8. Enter the location name, contact name, and contact email address that you want to be associated with
the location.
9. In the Device Password field, enter the password for accessing the web management interf ace of any
cloud-managed access point that is assigned to the location.
Click the eye icon to make the password visible.
This password is pushed to all access points that you assign to the location.
The Device Username field shows the fixed user name (admin) for accessing the
Note
web management interface of any cloud-managed access point that is assigned to
the location.You cannot change this name.
10. From the Account menu, select the account to which the location must be assigned.
An account is a set of locations that are funded by the same license. Each location must be assigned
to an account with an active license (which can be a trial license) for access points to be licensed and
active.The Accounts menu lists the available license accounts. If you did not create a license account,
only the default license account is available from the menu.
11. Click the Save button.
Your settings are saved.The location displays in the Locations tree on the left. Below the location in
the tree, the Wireless Networks and Devices headings display.
Add a WiFi Network to a Location
You can add a WiFi network to a location.The WiFi network becomes active only after you add one or more
access points to the location, the location is added to a license account, and the access points are in the
active connected state.
To add a WiFi network to a location:
1. Open a browser on your computer.
2. In the address bar, enter https://bc.netgear.com.
The application login page displays.
Manage Locations
28
Business Central Wireless Manager 2.1 Application
3. Enter the email address and password for your BCWM and click the Login button.
The Monitoring page displays.
4. Select Configuration.
The Configuration page displays any existing locations.
5. In the Locations tree, click the location.
The Configuration page displays the settings for the selected location.
6. From the Actions menu, select + Add Wireless Network.
7. In the SSID field, enter a WiFi network name (SSID).
By default, the application broadcasts the SSID. If you want to hide the SSID so that only users who
know the SSID can access it, clear the Broadcast SSID check box.
8. From the Bands menu, select the WiFi band or bands.
The options are 2.4GHz and 5.0GHz Radios, 2.4GHz Radio only, and 5.0GHz Radio only.The default
setting is 2.4GHz and 5.0GHz Radios, which applies to dual-band access points only. If an access
points supports a single band only, the access points broadcasts on that band, unless your selection
from the Bands menu disables that band.
9. To specify a tagged VLAN, select the Specify a tagged VLAN check box, and in the VLAN ID field,
enter the VLAN ID.
The VLAN ID is a 12-bit number that identifies the tagged VLAN. If the connection from the access
points to the Internet gateway requires an IEEE 802.1Q VLAN tag, you must specify a VLAN ID. If
multiple WiFi networks operate over the same physical Ethernet link, VLANs can provide isolation and
separation.
Manage Locations
29
Business Central Wireless Manager 2.1 Application
10. From the Authentication Type menu, select the type of authentication:
• Open.You do not need to specify any additional information because the network functions without
authentication and encryption.
• WPA Personal. In the Password field, you must specify the password that is required to access
the network.You can enter up to 63 alphanumeric and special characters.
The default encryption method is TKIP+AES, but you can select the Change Data Encryption
check box and, from the Data Encryption menu, select TKIP.
• WPA Enterprise.You must specify a RADIUS profile and the network must be connected to a
RADIUS server.
For more information about WPA Enterprise, see Change the Authentication and Encryption for a
WiFi Network on page 49.
11. To assign a captive portal to the WiFi network, click the +Add a Captive Portal button.
For information about configuring a captive portal, see Add a Captive Portal for Free Access to a WiFi
Network on page 53.
12. To specify bandwidth caps, select the Enable Bandwidth Caps check box and adjust the upload and
download bandwidth caps.
By default, the upload and download bandwidth caps are 1000 Kbps each. For each type of bandwidth
cap, the minimum value is 64 Kbps and the maximum value is 10 Gbps.
13. To enable client isolation, select the Enable Client Isolation check box.
Enabling client isolation on a WiFi netw ork for a location with 802.11ac access points
Note
enables client isolation for all WiFi networks for those access points.
14. If you select WPA Personal (with TKIP + AES) or WPA Enterprise from the Authentication Type
menu, you can configure fast roaming (802.11r) for the WAC720 and WAC730 access points by doing
the following:
a. Select the Enable Fast Roaming check box.
Although you can configure fast roaming regardless of the access points that you are deploying at
a location, fast roaming applies only to the WAC720 and WAC730 access points and to clients that
support fast roaming. If y ou enable fast roaming for a WiFi network that is broadcast on a WAC720
or WAC730 access point only, a client that does not support fast roaming cannot connect to the
WiFi network. In such a situation, you could set up an additional WiFi network without fast roaming
to serve the clients that do not support fast roaming.
If you select the Enable Fast Roaming chec k bo x, the Exchange F ast Roaming Info Over Wired
Network check box displays.
b. To enable fast roaming information to be exchanged over the wired network instead of the WiFi
network, select the Exchange Fast Roaming Info Over Wired Network check box.
The default setting is that fast roaming information is exchanged over the WiFi network instead of
the wired network.
15. To set up a radio on/off broadcast schedule, select the Create Schedule check box.
Manage Locations
30
Loading...