NETGEAR WNDAP350-100NAS User Manual
ProSafe Dual Band
Wireless-N Access Point
WNDAP350 Reference
Manual
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134
202-10534-01
November 2009
v1.1
© 2009 by NETGEAR, Inc. All rights reserved.
Technical Support
Please refer to the Resource CD that shipped with your product. If your product does not contain a Resource CD, then
refer to the support information card that shipped with your product. By registering your product at
http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product
and software upgrades.
NETGEAR, INC. Support Information
Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see the Warranty and Customer Support
information on your Resource CD. If your product does not contain a Resour ce CD, then see the Warranty and Customer
Support Information card.
E-mail: support@netgear.com
North American NETGEAR website: http://www.netgear.com
Trademarks
NETGEAR, the NETGEAR logo, ProSafe, Smart Wizard, and Auto Uplink are trademarks or registered trademarks of
NETGEAR, Inc. Microsoft, Windows, W indows NT and Vista are registered trademarks of Microsoft Corporation.Other
brand and product names are registered trademarks or trademarks of their respective holders.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe Dual Band W i reless-NAccess Point WNDAP350 Reference Manual has been
suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation
of some equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to
certain restrictions. Please refer to the notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe Dual Band Wireless-N Access Point WNDAP350 gemäß der im BMPTAmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben
einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die
Anmerkungen in der Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
ii
v1.1, November 2009
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
Regulatory Compliance Information
This section includes user requirements for operating this product in accordance with National laws for usage of radio
spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result
in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
NOTE: This product's firmware limits operation to only the channels allowed in a particular Region or Country.
Therefore, all options described in this user's guide may not be available in your version of the product.
Europe – EU Declaration of Conformity
This device complies with the essential requirements of the R&TTE Directive 1999/5/EC. The following test methods
have been applied in order to prove presumption of conformity with the essential requirements of the R&TTE Directive
1999/5/EC:
EN60950-1: 2006
EN 50385:
EN 300 328 V1.7.1 (2006-10)
EN 301 893 V1.5.1: (2008-12)
EN 301 489-1 V1.8.1 (2008-04)
EN 301 489-17 V1.3.2 (2008-04)
This is an indoor only device.
Europe – Declaration of Conformity in Languages of the European Community
Cesky [Czech] NETGEAR Inc. tímto prohlašuje, že tento Radiolan je ve shode se základními
požadavky a dalšími p?íslušnými ustanoveními sm?rnice 1999/5/ES.
Dansk
[Danish]
Deutsch
[German]
Eesti
[Estonian]
English Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential
Español
[Spanish]
Undertegnede NETGEAR Inc. erklærer herved, at følgende udstyr Radiolan overholder
de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
Hiermit erklärt NETGEAR Inc., dass sich das Gerät Radiolan in Übereinstimmung mit
den grundlegenden Anforderungen und den übrigen einschlägigen Bestimmungen der
Richtlinie 1999/5/EG befindet.
Käesolevaga kinnitab NETGEAR Inc. seadme Radiolan vastavust direktiivi 1999/5/EÜ
põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele.
requirements and other relevant provisions of Directive 1999/5/EC.
Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los
requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la
Directiva 1999/5/CE.
iii
v1.1, November 2009
Ελληνική
[Greek]
ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ
ΠΡΟΣ ΤΙΣ ΟΥΣΙΩΔΕΙΣ ΑΠΑΙΤΗΣΕΙΣ ΚΑΙ ΤΙΣ ΛΟΙΠΕΣ ΣΧΕΤΙΚΕΣ ΔΙΑΤΑΞΕΙΣ ΤΗΣ
ΟΔΗΓΙΑΣ 1999/5/ΕΚ.
Français
[French]
Italiano [Italian] Con la presente NETGEAR Inc. dichiara che questo Radiolan è conforme ai requisiti
Latviski
[Latvian]
Lietuvių
[Lithuanian]
Nederlands
[Dutch]
Malti [Maltese] Hawnhekk, NETGEAR Inc., jiddikjara li dan Radiolan jikkonforma mal-htigijiet
Magyar
[Hungarian]
Polski [Polish] Niniejszym NETGEAR Inc. oświadcza, że Radiolan jest zgodny z zasadniczymi
Português
[Portuguese]
Slovensko
[Slovenian]
Par la présente NETGEAR Inc. déclare que l'appareil Radiolan est conforme aux
exigences essentielles et aux autres dispositions pertinentes de la directive 1999/5/CE.
essenziali ed alle altre disposizioni pertinenti stabilite dalla direttiva 1999/5/CE.
Ar šo NETGEAR Inc. deklarē, ka Radiolan atbilst Direktīvas 1999/5/EK būtiskajām
prasībām un citiem ar to saistītajiem noteikumiem.
