Page 1
User Manual
Insight Managed WiFi 6 AX1800
Dual Band Access Point
Models
WAX610, indoor model
WAX610Y, outdoor model
NETGEAR, Inc.
350 E. Plumeria DriveAugust 2020
San Jose, CA 95134, USA202-12099-01
Page 2
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.
Do not use model WAX610 outdoors. The PoE port of model WAX610 is intended for
intra building connection only.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
CommentsPublish DatePublication Part
Number
We added model WAX610Y, which is an outdoor model.August 2020202-12099-01
First publication.July 2020202-12098-01
2
Page 3
Contents
Chapter 1 Introduction
About NETGEAR Insight......................................................................9
Additional documentation...................................................................9
Chapter 2 Hardware Overview Indoor Model WAX610
Unpack indoor model WAX610.......................................................11
Top panel with LEDs, indoor model WAX610................................11
Hardware interfaces indoor model WAX610..................................14
Product label indoor model WAX610.............................................15
Safety instructions and warnings for an indoor access point........16
Chapter 3 Hardware Overview Outdoor Model WAX610Y
Unpack model outdoor model WAX610Y......................................19
Side panel with LEDs, outdoor model WAX610Y..........................19
Hardware interfaces outdoor model WAX610Y.............................21
Product label outdoor model WAX610Y.........................................22
Safety instructions and warnings for an outdoor access point.....23
Chapter 4 Install the Access Point in Your Network and Access It
for Initial Configuration
Position your access point for best performance...........................26
Set up and connect the access point to your network...................27
Set up and connect indoor model WAX610 to your network...27
Set up and connect outdoor model WAX610Y to your
network............................................................................................28
Connect to the access point for initial configuration.....................30
Connect over WiFi using the NETGEAR Insight app.................31
Connect over the Internet using the NETGEAR Insight Cloud
portal...............................................................................................32
Connect over WiFi to the local browser UI for initial
configuration..................................................................................33
Connect over the LAN to the local browser UI for initial
configuration..................................................................................37
Configure indoor model WAX610 offline using a directly connected
computer.............................................................................................42
Log in to the access point after initial setup....................................46
3
Page 4
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Chapter 5 Install the Access Point in an Insight Instant Mesh WiFi
Network
What are a root access point and an extender access point?......50
What is an Insight Instant Mesh WiFi network?...............................52
Requirements for placing an extender access point in a mesh WiFi
network................................................................................................53
Install the NETGEAR Insight app to manage an Insight Instant Mesh
WiFi network.......................................................................................54
Connect the access point as an extender to a root access point..54
Connect over the Internet using the NETGEAR Insight Cloud
portal....................................................................................................58
Chapter 6 Manage the Basic WiFi Features
Set up an open or secure WiFi network..........................................60
View or change the settings of a WiFi network...............................67
Disable or enable a WiFi network or set up a WiFi activity
schedule..............................................................................................68
Remove a WiFi network.....................................................................70
Change the authentication and encryption for a WiFi network....70
Hide or broadcast the SSID for a WiFi network..............................74
Enable or disable client isolation for a WiFi network.....................75
Enable or disable band steering with 802.11k RRM and 802.11v
WiFi network management...............................................................76
Change the VLAN ID for a WiFi network.........................................78
Enable or disable PMF for a WiFi network......................................79
Enable or disable URL tracking for a WiFi network........................80
Change the format of the DHCP offer messages in a WiFi
network................................................................................................81
Select a MAC ACL for a WiFi network..............................................82
Set bandwidth rate limits for a WiFi network..................................84
Chapter 7 Manage the Basic Radio Features
Manage the basic WiFi settings for the radios................................87
Turn a radio on or off.........................................................................90
Change the WiFi mode for a radio...................................................91
Change the channel width for a radio.............................................93
Change the guard interval for a radio.............................................95
Change the output power for a radio..............................................96
Change the channel for a radio........................................................97
Manage Quality of Service for a WiFi radio.....................................98
Chapter 8 Set Up and Manage a Captive Portal
Set up a click-through captive portal for a WiFi network............101
4
Page 5
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Set up an external captive portal for a WiFi network...................104
Register and configure Facebook Wi-Fi for the access point.....107
Set up a Facebook Wi-Fi captive portal for a WiFi network........110
Unregister the access point from Facebook Wi-Fi.......................111
Chapter 9 Manage Access and Security
Block specific URLs and keywords for Internet access................114
Manage user accounts.....................................................................116
Add a user account......................................................................116
Change the time-out period for a user session.......................117
Change the settings for a user account....................................118
Remove a user account...............................................................119
Manage local MAC access control lists.........................................120
Manually set up a MAC access control List...............................121
Import an existing MAC access control list..............................124
Manage neighbor AP detection.....................................................127
Enable neighbor access point detection and move access points
to the Known AP List....................................................................128
Import an existing neighbor access point list in the Known AP
List..................................................................................................130
Set up RADIUS servers.....................................................................133
Chapter 10 Manage the Local Area Network and IP Settings
Disable the DHCP client and specify a fixed IP address..............137
Enable the DHCP client...................................................................138
Set the 802.1Q VLAN and management VLAN............................140
Specify an existing domain name..................................................141
Enable or disable Spanning Tree Protocol...................................143
Enable or disable the network integrity check function..............144
Enable or disable IGMP snooping.................................................145
Enable or disable Ethernet LLDP....................................................146
Enable or disable UPnP...................................................................147
Chapter 11 Manage and Maintain the Access Point
Change the management mode to NETGEAR Insight or
Web-browser....................................................................................150
Change the country or region of operation..................................152
Change the admin user account password..................................153
Change the system name................................................................154
Specify a custom NTP server...........................................................155
Set the time zone..............................................................................156
Manage the syslog settings.............................................................157
Manage the firmware of the access point.....................................158
Check for new firmware and upgrade the access point.........159
5
Page 6
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Manually download firmware and upgrade the access point.160
Revert to the backup firmware...................................................162
Use an SFTP server to upgrade the access point....................163
Manage the configuration file of the access point.......................164
Back up the access point configuration....................................164
Restore the access point configuration.....................................166
Reboot the access point from the local browser UI.....................167
Schedule the access point to reboot.............................................168
Return the access point to its factory default settings.................169
Use the Reset button to reset indoor model WAX610...........170
Use the Reset button to reset outdoor model WAX610Y......171
Use the local browser UI to reset the access point..................172
Enable or disable Secure Shell.......................................................173
Enable SNMP and manage the SNMP settings............................174
Manage the LEDs.............................................................................175
Chapter 12 Monitor the Access Point and the Network
View the access point Internet, IP, and system settings..............178
View the WiFi radio settings............................................................181
View unknown and known neighbor access points.....................184
View client distribution, connected clients, and client trends....186
View WiFi and Ethernet traffic, traffic and ARP statistics, and channel
utilization...........................................................................................189
View or download tracked URLs.....................................................191
View, save, download, or clear the logs........................................193
View a WiFi bridge connection.......................................................195
View alarms and notifications.........................................................196
Chapter 13 Set up a WiFi Bridge
WiFi base station, WiFi repeater, and WiFi bridge requirements.199
Set up a WiFi bridge between access points................................200
Chapter 14 Manage the Advanced Radio Features
Manage the advanced WiFi settings for the radios.....................204
Manage the maximum number of clients for a radio..................207
Manage the broadcast and multicast settings for a radio...........208
Manage sticky clients.......................................................................210
Manage load balancing for the radios..........................................211
Manage the ARP proxy....................................................................214
Manage the amount of broadcast traffic.......................................215
Chapter 15 Diagnostics and Troubleshooting
Perform a ping test...........................................................................218
Check the Internet speed................................................................219
6
Page 7
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Quick tips for WiFi troubleshooting...............................................220
Troubleshoot with the LEDs............................................................221
Power/Cloud LED remains off....................................................222
Power/Cloud LED remains solid amber...................................223
Power/Cloud LED is blinking amber slowly, continuously.....223
The access point functions as a PoE PD and the Power/Cloud
LED remains solid amber............................................................224
Power/Cloud LED does not light blue in the NETGEAR Insight
management mode.....................................................................224
Power/Cloud LED does not stop blinking amber, green, and
blue................................................................................................225
2.4G or 5G WLAN LED is off.......................................................226
The extender access point and root access point cannot
connect..............................................................................................226
Troubleshoot WiFi connectivity......................................................228
Troubleshoot Internet browsing.....................................................229
You cannot log in to the access point over a LAN connection....229
Changes are not saved....................................................................230
You enter the wrong password and can no longer log in to the
access point.......................................................................................230
Troubleshoot your network using the ping utility........................231
Test the LAN path to your access point....................................232
Test the path from your computer to a remote device...........232
Appendix A Mount Indoor Model WAX610 to a Wall or Ceiling
Mount indoor model WAX610 to a wall........................................235
Mount indoor model WAX610 to a solid ceiling..........................236
Mount indoor model WAX610 to a T-bar.....................................238
Appendix B Mount Outdoor Model WAX610Y to a Wall or Pole
Mount outdoor model WAX610Y to a wall...................................242
Mount outdoor model WAX610Y to a pole..................................243
Appendix C Factory Default Settings and Technical Specifications
Factory default settings...................................................................247
Technical specifications indoor model WAX610.........................251
Technical specifications outdoor model WAX610Y....................253
7
Page 8
1
Introduction
This manual is for the following NETGEAR Insight Managed WiFi 6 AX1800 Dual Band
Access Point models:
WAX610. NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point for
•
indoor use.
WAX610Y. NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point for
•
outdoor use.
Models WAX610 and WAX610Y, in this manual referred to as the access point, support
IEEE 802.11ax, four streams of WiFi 6, and dual-band concurrent operation at 2.4 GHz
and 5 GHz with a combined throughput of 1800 Mbps (600 Mbps at 2.4 GHz and 1200
Mbps at 5 GHz).
The access point functions as a Power over Ethernet plus (PoE+) powered device (PD)
in an existing network connected to a PoE+ switch. Model WAX610 supports an optional
power adapter for connection to a regular switch. The PoE+ Ethernet port supports a
high speed up to 2.5 Gbps.
This chapter contains the following sections:
• About NETGEAR Insight
• Additional documentation
Note: For more information about the topics that are covered in this manual, visit the
support website at netgear.com/support/.
Note: Firmware updates with new features and bug fixes are made available from time
to time at netgear.com/support/download/. You can check for and download new
firmware manually. If the features or behavior of your product does not match what is
described in this manual, you might need to update the firmware.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network
we mean an individual SSID or VAP.
8
Page 9
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
About NETGEAR Insight
The access point supports the NETGEAR Insight app, which lets you set up and manage
the access point from your iOS or Android mobile device and connects to the Insight
cloud-based management platform. For Insight Premium or Insight Pro subscribers, the
access point also supports the Insight Cloud portal, which is the website that provides
access to the Insight cloud-based management platform.
This user manual describes the local browser user interface (UI). For more information
about NETGEAR Insight, visit insight.netgear.com and see the NETGEAR knowledge
base at netgear.com/support/product/insight.aspx.
If you install the access point as a NETGEAR Insight managed device, the settings for
features that you can manage through the Insight app and Insight Cloud portal are
masked out in the local browser UI. However, using the local browser UI, you can still
manage the settings for certain features that are not yet supported in Insight. For more
information, visit the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx and search for What is Hybrid Management
Mode.
Additional documentation
The following documents are available at netgear.com/support/download/:
Installation guide
•
Data sheet
•
For information about the NETGEAR Insight app and the Insight Cloud portal, visit
insight.netgear.com and see the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx.
User Manual9Introduction
Page 10
2
Hardware Overview Indoor Model WAX610
The NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point Model WAX610
is an indoor access point.
The chapter contains the following sections:
• Unpack indoor model WAX610
• Top panel with LEDs, indoor model WAX610
• Hardware interfaces indoor model WAX610
• Product label indoor model WAX610
• Safety instructions and warnings for an indoor access point
10
Page 11
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Unpack indoor model WAX610
The package contains the following items:
WAX610 access point
•
Mounting bracket with screw holes for mounting to a solid ceiling or 15/16 in.
•
(23.8 mm) T-bar
Mounting bracket without screw holes for mounting to a 9/16 in. (14.3 mm) T-bar
•
Two screws and anchors for ceiling mounting or wall-mounting
•
Screw placement guide
•
Installation guide
•
Note: Depending on the product ordered, the package might not include a power
adapter. You power up the access point by connecting it to a PoE+ switch. If you ordered
a package without a power adapter, you can still order a power adapter as an option.
For information about the mounting options, see Mount Indoor Model WAX610 to a
Wall or Ceiling on page 234.
Top panel with LEDs, indoor model WAX610
The LEDs that provide the status of the access point are located on the top panel of the
access point.
Figure 1. Top panel with LEDs, indoor model WAX610
Model WAX610
User Manual11Hardware Overview Indoor
Page 12
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Table 1. LED descriptions indoor model WAX610
DescriptionColorLED Icon
Power/Cloud LED
Solid amber initially and then blinking amber slowly. The access
point is starting or in the process of getting an IP address.
Solid green. The access point started up and functions either as a
standalone access point or as an Insight discovered access point that
is not connected to the Insight cloud-based management platform.
Solid blue. The access point functions in Insight mode and is
connected to the Insight cloud-based management platform.
Blinking amber fast. The access point is updating firmware or is
being reset to factory default settings.
Blinking multicolor. The access point is functioning in extender mode
and the mesh setup is in progress.
Solid amber during operation. The PoE power that the access point
received is not at the 802.3at (PoE+) level.
