NETGEAR WNDAP330 User Manual

NETGEAR WNDAP330 ProSafe 802.11n Dual Band Wireless Access Point Reference Manual

NETGEAR, Inc.
4500 Great America Parkway Santa Clara, CA 95054 USA
202-10361-01 May 2008 v1.0
© 2008 by NETGEAR, Inc. All rights reserved..
Technical Support
Please refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product
and software upgrades. NETGEAR, INC. Support Information Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card. E-mail: support@netgear.com North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR, the NETGEAR logo, ProSafe, and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc. Microsoft, Windows, Windows NT and Vista are registered trademarks of Microsoft Corporation.Other brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 has been suppressed in
accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. Th e operation of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
has been granted the right to test the series for compliance with the regulations.
and
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe 802.11n Dual Band Wireless Access Point WNDAP330 gemäß der im BMPT­AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. Wh en us ed near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
ii
v1.0, May 2008
Note: Delete this note and the information below for products that are not wireless.
Regulatory Compliance Information
This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
NOTE: This product's firmware limits operation to only the channels allowed in a particular Region or Country.
Therefore, all options described in this user's guide may not be available in your version of the product.
Europe – EU Declaration of Conformity
Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). This equipment meets the following conformance standards:
EN300 328, EN301 489-17, EN60950, EN301 893
Europe – Declaration of Conformity in Languages of the European Community
Cesky [Czech] NETGEAR Inc. tímto prohlašuje, že tento Radiolan je ve shode se základními
požadavky a dalšími príslušnými ustanoveními smernice 1999/5/ES..
Dansk [Danish]
Deutsch [German]
Eesti [Estonian]
English Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential
Español [Spanish]
Undertegnede NETGEAR Inc. erklærer herved, at følgende udstyr Radiolan overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
Hiermit erklärt NETGEAR Inc., dass sich das Gerät Radiolan in Übereinstimmung mit den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der Richtlinie 1999/5/EG befindet.
Käesolevaga kinnitab NETGEAR Inc. seadme Radiolan vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.
requirements and other relevant provisions of Directive 1999/5/EC. Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los
requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
Ελληνική [Greek]
ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ ΟΔΗΓΙΑΣ 1999/5/ΕΚ.
iii
v1.0, May 2008
Français [French]
Italiano [Italian] Con la presente NETGEAR Inc. dichiara che questo Radiolan è conforme ai requisiti
Par la présente NETGEAR Inc. déclare que l'appareil Radiolan est conforme aux exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE.
essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.
Latviski [Latvian]
Lietuvių [Lithuanian]
Nederlands [Dutch]
Malti [Maltese] Hawnhekk, NETGEAR Inc., jiddikjara li dan Radiolan jikkonforma mal-htigijiet
Magyar [Hungarian]
Polski [Polish] Niniejszym NETGEAR Inc. oświadcza, że Radiolan jest zgodny z zasadniczymi
Português [Portuguese]
Slovensko [Slovenian]
Slovensky [Slovak]
Suomi [Finnish]
Ar šo NETGEAR Inc. deklarē, ka Radiolan atbilst Direktīvas 1999/5/EK būtiskajām prasībām un citiem ar to saistītajiem noteikumiem.
Šiuo NETGEAR Inc. deklaruoja, kad šis Radiolan atitinka esminius reikalavimus ir kitas 1999/5/EB Direktyvos nuostatas.
Hierbij verklaart NETGEAR Inc. dat het toestel Radiolan in overeenstemming is met de essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG.
essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC. Alulírott, NETGEAR Inc. nyilatkozom, hogy a Radiolan megfelel a vonatkozó alapvetõ
követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.
wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC. NETGEAR Inc. declara que este Radiolan está conforme com os requisitos essenciais
e outras disposições da Directiva 1999/5/CE.
NETGEAR Inc. izjavlja, da je ta Radiolan v skladu z bistvenimi zahtevami in ostalimi relevantnimi določili direktive 1999/5/ES.
NETGEAR Inc. týmto vyhlasuje, _e Radiolan spĺňa základné po_iadavky a všetky príslušné ustanovenia Smernice 1999/5/ES.
NETGEAR Inc. vakuuttaa täten että Radiolan tyyppinen laite on direktiivin 1999/5/EY oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Svenska [Swedish]
Íslenska [Icelandic]
Norsk [Norwegian]
Härmed intygar NETGEAR Inc. att denna Radiolan står I överensstämmelse med de väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EG.
Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar kröfur, sem gerðar eru í tilskipun 1999/5/EC.
NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF.
FCC Requirements for Operation in the United States
iv
v1.0, May 2008
FCC Information to User
This product does not contain any user serviceable components and is to be used with approved antenn as only. Any product changes or modifications will invalidate all applicable regulatory certifications and approvals
FCC Guidelines for Human Exposure
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance of 20 cm between the radiator and your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
FCC Declaration Of Conformity
We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that the model WNDAP330 ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 complies with Part 15 of FCC Rules. Operation is subject to the following two conditions:
This device may not cause harmful interference, and
This device must accept any interference received, including interference that may cause undesired operation.
FCC Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following methods:
Reorient or relocate the receiving antenna
Increase the separation between the equipment and the receiver
Connect the equipment into an electrical outlet on a circuit different from that which the radio receiver is connected
Consult the dealer or an experienced radio/TV technician for help.
ProSafe 802.11n Dual Band Wireless Access Point
Tested to Comply with FCC Standards
FOR HOME OR OFFICE USE
Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment.
PY306100037
Canadian Department of Communications Radio Interference Regulations
This digital apparatus (ProSafe 802.11n Dual Band Wireless Access Point WNDAP330) does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
v1.0, May 2008
v
Canada ID: 4054A-WG111
Product and Publication Details
Model Number: WNDAP330 Publication Date: May 2008 Product Family: Wireless Access Point Product Name: ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 Home or Business Product: Business Language: English Publication Part Number: 202-10361-01 Publication Version Number: 1.0
vi
v1.0, May 2008