Šiuo NETGEAR Inc. deklaruoja, kad šis Radiolan atitinka esminius reikalavimus ir kitas
1999/5/EB Direktyvos nuostatas.
Hierbij verklaart NETGEAR Inc. dat het toestel Radiolan in overeenstemming is met de
essentiële eisen en de andere relevante bepalingen van richtlijn 1999/5/EG.
essenzjali u ma provvedimenti ohrajn relevanti li hemm fid-Dirrettiva 1999/5/EC.
Alulírott, NETGEAR Inc. nyilatkozom, hogy a Radiolan megfelel a vonatkozó alapvetõ
követelményeknek és az 1999/5/EC irányelv egyéb elõírásainak.
wymogami oraz pozostałymi stosownymi postanowieniami Dyrektywy 1999/5/EC.
NETGEAR Inc. declara que este Radiolan está conforme com os requisitos essenciais
e outras disposições da Directiva 1999/5/CE.
NETGEAR Inc. izjavlja, da je ta Radiolan v skladu z bistvenimi zahtevami in ostalimi
relevantnimi določili direktive 1999/5/ES.
Slovensky
[Slovak]
Suomi
[Finnish]
Svenska
[Swedish]
Íslenska
[Icelandic]
Norsk
[Norwegian]
iv
NETGEAR Inc. týmto vyhlasuje, že Radiolan spĺňa základné požiadavky a všetky
príslušné ustanovenia Smernice 1999/5/ES.
NETGEAR Inc. vakuuttaa täten että Radiolan tyyppinen laite on direktiivin 1999/5/EY
oleellisten vaatimusten ja sitä koskevien direktiivin muiden ehtojen mukainen.
Härmed intygar NETGEAR Inc. att denna Radiolan står I överensstämmelse med de
väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv
1999/5/EG.
Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar
kröfur, sem gerðar eru í tilskipun 1999/5/EC.
NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de
grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF.
v1.1, November 2009
FCC Requirements for Operation in the United States
FCC Information to User
This product does not contain any user serviceable components and is to be used with approved antenn as only. Any
product changes or modifications will invalidate all applicable regulatory certifications and approvals.
FCC Guidelines for Human Exposure
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance of 25 cm between the radiator and your body.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
FCC Declaration Of Conformity
We NETGEAR, Inc.,350 east Plumeria Drive, San Jose, CA 95134, declare under our sole responsibility that the model
ProSafe Dual Band Wireless-N Access Point WNDAP350 complies with Part 15 of FCC Rules. Operation is subject to
the following two conditions:
• This device may not cause harmful interference, and
• This device must accept any interference received, including interference that may cause undesired operation.
FCC Radio Frequency Interference Warnings & Instructions
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide rea sonable protection against harmful interference in a residential
installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instructions, may cause harmful interference to radio communications. Operation of this equipment
in a residential area is likely to cause harmful interference in which case the user will be required to correct the
interference at his own expense.
If this equipment does cause harmful interference to radio or television reception, which can be determined by turning
the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following
measures:
• Reorient or relocate the receiving antenna
• Increase the separation between the equipment and the receiver
• Connect the equipment into an electrical outlet on a circuit different from that which the receiver is connected
• Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void
the user's authority to operate this equipment.
For operation within 5.15 ~ 5.25GHz frequency range, it is restricted to indoor environment.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This
device may not cause harmful interference, and (2) this device must accept any interference received, including
interference that may cause undesired operation.
IMPORTANT NOTE:
Radiation Exposure Statement:
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment
should be installed and operated with minimum distance 25cm between the radiator & your body.
v1.1, November 2009
v
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
The availability of some specific channels and/or operational frequency bands are country dependent and are firmware
programmed at the factory to match the intended destination. The firmware setting is not accessible by the end user.
Industry Canada statements
This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and (2) this device m ust acce pt a ny interfer ence received, including
interference that may cause undesired operation.
IMPORTANT NOTE:
Radiation Exposure Statement
This equipment complies with IC radiation exposure limits set forth for an uncontrolled en vironment. This equipment
should be installed and operated with minimum distance 25cm between the radiator & your body.
This device has been designed to operate with an antenna having a maximum gain of 5 dBi Antenna having a higher gain
is strictly prohibited per regulations of Industry Canada. The required antenna impedance is 50 ohms.
Caution:
The device for the band 5150-5250 MHz is only for indoor usage to reduce potentail for harmful interference to cochannel mobile satellite systems.
High power radars are allocated as primary users (meaning they have priority ) of 5250-5350 MHz and 5650-5850 MHz
and these radars could cause interference and/or damage to LE-LAN devices.
