NETGEAR NETGEAR WAX615 User guide

User Manual

Insight Managed WiFi 6 AX3000 Access Point

WAX615

NETGEAR, Inc.

350 E. Plumeria DriveJuly 2022 San Jose, CA 95134, USA202-12568-03

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Support and Community

Visit netgear.com/support to get your questions answered and access the latest downloads.

You can also check out our NETGEAR Community for helpful advice at community.netgear.com.

Regulatory and Legal

Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.

(If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.)

For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.com/about/regulatory/.

See the regulatory compliance document before connecting the power supply.

For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.

By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.

Do not use this device outdoors. The PoE source is intended for intra building connection only.

Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems.

Trademarks

2

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Revision History

Number

CommentsPublish DatePublication Part

July 2022202-12568-03

May 2022202-12568-02

We revised the following sections:

About the local browser user interface and NETGEAR Insight on page

• 10

Connect to the access point for initial configuration on page 23

•

Connect over WiFi using the NETGEAR Insight app on page 23

•

Connect over the Internet using the NETGEAR Insight Cloud Portal on

• page 26

Connect over WiFi to the local browser UI for initial configuration on

• page 28

We made minor changes and improvements to multiple other sections. We removed information about a 9/16 in. (15 mm) T-bar, which is not supported as a mounting option (see Mount the Access Point to a Wall or Ceiling on page 249).

We revised the following sections to document the option to let the access point check for new firmware:

Connect over WiFi to the local browser UI for initial configuration on

• page 28

Connect over the LAN to the local browser UI for initial configuration

• on page 33

Configure the access point offline using a directly connected computer

• on page 38

We revised Connect the access point as an extender to a root access point using the Insight app on page 54 and added Connect the access point as an extender to a root access point using the Cloud Portal on page 50.

First publication.March 2022202-12568-01

3

Introduction

This manual is for the following NETGEAR Insight Managed WiFi 6 AX3000 Access Point model WAX615.

Model WAX615, in this manual referred to as the access point, support IEEE 802.11ax, four (2+2) streams of WiFi 6, and dual-band concurrent operation at 2.4 GHz and 5 GHz with a combined throughput of 3000 Mbps (600 Mbps at 2.4 GHz and 2400 Mbps at 5 GHz). The 5 GHz radio supports 160 MHz bandwidth.

The access point functions as a Power over Ethernet plus (PoE+) powered device (PD) in an existing network connected to a PoE+ switch. Model WAX615 supports an optional power adapter for connection to a regular switch. The PoE+ Ethernet port supports a high speed up to 2.5 Gbps.

This chapter contains the following sections:

• About the local browser user interface and NETGEAR Insight

• Additional documentation

Note: For more information about the topics that are covered in this manual, visit the support website at netgear.com/support/.

Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/. You can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this manual, you might need to update the firmware.

Note: In this manual, WiFi network means the same as SSID (service set identifier or WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network we mean an individual SSID or VAP.

9

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

About the local browser user interface and NETGEAR Insight

This user manual describes the local browser user interface (UI), which you use if the access point functions as a standalone access point.

NETGEAR Insight remote management offers additional features and add-on services that are not available in standalone mode. For NETGEAR Insight Premium and Insight Pro subscribers, the access point supports the NETGEAR Insight Cloud Portal and Insight app:

Insight Cloud Portal: Lets you configure and manage the access point remotely

• through the portal of the Insight cloud-based management platform.

Insight app: Lets you configure and manage the access point remotely from your

• iOS or Android mobile device and connects to the Insight cloud-based management

platform.

For information about the NETGEAR Insight Cloud Portal and Insight app, visit the following pages:

netgear.com/business/services/insight/subscription

•

netgear.com/support/product/insight.aspx

•

kb.netgear.com/000061848

•

If you install the access point as a NETGEAR Insight managed device, the settings for features that you can manage through the Insight Cloud Portal and Insight app are masked out in the local browser UI. However, using the local browser UI, you can still manage the settings for certain features that might not yet be supported in Insight.

Additional documentation

The following documents are available at netgear.com/support/download/:

Installation guide

•

Data sheet

•

For information about the NETGEAR Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight/subscription and see the NETGEAR knowledge base at netgear.com/support/product/insight.aspx.

