Netgear WNAP210 Installation Manual
ProSAFE Wireless-N Access Point WNAP210
User Manual
350 East Plumeria Drive
San Jose, CA 95134
USA
November, 2015
202-10474-04
ProSAFE Wireless-N Access Point WNAP210
Support
Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get
help, access the latest downloads and user manuals, and join our community. We recommend that you use only official
NETGEAR support resources.
Conformity
For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Compliance
For regulatory compliance information, visit http://www.netgear.com/about/regulatory.
For the Notification of Compliance statement, visit
http://www.netgear.com/images/pdf/Notification_of_Compliance.pdf.
See the regulatory compliance document before connecting the power supply.
Trademarks
© NETGEAR, Inc., NETGEAR and the NETGEAR Logo are trademarks of NETGEAR, Inc. Any non-NETGEAR trademarks
are used for reference purposes only.
Revision History
Publication Part Number Publish Date Comments
202-10474-04 November 2015 Revised the Support section on this page.
202-10474-03 October 2015 Removed the Notification of Compliance appendix and
provided a Notification of Compliance link on this page.
202-10474-02 December 2011 Revised the manual.
2
Contents
Chapter 1 Getting Started
Chapter 2 Installation and Configuration
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
What Is In the Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
Hardware Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Wireless Equipment Placement and Range Guidelines. . . . . . . . . . . . . . .10
Prepare to Install the Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Connect to the Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Log In to the Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Configure LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Set Basic IP Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
IP Settings Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Set Up and Test Basic Wireless Connectivity . . . . . . . . . . . . . . . . . . . . . .15
Basic Wireless Setting Fields. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
QoS Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Deploy the Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Wall Mount Kit (Optional) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Wireless Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Profile Definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Network Authentication Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
RADIUS Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
Change or Edit a Security Profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Restrict Wireless Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . .29
Chapter 3 Management
Change the Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
Remote Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Management Using Telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Upgrade the Access Point Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Save or Restore the Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Enable the Syslog Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Restore Defaults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
3
ProSAFE Wireless-N Access Point WNAP210
Chapter 4 Monitoring
System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Wireless Stations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Enable Rogue AP Detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
Import a Rogue AP List from a File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
View and Save AP Lists. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Create AP Lists Manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Activity Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
Network Traffic Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
Chapter 5 Advanced Configuration
802.1Q VLAN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
Untagged VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .47
Management VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Hotspot Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
Advanced Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48
Advanced Wireless Settings Fields . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Advanced QoS Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .50
Wireless Bridging and Repeating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .51
Point-to-Point Bridge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Point-to-Multi-Point Wireless Bridge. . . . . . . . . . . . . . . . . . . . . . . . . . . .54
Wireless Repeater . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56
Client Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Chapter 6 Troubleshooting and Debugging
Troubleshooting with the LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
All LEDs Are Off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
LAN LED Is Off. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
WLAN LED Is Off . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .59
Cannot Connect to the Access Point to Configure It . . . . . . . . . . . . . . . . .60
Wireless Access to the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Time-Out Error for URL or IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Appendix A Supplemental Information
Factory Default Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
Technical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
Appendix B Command Line Reference
Command Sets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
Index
4
1. Getting Started
The NETGEAR ProSAFE Wireless-N Access Point WNAP210 is the basic building block of a
wireless LAN infrastructure. It provides connectivity between Ethernet wired networks and
radio-equipped wireless computers, wireless devices, print servers, and other devices.
This chapter covers the following topics:
• System Requirements
• What Is In the Box
• Hardware Description
Note: For more information about the topics covered in this manual, visit
the support website at http://support.netgear.com.