Canada ID: 4054A-09200110
Product and Publication Details
Model Number: WNDAP350
Publication Date: November 2009
Product Family: Wireless Access Point
Product Name: ProSafe Dual Band Wireless-N Access Point WNDAP350
Home or Business Product: Business
Language: English
Publication Part Number: 202-10534-01
Publication Version Number: 1.1
vi
v1.1, November 2009
Contents
ProSafe Dual Band Wireless-N WNDAP350 Reference Manual
About This Manual
Chapter 1
Introduction
About the ProSafe Dual Band Wireless-N Access Point WNDAP350 ............................1-1
Key Features and Standards ..........................................................................................1-1
Compatible and Related NETGEAR Products ................................................................1-5
System Requirements ....................................................................................................1-6
What’s In the Box? .........................................................................................................1-6
Hardware Description .....................................................................................................1-7
Chapter 2
Basic Installation and Configuration
Wireless Equipment Placement and Range Guidelines .................................................2-2
Understanding WNDAP350 Wireless Security Options ..................................................2-3
Installing the WNDAP350 wirelss access point ..............................................................2-4
Logging In Using the Default IP Address ......................................................................2-12
Setting Basic IP Options ...............................................................................................2-13
Wireless Settings ..........................................................................................................2-14
Setting Up and Testing Basic Wireless Connectivity ....................................................2-22
Understanding Security Profiles ...................................................................................2-23
SSID and WEP/WPA Settings Setup Form ..................................................................2-27
Configuring the RADIUS Server Settings .....................................................................2-29
Setting up a Security Profile .........................................................................................2-31
Configuring WEP ..........................................................................................................2-33
Configuring WPA with RADIUS ....................................................................................2-35
Configuring WPA2 with RADIUS ..................................................................................2-37
Configuring WPA and WPA2 with RADIUS ..................................................................2-38
Configuring WPA-PSK ..................................................................................................2-40
Configuring WPA2-PSK ................................................................................................2-41
v1.1, November 2009
vii
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Configuring WPA-PSK and WPA2-PSK ........................................................................2-42
Restricting Wireless Access by MAC Address .............................................................2-44
Chapter 3
Management
Remote Management .....................................................................................................3-1
Remote Console .............................................................................................................3-3
Upgrading the Wireless Access Point Software .............................................................3-5
Configuration File Management .....................................................................................3-6
Changing the Administrator Password .........................................................................3-10
Enabling the SysLog Server ......................................................................................... 3-11
Using Activity Log Information ......................................................................................3-12
Viewing General Summary Information ........................................................................3-12
Viewing Network Traffic Statistics .................................................................................3-14
Viewing Available Wireless Station Statistics ................................................................3-16
Enabling Rogue AP Detection ......................................................................................3-17
Viewing Rogue AP Statistics ........................................................................................3-19
Packet Capture .............................................................................................................3-21
Chapter 4
Advanced Configuration
IP Settings for Wireless Clients ......................................................................................4-1
Hotspot Settings .............................................................................................................4-3
Configuring Advanced Wireless Settings .......................................................................4-4
Configuring Advanced QoS Settings ..............................................................................4-8
Enabling Wireless Bridging ...........................................................................................4-10
Chapter 5
Troubleshooting and Debugging
No lights are lit on the wireless access point. .................................................................5-1
The Wireless LAN activity light does not light up. ...........................................................5-2
The LAN light is not lit. ....................................................................................................5-2
I cannot access the Internet or the LAN with a wireless capable computer. .................5-2
I cannot connect to the WNDAP350 to configure it. .......................................................5-3
When I enter a URL or IP address I get a timeout error. ................................................5-3
Using the Reset Button to Restore Factory Default Settings ..........................................5-4
viii Contents
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Appendix A
Default Settings and Technical Specifications
Factory Default Settings ................................................................................................ A-1
Technical Specifications ................................................................................................. A-3
Appendix B
Related Documents
Appendix C
Command Line Reference
Command Sets .............................................................................................................. C-1
Index
Contents ix
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
x Contents
v1.1, November 2009
About This Manual
The Pr oSafe™ Dual Band Wireless-N Access Point WNDAP350 Reference Manual describes how
to install, configure and troubleshoot the ProSafe Dual Band Wireless-N Access Point
WNDAP350. The information in this manual is intended for readers with intermediate computer
and Internet skills.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
• Typographical Conventions. This manual uses the following typographical conventions:
Italic Emphasis, books, CDs, file and server names, extensions
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
• Formats. This manual uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
v1.1, November 2009
xi
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
• Scope. This manual is written for the WNDAP350 wirelss access point according to these
specifications:
Product Version ProSafe Dual Band Wireless-N Access Point WNDAP350
Manual Publication Date November 2009
For more information about network, Internet, firewall, and VPN technologies, see the links to the
NETGEAR website in Appendix B, “Related Documents.”
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com/products/WNDAP350.asp.
How to Print This Manual
T o print this manual, your computer must have the free Adobe Acrobat reader installed in order to
view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
Tip: If your printer supports printing two pages on a single sheet of paper, you can
save paper and printer ink by selecting this feature.