Off. No power is supplied to the access point.
Solid green. A 2.5 Gbps Ethernet link is detected on the LAN port.LAN LED
Model WAX610
Blinking green. 2.5 Gbps traffic activity is detected on the LAN port.
Solid amber. An Ethernet link at a speed lower than 2.5 Gbps is
detected on the LAN port.
Blinking amber. Traffic activity at a speed lower than 2.5 Gbps is
detected on the LAN port.
Off. Either no powered-on Ethernet device is connected to the LAN
port, or, if a powered-on Ethernet device is connected, no Ethernet
link is detected.
User Manual12Hardware Overview Indoor
Page 13
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Table 1. LED descriptions indoor model WAX610 (Continued)
DescriptionColorLED Icon
2.4G WLAN LED
Solid green. The 2.4 GHz WiFi radio is on but no clients are
connected.
Solid blue. One or more WLAN clients are connected to the 2.4 GHz
WiFi radio.
Blinking blue. Traffic is detected on the 2.4 GHz WiFi radio.
Off. The 2.4 GHz WiFi radio is off.
Solid green. The 5 GHz WiFi radio is on but no clients are connected.5G WLAN LED
Solid blue. One or more WLAN clients are connected to the 5 GHz
WiFi radio.
Blinking blue. Traffic is detected on the 5 GHz WiFi radio.
Off. The 5 GHz WiFi radio is off.
Note: For information about troubleshooting with the LEDs, see Troubleshoot with the
LEDs on page 221.
Model WAX610
User Manual13Hardware Overview Indoor
Page 14
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Hardware interfaces indoor model WAX610
The bottom panel of the access point has a LAN/PoE+ port, Reset button, and DC power
connector for an optional power adapter.
Figure 2. Hardware interfaces of indoor model WAX610
The bottom panel contains the following components:
Reset button. You can use the Reset button to restart the access point or to reset
•
the access point to its factory default settings. To restart the access point, press the
Reset button for about two seconds. Pressing the Reset for 10 seconds or longer
resets the access point to factory default settings.
Note: If you added the access point to a NETGEAR Insight network location, you
must first use the Insight app or Insight Cloud portal to remove the access point from
your Insight network location before the factory default settings function of the Reset
button is available. For more information, see Use the Reset button to reset indoor
model WAX610 on page 170.
User Manual14Hardware Overview Indoor
Model WAX610
Page 15
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
LAN/PoE+ port. You can use the LAN/PoE+ Gigabit Ethernet RJ-45 LAN port to
•
connect the access point to a PoE+ switch, or if you use an optional power adapter,
to a non-PoE switch.
The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps when connected to
2.5 Gbps equipment. Your Internet connection, modem, and switch all need to
support a speed of 2.5 Gbps. If one of these components supports only 1 Gbps
(which is a common speed), the access point LAN/PoE+ connection functions at 1
Gbps.
For more information about the LAN/PoE+ port connection, see Set up and connect
indoor model WAX610 to your network on page 27.
DC power connector. If you do not use a PoE+ switch to provide power to the access
•
point, connect an optional power adapter to the DC power connector.
Note: The back panel provides a Kensington lock slot for an optional security cable.
Product label indoor model WAX610
The product label of the access point shows the QR code, serial number, MAC address,
default WiFi network name (SSID), and network key (password) of the access point.
Figure 3. Product label indoor model WAX610
Model WAX610
User Manual15Hardware Overview Indoor
Page 16
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Safety instructions and warnings for an indoor access point
Use the following safety guidelines to ensure your own personal safety and to help
protect your system from potential damage.
To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment,
observe the following precautions:
This product is designed for indoor use only in a temperature-controlled and
•
humidity-controlled environment. Note the following:
-
For more information about the environment in which this product must operate,
see the environmental specifications in the appendix or the data sheet.
-
If you want to connect the product over an Ethernet cable to a device located
outdoors, the outdoor device must be properly grounded and surge protected,
and you must install an Ethernet surge protector inline between the indoor
product and the outdoor device. Failure to do so can damage the product.
-
Before connecting the product to outdoor cables or wired outdoor devices, see
https://kb.netgear.com/000057103 for additional safety and warranty information.
Failure to follow these guidelines can result in damage to your NETGEAR product,
which might not be covered by NETGEAR’s warranty, to the extent permissible by
applicable law.
Do not service the product except as explained in your product documentation.
•
Some devices should never be opened.
If any of the following conditions occur, unplug the product from its power source,
•
and then replace the part or contact your trained service provider:
- Depending on your product, the power adapter, power adapter cable, power
adapter plug, or PoE Ethernet cable is damaged.
-
An object fell into the product.
- The product was exposed to water.
- The product was dropped or damaged.
-
The product does not operate correctly when you follow the operating
instructions.
Keep the product away from radiators and heat sources. Also, do not block cooling
•
vents.
User Manual16Hardware Overview Indoor
Model WAX610
Page 17
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Do not spill food or liquids on your product components, and never operate the
•
product in a wet environment. If the product gets wet, see the appropriate section
in your troubleshooting guide, or contact your trained service provider.
Do not push any objects into the openings of your product. Doing so can cause fire
•
or electric shock by shorting out interior components.
Use the product only with approved equipment.
•
If applicable to your product, allow the product to cool before removing covers or
•
touching internal components.
Be sure that devices that are attached over Ethernet cables are electrically rated to
•
operate with the power available in your location.
Depending on your product, use only the supplied power adapter or an Ethernet
•
cable that provides PoE.
If your product uses a power adapter:
-
If you were not provided with a power adapter, contact your local NETGEAR
reseller.
-
The power adapter must be rated for the product and for the voltage and current
marked on the product electrical ratings label.
To help prevent electric shock, plug any system and peripheral power cables into
•
properly grounded power outlets.
If applicable to your product, the peripheral power cables are equipped with
•
three-prong plugs to help ensure proper grounding. Do not use adapter plugs or
remove the grounding prong from a cable. If you must use an extension cable, use
a three-wire cable with properly grounded plugs.
Observe extension cable and power strip ratings. Make sure that the total ampere
•
rating of all products plugged into the extension cable or power strip does not
exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
To help protect your system from sudden, transient increases and decreases in
•
electrical power, use a surge suppressor, line conditioner, or uninterruptible power
supply (UPS).
Position system cables, power adapter cables, and PoE Ethernet cables carefully.
•
Route cables so that they cannot be stepped on or tripped over. Be sure that nothing
rests on any cables.
Do not modify power adapters, power adapter cables, or plugs. Consult a licensed
•
electrician or your power company for site modifications.
Always follow your local and national wiring rules.
•
User Manual17Hardware Overview Indoor
Model WAX610
Page 18
3
Hardware Overview Outdoor Model WAX610Y
The NETGEAR Insight Managed WiFi 6 AX1800 Dual Band Access Point Model WAX610Y
is an outdoor access point.
Tems of Use: This device must be professionally installed. It is the installer’s responsibility
to follow local country regulations including operations within legal frequency channels,
output power and DFS requirements. Vendor or Reseller or Distributor is not responsible
for illegal wireless operations. Please see Device’s Terms and Conditions for more
details.
The chapter contains the following sections:
• Unpack model outdoor model WAX610Y
• Side panel with LEDs, outdoor model WAX610Y
• Hardware interfaces outdoor model WAX610Y
• Product label outdoor model WAX610Y
• Safety instructions and warnings for an outdoor access point
18
Page 19
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Unpack model outdoor model WAX610Y
The package contains the following items:
WAX610Y access point
•
Pole mounting strap
•
Wall-mount screws and anchors
•
Screw placement guide
•
Installation guide
•
Note: A power adapter is not supported for this model. You power up the access point
by connecting it to a PoE+ switch.
For information about the mounting options, see Mount Outdoor Model WAX610Y to
a Wall or Pole on page 241.
Side panel with LEDs, outdoor model WAX610Y
The LEDs that provide the status of the access point are located on the right side panel
of the access point.
Figure 4. Side panel with LEDs, outdoor model WAX610Y
Model WAX610Y
User Manual19Hardware Overview Outdoor
Page 20
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Table 2. LED descriptions outdoor model WAX610Y
DescriptionColorLED Icon
Power/Cloud LED
Solid amber initially and then blinking amber slowly. The access
point is starting or in the process of getting an IP address.
Solid green. The access point started up and functions either as a
standalone access point or as an Insight discovered access point that
is not connected to the Insight cloud-based management platform.
Solid blue. The access point functions in Insight mode and is
connected to the Insight cloud-based management platform.
Blinking amber fast. The access point is updating firmware or is
being reset to factory default settings.
Blinking multicolor. The access point is functioning in extender mode
and the mesh setup is in progress.
Solid amber during operation. The PoE power that the access point
received is not at the 802.3at (PoE+) level.
Off. No power is supplied to the access point.
Solid green. A 2.5 Gbps Ethernet link is detected on the LAN port.LAN LED
Blinking green. 2.5 Gbps traffic activity is detected on the LAN port.
Solid amber. An Ethernet link at a speed lower than 2.5 Gbps is
detected on the LAN port.
2.4G WLAN LED
Model WAX610Y
Blinking amber. Traffic activity at a speed lower than 2.5 Gbps is
detected on the LAN port.
Off. Either no powered-on Ethernet device is connected to the LAN
port, or, if a powered-on Ethernet device is connected, no Ethernet
link is detected.
Solid green. The 2.4 GHz WiFi radio is on but no clients are
connected.
Solid blue. One or more WLAN clients are connected to the 2.4 GHz
WiFi radio.
Blinking blue. Traffic is detected on the 2.4 GHz WiFi radio.
Off. The 2.4 GHz WiFi radio is off.
User Manual20Hardware Overview Outdoor
Page 21
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Table 2. LED descriptions outdoor model WAX610Y (Continued)
DescriptionColorLED Icon
Solid green. The 5 GHz WiFi radio is on but no clients are connected.5G WLAN LED
Solid blue. One or more WLAN clients are connected to the 5 GHz
WiFi radio.
Blinking blue. Traffic is detected on the 5 GHz WiFi radio.
Off. The 5 GHz WiFi radio is off.
Note: For information about troubleshooting with the LEDs, see Troubleshoot with the
LEDs on page 221.
Hardware interfaces outdoor model WAX610Y
Use the latch on the front of the access point to open the cover. Carefully pull the latch
toward you and pull the cover downward so that it slides out of the enclosure. On the
bottom panel of the access point, the LAN/PoE+ port and Reset button are now
accessible.
Figure 5. Hardware interfaces outdoor model WAX610Y
Note: The access point does not provide a power connector, nor requires a power
adapter. You power up the access point only by connecting an Ethernet cable to a PoE+
switch.
User Manual21Hardware Overview Outdoor
Model WAX610Y
Page 22
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
The bottom panel contains the following components:
Reset button. You can use the Reset button to restart the access point or to reset
•
the access point to its factory default settings. To restart the access point, press the
Reset button for about two seconds. Pressing the Reset for 10 seconds or longer
resets the access point to factory default settings.
Note: If you added the access point to a NETGEAR Insight network location, you
must first use the Insight app or Insight Cloud portal to remove the access point from
your Insight network location before the factory default settings function of the Reset
button is available. For more information, see Use the Reset button to reset indoor
model WAX610 on page 170.
LAN/PoE+ port. You must use the LAN/PoE+ Gigabit Ethernet RJ-45 LAN port to
•
connect the access point to a PoE+ switch.
CAUTION: If you use a PoE+ switch that is located indoors, you must use a PoE+
Ethernet surge protector (not supplied) on the cable from the switch to the access
point located outdoors.
The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps when connected to
2.5 Gbps equipment. Your Internet connection, modem, and switch all need to
support a speed of 2.5 Gbps. If one of these components supports only 1 Gbps
(which is a common speed), the access point LAN/PoE+ connection functions at 1
Gbps.
For more information about the LAN/PoE+ port connection, see Set up and connect
indoor model WAX610 to your network on page 27.
Product label outdoor model WAX610Y
The product label of the access point shows the QR code, serial number, MAC address,
default WiFi network name (SSID), and network key (password) of the access point.
Figure 6. Product label outdoor model WAX610Y
Model WAX610Y
User Manual22Hardware Overview Outdoor
Page 23
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Safety instructions and warnings for an outdoor access point
Use the following safety guidelines to ensure your own personal safety and to help
protect your system from potential damage.
To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment,
observe the following precautions:
This product is designed for outdoor use. Note the following:
•
-
For information about the environment in which this product must operate, see
the environmental specifications in the appendix or the data sheet.
-
If you connect the product over an Ethernet cable to a device located indoors,
you must install an Ethernet surge protector inline between the product and the
indoor device. Failure to do so can damage the product.
-
Before connecting the product to indoor cables or wired indoor devices, see
https://kb.netgear.com/000057103 for additional safety and warranty information.
Failure to follow these guidelines can result in damage to your NETGEAR product,
which might not be covered by NETGEAR’s warranty, to the extent permissible by
applicable law.
Do not service the product except as explained in your product documentation.
•
Some devices should never be opened.
If any of the following conditions occur, unplug the product from its power source,
•
and then replace the part or contact your trained service provider:
- Depending on your product, the power adapter, power adapter cable, power
adapter plug, or PoE Ethernet cable is damaged.
-
An object fell into the product.
- The product was dropped or damaged.
-
The product does not operate correctly when you follow the operating
instructions.
Operate the product with its cover closed so that moisture and insects cannot get
•
inside the product.
