Netgear WAC720 Users Manual

Download

Page 1

Dual-Band Wireless AC Access Point

User Manual

Models WAC720 and WAC730

March 2018 202-11624-06

350 E. Plumeria Drive San Jose, CA 95134 USA

Page 2

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Support

Thank you for purchasing this NETGEAR product.You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals , and join our comm unity.We recommend that you use only official NETGEAR support resources.

Conformity

For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.

Compliance

For regulatory compliance information, visit http://www.netgear.com/about/regulatory. See the regulatory compliance document before connecting the power supply.

Trademarks

Revision History

Part Number

April 2017202-11624-05

CommentsPublish DatePublication

Changed the product name and published the manual in a new format.March 2018202-11624-06 Revised Specify Captive Portal Profile Settings and Enable the Captive

Portal Instance on page 121.

Added Set Up Facebook Wi-Fi for a Captive Portal Profile on page 124. Made the following changes to provide inf ormation about new and enhanced

features: Revised Disable Business Central Mode for a Standalone Access Point on

page 19. Revised Configure and Enable WiFi Security Profiles on page 39. Added Manage MAC Address Filter Profiles in the Local MAC Address

Database on page 50.

Revised Enable Rogue AP Detection and Monitor Rogue APs on page 53. Revised Schedule the WiFi Radios to Be Turned Off on page 57. Revised Monitor WiFi Clients on page 83. Revised Configure Advanced WiFi Settings on page 106. Revised Manage Captive Portals on page 120. Added Configure the Access Point in Business Central Mode on page 143. Changed cloud mode to Business Central mode throughout the manual. Updated various figures throughout the manual.

Page 3

Part Number

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

CommentsPublish DatePublication

March 2016202-11624-04

Revised Mount the Access Point on page 30 to show the changes to the access point mounting bracket.

Changed firmware version 3.5.4.0 to version 3.5.6.0 (see Log In to the

Access Point on page 16 and Disable Business Central Mode for a Standalone Access Point on page 19).

Major revision with the following major changes:March 2016202-11624-03 Revised Log In to the Access Point on page 16. Added Disable Business Central Mode for a Standalone Access Point on

page 19. Added View Dashboard Information on page 80. Revised Configure and Enable WiFi Security Profiles on page 39. Added Configure Load Balancing on page 118. Revised Set Up, Manage, and Monitor Ensembles on page 87. Revised Manage Captive Portals on page 120. Removed the legacy 802.1x security option (RADIUS security option). Removed the WPA and WPA-PSK (TKIP) security options. In addition, made many minor changes plus the following nontechnical

changes:

202-11624-01

Increased the quality of all screen shots. Replaced many screen shots. Converted all procedures to standalone procedures. Changed the name of the manual from Reference Manual to User Manual.

Revised Configure WiFi Bridging on page 132.February 2016202-11624-02 Revised Mount the Access Point on page 30.December

2015

First publication.October 2015202-11607-01

Page 4

Chapter 1 Introduction and Hardware Overview

Unpack Your Access Point.....................................................................................9

Top Panel...............................................................................................................9

Rear Panel...........................................................................................................10

Access Point Label...............................................................................................11

Chapter 2 Initial Setup

What You Need Before You Begin........................................................................13

System Requirements.....................................................................................13

WiFi Equipment Placement and Range Guidelines........................................13

Ethernet Cabling Requirements......................................................................14

LAN Configuration Requirements....................................................................14

Hardware Requirements for Computers on Your LAN.....................................14

Operating Frequency Guidelines.....................................................................14

Requirements for Entering IP Addresses........................................................14

Install and Configure the Access Point................................................................15

Connect the Access Point to a Computer............................................................15

Log In to the Access Point When It Is Directly Connected to Your Computer...17 Log In to the Access Point When It Is Connected to a Network With a DHCP

Server..............................................................................................................18

Local Browser Interface...................................................................................18

Disable Business Central Mode for a Standalone Access Point..........................19

Configure Basic General System Settings...........................................................20

Configure Time Settings.......................................................................................22

Configure the IPv4 Settings.................................................................................23

Configure the Basic WiFi Settings........................................................................24

Configure 802.11bg/ng/bgn WiFi Settings.......................................................24

Configure 802.11a/a-na-ac WiFi Settings.......................................................27

Test Basic WiFi Connectivity................................................................................29

Mount the Access Point.......................................................................................30

Package Content of the Ceiling and Wall Installation Kit.................................30

Mount the Access Point to a Drop Ceiling.......................................................30

Mount the Access Point to a Wall....................................................................33

IPv4............................................................................................................14

IPv6............................................................................................................15

Chapter 3 Configure the WiFi Features and Security

WiFi Data Security Options..................................................................................37

WiFi Security Profiles...........................................................................................38

Configure and Enable WiFi Security Profiles..................................................39

About WPA2-PSK and WPA-PSK & WPA2-PSK.............................................46

Page 5

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

About WPA2 With RADIUS and WPA & WPA2 With RADIUS.........................47

Change the QoS Policy for a WiFi Security Profile..........................................47

Configure RADIUS Server Settings.....................................................................48

Manage MAC Address Filter Profiles in the Local MAC Address Database........50

Add a MAC Address Filter Profile....................................................................51

Modify a MAC Address Filter Profile...............................................................52

Delete a MAC Address Filter Profile................................................................53

Enable Rogue AP Detection and Monitor Rogue APs.........................................53

Enable Rogue AP Detection............................................................................54

Monitor Rogue APs.........................................................................................55

Monitor Knows APs.........................................................................................56

Schedule the WiFi Radios to Be Turned Off.........................................................57

Configure Basic WiFi Quality of Service..............................................................59

Chapter 4 Manage and Monitor the Access Point

Enable Remote Management..............................................................................62

SNMP Management........................................................................................62

Secure Shell and Telnet Management.............................................................63

Manage the Access Point over a Telnet Connection.......................................64

Upgrade the Access Point Firmware....................................................................65

Upgrade the Firmware Over a Web Browser...................................................65

Upgrade the Firmware Over a TFTP Server...................................................66

Manage the Configuration File or Reset to Factory Defaults...............................67

Save the Configuration....................................................................................68

Restore the Configuration...............................................................................68

Restore the Access Point to the Factory Default Settings...............................69

Use the Local Browser Interface to Restore Factory Default Settings........70

Use the Reset Button to Restore Factory Default Settings.........................70

Reboot the Access Point Without Restoring the Default Configuration...........71

Change the Administrator Password....................................................................72

Manage User Accounts........................................................................................73

Add a New User Account................................................................................73

Change the Name for a User Account............................................................74

Change the Privilege for a User Account........................................................75

Reset the Password for a User Account..........................................................75

Delete a User Account....................................................................................76

Enable the Syslog Server....................................................................................76

Monitor the Access Point.....................................................................................77

View System Information.................................................................................78

View Dashboard Information...........................................................................80

View the Standalone Dashboard................................................................80

View the Ensemble Dashboard..................................................................81

Monitor WiFi Clients........................................................................................83

View the Activity Logs..........................................................................................85

View the Traffic Statistics......................................................................................86

Set Up, Manage, and Monitor Ensembles...........................................................87

Configure Enable Ensemble Mode..................................................................88

Manage an Ensemble.....................................................................................88

Page 6

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Specify an Ensemble Management IP Address.........................................89

Configure Ensemble Security With a Passphrase......................................89

Specify an Ensemble’s Channel Assignment Settings...............................90

Manage Automatic Channel Assignment for an Ensemble........................91

Upgrade the Firmware of Ensemble Members F rom a Downloaded Firmware

File..............................................................................................................93

Upgrade the Firmware of Ensemble Members Over a TFTP Server..........95

Monitor an Ensemble......................................................................................96

Monitor the Status of the Ensemble...........................................................96

Monitor the Devices Connected to the Ensemble.......................................97

Monitor the Access Points and Networks Neighboring the Ensemble........98

Chapter 5 Configure Advanced Network and WiFi Features

Configure IPv6 Settings.....................................................................................101

Configure Spanning Tree Protocol, 802.1Q VLAN, and Link Layer Discovery

Protocol..............................................................................................................102

Configure STP and VLANs............................................................................102

Configure Ethernet LLDP..............................................................................104

Configure Bonjour..............................................................................................105

Configure Advanced WiFi Settings....................................................................106

Configure Advanced Quality of Service Settings...............................................109

Configure and Manage Quality of Service Policies............................................112

Configure a New QoS Policy.........................................................................112

Modify a QoS Policy......................................................................................117

Delete a QoS Policy......................................................................................118

Configure Load Balancing..................................................................................118

Manage Captive Por tals.....................................................................................120

Enable the Access Point to Register With Facebook.........................................121

Specify Captive P ortal Profile Settings and Enable the Captive Portal Instance.121

Set Up Facebook Wi-Fi for a Captive Portal Profile...........................................124

Add User Accounts to the Local Database for Captive Portal Access...............126

Upload a Custom Logo......................................................................................128

Configure a Default or Custom Captive Portal Splash Page..............................129

Enable the Global Captive Portal Mode.............................................................131

Configure WiFi Bridging.....................................................................................132

Point-to-Point Bridge and Point-to-Multipoint Bridge.....................................132

Configure a WiFi Bridge................................................................................133

Chapter 6 Troubleshooting

Troubleshoot the Basic Functions......................................................................137

Verify the Correct Sequence of Events at Startup.........................................137

No LEDs Are Lit on the Access Point............................................................137

The Active LED or the LAN LED Is Not Lit....................................................138

The WLAN LED Does Not Light....................................................................138

You Cannot Access the Internet or the LAN From a WiFi Computer.................138

You Cannot Configure the Access Point From a Browser..................................139

When You Enter a URL or IP Address a Time-Out Error Occurs.......................140

Troubleshoot a TCP/IP Network Using the Ping Utility.......................................140

Page 7

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Test the LAN Path to Your Access Point........................................................140

Test the Path from Your Computer to a Remote Device................................141

Problems With Date and Time...........................................................................141

Use the Packet Capture Tool..............................................................................142

Appendix A Configure the Access Point in Business Central Mode

Enable Business Central Mode..........................................................................144

Configure the IP and 802.1Q VLAN Settings in Business Central Mode...........145

Reboot the Access Point in Business Central Mode..........................................146

Reset the Access Point in Business Central Mode to Factory Default Settings..147

Upgrade Access Point Firmware in Business Central Mode..............................148

Configure MAC Authentication in Business Central Mode.................................148

Add a MAC Address Filter Profile on an Access Point in Business Central

Mode.............................................................................................................149

Assign a MAC Address Filter Profile on an Access Point in Business Central

Mode.............................................................................................................151

Modify a MAC Address Filter Profile on an Access Point in Business Central

Mode.............................................................................................................153

Delete a MAC Address Filter Profile on an Access Point in Business Central

Mode.............................................................................................................154

Monitor the Access Point in Business Central Mode.........................................154

View the Activity Logs of an Access Point in Business Central Mode...........155

View Basic Information About the Access P oint In Business Centr al Mode...156

Appendix B Supplemental Information

Technical Specifications.....................................................................................158

Factory Default Settings.....................................................................................161

Page 8

Introduction and Hardware Overview

This user manual describes how you can manage the NETGEAR Dual-Band Wireless A C Access Point models WAC720 and WAC730 by using the local browser–based management interface, in this manual referred to as the local browser interface.

The essential differences between the two models are the maximum theoretical WiFi throughput and the number of supported optional dual-band antennas:

• Model WAC720. This model can support two optional dual-band antennas.The maximum theoretical WiFi

throughput is 300 Mbps in the 2.4 GHz band and 867 Mbps in the 5 GHz band

• Model WAC730.This model can support three optional dual-band antennas.The maximum theoretical WiFi

throughput is 450 Mbps in the 2.4 GHz band and 1300 Mbps in the 5 GHz band

This chapter includes the following sections:

• Unpack Your Access Point

• Top Panel

• Rear Panel

• Access Point Label

For more information about the topics covered in this manual, visit the support website at

Note

netgear.com/support.

Firmware updates with new features and bug fixes are made available from time to time at

Note

downloadcenter.netgear.com. Some products can regularly check the site and download

new firmware, or you can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this guide, you might need to update your firmware.

In this manual, WiFi and wireless are interchangeable terms.Note

Page 9

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Unpack Your Access Point

Your package contains the following items:

• ProSAFE Dual-Band Wireless AC Access Point

• Straight-through Category 5 Ethernet cable

• Ceiling and wall installation kit

• Installation guide

Contact your reseller or customer support in your area if any parts are missing or damaged. Visit the NETGEAR website at support.netgear.com/general/contact/default.aspx f or the telephone n umber

of customer support in your area.

Top Panel

The following figure shows the LEDs on the top panel.

Figure 1.Top panel

The following table describes the LEDs on the top panel.

Introduction and Hardware Overview

Page 10

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Table 1.Top panel LEDs

DescriptionLEDItem

Amber, then blinking green

Power is off.OffPower/Test1 Power is on.On (green) A self-test is running or firmware is being loaded. During

startup, the LED is first steady amber, then goes off , and then blinks green before turning steady green after about 45 seconds. If after one minute the LED remains amber or continues to blink green, it indicates a system fault.

No Ethernet traffic is detected, or no link is detected.OffActive2 Ethernet traffic is detected.On or blinking (green)

A 10 Mbps or no link is detected on LAN port.OffLAN3 A 100 Mbps link is detected on LAN port.Amber A 1000 Mbps link is detected on LAN port.Green

WLAN

Rear Panel

Figure 2. Rear panel

Off2.4 GHz

On or blinking (green)

Off5 GHz

On or blinking (green)

The WiFi 802.11b/g/n (2.4 GHz) LAN is not ready, or no WiFi activity is detected.

The WiFi 802.11b/g/n (2.4 GHz) LAN is ready, or WiFi activity is detected.

The WiFi 802.11n/a (5 GHz) LAN is not ready, or no WiFi activity is detected.

The WiFi 802.11n/a (5 GHz) LAN is ready, or WiFi activity is detected.