Revision History
Part Number
202-10534-01 1.0 September
202-10534-01 1.1 November
xii About This Manual
Version
Number
Date Description
Product introduction
2009
Updated FCC statement
2009
v1.1, November 2009
Chapter 1
Introduction
This chapter describes some of the key features of the ProSafe Dual Band Wireless-N Access
Point WNDAP350. It also includes the minimum prerequisites for installation (“System
Requirements” on page 1-5.), package contents (“What’s In the Box?” on page 1- 6) and a
description of the front and back panels of the WNDAP350 (“Hardware Description” on
page 1-6).
About the ProSafe Dual Band Wireless-N Access Point WNDAP350
The ProSafe Dual Band Wireless-N Access Point WNDAP350is the basic building block of a
wireless LAN infrastructure. It provides connectivity between Ethernet wired network s and radioequipped wireless notebook systems, desktop systems, print servers, and other devices.
The WNDAP350 provides wireless connectivity to multiple wireless network devices within a
fixed range or area of coverage, interacting with a wireless network interface card (NIC) via an
antenna. Typically, an individual in-building access point provides a maximum connectivity area
of about a 500 foot radius. Consequently, the ProSafe Dual Band Wireless-N Access Point
WNDAP350 can support a small group of users in a range of several hundred feet. Most access
points can handle between 10 to 32 users simultaneously per radio.
The WNDAP350 wirelss access point acts as a bridge between the wired LAN and wireless
clients. Connecting multiple WNDAP350s via a wired Ethernet backbone can further lengthen the
wireless network coverage. As a mobile computing device moves out of the range of one access
point, it moves into the range of another. As a result, wireless clients can freely roam from one
Access Point to another and still maintain seamless connection to the network.
Key Features and Standards
The WNDAP350 wirelss access point is easy-to-use and provides solid wireless and networking
support. It also offers a wide range of security options.
1-1
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Supported Standards and Conventions
The following standards and conventions are supported:
• Standards Compliance. The Wireless Access Point complies with the IEEE 802.11 a/b/g/n
standards for Wireless LANs.
• Full WPA and WPA2 support. WPA and WPA2 enterprise-class strong security with
RADIUS and certificate authentication as well as dynamic encryption key generation.WPAPSK and WPA2-PSK preshared key authentication without the overhead of RADIUS servers
but with all of the strong security of WPA.
• Multiple BSSIDs. Supports multiple BSSIDs. When a wireless access point is connected to a
wired network and a set of wireless stations, it is called a Basic Service Set (BSS). The Basic
Service Set Identifier (BSSID) is a unique identifier attached to the head er of packets sent over
a WLAN that differentiates one WLAN from another when a mobile device tries to connect to
the network.
The multiple BSSID feature allows you to configure up to 8 SSIDs per Radio mode on your
access point and assign different configuration settings to each SSID. All the configured
SSIDs are active and the network devices can connect to the access point by using any of these
SSIDs.
• DHCP Client Support. DHCP provides a dynamic IP address to PCs and other devices upon
request. The WNDAP350 can act as a client and obtain information from your DHCP server; it
can also act as a DHCP server and provide network information for wireless clients.
• SNMP Support. Support for Simple Network Management Protocol (SNMP) Management
Information Base (MIB) management.
• 802.1Q VLAN (Virtual LAN) Support. A network of computers that behave as if they are
connected to the same network even though they actually may be physically located on
different segments of a LAN. VLANs are configured through software rather than hardware,
which makes them extremely flexible. VLANs are very useful for user/host management,
bandwidth allocation and resource optimization.
Key Features
The WNDAP350 provides solid functionality, including the following features:
• Dual Band Concurrent. The W ireless Access Point can operate in both the 2.4 GHz band and
the 5 GHz band concurrently.
The choice of band(s) is reflected in the protocol standard supported, as well as the
administration screens displayed to you.
1-2 Introduction
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
• Multiple operating modes:
– Wireless Access Point. Operates as a standard 802.11a/an or 11b/bg/ng access point.
– Point-to-Point Bridge. In this mode, the WNDAP350 only communicates with another
bridge-mode wireless access point (with or without clients). Network authentication
should be used to protect this communication.
– Point-to-Multi-Point Bridge. Select this only if this WNDAP350 is the “Master” for a
group of bridge-mode wireless access points. The other bridge-mode wireless access
points send all traffic to this “Master”, and do not communicate directly with each other.
Network Authentication should be used to protect this traffic.
• Hotspot Settings. You can allow the first HTTP (TCP, port 80) request, on client association,
to be captured and redirected to the URL you specify.
• Upgradeable Firmware. Firmware is stored in a flash memory and can be upgraded easily,
using only your Web browser, and can be upgraded remotely. In addition to using Web
browser to do so, command-line interface and SNMP can also be used.