Make sure that the product is not installed in an area that could be flooded or be
•
subject to a heavy water spray, for example from a hosepipe.
Keep the product away from heat sources. Do not install the product at a location
•
where it is continuously exposed to direct sunlight. Also, do not block cooling vents.
User Manual23Hardware Overview Outdoor
Model WAX610Y
Page 24
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Do not paint the product.
•
Do not push any objects into the openings of your product. Doing so can cause fire
•
or electric shock by shorting out interior components.
Use the product only with approved equipment.
•
If applicable to your product, allow the product to cool before removing covers or
•
touching internal components.
Be sure that devices that are attached over Ethernet cables are electrically rated to
•
operate with the power available in your location.
Depending on your product, use only the supplied power adapter or, if you use PoE,
•
an Ethernet cable on which an inline Ethernet surge protector is installed.
If your product uses a power adapter:
-
If you were not provided with a power adapter, contact your local NETGEAR
reseller.
-
The power adapter must be rated for the product and for the voltage and current
marked on the product electrical ratings label.
To help prevent electric shock, plug any system and peripheral power cables into
•
properly grounded power outlets.
If applicable to your product, the peripheral power cables are equipped with
•
three-prong plugs to help ensure proper grounding. Do not use adapter plugs or
remove the grounding prong from a cable. If you must use an extension cable, use
a three-wire cable with properly grounded plugs.
Observe extension cable and power strip ratings. Make sure that the total ampere
•
rating of all products plugged into the extension cable or power strip does not
exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
To help protect your system from sudden, transient increases and decreases in
•
electrical power, use a surge suppressor, line conditioner, or uninterruptible power
supply (UPS).
Position system cables, power adapter cables, and PoE Ethernet cables carefully.
•
Route cables so that they cannot be stepped on or tripped over. Be sure that nothing
rests on any cables.
Do not modify power adapters, power adapter cables, or plugs. Consult a licensed
•
electrician or your power company for site modifications.
Always follow your local and national wiring rules.
•
Model WAX610Y
User Manual24Hardware Overview Outdoor
Page 25
4
Install the Access Point in Your Network and Access It for Initial Configuration
This chapter describes how you can install and access the access point in your network.
The chapter contains the following sections:
• Position your access point for best performance
• Set up and connect the access point to your network
• Connect to the access point for initial configuration
• Configure indoor model WAX610 offline using a directly connected computer
• Log in to the access point after initial setup
25
Page 26
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Position your access point for best performance
Before you install and mount your access point as described in the installation guide,
consider how you can position the access point for best performance.
The access point lets you access your network anywhere within the operating range of
your WiFi network. However, the operating distance or range of your WiFi connection
can vary significantly depending on the physical placement of your access point. For
example, the thickness and number of walls the WiFi signal passes through can limit
the range.
Additionally, other WiFi devices in and around your office, home, yard, or campus, might
affect your access point’s signal. WiFi devices can be other access point, routers,
repeaters, WiFi range extenders, and any other devices that emit WiFi signals for network
access.
Position your access point according to the following guidelines:
Place your access point near the center of the area where your computers and other
•
devices operate.
A line of sight between the access point and your WiFi devices is not required for
good performance.
For model WAX610 only, if you use a power adapter, make sure that the access point
•
is within reach of an AC power outlet.
Place the access point in an elevated location, minimizing the number walls and
•
ceilings between the access point and your other devices.
For model WAX610 only, place the access point away from electrical devices such
•
as these:
-
Ceiling fans
- Home security systems
- Microwaves
- Computers
-
Bases of cordless phones
- 2.4 GHz and 5.8 GHz cordless phones
Place the access point away from large metal surfaces, large glass surfaces, insulated
•
walls, and items such as these:
- Solid metal doors
User Manual26Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 27
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
- Aluminum studs
- Fish tanks (indoor model WAX610 only)
- Mirrors (indoor model WAX610 only)
- Brick
- Concrete
If you are using adjacent access points, use different radio frequency channels to reduce
interference.
Set up and connect the access point to your network
The procedure that you use to set up and connect the access point to your network
depends on the model.
Set up and connect indoor model WAX610 to your network
This section applies to indoor model WAX610 only.
You can connect the access point to a Power over Ethernet plus (PoE+) switch in your
network. The switch must be connected to a network router that is connected to the
Internet. If you use a PoE+ connection, the access point does not require a power
adapter.
Note: Depending on the product ordered, the package might not include a power
adapter. You power up the access point by connecting it to a PoE+ switch. If you ordered
a package without a power adapter but do not want to use a PoE+ connection, you can
still order a power adapter as an option.
The access point LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps. The following
figure shows a NETGEAR MS510TXPP switch, which supports speeds of 2.5 Gbps and
higher and can supply PoE+. To allow for this speed, your Internet connection, modem,
and switch all need to support a speed of 2.5 Gbps. If one of these components supports
only 1 Gbps (which is a common speed), the LAN connection functions also at 1 Gbps.
Network and Access It for Initial
Configuration
User Manual27Install the Access Point in Your
Page 28
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Figure 7. Set up model WAX610 with a PoE+ connection to your network
To set up the access point with an Ethernet connection to your network:
1. Connect an Ethernet cable to the LAN/PoE+ port on the access point.
2.
Connect the other end of the Ethernet cable to a port on a switch that is connected
to your network and to the Internet.
If you use a PoE+ connection, the port must be a PoE+ port on a PoE+ switch. The
access point requires 802.3at (PoE+) input. For optimal functioning, make sure that
you use an 802.3at (PoE+) switch and not an 802.3af (PoE) switch.
While the access point is starting or in the process of getting an IP address from a
DHCP server (or router functioning as a DHCP server) in your network, the
Power/Cloud LED initially lights solid amber and then blinks amber slowly. After
about two minutes, the Power/Cloud LED turns solid green or solid blue and the
access point is ready for you to perform the initial configuration.
For information about accessing the access point for initial configuration, see Connect
to the access point for initial configuration on page 30.
Set up and connect outdoor model WAX610Y to your network
This section applies to outdoor model WAX610Y only.
Note: Before you mount the access point at a permanent location outdoors, we
recommend that you configure the access point for your network environment and test
your setup.
Connect the access point to a Power over Ethernet plus (PoE+) switch in your network.
The switch must be connected to a network router that is connected to the Internet. If
User Manual28Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 29
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
you use a PoE+ switch that is located indoors, you must install a PoE+ Ethernet surge
protector on the cable from the switch to the access point located outdoors.
Note: Model WAX610Y does not provide a power connector, nor requires a power
adapter. You power up this model only by connecting an Ethernet cable to a PoE+
switch.
The access point LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps. The following
figure shows a NETGEAR MS510TXPP switch, which supports speeds of 2.5 Gbps and
higher and can supply PoE+. To allow for this speed, your Internet connection, modem,
and switch all need to support a speed of 2.5 Gbps. If one of these components supports
only 1 Gbps (which is a common speed), the LAN connection functions also at 1 Gbps.
Figure 8. Set up model WAX610Y with a PoE+ connection to your network
To set up the access point with an Ethernet connection to your network:
1.
Use the latch on the front of the access point to open the cover.
Carefully pull the latch toward you and pull the cover downward so that it slides out
of the enclosure. The LAN/PoE+ port is now accessible.
2. Connect an Ethernet cable to the LAN/PoE+ port on the access point.
3.
If you use a PoE+ switch that is located indoors, install a PoE+ Ethernet surge
protector (not supplied) on the cable from the switch to the access point located
outdoors. The previous figure shows such a setup.
4.
Connect the other end of the Ethernet cable to a port on a PoE+ switch that is
connected to your network and to the Internet.
User Manual29Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 30
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
The access point requires 802.3at (PoE+) input. For optimal functioning, make sure
that you use an 802.3at (PoE+) switch and not an 802.3af (PoE) switch.
While the access point is starting or in the process of getting an IP address from a
DHCP server (or router functioning as a DHCP server) in your network, the
Power/Cloud LED initially lights solid amber and then blinks amber slowly. After
about two minutes, the Power/Cloud LED turns solid green or solid blue and the
access point is ready for you to perform the initial configuration.
For information about accessing the access point for initial configuration, see Connect
to the access point for initial configuration on page 30.
Connect to the access point for initial configuration
After you set up the access point, you can use several methods to connect to it for initial
configuration.
You can use the NETGEAR Insight app on an iOS or Android mobile device, or use the
Insight Cloud portal or the local browser UI.
The Insight app and the Insight Cloud portal provide ease of access and let you configure
most features that are available on the access point. The local browser UI lets you
configure all features.
For information about using the Insight app or the Insight Cloud portal, see one of the
following sections:
Connect over WiFi using the NETGEAR Insight app on page 31
•
Connect over the Internet using the NETGEAR Insight Cloud portal on page 32
•
For information about using the local browser UI, see one of the following sections:
Connect over WiFi to the local browser UI for initial configuration on page 33
•
Connect over the LAN to the local browser UI for initial configuration on page 37
•
Note: If your network does not include a DHCP server (or a router that functions as a
DHCP server) and you do not perform the initial configuration of the access point as
described in one of these sections, you can connect only five clients to the access point
and the access point can provide an IP address to only five clients. To prevent this
situation, make sure that you perform the initial configuration of the access point.
Network and Access It for Initial
Configuration
User Manual30Install the Access Point in Your
Page 31
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Connect over WiFi using the NETGEAR Insight app
You can install the NETGEAR Insight app on an iOS or Android mobile device and set
up the access point (and perform many other tasks as well).
IMPORTANT: If you add the access point to a NETGEAR Insight network location and
manage the access point through the Insight app or Insight Cloud portal, the admin
password for the access point changes. That is, the Insight network password for that
location replaces the admin password. To access the local browser UI, you must then
enter the Insight network password and not the admin password. If you later decide to
remove the access point from the Insight network location or change the management
mode to Web-browser mode (see Change the management mode to NETGEAR Insight
or Web-browser on page 150), you must continue to use the Insight network password
to access the local browser UI until you manually change the admin password on the
access point.
For more information about the Insight app, visit insight.netgear.com and see the
NETGEAR knowledge base at netgear.com/support/product/insight.aspx.
To connect to the access point over WiFi using an iOS or Android mobile device:
1.
On your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2.
Connect your mobile device to the WiFi network of the access point.
The default SSID is on the access point label on the bottom of the access point and
is shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six
hexadecimal digits of the access point’s MAC address. The default password is
sharedsecret.
3. Launch the Insight app.
4.
If you do not have a NETGEAR account, tap Create NETGEAR Account and follow
the onscreen instructions.
5.
Enter the email address and password for your account and tap LOG IN.
After you log in to your account, the IP address of the access point displays in the
device list.
6.
Write down the access point IP address and save it for later use.
User Manual31Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 32
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7.
To use the Insight app to configure and manage the access point, tap the access
point and follow the prompts to register the access point and add it to an Insight
network location.
Connect over the Internet using the NETGEAR Insight Cloud portal
The Insight Cloud portal is available for Insight Premium or Insight Pro subscribers. To
use the NETGEAR Insight Cloud portal to configure and manage the access point, the
access point must already be connected to the Internet.
IMPORTANT: If you add the access point to a NETGEAR Insight network location and
manage the access point through the Insight app or Insight Cloud portal, the admin
password for the access point changes. That is, after you add the access point to an
Insight network location, the Insight network password for that location replaces the
admin password. To access the local browser UI, you must then enter the Insight network
password and not the admin password. If you later decide to remove the access point
from the Insight network location or change the management mode to Web-browser
mode (see Change the management mode to NETGEAR Insight or Web-browser on
page 150), you must continue to use the Insight network password to access the local
browser UI until you manually change the admin password on the access point.
For more information about the Insight Cloud portal and the configuration and
management options that are available through the Insight Cloud portal, visit
insight.netgear.com and see the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx.
To connect to the access point over the Internet through the Insight Cloud portal:
1. Visit insight.netgear.com.
The NETGEAR Account Login page displays.
2. Enter your Insight email address and password.
If you do have an Insight account, you can create one.
3. Click the Login button.
You can now add the access point to an Insight network location so that you can
configure and manage the access point.
Network and Access It for Initial
Configuration
User Manual32Install the Access Point in Your
Page 33
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Connect over WiFi to the local browser UI for initial configuration
This section describes how to connect to the access point for the first time over WiFi
using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight
app) and complete the initial configuration.
Note: The figures in this section show model WAX610. If you use model WAX610Y,
the local browser UI shows model WAX610Y.
To connect over WiFi to the local browser UI for initial configuration:
1.
From your computer or mobile device, connect over WiFi to the access point’s default
WiFi network.
The default SSID is on the access point label on the bottom of the access point and
is shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six
hexadecimal digits of the access point’s MAC address. The default password is
sharedsecret.
2. On the computer or mobile device, launch a web browser and, in the address bar,
enter http://aplogin.net.
Note: You can use http://aplogin.net only during initial setup of the access point.
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
3.
If your browser displays a security message and does not let you proceed, do one
of the following:
Google Chrome. If Google Chrome displays a Your connection is not private
•
message, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe)
link, in which x.x.x.x represents the IP address of the switch.
Apple Safari. If Apple Safari displays a This connection is not private message,
•
click the Show Details button. Then, click the visit this website link. If a warning
Network and Access It for Initial
Configuration
User Manual33Install the Access Point in Your
Page 34
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
pop-up window displays, click the Visit Website button. If another pop-up window
displays to let you confirm changes to your certificate trust settings, enter your
Mac user name and password and click the Update Setting button.
Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure
•
message, click the ADVANCED button. Then, click the Add Exception button.
In the pop-up window that displays, click the Confirm Security Exception button.
Microsoft Internet Explore. If Microsoft Internet Explorer displays a There is a
•
problem with this website’s security certificate message, click the Continue to
this website (not recommended) link.
Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s
•
security certificate message or a similar warning, select Details > Go on to the
webpage.
4.
Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
5. Select the Web-browser radio button.
Network and Access It for Initial
Configuration
User Manual34Install the Access Point in Your
Page 35
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
6.
Enter the settings that are described in the following table.
DescriptionSetting
Country/Region
Time Zone
DHCP Client
AP Name
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
From the menu, select the time zone for the country and region in which the access point
is operating.
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
AP Login New
Password
Password
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
! @ # $ % ^ & * ( )
Save the password for future use.
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
Network and Access It for Initial
Configuration
User Manual35Install the Access Point in Your
Page 36
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
SSID
Authentication
Passphrase
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
From the menu, select one of the following authentication types for the WiFi network:
Open. Authentication is not required and data encryption is not supported. This setting
•
does not provide any security and is not appropriate for most situations.
WPA2 Personal. This option allows only WiFi clients that support WPA2 to connect to
•
the SSID. Select this option if all WiFi clients are capable of supporting WPA2. This
option uses AES encryption.
WPA2/WPA Personal. This option allows both WPA and WPA2 WiFi clients to connect
•
to the SSID. This option uses TKIP and AES encryption. Broadcast packets use TKIP. For
unicast (that is, point-to-point) transmissions, WPA clients use TKIP and WPA2 clients
use AES.
After you complete the setup process, you can set up WPA3 Personal, WPA3/WPA2
Personal, or WPA2 Enterprise security with RADIUS servers. For more information, see
Change the authentication and encryption for a WiFi network on page 70.
Unless you selected Open from the Authentication Type menu, enter a new passphrase
(network key or WiFi password) for the WiFi network.
7. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
You are disconnected from the access point. If you changed the default country, the
access point restarts.
8. Reconnect over WiFi to the access point’s WiFi network using the new SSID and
passphrase that you just defined on the Day Zero Easy Setup page.
9.
Enter the access point IP address in the address bar of your browser.
If you changed the IP address, enter the IP address that you saved in Step 7.
A login window displays.
10.
If your browser does not display the login window but displays a security message
and does not let you proceed, see the information in Step 3.
User Manual36Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 37
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
11. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the Day
Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings for
your network environment.
Connect over the LAN to the local browser UI for initial configuration
The following procedure assumes that your network includes a DHCP server (or router
that functions as a DHCP server) and that the access point and your computer are on
the same LAN. By default, the access point functions as a DHCP client.
Note: The figures in this section show model WAX610. If you use model WAX610Y,
the local browser UI shows model WAX610Y.
To connect over the LAN to the local browser UI for initial configuration:
1. To determine the IP address that the DHCP server assigned to the access point,
access the DHCP server or use an IP network scanner.
If you use a Windows-based computer, launch File Explorer (or Windows Explorer),
select Network from the Navigation pane, right-click the access point device icon,
and select Properties to display the IP address.
Note: You can also use the NETGEAR Insight app to discover the IP address that is
assigned to the access point. For more information, see Connect over WiFi using
the NETGEAR Insight app on page 31.
2. On the computer, launch a web browser and, in the address bar, enter the IP address
that is assigned to the access point.
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
User Manual37Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 38
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
3.
If your browser displays a security message and does not let you proceed, do one
of the following:
Google Chrome. If Google Chrome displays a Your connection is not private
•
message, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe)
link, in which x.x.x.x represents the IP address of the switch.
Apple Safari. If Apple Safari displays a This connection is not private message,
•
click the Show Details button. Then, click the visit this website link. If a warning
pop-up window displays, click the Visit Website button. If another pop-up window
displays to let you confirm changes to your certificate trust settings, enter your
Mac user name and password and click the Update Setting button.
Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure
•
message, click the ADVANCED button. Then, click the Add Exception button.
In the pop-up window that displays, click the Confirm Security Exception button.
Microsoft Internet Explore. If Microsoft Internet Explorer displays a There is a
•
problem with this website’s security certificate message, click the Continue to
this website (not recommended) link.
Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s
•
security certificate message or a similar warning, select Details > Go on to the
webpage.
4.
Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
Network and Access It for Initial
Configuration
User Manual38Install the Access Point in Your
Page 39
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
5. Select the Web-browser radio button.
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
6.
Enter the settings that are described in the following table.
DescriptionSetting
Country/Region
Time Zone
DHCP Client
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
From the menu, select the time zone for the country and region in which the access point
is operating.
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
Network and Access It for Initial
Configuration
User Manual39Install the Access Point in Your
Page 40
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
AP Name
AP Login New
Password
Password
SSID
Authentication
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
! @ # $ % ^ & * ( )
Save the password for future use.
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
From the menu, select one of the following authentication types for the WiFi network:
Open. Authentication is not required and data encryption is not supported. This setting
•
does not provide any security and is not appropriate for most situations.
WPA2 Personal. This option allows only WiFi clients that support WPA2 to connect to
•
the SSID. Select this option if all WiFi clients are capable of supporting WPA2. This
option uses AES encryption.
WPA2/WPA Personal. This option allows both WPA and WPA2 WiFi clients to connect
•
to the SSID. This option uses TKIP and AES encryption. Broadcast packets use TKIP. For
unicast (that is, point-to-point) transmissions, WPA clients use TKIP and WPA2 clients
use AES.
After you complete the setup process, you can set up WPA3 Personal, WPA3/WPA2
Personal, or WPA2 Enterprise security with RADIUS servers. For more information, see
Change the authentication and encryption for a WiFi network on page 70.
Passphrase
Unless you selected Open from the Authentication Type menu, enter a new passphrase
(network key or WiFi password) for the WiFi network.
7. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
User Manual40Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 41
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
If you changed the default country, the access point restarts.
Note: Do not close the page!
After a short period, the Dashboard page displays automatically. If the Dashboard
page does not display, for example, because you assigned a static IP address, see
the next step.
You can now customize the access point settings for your network environment.
8.
If the Dashboard does not display automatically, do the following:
a.
Take one of the following actions:
If you assigned a static IP address to the access point, enter that IP address
•
(see Step 7) in the address bar of the web browser.
If you did not assign a static IP address, reenter the IP address that is displayed
•
in the address bar of the web browser. If that does not work, write down the
IP address, close the web browser, launch the web browser again, and then
reenter the IP address in the address bar of the web browser.
If you did not assign a static IP address and you closed the page so that you
•
cannot see the IP address of the access point, use an IP scanner tool, use a
network discovery tool, or access the DHCP server to discover the IP address
of the access point in your network.
Note: You can also use the NETGEAR Insight app to discover the IP address
that is assigned to the access point. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
Then, launch a browser and enter the IP address in the address bar of the
web browser.
A login window displays.
b.
If your browser does not display the login window but displays a security message
and does not let you proceed, see the information in Step 3.
c. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the
Day Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings
for your network environment.
Network and Access It for Initial
Configuration
User Manual41Install the Access Point in Your
Page 42
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Configure indoor model WAX610 offline using a directly connected computer
Note: This procedure does not apply to outdoor model WAX610Y because it requires
a PoE+ connection to a PoE+ switch. (A directly connected computer cannot provide
PoE+ to the access point.)
You can take the access point offline (that is, disconnect it from your network), connect
a computer through an Ethernet cable to the LAN/PoE+ port of the access point, and
connect to the access point over its default IP address so that you can configure it offline.
After you complete the configuration, you can bring the access point online.
Note: Because the access point is not connected to a PoE+ switch, you can use this
configuration method only if you have a power adapter for the access point.
To connect to the access point using a computer that is connected to a LAN/PoE+
port of the access point:
1.
Record the IP address and subnet mask of your computer so that you can reinstate
these IP address settings later.
2. Temporarily change the IP address on your computer to 192.168.0.210 with
255.255.255.0 as the subnet mask.
(You can actually use any IP address in the 192.168.0.2–192.168.0.254 range, with
the exception of IP address 192.168.0.100, which is the default IP address of the
access point.)
For more information about changing the IP address on your computer, see the help
or documentation for your computer.
3. Use an Ethernet cable to connect your computer to a LAN/PoE+ port on the access
point.
4. On the computer, launch a web browser and enter 192.168.0.100 in the address
bar.
Network and Access It for Initial
Configuration
User Manual42Install the Access Point in Your
Page 43
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
5.
If your browser displays a security message and does not let you proceed, do one
of the following:
Google Chrome. If Google Chrome displays a Your connection is not private
•
message, click the ADVANCED link. Then, click the Proceed to 192.168.0.100
(unsafe) link.
Apple Safari. If Apple Safari displays a This connection is not private message,
•
click the Show Details button. Then, click the visit this website link. If a warning
pop-up window displays, click the Visit Website button. If another pop-up window
displays to let you confirm changes to your certificate trust settings, enter your
Mac user name and password and click the Update Setting button.
Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure
•
message, click the ADVANCED button. Then, click the Add Exception button.
In the pop-up window that displays, click the Confirm Security Exception button.
Microsoft Internet Explore. If Microsoft Internet Explorer displays a There is a
•
problem with this website’s security certificate message, click the Continue to
this website (not recommended) link.
Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s
•
security certificate message or a similar warning, select Details > Go on to the
webpage.
6.
Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
Network and Access It for Initial
Configuration
User Manual43Install the Access Point in Your
Page 44
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7. Select the Web-browser radio button.
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
8.
Enter the settings that are described in the following table.
DescriptionSetting
Country/Region
Time Zone
DHCP Client
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
From the menu, select the time zone for the country and region in which the access point
is operating.
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
Network and Access It for Initial
Configuration
User Manual44Install the Access Point in Your
Page 45
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
AP Name
AP Login New
Password
Password
SSID
Authentication
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
! @ # $ % ^ & * ( )
Save the password for future use.
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
From the menu, select one of the following authentication types for the WiFi network:
Open. Authentication is not required and data encryption is not supported. This setting
•
does not provide any security and is not appropriate for most situations.
WPA2 Personal. This option allows only WiFi clients that support WPA2 to connect to
•
the SSID. Select this option if all WiFi clients are capable of supporting WPA2. This
option uses AES encryption.
WPA2/WPA Personal. This option allows both WPA and WPA2 WiFi clients to connect
•
to the SSID. This option uses TKIP and AES encryption. Broadcast packets use TKIP. For
unicast (that is, point-to-point) transmissions, WPA clients use TKIP and WPA2 clients
use AES.
After you complete the setup process, you can set up WPA3 Personal, WPA3/WPA2
Personal, or WPA2 Enterprise security with RADIUS servers. For more information, see
Change the authentication and encryption for a WiFi network on page 70.
Passphrase
Unless you selected Open from the Authentication Type menu, enter a new passphrase
(network key or WiFi password) for the WiFi network.
9. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
User Manual45Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 46
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
You are disconnected from the access point. If you changed the default country, the
access point restarts.
10.
After a few minutes, if the login window does not display automatically, enter
192.168.0.100 in the address bar of your browser.
If you changed the IP address, enter the IP address that you saved in Step 9.
A login window displays.
11.
If your browser does not display the login window but displays a security message
and does not let you proceed, see the information in Step 5.
12. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the Day
Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings for
your network environment.
13.
After you complete the setup process, or both the setup and customization process,
you can change the computer back to its original IP address settings.
Log in to the access point after initial setup
After initial setup, the access point is ready for use and you can change the settings and
monitor the traffic.
When you enter the IP address that is assigned to the access point, we recommend that
you enter https rather than http. However, if you enter http, the browser automatically
redirects your request to https. If you did not yet install the access point’s security
certificate, your browser might display a security message. You can either ignore this
message or install the security certificate. Consider the following examples:
Google Chrome. If Google Chrome displays a Your connection is not private
•
message, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe)
link, in which x.x.x.x represents the IP address of the switch.
Apple Safari. If Apple Safari displays a This connection is not private message, click
•
the Show Details button. Then, click the visit this website link. If a warning pop-up
window displays, click the Visit Website button. If another pop-up window displays
to let you confirm changes to your certificate trust settings, enter your Mac user name
and password and click the Update Setting button.
User Manual46Install the Access Point in Your
Network and Access It for Initial
Configuration
Page 47
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure message,
•
click the ADVANCED button. Then, click the Add Exception button. In the pop-up
window that displays, click the Confirm Security Exception button.
Microsoft Internet Explore. If Microsoft Internet Explorer displays a There is a
•
problem with this website’s security certificate message, click the Continue to this
website (not recommended) link.
Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s
•
security certificate message or a similar warning, select Details > Go on to the
webpage.
To log in to the access point’s local browser UI:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message,
see the information in the introduction to this task.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
The following figure shows the upper part of the Dashboard page for model WAX610.
The Dashboard page for model WAX610Y is identical.
Network and Access It for Initial
Configuration
User Manual47Install the Access Point in Your
Page 48
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
The Dashboard page displays various panes that let you see the status of your access
point at a glance. For more information about the Dashboard page and its various
panes, see Monitor the Access Point and the Network on page 177.
Network and Access It for Initial
Configuration
User Manual48Install the Access Point in Your
Page 49
5
Install the Access Point in an Insight Instant Mesh WiFi Network
In addition to functioning as a regular standalone access point, the access point can
function in an Insight Instant Mesh WiFi network as either a root access point or an
extender access point.