Introduction and Hardware Overview

Page 11

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

The rear panel components of the access point, from left to right, are described in the following list:

1. Cable security lock receptacle for an optional lock.

2. Console port for connecting to an optional console terminal.The port provides an RJ-45 connector and

supports the following settings: 115200 K default baud rate, 8 data bits, no (N) parity bit, and one (1) stop bit.

3. Factory default Reset button. Using a sharp object, press and hold this button for about five seconds

to reset the access point to factory defaults settings. All configuration settings are lost, and the default password is restored. F or more information, see Restore the Access P oint to the Factory Default Settings on page 69.

4. 10/100/1000BASE-T Gigabit Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X) and support for

IEEE 802.3af Power over Ethernet (PoE) for connection to a switch or router that can provide PoE.

5. Power socket for an optional 12 VDC, 2.5A power adapter.

The WAC720 access point can support up to two optional 2.4 GHz/5 GHz dual-band

Note

antennas.The W AC730 access point can support up to three optional 2.4 GHz/5 GHz dual-band antennas.

Access Point Label

The access point label on the bottom of the access point’s enclosure displays factory default settings, regulatory compliance, and other information.

Figure 3. Label model WAC720

Figure 4. Label model WAC730

Introduction and Hardware Overview

Page 12

Initial Setup

This chapter includes the following sections:

• What You Need Before You Begin

• Install and Configure the Access Point

• Connect the Access Point to a Computer

• Log In to the Access Point

• Disable Business Central Mode for a Standalone Access Point

• Configure Basic General System Settings

• Configure Time Settings

• Configure the IPv4 Settings

• Configure the Basic WiFi Settings

• Test Basic WiFi Connectivity

• Mount the Access Point

Page 13

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

What You Need Before You Begin

You must consider the following guidelines and requirements before you can set up your access point.

System Requirements

Before installing the access point, make sure that your system includes the following:

• A 10/100/1000 Mbps local area network device such as a hub or switch

• The Category 5 UTP straight-through Ethernet cable with RJ-45 connector included in the package, or

one like it

• A PoE switch or a 12V, 2.5 A, DC power source

• A web browser for configuration

• At least one computer with the TCP/IP protocol installed

• 802.11bg/ng/bgn-compliant or 802.11a/a-na-ac-compliant devices

WiFi Equipment Placement and Range Guidelines

The range of your WiFi connection can vary significantly based on the location of the access point. The latency , data throughput perf ormance, and power consumption of WiFi de vices also vary depending on your configuration choices.

Failure to follow these guidelines can result in significant performance degradation

Note

or inability to connect over WiFi to the access point. For complete performance specifications, see Supplemental Information on page 157.

Before you position and mount the access point at its permanent position, first configure

Note

the access point and test the computers on your LAN for WiFi connectivity as described in this chapter.

For best results, place your access point according to the following general guidelines:

• Near the center of the area in which the WiFi devices will operate.

• In an elevated location such as a high shelf where the WiFi de vices are in a line-of-sight (ev en if through

walls).

• Away from sources of interference, such as computers, microwaves ovens, and 2.4 GHz cordless

phones.

• Away from large metal surfaces or water.

• Placing an external antenna in a vertical position provides best side-to-side coverage . Placing an external

antenna in a horizontal position provides best up-and-down coverage. (An external antenna does not come standard with the access point.)

Initial Setup

Page 14

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

If you are using multiple access points, it is better if adjacent access points use different radio frequency channels to reduce interference.The recommended channel spacing between adjacent access points is five channels (for example, use Channels 1 and 6, or 6 and 11, or 1 and 11).

The time it takes to establish a WiFi connection can vary depending on both your security settings and placement.

Ethernet Cabling Requirements

The access point connects to your LAN using twisted-pair Category 5 Ethernet cable with RJ-45 connectors.

LAN Configuration Requirements

For the initial configuration of your access point, you must connect a computer to the access point.

Hardware Requirements for Computers on Your LAN

To connect to the access point on your network, your WiFi de vice m ust support 802.11b, 802.11g, 802.11n,

802.11a, or 802.11ac. If y our computer does not include an internal WiFi adapter, we recommend using the NETGEAR A6210 WiFi USB Adapter.

Operating Frequency Guidelines

You do not need to change the operating frequency (channel) unless you notice interference problems or you place the access point near another access point. If you do change the operating frequency, observe the following guidelines:

• Access points use a fixed channel.You can select a channel that provides the least interference and

best performance. In the United States and Canada, 11 channels are available.

• If you use multiple access points, it is better if adjacent access points use different channels to reduce

interference.The recommended channel spacing between adjacent access points is five channels (for example, use Channels 1 and 6, or 6 and 11).

• In infrastructure mode (which is the default mode for the access point), WiFi stations normally scan all

channels, looking for a access point. If more than one access point can be used, the one with the strongest signal is used.This is possible only if the access points use the same SSID.

Requirements for Entering IP Addresses

IP addresses assigned to the access points must follow the following requirements for IPv4 and IPv6 addresses.

IPv4

The fourth octet of an IP address must be between 0 and 255 (both inclusive).This requirement applies to any IP address that you enter on the access point’s local browser interface.

Initial Setup

Page 15

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

IPv6

IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons. Any four-digit group of zeroes within an IPv6 address can be reduced to a single zero or altogether omitted.

The following errors invalidate an IPv6 address:

• More than eight groups of hexadecimal quartets

• More than four hexadecimal characters in a quartet

• More than two colons in a row

Install and Configure the Access Point

Install and configure your access point in the order of the following sections:

1. Connect the Access Point to a Computer on page 15

2. Log In to the Access Point on page 16

3. Disable Business Central Mode for a Standalone Access Point on page 19

4. Configure Basic General System Settings on page 20

5. Configure Time Settings on page 22

6. Configure the IPv4 Settings on page 23

7. Configure the Basic WiFi Settings on page 24

Before installing the access point, make sure that your Ethernet network functions. After you connect the access point to the Ethernet network, computers that support 802.11b/g/a/n/ac are able to communicate with the Ethernet network.

For this to work correctly, verify that you meet all the system requirements, shown in What You Need

Before You Begin on page 13.

Connect the Access Point to a Computer

Before you place the access point in an ele v ated position that is difficult to reach, first set

Tip

up and test the access point to verify WiFi network connectivity.

To set up the access point:

1. Unpack the box and verify the contents.

2. Prepare a computer with an Ethernet adapter.

If this computer is already part of your network, record its TCP/IP configuration settings. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 as the subnet mask.

3. Connect an Ethernet cable from the access point to the computer.

4. Securely insert the other end of the cable into the access point’s Ethernet port.

5. Turn on your computer.

Initial Setup

Page 16

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. Connect the access point to a PoE switch or power adapter.

The access point supports Power ov er Ethernet (PoE) with power redundancy. If y ou are

Tip

using a switch that provides PoE, you do not need to use a power adapter to power the access point. Using PoE can be especially convenient when the access point is installed in a high location far away from a power outlet.

7. Verify that the LEDs functions as indicated in the following table:

DescriptionLED Power/Test LED.The Power/Test LED blinks when the access point is first turned on. (To be

exact, during startup, the LED is first steady amber, then goes off , and then blinks g reen.) After about 45 seconds, the LED stays lit (steady green). If after one minute the Power/Test LED is not lit or is still blinking, check the connections and see if the power outlet is controlled by a wall switch that is turned off.

Active LED.The Active LED is lit or blinks green when Ethernet traffic is detected.

LAN LED.The LAN LED indicates the LAN speed for LAN port 1: green for 1000 Mbps, amber

for 100 Mbps, and no light for 10 Mbps. If the LAN LED is not lit, make sure that the Ethernet cable is securely attached at both ends.

2.4 GHz WLAN LED.The 2.4 GHz WLAN LED is lit or blinks green when the WiFi LAN (WLAN) is ready.

5 GHz WLAN LED. The 5 GHz WLAN LED is lit or blinks green when the WiFi LAN (WLAN) is ready.

Log In to the Access Point

The default IP address of your access point is 192.168.0.100. By default, the access point functions as a DHCP client. If the access point is installed in a network that

includes a DHCP server, the IP address of the access point is issued by the DHCP server.You can find the IP address of the access point by accessing the DHCP server or by using an IP address scanner utility. (Free IP address scanner utilities are available online.)

If you must configure the access point with a static IPv4 address, see the steps in Log In to the Access P oint

When It Is Directly Connected to Your Computer on page 17 and Configure the IPv4 Settings on page 23.

Initial Setup

Page 17

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

When the access point runs firmware version 3.5.6.0 or a later version, by default, the

Note

access point is enabled for the cloud (that is, Business Central mode is enabled) and operates with a limited local browser interface (only the Configuration and Monitoring menu tabs display).

Log In to the Access Point When It Is Directly Connected to Your Computer

To log in to the access point when it is directly connected to your computer:

1. Change the IP address of your computer to an IP address in the 192.168.0.x subnet, which is the subnet

in which the access point’s default IP address is located.

2. For example, change the computer’s IP address to 192.168.0.210.

3. Connect your computer to the access point with an Ethernet cable.

4. Open a web browser on your computer.

5. In the address bar, enter http://192.168.0.100.

192.168.0.100 is the default IP address of the access point.

6. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

7. Click the Login button.

The web browser displays the General page under the Configuration tab. If you are using the access point as a standalone access point or as an access point with a wireless controller, you must disable Business Central mode (see Disable Business Central Mode for a Standalone Access Point on page

19). After you disable Business Central mode and you log in to the access point, the web browser displays

the Dashboard page under the Monitoring tab of the main menu. For more information, see View

Dashboard Information on page 80.

Initial Setup

Page 18

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Log In to the Access Point When It Is Connected to a Network With a DHCP Server

To log in to the access point when it is connected to a network with a DHCP server.

1. Open a web browser from a computer that is connected to the same network as the access point.

2. In the address bar, enter the network IP address of the access point.

You can find the IP address of the access point by accessing the DHCP server or by using an IP address scanner utility. (Free IP address scanner utilities are available online.)

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Click the Login button.

19). After you disable Business Central mode and you log in to the access point, the web browser displays

the Dashboard page under the Monitoring tab of the main menu. For more information, see View

Dashboard Information on page 80.

Local Browser Interface

The navigation tabs across the top of the pages of the local browser interface provide access to all the configuration functions of the access point and remain constant.The menu items in the blue bar change according to the navigation tab that is selected.

The top right corner of all pages that allow you to make configuration changes show the Apply and Cancel buttons, and on several pages the Edit button.

Initial Setup

Page 19

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

These buttons provide the following functions:

• Edit. Allows you to edit the existing configuration.

• Cancel. Cancels all configuration changes that you made on the page.

• Apply. Saves and applies all configuration changes that you made on the page.

Disable Business Central Mode for a Standalone Access Point

When the access point runs firmware version 3.5.6.0 or a later version, by default, Business Central mode (also referred to as cloud mode) is enabled f or the access point and the local browser interface is a restricted interface that shows only the Configuration and Monitoring menu tabs with limited configuration options.

If you are using the access point as a standalone access point or as an access point with a wireless controller , you must disable Business Central mode.

For information about configuring the access point in Business Central mode, see

Configure the Access Point in Business Central Mode on page 143.

To disable Business Central mode:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Initial Setup

Page 20

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select the Business Central Enabled No radio button.

5. Click the Apply button.

The access point restarts with factory default settings but retains its IP configuration and management VLAN.

The access point is now ready for standalone operation with a full local browser interface.

Configure Basic General System Settings

To configure basic system settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Basic > General.

Initial Setup

Page 21

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

5. Configure the settings as described in the following table.

DescriptionSetting

Access Point Name

Country / Region

For information about the Business Central settings and about enabling Business

Note

This unique name is the access point NetBIOS name.The name is printed on the access point label.The default is netgearxxxxxx, in which xxxxxx represents the last 6 digits of the access point MAC address.You can replace the default name with a unique name up to 15 characters long.The access point name can be retrieved through SNMP.

From the Country / Region menu, select the country where the access point is installed.

Central mode, see Configure the Access Point in Business Central Mode on page

143.

6. Click the Apply button.

Your settings are saved.

Make sure that the country is set to the location where the device is

Note

operating.You are responsible for complying with the local, regional, and national regulations that are set for channels, power le v els, and frequency ranges.

It might not be legal to operate this access point in a region other than one

Note

of those identified in this field.

Initial Setup

Page 22

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Configure Time Settings

To configure time settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Basic > Time.

5. Configure the settings as described in the following table.

DescriptionSetting

Select the time zone to match your location.Time Zone This is a nonconfigurable field that displays the current date and time.Current Time

NTP Client

Use Custom NTP Server

Enable the Network Time Protocol (NTP) client to synchronize the time of the access point with an NTP server. By default the Enable radio button is selected.

Select this check box if you want to use a custom NTP server. You need an Internet connection to use an NTP server that is not on your local network.

Hostname / IP Address

Enter the host name or IP address of the custom NTP server. The default is time-b.netgear.com.

If you use a host name, make sure that y ou configured a DNS server.

6. Click the Apply button.

Your settings are saved.

Initial Setup

Page 23

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Configure the IPv4 Settings

For information about how to configure the IPv6 settings, see Configure IPv6 Settings

Note

on page 101.

WARNING:

If you enable the DHCP client, the IP address of the access point changes when you click the Apply button, causing you to lose your connection to the access point.You must use the new IP address to reconnect to the access point.

If you enable the DHCP client on the access point, you can discover the new IP address

Tip

of the access point by accessing the DHCP server on your LAN, or by using a network IP address scanner utility.

To configure the IPv4 settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > IP > IP Settings.

5. Configure the IPv4 settings as described in the following table.

Initial Setup

Page 24

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

DescriptionSetting

DHCP Client

IP Address

IP Subnet Mask

Primary DNS Server Secondary DNS Server

Network Integrity Check

By default, the Dynamic Host Configuration Protocol (DHCP) client is enabled.The access point receives its IP address, subnet mask, and default gateway settings automatically from the DHCP server on your network when you connect the access point to your LAN.

Enter the IP address of your access point.The default IP address is 192.168.0.100.To change the address, enter an unused IP address from the address range used on your LAN, or enable DHCP the server.