• Rogue AP detection. The Rogue AP detection feature shows a list of unknown APs to the
administrator.
• Access Control. The Access Control MAC address filtering feature can ensure that only
trusted wireless stations can use the WNDAP350 to gain access to your LAN.
• Security Profiles. When using multiple BSSIDs, you can configure unique security settings
(encryption, SSID, etc.) for each BSSID.
• Hidden Mode. The SSID is not broadcast, assuring only clients configured with the correct
SSID can connect.
• Secure Telnet Command Line Interface. The secure Telnet command line interface enables
direct secure access over the serial port and easy scripting of configuration of multiple
WNDAP350s across an extensive network via the Ethernet interface. An SSH client is
required.
• Configuration Backup. Configuration settings can be backed up to a file and restored.
• Power over Ethernet. Power can be supplied to the WNDAP350 over the Ethernet port from
any 802.3af compliant mid-span or end-span source. Please refer to the Appendix for a list of
compliant Netgear PoE switches.
• Autosensing Ethernet Connection with
Auto Uplink Interface. Connects to 10/100/1000
Mbps IEEE 802.3 Ethernet networks.
• LED Indicators. Power/Test, LAN speed, LAN activity, and wireless activity for each radio
mode are easily identified.
Introduction 1-3
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
• Wireless Multimedia (WMM) Support. WMM is a subset of the 802.11e standard. WMM
allows wireless traffic to have a range of priorities, depending on the kind of data. Timedependent information, like video or audio, has a higher priority than normal traffic. For
WMM to function correctly, Wireless clients must also support WMM.
• WMM Power Save Support. Power Save uses mechanisms from 802.11e and legacy 802.11
to save power (for battery powered equipment) and fine-tune power consumption.
• VLAN Security Profiles. Each Security Profile can be assigned a VLAN ID as each Security
Profile is modified.
802.11a/b/g/n Standards-based Wireless Networking
The ProSafe Dual Band Wireless-N Access Point WNDAP350 provides a bridge between Ethernet
wired LANs and 802.11a/b/g/n compatible wireless LAN networks. It provides connectivity
between Ethernet wired networks and radio-equipped wireless notebook systems, desktop
systems, print servers, and other devices. Additionally, the WNDAP350 supports the following
wireless features:
• Aggregation Support
• Reduced Inter Frame Spacing support
• Multiple Input, Multiple Output (MIMO) support
• Distributed coordinated function (CSMA/CA, Back off procedure, ACK procedure,
retransmission of unacknowledged frames)
• RTS/CTS handshake
• Beacon generation
• Packet fragmentation and reassembly
• Auto or long preamble
• Roaming among access points on the same subnet
Autosensing Ethernet Connections with Auto Uplink
The WNDAP350 can connect to a standard Ethernet network. The LAN interface is autosensing
and capable of full-duplex or half-duplex operation.
The wireless access point incorporates Auto Uplink
automatically sense whether the Ethernet cable plugged into the port should have a “normal”
connection such as to a computer or an “uplink” connection such as to a switch or hub. That port
will then configure itself to the correct configuration. This feature also eliminates any concerns
about crossover cables, as Auto Uplink will accommodate either type of cable to make the right
connection.
1-4 Introduction
v1.1, November 2009
TM
technology. The Ethernet port will
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Compatible and Related NETGEAR Products
For a list of compatible products from other manufacturers, see the Wireless Ethernet
Compatibility Alliance Web site (WECA, see http://www.wi-fi.net).
The following NETGEAR products work with the WNDAP350 wirelss access point:
• FS108P - ProSafe 8 Port 10/100 Switch with 4 Port PoE
• FS116 P ProSafe 16 Port 10 /10 0 Desktop Switch with 8 Port PoE
• FS726TP - ProSafe 24 Port 10/100 Smart Switch with 2 Gigabit Ports and 12 Port PoE
• FS728TP - ProSafe 24+4 10/100 Smart Switch with full PoE
• FS752TPS - ProSafe 48 Port 10/100 Stackable Smart Switch with 4 Gigabi t Ports and 24 Port
PoE
• FSM7328PS - ProSafe 24-port 10/100 L3 Managed Stackable Switch with 24 PoE Ports
• FSM7352PS
• GS724TP
• GS748TP
• WNDA3100 - RangeMax Dual Band Wireless-N USB 2.0 Adapter
• WN121T RangeMax NEXT Wireless-N USB 2.0 Adapter
• WN111 - RangeMax Next Wireless-N USB Adapter
• WN511B RangeMax NEXT Wireless-N Notebook Adapter
• WN311B RangeMax NEXT Wireless-N PCI Adapter
• WAG511 ProSafe 108 Mbps Dual Band PC Card
• WAG311 ProSafe 108 Mbps Dual Band PCI Card
• WG311T 802.11g 108 Mbps Wireless PCI Card
• WG511T 802.11g 108 Mbps Wireless CardBus Adapter
• WG511 802.11g 54 Mbps Wireless CardBus Adapter
• WG111 801.11g 54 Mbps Wireless USB Adapter
• WPN111 - RangeMax Wireless USB 2.0 Adapter
System Requirements
Before installing the WNDAP350, make sure your system meets these requirements:
• A 10/100/1000 Mbps Local Area Network device such as a hub or switch
Introduction 1-5
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
• The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the
package, or one like it
• A 100-240 V, 50-60 Hz AC power source
• A Web browser for configuration such as Microsoft Internet Explorer 5.0 or above, or Mozilla
3.0 or above
• At least one computer with the TCP/IP protocol installed
• 802.11a/n or 802.11b/g/n-compliant devices, such as the NETGEAR WG511 Wireless
Adapter
What’s In the Box?