1
5
ProSAFE Wireless-N Access Point WNAP210
System Requirements
Before installing the access point, make sure that your system has the following:
• A 10/100/1000 Mbps local area network device such as a hub or switch
• The Category 5 UTP straight-through Ethernet cable with RJ-45 connector included in the
package, or one like it
• A 100–120 V, 50–60 Hz AC power source
• A web browser for configuration such as Microsoft Internet Explorer 5.0 or later, or Mozilla
3.0 or later
• At least one computer with the TCP/IP protocol installed
• 802.11b/g- or 802.11b/g-compliant devices
What Is In the Box
The product package should contain the following items:
• ProSAFE Wireless-N Access Point WNAP210
• Power adapter and cord (12V DC, 1.0A)
• Straight-through Category 5 Ethernet cable
• Product Installation Guide
• Resource CD, which includes this manual
• Vertical stand feet (2)
• Wall-mount kit made up of brackets (2) and hardware
Contact your reseller or customer support in your area if there are any missing or damaged
parts. Refer to the NETGEAR website at http://kbserver.netgear.com/main.asp for the
telephone number of customer support in your area. You should keep the Product Installation
Guide along with the original packing materials, and use the packing materials to repack the
access point if you need to return it for repair. To qualify for product updates and product
warranty, NETGEAR encourages you to register on the NETGEAR website at
http://my.netgear.com/registration/login.aspx.
Getting Started
6
ProSAFE Wireless-N Access Point WNAP210
Hardware Description
This section describes the front and rear hardware functions of the access point.
Front Panel
The front hardware functions are described in the following figure and table.
Power Test Ethernet WLAN
LAN
Figure 1. Front view
The following table explains the LEDs:
Table 1. Front panel LEDs
LED Description
Power
Test Blinking. The device is running a self-test or is loading software. This LED might blink for
Ethernet
LAN
WLAN Blinking (blue). Wireless activity has been detected.
• Off. Power is off.
• On. Power is on.
a minute before going off. If it continues to blink, it indicates a system fault.
• Off. A 10 Mbps link or no link is detected.
• Amber. A 10/100 Mbps link is detected.
• Green. A 1000 Mbps link is detected.
Getting Started
7
ProSAFE Wireless-N Access Point WNAP210
Rear Panel
Power Ethernet Restore
Factory
Settings
Figure 2. Rear panel
The access point rear panel functions are described in the following list:
• Power socket. This socket connects to the 12V 1.0A power adapter.
• RJ-45 Ethernet port. Use the Ethernet RJ-45 port to connect to an Ethernet LAN through
a device such as a hub, switch, router, or PoE switch.
• Restore Factory Settings button. This button restores the access point to the factory
default settings.
Getting Started
8
2. Installation and Configuration
This chapter describes how to set up your access point for wireless connectivity to your LAN.
This basic configuration will enable computers with 802.1 1b/g/n wireless adapters to connect
to the Internet, or access printers and files on your LAN. This chapter covers the following
topics:
• Wireless Equipment Placement and Range Guidelines
• Prepare to Install the Access Point
• Connect to the Access Point
• Log In to the Access Point
• Configure LAN Settings
• Set Basic IP Options
• Set Up and Test Basic Wireless Connectivity
• QoS Settings
• Deploy the Access Point
2
• Wireless Security Options
• Security Profiles
• Restrict Wireless Access by MAC Address
You need to prepare these three things before you can establish a connection through your
wireless access point:
• A location for the access point that conforms to the guidelines in the following section,
Wireless Equipment Placement and Range Guidelines on page 10.
• The wireless access point connected to your LAN through a device such as a hub,
switch, router, or cable or DSL gateway.
• One or more computers with correctly configured 802.11b/g/n wireless adapters.
9
ProSAFE Wireless-N Access Point WNAP210
Wireless Equipment Placement and Range Guidelines
The operating distance or range of your wireless connection can vary significantly based on
the physical placement of the access point. The latency, data throughput performance, and
notebook power consumption of wireless adapters also vary depending on your configuration
choices.
Note: Failure to follow these guidelines can result in significant
performance degradation or inability to wirelessly connect to the
access point. For complete performance specifications, see
Appendix A, Supplemental Information.