This chapter describes how you can use the NETGEAR Insight app to connect the access
point to a root access point and let it function as an extender access point in an Insight
Instant Mesh WiFi network.
IMPORTANT: To set up the extender access point in a NETGEAR Insight Instant Mesh
WiFi network with a connection to a root access point, you must use the NETGEAR
Insight app. You cannot use the local browser UI to set up a mesh WiFi connection to
a root access point.
For information about how you can manage and monitor the extender access point with
the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
The chapter contains the following sections:
• What are a root access point and an extender access point?
• What is an Insight Instant Mesh WiFi network?
• Requirements for placing an extender access point in a mesh WiFi network
• Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
• Connect the access point as an extender to a root access point
• Connect over the Internet using the NETGEAR Insight Cloud portal
49
Page 50
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
What are a root access point and an extender access point?
Both model WAX610 and WAX610Y can function in an Insight Instant Mesh WiFi network
as a root access point, while model WAX610 can also function as an extender access
point:
Root access point. A mesh-capable access point that is set up with a wired
•
connection to your network and functions as a gateway to another mesh-capable
access point that functions as an extender. On the root access point, use the Ethernet
port for the connection to your network. A root access point can service multiple
extender access points simultaneously.
Extender access point. A mesh-capable access point that functions as an extender
•
access point with a WiFi backhaul connection to a root access point that provides
Internet connectivity. The extender access point is not connected to your network
over a wired connection but over a WiFi connection.
Note: Although model WAX610Y can function as an extender access point, you
can power it through PoE only.
The following figure shows indoor model WAX610. If you use outdoor model WAX610Y
as a root access point with a connection to an indoor PoE+ switch, the setup requires
an Ethernet surge protector on the Ethernet cable between outdoor model WAX610Y
and the PoE+ switch .
Insight Instant Mesh WiFi
Network
User Manual50Install the Access Point in an
Page 51
3
3
4
5
1
2
1
2
3
4
5
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Figure 9. Mesh network with an extender access point and a wired root access point
Number or Icon and Description
A root access point that is connected over Ethernet to a network switch.
An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point.
If model WAX610 functions as an extender, it must be powered by a power adapter rather than by PoE. (A power
adapter is an option that you can purchase.) Although model WAX610Y can function as an extender access point,
you can power it through PoE only.
A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud portal.
The Insight app or Insight Cloud portal let you configure and manage the extender access point in the Insight
Instant Mesh WiFi network.
A network switch. If model WAX610Y functions as a root access point or model WAX610 functions as a root
access point without a power adapter, the switch must provide PoE+ to the access point.
A network router that is connected to the Internet.
Broadcast in the 2.4 GHz radio band.
Broadcast in the 5 GHz radio band.
Insight Instant Mesh WiFi
Network
User Manual51Install the Access Point in an
Page 52
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
What is an Insight Instant Mesh WiFi network?
A mesh WiFi network consists of at least one mesh-capable root access point and one
or more extender access points that connect to the root access point over WiFi (see
What are a root access point and an extender access point? on page 50). The root access
point is connected over Ethernet to a router or Internet gateway and provides Internet
access to its extender access points. The root access point and extender access points
work together to cover a potentially large area with WiFi network, which is the mesh
network.
A mesh network can be a good solution if you want to bring WiFi to the following
environments:
Nearby rooms where cabling is not available (in line of sight and in range of the
•
current WiFi reception)
Neighboring office buildings (in line of sight and in range of the current WiFi
•
reception)
Any environment in which you cannot run cables
•
In the mesh WiFi network, the extender access point connects to the root access point
over a WiFi connection and broadcasts (extends) the WiFi network to the WiFi clients:
Backhaul connection. The WiFi connection between the root access point and the
•
extender access point is referred to as the backhaul connection.
Fronthaul connection. The WiFi connection between the extender access point
•
and its WiFi clients is referred to as the fronthaul connection.
In a NETGEAR Insight Instant Mesh WiFi network, you must use the Insight app to set
up the mesh WiFi connection between the root access point and the extender access
point. That is, you cannot do so through the local browser UI of either the root access
point or the extender access point. In a network with multiple root access points,
NETGEAR Insight automatically connects the extender access point to the root access
point with the strongest WiFi signal.
Although the extender access point broadcasts the same WiFi network or networks as
the root access point, you can also set up a WiFi network on the extender access point,
which then can be broadcast by the root access point and other extender access points
in the mesh network.
The access point can broadcast on the 5 GHz band (the preferred band for the backhaul
connection) and the 2.4 GHz band. Depending on the WiFi capability of the WiFi client,
any band can provide the fronthaul connection.
User Manual52Install the Access Point in an
Insight Instant Mesh WiFi
Network
Page 53
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Requirements for placing an extender access point in a mesh WiFi network
The following are the requirements for placing an extender access point in an Insight
Instant Mesh WiFi network:
The existing WiFi network must include at least one mesh-capable access point that
•
runs the latest firmware version. On the root access point, use one Ethernet port for
the connection to your network.
The extender access point must be within range of the WiFi signal of a root access
•
point so that it can sync with the root access point. For a reliable WiFi connection,
place the extender access point less than 25 feet (7.5 m), in a line of sight with minimal
obstacles from the closest root access point.
You must use the NETGEAR Insight app to install the extender access point in the
•
existing WiFi network.
The following NETGEAR access point models can function either as a root access point
or as an extender access point:
WAX610
•
WAC610Y (Although this model can function as an extender access point, you can
•
power it through PoE only.)
WAC564
•
WAC540
•
Note: In a mesh WiFi network with WAX610 or WAX610Y models and WAC564 or
WAC540 models, the WAC564 and WAC540 models must run firmware version 9.0 or
a later version.
In the near future, more NETGEAR models might be added to the previous list.
Insight Instant Mesh WiFi
Network
User Manual53Install the Access Point in an
Page 54
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
Before you can add the access point to an Insight Instant Mesh WiFi network, you must
install the NETGEAR Insight app on an iOS or Android mobile device.
For more information about the Insight app, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
To install the Insight app:
1.
On your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2. Launch the Insight app.
3.
If you do not have a NETGEAR account, tap Create NETGEAR Account and follow
the onscreen instructions.
4.
Enter the email address and password for your account and tap LOG IN.
You can now set up the access point mesh WiFi connection (see Connect the access
point as an extender to a root access point on page 54).
Connect the access point as an extender to a root access point
Use the NETGEAR Insight app to connect the access point as an extender to a root
access point. The root access point must be set up with a wired connection to a router
or Internet gateway so that the root access point can provide Internet connectivity to
the extender access point.
Note: Although model WAX610Y can function as an extender access point, you can
power it through PoE only.
Insight Instant Mesh WiFi
Network
User Manual54Install the Access Point in an
Page 55
3
3
4
5
1
2
1
2
3
4
5
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Figure 10. Connect the extender access point to a wired root access point
Number or Icon and Description
A root access point that is connected over Ethernet to a network switch.
An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point.
If model WAX610 functions as an extender, it must be powered by a power adapter rather than by PoE. (A power
adapter is an option that you can purchase.) Although model WAX610Y can function as an extender access point,
you can power it through PoE only.
A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud portal.
The Insight app or Insight Cloud portal let you configure and manage the extender access point in the Insight
Instant Mesh WiFi network.
A network switch. If model WAX610Y functions as a root access point or model WAX610 functions as a root
access point without a power adapter, the switch must provide PoE+ to the access point.
A network router that is connected to the Internet.
Broadcast in the 2.4 GHz radio band.
Broadcast in the 5 GHz radio band.
The extender access point can use any band to establish the backhaul connection to
the root access point and the fronthaul connection to WiFi clients. However, after the
backhaul connection is established, the extender access point automatically switches
Insight Instant Mesh WiFi
Network
User Manual55Install the Access Point in an
Page 56
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
to the 5 GHz band as the preferred band for its backhaul connection. Using the NETGEAR
Insight app, you can change the preferred band for the backhaul connection.
To use the NETGEAR Insight app to connect the extender access point to a root
access point in an existing WiFi network:
1.
For a reliable WiFi connection, place the extender access point less than 25 feet (7.5
m), in a line of sight with minimal obstacles from the closest root access point.
2. Connect the extender access point to a power source.
The Power/Cloud LED of the extender access point lights amber and then lights
green.
IMPORTANT: To prevent a network loop, connect the extender access point to a
PoE+ switch that is not connected to the same network as the root access point or
to the Internet. You can also use an optional power adapter.
3. Connect your smartphone to the existing WiFi network that includes one or more
root access points.
4. Launch the Insight app and sign in to your NETGEAR account.
In most situations, the Insight app detects the extender access point automatically.
This process might take a few minutes.
5.
Do one of the following:
Automatically detected. If the Insight app detects the extender access point
•
automatically, tap the extender access point and follow the onscreen instructions
to add the extender access point to your Insight account and to an Insight network
location.
Not automatically detected. If the Insight app does not detect the extender
•
access point automatically, do the following:
a. Tap + in the upper-right corner.
b.
Manually add the extender access point to the Insight app using one of the
following options:
- Scan the QR code.
- Scan the serial number bar code.
- Type in the serial number.
c. Follow the onscreen instructions to add the extender access point to your
Insight account and to an Insight network location.
The extender access point attempts to detect and connect to the root access point
that provides the strongest WiFi signal in the Insight Instant Mesh WiFi network.
User Manual56Install the Access Point in an
Insight Instant Mesh WiFi
Network
Page 57
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Note: The initial connection and configuration process might take up to 10 minutes.
The extender access point might restart during the configuration process.
6.
Wait for the extender access point to go through the initial connection and
configuration process and for the Power/Cloud LED to stop blinking amber, green,
and blue and to light solid blue.
Note: The initial connection and configuration process might take up to 10 minutes.
The extender access point might restart during the configuration process.
The Power/Cloud LED lights as follows during the initial connection and configuration
process:
Blinking green. The extender access point is attempting to detect a root access
•
point.
Solid green. The extender access point is making its first connection with the
•
root access point that provides the strongest WiFi signal.
Blinking amber slowly. The extender access point is contacting the network
•
router or DHCP server to receive an IP address.
If the Power/Cloud LED does not stop blinking amber, see Power/Cloud LED is
blinking amber slowly, continuously on page 223.
Blinking amber, green, and blue. The extender access point is being configured
•
as a managed device in the Insight Instant Mesh WiFi network.
If the Power/Cloud LED does not stop blinking amber, green, and blue, see
Power/Cloud LED does not stop blinking amber, green, and blue on page 225.
When the configuration is complete, the Power/Cloud LED lights as follows:
Solid blue. The configuration is complete and the extender access point is ready
•
for operation. The extender access point functions in the Insight Instant Mesh
WiFi network and is connected to the Insight cloud.
The extender access point is automatically configured to broadcast (extend) the root
access point’s WiFi network.
If you are experiencing difficulty connecting the extender access point with a root access
point, see The extender access point and root access point cannot connect on page
226.
For information about accessing, managing, and monitoring the extender access point
with the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
User Manual57Install the Access Point in an
Insight Instant Mesh WiFi
Network
Page 58
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Connect over the Internet using the NETGEAR Insight Cloud portal
The NETGEAR Insight Cloud portal is available for Insight Premium and Insight Pro
subscribers.
After you install the access point in an Insight Instant Mesh WiFi network, you can use
the Insight Cloud portal to configure, manage, and monitor the access point.
For more information about the Insight Cloud portal and the configuration and
management options that are available through the Insight Cloud portal, visit
netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge
base articles about NETGEAR Insight, visit netgear.com/support.
To connect to the access point over the Internet through the Insight Cloud portal:
1. Visit insight.netgear.com.
The NETGEAR Account Login page displays.
2. Enter your Insight email address and password.
If you do not own an Insight account, you can create one.
3. Click the Login button.
You can now configure, manage, and monitor the access point.
Insight Instant Mesh WiFi
Network
User Manual58Install the Access Point in an
Page 59
6
Manage the Basic WiFi Features
This chapter describes how you can manage the basic WiFi settings of the access point.
The access point can support eight WiFi networks, each with its own unique WiFi settings,
including WiFi security.
Tip: If you want to change the settings of the access point’s WiFi network, use a wired
connection to avoid being disconnected when the new WiFi settings take effect.
The chapter includes the following sections:
• Set up an open or secure WiFi network
• View or change the settings of a WiFi network
• Disable or enable a WiFi network or set up a WiFi activity schedule
• Remove a WiFi network
• Change the authentication and encryption for a WiFi network
• Hide or broadcast the SSID for a WiFi network
• Enable or disable client isolation for a WiFi network
• Enable or disable band steering with 802.11k RRM and 802.11v WiFi network
management
• Change the VLAN ID for a WiFi network
• Enable or disable PMF for a WiFi network
• Enable or disable URL tracking for a WiFi network
• Change the format of the DHCP offer messages in a WiFi network
• Select a MAC ACL for a WiFi network
• Set bandwidth rate limits for a WiFi network
59
Page 60
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Set up an open or secure WiFi network
The access point provides one default SSID that is enabled by default and that broadcasts
on the 2.4 GHz band and the 5 GHz band. This is the SSID that you were required to
rename when you logged in to the access point for the first time. You can add more
SSIDs: The access point can support a total of eight SSIDs.
The access point can simultaneously support the 2.4 GHz band for 802.11b/g/n/ax WiFi
devices and the 5 GHz band for 802.11a/na/ac/ax WiFi devices. Each band supports
two WiFi streams for a total of four WiFi streams.
SSID stands for service set identifier, which is the WiFi network name. When you create
a new SSID, you are defining the settings for a new virtual access point (VAP). That means
that the access point supports up to eight VAPs.