User Manual10Introduction

2

Hardware Overview

The NETGEAR Insight Managed WiFi 6 AX3000 Access Point model WAX615 is an indoor access point that supports the 2.4 GHz and 5 GHz WiFi bands.

The chapter contains the following sections:

• Unpack the access point

• Top panel with LEDs

• Hardware interfaces

• Access point label

• Safety instructions and warnings for an indoor access point

11

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Unpack the access point

The package contains the following items:

NETGEAR WAX615 access point

•

Mounting plate

•

Metal bracket with T-bar, lock screw, and 4 short screws

•

3 tall screws and anchors for wall mounting

•

Installation guide

•

Note: Model WAX615 ships without a power adapter. Model WAX615AP ships with a power adapter (the type of power adapter varies by region). If you ordered model WAX615 but prefer to use the access point without a PoE+ connection, you can order a power adapter separately.

For information about the mounting options, see Mount the Access Point to a Wall or Ceiling on page 249.

Top panel with LEDs

The LEDs that provide the status of the access point are located on the top panel of the access point.

Figure 1. Top panel with LEDs

User Manual12Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Table 1. LED descriptions

DescriptionColorLED Icon

Power/Cloud LED

Solid amber initially and then blinking amber slowly: The access point is starting or in the process of getting an IP address.

Solid green: The access point started up and functions either as a standalone access point or as an Insight discovered access point that is not connected to the Insight cloud-based management platform.

Solid blue: The access point functions in Insight mode and is connected to the Insight cloud-based management platform.

Blinking amber fast: The access point is updating firmware or is being reset to factory default settings.

Blinking multicolor: The access point is functioning in extender mode and the mesh setup is in progress.

Solid amber during operation: The PoE power that the access point received is not at the 802.3at (PoE+) level.

Off: No power is supplied to the access point.

Solid green: A 2.5 Gbps Ethernet link is detected on the LAN port.LAN LED

Blinking green: 2.5 Gbps traffic activity is detected on the LAN port.

Solid amber: An Ethernet link at a speed lower than 2.5 Gbps is

detected on the LAN port.

2.4 GHz WLAN LED

Blinking amber: Traffic activity at a speed lower than 2.5 Gbps is detected on the LAN port.

Off: Either no Ethernet device is connected to the LAN port or no Ethernet link is detected.

Solid green: The 2.4 GHz WiFi radio is on but no clients are connected.

Solid blue: One or more WLAN clients are connected to the 2.4 GHz WiFi radio.

Blinking blue: Traffic is detected on the 2.4 GHz WiFi radio.

Off: The 2.4 GHz WiFi radio is off.

User Manual13Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Table 1. LED descriptions (Continued)

DescriptionColorLED Icon

Solid green: The 5 GHz WiFi radio is on but no clients are connected.5 GHz WLAN LED

Solid blue: One or more WLAN clients are connected to the 5 GHz

WiFi radio.

Blinking blue: Traffic is detected on the 5 GHz WiFi radio.

Off: The 5 GHz WiFi radio is off.

Note: For information about troubleshooting with the LEDs, see Troubleshoot with the

LEDs on page 229.

Hardware interfaces

The bottom panel of the access point provides the DC power connector for an optional power adapter, Reset button, LAN/PoE+ port.

Figure 2. Hardware interfaces

The bottom panel contains the following components:

DC power connector: If you do not use a PoE+ switch to provide power to the

• access point, connect an optional power adapter to the DC power connector.

LAN/PoE+ port: Use the LAN/PoE+ Gigabit Ethernet RJ-45 LAN port to connect the

• access point to a PoE+ switch, or if you use an optional power adapter, to a non-PoE switch. If connected to 2.5 Gbps equipment, the LAN PoE+ port supports Ethernet speeds up to 2.5 Gbps within your LAN. If your Internet connection, modem, router, and switch support a speed of 2.5 Gbps, the access point’s Internet connection also

User Manual14Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

functions at 2.5 Gbps. Otherwise, the Internet connection functions at 1 Gbps, which is a common speed. For more information about the LAN/PoE+ port connection, see Set up and connect the access point to your network on page 21.