Enter the network number portion of an IP address. Unless you are implementing subnetting, enter 255.255.0.0 as the subnet mask.

Enter the IP address of the ISP gateway to which the access point connects.Default Gateway Enter the IP address of the primary and secondary DNS servers. A DNS server is a host

on the Internet that translates Internet names (such as www.netgear.com) to n umeric IP addresses.T ypically your ISP tr ansfers the IP address of one or tw o DNS servers to your access point during login. If the ISP does not transf er an address, you m ust obtain it from the ISP and enter it manually in this field.

Select this check box to validate that the upstream link is active before allowing WiFi associations. Ensure that the default gateway is configured.

6. Click the Apply button.

Your settings are saved. If you changed the IP address settings and want to log in to the access point again, you must use the

new IP address of the access point.

Configure the Basic WiFi Settings

For proper compliance and compatibility between similar products in your co verage area, y ou must configure the 802.11bg/ng/bgn and 802.11a/a-na-ac settings correctly, including the operating channel and country. You also must configure the basic WiFi network settings so that WiFi devices can connect to your network. For other WiFi features, including WiFi security, see Configure the WiFi Features and Security on page 36.

WARNING:

If you configure the access point from a WiFi computer and y ou change the access point’s SSID, channel, or WiFi security settings, you lose your WiFi connection when you click the Apply button.You then must change the WiFi settings of y our computer to match the access point’s new settings.

Configure 802.11bg/ng/bgn WiFi Settings

To configure the 802.11bg/ng/bgn WiFi settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

Initial Setup

Page 25

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Wireless > Basic > Wireless Settings.

Select the WiFi mode in the 2.4 GHz band:

• 11bg. 802.11b-compliant devices and 802.11g-compliant devices can connect to the access point.

• 11ng. 802.11n-compliant devices and 802.11g-compliant devices can connect to the access point

• 11bgn.This is the default setting. 802.11b-compliant devices, 802.11n-compliant devices and

802.11g-compliant devices can connect to the access point. If you keep the default setting, go to step 8.

When you change the WiFi mode, the Turn Radio On check box is automatically cleared, and all fields, buttons, and menus on the page are masked out.

5. Turn on the radio by selecting the Turn Radio On check box.

A pop-up window opens.

Under normal conditions, you want the radio to be turned on.Turning off the radio

Note

disables access through the access point, which can be helpful for configuration, network tuning, or troubleshooting activities.

6. Click the OK button to confirm the change of WiFi mode.

The change does not take effect until y ou click the Apply button after y ou complete the WiFi configur ation.

Initial Setup

Page 26

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

7. Specify the remaining WiFi settings as described the following table.

DescriptionsSetting

Wireless Network Name (SSID)

Broadcast Wireless Network Name (SSID)

Channel / Frequency

11ng and 11bgn modes only

(For most networks, the default settings work fine.)

Output Power

Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive.The default is NETGEAR_11ng.The SSID assigned to a WiFi device must match the access point’s SSID f or the WiFi de vice to communicate with the access point. If the SSIDs do not match, y ou do not get a WiFi connection to the access point.

Select the Yes radio button to enable the access point to broadcast its SSID, allowing WiFi stations with a null (blank) SSID to adopt the access point’s SSID.Yes is the default setting.To prevent the SSID from being broadcast, select the No radio button.

From the menu, select the channel that y ou want to use for your WiFi LAN.The available WiFi channels and frequencies depend on the country and WiFi mode.The default setting is Auto, which enab les the access point to automatically select the most suitable channel.

However, you do not need to change the WiFi channel unless you experience interference (indicated by lost connections or slow data tr ansfers). If this happens, you might want to experiment with different channels to see which is the best. For more information, see Operating Frequency Guidelines on page 14.

For more information about available channels and frequencies, see Technical

Specifications on page 158.

If the access point is a member of an ensemble for which automatic channel assignment is enabled (see Manage Automatic Channel Assignment f or an Ensemble on page 91), Auto is not available as a selection from the Channel / Frequency menu.

MCS Index / Data Rate

Channel Width

Guard Interval

Data Rate11bg modes only

From the menu, select the transmission po wer of the access point:Full, Half, Quarter, Eighth, Minimum.The default is Full.

Increasing the power improves performance, but if two or more access points are operating in the same area and on the same channel, interference can occur.

Make sure that you comply with the regulatory requirements for total radio frequency (RF) output power in your country.

From the menu, select a Modulation and Coding Scheme (MCS) index and transmit data rate f or the WiFi network.The default setting is Best. For a list of all options that you can select from in 11ng and 11bgn modes, see Factory Default Settings on page 161.

From the menu, select a channel width.The options are 20 MHz and 40 MHz.The default is 40 MHz.

From the menu, select the guard interval to protect transmissions from interference.The default is Auto, or you can select Long - 800 ns. Some legacy de vices can operate only with a long guard interval.

From the menu, select the transmit data rate of the WiFi network. The default setting is Best. For a list of all options that y ou can select from in 11bg mode, see Factory Default Settings on page 161.

8. Click the Apply button.

Your settings are saved.

For information about how to configure advanced WiFi settings, see Configure

Note

Advanced WiFi Settings on page 106.

Initial Setup

Page 27

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Configure 802.11a/a-na-ac WiFi Settings

To configure the 802.11a/a-na-ac WiFi settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Wireless > Basic > Wireless Settings.

5. Select the WiFi mode in the 5 GHz band:

• 11a. 802.11n-compliant devices can connect to the access point because they are backward

compatible.

• 11a-na-ac.This is the default setting. If you keep the default setting, go to step 8.

When you change the WiFi mode , the Turn Radio On check box is automatically cleared, and all fields, buttons, and menus on the page are masked out.

6. Turn on the radio by selecting the Turn Radio On check box.

A pop-up window opens.

Initial Setup

Page 28

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Under normal conditions, you want the radio to be turned on.Turning off the radio

Note

disables access through the access point, which can be helpful for configuration, network tuning, or troubleshooting activities.

7. Click the OK button to confirm the change of WiFi mode.

The change does not take effect until y ou click the Apply button after y ou complete the WiFi configur ation.

8. Specify the remaining WiFi settings as described the following table.

DescriptionsSetting

Wireless Network Name (SSID)

Broadcast Wireless Network Name (SSID)

Channel / Frequency

11a-na-ac mode only (For most networks, the

default settings work fine.)

Enter a 32-character (maximum) service set identifier (SSID); the characters are case-sensitive.The default is NETGEAR_11ac.The SSID assigned to a WiFi device must match the access point’s SSID f or the WiFi de vice to communicate with the access point. If the SSIDs do not match, y ou do not get a WiFi connection to the access point.

For more information about available channels and frequencies, see Technical

Specifications on page 158.

MCS Index / Data Rate

Channel Width

Guard Interval

From the menu, select a Modulation and Coding Scheme (MCS) index and transmit data rate f or the WiFi network.The default setting is Best. F or a list of all options that y ou can select from in 11a-na-ac mode, see Factory Default Settings on page 161.

From the menu, select a channel width.The options are 20 MHz, 40 MHz, and 80 MHz.The default is 80 MHz.

From the menu, select the guard interval to protect transmissions from interference.The default is Auto, or you can select Long - 800

ns. Some legacy de vices can operate only with a long guard interval.

Initial Setup

Page 29

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionsSetting

From the menu, select the transmit data rate of the WiFi network. The default setting is Best. For a list of all options that y ou can select from in 11a mode, see Factory Default Settings on page 161.

Output Power

9. Click the Apply button.

Your settings are saved.

For information about how to configure advanced WiFi settings, see Configure

Note

Advanced WiFi Settings on page 106.

Data Rate11a mode only

From the menu, select the transmission po wer of the access point:Full, Half, Quarter, Eighth, Minimum.The default is Full.

Increasing the power improves performance, but if two or more access points are operating in the same area and on the same channel, interference can occur.

Make sure that you comply with the regulatory requirements for total radio frequency (RF) output power in your country.

Test Basic WiFi Connectivity

After you configure the access point, make sure that WiFi devices can connect to the access point before you position and mount the access point at its permanent position.

To test for WiFi connectivity:

1. Configure your WiFi devices so that they can connect to a WiFI network that you configured on the

access point.

2. Verify that your WiFi devices acquired a WiFi link to the access point.

3. Verify network connectivity by using a browser to connect to the Internet, or check for file and printer

access on your network.

If you experience trouble connecting to the access point, see Troubleshooting on

Note

page 136.

We recommend that you complete the f ollowing tasks before y ou deploy the access point in y our network:

• Configure WiFi security and other WiFi features as described in Configure the WiFi Features and

Security on page 36.

• Configure any additional features that you might need as described in Manage and Monitor the Access Point on page 61, and Configure Advanced Network and WiFi Features on page 100.

Initial Setup

Page 30

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

After you complete the configuration of the access point, you can reconfigure the computer that you used for this process back to its original TCP/IP settings.

Mount the Access Point

The following sections e xplain how to mount your access point.We recommend that you re view the inf ormation in WiFi Equipment Placement and Range Guidelines on page 13 before you mount the access point at its permanent position.

• Package Content of the Ceiling and Wall Installation Kit on page 30

• Mount the Access Point to a Drop Ceiling on page 30

• Mount the Access Point to a Wall on page 33

Package Content of the Ceiling and Wall Installation Kit

Figure 5. Ceiling and wall installation kit

The ceiling and wall installation kit contains the following components:

1. One access point mounting bracket

2. One wall mounting bracket

3. Four mounting screws with integrated washers for the access point mounting bracket

4. One T-bar screw for the access point mounting bracket

5. Four wall screws for the wall mounting bracket

6. Four wall anchors for the wall mounting bracket

Mount the Access Point to a Drop Ceiling

The best location for ceiling installation is at the center of your WiFi coverage area, and within line of sight of all mobile devices. Mak e sure that the top (the dome side) of the access point is directed toward the users and not the ceiling. Do not place the access point in a false ceiling space facing up.

Initial Setup

Page 31

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Before mounting the access point in a high location, first set up and test the access point to verify WiFi network connectivity.

If you are mounting the access point on a hard ceiling, use the wall installation instructions.

To mount the access point to a drop ceiling:

1. Locate the access point mounting bracket, f our mounting screws, and T-bar screw in the product package.

2. Attach the access point mounting bracket to the access point using the four mounting screws.

3. Place the access point so that the ceiling rail is between the two tabs on the access point mounting

bracket.

Initial Setup

Page 32

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Twist the access point to hang it from the ceiling rail.

5. Secure the access point to the ceiling rail using the T-bar screw.

Initial Setup

Page 33

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Mount the Access Point to a Wall

The best location for wall installation is at the center of your WiFi coverage area, and within line of sight of all mobile devices. Make sure that the top (the dome side) of the access point is directed toward the users and not the wall.

To mount the access point to a wall:

1. Locate the wall mounting bracket, access point bracket, four mounting screws, and wall anchors and

screws in the product package.

2. Place the wall mounting bracket on the wall where you want to mount the access point.

3. Mark the wall where the two mounting holes are (see the figure in step 6).

4. Attach the access point mounting bracket to the access point using the f our mounting screws as sho wn.

5. So you can see how the brackets fit together, attach the wall mounting bracket to the access point

mounting bracket as shown in the following figure.The three hooks on the wall mounting bracket fit into the three holes on the access point mounting bracket.The handle on the wall mounting bracket also fits into a hole on the access point bracket. Release the wall mounting bracket by moving the handle.

Initial Setup

Page 34

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. Using the wall anchors and screws, attach the wall mounting bracket to the wall where you previously

marked.The following figures show a side view of the wall.The left figure includes a schematic view of the wall mounting bracket.

Initial Setup

Page 35

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Although the product package includes four wall anchors and scre ws, tw o screws are

Note

sufficient to attach the wall mounting bracket as sho wn in the previous figure. Ho wev er , if you prefer, you can use four screws and insert them through the mounting holes in the corners of the wall mounting bracket.

7. Align the three holes on the access point bracket with the three hooks on the wall mounting br ack et and

slide the access point down until it click-attaches to the wall mounting bracket and is secured.The following figures show a side view of the wall.

Initial Setup

Page 36

Configure the WiFi Features and Security

This chapter describes how to configure the WiFi features of the access point. The chapter includes the following sections:

• WiFi Data Security Options

• WiFi Security Profiles

• Configure RADIUS Server Settings

• Manage MAC Address Filter Profiles in the Local MAC Address Database

• Enable Rogue AP Detection and Monitor Rogue APs

• Schedule the WiFi Radios to Be Turned Off

• Configure Basic WiFi Quality of Service

Before you set up WiFi security and additional WiFi features that are described in this chapter, connect the access point, get the Internet connection working, and configure the 802.11bg/ng/bgn and 802.11a/a-na-ac WiFi settings as described in Initial Setup on page 12.The access point functions with an Ethernet LAN connection. Make sure that you verify WiFi connectivity before you set up WiFi security and additional WiFi features.

If you are configuring the access point from a WiFi computer and you change the access

Note

point’s SSID, channel, or WiFi security settings, you lose your WiFi connection when you save the settings.You must then change the WiFi settings of your computer to match the access point’s new settings.

Page 37

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

WiFi Data Security Options

Indoors, computers can connect over 802.11ac WiFi networks at a maximum range of 300 feet.Typically, a access point inside a building works best with devices within a 100-foot radius. Such distances can allow for others outside your immediate area to access your network.

Unlike wired network data, your WiFi data transmissions can e xtend bey ond y our walls and can be receiv ed by anyone with a compatib le WiFi de vice . For this reason, use the security features of y our WiFi equipment. The access point provides highly effectiv e security features that are co v ered in detail in this chapter . Deploy the security features appropriate to your needs.

Figure 6.WiFi data security examples

You can enhance the security of your WiFi network in several ways:

• Use multiple BSSIDs combined with VLANs.You can configure combinations of VLANS and BSSIDs

(security profiles) with stronger or less restrictive access security according to your requirements. For example, visitors could be giv en WiFi Internet access but be excluded from any access to your internal network. For information about how to configure BSSIDs, see Configure and Enable WiFi Security

Profiles on page 39.