If you plan to use WPA2 Enterprise security for your WiFi network, first set up RADIUS
servers (see Set up RADIUS servers on page 133).
To set up a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select and add an SSID.
User Manual60Manage the Basic WiFi Features
Page 61
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
5.
Click the + button to the left of Add SSID.
The previous figure shows SSID2 as an example.
6.
Specify the WiFi network name (SSID), select whether the SSID is broadcast, and
specify the VLAN ID as described in the following table.
DescriptionSetting
Wireless
Network Name
(SSID)
Broadcast SSID
VLAN ID
The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a maximum
of 32 characters. You can use a combination of alphanumeric and special characters, except
for quotation marks (") and a backslash (\).
For a WiFi device to be able to connect to the VAP, the SSID on the WiFi device must match
the SSID of the VAP.
By default, the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their
scanned network lists. To turn off the SSID broadcast, select the No radio button.
Turning off the SSID broadcast provides additional WiFi security, but users must know the
SSID to be able to join the VAP.
You can enter the VLAN ID that must be associated with the VAP. By default, the VLAN ID is
1.
This VLAN ID is not the same as the 802.1Q VLAN ID that is used for the wired network (see
Set the 802.1Q VLAN and management VLAN on page 140).
User Manual61Manage the Basic WiFi Features
Page 62
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7.
Specify the WiFi security by selecting an option from the Authentication menu and,
if applicable, by specifying a passphrase in the Passphrase field or selecting an
option from the Encryption menu, as described in the following table.
DescriptionSetting
Open
WPA2
Personal
A legacy open WiFi network does not provide any security. Any WiFi device can join the
network. We recommend that you do not use a legacy open WiFi network but configure
WiFi security. However, a legacy open network might be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box displays.
Enhanced Open check box cleared. The WiFi network is a legacy open network without
•
any security. This is the default option for en open network. Clients are not authenticated,
traffic is not encrypted, and 802.11w (PMF) is automatically disabled (see Step 9).
Enhanced Open check box selected. The WiFi network can only accept clients that
•
support the WiFi enhanced open feature, which is based on opportunistic wireless
encryption (OWE). Select this option only if all the clients in the WiFi network support
OWE. If you select this option, the encryption is CCM mode protocol (CCMP), and 802.11w
(PMF) is automatically set to mandatory (see Step 9).
This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption.
This type of security enables only WiFi devices that support WPA2 to join the VAP.
WPA2 provides a secure connection but some legacy WiFi devices do not detect WPA2 and
support only WPA. If your network includes such older devices, select WPA2/WPA Personal
authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
WPA2/WPA
Personal
WPA2
Enterprise
This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that support
either WPA2 or WPA to join the VAP. This option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and limits the
speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
This enterprise-level security uses RADIUS for centralized Authentication, Authorization, and
Accounting (AAA) management. For WPA2 Enterprise security to function, you must set up
RADIUS servers (see Set up RADIUS servers on page 133).
From the Encryption menu, select the data encryption mode:
TKIP + AES. This type of data encryption enables WiFi devices that support either WPA
•
or WPA2 to join the access point’s WiFi network. This is the default mode.
AES. This type of data encryption provides a secure connection but some older WiFi
•
devices do not detect WPA2 and support only WPA. Therefore, if your network includes
such older devices, select TKIP + AES encryption.
User Manual62Manage the Basic WiFi Features
Page 63
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
WPA3
Personal
WPA3/WPA2
Personal
This option is the most secure personal authentication option. WPA3 uses SAE encryption
and enables only WiFi devices that support WPA3 to join the VAP. If you select this option,
802.11w (PMF) is automatically set to mandatory (see Step 9).
WPA3 provides a secure connection but some legacy WiFi devices do not detect WPA3 and
support only WPA2. If your network also includes WPA2 devices, select WPA3/WPA2
Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
This option, which is the same as WPA3/WPA2-PSK, enables WiFi devices that support either
WPA3 or WPA2 to join the VAP. This option uses SAE and AES encryption.
WPA2-PSK (which uses AES) is less secure than WPA3 (which uses SAE).
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
8. Optionally, disable the WiFi broadcast or set up a WiFi activity schedule by selecting
one of the following radio buttons:
Always ON. When you set up an SSID, you are creating a new virtual access point
•
(VAP). By default, the new VAP is enabled and the Always ON radio button is
selected.
Always OFF. Select this radio button to set up the SSID but temporarily disable
•
the VAP.
Custom. Select this radio button to set up a broadcast schedule. An icon displays
•
to the right of the radio button. Do the following:
a. Click the icon next to the radio button.
A pop-up window displays.
b.
Either select a predefined time from the Preset menu or select custom time
blocks by clicking the time blocks.
A blue color for a time block indicates that the VAP will be enabled (on). A
gray color for a time block indicates that the VAP will be disabled (off).
c. Click the Done button.
The pop-up window closes.
For each SSID, you can create a single custom schedule. In that schedule, for
each day from 12:00 a.m. to 11:59 p.m., you specify the time or times that the
VAP is disabled.
User Manual63Manage the Basic WiFi Features
Page 64
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
9. Optionally, enable 802.11w Protected Management Frames (PMF), select a single
radio band only, enable band steering with 802.11k radio resource management
(RRM) and 802.11v WiFi network management, or do all of this, as described in the
following table.
DescriptionSetting
802.11w (PMF)
Band
Band Steering
/ 802.11 k/v
Protected Management Frames (PMF), according to the 802.11w standard, is a security
feature that protects unicast and multicast management frames from being intercepted and
changed for malicious purposes. This feature is disabled by default, but you can enable it
as either optional or mandatory.
Select Mandatory to require devices to use PMF. Devices that do not support PMF cannot
connect to the WiFi network. If you select WPA3 Personal authentication or WiFi enhanced
open authentication, PMF becomes mandatory automatically.
Select Optional to let the access point automatically activate PMF based on whether devices
can support PMF.
Select a radio button for a single band (2.4 GHz or 5 GHz) or keep the default selection,
which is the Both radio button, to enable the VAP to broadcast on both bands.
By default, band steering with 802.11k RRM and 802.11v WiFi network management is
disabled for the VAP.
To enable band steering with 802.11k RRM and 802.11v WiFi network management, select
the Enable radio button. Doing so allows the access point, under certain channel conditions,
to steer WiFi devices that are dual-band capable to the 2.4 GHz or 5 GHz band of the VAP.
Compared to the 2.4 GHz band, generally more channels and bandwidth are available in
the 5 GHz band, causing less interference and allowing for a better user experience.
802.11k RRM and 802.11v WiFi network management affect the network in the following
ways:
802.11k RRM. This feature lets the access point and 802.11k-aware clients dynamically
•
measure the available radio resources. In an 802.11k-enabled network, access points and
clients can send neighbor reports, beacon reports, and link measurement reports to each
other, allowing 802.11k-aware clients to automatically select the best access point for
initial connection or for roaming.
802.11v WiFi network management. This feature lets the access point steer its WiFi
•
clients to the 2.4 GHz or 5 GHz band, based on the access point’s channel load.
The access point sets the received signal strength indicator (RSSI) threshold automatically.
(That is, you cannot configure the RSSI threshold manually.)
10.
Optionally, to configure client isolation, configure URL tracking, configure if a DHCP
Offer message is unicast or broadcast, or do all of this, click the > Advanced tab.
User Manual64Manage the Basic WiFi Features
Page 65
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
11.
Configure the client isolation, URL tracking, and DHCP Offer message settings as
described in the following table.
DescriptionSetting
Wireless Client
Isolation
URL Tracking
DHCP Offer
Broadcast to
Unicast
By default, client isolation is disabled for the VAP, and the Disable radio button is selected.
To block communication between WiFi clients that are associated with the same SSID or
different SSIDs on the access point, select the Enable radio button.
If the management VLAN and WiFi network VLAN are identical (by default, both are VLAN 1)
and you enable client isolation, the Allow Access to AP UI check box displays. By default,
this check box is selected, allowing an admin user to access the local browser UI over WiFi.
If you clear the Allow Access to AP UI, an admin user cannot access the local browser UI
over WiFi.
Note: If the management VLAN and WiFi network VLAN are identical (which they are by
default), an admin user can always access the local browser UI over a wired network
connection.
By default, URL tracking is disabled, and the Disable radio button is selected. To enable
URL tracking for all URLs that are requested by WiFi clients that are connected to the SSID,
select the Enable radio button.
For information about how to view the tracked URLs per SSID or per WiFi client, see View or
download tracked URLs on page 191.
When a device tries to associate with the WiFi network and negotiates an IP address, the
access point converts the broadcast DHCP offer message that it receives from the DHCP
server to a unicast message, and forwards it to the device. This is the default option (that is,
the Enable radio button is selected). To disable this option so that the access point does
not convert the broadcast DHCP offer messages to unicast messages, select the Disable
radio button.
User Manual65Manage the Basic WiFi Features
Page 66
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
12.
To configure a captive portal, a MAC ACL, and bandwidth rate limits, see the
information in the following sections:
Set Up and Manage a Captive Portal on page 100
•
Manage local MAC access control lists on page 120 and Select a MAC ACL for a
•
WiFi network on page 82
Set bandwidth rate limits for a WiFi network on page 84
•
Although you could also configure these features while you set up a WiFi network,
these features are more complicated and therefore described separately.
13. Click the Apply button.
Your settings are saved.
14. Make sure that you can connect to the new WiFi network.
If you cannot connect to the new WiFi network, check the following:
•
If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•
If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
• Does your WiFi device display as a connected client? (See View client distribution,
connected clients, and client trends on page 186.) If it does, it is connected to the
network.
• Are you using the correct WiFi network name (SSID) and password?
•
If the WiFi authentication and encryption is set to WPA3 Personal, make sure that
the WiFi adapter device driver is updated to the latest version on your
WiFi-enabled computer or mobile device.
User Manual66Manage the Basic WiFi Features
Page 67
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
View or change the settings of a WiFi network
You can view or change the settings of the default WiFi network (SSID or VAP) or any
custom WiFi network.
To view or change the settings of a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
Change the settings of the WiFi network as needed.
For detailed descriptions of the settings, see Set up an open or secure WiFi network
on page 60.
7.
If you made changes, click the Apply button.
Your settings are saved.
8.
If you made changes, make sure that you can reconnect over WiFi to the network
with its new settings.
User Manual67Manage the Basic WiFi Features
Page 68
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If you cannot connect over WiFi, check the following:
•
If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•
If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
• Does your WiFi device display as a connected client? (See View client distribution,
connected clients, and client trends on page 186.) If it does, it is connected to the
network.
• Are you using the correct WiFi network name (SSID) and password?
Disable or enable a WiFi network or set up a WiFi activity schedule
You can temporarily disable a WiFi network (SSID or VAP), you can reenable the WiFi
network, or you can set up a schedule that specifies when the WiFi network is active.
Scheduling a WiFi network a green feature that allows you to turn off the WiFi network
during scheduled vacations, office shutdowns, on evenings, or on weekends.
For each WiFi network, you can create a single custom schedule. In that schedule, for
each day from 12:00 a.m. to 11:59 p.m., you specify the time or times that the VAP is
disabled.
To disable or enable a WiFi network or set up a WiFi activity schedule:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual68Manage the Basic WiFi Features
Page 69
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
Under Schedule, select one of the following radio buttons:
Always ON. The WiFi network is enabled.
•
Always OFF. The WiFi network is disabled.
•
Custom. The WiFi network is enabled or disabled according to a schedule that
•
you must set up.
An icon displays to the right of the radio button.
7.
If you selected Custom in the previous step, do the following:
a. Click the icon next to the radio button.
A pop-up window displays.
b.
Either select a predefined time from the Preset menu or select custom time
blocks by clicking the time blocks.
A blue color for a time block indicates that the WiFi network will be enabled (on).
A gray color for a time block indicates that the WiFi network will be disabled (off).
c. Click the Done button.
The pop-up window closes.
8. Click the Apply button.
Your settings are saved.
User Manual69Manage the Basic WiFi Features
Page 70
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Remove a WiFi network
You can remove a custom WiFi network (SSID or VAP) that you no longer need. You
cannot remove the default WiFi network.
To remove a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the trash can icon to the right of the SSID.
A warning pop-up window displays.
6. Click the Delete button.
The pop-window closes and the WiFi network is removed.
Change the authentication and encryption for a WiFi network
You can change the authentication and encryption of the default WiFi network (SSID or
VAP) or any custom WiFi network.
User Manual70Manage the Basic WiFi Features
Page 71
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Before you change the authentication and encryption, consider the types of clients that
must be able to connect to the WiFi network. WPA3 provides a more secure connection
than WPA2, but many WiFi devices might not yet detect WPA3 and support only WPA2.
Similarly, WPA2 provides a more secure connection than WPA, but some legacy WiFi
devices do not detect WPA2 and support only WPA.
If you plan to use WPA2 Enterprise security for your WiFi network, first set up RADIUS
servers (see Set up RADIUS servers on page 133).
To change the authentication and encryption for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select and add an SSID.
5.
Click the + button to the left of Add SSID.
The settings for the selected SSID display.
6.
Specify the WiFi security by selecting an option from the Authentication menu and,
if applicable, by specifying a passphrase in the Passphrase field or selecting an
option from the Encryption menu, as described in the following table.