Reset button: You can use the Reset button to restart the access point or to reset

• the access point to its factory default settings. To restart the access point, press the

Reset button for about two seconds. To reset the access point to factory default settings, press the Reset button for 10 seconds or longer.

Note: If you added the access point to a NETGEAR Insight network location, you must first use the Insight app or Insight Cloud Portal to remove the access point from your Insight network location before the factory default settings function of the Reset button is available. For more information, see Use the Reset button to reset the access point on page 165.

Access point label

The access point label on the bottom panel shows the QR code, serial number, MAC address, default WiFi network name (SSID), and network key (password) of the access point.

Figure 3. Access point label location

User Manual15Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Figure 4. Access point label

Safety instructions and warnings for an indoor access point

Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage.

To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions:

This product is designed for indoor use only in a temperature-controlled and

• humidity-controlled environment. Note the following:

-

For more information about the environment in which this product must operate, see the environmental specifications in the appendix or the data sheet.

-

If you want to connect the product over an Ethernet cable to a device located outdoors, the outdoor device must be properly grounded and surge protected, and you must install an Ethernet surge protector inline between the indoor product and the outdoor device. Failure to do so can damage the product.

-

Before connecting the product to outdoor cables or wired outdoor devices, see https://kb.netgear.com/000057103 for additional safety and warranty information.

User Manual16Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Failure to follow these guidelines can result in damage to your NETGEAR product, which might not be covered by NETGEAR’s warranty, to the extent permissible by applicable law.

Do not service the product except as explained in your product documentation.

• Some devices should never be opened.

If any of the following conditions occur, unplug the product from its power source,

• and then replace the part or contact your trained service provider:

- Depending on your product, the power adapter, power adapter cable, power

adapter plug, or PoE Ethernet cable is damaged.

-

An object fell into the product.

- The product was exposed to water.

- The product was dropped or damaged.

-

The product does not operate correctly when you follow the operating instructions.

Keep the product away from radiators and heat sources. Also, do not block cooling

• vents.

Do not spill food or liquids on your product components, and never operate the

• product in a wet environment. If the product gets wet, see the appropriate section in your troubleshooting guide, or contact your trained service provider.

Do not push any objects into the openings of your product. Doing so can cause fire

• or electric shock by shorting out interior components.

Use the product only with approved equipment.

•

If applicable to your product, allow the product to cool before removing covers or

• touching internal components.

Be sure that devices that are attached over Ethernet cables are electrically rated to

• operate with the power available in your location.

Depending on your product, use only the supplied power adapter or an Ethernet

• cable that provides PoE.

If your product uses a power adapter:

-

If you were not provided with a power adapter, contact your local NETGEAR reseller.

-

The power adapter must be rated for the product and for the voltage and current marked on the product electrical ratings label.

To help prevent electric shock, plug any system and peripheral power cables into

• properly grounded power outlets.

User Manual17Hardware Overview

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

If applicable to your product, the peripheral power cables are equipped with

• three-prong plugs to help ensure proper grounding. Do not use adapter plugs or

remove the grounding prong from a cable. If you must use an extension cable, use a three-wire cable with properly grounded plugs.

Observe extension cable and power strip ratings. Make sure that the total ampere

• rating of all products plugged into the extension cable or power strip does not

exceed 80 percent of the ampere ratings limit for the extension cable or power strip.

To help protect your system from sudden, transient increases and decreases in

• electrical power, use a surge suppressor, line conditioner, or uninterruptible power supply (UPS).

Position system cables, power adapter cables, and PoE Ethernet cables carefully.

• Route cables so that they cannot be stepped on or tripped over. Be sure that nothing rests on any cables.

Do not modify power adapters, power adapter cables, or plugs. Consult a licensed

• electrician or your power company for site modifications.

Always follow your local and national wiring rules.

•

User Manual18Hardware Overview

3

Install the Access Point in Your Network and Access It for Initial Configuration

This chapter describes how you can install and access the access point in your network.