• Restrict access based on MAC address.You can allow only trusted devices to connect so that

unknown devices cannot connect ov er the WiFi to the access point. Restricting access by MA C address adds an obstacle against unwanted access to your network, but the data broadcast over the WiFi link is fully exposed. For information about how to restrict access by MAC address, see Manage MAC

Address Filter Profiles in the Local MAC Address Database on page 50.

• Turn off the broadcast of the WiFi network name (SSID). If you disable broadcast of the SSID, only

devices with the correct SSID can connect.This nullifies the WiFi network discovery feature of some products, such as Windows XP, but the data is still exposed. For information about how to turn off broadcast of the SSID, see Configure and Enable WiFi Security Profiles on page 39.

• WPA2-PSK (AES).Wi-Fi Protected Access version 2 (WPA2) provides the most reliable security with

Advanced Encryption Standard (AES) encryption.This very strong authentication along with dynamic per-frame rekeying of WPA2 makes it virtually impossible to compromise.Y ou can also use a combination of Temporal Key Integrity Protocol (TKIP) and AES encryption. WPA2-PSK uses a pre-shared key (PSK) for authentication. For more information, see Configure and

Enable WiFi Security Profiles on page 39 and About WPA2-PSK and WPA-PSK & WPA2-PSK on page

46.

Configure the WiFi Features and Security

Page 38

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

• WPA2 with RADIUS.Wi-Fi Protected Access version 2 (WPA2) with a RADIUS server provides the

most reliable security with Advanced Encryption Standard (AES) encryption.This very strong authentication along with dynamic per-frame rekeying of WPA2 makes it virtually impossible to compromise. WPA2 uses RADIUS-based 802.1x authentication. For more information, see Configure and Enable

WiFi Security Profiles on page 39. and About WPA2 With RADIUS and WPA & WPA2 With RADIUS

on page 47

• WPA-PSK & WPA2-PSK mixed mode.This mode provides reliable security for both WPA-PSK and

WPA2-PSK clients. Encryption is supported with the TKIP + AES mode. WPA-PSK & WPA2-PSK uses a pre-shared key (PSK) for authentication; for more information, see

Configure and Enable WiFi Security Profiles on page 39 and About WPA2-PSK and WPA-PSK & WPA2-PSK on page 46.

• WPA & WPA2 mixed mode with RADIUS.This mode provides reliable security for both WPA and

WPA2 clients and a RADIUS server. Encryption is supported with the TKIP + AES mode. WPA & WPA2 uses RADIUS-based 802.1x authentication. For more information, see Configure and

Enable WiFi Security Profiles on page 39 and About WPA2 With RADIUS and WPA & WPA2 With RADIUS on page 47.

WiFi Security Profiles

WiFi security profiles, simply referred to as security profiles, let you configure unique security settings for each SSID on each radio of the access point. For each radio , the access point supports up to 8 WiFi security profiles (BSSIDs).That means that you can configure 16 security profiles with custom settings (see Configure

and Enable WiFi Security Profiles on page 39).

To set up a security profile, select its network authentication type, data encryption, WiFi client security separation, and VLAN ID:

• Network authentication.The access point is set by default as an open system with no authentication.

When you configure network authentication, bear in mind that some legacy WiFi de vices do not support WPA2. If your network includes computers with legacy WiFi devices, configure WPA & WPA2 mixed mode. For information about the types of network authentication that the access point supports, see Configure

and Enable WiFi Security Profiles on page 39.

• Data encryption. Select the data encryption that you want to use .The available options depend on the

network authentication setting (otherwise, data encryption is disabled by default).The data encryption settings are explained in Configure and Enable WiFi Security Profiles on page 39.

• WiFi client security separation. If this feature is enabled, the associated WiFi clients (using the same

SSID) are not able to communicate with 1each other .This feature is useful for hotspots and other pub lic access situations. By default, WiFi client separation is disabled. For more information, see Configure

and Enable WiFi Security Profiles on page 39.

• VLAN ID. If this f eature is enab led and if the network de vices (hubs and s witches) on y our LAN support

the VLAN (802.1Q) standard, the default VLAN ID for the access point is associated with each profile. The default VLAN ID must match the IDs that are used by the other network devices. For more information, see Configure and Enable WiFi Security Profiles on page 39.

Configure the WiFi Features and Security

Page 39

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Some concepts and guidelines regarding the SSID are explained in the following list:

• A basic service set (BSS) is a group of WiFi stations and a single access point, all using the same

security profile or service set identifier (BSSID). The actual identifier in the BSSID is the MAC address of the WiFi radio . (A WiFi radio can be assigned m ultiple MA C addresses, one f or each security profile.)

• An extended service set (ESS) is a group of WiFi stations and multiple access points , all using the same

identifier (ESSID).

• Different access points within an ESS can use different channels.To reduce interference, specify that

adjacent access points use different channels.

• Roaming is the ability of WiFi stations to connect over WiFi when they physically move from one BSS

to another one within the same ESS.The WiFi station automatically changes to the access point with the least interference or best performance.

Configure and Enable WiFi Security Profiles

The access point support 16 WiFi security profiles, 8 on each radio. A WiFi security profile defines the following characteristics for an individual WiFi network:

• Profile Definition. Lets you specify the profile name, WiFi network name (SSID), whether the SSID is

broadcast, band steering, RSSI threshold, MAC authentication, 802.11K radio resource management (RRM), and WiFi client separation of the WiFi network.

• Wireless Scheduling. Lets you specify an on and off schedule for broadcast of the WiFi network. (For

information about on and off scheduling of a radio, which affects all WiFi networks on the radio, see

Schedule the WiFi Radios to Be Turned Off on page 57.)

• Authentication Settings. Lets you specify the network authentication, data encryption, and VLAN ID

of the WiFi network.

• QoS Policies. Lets you specify the QoS policy and bandwidth limit of the WiFi network.

• Captive Portal. Lets you assign a captive portal profile to the WiFi network.

To configure and enable a WiFi security profile, you must enable the associated radio:

• For 802.11bg/ng/bgn modes, the 2.4 GHz radio must be enab led (see Configure 802.11bg/ng/bgn WiFi

Settings on page 24).

• For 802.11a/a-na-ac modes, the 5 GHz radio must be enabled. (see Configure 802.11a/a-na-ac WiFi

Settings on page 27).

Both radios can function concurrently and both radios are enabled by default.

To configure and enable a WiFi security profile:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

Configure the WiFi Features and Security

Page 40

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Profile Settings.

The Profile Settings page for the 802.11bg/ng/bgn and 802.11a/a-na-ac modes shows eight WiFi security profiles for each mode. (If the 2.4 GHz radio is disabled, the Enable column is masked out.)

The following table explains the fields of the Profile Settings page.

DescriptionSetting

The unique name of the security profile that makes it easy to recognize the profile.Profile Name The WiFi network name (SSID) for the security profile.SSID The configured WiFi authentication method for the security profile.Security The default VLAN ID that is associated with the security profile.VLAN

Enable

WMF-Enable

The check box that specifies whether the security profile is enabled. If you select the check box and click the Apply button, the security profile is enabled.

You cannot disable security profile #0 (NETGEAR) for either radio band.To disable this security profile, turn off the radio for the radio band (see Configure 802.11bg/ng/bgn WiFi Settings on page 24 and Configure 802.11a/a-na-ac WiFi Settings on page 27).

The check box that specifies whether Wireless Multicast Forwarding (WMF) is enab led. If you select the check box and click the Apply button, WMF is enabled.

WMF is required for applications that use multicasting, such as VLC streaming applications.When WMF is enabled, the access point converts multicast traffic to unicast traffic.WMF improves the overall performance because the access points transmits data according to the capability of each WiFi client.

5. To configure a WiFi security profile, select the corresponding radio b utton to the left of the WiFi security

profile.

Configure the WiFi Features and Security

Page 41

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. Click the Edit button.

The Edit Security Profile page displays.This page contains five sections that are described in detail in the following steps:

• Profile Definition. See step 7.

• Wireless Scheduling. See step 8.

• Authentication Settings. See step 9.

• QoS Policies. See step 10.

• Captive Portal. See step 11.

7. Specify the settings of the Profile Definition section as described in the following table.

DescriptionSetting

Profile Name

Wireless Network Name (SSID)

Enter a unique name of the security profile that makes it easy to recognize the profile. The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on, through NETGEAR-7.You can enter a value of up to 32 alphanumeric characters.

The WiFi network name (SSID) for the security profile.The default names depend on the selected radio band:

• 802.11 bg/ng/bgn.The default names are NETGEAR_11ng, NETGEAR_11ng-1,

NETGEAR_11ng-2, and so on, through NETGEAR_11ng-7 for the eighth profile.

• 802.11 a/a-na-ac.The default names are NETGEAR_11ac, NETGEAR_11ac-1,

NETGEAR_11ac-2, and so on, through NETGEAR_11ac-7 for the eighth profile.

Configure the WiFi Features and Security

Page 42

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

Broadcast Wireless Network Name (SSID)

Band Steering to 5GHz This setting does not

apply to

802.11a/a-na-ac profiles.

Rssi Threshold 5GHz (-100 to -10)

This setting does not apply to

802.11a/a-na-ac profiles.

MAC Authentication Type

Select the Yes radio button to enable the access point to broadcast its SSID, allowing WiFi stations with a null (blank) SSID to adopt the access point’ s SSID.Yes is the default setting.To prevent the SSID from being broadcast, select the No radio button.

Select the Enable radio button to enable band steering from the 2.4 GHz band to the 5 GHz band. Band steering can reduce the client density in the 2.4 GHz band by steering dual-band-capable clients to the 5 GHz band, thereby increasing the WiFi network capacity . By default, the Disable button is selected and band steering is disabled.

If you enable band steering, you can set the RSSI threshold. The received signal strength indicator (RSSI) threshold applies only if you enable band

steering. Enter the minimum RSSI value that a dual-band-capable client must be able to receive

from a 5 GHz radio before the client is steered from a 2.4 GHz radio to the 5 GHz radio. You can enter a value from –100 to –10. The default value is –70.

By default, the selection from the MAC A uthentication Type menu is Disable, and MAC address authentication is disabled. For you to enable MAC address authentication, you must either add a MAC address filter profile for local authentication (see Manage MAC

Address Filter Profiles in the Local MAC Address Database on page 50) or specify the

settings for a RADIUS server for remote authentication (see Configure RADIUS Server

Settings on page 48).

From the MAC Authentication Type menu, select one of the following options:

• Local MAC Address Database.

From the MAC Filter Profile Name menu, select the profile that you want to use and select one of the following MAC ACL Mode radio buttons:

- Accept List. All MAC address that are in the selected profile are allowed WiFi

access and all MAC addresses that are not in the profile are denied WiFi access .

- Deny List. All MAC address that are in the selected profile are denied WiFi

access and all MAC addresses that are not in the profile are allowed WiFi access. (This is the default selection.)

• Remote MAC Address Database.The RADIUS server that you configured is used

for MAC address authentication.

When you are configuring the access point from a WiFi computer whose MAC address is not in the MAC filter profile that you want to activate, you lose your WiFi connection when you click the Apply button.You then must access the access point from a wired computer or from a WiFi computer that is on the access control list to make any further changes.

Configure the WiFi Features and Security

Page 43

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

802.11K (RRM)

Wireless Client Security Separation

Select the 802.11K(RRM) check box to allow the access point to support 802.11K radio resource management (RRM). 802.11K RRM allows for a better utilization of access points in a network. If some access points are underutilized because their signal is not as strong as that of other access points in the network and those other access points are used to their maximum capacity, 802.11K RRM can steer clients to the underutilized access points. By default, the 802.11K(RRM) check box is cleared and 802.11K RRM is disabled.

WiFi client separation is intended for hotspots and other public access situations. Make one of the following selections from the menu:

• Select the Enable radio button to enable WiFi client security separation. Clients that

are connected to the WiFi network are prevented from communicating with each other.

• By default, the Disable button is selected and WiFi client security separation is

disabled. Clients that are connected to the WiFi network are allow ed to communicate with each other.This is the default selection.

8. To specify a schedule that allows the access point to turn broadcast of the WiFi network on and off, do

the following:

a. Select the Wireless Scheduling Enable radio button.

The page expands to display scheduling options. By default, the Disable radio button is selected and the scheduling options do not display.

The Wireless Scheduling radio buttons are not shown for the NETGEAR_11ng

Note

and NETGEAR_11ac SSIDs because you cannot specify a WiFi schedule for these default WiFi networks. Howe ver , y ou can specify a WiFi schedule for a radio (see Schedule the WiFi Radios to Be Turned Off on page 57), which affects all WiFi networks on the radio, including the default WiFi network.

b. From the Wireless Scheduling Type menu, select one of the following options:

• Everyday.The schedule applies every day of the week (Monday through Sunda y). Set the start

and end time for the schedule by moving the circles on the Security Profile On & Off Time bar. By default, this schedule enables the radio to be activ e from 7:00 a.m. to 6:30 p.m. (18:30).

• Weekdays.The schedule applies every weekday of the week (that is , Monday through Friday).

Set the start and end time for the schedule by moving the circles on the Security Profile On

Configure the WiFi Features and Security

Page 44

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

& Off Time bar. By default, this schedule enables the radio to be active from 7:00 a.m. to 6:30

p.m. (18:30).

• Weekend.The schedule applies on the weekend only (Saturday and Sunday). Set the start

and end time for the schedule by moving the circles on the Security Profile On & Off Time bar. By default, this schedule enables the radio to be activ e from 7:00 a.m. to 6:30 p.m. (18:30).

• Custom.This selection lets you define a schedule for each day of the week or selected days

of the week by doing the following:

1. Select the check boxes for the days for which you want to set and activate a schedule and

clear the check box es f or the days f or which y ou do not want to set and activ ate a schedule.

2. For each active day, set the start and end time for the schedule by moving the circles on

the bar that is associated with the individual day. By default, the schedule enables the radio to be active from 7:00 a.m. to 6:30 p.m. (18:30) on the individual day.

9. Specify the settings of the Authentication Settings section as described in the following table.

The access point is set by default as an open system with no authentication. Howe ver ,

Note

we recommend that you configure security.

and Data Encryption The data encryption

fields that display on the page depend on your selection from the

Network Authentication menu.