User Manual71Manage the Basic WiFi Features
Page 72
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
DescriptionSetting
Open
WPA2 Personal
A legacy open WiFi network does not provide any security. Any WiFi device can join the
network. We recommend that you do not use a legacy open WiFi network but configure
WiFi security. However, a legacy open network might be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box displays.
Enhanced Open check box cleared. The WiFi network is a legacy open network without
•
any security. This is the default option for en open network. Clients are not authenticated,
traffic is not encrypted, and 802.11w (PMF) is automatically disabled (see Enable or
disable PMF for a WiFi network on page 79).
Enhanced Open check box selected. The WiFi network can only accept clients that
•
support the WiFi enhanced open feature, which is based on opportunistic wireless
encryption (OWE). Select this option only if all the clients in the WiFi network support
OWE. If you select this option, the encryption is CCM mode protocol (CCMP), and
802.11w (PMF) is automatically set to mandatory (see Enable or disable PMF for a WiFi
network on page 79).
This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption.
This type of security enables only WiFi devices that support WPA2 to join the VAP.
WPA2 provides a more secure connection than WPA but some legacy WiFi devices do
not detect WPA2 and support only WPA. If your network includes such older devices,
select WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
WPA2/WPA
Personal
WPA2 Enterprise
This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that support
either WPA2 or WPA to join the VAP. This option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and limits the
speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
This enterprise-level security uses RADIUS for centralized Authentication, Authorization,
and Accounting (AAA) management. For WPA2 Enterprise security to function, you must
set up RADIUS servers (see Set up RADIUS servers on page 133).
From the Encryption menu, select the data encryption mode:
TKIP + AES. This type of data encryption enables WiFi devices that support either WPA
•
or WPA2 to join the access point’s WiFi network. This is the default mode.
AES. This type of data encryption provides a secure connection but some older WiFi
•
devices do not detect WPA2 and support only WPA. Therefore, if your network includes
such older devices, select TKIP + AES encryption.
User Manual72Manage the Basic WiFi Features
Page 73
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
WPA3 Personal
WPA3/WPA2
Personal
This option is the most secure personal authentication option. WPA3 uses SAE encryption
and enables only WiFi devices that support WPA3 to join the VAP. If you select this option,
802.11w (PMF) is automatically set to mandatory (see Enable or disable PMF for a WiFi
network on page 79).
WPA3 provides a more secure connection than WPA2 but many WiFi devices might not
yet detect WPA3 and support only WPA2. If your network also includes WPA2 devices,
select WPA3/WPA2 Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
This option, which is the same as WPA3/WPA2-PSK, enables WiFi devices that support
either WPA3 or WPA2 to join the VAP. This option uses SAE and AES encryption.
WPA2-PSK (which uses AES) is less secure than WPA3 (which uses SAE).
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must
enter this passphrase. To view the passphrase in clear text, click the eye icon.
7. Click the Apply button.
Your settings are saved.
8. Make sure that you can connect to the new WiFi network.
If you cannot connect to the new WiFi network, check the following:
•
If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•
If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
• Does your WiFi device display as a connected client? (See View client distribution,
connected clients, and client trends on page 186.) If it does, it is connected to the
network.
• Are you using the correct WiFi network name (SSID) and password?
•
If you changed the WiFi authentication and encryption to WPA3 Personal, make
sure that the WiFi adapter device driver is updated to the latest version on your
WiFi-enabled computer or mobile device.
User Manual73Manage the Basic WiFi Features
Page 74
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Hide or broadcast the SSID for a WiFi network
By default, a WiFi network (SSID or VAP) broadcasts its network name (also referred to
as the SSID) so that WiFi clients can detect the SSID in their scanned network lists. For
additional security, you can turn off the SSID broadcast and hide the SSID so that users
must know the SSID to be able to join the WiFi network.
Note: If you set up a wireless distribution system (WDS; see Set up a WiFi Bridge on
page 198), you must keep the SSID broadcast enabled.
To hide or broadcast the network name for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
Under Broadcast SSID, select one of the following radio buttons:
No. The SSID is hidden for the WiFi network.
•
Yes. The SSID is broadcast for the WiFi network.
•
User Manual74Manage the Basic WiFi Features
Page 75
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7. Click the Apply button.
Your settings are saved.
Enable or disable client isolation for a WiFi network
By default, client isolation is disabled for a WiFi network (SSID or VAP), allowing
communication between WiFi clients that are associated with the same or different WiFi
networks on the access point. For additional security, you can enable client isolation so
that clients that are associated with the same or different WiFi networks cannot
communicate with each other, except for communication over the Internet, which remains
possible.
To enable or disable client isolation for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
User Manual75Manage the Basic WiFi Features
Page 76
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
6. Click the > Advanced tab.
The page expands.
7.
Under Client Isolation, select one of the following radio buttons:
Disable. Client isolation is disabled for the WiFi network. This is the default setting.
•
Enable. Client isolation is enabled for the WiFi network.
•
If the management VLAN and WiFi network VLAN are identical (by default, both
are VLAN 1) and you enable client isolation, the Allow Access to AP UI check
box displays. By default, this check box is selected, allowing an admin user to
access the local browser UI over WiFi. If you clear the Allow Access to AP UI, an
admin user cannot access the local browser UI over WiFi.
Note: If the management VLAN and WiFi network VLAN are identical (which
they are by default), an admin user can always access the local browser UI over
a wired network connection.
8. Click the Apply button.
Your settings are saved.
Enable or disable band steering with 802.11k RRM and 802.11v WiFi network management
Band steering lets the access point identify the WiFi devices that are dual-band capable
and steer those devices to the 2.4 GHz or 5 GHz band of a WiFi network (SSID or VAP).
Compared to the 2.4 GHz band, generally more channels and bandwidth are available
in the 5 GHz band, causing less interference and allowing for a better user experience.
Band steering includes 802.11k radio resource management (RRM) and 802.11v WiFi
network management. By default, band steering is disabled.
802.11k RRM and 802.11v WiFi network management affect the network in the following
ways:
802.11k RRM. This feature lets the access point and 802.11k-aware clients
•
dynamically measure the available radio resources. In an 802.11k-enabled network,
access points and clients can send neighbor reports, beacon reports, and link
measurement reports to each other, allowing 802.11k-aware clients to automatically
select the best access point for initial connection or for roaming.
802.11v WiFi network management. This feature lets the access point steer its
•
WiFi clients to the 2.4 GHz or 5 GHz band, based on the access point’s channel load.
User Manual76Manage the Basic WiFi Features
Page 77
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
In an environment with multiple access points, 802.11v WiFi network management
helps WiFi clients that are roaming to select the best access point.
The access point sets the received signal strength indicator (RSSI) threshold automatically.
(That is, you cannot configure the RSSI threshold manually.)
To enable or disable band steering with 802.11k RRM and 802.11v WiFi network
management for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
Under Band Steering / 802.11 k/v, select one of the following radio buttons:
Disable. Band steering is disabled for the VAP. This is the default setting.
•
Enabled. Under certain channel conditions, the access point steers WiFi devices
•
that are dual-band capable to the 2.4 GHz or 5 GHz band of the VAP.
7. Click the Apply button.
Your settings are saved.
User Manual77Manage the Basic WiFi Features
Page 78
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Change the VLAN ID for a WiFi network
The VLAN ID for a WiFi network is not the same as the 802.1Q VLAN ID that is used for
the wired network (see Set the 802.1Q VLAN and management VLAN on page 140).
CAUTION: Before you change the VLAN ID, be sure that the VLAN is configured on
the network switch and the DHCP server and that the access point and its clients can
get IP addresses over the new VLAN.
To change the VLAN ID for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
In the VLAN ID field, enter a ID (that is, a number).
By default, the VLAN ID for a WiFi network is 1.
7. Click the Apply button.
Your settings are saved.
User Manual78Manage the Basic WiFi Features
Page 79
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Enable or disable PMF for a WiFi network
Protected Management Frames (PMF), according to the 802.11w standard, is a security
feature that protects unicast and multicast management frames from being intercepted
and changed for malicious purposes. This feature is disabled by default, but you can
enable it as either optional or mandatory.
To enable or disable PMF for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6.
Under 802.11w (PMF), select one of the following radio buttons:
Mandatory. Requires devices to use PMF. Devices that do not support PMF
•
cannot connect to the WiFi network. If you select WPA3 Personal authentication
or WiFi enhanced open authentication, PMF becomes mandatory automatically.
Optional. Lets the access point automatically activate PMF based on whether
•
devices can support PMF.
Disable. PMF is disabled for the WiFi network.
•
User Manual79Manage the Basic WiFi Features
Page 80
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7. Click the Apply button.
Your settings are saved.
Enable or disable URL tracking for a WiFi network
You can enable the access point to track all URLs that are requested by WiFi clients that
are connected to a WiFi network (SSID or VAP). This feature is disabled by default, but
you can enable it.
For information about how to view the tracked URLs per SSID or per WiFi client, see
View or download tracked URLs on page 191.
To enable or disable URL tracking for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6. Click the > Advanced tab.
The page expands.
User Manual80Manage the Basic WiFi Features
Page 81
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7.
Under URL Tracking, select one of the following radio buttons:
Enable. URL Tracking is enabled for the WiFi network.
•
Disable. URL Tracking is disabled for the WiFi network.
•
8. Click the Apply button.
Your settings are saved.
Change the format of the DHCP offer messages in a WiFi network
When a device tries to associate with the WiFi network and negotiates an IP address,
the access point converts the broadcast DHCP offer message that it receives from the
DHCP server to a unicast message, and forwards it to the device. This is the default
configuration. For the DHCP message exchange, unicast packets are more reliable and
minimize the traffic in the network. However, if your situation requires that DHCP offer
messages must be distributed as broadcast packets, you can change the format so that
in a specific WiFi network, the access point does not convert the broadcast DHCP offer
messages to unicast messages.
To change the format of the DHCP offer messages in a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
User Manual81Manage the Basic WiFi Features
Page 82
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6. Click the > Advanced tab.
The page expands.
7.
Under DHCP Offer Broadcast to Unicast, select one of the following radio buttons:
Enable. The access point forwards DHCP offer messages as unicast packets in
•
the WiFi network. This is the default selection.
Disable. The access point forwards DHCP offer messages as broadcast packets
•
in the WiFi network.
8. Click the Apply button.
Your settings are saved
Select a MAC ACL for a WiFi network
After you set up one or more local MAC access control lists (ACLs, also referred to as
access lists; see Manage local MAC access control lists on page 120), you can select an
ACL for use with an SSID. Only WiFi devices for which the MAC address is on the MAC
ACL can connect to the access point through this SSID. (These devices might be able
to connect to the access point through another SSID if you did not set up MAC ACL
security for that SSID.)
You can also set up a RADIUS server (see Set up RADIUS servers on page 133) and select
the RADIUS MAC ACL. You must define the ACL on the RADIUS server, using the
following format for client MAC addresses in the RADIUS server: If the client MAC
address is 00:0a:95:9d:68:16, specify it as 000a959d6816 in the RADIUS server.
Note: A RADIUS MAC ACL cannot function if the WiFi security is WPA2 Enterprise. If
you want to use a RADIUS MAC ACL, select a different type of WiFi security for the WiFi
network (see Change the authentication and encryption for a WiFi network on page
70).
When selected, the MAC ACL blocks WiFi access to the SSID for WiFi devices that are
not in the selected access list. The blockage applies only to the SSID for which you
enable the MAC ACL. Only WiFi devices that are in the selected access list can connect
to the SSID.
User Manual82Manage the Basic WiFi Features
Page 83
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
To select a MAC ACL for a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6. Click the > Advanced tab.
The page expands.
7. Select the MAC ACL check box.
8.
Do one of the following:
Select the Local MAC ACL radio button, and from the Select Group menu, select
•
the MAC ACL that you defined earlier.
To change the MAC ACL policy, MAC addresses in the ACL, or both, click the
link next to the group. For more information, see Manage local MAC access
control lists on page 120.
Select the Radius MAC ACL radio button.
•
This option functions only if you set up a RADIUS server (see Set up RADIUS
servers on page 133).
9. Click the Apply button.
User Manual83Manage the Basic WiFi Features
Page 84
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Your settings are saved.
Set bandwidth rate limits for a WiFi network
You can set rate limits for the upload and download bandwidths for devices that are
connected to a WiFi network. The minimum bandwidth rate is 64 Kbps, the maximum
bandwidth rate is 1024 Mbps. You can set one rate for the upload bandwidth and
another rate for the download bandwidth.
Note: Before you set bandwidth rate limits, check the Internet speed of the access
point (see Check the Internet speed on page 219).
To set bandwidth rate limits for devices that are connected to a WiFi network:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5.
Click the > button to the left of the SSID.
The settings for the selected SSID display.
6. Click the > Advanced tab.
The page expands.
User Manual84Manage the Basic WiFi Features
Page 85
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
7. Select the Rate Limit check box.
8.
Specify the values:
Upload. For the upload bandwidth limitation, enter a value from 64 to 1024 and
•
select Kbps or Mbps from the menu.
Download. For the download bandwidth limitation, enter a value from 64 to
•
1024 and select Kbps or Mbps from the menu.
9. Click the Apply button.
Your settings are saved.
User Manual85Manage the Basic WiFi Features
Page 86
7
Manage the Basic Radio Features
This chapter describes how you can manage the basic radio settings of the access point.
For information about the advanced radio settings, see Manage the Advanced Radio
Features on page 203.
CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all
WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio
feature on the 5 GHz radio, the change affects all WiFi networks that broadcast on the
5 GHz radio. If the change is not specific to one radio, the change affects all WiFi networks
on the access point.