The product package should contain the following items:
• ProSafe Dual Band Wireless-N Access Point WNDAP350
• Power adapter and cord (12 V dc, 1.2 A)
• Straight through Category 5 Ethernet cable
• ProSafe Dual Band Wireless N Access Point WNDAP350 Installation Guide
• Resource CD which includes a link to this manual.
If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the
carton, including the original packing materials, in case you need to return the firewall for repair.
T o qualify for product updates and product warranty registrations, we encourage you to register on
the NETGEAR Web site at: http://www.NETGEAR.com.
Hardware Description
This section describes the front and rear hardware functions of the WNDAP350.
1-6 Introduction
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
1
2
3
4
5
Front Panel
The WNDAP350 front hardware functions are described below.
Figure 1-1
The following table explains the LED indicators:
Table 1-1. Front Panel LED Indicators
Item LED DESCRIPTION
1 PWR/TEST Power Indicator
Off No power.
On Power is on.
Blink Indicates self test, loading software, or system fault (if continues).
Note: This LED may blink for a minute before going off.
2100 Ethernet LAN Speed Indicator
Off Indicates 10 Mbps or no link detected.
Yellow Indicates 100 Mbps link detected.
Green Indicates 1000 Mbps link detected.
3 LINK/ACT LAN Ethernet LAN Link Activity Indicator
Off Indicates no Ethernet link detected.
Blink
(Green)
Indicates data traffic on the 1000Mbps Ethernet LAN.
Introduction 1-7
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
1
34
5
12
Table 1-1. Front Panel LED Indicators (continued)
Item LED DESCRIPTION
4 802.1 1 na WLAN Wireless LAN Link Activity Indicator (5 GHz)
Off Indicates WLAN 802.11n/a (5GHz) mode is disabled.
Blink
(Green)
5802.11ng WLANWireless LAN Link Activity Indicator (5 GHz)
Off Indicates WLAN 802.11b/g (5GHz) mode is disabled.
Blink
(Green)
Indicates Wireless data traffic in 5GHz modes.
Indicates Wireless data traffic in 2.4GHz modes.
Rear Panel
Figure 1-2
The WNDAP350 rear panel functions are described below:
1. Left and Right Detachable Antennas. The WNDAP350 provides two detachable dipole
antennas.
2. Power Socket. This socket connects to the WNDAP350 12V 1.2A power adapter.
3. RJ-45 Ethernet Port. Use the WNDAP350 Ethernet RJ-45 port to connect to an Ethernet LAN
through a device such as a hub, switch, router, or PoE switch.
4. Serial Console Port. Male
DB-9 serial port for serial DTE connections.
5. Restore to Factory Defaults Button. The restore to default button restores the WNDAP350 to
the factory default settings.
1-8 Introduction
v1.1, November 2009
Chapter 2
Basic Installation and Configuration
This chapter describes how to set up your ProSafe Dual Band Wireless-N Access Point
WNDAP350for wireless connectivity to your LAN. This basic configuration will enable
computers with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to the
Internet, or access printers and files on your LAN.
Note: Indoors, computers can connect over 802.11b/bg/ng or 802.11a/na wireless
networks at ranges of several hundred feet or more. This distance can allow for
others outside your area to access your network. It is important to take appropriate
steps to secure your network from unauthorized access. The WNDAP350 wirelss
access point provides highly effective security features which are covered in detail
in “Understanding Security Profiles” on page 2-23. Deploy the security features
appropriate to your needs.