DescriptionSetting

Open SystemNetwork Authentication

WPA2 with RADIUS

WPA & WPA2 with RADIUS

This is the default setting. An open system does not provide any security or encryption.

Configure the RADIUS server settings and select AES or TKIP + AES encryption. For more information, see the following sections:

• About WPA2 With RADIUS and WPA & WPA2 With RADIUS

on page 47

• Configure RADIUS Server Settings on page 48

Select this setting only if all clients support WPA2. Configure the RADIUS server setting.TKIP + AES encryption is the

default encryption. F or more information, see the f ollowing sections:

• About WPA2 With RADIUS and WPA & WPA2 With RADIUS

on page 47

• Configure RADIUS Server Settings on page 48

This setting allows clients to connect through either WPA with TKIP or WPA2 with AES.

Configure the WiFi Features and Security

Page 45

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

Enter a WPA passphrase and select AES or TKIP + AES encryption. For more information, see About WPA2-PSK and WPA-PSK &

WPA2-PSK on page 46.

Select this setting only if all clients support WPA2. Enter a WPA passphrase.TKIP + AES encryption is the default

encryption. For more information, see About WPA2-PSK and

WPA-PSK & WPA2-PSK on page 46.

This setting allows clients to connect through either WPA with TKIP or WPA2 with AES.

and Data Encryption (continued)

VLAN ID

WPA2-PSKNetwork Authentication

WPA-PSK & WPA2-PSK

Enter the VLAN ID to be associated with this security profile.The range for the VLAN ID is 1–4094.The default VLAN ID is 1.

The VLAN ID must match the VLAN ID that is used by the other de vices in your network.

10. Specify the settings of the QoS Policy section as described in the following table.

To be able to select a QoS policy, you must first configure one or more policies (see

Note

Configure and Manage Quality of Service Policies on page 112).

DescriptionSetting

Mode

Policy Details

Bandwidth Limit (bits per second)

Select the Mode check box to enable the selection of QoS policies and bandwidth limits.

Select a QoS policy from the Incoming menu, Outgoing menu, or both menus. Depending on your selection, the policy is applied to incoming packets, outgoing

packets, or both incoming and outgoing packets, and is displayed in the Policy Details fields.

As an option, specify the bandwidth limits in bits per second (bps) for incoming traffic, outgoing traffic, or both traffic streams. For example, to set a limit of 1 Mbps, enter 1048576 (or round down to 1000000).

11. To assign a captive portal profile to the WiFi security profile, select a captive portal instance from the

Profile Name menu (NETGEAR or NETGEAR-1).

To be able to select a captive portal instance, you must configure and enab le at least

Note

one captive portal instance and globally enable captive portals (see Manage Captive

Portals on page 120).

12. Click the Apply button.

Your settings are saved.

Configure the WiFi Features and Security

Page 46

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

13. Click the Back button.

The Profile Settings page displays again.

14. To enable the security profile that you just configured, make sure that the Enable check box for the

profile is selected.

15. To enable Wireless Multicast Forwarding (WMF) for the security profile that you just configured, make

sure that the WMF-Enable check box is enabled.

WARNING:

If you use a WiFi computer to configure WiFi security settings, you are disconnected when you click the Apply button. Reconfigure your WiFi computer to match the new settings, or access the access point fr om a wired computer to make further changes.

16. If you made any changes, click the Apply button again.

Your settings are saved.

About WPA2-PSK and WPA-PSK & WPA2-PSK

WP A2-PSK and WPA-PSK & WP A2-PSK authentication use a pre-shared k ey (PSK, also called a passphrase or a network key) and do not require authentication from a RADIUS server.

The selections that are available from the Data Encryption menu depend on the type of WPA-PSK authentication that you select from the Network A uthentication menu and are shown in the f ollowing tab le.

Table 2. Security and encryption options for WPA2-PSK and WPA-PSK & WPA2-PSK

DescriptionsSetting

AESData Encryption

TKIP + AES

Advanced Encryption Standard (AES) is the standard encryption method used with WPA2.

Although some WiFi clients might support AES with WPA, the WAC720 and WAC730 access points do not support WPA with AES.

TKIP + AES supports both WPA and WPA2. Broadcast packets use TKIP. For unicast (point-to-point) transmissions, WPA clients use TKIP, and WPA2 clients use AES.

For the WPA & WPA2 mixed mode, TKIP + AES is the only supported data encryption method.

Configure the WiFi Features and Security

Page 47

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Table 2. Security and encryption options for WPA2-PSK and WPA-PSK & WPA2-PSK (Continued)

DescriptionsSetting

Passphrase

Show Passphrase in Clear Text

Enter a passphrase.The passphrase length must be between 8 and 63 characters (inclusive).The default passphrase is sharedsecret.

You can display the actual passphrase by selecting the Show Passphrase in Clear Text Yes radio button.

Select the Yes radio button to display the actual passphrase in the Passphrase field. The default setting is No.

About WPA2 With RADIUS and WPA & WPA2 With RADIUS

WPA2 and WPA & WPA2 security require RADIUS-based 802.1x authentication, so you also must define RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Server Settings on page 48.

The selections that are available from the Data Encryption menu depend on the type of WPA authentication that you select from the Network Authentication menu and are shown in the following table.

Table 3. Encryption options for WPA with RADIUS and WPA & WPA2 with RADIUS

DescriptionsSetting

AES

Advanced Encryption Standard (AES) is the standard encryption method used with WPA2. Although some WiFi clients might support AES with WPA, the WAC720 and WAC730 access

points do not support WPA with AES.

TKIP + AES

The TKIP + AES encryption method is supported both for WPA and WPA2. Broadcast packets use TKIP. For unicast (point-to-point) transmissions, WPA clients use TKIP, and WPA2 clients use AES. F or the WPA & WPA2 mixed mode, TKIP + AES is the only supported data encryption method.

Change the QoS Policy for a WiFi Security Profile

To change the QoS policy for a WiFi security profile:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Profile Settings.

Configure the WiFi Features and Security

Page 48

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

The Profile Settings page displays.

5. Select the radio button the left of the security profile.

6. Click the Edit button.

The Edit Security Profile page displays.

7. From the menu from which you can select another QoS policy, select None.

8. Click the Apply button.

The old policy is removed from the security profile.

9. Select the new QoS policy from the same menu.

10. Click the Apply button.

Your settings are saved.

Configure RADIUS Server Settings

For authentication, accounting, or both authentication and accounting using RADIUS, you must configure primary servers and optional secondary servers.These RADIUS server settings can apply to all devices that are connected to the access point.

You can configure both IPv4 and IPv6 servers. In the IPv4 RADIUS Server Settings section, enter IPv4 addresses only. In the IPv6 RADIUS Server Settings section, enter IPv6 addresses only.

To configure the RADIUS server settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Advanced > RADIUS Server Settings.

Configure the WiFi Features and Security

Page 49

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

5. Specify the settings as described in the following table.

DescriptionsSetting

RADIUS Server Settings

IPv4 Address or IPv6 AddressPrimary Authentication Server

Authentication Server

Accounting Server

Port

Shared Secret

IPv4 Address or IPv6 AddressSecondary

Port

Shared Secret

IPv4 Address or IPv6 AddressPrimary

Port

Shared Secret

Enter the IP address of the primary RADIUS server for authentication.

Enter the number of the UDP port on the access point that is used to access the primary RADIUS server for authentication. The default port number is 1812.

Enter the shared key that is used between the access point and the primary RADIUS server during authentication.

Enter the IP address of the secondary RADIUS server for authentication.The secondary RADIUS server is used when the primary RADIUS server is not available.

Enter the number of the UDP port on the access point that is used to access the secondary RADIUS server for authentication. The default port number is 1812.

Enter the shared key that is used between the access point and the secondary RADIUS server during authentication.

Enter the IP address of the primary RADIUS server for accounting.

Enter the number of the UDP port on the access point that is used to access the primary RADIUS server for accounting.The default port number is 1813.

Enter the shared key that is used between the access point and the primary RADIUS server during the accounting process.

Configure the WiFi Features and Security

Page 50

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionsSetting

IPv4 Address or IPv6 AddressSecondary Accounting Server

Port

Shared Secret

Authentication Settings Reauthentication

Time (secs) Update Global

Key Every (secs)

The interval in seconds after which the supplicant is reauthenticated with the RADIUS server.

The default interval is 3600 seconds (1 hour). Enter 0 to disable reauthentication.

Select the check box to allow the global k ey update, and enter the interval in seconds .The check

box is selected by def ault, and the default interval is 1800 seconds (30 minutes). Clear the check

box to prevent the global key update.

Enter the IP address of the secondary RADIUS server for accounting.The secondary RADIUS server is used when the primary RADIUS server is not available.

Enter the number of the UDP port on the access point that is used to access the secondary RADIUS server for accounting. The default port number is 1813.

Enter the shared key that is used between the access point and the secondary RADIUS server during the accounting process.

6. Click the Apply button.

Your settings are saved. For information about assigning the configured RADIUS server to a WiFi security profile for MAC address

authentication, see step 7 in Configure and Enable WiFi Security Profiles on page 39.

Manage MAC Address Filter Profiles in the Local MAC Address Database

For increased security, you can restrict access to an SSID by allowing access to only specific computers or WiFi stations based on their MAC addresses.You can restrict access to only trusted computers so that unknown computers cannot connect over WiFi to the access point. MA C address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the WiFi link is fully exposed if you do not also implement WiFi security.

Before you can implement MAC address filtering, you must add one or more MAC address filter profiles (which is described in this section) and then assign the profile to a WiFi security profile (see Configure and

Enable WiFi Security Profiles on page 39).You can assign the same MAC address filter profile to multiple

WiFi security profiles, or you can set up different MA C address filter profiles for diff erent WiFi security profiles. You can manually add MAC addresses to the MAC address filter profile and you can import a list of trusted

MAC addresses.The file that you import must satisfy the following requirements:

• The file must be a plain-text file with a .txt or .cfg extension.

• Entries in the file must be MAC addresses in hexadecimal format with each octet separated by colons,

for example 00:11:22:33:44:55.

• Entries must be separated with a single space.

• The file must contain only MAC addresses, no other information.

Configure the WiFi Features and Security

Page 51

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

You cannot add multicast or broadcast MAC addresses to a MAC address filter profile.Note

For all MAC address filter profiles together, the access point can support a maximum number of 512 MAC addresses. For example, you can set up two MAC address filter profiles with 256 MAC addresses each, or you can set up 16 MAC address filter profiles with 32 MAC addresses each, provided that the total number of MAC addresses for all profiles together does not exceed 512.

Add a MAC Address Filter Profile

To add a MAC address filter profile:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Advanced > MAC Authentication.

By default, no MAC filter profile exists.

5. Click the Add MAC Filter Profile button above the table.

Configure the WiFi Features and Security

Page 52

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. In the MAC Filter Profile Name field, enter a name for the new profile.

This name identifies the profile and lets you assign it later to a WiFi security profile.

7. Populate the Wireless Stations table by one of the f ollowing methods or by a combination of the f ollowing

methods:

• Enter MAC addresses manually by doing the following: a. Enter a MAC address in the MAC Address List field.

b. Click the Add button.

• Import a list of trusted MAC addresses by doing the following: a. Select the Replace radio button or Merge radio button.

The imported list either replaces the MAC addresses in the Wireless Stations table or merges with the MAC addresses in the Wireless Stations table.

b. Click the Browse button and navigate to and select the file with MAC addresses.

The file that you import must be a plain-text file with a .txt or .cfg extension. Entries in the file must be MAC addresses in hexadecimal format with each octet separated by colons, for example 00:11:22:33:44:55. Separ ate entries with a single space. F or the file to be accepted, it must contain only MAC addresses.

To download a sample file, click the Download Sample link.Note

8. To fine-tune the Wireless Stations table and delete one or more MAC addresses from the Wireless

Stations table, select individual check boxes for the MAC addresses and click the Delete button.

9. Click the Apply button.

Your settings are saved.The Add MAC Filter Profile pop-up window closes. For information about assigning the MAC address filter profile to a WiFi security profile, see Step 7 in

Configure and Enable WiFi Security Profiles on page 39.

Modify a MAC Address Filter Profile

To modify an existing MAC address filter profile:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Configure the WiFi Features and Security

Page 53

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Configuration > Security > Advanced > MAC Authentication.

The page that displays shows a table with MAC address filter profiles.

5. If more than one profile exists, select the check box for the profile that you want to modify.

6. Click the Edit button.

The Edit MAC Filter Profile pop-up window opens.

7. Modify the MAC address filter profile.

For more information, see Add a MAC Address Filter Profile on page 51.

8. Click the Apply button.

Your settings are saved.The Add MAC Filter Profile pop-up window closes.

Delete a MAC Address Filter Profile

To delete an existing MAC address filter profile:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Advanced > MAC Authentication.

The MAC Authentication page displays and shows a table with MAC address filter profiles.

5. Select the check box for the profile that you want to delete.

You can select more than one check box and delete several profiles.

6. Click the Delete Profile button.

The profile or profiles are deleted.

Enable Rogue AP Detection and Monitor Rogue APs

Unidentified access points (APs) that use the SSID of a legitimate network can present a serious security threat. Detecting rogue access points involves scanning the WiFi environment on all available channels, looking for unidentified access points.

When rogue AP detection is enabled, the access point interacts only with devices in the Known AP list.

Configure the WiFi Features and Security

Page 54

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Enable Rogue AP Detection

When you enable rogue AP detection, the access point interacts only with devices in the Known AP list.

To enable rogue AP detection:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Security > Advanced > Rogue AP.

You can conrogue AP detection for 802.11 bg/ng/bgn devices, 802.11 a/a-na-ac devices , or both types of devices.

5. Select the Turn Rogue AP Detection On check box.

6. Select a detection policy from the Rogue AP Detection Policy menu:

• Mild.The AP scans for unknown APs every 180 seconds.

• Moderate.The AP scans for unknown APs every 60 seconds.

• Aggressive.The AP scans for unknown APs every 10 seconds.