For best results, place your access point:
• Near the center of the area in which your computers and wireless devices operate.
• In an elevated location such as a high shelf where the wirelessly connected PCs have
line-of-sight access (even if through walls).
• Away from sources of interference, such as computers, microwaves, and 2.4 GHz
cordless phones.
• Away from large metal surfaces.
A wall-mount kit is provided with your access point. For installation instructions, see Wall
Mount Kit (Optional) on page 19.
If using multiple access points, it is better if adjacent access points use different
frequency channels to reduce interference. The recommended channel spacing between
adjacent access points is five channels (for example, use Channels 1 and 6, or 6 and 11).
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. Some types of security connections can take slightly longer to
establish and can consume more battery power on a notebook computer.
radio
Prepare to Install the Access Point
Before installing the access point, you should make sure that your Ethernet network is up and
working. You will be connecting the access point to the Ethernet network so that computers
with 802.11b/g/n wireless adapters will be able to communicate with computers on the
Ethernet network. For this to work correctly, you should verify that you have met all of the
system requirements, shown in System Requirements on page 6.
Installation and Configuration
10
ProSAFE Wireless-N Access Point WNAP210
Connect to the Access Point
Tip: Before mounting the access point in a high location, set up and test the
access point to verify wireless network connectivity.
To connect the access point:
1. Prepare a computer with an Ethernet adapter. If this computer is already part of your
network, record its TCP/IP settings.
2. Turn on your computer and configure it with a static IP address of 192.168.0.210 and a
subnet mask of 255.255.255.0.
3. Connect an Ethernet cable from the access point to the computer.
4. Connect the power adapter to the access point, and verify the following:
• The Power LED goes on.
• The Ethernet LAN LED is lit when the access point is connected to a powered-on
computer.
• The WLAN LED is blinking.
Log In to the Access Point
The access point is set by default with the IP address of 192.168.0.236 with DHCP disabled.
If you log in using the default IP address, the computer you use to connect to the access
point has to be set up with an IP address in the range 192.168.0.0 to 192.168.0.255 and a
subnet mask of 255.255.255.0.
If DHCP is enabled, there are two methods you can use to connect to the access point after
the DHCP server on your network assigns it a new IP address.
• If your access point is to be deployed on a local network, you can enter the NetBIOS
name in your web browser. The default wireless access point name is netgearxxxxxx,
where xxxxxx represents the last 6 bytes of the MAC address. The MAC address is
printed on the product abel. (Using the NetBIOS naming convention to access your router
across several network segments is known to be unreliable.)
• Reserve an IP address (based on the access point’s MAC address) on the DHCP server.
That way, if your router is deployed across several segments, you can configure the
access point with a static IP address, which you can always use to log in to make future
configuration changes.
To log in using the default IP address:
1. Open a web browser such as Mozilla Firefox or Internet Explorer.
2. Connect to the access point by entering the default address of http://192.168.0.236 into
your browser.
http://192.168.0.233
Installation and Configuration
11
ProSAFE Wireless-N Access Point WNAP210
3. The login screen displays. Enter admin for the user name and password for the password,
both in lower case letters.
4. Click Login.
Your web browser should automatically find the access point and display the General screen.
Configure LAN Settings
When you log in, the General screen displays:
To configure the LAN settings:
1. Enter the access point name.
This unique name is the access point NetBIOS name. The access point name is printed
on the rear label of the access point. The default is netgearxxxxxx, where xxxxxxx
represents the last 6 digits of the access point MAC address. You can replace the default
name with a unique name up to 15 characters long.
2. From the Country/Region drop-down list, select the region where the access point will be
used (the country/region is not configurable in the United States but is configurable in the
rest of the world). Click Apply.
Note: If your country or region is not listed, check with NETGEAR support.
Installation and Configuration
12
ProSAFE Wireless-N Access Point WNAP210
3. Select Configuration > System > Basic > Time.
4. Adjust the following fields:
• Time Zone. From the drop-down list, select the local time zone for your access point
from a list of all available time zones. The default is USA-Pacific. The access point will
get the current time from the connecting computer.