The chapter contains the following sections:

• Position your access point for best performance

• Set up and connect the access point to your network

• Connect to the access point for initial configuration

• Log in to the access point after initial setup

• What to do if you get a browser security warning

CAUTION: This device must be professionally installed. It is the installer’s responsibility

to follow local country regulations, including operations within legal frequency channels, output power, and DFS requirements. The vendor, reseller, or distributor is not responsible for illegal wireless operations. For more details, see the device’s terms and conditions.

19

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Position your access point for best performance

Before you install and mount your access point as described in the installation guide or an appendix to this manual, consider how you can position the access point for best performance.

If you are within the access point WiFi range, you can connect any of your WiFi devices to your WiFi network. The WiFi range can vary significantly depending on the physical placement of your access point. For example, the thickness and number of walls the WiFi signal passes through can limit the range.

Additionally, other WiFi devices in and around your office, home, yard, or campus, might affect your access point’s signal. WiFi devices can be other access point, routers, repeaters, WiFi range extenders, and any other devices that emit WiFi signals for network access.

Tips for positioning your access point:

Place your access point near the center of the area where your computers and other

• devices operate.

A line of sight between the access point and your WiFi devices is not required for good performance.

If you use a power adapter, make sure that the access point is within reach of an AC

• power outlet.

Place the access point in an elevated location, minimizing the number walls and

• ceilings between the access point and your other devices.

Place the access point away from electrical devices such as these:

•

-

Ceiling fans

- Home security systems

- Microwaves

- Computers

-

Bases of cordless phones

- 2.4 GHz and 5.8 GHz cordless phones

Place the access point away from large metal surfaces, large glass surfaces, insulated

• walls, and items such as these:

- Solid metal doors

- Aluminum studs

User Manual20Install the Access Point in Your Network and Access It for Initial Configuration

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

- Fish tanks

- Mirrors

- Brick

- Concrete

If you are using adjacent access points, use different radio frequency channels to reduce interference.

Set up and connect the access point to your network

You can connect the access point to a Power over Ethernet plus (PoE+) switch in your network. The switch must be connected to a network router that is connected to the Internet. If you use a PoE+ connection, the access point does not require a power adapter.

Note: Depending on the product ordered, the package might not include a power adapter. You power up the access point by connecting it to a PoE+ switch. If you ordered a package without a power adapter but do not want to use a PoE+ connection, you can still order a power adapter as an option.

If connected to 2.5 Gbps equipment, the access point LAN PoE+ port supports Ethernet speeds up to 2.5 Gbps within your LAN. The following figure show a NETGEAR MS510TXUP switch, which supports speeds of 2.5 Gbps and higher, as well as PoE+. If your Internet connection, modem, router, and switch support a speed of 2.5 Gbps, the access point’s Internet connection also functions at 2.5 Gbps. Otherwise, the Internet connection functions at 1 Gbps, which is a common speed.

Network and Access It for Initial Configuration

User Manual21Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Figure 5. Set up the access point with a PoE+ connection to your network

To set up the access point with an Ethernet connection to your network:

1. Connect an Ethernet cable to the LAN 1/PoE+ port on the access point.

2.

Connect the other end of the Ethernet cable to a port on a switch that is connected to your network and to the Internet.

The access point requires 802.3at (PoE+) input.

Note: For optimal functioning, make sure that you use an 802.3at (PoE+) switch and not an 802.3af (PoE) switch. If the Power LED remains solid amber after the access point started up, the access point might receive insufficient PoE power. For more information, see The access point functions as a PoE PD and the Power/Cloud LED remains solid amber on page 231.

While the access point is starting or in the process of getting an IP address from a DHCP server (or router functioning as a DHCP server) in your network, the Power/Cloud LED initially lights solid amber and then blinks amber slowly. After about two minutes, the Power/Cloud LED turns solid green or solid blue and the access point is ready for you to perform the initial configuration.

For information about accessing the access point for initial configuration, see Connect to the access point for initial configuration on page 23.

Network and Access It for Initial Configuration

User Manual22Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Connect to the access point for initial configuration

After you set up the access point, you can use several methods to connect to it for initial configuration.