Contents

About This Manual
Conventions, Formats, and Scope ................................................................................... xi
How to Use This Manual ..................................................................................................xii
How to Print This Manual .................................................................................................xii
Revision History ...............................................................................................................xiii
Chapter 1 Introduction
About the ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 ..................1-1
Key Features and Standards ..........................................................................................1-2
Supported Standards and Conventions ...................................................................1-2
Key Features ............................................................................................................1-3
802.11a/b/g/n Standards-based Wireless Networking .............................................1-4
Autosensing Ethernet Connections with Auto Uplink ...............................................1-5
Compatible and Related NETGEAR Products ................................................................1-5
System Requirements ....................................................................................................1-6
What’s In the Box? .........................................................................................................1-6
Hardware Description .....................................................................................................1-7
Front Panel ...............................................................................................................1-8
Rear Panel .............................................................................................................1-10
Chapter 2 Basic Installation and Configuration
Wireless Equipment Placement and Range Guidelines .................................................2-1
Understanding WNDAP330 Wireless Security Options ..................................................2-2
Installing the WNDAP330 Wireless Access Point ..........................................................2-4
Setting up the WNDAP330 Wireless Access Point ..................................................2-4
Configuring LAN and Wireless Access ....................................................................2-4
Configuring Time Settings .................................................................................2-8
Configuring Wireless Access ...........................................................................2-10
Deploying the WNDAP330 Wireless Access Point ................................................2-10
1.0, May 2008
vii
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Verifying Wireless Connectivity .............................................................................. 2-11
Logging In Using the Default IP Address ......................................................................2-12
Setting Basic IP Options ...............................................................................................2-13
Wireless Settings ..........................................................................................................2-14
Configuring 802.11b/g/n Wireless Settings ............................................................2-14
Configuring 802.11a/n Wireless Settings ...............................................................2-17
Configuring QoS Settings .......................................................................................2-21
Setting Up and Testing Basic Wireless Connectivity ....................................................2-22
Understanding Security Profiles ...................................................................................2-23
SSID and WEP/WPA Settings Setup Form ............................................................2-28
802.11b/g/n Configuration ................................................................................2-28
802.11a/n Configuration ...................................................................................2-29
Configuring the RADIUS Server Settings ...............................................................2-30
Setting up a Security Profile ...................................................................................2-32
Configuring WEP .............................................................................................2-34
Configuring WPA with RADIUS .......................................................................2-36
Configuring WPA2 with RADIUS .....................................................................2-37
Configuring WPA and WPA2 with RADIUS .....................................................2-38
Configuring WPA-PSK .....................................................................................2-39
Configuring WPA2-PSK ...................................................................................2-40
Configuring WPA-PSK and WPA2-PSK ...........................................................2-41
Restricting Wireless Access by MAC Address .......................................................2-42
Chapter 3 Management
Remote Management .....................................................................................................3-1
Remote Console .............................................................................................................3-2
Using the Secure Telnet Interface ............................................................................3-3
CLI Commands ........................................................................................................3-4
Upgrading the Wireless Access Point Software .............................................................3-5
Configuration File Management .....................................................................................3-7
Saving the Configuration ..........................................................................................3-8
Restoring the Configuration .....................................................................................3-9
Restoring the WNDAP330 to the Factory Default Settings ............................................3-9
Changing the Administrator Password .........................................................................3-10
Enabling the SysLog Server ......................................................................................... 3-11
viii Contents
1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Using Activity Log Information ......................................................................................3-12
Viewing General Summary Information ........................................................................3-13
Viewing Network Traffic Statistics .................................................................................3-15
Viewing Available Wireless Station Statistics ................................................................3-17
Enabling Rogue AP Detection ......................................................................................3-18
Importing Rogue AP List from a File ......................................................................3-20
Viewing Rogue AP Statistics ........................................................................................3-21
Chapter 4 Advanced Configuration
IP Settings for Wireless Clients ......................................................................................4-1
Hotspot Settings .............................................................................................................4-4
Configuring Advanced Wireless Settings .......................................................................4-5
Configuring 802.11b/g/n Advanced Wireless Settings .............................................4-5
Configuring 802.11a/n Advanced Wireless Settings ................................................4-7
Configuring Advanced QoS Settings ..............................................................................4-9
Enabling Wireless Bridging and Repeating .................................................................. 4-11
Configuring a WNDAP330 as a Point-to-Point Bridge ...........................................4-14
Configuring a Point-to-Multi-Point Wireless Bridge ................................................4-16
Configuring the WNDAP330 as a Wireless Repeater ............................................4-18
Chapter 5 Troubleshooting and Debugging
No lights are lit on the wireless access point. .................................................................5-1
The Wireless LAN activity light does not light up. ...........................................................5-2
The LAN light is not lit. ....................................................................................................5-2
I cannot access the Internet or the LAN with a wireless capable computer. .................5-2
I cannot connect to the WNDAP330 to configure it. .......................................................5-3
When I enter a URL or IP address I get a timeout error. ................................................5-3
Using the Reset Button to Restore Factory Default Settings ..........................................5-4
Appendix A Default Settings and Technical Specifications
Factory Default Settings ................................................................................................ A-1
Technical Specifications ................................................................................................. A-3
Contents ix
1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Appendix B Related Documents
Appendix C Command Line Reference
Command Sets .............................................................................................................. C-1
Index
x Contents
1.0, May 2008

About This Manual

The NETGEAR® ProSafe™ 802.11n Dual Band Wireless Access Point WNDAP330 Reference Manual describes how to install, configure and troubleshoot the ProSafe 802.11n Dual Band
Wireless Access Point WNDAP330. The information in this manual is intended for readers with intermediate computer and Internet skills.

Conventions, Formats, and Scope

The conventions, formats, and scope of this manual are described in the following paragraphs:
Typographical Conventions. This manual uses the following typographical conventions::
Italic Emphasis, books, CDs, file and server names, extensions
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
Formats. This manual uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
v1.0, May 2008
xi
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
Scope. This manual is written for the WNDAP330 Wireless Access Point according to these
specifications:
Product Version ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 Manual Publication Date May 2008
For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/main.asp.
Appendix B, “Related Documents.”