• NTP Client. Enable the NTP client to synchronize the time of the access point with an
NTP server. The default is Enable.
Note: You need an Internet connection to get the current time using an
NTP client.
• Use Custom NTP Server. Select this check box if you have a custom NTP server.
The default is not selected.
• Hostname / IP Address. Enter the host name or the IP address of the custom NTP
server. The default is time-b.netgear.com.
5. Click Apply .
6. Specify the IP settings as described in the following section.
Set Basic IP Options
Enter the basic IP settings for your access point on this screen. The default settings work in
most cases. However, if your access point is part of a more complex LAN network, then
modify these settings to meet the requirements of your network.
Installation and Configuration
13
ProSAFE Wireless-N Access Point WNAP210
To configure the basic IP settings of your access point:
1. Select Configuration > IP. The IP Settings screen displays:
2. If necessary, edit the IP address fields described in IP Settings Fields on page 14.
3. Click Apply to save your basic IP settings.
If you change the default subnet of the LAN IP address, you will be disconnected from the
access point user interface. To reconnect, reconfigure your computer with a static IP address
within the new LAN IP subnet.
By default, the access point is set with the DHCP client disabled. If your network uses
dynamic IP addresses, you need to change this setting.
IP Settings Fields
The following fields are available on the IP Settings screen.
• DHCP Client. By default, the Dynamic Host Configuration Protocol (DHCP) client is
disabled. If you have a DHCP server on your LAN and you enable DHCP, the wireless
access point gets its IP address, subnet mask, and default gateway settings automatically
from the DHCP server on your network when you connect the access point to your LAN.
• IP Address. Enter the IP address of your access point.The default IP address is
192.168.0.236. To change it, enter an unused IP address from the address range used on
your LAN; or enable DHCP.
• IP Subnet Mask. The access point automatically calculates the subnet mask based on
the IP address that you assign. Otherwise, you can use 255.255.255.0 (the default) as
the subnet mask.
• Default Gateway. Enter the IP address of the gateway for your LAN. For more complex
networks, enter the address of the router for the network segment to which the access
point is connected. The default is 0.0.0.0.
• Primary DNS Servers. This is the IP address for the primary Domain Name Server used
by stations on your LAN. The default is 0.0.0.0.
• Secondary DNS Servers.This is the IP address for the secondary Domain Name Server
used by stations on your LAN. The default is 0.0.0.0.
Installation and Configuration
14
ProSAFE Wireless-N Access Point WNAP210
Set Up and Test Basic Wireless Connectivity
Follow the instructions in this section to set up and test basic wireless connectivity . Once you
have established basic wireless connectivity , you can enable security settings appropriate for
your needs.
Note: If you connect wirelessly to the access point and you change the
SSID, channel, or security profile settings, you will lose your wireless
connection when you click Apply. T o avoid this situation, you can use
a LAN connection to set up the access point.
To set up and test basic wireless connectivity:
1. Select Configuration > System. Verify that the correct country/region in which the
wireless interface will operate has been selected.
2. Click Apply to save any changes.
3. Select Configuration > Wireless, and the following screen displays:
4. Ensure that the auto channel (default) feature is selected for your network. This feature
selects a channel that has the least interference.
You don not need to change the wireless channel unless you notice interference or are
near another wireless access point. Select a channel that is not being used by any other
wireless networks within several hundred feet of your access point.
Note: If you select a wireless mode option and other settings on this screen
are disabled, then you have to select the Turn Radio On check box to enable
options on this screen.
Installation and Configuration
15
ProSAFE Wireless-N Access Point WNAP210
5. Click Apply to save any changes.
6. Select Security. For initial configuration and testing, the Security field for Profile 1 (the
default profile) is set to Open System and the SSID is set to NETGEAR_11ng (for
information about hot to configure a profile, see Security Profiles on page 21).