Detected rogue APs are placed in the Unknown AP List.

Configure the WiFi Features and Security

Page 55

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

7. To move APs from the Unknown AP List to the Known AP List, do the following: a. Select individual check boxes for MAC addresses, or select all MAC addresses by selecting the

check box in the heading.

b. Click the Move button to transfer the MAC addresses from the Unknown AP List to the Known AP

List.

8. To import a list of known APs, do the following: a. Click the Replace or Merge button.

The imported list either replaces the Known AP List or merges with the Known AP List.

b. Click the Choose File button and navigate to and select the file with access points.

9. To fine-tune the Known AP List and delete one or more MAC address from the Known AP List, select

individual check boxes for the MAC addresses and click the Delete button.

10. Click the Apply button.

Your settings are saved.

Monitor Rogue APs

You can view a table with rogue access points that were detected.The table also provides detailed information about the rogue access points.

To monitor rogue APs:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Configure the WiFi Features and Security

Page 56

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitoring > Rogue AP > Unknown AP List.

The Unknown AP List shows information for each unkno wn device, including inf ormation about beacons.

5. To update the list, click the Refresh button.

6. To save the list as a text file, click the Save button and follow the instructions of your browser to save

the file to your computer.

Monitor Knows APs

You can view a table with known access points.The table also provides information about the known access points.

To monitor known APs:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Configure the WiFi Features and Security

Page 57

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitoring > Rogue AP > Known AP List.

The Known AP List shows information for each known device.

5. To update the list, click the Refresh button.

6. To save the list as a text file, click the Save button and follow the instructions of your browser to save

the file to your computer.

Schedule the WiFi Radios to Be Turned Off

Scheduling the WiFi radios to be turned off is a green feature that allows you to turn off the WiFi radios during scheduled vacations, office shutdowns, on evenings, or on weekends.

The schedule applies to all WiFi networks that broadcast on a radio. For information about scheduling the broadcast of an individual WiFi network, see step 8 in Configure and Enable WiFi Security Profiles on page

39.

To schedule the radios to be turned on and off:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Configure the WiFi Features and Security

Page 58

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Configuration > Wireless > Basic > Wireless Scheduling.

The previous show the page f or a custom scheduling type. Howe ver , by def ault, the page for the Ev eryday scheduling type displays.

You can a schedule for 802.11 bg/ng/bgn devices, 802.11 a/a-na-ac devices, or both types of devices.

5. Select the Wireless Scheduling Enable radio button.

By default, the Disable radio button is selected.

6. From the Wireless Scheduling Type menu, select one of the following options:

• Everyday.The schedule applies every day of the week (Monday through Sunday). Set the start

and end time for the schedule by moving the circles on the Radio On & Off Time bar. By default, this schedule enables the radio to be active from 7:00 a.m. to 6:30 p.m. (18:30).

• Weekdays.The schedule applies every weekday of the week (that is, Monday through Friday). Set

the start and end time for the schedule by moving the circles on the Radio On & Off Time bar. By default, this schedule enables the radio to be active from 7:00 a.m. to 6:30 p.m. (18:30).

• Weekend.The schedule applies on the weekend only (Saturday and Sunday). Set the start and

end time for the schedule by moving the circles on the Radio On & Off Time bar. By default, this schedule enables the radio to be active from 7:00 a.m. to 6:30 p.m. (18:30).

• Custom.This selection lets y ou define a schedule f or each day of the week or selected days of the

week by doing the following:

Configure the WiFi Features and Security

Page 59

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

a. Select the check box es f or the da ys f or which you w ant to set and activate a schedule and clear

the check boxes for the days for which you do not want to set and activate a schedule.

b. For each active day, set the start and end time for the schedule by moving the circles on the

bar that is associated with the individual day. By default, the schedule enables the radio to be active from 7:00 a.m. to 6:30 p.m. (18:30) on the individual day.

7. Click the Apply button.

Your settings are saved. The schedule is active and WiFi broadcast occurs according to the schedule that you defined.

Configure Basic WiFi Quality of Service

Wi-Fi Multimedia (WMM) is a subset of the 802.11e standard.WMM allows you to specify a range of priorities, depending on the type of data.Time-dependent information, such as video or audio, is given a higher priority than normal traffic. For WMM to function correctly, WiFi clients must also support WMM.

By enabling WMM, y ou allow Quality of Service (QoS) control for upstream traffic flo wing from a WiFi station to the access point and for downstream traffic flowing from the access point to a WiFi station.

WMM defines the following four queues in decreasing order of priority:

• Voice.The highest priority queue with minimum delay, which makes it ideal for applications like VoIP

and streaming media.

• Video.The second highest priority queue with low delay is given to this queue.Video applications are

routed to this queue.

• Best Effort.The medium priority queue with medium delay is given to this queue. Most standard IP

applications use this queue.

• Background. Low priority queue with high throughput. Applications, such as FTP, that are not

time-sensitive but require high throughput can use this queue.

The WMM Powersave feature saves power for battery-powered equipment by increasing the efficiency and flexibility of data transmission.

For information about how to configure advanced WiFi QoS, that is, to configure

Note

specific Enhanced Distributed Channel Access (EDCA) settings, see Configure

Advanced Quality of Service Settings on page 109.

To configure basic WiFi QoS:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

Configure the WiFi Features and Security

Page 60

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Wireless > Basic > QoS Settings.

5. To turn on QoS globally, select the Mode Enable button.

6. Enable or disable individual WMM features for 802.11 bg/ng/bgn devices , 802.11 a/a-na-ac devices, or

both types of devices:

• Enable Wi-Fi Multimedia (WMM).To enable this feature, select the Enable radio button, which is

the default setting. Select the Disable radio button to disable the feature.

• WMM Power save.T o enab le this feature, select the Enable r adio button, which is the default setting.

Select the Disable radio button to disable the feature.

7. Click the Apply button.

Your settings are saved.

Configure the WiFi Features and Security

Page 61

Manage and Monitor the Access Point

This chapter describes how to use the management and monitoring features of the access point. The chapter includes the following sections:

• Enable Remote Management

• Upgrade the Access Point Firmware

• Manage the Configuration File or Reset to Factory Defaults

• Change the Administrator Password

• Manage User Accounts

• Enable the Syslog Server

• Monitor the Access Point

• View the Activity Logs

• View the Traffic Statistics

• Set Up, Manage, and Monitor Ensembles

Page 62

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Enable Remote Management

Both Simple Network Management Protocol (SNMP) and the remote console Secure Shell (SSH) are enabled by default, which allows f or remote management of the access point from a client running SNMP management software, as well as from an SSH client.The Telnet console is disabled by default.

The following sections describe the remote management options:

• SNMP Management on page 62

• Secure Shell and Telnet Management on page 63

SNMP Management

To set up an SNMP management interface:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Remote Management > SNMP.

Specify the settings as described in the following table.

DescriptionSetting

SNMP

Read-Only Community Name

Read-Write Community Name

Select the Enable radio button to allow the SNMP netw ork management software, such as HP OpenView , to manage the access point through SNMPv1/v2 protocol. By default, the Disable radio button is selected.

Enter the community string to allow the SNMP manager to read the access point’s Management Information Base (MIB) objects.The default is public.

Enter the community string to allow the SNMP manager to read and write the access point’s MIB objects.The default is private.

Manage and Monitor the Access Point

Page 63

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

Trap Community Name

IP Address to Receive Traps

Trap Port

5. Click the Apply button.

Your settings are saved.

Enter the community string to allow the SNMP manager to send traps.The default is trap.

Enter the IP address of the SNMP manager to receive traps sent from the access point.

Enter the number of the SNMP manager port to receive traps sent from the access point.The default is 162.

Secure Shell and Telnet Management

To configure remote console features:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Remote Management > Remote Console.

5. Enable or disable the remote console features:

Manage and Monitor the Access Point

Page 64

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

• Secure Shell (SSH).To enable this feature, select the Enable radio button, which is the default

setting. Select the Disable button to disable the feature.

• Telnet.To enable this feature, select the Enable radio button. Select the Disable button to disable

the feature, which is the default setting.

6. Click the Apply button.

Your settings are saved.

Manage the Access Point over a Telnet Connection

To manage the access point over a Telnet connection:

1. Connect an Ethernet cable to the console port of the access point.

2. Connect the other end of the cable to a VT100/ANSI terminal or a computer.

If you attach a computer that is running a Windows, Apple, or Linux operating system, start a secure terminal emulation program, and configure the terminal emulation program to use the following settings:

• Baud rate. 9600 bps

• Data bits. 8

• Parity. None

• Stop bit. 1

• Flow control. None

3. Start a secure Telnet session from the terminal or workstation to the access point. A page similar to the

following displays:

4. Enter the login name and password.

The default login name is admin and the default password is password. After successful login, the > prompt appears, preceded by the name of the access point. In this example ,

the prompt is netgear334408.

5. Enter the CLI commands that you want to use.

Manage and Monitor the Access Point

Page 65

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

You can enter show configuration to display the available CLI commands.

You can also access the access point remotely over a Telnet or SSH session using

Note

an application such as PuTTY, if such an encryption application is allowed by law in your country . After you connect to the access point, enter the login name and pass word to access the CLI.

Upgrade the Access Point Firmware

The firmware of the access point is stored in flash memory and can be upgraded as NETGEAR releases new firmware.You can download upgrade files from the NETGEAR website.You can send the upgrade file using your browser.Two methods are available to perform a firmware upgrade, which are described in the following sections:

• Upgrade the Firmware Over a Web Browser on page 65

• Upgrade the Firmware Over a TFTP Server on page 66

The web browser that you use to upload new firmware into the access point must support

Note

HTTP uploads. Use a browser such as Microsoft Internet Explorer, Mozilla Firefox, or Google Chrome.

WARNING:

When uploading firmware to the access point, do not interrupt the web browser by closing the page, clicking a link, or loading a new page. If the browser is interrupted, the upload might fail, corrupt the firmware, and render the access point inoperable.

IMPORTANT:

In some cases, such as a major upgrade, you might need to erase the configuration and manually reconfigure your access point after upgrading it. See the release notes included with the firmware to find out if you must reconfigure the access point.

Upgrade the Firmware Over a Web Browser

To use a web browser to upgrade the access point firmware:

1. Download the new firmware file from the NETGEAR website at downloadcenter.netgear.com and save

it to your computer.

2. If available, read the release notes before upgrading the firmware.

3. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable.

Manage and Monitor the Access Point

Page 66

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

For more information, see Log In to the Access Point on page 16.

4. In the address bar, enter the IP address of the access point.

A login window opens.

5. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

6. Select Maintenance > Upgrade > Firmware Upgrade.

7. Click the Choose File button and locate and select the firmware upgrade file.

The firmware upgrade file is a .tar file.

8. Click the Apply button to initiate the upgrade process.

During the upgrade process, the access point automatically restarts.The upgrade process typically takes several minutes.When the Test LED turns off, wait a few more seconds before doing anything with the access point.

9. Verify that the new firmware file was installed by selecting Monitoring > System.

The System page displays.The firmware version is shown in the Access Point Information section of the page.

Upgrade the Firmware Over a TFTP Server

To use this method, you need access to a TFTP server.

To use a TFTP server to upgrade the access point firmware:

1. Download the new firmware file from the NETGEAR website at downloadcenter.netgear.com and save

it to your computer.

2. Transfer the firmware file to your TFTP server.

3. If available, read the release notes before upgrading the firmware.

4. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

5. In the address bar, enter the IP address of the access point.

A login window opens.

Manage and Monitor the Access Point

Page 67

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

7. Select Maintenance > Upgrade > Firmware Upgrade TFTP.

8. Specify the following information:

• Firmware File Name.The name of the firmware file.

• TFTP Server IP.The IP address of your TFTP server.

9. Click the Apply button to initiate the upgrade process.

10. Verify that the new firmware file was installed by selecting Monitoring > System.

The System page displays.The firmware version is shown in the Access Point Information section of the page.

Manage the Configuration File or Reset to Factory Defaults

The access point settings are stored in the configuration file.Y ou can sav e this file (back it up) to a computer , restore it from a computer, or reset it to factory default settings, as described in the following sections:

• Save the Configuration on page 68

• Restore the Configuration on page 68

• Restore the Access Point to the Factory Default Settings on page 69

• Reboot the Access Point Without Restoring the Default Configuration on page 71

Manage and Monitor the Access Point

Page 68

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Save the Configuration

To save your settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Upgrade > Backup Settings.

5. Click the Backup button.

Your browser extracts the configuration file (the file name is config) from the access point and prompts you for a location on your computer to store the file.

6. Follow the instructions of your browser to save the file.

Restore the Configuration

To restore your settings from a saved configuration file:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Upgrade > Restore Settings.

Manage and Monitor the Access Point

Page 69

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

5. Click the Choose File button and locate and select the backup configur ation file (the file name is config).

IMPORTANT:

During the restoration process, do not try to go online, turn off the access point, shut down the computer, or do anything else to the access point until it finishes restarting!

6. Click the Apply button to initiate the restoration process.

During the restoration process, the access point automatically restarts.The restoration process typically takes about one minute.When the Test LED turns off, wait a few more seconds before doing anything with the access point.

Restore the Access Point to the Factory Default Settings

You can restore the access point to the factory default settings by two methods that are described in the following sections:

• Use the Local Browser Interface to Restore Factory Default Settings on page 70

• Use the Reset Button to Restore Factory Default Settings on page 70

After you restore the factory default settings on the access point, the f ollowing occurs:Note

• All custom configurations are lost.

• The login password is password.

• The default LAN IP address is 192.168.0.100.

• The DHCP client is enabled.

• Business Central mode is enabled.

• The name in the Access Point Name field is reset to the name that is printed on

the access point label.

Manage and Monitor the Access Point

Page 70

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Use the Local Browser Interface to Restore Factory Default Settings

To restore the factory default settings using the local browser interface:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Reset > Restore Defaults.

5. Select the Yes radio button.

By default, the No radio button is selected.

IMPORTANT:

During the restoration process, do not try to go online, turn off the access point, shut down the computer, or do anything else to the access point until it finishes restarting!