How to Use This Manual

The HTML version of this manual includes the following:
Buttons, and , for browsing forward or backward through the manual one pa ge at a time.
•A button that displays the table of contents and a button that displays an index. Double-click a link in the table of contents or index to navigate directly to where the topic is described in the manual.
•A button to access the full NETGEAR, Inc. online knowledge base for the product model.
Links to PDF versions of the full manual and individual chapters.

How to Print This Manual

To print this manual, you can choose one of the following options, according to your needs.
Printing a page from HTML. Each page in the HTML version of the manual is dedicated to a major topic. Select File > Print from the browser menu to print the page contents.
xii About This Manual
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
Printing a PDF chapter. Use the PDF of This Chapter link at the top left corner of any
page.
Click the PDF of This Chapter link at the top left corner of any page in the chapter
you want to print. The PDF version of the chapter you were viewing opens in a browser window.
Click the print icon in the upper left of your browser window.
Printing a PDF version of the complete manual. Use the Complete PDF Manual link
at the top left corner of any page.
Click the Complete PDF Manual link at the top left corner of any page in the manual.
The PDF version of the complete manual opens in a browser window.
Click the print icon in the upper left corner of your browser window.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.

Revision History

Part Number
202-10361-01 v1.0 May
About This Manual xiii
Version Number
Date Description
Product update: New firmware and new user Interface
2008
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
xiv About This Manual
v1.0, May 2008
Chapter 1
Introduction
This chapter describes some of the key features of the NETGEAR ProSafe 802.11n Dual Band Wireless Access Point WNDAP330. It also includes the minimum prerequisites for installation (
“System Requirements” on page 1-6.), package contents (“What’s In the Box?” on page 1-6) and
a description of the front and back panels of the WNDAP330 (“Hardware Description” on
page 1-7).

About the ProSafe 802.1 1n Dual Band Wireless Access Point WNDAP330

The ProSafe 802.11n Dual Band W ireless Access Point WNDAP330 is the basic building block of a wireless LAN infrastructure. It provides connectivity between Ethernet wired networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices.
The WNDAP330 provides wireless connectivity to multiple wireless network devices within a fixed range or area of coverage—interacting with a wireless network interface card (NIC) via an antenna. Typica lly, an individual in-building access point provides a maximum connectivity area of about a 500 foot radius. Consequently, the ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 can support a small group of users in a range of several hundred feet. Most access points can handle between 10 to 30 users simultaneously.
The ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 acts as a bridge between the wired LAN and wireless clients. Connecting multiple WNDAP330 Wireless Access Points via a wired Ethernet backbone can further lengthen the wireless network coverage. As a mobile computing device moves out of the range of one access point, it moves into the range of another. As a result, wireless clients can freely roam from one Access Point to another and still maintain seamless connection to the network.
The auto-sensing capability of the ProSafe 802.11n Dual Band W ireless Access Point WNDAP330 allows packet transmission at up to 300 Mbps, or at reduced speeds to compensate for distance or electromagnetic interference.
1-1
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual

Key Features and Standards

The WNDAP330 Wireless Access Point is easy-to-use and provides solid wireless and networking support. It also offers a wide range of security options.
Supported Standards and Conventions
The following standards and conventions are supported:
Standards Compliance. The Wireless Access Point complies with the IEEE 802.11 a/b/g
standards for Wireless LANs, and is WiFi certified for 802.11n draft 2.0 standard.
Full WPA and WPA2 support. WPA and WPA2 enterprise-class strong security with
RADIUS and certificate authentication as well as dynamic encryption key generation.WPA­PSK and WPA2-PSK preshared key authentication without the overhead of RADIUS servers but with all of the strong security of WPA.
Multiple BSSIDs. Supports multiple BSSIDs. When a wireless access point is connected to a
wired network and a set of wireless stations, it is called a Basic Service Set (BSS). The Basic Service Set Identifier (BSSID) is a unique identifier attached to the head er of packe ts sent over a WLAN that differentiates one WLAN from another when a mobile device tries to connect to the network.
The multiple BSSID feature allows you to configure up to 8 SSIDs per Radio mode on your access point and assign different configuration settings to each SSID. All the configured SSIDs are active and the network devices can connect to the access point by using any of these SSIDs.
DHCP Client Support. DHCP provides a dynamic IP address to PCs and other devices upon
request. The WNDAP330 can act as a client and obtain information from your DHCP server; it can also act as a DHCP server and provide network information for wireless clients.
SNMP Support. Support for Simple Network Management Protocol (SNMP) Management
Information Base (MIB) management.
802.1Q VLAN (Virtual LAN) Support. A network of computers that behave as if they are
connected to the same network even though they actually may be physically located on different segments of a LAN. VLANs are configured through software rather than hardware, which makes them extremely flexible. VLANs are very useful fo r user/host management, bandwidth allocation and resource optimization.
1-2 Introduction
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Key Features
The WNDAP330 provides solid functionality, including the following features:
Band Selection. The W ireless Access Point allows you to configure the band you wish to use.
For each Access Point, you can choose to operate in either the 2.4 GHz band or the 5 GHz band.
The choice of band is reflected in protocol standard supported, as well as the administration screens displayed to you. For example, if you choose to enable the 2.4 GHz band, only
802.11b/g/n protocols are supported. In addition, in the administration screens, the configuration options for 802.11a/n protocols are greyed out. On the other hand, if you enable the 5GHz band, the 802.11 a/n protocols are support and the 802.11b/g/n protocol support is disabled. In this case, the configuration options for 802.11b/g/n protocols are greyed out.
Multiple operating modes:
Wireless Access Point. Operates as a standard 802.11a/b/g/n access point. Point-to-Point Bridge. In this mode, the WNDAP330 only communicates with another
bridge-mode wireless station or access point. Network authentication should be used to protect this communication.
Point-to-Multi-Point Bridge. Select this only if this WNDAP330 is the “Master” for a
group of bridge-mode wireless stations. The other bridge-mode wireless stations send all traffic to this “Master”, and do not communicate directly with each other. Network Authentication should be used to protect this traffic.
Wireless Repeater. In this mode, WNDAP330 does not function as an access point. It
communicates with only repeater-mode, point-to-point-bridge-mode, and point-to-multi­point-bridge-mode wireless stations. Network authentication should be used to protect this communication.