This chapter contains the following sections:
1. “Wireless Equipment Placement and Range Guidelines
2. “Understanding WNDAP350 Wireless Security Options
3. “Installing the WNDAP350 wirelss access point
4. “Logging In Using the Default IP Address
5. “Setting Basic IP Options
6. “Wireless Settings
7. “Setting Up and Testing Basic Wireless Connectivity
8. “Understanding Security Profiles
9. “SSID and WEP/WPA Settings Setup Form
10. “Configuring the RADIUS Server Settings
11. “Setting up a Security Profile
12. “Configuring WEP
13. “Configuring WPA with RADIUS
v1.1, November 2009
2-1
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
14. “Configuring WPA2 with RADIUS
15. “Configuring WPA and WPA2 with RADIUS
16. “Configuring WPA-PSK
17. “Configuring WPA2-PSK
18. “Configuring WPA-PSK and WPA2-PSK
19. “Restricting Wireless Access by MAC Address
You need to prepare these three things before you can establish a connection through your wireless
access point:
• A location for the WNDAP350 that conforms to the “Wireless Equipment Placement and
Range Guidelines below.
• The wireless access point connected to your LAN through a device such as a hub, switch,
router, or Cable/DSL gateway.
• One or more computers with properly configured 802.11b/g/n or 802.11a/n wireless adapters.
Wireless Equipment Placement and Range Guidelines
The operating distance or range of your wireless connection can vary significantly bas ed on the
physical placement of the wireless access point. The latency, data throughput performance, and
notebook power consumption of wireless adapters also vary depending on your configuration
choices.
Note: Failure to follow these guidelines can result in significant performance degradation
or inability to wirelessly connect to the WNDAP350. For complete performance
specifications, see Appendix A, “Default Settings and Technical Specifications.”
For best results, place your wireless access point:
• Near the center of the area in which your PCs will operate.
• In an elevated location such as a high shelf where the wirelessly connected PCs have line-ofsight access (even if through walls).
• Away from sources of interference, such as PCs, microwaves, and 2.4 GHz cordless phones.
• Away from large metal surfaces.
The antenna provides better coverage above the access point. Place the access point so that it is
either ceiling mounted or mounted on a wall facing the users.
2-2 Basic Installation and Configuration
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
If you are using multiple access points for 11b/bg/ng, it is better if adjacent access points use
different radio frequency
channels to reduce interference. The recommended Channel spacing
between adjacent access points is 5 Channels (for example, use Channels 1 and 6, or 6 and 11). For
11a/na, the 6 Channel spacing is not needed.
The time it takes to establish a wireless connection can vary depending on both your security
settings and placement. Some types of security connections can take slightly longer to establish
and can consume more battery power on a notebo ok computer.
Understanding WNDAP350 Wireless Security Options
Your wireless data transmissions can be rece ived well beyond your walls by anyone with a
compatible adapter. For this reason, use the security features of your wireless equipment. The
WNDAP350 wirelss access point provides highly effective security features which are covered in
detail in this chapter. Deploy the security features appropriate to your needs.
Figure 2-1
There are several ways you can enhance the security of your wireless network:
• Restrict Access Based on MAC address. You can restrict access to only trusted PCs so that
unknown PCs cannot wirelessly connect to the WNDAP350. MAC address filtering adds an
obstacle against unwanted access to your network, but the data broadcast over the wireless link
is fully exposed.
Basic Installation and Configuration 2-3
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
• Turn Off the Broadcast of the Wireless Network Name (SSID). If you disable broadcast of
the SSID, only devices that have the correct SSID can connect. This nullifies the wireless
network “discovery” feature of some products such as Windows XP, Vista and Unix systems
but the data is still fully exposed to a determined snoop using specialized test equipment like
wireless sniffers.
• Use WEP. Wired Equivalent Privacy (WEP) data encryption provides data security. WEP
open authentication and WEP data encryption will block all but the most determined
eavesdropper.
• Use WPA or WPA-PSK. Wi-Fi Protected Access (WPA) data encryption provides data
security. The very strong authentication along with dynamic per frame rekeying of WPA make
it virtually impossible to compromise. Because this is a new standard, wireless device driver
and software availability may be limited.
Note: WEP and TKIP provide only legacy rates of operation. So, AES is the
recommended solution to use the 802.11n rates and speed.
Installing the WNDAP350 wirelss access point
Before installing the ProSafe Dual Band Wireless-N Access Point WNDAP350, you should make
sure that your Ethernet network is up and working. You will be connecting the access point to the
Ethernet network so that computers with 802.11b/g/n or 802.1 1a/n wireless adapters will be able to
communicate with computers on the Ethernet network. In order for this to work correctly, verify
that you have met all of the system requirements, shown on “System Requirements” on page 1-5.
Setting up the WNDAP350 wirelss access point
Tip: Before mounting the WNDAP350 in a high location, first set up and test the
WNDAP350 to verify wireless network connectivity.
To set up the WNDAP350 wirelss access point:
1. Prepare a computer with an Ethernet adapter. If this computer is already part o f yo ur network,
record its TCP/IP configuration settings.
2-4 Basic Installation and Configuration
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
2. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 for the
Subnet Mask.
3. Connect an Ethernet cable from the WNDAP350 to the computer.
4. Turn on your computer, connect the power adapter to the WNDAP350 and verify the
following:
• The PWR power light goes on.