6. Click the Apply button.

The access point is reset to the factory default settings. During the restoration process, the access point automatically restarts.The restoration process typically

takes about one minute.When the Test LED turns off, wait a few more seconds before doing anything with the access point.

After the restoration process is complete, Business Central mode is enabled on the access point. For information about disabling Business Central mode so that the access point can function in standalone mode, see Disable Business Central Mode for a Standalone Access Point on page 19.

Use the Reset Button to Restore Factory Default Settings

To restore the factory default settings when you do not know the login user name, login password, or IP address, you must use the Reset button on the rear panel of the access point (see Rear Panel on page

10).

Manage and Monitor the Access Point

Page 71

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

To restore the factory default settings using the Reset button:

1. Using a sharp object, press and hold the Reset button for about five seconds (until the Test LED blinks

rapidly) to reset the access point to factory defaults settings. Pressing the Reset button for a shorter time simply causes the access point to reboot.

2. Release the Reset button.

Reboot the Access Point Without Restoring the Default Configuration

If you cannot physically access the access point to turn it off and on again, you can use the local browser interface to reboot the access point.

To reboot the access point:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Reset > Reboot AP.

5. Select the Yes radio button.

By default, the No radio button is selected.

6. Click the Apply button to reboot the access point.

The reboot process typically takes about one minute.When the Test LED turns off, wait a few more seconds before doing anything with the access point.

Manage and Monitor the Access Point

Page 72

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Change the Administrator Password

The default password is password.We recommend that you change this password to a more secure password.You cannot change the administrator login name (admin).

The ideal password contains no dictionary words from any language and is a mixture of letters (both uppercase and lowercase), numbers, and symbols.Your password can be up to 30 characters.

To change the administrator password:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Maintenance > Password > Change Password.

5. Take one of the following actions:

• Enter a new password twice, once in the New Password field and again in the Repeat New

Password field.

• To restore the default password, select the Restore Default Password Yes radio button.

By default, the No radio button is selected.

6. Click the Apply button.

Your settings are saved. If you restored the default pass word, the login password is pass word. If you configured a ne w password,

write it down in a secure place.

Manage and Monitor the Access Point

Page 73

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Manage User Accounts

The admin user account is the default user account, which you cannot delete. However, you can add other user accounts, modify them, and delete them. Users for whom you set up an account can access the local browser interface with read-only or read/write privileges.

Only the administrator can create, change, and delete user accounts.Note

Add a New User Account

To add a new user account:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > User Accounts.

5. Configure the settings in the upper part of the page as described in the following table.

Manage and Monitor the Access Point

Page 74

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

DescriptionSetting

Enter a new user name.User Name Enter a password between 4 and 12 characters in length.Password From the Privilege menu, select Read Write or Read Only.Privilege

6. Click the Add button.

The user account is added.

7. Click the Apply button.

Your settings are saved.

Change the Name for a User Account

To change the name for a user account:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > User Accounts.

The User Accounts page displays.

5. In the Update User Accounts section, select a user from the Existing Users menu.

6. In the User Name field, modify the name.

7. Click the Modify button.

The user name is changed.

8. Click the Apply button.

Your settings are saved.

Manage and Monitor the Access Point

Page 75

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Change the Privilege for a User Account

To change the privilege for a user account:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > User Accounts.

The User Accounts page displays.

5. In the Update User Accounts section, select a user from the Existing Users menu.

6. From the Privilege menu, select another privilege.

7. Click the Reset Password button.

The password is reset to the default password, which is password.

8. Click the Apply button.

Your settings are saved.

Reset the Password for a User Account

To reset the password for a user account:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > User Accounts.

The User Accounts page displays.

5. In the Update User Accounts section, select a user from the Existing Users menu.

6. Click the Reset Password button.

Manage and Monitor the Access Point

Page 76

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

The password is reset to the default password, which is password.

7. Click the Apply button.

Your settings are saved.

If you want to modify a passw ord, delete the user account, and then recreate the user

Note

account with the password of your choice.

Delete a User Account

To delete a user account:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > User Accounts.

The User Accounts page displays.

5. In the Update User Accounts section, select a user from the Existing Users menu.

6. Click the Delete button.

7. Click the Apply button.

Your settings are saved.

Enable the Syslog Server

You can enable the syslog option if your LAN includes a syslog server. If syslog is enab led, the access point sends its syslog files to the syslog server.

To enable a syslog server:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

Manage and Monitor the Access Point

Page 77

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > System > Advanced > Syslog.

Specify the settings as described in the following table.

DescriptionSetting

Enable Syslog

Syslog Server IP Address

Port Number

5. Click the Apply button.

Your settings are saved.

Select the check box to enable the syslog option. By default, the syslog option is disabled.

Enter the IP address of the syslog server to which the access point sends the syslog files.

Enter the port number that is configured on the syslog server.The default port number is 514.

Monitor the Access Point

The following sections describe how you can monitor the access point:

• View System Information on page 78

• View Dashboard Information on page 80

• Monitor WiFi Clients on page 83

• View the Activity Logs on page 85

• View the Traffic Statistics on page 86

For information about monitoring rogue access points, see Enable Rogue AP Detection and Monitor Rogue

APs on page 53.

For information about monitoring ensembles, see Set Up, Manage, and Monitor Ensembles on page 87.

Manage and Monitor the Access Point

Page 78

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

View System Information

You can view a summary of the current access point configuration settings, including current IP settings and current WiFi settings.This information is read only, so any changes must be made on other pages.

To view the System page:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Monitoring > System.

The following table explains the fields of the System page:

DescriptionSetting

Access Point Information Access Point Name

The NetBIOS name. F or inf ormation about how to change the default name , see Configure Basic General System Settings on page 20.

Manage and Monitor the Access Point

Page 79

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

The MAC address of the access point’s Ethernet port.Ethernet MAC Address The MAC address of the access point’s 2.4 GHz WiFi radio.Wireless MAC Address for 2.4 GHz The MAC address of the access point’s 5 GHz WiFi radio.Wireless MAC Address for 5 GHz Enabled indicates that LLDP is enabled. Disabled indicates that it is not.Ethernet LLDP

Country/Region

The country or region for which the access point is licensed for use. For information about how to change the country or region, see Configure Basic

General System Settings on page 20.

Make sure that the country is set to the location where the

Note

device is operating.You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.

It might not be legal to operate this access point in a country

Note

or region other than one of those identified in this field.

The version of the firmware that is currently installed.Firmware Version The serial number of the access point.Serial Number

Current Time

Current IPv4 Settings For information about how to change any of these IP settings, see Configure the IPv4 Settings on page 23.

DHCP Client

Current IPv6 Settings For information about how to change any of these IP settings, see Configure IPv6 Settings on page 101.

Dynamic IPv6 Address

LAN IPv6 Link-Local Address

DHCP Client

The current time. For inf ormation about how to change the time settings, see

Configure Basic General System Settings on page 20.

The length of time since the access point became active.AP Uptime

The IPv4 address of the access point.IP Address The subnet mask for the address of the access point.Subnet Mask The default IPv4 gateway for the access point communication.Default Gateway Enabled indicates that the current IP address was obtained from a DHCPv4

server on your LAN network. Disabled indicates a static IP configuration.

The default IPv6 address of the access point.IPv6 Address The prefix length for the address of the access point.Prefix Length The dynamically assigned IPbv6 address if the DHCPv6 server has the

stateful option enabled. The default IPv6 gateway for the access point communication.Default Gateway This is an automatically generated IPv6 address that uses the IPv4 address

in the interface portion of its address. Enabled indicates that the current IP address was obtained from a DHCPv6

server on your LAN network. Disabled indicates a static IP configuration.

Manage and Monitor the Access Point

Page 80

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

Current Wireless Settings for 802.11 bg/ng/bgn and Current Wireless Settings for 802.11 a/a-na-ac

Access Point Mode

Channel / Frequency

Rogue AP Detection

The WiFi operation mode of the access point for the radio band. By default, the mode is 11bgn for the 2.4 GHz radio band and 11a-na-ac for the 5 GHz radio band.

The channel that the WiFi port is using. F or information about how to change the channel and frequency, see Configure 802.11bg/ng/bgn WiFi Settings on page 24 and Configure 802.11a/a-na-ac WiFi Settings on page 27.

Enabled indicates that rogue AP detection is enabled. Disabled indicates that it is not.

View Dashboard Information

The Dashboard pages provide general information about the access point in standalone mode or ensemble mode. In addition, the pages provide real-time and historical information about client distribution, traffic distribution and WLAN utilization.

View the Standalone Dashboard

The Dashboard page for a standalone access point provides read-only information, so any changes must be made on other pages.

To view the standalone Dashboard:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Monitoring > Dashboard.

The Dashboard page displays.

5. Click the Stand-Alone button.

The Dashboard page displays information for the standalone access point.

Manage and Monitor the Access Point

Page 81

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. To view more information, point to a graph.

7. To view real-time information for 5 GHz clients and traffic, click the 5 GHz button.

By default, the 2.4 GHz button is selected.

8. To view historical traffic information, click the Traffic button.

By default, the Clients button is selected.

9. To view historical information for another period, select the period from the menu below the Clients and

Traffic buttons.

View the Ensemble Dashboard

The Dashboard page for an access point in ensemble mode provides read-only inf ormation, so any changes must be made on other pages.

To view the ensemble Dashboard:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Manage and Monitor the Access Point

Page 82

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitoring > Dashboard.

The Dashboard page displays.

5. Click the Ensemble button.

The Dashboard page displays information for the access point in ensemble mode.The upper figure shows the left and middle of the page.The lower figure shows the right of the page.

6. To view more information, point to a graph.

Manage and Monitor the Access Point

Page 83

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

7. To view historical traffic information for the past 24 hours, click the Traffic button in the lower right of

the page. By default, the Clients button is selected and the page shows historical client information.

8. To view details about access point in the ensemble, click the Access Points box on the left.

By default, the Wireless Networks box is selected.

9. To view details about active clients in the ensemble, click the Active Clients box on the left.

Monitor WiFi Clients

You can view all WiFi devices that are associated with a WiFi network name (SSID) on the access point.

A WiFi network can include multiple access points, all using the same SSID. This

Note

uniformity extends the reach of the WiFi network and allows users to roam from one access point to another, providing seamless network connectivity. Under these circumstances, be aware that the WiFi clients that you can monitor as described in the following procedure are the clients that are associated with this access point.

To view the attached WiFi clients and details for an individual WiFi client:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Manage and Monitor the Access Point

Page 84

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitoring > Wireless Stations.

The Wireless Stations table shows the information for each device. For information about these and more fields, see the following table. Captive portal (CP) information is displayed only if you cond a captive portal. Otherwise, the CP fields show NA.

5. To update the list, click the Refresh button.

6. T o vie w details of a WiFi station, select the corresponding radio b utton, and then click the Details button.

The Wireless Stations Details pop-up window opens. The following table explains the fields of the Wireless Stations Details pop-up window.

DescriptionSetting

The MAC address of the WiFi station.MAC Address The BSSID that the WiFi station is using.BSSID The SSID that the WiFi station is using.SSID The channel that the WiFi station is using.Channel The transmit data rate in Mbps of the WiFi station.Rate The authentication and encryption type that the WiFi station is using.Type The WiFi mode in which the WiFi station is operating.Mode The WiFi status of the WiFi station (Associated).Status The received signal strength indicator (RSSI) of the WiFi station.RSSI The time since the last frame was received from the WiFi station.Idle Time The number of bytes received on the WiFi station since it last started.Recv. Bytes The number of bytes transmitted by the WiFi station since it last started.Trans. bytes The time when these details of the WiFi station were retrieved.Assoc.Time Stamp

Manage and Monitor the Access Point

Page 85

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

The IP address of the WiFi station.IP Address The channel width at which the WiFi station operates.Channel Width

View the Activity Logs

You can view the access point’s activity logs and save the log entries.

To display the activity logs and save the log entries:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Monitoring > Logs.

5. Click the Save As button to save the log entries to a file on your computer or to a disk drive.

6. To update the information on the page, click the Refresh button.

7. To clear the log entries, click the Clear button.

Manage and Monitor the Access Point

Page 86

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

View the Traffic Statistics

The Statistics page displays information for both wired (LAN) and WiFi (WLAN) network traffic.

To display the Statistics page:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Monitoring > Statistics.

5. To update the statistics information, click the Refresh button.

The following table explains the fields of the Statistics page:

DescriptionSetting

Wired Ethernet Packets

The number of packets received and transmitted over the Ethernet connection since the access point was restarted.

Manage and Monitor the Access Point

Page 87

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

(Continued)

DescriptionSetting

Bytes

Wireless 802.11bgn and Wireless 802.11a-na-ac (The section heading depends on the configured WiFi mode.)

Unicast Packets

Broadcast Packets

Multicast Packets

Total Packets

Total Bytes

Client Association

802.11bgn Radio,

802.11a-na-ac Radio

The number of bytes received and transmitted o ver the Ethernet connection since the access point was restarted.

The number of unicast packets receiv ed and transmitted o v er the WiFi connection since the access point was restarted.

The number of broadcast packets receiv ed and transmitted over the WiFi connection since the access point was restarted.

The number of multicast packets receiv ed and transmitted ov er the WiFi connection since the access point was restarted.

The total number of packets received and transmitted over the WiFi connection since the access point was restarted.

The total number of bytes received and transmitted o ver the WiFi connection since the access point was restarted.

The number of associated clients connected to the radio in the configured WiFi modes.

Set Up, Manage, and Monitor Ensembles

An access point (AP) ensemble is a dynamic, configuration-aware group of APs in the same subnet of a network. Each ensemble can include up to 10 members, which must be of the same model. Only one ensemble per WiFi network is supported. However, a network subnet can include multiple ensembles. Ensembles allow APs to share various configuration inf ormation, such as virtual AP (VAP) settings and QoS queue parameters. Ensemble members share the configuration of the master AP (also referred to as the dominant AP).

With ensemble mode enabled, you can initiate common firmware updates and use a centralized ensemble dashboard to monitor client connectivity and share of traffic across the ensemble members. If an ensemble member fails, the ensemble automatically makes adjustments to ensure that the remaining members work cooperatively.