Hotspot Settings. You can allow all HTTP (TCP, port 80) requests to be captured and
redirected to the URL you specify.
Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily,
using only your Web browser, and can be upgraded remotely. In addition to using Web browser to do so, command-line interface can also be used.
Rogue AP Detection. The Rogue AP filtering feature ensures that unknown APs ae not given
access to any part of the LAN.
Access Control. The Access Control MAC address filtering feature can ensure that only
trusted wireless stations can use the WNDAP330 to gain access to your LAN.
Introduction 1-3
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Security Profiles. When using multiple BSSIDs, you can configure unique security settings
(encryption, SSID, etc.) for each BSSID.
Hidden Mode. The SSID is not broadcast, assuring only clients configured with the correct
SSID can connect.
Secure Telnet Command Line Interface. The Telnet command line interface enables direct
access over the serial port and easy scripting of configuration of multiple WNDAP330 across an extensive network via the Ethernet interface. An SSH client is required.
Configuration Backup. Configuration settings can be backed up to a file and restored.
Secure and Economical Operation. Adjustable power output allows more secure or
economical operation.
Power over Ethernet. Power can be supplied to the WNDAP330 over the Ethernet port from
any 802.3af compliant mid-span or end-span source. Please refer to the Appendix for a list of compliant Netgear PoE switches.
Autosensing Ethernet Connection with Auto Uplink Interface. Connects to 10/100/1000
Mbps IEEE 802.3 Ethernet networks.
LED Indicators. Power, test, LAN speed, LAN activity, and wireless activity for each radio
mode are easily identified.
Wireless Multimedia (WMM) Support. WMM is a subset of the 802.11e standard. WMM
allows wireless traffic to have a range of priorities, depending on the kind of data. Time­dependent information, like video or audio, has a higher priority than normal traffic. For WMM to function correctly, Wireless clients must also support WMM.
Quality of Service (QoS) Support. You can configure parameters that affect traffic flowing
from the wireless access point to the client station and traffic flowing from the client station to the wireless access point. The QoS feature allows you to prioritize traffic, such as voice and video traffic, so that packets do not get dropped.
VLAN Security Profiles. Each Security Profile is automatically allocated a VLAN ID as each
Security Profile is modified.
802.11a/b/g/n Standards-based Wireless Networking
The ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 provides a bridge between Ethernet wired LANs and 802.11a/b/g/n compatible wireless LAN networks. It provides connectivity between Ethernet wired networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices. Additionally, the WNDAP330 supports the following wireless features:
1-4 Introduction
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Aggregation Support
Reduced InterFrame Spacing support
Multiple Input, Multiple Output (MIMO) support
Distributed coordinated function (CSMA/CA, Back off procedure, ACK procedure,
retransmission of unacknowledged frames)
RTS/CTS handshake
Beacon generation
Packet fragmentation and reassembly
Auto or long preamble
Roaming among access points on the same subnet
Autosensing Ethernet Connections with Auto Uplink
The WNDAP330 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation.
The wireless access point incorporates Auto UplinkTM technology. The Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a “normal” connection such as to a computer or an “uplink” connection such as to a switch or hub. That port will then configure itself to the correct configuration. This feature also eliminates any concerns about crossover cables, as Auto Uplink will accommodate either type of cable to make the right connection.