For remote management of the access point (and of multiple devices and networks), you can use the NETGEAR Insight app on an iOS or Android mobile device or the NETGEAR Insight Cloud Portal on a computer or tablet. If you use the access point in a standalone configuration, you can use the local browser UI on a computer or tablet. For more information, see About the local browser user interface and NETGEAR Insight on page 10.

For information about using the Insight app or the Insight Cloud Portal, see one of the following sections:

Connect over WiFi using the NETGEAR Insight app on page 23

•

Connect over the Internet using the NETGEAR Insight Cloud Portal on page 26

•

For information about using the local browser UI, see one of the following sections:

Connect over WiFi to the local browser UI for initial configuration on page 28

•

Connect over the LAN to the local browser UI for initial configuration on page 33

•

Configure the access point offline using a directly connected computer on page 38

•

Note: If your network does not include a DHCP server (or a router that functions as a DHCP server) and you do not perform the initial configuration of the access point as described in one of these sections, you can connect only five clients to the access point and the access point can provide an IP address to only five clients. To prevent this situation, make sure that you perform the initial configuration of the access point.

Connect over WiFi using the NETGEAR Insight app

The NETGEAR Insight app is available for Insight Premium and Insight Pro subscribers.

You can install the NETGEAR Insight app on an iOS or Android mobile device and set up the access point (and perform many other tasks as well).

For more information about the Insight app, visit the following pages:

netgear.com/business/services/insight/subscription

•

netgear.com/support/product/insight.aspx

•

kb.netgear.com/000061848

•

Network and Access It for Initial Configuration

User Manual23Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Your NETGEAR account is also your Insight account. Your NETGEAR account credentials let you log in as an Insight Premium user, or if you upgrade to an Insight Pro account, as an Insight Pro user.

To connect to the access point over WiFi using an iOS or Android mobile device:

1.

On your mobile device, go to the app store, search for NETGEAR Insight, and download the Insight app.

2. On your mobile device, connect over WiFi to the access point’s setup WiFi network

using one of the following methods:

Scan the QR code: Scan the QR code on the access point label on the bottom

• of the access point to connect to the setup WiFi network.

Connect manually: The setup WiFi network is on the access point label and is

• shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six

hexadecimal digits of the access point’s MAC address. The default password is sharedsecret.

3. Launch the Insight app.

4.

If you do not already have an Insight account, you can create an account now. For information about creating an Insight Premium account or upgrading to an

Insight Pro account, visit kb.netgear.com/000044343.

5.

Enter the email address and password for your NETGEAR account and tap LOG IN.

6. Add a new network location where you want to add the access point by tapping the Next button, and then tapping OK.

You can also select an existing network location.

The device admin password that you entered for the new network location replaces the existing admin password on all devices that you add to the network location.

In most situations, Insight detects the access point automatically, which can take several minutes.

Network and Access It for Initial Configuration

User Manual24Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

7.

To add the access point to your network location, do one of the following:

If the access point is automatically detected and listed in the Insight Manageable

•

Devices section, tap the icon for the access point, and then tap the ADD DEVICE button.

If the access point is not automatically detected, or you prefer to use another

•

method to add the access point, tap the + icon in the top bar, and do one of the following:

- Tap the SCAN BARCODE OR QR CODE button, and then scan the access point’s code, which is on the access point label.

- Tap the Enter Serial Number and MAC Address link, and then manually enter the access point’s serial number and MAC address, which are on the access point label.

8.

If prompted, name the access point and tap the Next button. The access point automatically updates to the latest Insight firmware and Insight

location configuration. This might take up to 10 minutes, during which time the access point will restart.

The access point is now an Insight-managed device that is connected to the Insight cloud-based management platform. If the Power/Cloud LED was solid green, it lights solid blue.

You can use the Insight app or Insight Cloud Portal to configure and manage the access point.

Note: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud Portal, the admin password for the access point changes. That is, the Insight network password for that location replaces the admin password. To access the local browser UI, you must then enter the Insight network password and not the admin password. If you later decide to remove the access point from the Insight network location or change the management mode to Web-browser mode (see Change the management mode to NETGEAR Insight or Web-browser on page 145), you must continue to use the Insight network password to access the local browser UI until you manually change the admin password on the access point.