Note: The SSID of any wireless client has to match the SSID you configured
in the access point. If they do not match, you cannot get a wireless connection.
7. Click Apply to save any changes.
8. Configure and test your remaining wireless clients for wireless connectivity.
Check that they have a wireless link and can obtain an IP address by DHCP from the
access point. Then you can configure the wireless security.
Basic Wireless Setting Fields
The following fields are available in the Wireless Settings screen:
Wireless Mode
The default is 11ng. The options are:
• 11b. All 802.11b wireless stations can be used. (The 802.11g wireless stations can still be
used if they can operate in 802.11b mode.)
• 11bg. Both 802.11b and 802.11g wireless stations can be used.
• 11ng. All 11b, 11g, and 11ng wireless stations can be used. This is the default. If you
select this option, then two additional options, Channel Width and Guard Interval, display.
Turn Radio On
On by default. You can also turn off the radio to disable access through this device. This can
be helpful for configuration, network tuning, or troubleshooting activities.
Wireless Network Name (SSID)
This is the name of your wireless network. It is set to the default name of NETGEAR_11a for
802.11a/n devices and NETGEAR_11ng for 802.11b/g/n devices.
Broadcast Wireless Network Name (SSID)
If you disable broadcast of the SSID, only devices that have the correct SSID can connect.
This nullifies the wireless network “discovery” feature of some products such as Windows XP,
but the data is still fully exposed to a determined snoop using specialized test equipment like
wireless sniffers. The default is Yes.
Installation and Configuration
16
ProSAFE Wireless-N Access Point WNAP210
Channel/Frequency
The wireless channel in use can be from 1 to 1 1 for the United States and Canada, or 1 to 13
for Europe and Australia. The default is Auto.
Do not change the wireless channel unless you experience interference (shown by lost
connections or slow data transfers). Should this happen, you might need to experiment with
different channels to see which is the best. You can select the Auto channel option to have
the access point intelligently pick the channel with the least interference. When selecting or
changing channels, bear these points in mind:
• Access points use a fixed channel. You can select the channel used. This allows you to
select a channel that provides the least interference and best performance. In the United
States and Canada, 11 channels are available.
• If you are using multiple access points, it is better if adjacent access points use different
channels to reduce interference. The recommended channel spacing between adjacent
access points is 5 channels (for example, use channels 1 and 6, or 6 and 11).
• Wireless stations usually scan all channels, looking for an access point. If more than one
access point can be used, the one with the strongest signal is used. This can happen only
when the access points use the same SSID.
MCS Index/Data Rate
You can select the transmit data rate of the wireless network. Depending on the band
selected, the set of rates varies. (When auto channel is enabled in the 802.11ng mode, then
the default channel width mode is 20 MHz. In this case, you cannot modify this parameter
unless you change to a static channel.) The possible supported data rates are:
• Channel Width=20 MHz and Guard Interval=short (400 ms). Best, 7.2 Mbps, 14.4
Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps,
28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.56 Mbps, 130 Mbps, 144.44
Mbps.
• Channel Width=40 MHz and Guard Interval=short. Best, 15 Mbps, 30 Mbps, 45 Mbps,
60 Mbps, 90 Mbps, 120 Mbps, 135 Mbps, 150 Mbps, 30 Mbps, 60 Mbps, 90 Mbps, 120
Mbps, 180 Mbps, 240 Mbps, 270 Mbps, 300 Mbps.
• Channel Width. The following options are available:
- 20 MHz. This is the static, legacy mode. It gives the least throughput.
- 40 MHz. This is the static, high-throughput mode. Legacy clients cannot connect in
this mode.
- 20/40 MHz. This is the dynamic, compatibility mode. Legacy clients can connect to 20
MHz and 11n clients can connect to 40 MHz.
Guard Interval
The guard interval protects from interference from other transmissions. The default is Auto.