Compatible and Related NETGEAR Products

For a list of compatible products from other manufacturers, see the Wireless Ethernet Compatibility Alliance Web site (WECA, see
The following NETGEAR products work with the WNDAP330 Wireless Access Point:
FS108P - ProSafe 8 Port 10/100 Switch with 4 Port PoE
FS116 P ProSafe 16 Port 10/100 Desktop Switch with 8 Port PoE
FS726TP - ProSafe 24 Port 10/100 Smart Switch with 2 Gigabit Ports and 12 Port PoE
FS728TP - ProSafe 24+4 10/100 Smart Switch with full PoE
FS752TPS - ProSafe 48 Port 10/100 Stackable Smart Switch with 4 Gigabi t Ports and 24 Port
PoE
FSM7328PS - ProSafe 24-port 10/100 L3 Managed Stackable Switch with 24 PoE Ports
Introduction 1-5
http://www.wi-fi.net).
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
FSM7352PS - ProSafe 48 Port 10/100 L3 Managed S tackable Switch with 4 Gigabit Ports and
48 Port PoE
GS724TP - ProSafe 24-Port GE PoE Smart Switch
GS748TP - ProSafe 48-Port GE PoE Smart Switch
WNDA3100 - RangeMax Dual Band Wireless-N USB 2.0 Adapter
WN121T RangeMax NEXT Wireless-N USB 2.0 Adapter
WN111 - RangeMax Next Wireless-N USB Adapter
WN511B RangeMax NEXT Wireless-N Notebook Adapter
WN311B RangeMax NEXT Wireless-N PCI Adapter
WAG511 ProSafe 108 Mbps Dual Band PC Card
WAG311 ProSafe 108 Mbps Dual Band PCI Card
WG311T 802.11g 108 Mbps Wireless PCI Card
WG511T 802.11g 108 Mbps Wireless CardBus Adapter
WG511 802.11g 54 Mbps Wireless CardBus Adapter
WG111 801.11g 54 Mbps Wireless USB Adapter
WPN111 - RangeMax Wireless USB 2.0 Adapter

System Requirements

Before installing the WNDAP330, make sure your system meets these requirements:
A 10/100/1000 Mbps Local Area Network device such as a hub or switch
The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the
package, or one like it
A 100-240 V, 50-60 Hz AC power source
A Web browser for configuration such as Microsoft Internet Explorer 5.0 or above, or Mozilla
3.0 or above
At least one computer with the TCP/IP protocol installed
802.11a/b/g/n or 802.11a/b/g/n-compliant devices, such as the NETGEAR WG511 Wireless
Adapter

What’s In the Box?