Network and Access It for Initial Configuration

User Manual25Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Connect over the Internet using the NETGEAR Insight Cloud Portal

The Insight Cloud Portal is available for Insight Premium or Insight Pro subscribers. To use the NETGEAR Insight Cloud Portal to configure and manage the access point, the access point must already be connected to the Internet.

For more information about the Insight Cloud Portal, visit the following pages:

netgear.com/business/services/insight/subscription

•

netgear.com/support/product/insight.aspx

•

kb.netgear.com/000061848

•

Your NETGEAR account is also your Insight account. Your NETGEAR account credentials let you log in as an Insight Premium user, or if you upgrade to an Insight Pro account, as an Insight Pro user.

To connect to the access point over the Internet through the Insight Cloud Portal:

1. Make sure that the access point is connected to the Internet.

2. On a computer or tablet, visit insight.netgear.com. The NETGEAR Account Login page displays.

3.

If you do not already have an Insight account, you can create an account now. For information about creating an Insight Premium account or upgrading to an

Insight Pro account, visit kb.netgear.com/000044343.

4.

Enter the email address and password for your NETGEAR account and click the NETGEAR Sign In button.

5.

Only if you are an Insight Pro user, select the organization to which you want to add the access point.

6. Add a new network location where you want to add the access point, or select an existing network location.

7. Click the + (Add Device) button.

Note: If you are an Insight Pro user, you can either add a single device or you can add multiple Insight managed devices by uploading a device list as a CSV file.

8. In the Add New Device pop-up page, enter the access point’s serial number and MAC address, and then click Go.

The serial number and MAC address are on the access point label.

User Manual26Install the Access Point in Your Network and Access It for Initial Configuration

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

9.

After Insight verifies that the access point is a valid product, you can optionally change the device name of the access point, and then click Next.

When the access point is successfully added to the portal, a page displays a confirmation that setup is in progress.

Note: If the access point is online but Insight does not detect the access point, the firewall at the physical location where the access point is located might prevent communication with the Insight cloud. In that situation, add port and DNS entries for outbound access to the firewall. For more information, see kb.netgear.com/000062467.

The access point automatically updates to the latest Insight firmware and Insight location configuration. This might take up to 10 minutes, during which time the access point will restart.

The access point is now an Insight managed device that is connected to the Insight cloud-based management platform. If the Power/Cloud LED was solid green, it lights solid blue.

You can use the Insight Cloud Portal or Insight app to configure and manage the access point.

Note: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud Portal, the admin password for the access point changes. That is, after you add the access point to an Insight network location, the Insight network password for that location replaces the admin password. To access the local browser UI, you must then enter the Insight network password and not the admin password. If you later decide to remove the access point from the Insight network location or change the management mode to Web-browser mode (see Change the management mode to NETGEAR Insight or Web-browser on page 145), you must continue to use the Insight network password to access the local browser UI until you manually change the admin password on the access point.

Network and Access It for Initial Configuration

User Manual27Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Connect over WiFi to the local browser UI for initial configuration

This section describes how to connect to the access point for the first time over WiFi using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight app) and complete the initial configuration.

To connect over WiFi to the local browser UI for initial configuration:

1. From your computer or mobile device, connect over WiFi to the access point’s setup

WiFi network using one of the following methods:

Scan the QR code: Scan the QR code on the access point label on the bottom

• of the access point to connect to the setup WiFi network.

Connect manually: The setup WiFi network is on the access point label and is

• shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six

hexadecimal digits of the access point’s MAC address. The default password is sharedsecret.

2. On the computer or mobile device, launch a web browser and, in the address bar, enter http://aplogin.net.

Note: You can use http://aplogin.net only during initial setup of the access point.

Your browser might display a security warning because of the self-signed certificate on the access point, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see What to do if you get a browser security warning on page 44.

3.

Enter the access point user name and default password.

Network and Access It for Initial Configuration

User Manual28Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

The user name is admin. The default password is password. The user name and password are case-sensitive.

4. Select the Web-browser radio button.

Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, the login page displays. After you log in, the Dashboard page displays.

5.

To let the access point check for the latest firmware, click the Check for Upgrade button (the button is not shown in the previous figure).