Installation and Configuration
17
ProSAFE Wireless-N Access Point WNAP210
Output Power
This is the transmit power of the access point. The options are Full, Half, Quarter , Eighth, and
Minimum. Decrease the transmit power if two or more access points are close together and
use the same channel frequency. The default is Full. (The transmit power might vary
depending on the local regulatory regulations.
QoS Settings
Wireless Multimedia (WMM) is a subset of the 802.1 1e standard. WMM allows wireless traffic
to have a range of priorities, depending on the type of data. Time-dependent information,
such as video or audio, has a higher priority than normal traffic. For WMM to function
correctly , wireless clients must support WMM. Wi-Fi Multimedia (WMM) is enabled by default in
the access point.
To change the QoS settings:
1. Select Configuration > Wireless > Basic > QoS Settings. The QoS Settings screen
displays:
2. Select the Enable radio buttons for the options settings that you want to use.
3. Click Apply to save your settings.
Deploy the Access Point
Before mounting the access point in a high location, first set up and test the access point to
verify wireless network connectivity.
By default, the access point has the DHCP client disabled. If your network uses dynamic IP
addresses, you need to change this setting. To connect to the access point after the DHCP
server on your network assigns it a new IP address, enter the access point name in your web
browser. The default name is netgearxxxxxx, where xxxxxx represents the last 6 bytes of the
MAC address. The default name is printed on the bottom label of the access point.
Installation and Configuration
18
ProSAFE Wireless-N Access Point WNAP210
To deploy the access point:
1. Disconnect the access point from the computer you used to configure it, and put the
access point where it will be deployed.
The best location is elevated, such as on a wall or ceiling or on the top of a cubicle, at the
center of your wireless coverage area, and within line of sight of all the mobile devices.
2. Connect an Ethernet cable from your access point to a LAN port on your router, switch, or
hub.
3. If you are not using PoE, connect the power adapter to the wireless access point, and plug
the power adapter into a power outlet. The Power and LAN LEDs should be on, and the
WLAN LED should blink.
Wall Mount Kit (Optional)
Before mounting the access point in a high location, first set up and test the access point to
verify wireless network connectivity See Set Up and Test Basic Wireless Connectivity on
page 15.
To install the access point mounting brackets:
1. Disconnect the access point and position it where it will be deployed. The best location
is elevated, such as on a wall or ceiling or the top of a cubicle, at the center of your
wireless coverage area, and within line of sight of all the mobile devices.
2. Use the paper template provided to determine the location for the mounting holes. Drill holes
3/8 inches (~ 9 mm) and 13/16 in. (~20 mm) deep. The holes should be 10 1/4 in. (26 cm)
apart, as shown in (A). Then tap in the anchors as shown in (B).
ABCD
3. The tabs at the center of each bracket hook into the center vent slots on the bottom of the
access point. The tabs on the ends of the brackets hook into the corner vent slots on the top
of the access point. Hook the center tabs of one bracket in first. Then gently snap the tabs
at the ends of the bracket into the top vents as shown in (C). Repeat for the second bracket.
4. Attach the brackets to the anchors using the screws from the mounting kit as shown in (D).
5. Connect an Ethernet cable from your access point to a LAN port on your router, switch, or
hub. If power is not provided by PoE, connect the power adapter to the wireless access
point and plug the power adapter into a power outlet. The Power, LAN, and WLAN LEDs
should light up.
Installation and Configuration
19
ProSAFE Wireless-N Access Point WNAP210
Wireless Security Options
Anyone with a compatible wireless adapter can receive your wireless data transmissions well
beyond your walls. For this reason, use the security features of your wireless equipment. The
access point provides highly effective security features, which are covered in detail in this
chapter. Deploy the security features appropriate for your needs.
There are several ways you can enhance the security of your wireless network:
• Restrict access based on MAC address. You can restrict access to only trusted
computers so that unknown computers cannot wirelessly connect to the access point.