The product package should contain the following items:
1-6 Introduction
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
ProSafe 802.11n Dual Band Wireless Access Point WNDAP330
Two Reverse SMA 5dbi dual band dipole antenna and one reverse SMA 3dbi dual band patch
antenna.
Power adapter and cord (12 V dc, 1.5 A)
Straight-through Category 5 Ethernet cable
NETGEAR WNDAP330 802.11a/b/g/n Dual Band Wireless Access Point Installation Guide
Resource CD which includes this manual.
Support Registration card Contact your reseller or customer support in your area if there are any missing or damaged parts.
You can refer to the Support Information Card for the telephone number of customer support in your area. You should keep the Support Information card, along with the original packing materials, and use the packing materials to repack the WNDAP330 if you need to return it for repair. To qualify for product updates and product warranty registrations, we encourage you to register on the NETGEAR Web site at:
http://www.NETGEAR.com.

Hardware Description

This section describes the front and rear hardware functions of the WNDAP330.
Introduction 1-7
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Front Panel
The WNDAP330 front hardware functions are described below.
1
2
34
5
6
Figure 1-1
The following table explains the LED indicators:
Table 1-1. Front Panel LED Indicators
Item LED DESCRIPTION
1 PWR Power Indicator
Off No power. On Power is on.
2 TEST Self Test Indicator
Blink Indicates self test, loading software, or system fault (if continues).
Note: This LED may blink for a minute before going off.
1-8 Introduction
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Table 1-1. Front Panel LED Indicators (continued)
Item LED DESCRIPTION
3 100 Ethernet LAN Speed Indicator
Off Indicates 10 Mbps or no link detected. Yellow Indicates 100 Mbps link detected. Green Indicates 1000 Mbps link detected.
4 LINK/ACT LAN Ethernet LAN Link Activity Indicator
Off Indicates no Ethernet link detected. Blink
(Green)
5 802.11na WLAN Wireless LAN Link Activity Indicator (5 GHz)
Off Indicates WLAN 802.11n/a (5GHz) mode is disabled. Blink
(Green)
6 802.11ng WLAN Wireless LAN Link Activity Indicator (5 GHz)
Off Indicates WLAN 802.11b/g (5GHz) mode is disabled. Blink
(Green)
Indicates data traffic on the 100Mbps Ethernet LAN.
Indicates Wireless data traffic in 5GHz modes.
Indicates Wireless data traffic in 2.4GHz modes.
Introduction 1-9
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Rear Panel
1
Figure 1-2
2
3
1
4
5
1
The WNDAP330 rear panel functions are described below:
1. Left, Middle, and Right Detachable Antenna
The WNDAP330 provides three detachable antennas (two dipole and one patch).
2. Restore to Factory Defaults Button
The restore to default button located between the Ethernet RJ-45 connector and the power socket restores the WNDAP330 to the factory default settings.
3. Serial Console Port
Male DB-9 serial port for serial DTE connections.
1-10 Introduction
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
4. RJ-45 Ethernet Port
Use the WNDAP330 Ethernet RJ-45 port to connect to an Ethernet LAN through a device such as a hub, switch, router, or POE switch.
5. Power Socket
This socket connects to the WNDAP330 12V 1.5A power adapter.
Introduction 1-11
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
1-12 Introduction
v1.0, May 2008
Chapter 2
Basic Installation and Configuration
This chapter describes how to set up your ProSafe 802.11n Dual Band Wireless Access Point WNDAP330 for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN.
Note: Indoors, computers can connect over 802.11b/g/n or 802.1 1a/g/n wireless networks
at ranges of several hundred feet or more. This distance can allow for others outside your area to access your network. It is important to take appropriate steps to secure your network from unauthorized access. The WNDAP330 Wireless Access Point provides highly effective secur ity features which are covered in detail
“Understanding Security Profiles” on page 2-23. Deploy the security features
in appropriate to your needs.
You need to prepare these three things before you can establish a connection through your wireless access point:
A location for the WNDAP330 that conforms to the “Wireless Equipment Placement and
Range Guidelines” below.
The wireless access point connected to your LAN through a device such as a hub, switch,
router, or Cable/DSL gateway.
One or more computers with properly configured 802.11b/g/n or 802.11a/n wireless adapters.