If new firmware is available for the access point, we recommend that you upgrade the firmware. After the firmware upgrade completes, the access point restarts. When the access point is ready, go back to Step 1 of this procedure.

6.

Enter the settings that are described in the following table.

User Manual29Install the Access Point in Your Network and Access It for Initial Configuration

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

DescriptionSetting

Country/Region

Time Zone

DHCP Client

AP Name

From the menu, select the country and region in which the access point is operating.

Note: Make sure that the country is set to the location where the device is operating. You

are responsible for complying with the local, regional, and national regulations that are

set for channels, power levels, and frequency ranges.

Note: It might not be legal to operate the access point in a region other than the regions

listed in the menu. If your country or region is not listed, check with your local government

agency.

From the menu, select the time zone for the country and region in which the access point

is operating.

By default, the DHCP client of the access point allows the access point to receive an IP

address from a DHCP server (or router that functions as a DHCP server) in your network.

To set up the access point with a static (fixed) IP address, do the following:

a. Select the Disable radio button.

Additional fields display.

b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address

of the DNS server.

As an option, enter a new name for the access point. The name must contain alphanumeric

characters, must contain at least one alphabetical character, cannot be longer than 15

characters, and can contain hyphens but cannot start or end with a hyphen.

By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six

hexadecimal digits of the access point’s MAC address.

AP Login New

Password

Enter a new admin password. This is the password that you must use to log in to the access

point’s local browser UI. (It is not the password that you use for WiFi access.)

The password must be 8 to 63 characters in length and must contain at least one uppercase

letter, one lowercase letter, and one number. The following special characters are allowed:

! @ # $ % ^ & * ( )

Save the password for future use.

Network and Access It for Initial Configuration

User Manual30Install the Access Point in Your

(Continued)

Password

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

DescriptionSetting

Enter exactly the same password that you entered in the AP Login New Password field.Confirm New

SSID

7.

From the Authentication menu, select one of the following authentication types for

You cannot use the setup SSID for regular operation. The setup SSID is for initial setup

only. Enter a new name with a maximum of 32 characters. You can use a combination of

alphanumeric and special characters, except for quotation marks (") and a backslash (\).

the WiFi network, and, if applicable, set a new passphrase (network key or WiFi password) for the WiFi network:

Open: Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF)

• is automatically disabled. This setting does not provide any security and is not

appropriate for most situations. If you select Open from the menu, the Enhanced Open check box displays and the Allow Devices to Connect with Open check box can display:

-

Enhanced Open: If you select the Enhanced Open check box, the WiFi enhanced open feature is enabled. This feature is based on opportunistic wireless encryption (OWE). The encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is automatically set to mandatory.

- Allow Clients to Authenticate using Legacy Open (OWE Transition Mode):

If you select the Enhanced Open check box, the Allow Clients to Authenticate using Legacy Open (OWE Transition Mode) check box displays. If you select this check box, the WiFi network can accept both clients that support the WiFi enhanced open feature and clients that do not. For clients that do not support the WiFi open enhanced feature, traffic is not encrypted. If you do not select this check box, the WiFi network can only accept clients that support the WiFi enhanced open feature.

WPA2 Personal: This option allows only WiFi clients that support WPA2 to

• connect to the SSID. Select this option if all WiFi clients are capable of supporting

WPA2. This option uses AES encryption. In the Passphrase field, enter a new passphrase for the WiFi network.

WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to

• connect to the SSID. This option uses TKIP and AES encryption. Broadcast packets use TKIP. For unicast (that is, point-to-point) transmissions, WPA clients use TKIP

and WPA2 clients use AES. In the Passphrase field, enter a new passphrase for the WiFi network.

Network and Access It for Initial Configuration

User Manual31Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

WPA3 Personal: This option allows only WiFi clients that support WPA3 to

• connect to the SSID. Select this option if all WiFi clients are capable of supporting

WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network.

WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients

• to connect to the SSID. This option uses AES and SAE encryption. WPA2 clients

use AES and WPA3 clients use SAE. In the Passphrase field, enter a new passphrase for the WiFi network.