MAC address filtering adds an obstacle against unwanted access to your network, but the
data broadcast over the wireless link is fully exposed. See Restrict Wireless Access by
MAC Address on page 29.
• Turn off the broadcast of the wireless network name (SSID). If you disable broadcast
of the SSID, only devices that have the correct SSID can connect. This nullifies the
wireless network “discovery” feature of some products such as Windows XP, but the data
is still fully exposed to a determined snoop using specialized test equipment like wireless
sniffers. See Security Profiles on page 21.
• Use WPA2 or WPA Security Option. A security option is the type of security protocol
applied to your wireless network. The security protocol encrypts data transmissions and
ensures that only trusted devices receive authorization to connect to your network. There
are several types of encryption: Wi-Fi Protected Access II (WPA2), WPA, and Wired
Equivalent Privacy (WEP). WPA2 is the latest and most secure, and is recommended if
your equipment supports it. See Security Profiles on page 21
Note: WEP and TKIP provide only legacy (slower) rates of operation.
NETGEAR recommends AES encryption so that you can use the
11n rates and speed. See Table 2 on page 22.
Installation and Configuration
20
ProSAFE Wireless-N Access Point WNAP210
Security Profiles
Security profiles let you set up unique security settings for each SSID. You can configure up
to eight unique 802.11b/g/n wireless security profiles on the access point. Select
Configuration > Security > Profile Settings to display the Profile Settings screen:
If you are using a RADIUS server, configure the RADIUS settings first, as described in the
RADIUS Server Settings on page 24.
An overview of the information that is required to set up a security profile follows—including a
description of the network authentication choices that are available.
Profile Definition
Only the first profile is enabled by default. The rest of the profiles are disabled and need to be
enabled if configured.
Specify the following settings:
• Profile Name. Use a name that makes it easy to recognize the profile and to tell profiles
apart. (The default names are NETGEAR_1 1ng, NETGEAR-1_11ng, NETGEAR-2_11ng,
and so on.) You can enter a value of up to 32 alphanumeric characters.
• SSID. This is the name of your wireless network. It is set to the default name of
NETGEAR_11ng for 802.11b/g/n.
• Security. The wireless security used for this SSID.
• VLAN. You can use the default VLAN 1, or you can set up VLANs for your profiles. See
802.1Q VLAN on page 47.
• Enable. Select the Enable check box to enable the profile.
Installation and Configuration
21
ProSAFE Wireless-N Access Point WNAP210
Network Authentication Settings
The access point is set by default as an open system with no authentication. When setting up
network authentication, bear in mind the following:
• If you are using access point mode, then all options are available. In other modes such as
repeater or bridge, some options might be unavailable.
• Not all legacy wireless adapters support WPA or WPA2. Windows XP and Windows 2000
with Service Pack 3 do include the client software that supports WPA. However, client
software is required on the client. Consult the product documentation for your wireless
adapter and WPA or WPA2 client software for instructions on configuring WPA2 settings.
You can configure the access point to use the types of network authentication shown in the
table.
Table 2. Network authentication types
Type Description
Open System Can be used with WEP encryption or no encryption.
Shared Key Compatible with WEP encryption. Y ou enter at least one shared key.
Legacy 802.1x You have to set up the RADIUS server settings to use this option.
WPA with RADIUS You have to set up the RADIUS server settings to use this option.
WPA2 with RADIUS
(WP A2 is a later version of WP A.)
WPA and WPA2 with RADIUS This selection allows clients to use either WPA (with TKIP) or WPA2
WP A-PSK Y ou have to use TKIP or TKIP + AES encryption and enter the WP A
WPA2-PSK
(WP A2 is a later version of WPA.)
WPA-PSK and WPA2-PSK This selection allows clients to use either WPA (with TKIP) or WPA2
Select this only if all clients support WPA2. If selected, you have to
use AES encryption and configure the RADIUS server settings.