Wireless Equipment Placement and Range Guidelines

The operating distance or range of your wireless connection can vary significantly based on the physical placement of the wireless access point. The latency, data throughput performance, and notebook power consumption of wireless adapters also vary depending on your configuration choices.
2-1
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Note: Failure to follow these guidelines can result in significant performance degradation
or inability to wirelessly connect to the WNDAP330. For complete performance specifications, see Appendix A, “Default Settings and Technical Specifications.”
For best results, place your wireless access point:
Near the center of the area in which your PCs will operate.
In an elevated location such as a high shelf where the wirelessly connected PCs have line-of-
sight access (even if through walls).
Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones.
Away from large metal surfaces. Putting the antenna in a vertical position provides best side-to-side coverage. Putting the antenna
in a horizontal position provides best up-and-down coverage. If you are using multiple access points for 11b/bg/ng, it is better if adjacent access points use
different
radio frequency Channels to reduce interference. The recommended Channel spacing
between adjacent access points is 5 Channels (for example, use Channels 1 and 6, or 6 and 11). For 11a/na, the 6 Channel spacing is not needed.
The time it takes to establish a wireless connection can vary depending on both your security settings and placement. Some types of security connections can take slightly longer to establish and can consume more battery power on a notebo ok computer.

Understanding WNDAP330 Wireless Security Options

Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WNDAP330 Wireless Access Point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
2-2 Basic Installation and Configuration
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual
Figure 2-1
There are several ways you can enhance the security of your wireless network:
Restrict Access Based on MAC address. You can restrict access to only trusted PCs so that
unknown PCs cannot wirelessly connect to the WNDAP330. MAC address filtering adds an obstacle against unwanted access to your network, but the data broadcast over the wireless link is fully exposed.
Turn Off the Broadcast of the Wireless Network Name (SSID). If you disable broadcast of
the SSID, only devices that have the correct SSID can connect. This nullifies the wireless network “discovery” feature of some products such as Windows XP, but the data is still fully exposed to a determined snoop using specialized test equipment like wireless sniffers.
Use WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
open authentication and WEP data encryption will block all but the most determined eavesdropper.
Use WPA or WPA-PSK. Wi-Fi Protected Access (WPA) data encryption provides data
security. The very strong authentication along with dynamic per frame rekeying of WPA make it virtually impossible to compromise. Because this is a new standard, wireless device driver and software availability may be limited.
Note: WEP and TKIP provide only legacy rates of operation. So, AES is the
recommended solution to use the 11n rates and speed.
Basic Installation and Configuration 2-3
v1.0, May 2008
ProSafe Dual Band Wireless Access Point WNDAP330 Reference Manual

Installing the WNDAP330 Wireless Access Point

Before installing the ProSafe 802.11n Dual Band Wireless Access Point WNDAP330, you should make sure that your Ethernet network is up and working. You will be connecting the access point to the Ethernet network so that computers with 802.11b/g/n or 802.11a/n wireless adapters will be able to communicate with computers on the Ethernet network. In order for this to work correctly, verify that you have met all of the system requirements, shown on
page 1-6.
Setting up the WNDAP330 Wireless Access Point
Tip: Before mounting the WNDAP330 in a high location, first set up and test the
WNDAP330 to verify wireless network connectivity.
To se t up the WNDAP330 Wireless Access Point:
1. Prepare a computer with an Ethernet adapter. If this computer is already part o f yo ur network,
record its TCP/IP configuration settings.
“System Requirements” on
2. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 for the
Subnet Mask.
3. Connect an Ethernet cable from the WNDAP330 to the computer.
4. Turn on your computer, connect the power adapter to the WNDAP330 and verify the
following:
The PWR power light goes on.
The LAN light of the wireless access point is lit when connected to a powered on computer.
The WLAN LEDs should be blinking.
Configuring LAN and Wireless Access
To configure the WNDA P330 Ethernet port for LAN access:
1. Connect to the WNDAP330 by opening your browser and entering http://192.168.0.230 in the
address field. The WNDAP330 login screen will appear.
2-4 Basic Installation and Configuration
v1.0, May 2008
Loading...
+ 112 hidden pages