An ensemble can be formed between two more APs if the following conditions are met:

• The APs are of the same model, with the exception of model WAC720 and model WAC730, which you

can combine in an ensemble.

• The APs use the same country or region settings and the same radio mode.

• The APs are connected on the same bridged segment.

Manage and Monitor the Access Point

Page 88

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

• The ensemble names of the APs that are joining are the same.

• Ensemble mode is enabled on all APs.

Configure Enable Ensemble Mode

To configure enable ensemble mode on the access point:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Ensemble > Basic > General.

5. In the Ensemble Name field, enter the ensemble name.

6. In the AP Name field, enter a custom name for the access point or use the default name.

7. In the Priority (0 - 255) field, enter the access point’s priority in the ensemble.

The lowest-numbered AP becomes the master AP.

8. To enable ensemble mode, select the Start radio button.

9. Click the Apply button.

Your settings are saved.

Manage an Ensemble

You can manage an ensemble through the master access point’s local browser interface or y ou can specify a computer with an IP address in the same subnet as the management IP address.Through the master access point or management IP address you can run an ensemble’s channel assignment, manage an ensemble’s channel assignment settings, manage the firmware upgrade settings, and manage security settings.

Manage and Monitor the Access Point

Page 89

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Specify an Ensemble Management IP Address

To specify an ensemble management IP address:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Ensemble > Basic > Management.

The Ensemble Status field displays the status of the ensemble (Started or Stopped).

5. In the IP Address to Manage Ensemble (IPv4) field, enter the IP address of the computer that must

function as the management IP address for the ensemble. The management IP address and members of the ensemble must be on the same subnet.

6. Click the Apply button.

Your settings are saved.

Configure Ensemble Security With a Passphrase

By default, access points can become members of an ensemble without using authentication.That is, when access points form an ensemble, they do not authenticate each other. However, you can enable security for an ensemble by configuring the same passphrase on each access point that must become a member of the ensemble.When access points form an ensemble, they use the passphrase to authenticate each other. An access point for which you do not configure the ensemble passphrase cannot join the ensemble.

Using ensemble security allows you to set up more than one ensemble in the same subnet by specifying a different passphrase for each ensemble. Implementing ensemble security also prevents an access point from accidentally joining an ensemble if the ensemble mode is enabled on the access point.

In addition to the ensemble passphrase, you can specify the reauthentication time-out period, which is the time after which members of an ensemble must reauthenticate each other.

Manage and Monitor the Access Point

Page 90

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

To configure security settings with a passphrase for an ensemble:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Ensemble > Basic > Secured Ensemble.

5. Select the Enabled radio button.

6. Enter a passphrase between 8 and 63 characters in the passphrase field.

7. Enter a time-out period between 300 and 86400 seconds.

The default is 300 seconds.

8. Click the Apply button.

Your settings are saved.

Specify an Ensemble’s Channel Assignment Settings

Before you enable automatic channel assignment for an ensemble (see Manage Automatic Channel

Assignment for an Ensemble on page 91), you might want to specify a custom channel interference limit,

which triggers channel reassignment.You can also specify the channel selection interval, which determines the schedule at which automatic channel assignment occurs.

The defaults are as follows:

• Channel interference limit. 75 percent (the range is from 5 percent to 75 percent).

• Channel selection interval. 1 day (the range is from 30 minutes to 6 months).

Manage and Monitor the Access Point

Page 91

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

To manage an ensemble’s channel assignment settings:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Ensemble > Advanced > Channel Assignment Settings.

5. From the Channel Interference Limit menu, select an interference limit percentage.

6. From the Channel Selection Interval menu, select a channel selection interval.

7. Click the Apply button.

Your settings are saved.

Manage Automatic Channel Assignment for an Ensemble

You can enable automatic channel assignment for an ensemble.The assignment is based on the channel assignment settings (see Specify an Ensemble’s Channel Assignment Settings on page 90).

Automatic channel assignment reduces both mutual interf erence between the access points in an ensemble and interference with other access points outside the ensemble. It also maximizes WiFi bandwidth to help maintain efficient communication over the WiFi network.

When automatic channel assignment is enabled, the channel policy for the radios is

Note

automatically set to the static mode.That is, Auto is not available as a selection from the Channel / Frequency menu on the Wireless Settings page. For more information, see Configure the Basic WiFi Settings on page 24.

Manage and Monitor the Access Point

Page 92

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

To manage automatic channel assignment for an ensemble:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Configuration > Ensemble > Advanced > Channel Assignment.

The Channel Assignment page displays. By default, automatic channel assignment is disabled.

5. Click the Start button.

Automatic channel assignment is enabled.The access point detects the channels that the access points in the ensemble are using.

6. To select channels that must remain static, do the following: a. For each channel that must remain static, select the check box in the Assign to Static column.

b. Click the Apply button.

The selected channels are not changed during the automatic channel assignment process.

Manage and Monitor the Access Point

Page 93

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

When automatic channel assignment is running, the Channel Assignment page shows the proposed channels a the bottom.The following figure shows only part of the table with proposed channels.

At any time, you can disable automatic channel assignment by clicking the Stop button.

Upgrade the Firmware of Ensemble Members From a Downloaded Firmware File

You can upgrade the firmware on all access points in an ensemble from the master access point. If you do not use a TFTP server , download the firmware to a computer and upload it to the master access point.Then, from the master access point, initiate the firmware for all or selected access points in the ensemble, including, if you want, the master access point.

To upgrade the firmware of ensemble members from a downloaded firmware file:

1. Download the new firmware file from the NETGEAR website at downloadcenter.netgear.com and save

it to your computer.

2. If available, read the release notes before upgrading the firmware.

3. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

4. In the address bar, enter the IP address of the access point.

A login window opens.

5. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Manage and Monitor the Access Point

Page 94

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

6. Select Maintenance > Ensemble Upgrade > Firmware Upgrade.

The Member Selection table shows the members of the ensemble, including the firmware versions of the members.

7. Click the Browse button.

A pop-up window opens.

8. Navigate to and select a firmware file to upload.

9. Click the Upgrade button.

An Alert pop-up window opens. The firmware is uploaded to the master access point’s memory.

The firmware is uploaded to but not upgraded on the master access point. However,

Note

in Step 13 you can select the firmware to be upgraded on the master access point.

10. In the Alert pop-up window, click the OK button.

The pop-up window closes. In the Upload Firmware section, a status bar shows the progress of the upload process. After the upload process is complete, the master access point restarts.

11. Log back in to the access point.

12. Select Maintenance > Ensemble Upgrade > Firmware Upgrade.

13. In the Member Selection table, select the check boxes for the members of the ensemble that you want

to upgrade, including, if you want, the master access point. If you want to upgrade firmware on all members of the ensemble, select the check box in the table

heading.

14. Click the Apply button.

The firmware upgrade process starts. The Firmware-transfer-status field in the table shows whether the firmware download to and validation

in the member is successful.

Manage and Monitor the Access Point

Page 95

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

Upgrade the Firmware of Ensemble Members Over a TFTP Server

You can upgrade the firmware on all access points in an ensemble from the master access point. If you use a TFTP server , do wnload the firmware from the TFTP server directly to the master access point.Then, from the master access point, initiate the firmware for all or selected access points in the ensemble, including, if you want, the master access point.

To upgrade the firmware of ensemble members using a TFTP server:

1. Download the new firmware file from the NETGEAR website at downloadcenter.netgear.com and save

it to your computer.

2. Transfer the firmware file to your TFTP server.

3. If available, read the release notes before upgrading the firmware.

4. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

5. In the address bar, enter the IP address of the access point.

A login window opens.

6. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

7. Select Maintenance > Ensemble Upgrade > Firmware Upgrade TFTP.

The Member Selection section shows the members of the ensemble, including the firmware versions of the members.

8. Specify the following information:

• New Firmware Image.The name of the firmware file.

• Server IP.The IP address of your TFTP server.

9. Click the Upgrade button.

Manage and Monitor the Access Point

Page 96

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

An Alert pop-up window opens. The firmware is uploaded to the master access point’s memory.

The firmware is uploaded to but not upgraded on the master access point. However,

Note

in step 13 you can select the firmware to be upgraded on the master access point.

10. In the Alert pop-up window, click the OK button.

The pop-up window closes. In the Upload Firmware section, a status bar shows the progress of the upload process. After the upload process is complete, the master access point restarts.

11. Log back in to the access point.

12. Select Maintenance > Ensemble Upgrade > Firmware Upgrade.

13. In the Member Selection table, select the check boxes for the members of the ensemble that you want

to upgrade, including, if you want, the master access point. If you want to upgrade firmware on all members of the ensemble, select the check box in the table

heading.

14. Click the Apply button.

The firmware upgrade process starts. The Firmware-transfer-status field in the table shows whether the firmware download to and validation

in the member is successful.

Monitor an Ensemble

You can monitor the status of an ensemble from the ensemble dashboard.You can also monitor the devices connected to members of the ensemble as well as monitor networks neighboring the ensemble.

Monitor the Status of the Ensemble

You can monitor the status of the access point as member of the ensemble, including the access point’s priority in the ensemble and whether the access point is the master AP in the ensemble.

To monitor the status of the ensemble:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Manage and Monitor the Access Point

Page 97

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitor > Ensemble > Access Point.

5. Click the Refresh button.

The information on the page refreshes.

Monitor the Devices Connected to the Ensemble

You can monitor the WiFi clients that are connected to all members of the ensemble. For each access point that is a member of the ensemble, up to 20 WiFi clients per radio can be displayed (although a radio can support more than 20 clients).

To monitor the devices connected to the ensemble:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

Manage and Monitor the Access Point

Page 98

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

4. Select Monitor > Ensemble > Wireless Stations.

5. Click the Refresh button.

The devices connected to the ensemble display, listed by MAC address.

Monitor the Access Points and Networks Neighboring the Ensemble

You can display the access points (and their associated WiFi networks) that are the neighbors of the ensemble.

To monitor the networks neighboring the ensemble:

1. Open a web browser from a computer that is connected to the same network as the access point or to

the access point directly through an Ethernet cable. For more information, see Log In to the Access Point on page 16.

2. In the address bar, enter the IP address of the access point.

A login window opens.

3. Enter the user name and password.

The user name is admin.The default password is password.The user name and password are case-sensitive.

4. Select Monitor > Ensemble > Wireless Neighborhood.

The Wireless Neighborhood page displays.

5. From the Neighbor APs menu, select one of the following options:

Manage and Monitor the Access Point

Page 99

Dual-Band Wireless AC Access Point WAC720 and WAC730 User Manual

• Not in Ensemble.The access points that are not in the ensemble are displayed.

• In Ensemble.The access points that are in the ensemble are displayed.

• Both. Both the access points that are in the ensemb le and that are not in the ensemble are displa yed.

(The following figure shows this option.)

Manage and Monitor the Access Point

Page 100

Configure Advanced Network and WiFi Features

This chapter describes how to configure the advanced features of the access point. The chapter includes the following sections:

• Configure IPv6 Settings

• Configure Spanning Tree Protocol, 802.1Q VLAN, and Link Layer Discovery Protocol

• Configure Bonjour

• Configure Advanced WiFi Settings

• Configure Advanced Quality of Service Settings

• Configure and Manage Quality of Service Policies

• Configure Load Balancing

• Manage Captive Portals

• Configure WiFi Bridging

100

Netgear WAC720 Users Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Contents

Introduction and Hardware Overview

Unpack Your Access Point

Top Panel

Rear Panel

Access Point Label

Initial Setup

What You Need Before You Begin

System Requirements

WiFi Equipment Placement and Range Guidelines

Ethernet Cabling Requirements

LAN Configuration Requirements

Hardware Requirements for Computers on Your LAN

Operating Frequency Guidelines

Requirements for Entering IP Addresses

IPv4

IPv6

Install and Configure the Access Point

Connect the Access Point to a Computer

Log In to the Access Point

Log In to the Access Point When It Is Directly Connected to Your Computer

Log In to the Access Point When It Is Connected to a Network With a DHCP Server

Local Browser Interface

Disable Business Central Mode for a Standalone Access Point

Configure Basic General System Settings

Configure Time Settings

Configure the IPv4 Settings

Configure the Basic WiFi Settings

Configure 802.11bg/ng/bgn WiFi Settings

Configure 802.11a/a-na-ac WiFi Settings

Test Basic WiFi Connectivity

Mount the Access Point

Package Content of the Ceiling and Wall Installation Kit

Mount the Access Point to a Drop Ceiling

Mount the Access Point to a Wall

Configure the WiFi Features and Security

WiFi Data Security Options

WiFi Security Profiles

Configure and Enable WiFi Security Profiles

About WPA2-PSK and WPA-PSK & WPA2-PSK

About WPA2 With RADIUS and WPA & WPA2 With RADIUS

Change the QoS Policy for a WiFi Security Profile

Configure RADIUS Server Settings

Manage MAC Address Filter Profiles in the Local MAC Address Database

Add a MAC Address Filter Profile

Modify a MAC Address Filter Profile

Delete a MAC Address Filter Profile

Enable Rogue AP Detection and Monitor Rogue APs

Enable Rogue AP Detection

Monitor Rogue APs

Monitor Knows APs

Schedule the WiFi Radios to Be Turned Off

Configure Basic WiFi Quality of Service

Manage and Monitor the Access Point

Enable Remote Management

SNMP Management

Secure Shell and Telnet Management

Manage the Access Point over a Telnet Connection

Upgrade the Access Point Firmware

Upgrade the Firmware Over a Web Browser

Upgrade the Firmware Over a TFTP Server

Manage the Configuration File or Reset to Factory Defaults

Save the Configuration

Restore the Configuration

Restore the Access Point to the Factory Default Settings

Use the Local Browser Interface to Restore Factory Default Settings

Use the Reset Button to Restore Factory Default Settings

Reboot the Access Point Without Restoring the Default Configuration

Change the Administrator Password

Manage User Accounts

Add a New User Account

Change the Name for a User Account

Change the Privilege for a User Account

Reset the Password for a User Account

Delete a User Account

Enable the Syslog Server