(with AES). If selected, you have to use TKIP + AES encryption and
configure the RADIUS server settings.
passphrase (network key).
Select this only if all clients support WPA2. If selected, you have to
use AES and TKIP + AES encryption and enter the WPA
passphrase (network key).
(with AES). If selected, you have to use TKIP + AES encryption and
enter the WPA passphrase (network key).
Installation and Configuration
22
ProSAFE Wireless-N Access Point WNAP210
Data Encryption
The available options depend on the network authentication setting selected (see Table 2);
otherwise, the default is None. The Data Encryption settings are explained in the following
table:
Table 3. Data Encryption settings
Data Encryption Type Description
None No encryption is used.
64 bits WEP Standard WEP encryption, using 40/64 bit encryption.
128 bits WEP Standard WEP encryption, using 104/128 bit encryption.
152 bits WEP Proprietary mode that works only with other wireless devices that support
this mode.
TKIP This is the standard encryption method used with WPA and WPA2.
AES This is the standard encryption method for WPA2.
TKIP + AES This setting supports both WP A and WP A2. Broadcast packets use TKIP. For
unicast (point-to-point) transmissions, WPA clients use TKIP, and WPA2
clients use AES.
Passphrases and keys are used in the following ways:
• Passphrase. To use the passphrase to generate the WEP keys, enter a passphrase and
click the Generate Keys button. You can also enter the keys directly. These keys have to
match keys used by the other wireless stations.
• Key 1, Key 2, Key 3, Key 4. If you are using WEP, select the key to be used as the
default key. Data transmissions are always encrypted using the default key. The other
keys are used only to decrypt received data.
• WPA Preshared Key Passphrase. If you are using WPA-PSK, enter the passphrase
here. All wireless stations have to use the same passphrase (network key). The network
key has to be from 8 to 64 characters in length.
Wireless Client Security Separation
If this feature is enabled, the associated wireless clients will not be able to communicate with
each other. (This feature is intended for hotspots and other public access situations.) The
default is No.
VLAN ID
If the hubs or switches on your LAN support the VLAN (802.1Q) standard and this feature
has been enabled, the default VLAN ID for WNAP210 is associated with each profile. The
default profile VLAN ID has to match the IDs used by other network devices.
Installation and Configuration
23
ProSAFE Wireless-N Access Point WNAP210
RADIUS Server Settings
You can set up or modify the RADIUS server settings to compliment network authentication
security options. The RADIUS server needs to be used with Legacy 802.1x, and can be used
with WPA and WPA2 network authentication. When using a RADIUS server, specify the
RADIUS server settings before completing the network authentication security profile.
The RADIUS server settings apply to all profiles. They o need to be configured only once per
access point.
To set up or modify the RADIUS server settings:
1. Select Configuration > Security > Advanced > RADIUS Server Settings. The
RADIUS Server Settings screen displays:
2. Enter the following RADIUS server settings:
• Authentication Server. This configuration is required for authentication using a
RADIUS server.The IP address, port number, and shared secret are required for
communication with the primary RADIUS server. You can also configure a secondary
RADIUS server to use, if the primary RADIUS server fails.
- IP Address. The IP address of the RADIUS server. The default is 0.0.0.0.
- Port. The port number of the RADIUS server. The default is 1812.
- Shared Secret. This is shared between the wireless access point and the
RADIUS server when the supplicant (wireless client) is authenticated.
• Primary Accounting Server. This configuration is required for accounting using a
RADIUS server. The IP address, port number, and shared secret are required for
communication with the primary RADIUS server. You can also configure a secondary
RADIUS server to use if the primary RADIUS server fails.
- IP Address. The IP address of the RADIUS server. The default is 0.0.0.0.
- Port. Port number of the RADIUS server. The default: 1813.
- Shared Secret. This is shared between the wireless access point and the
RADIUS server when the supplicant (wireless client) is authenticated.
3. Click Apply to save your settings.
Installation and Configuration
24
Loading...