Note: After you complete the setup process, you can set up WPA2 Enterprise or WPA3 Enterprise security with RADIUS servers. For more information, see Change the authentication and encryption for a WiFi network on page 73.

8. Click the Apply button. Your settings are saved. A pop-up window displays the IP address and the new WiFi

network and password (passphrase).

If you specified a static IP address, save the IP address information because you must enter the IP address when you log in again.

You are disconnected from the access point. If you changed the default country, the access point restarts.

9. Reconnect over WiFi to the access point’s WiFi network using the new SSID and passphrase that you just defined on the Day Zero Easy Setup page.

10.

Enter the access point IP address in the address bar of your browser. If you changed the IP address, enter the IP address that you specified in Step 6.

Your browser might display a security warning because of the self-signed certificate on the access point, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see What to do if you get a browser security warning on page 44.

A login window displays.

11. Enter the access point user name and password. The user name is admin. The password is the one that you just defined on the Day

Zero Easy Setup page. The user name and password are case-sensitive.

The Dashboard page displays. You can now customize the access point settings for your network environment.

Network and Access It for Initial Configuration

User Manual32Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

Connect over the LAN to the local browser UI for initial configuration

The following procedure assumes that your network includes a DHCP server (or router that functions as a DHCP server) and that the access point and your computer are on the same LAN. By default, the access point functions as a DHCP client.

To connect over the LAN to the local browser UI for initial configuration:

1. To determine the IP address that the DHCP server assigned to the access point, access the DHCP server or use an IP network scanner.

If you use a Windows-based computer, launch File Explorer (or Windows Explorer), select Network from the Navigation pane, right-click the access point device icon, and select Properties to display the IP address.

Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 23.

2. On the computer, launch a web browser and, in the address bar, enter the IP address that is assigned to the access point.

Your browser might display a security warning because of the self-signed certificate on the access point, which is expected behavior. You can proceed, or add an exception for the security warning. For more information, see What to do if you get a browser security warning on page 44.

3.

Enter the access point user name and default password.

Network and Access It for Initial Configuration

User Manual33Install the Access Point in Your

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

The user name is admin. The default password is password. The user name and password are case-sensitive.

4. Select the Web-browser radio button.

Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window displays. After you log in, the Dashboard page displays.

5.

To let the access point check for the latest firmware, click the Check for Upgrade button (the button is not shown in the previous figure).

If new firmware is available for the access point, we recommend that you upgrade the firmware. After the firmware upgrade completes, the access point restarts. When the access point is ready, depending on your situation, go back to Step 2 or Step 3 of this procedure.

6.

Enter the settings that are described in the following table.

User Manual34Install the Access Point in Your Network and Access It for Initial Configuration

Insight Managed WiFi 6 AX3000 Access Point Model WAX615

DescriptionSetting

Country/Region

Time Zone

DHCP Client

AP Name

From the menu, select the country and region in which the access point is operating.

Note: Make sure that the country is set to the location where the device is operating. You

are responsible for complying with the local, regional, and national regulations that are

set for channels, power levels, and frequency ranges.

Note: It might not be legal to operate the access point in a region other than the regions

listed in the menu. If your country or region is not listed, check with your local government

agency.

From the menu, select the time zone for the country and region in which the access point

is operating.

By default, the DHCP client of the access point allows the access point to receive an IP

address from a DHCP server (or router that functions as a DHCP server) in your network.

To set up the access point with a static (fixed) IP address, do the following:

a. Select the Disable radio button.

Additional fields display.

b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address

of the DNS server.

As an option, enter a new name for the access point. The name must contain alphanumeric

characters, must contain at least one alphabetical character, cannot be longer than 15

characters, and can contain hyphens but cannot start or end with a hyphen.

By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six

hexadecimal digits of the access point’s MAC address.

AP Login New

Password

Enter a new admin password. This is the password that you must use to log in to the access

point’s local browser UI. (It is not the password that you use for WiFi access.)

The password must be 8 to 63 characters in length and must contain at least one uppercase

letter, one lowercase letter, and one number. The following special characters are allowed:

! @ # $ % ^ & * ( )

Save the password for future use.

Network and Access It for Initial Configuration

User Manual35Install the Access Point in Your