• The LAN light of the wireless access point is lit when connected to a powered on
computer.
• The WLAN LEDs should be blinking.
Configuring LAN and Wireless Access
To configure the WNDAP350 Ethernet port for LAN access:
1. Connect to the WNDAP350 by opening your browser and entering http://192.168.0.237 in the
address field. The WNDAP350 login screen appears (see Figure 2-2).
2. Enter admin for the user name and password for the password, both in lower case letters.
Figure 2-2 Login screen
3. Click Login. The main menu of the WNDAP350 displays as shown in Figure 2-3.
• When the wireless access point is connected to the Internet, under the Support tab, select
Documentation to view the documentation for the wireless access point.
• On the top-right of the screen, select Logout to exit the WNDAP350 setup screens. (You
will automatically be logged out of the wireless access point after 5 minutes of no
activity.)
Basic Installation and Configuration 2-5
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Figure 2-3 Access Point Name and Country / Region
4. Access Point Name: Enter the access point name of the WNDAP350.
This unique name is the access point NetBIOS name. The default Access Point Name is
located on the bottom label of WNDAP350. The default is netgearxxxxxx, where xxxxxx
represents the last 6 digits of the WNDAP350 MAC address. You may modify the default
name with a unique name up to 15 characters long.
5. From the Country/Region pull-down menu, select the region where the WNDAP350 can be
used (the default Country/Region is the United States).
Note: If your country or region is not listed, please check with Netgear Support.
6. Spanning Tree Protocol. Enable or disable spanning tree protocol. Spanning tree protocol
enables network traffic optimization in settings with multiple WNDAP350 wirelss access
points. The default is Disable.
7. 802.1Q VLAN. This section allows each Security Profile to be associated with the default
VLAN for WNDAP350. (Useful primarily if the hubs/switches on your LAN support the
VLAN 802.1Q standard.)
2-6 Basic Installation and Configuration
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
– Untagged VLAN. Untagged VLANs do not cause the outbound traffic to be tagged with
the VLAN ID. Also, there can be only one Untagged VLAN. The default is Enable and set
to 1.
– Management VLAN. Management VLANs are used for managing traffic (T elnet, SNMP,
and HTTP) to and from the Access Point. Management VLANs also cause outbound
traffic to be tagged with this VLAN ID. However, if their VLAN ID is same as the
Untagged VLAN ID, then the outbound traffic is not tagged. There can be only one
Management VLAN.The default is 1.
8. Select Time from the left panel. The Time screen displays, as shown in Figure 2-4.
Figure 2-4 Time zone and system time related settings
9. Enter the Time Settings for your area. See the online help or “Configuring Time Settings” on
page 2-8 for more information about how to configure the settings on this screen.
Basic Installation and Configuration 2-7
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
10. Select IP on the main menu. The IP Settings screen displays, as shown in Figure 2-5.
Figure 2-5 IP Settings
11. Configure the IP Address settings appropriate for your network. The default values are
suitable for most users and situations. (See the online help or “Setting Basic IP Options” on
page 2-13 for more information about how to configure the settings on this screen.
12. Click Apply.
Configuring Time Settings
To configure your time settings:
1. Under the Configuration tab, select System from the main menu, select Basic, and then select
Time. The Time screen displays, as shown in Figure 2-6.
2-8 Basic Installation and Configuration
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Figure 2-6 Time zone and system time related settings
2. Configure the following information:
– Time Zone. From the pull-down menu, select the local time zone for your wireless access
point from a list of all available time zones. The default is USA-Pacific.
– NTP Client. Enable NTP Client to synchronize the time of the access point with an NTP
Server. The Default is Enabled.
Note: You must have an Internet connection to get the current time.
– Use Custom NTP Server. Check the option if you have a custom NTP server. The default
is Disabled.
– Hostname / IP Address. Enter the host name or the IP address of the custom NTP server.
The default is time-b.netgear.com.
3. Click Apply.
Basic Installation and Configuration 2-9
v1.1, November 2009
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual
Configuring Wireless Access
To configure your wireless settings for 11b/bg/ng and 11a/na:
1. From the main menu under Configuration, select Wireless. The Wireless Settings screen
displays, as shown in Figure 2-7.
2. Enter the wireless settings for your area. See the online help or “Wireless Settings” on
page 2-14.
3. Click Apply to save your settings.
Figure 2-7 Basic Wireless Settings for 802.11b/bg/ng
When you have completed the setup steps, you can deploy the WNDAP350 in your network. If
needed, you can now reconfigure the computer you used in step 1 (from the Static IP) back to its
original TCP/IP settings.
Deploying the WNDAP350 wirelss access point
To deploy the WNDAP350 wirelss access point:
2-10 Basic Installation and Configuration
v1.1, November 2009
Loading...