Tip: If you want to change the settings of the access point’s WiFi network, use a wired
connection to avoid being disconnected when the new WiFi settings take effect.
The chapter includes the following sections:
• Manage the basic WiFi settings for the radios
• Turn a radio on or off
• Change the WiFi mode for a radio
• Change the channel width for a radio
• Change the guard interval for a radio
• Change the output power for a radio
• Change the channel for a radio
• Manage Quality of Service for a WiFi radio
86
Page 87
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Manage the basic WiFi settings for the radios
The basic WiFi settings for the radios apply to all WiFi networks (VAPs or SSIDs). You
can specify the radio settings for the 2.4 GHz and 5 GHz radios individually.
To manage the basic WiFi settings for the radios:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
Features
User Manual87Manage the Basic Radio
Page 88
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
5.
Configure the settings as described in the following table.
The descriptions in the table apply to both radios, but you can specify the radio
settings for the 2.4 GHz and 5 GHz radios individually.
DescriptionSetting
Turn Radio On
Wireless Mode
By default, the Turn Radio On check box is selected and the radio broadcasts. Turning
off a radio disables WiFi access for the band, which can be helpful during
configuration, network tuning, or troubleshooting.
Select one of the following wireless modes (WiFi modes) for the 2.4 GHz radio:
11ax. 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to the
•
access point. This is the default setting.
11ng. 802.1ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to the
•
access point. However, the speed of 802.11ax clients is limited to the maximum
speed that is supported by 802.11ng (about 400 Mbps).
11bg. 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to
•
the access point. However, the speed of 802.1ax and 802.11ng clients is limited
to the maximum speed that is supported by 802.11bg (about 54 Mbps).
11b. 802.1ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to the
•
access point. However, the speed of 802.11ax, 802.11n, and 802.11bg clients is
limited to the maximum speed that is supported by 802.11b (about 11 Mbps).
Select one of the following wireless modes (WiFi modes) for the 5 GHz radio:
11ax. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the
•
access point. This is the default setting.
Features
11ac. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the
•
access point. However, the speed of 802.11ax clients is limited to the maximum
speed that is supported by 802.11ac (about 867 Mbps).
11na. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the
•
access point. However, the speed of 802.11ax and 802.11ac clients is limited to
the maximum speed that is supported by 802.11na (about 450 Mbps).
11a. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the
•
access point. However, the speed of 802.1ax, 802.11ac, 802.11na clients is limited
to the maximum speed that is supported by 802.11a (up to about 54 Mbps).
User Manual88Manage the Basic Radio
Page 89
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
Channel Width
Guard Interval
From the menu, select the channel width for the radio. Your selection from the
Wireless Mode menu determines if you can set the channel width, and if so, which
channel widths are available.
Use the following guidelines:
A wider channel improves the performance (no or minimal interference and better
•
data rates).
The 802.11n specification allows a 40 MHz–wide channel in addition to the legacy
•
20 MHz channel that is available with other modes.
The 802.11ac specification allows an 80 MHz–wide channel in addition to the 20
•
MHz and 40 MHz channels that are available with other modes.
The 40 MHz and 80 MHz channels enable higher data rates but leave fewer channels
•
available for use.
From the menu, select the guard interval, which protects radio transmissions from
interference. Your selection from the Wireless Mode menu determines if you can
set the guard interval, and if so, which guard intervals are available.
Use the following guidelines:
A shorter guard interval supports more throughput in an environment in which
•
WiFi devices operate at a shorter distance from the access point.
A longer guard interval works well in an environment with multiple SSIDs and WiFi
•
devices that operate at a longer distance from the access point.
Some legacy devices can operate with a long –800ns guard interval only.
•
Features
User Manual89Manage the Basic Radio
Page 90
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
(Continued)
DescriptionSetting
Output Power
Channel
From the menu, select the transmission power of the radio. You can select
100%(Max), 50%, 25%, 12.5%, or 4%(Min). The default is 100%(Max).
Note: If two or more access points are operating in the same area and on the same
channel, interference can occur. In this a situation, you might want to decrease the
output power for the access point. Make sure that you comply with the regulatory
requirements for total radio frequency (RF) output power in your country.
From the menu, select the WiFi channel for the radio. The available WiFi channels
and frequencies depend on the country that you selected for the access point and
on the radio. The default is Auto, which enables a radio to automatically select the
most suitable channel.
Note: You do not need to change the WiFi channel unless you experience
interference (which is indicated by lost connections).
Note: If you use multiple access points, reduce interference by selecting different
channels for adjacent access points. We recommend a channel spacing of four
channels between adjacent access points (for example, in the 2.4 GHz band, use
channels 1 and 5, or 6 and 10).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Turn a radio on or off
By default, both the 2.4 GHz and 5 GHz radios broadcast. Turning off a radio disables
WiFi access for the associated band, which affects all WiFi networks (VAPs or SSIDs) in
that band. Turning off a radio can be helpful during configuration, network tuning, or
troubleshooting.
To turn a radio on or off:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
Features
User Manual90Manage the Basic Radio
Page 91
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5.
Take one of the following actions:
Turn a radio on. Select the Turn Radio ON check box for the radio.
•
Turn a radio off. Clear the Turn Radio ON check box for the radio.
•
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the WiFi mode for a radio
By default, all types of WiFi clients can access a WiFi network on the access point, that
is, the WiFi modes on the access point support 802.11ax, 802.11ac, 802.11na, 802.11ng,
802.11bg, 802.11b, and 802.11a clients. You can change the WiFi modes to limit access
to certain types of clients.
To change the WiFi mode for a radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual91Manage the Basic Radio
Features
Page 92
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5.
Select the WiFi mode for the radio:
2.4 GHz radio. Select one of the following WiFi modes for the 2.4 GHz radio:
•
- 11ax. 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. This is the default setting.
- 11ng. 802.1ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ng (about 400 Mbps).
- 11bg. 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.1ax and 802.11ng clients is
limited to the maximum speed that is supported by 802.11bg (about 54 Mbps).
- 11b. 802.1ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect to
the access point. However, the speed of 802.11ax, 802.11n, and 802.11bg
clients is limited to the maximum speed that is supported by 802.11b (about
11 Mbps).
5 GHz radio. Select one of the following WiFi modes for the 5 GHz radio:
•
- 11ax. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. This is the default setting.
Features
- 11ac. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ac (about 867 Mbps).
- 11na. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax and 802.11ac clients is
User Manual92Manage the Basic Radio
Page 93
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
limited to the maximum speed that is supported by 802.11na (about 450
Mbps).
- 11a. 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to
the access point. However, the speed of 802.1ax, 802.11ac, 802.11na clients
is limited to the maximum speed that is supported by 802.11a (up to about
54 Mbps).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the channel width for a radio
Use the following guidelines when you determine the channel width for a radio:
A wider channel generally improves the performance (no or minimal interference
•
and better data rates).
A narrower channel generally results in lower throughput but might provide a more
•
stable connection in a demanding situation, such as an environment with a long
distance between the access point and WiFi clients and more than normal
interference.
The 802.11n specification allows a 40 MHz–wide channel in addition to the legacy
•
20 MHz channel that is available with other WiFi modes.
The 802.11ac specification and the 802.11ax specification for the 5 GHz band allow
•
an 80 MHz–wide channel in addition to the 20 MHz and 40 MHz channels that are
available with other WiFi modes.
The 40 MHz and 80 MHz channels enable higher data rates but leave fewer channels
•
available for use.
Note: We recommend that leave the default option (Dynamic 20 / 40 MHz for the 2.4
GHz radio and Dynamic 20 / 40 / 80 MHz for the 5 GHz radio). The access point can
automatically select the best channel width for its WiFi environment.
The WiFi mode (see Change the WiFi mode for a radio on page 91) determines if you
can set the channel width, and if so, which channel widths are available.
User Manual93Manage the Basic Radio
Features
Page 94
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
To change the channel width for a radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5.
From the Channel Width menu, select one of the following settings.
20 MHz.
•
40 MHz.
•
80 MHz. This selection is available only for the 5 GHz radio.
•
Dynamic 20 / 40 MHz. This selection is available only for the 2.4 GHz radio and
•
is the default setting for that radio.
Dynamic 20 / 40 / 80 MHz. This selection is available only for the 5 GHz radio
•
and is the default setting for that radio.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
User Manual94Manage the Basic Radio
Features
Page 95
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Change the guard interval for a radio
From the menu, select the guard interval, which protects radio transmissions from
interference. The WiFi mode (see Change the WiFi mode for a radio on page 91)
determines if you can set the guard interval, and if so, which guard intervals are available.
For the 11a, 11b, and 11bg WiFi modes, you cannot set the guard interval at all.
Use the following guidelines:
A shorter guard interval supports more throughput in an environment in which WiFi
•
devices operate at a shorter distance from the access point.
A longer guard interval works well in an environment with multiple SSIDs and WiFi
•
devices that operate at a longer distance from the access point.
Some legacy devices can operate with a long –800ns guard interval only.
•
To change the guard interval for a radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5.
From the Guard Interval menu, select one of the following settings:
Auto. The guard interval is set automatically by the access point. This option is
•
not available in the 11ax WiFi mode.
Features
User Manual95Manage the Basic Radio
Page 96
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Long-800 ns. This option is available in the 11ax, 11ac, 11na, and 11ng modes.
•
In the 11ax WiFi mode, this option is the default setting.
Double Long-1600 ns. This option is available only in the 11ax WiFi mode.
•
Quadruple Long-3200 ns. This option is available only in the 11ax WiFi mode.
•
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the output power for a radio
By default, the output power of the access point is set at the maximum. If two or more
access points are operating in the same area and on the same channel, interference
can occur. In such a situation, you might want to decrease the output power for the
access point. Make sure that you comply with the regulatory requirements for total radio
frequency (RF) output power in your country.
To change the output power for a radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
User Manual96Manage the Basic Radio
Features
Page 97
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Output Power menu, select 100%(Max), 50%, 25%, 12.5%, or 4%(Min).
The default is 100%(Max).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the channel for a radio
The available WiFi channels and frequencies depend on the country that you select for
the access point and the radio. The default is Auto, which enables a radio to automatically
select the most suitable channel.
Note: You do not need to change the WiFi channel unless you experience interference
(which is indicated by lost connections).
Note: If you use multiple access points, reduce interference by selecting different
channels for adjacent access points. We recommend a channel spacing of four channels
between adjacent access points (for example, in the 2.4 GHz band, use channels 1 and
5, or 6 and 10).
To change the channel for a radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual97Manage the Basic Radio
Features
Page 98
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Channel menu, select a channel.
The default is Auto. When you select a particular channel, the channel selection
becomes static.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Manage Quality of Service for a WiFi radio
You can specify the Quality of Service (QoS) setting for the 2.4 GHz and 5 GHz radios
separately. These settings are enabled by default for both radios. Disabling QoS for a
radio might impact the throughput and speed of WiFi traffic on the access point.
To manage the QoS settings for a WiFi radio:
1.
Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security message
and does not let you proceed, see Log in to the access point after initial setup on
page 46.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual98Manage the Basic Radio
Features
Page 99
Insight Managed WiFi 6 AX1800 Dual Band Access Point Models WAX610 and WAX610Y
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 31.
The Dashboard page displays.
4.
Select Management > Configuration > Wireless > Basic > QoS Settings.
5.
Enable or disable the following features for a radio by selecting the applicable Enable
or Disable radio buttons:
Wi-Fi Multimedia (WMM). WiFi Multimedia (WMM) is a subset of the 802.11e
•
standard. Time-dependent information such as video or audio is given higher
priority than normal traffic. For WMM to function correctly, WiFi clients must also
support WMM. By enabling WMM, you allow WMM to control upstream traffic
flowing from WiFi devices to the access point and downstream traffic flowing
from the access point to WiFi devices. WMM defines the following four queues
in decreasing order of priority:
- Voice. The highest priority queue with minimum delay, which makes it very
suitable for applications such as VoIP and streaming media.
- Video. The second highest priority queue with low delay. Video applications
are routed to this queue.
-
Best effort. The medium priority queue with medium delay. Most standard
IP applications use this queue.
- Background. The low priority queue with high throughput. Applications such
as FTP that are not time-sensitive but require high throughput can use this
queue.
WMM Powersave. Enabling the WMM Powersave feature saves power for
•
battery-powered devices and fine-tunes power consumption.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Features
User Manual99Manage the Basic Radio
Page 100
8
Set Up and Manage a Captive Portal
This chapter describes how you can set up and manage a captive portal on the access
point.
A captive portal is a web page that users see when they attempt to connect to a WiFi
network. A captive portal includes a splash page and usually requires some form of
authentication for the user. The access point supports three types of captive portals:
Click-through captive portal. A basic portal for which the splash page is stored on
•
the access point. For each WiFi network, you can set up a unique click-through
captive portal.
External captive portal. A portal that is hosted by an external captive portal vendor.
•
You can apply an external captive portal to multiple WiFi networks or you can apply
a unique external captive portal to each WiFi network.
Facebook Wi-Fi captive portal. A Facebook business page that serves as a portal.
•
You can configure a single Facebook Wi-Fi captive portal on the access point but
you can apply it to multiple WiFi networks.
The chapter includes the following sections:
• Set up a click-through captive portal for a WiFi network
• Set up an external captive portal for a WiFi network
• Register and configure Facebook Wi-Fi for the access point
• Set up a Facebook Wi-Fi captive portal for a WiFi network
• Unregister the access point from Facebook Wi-Fi
100
Loading...