Netgear WNDAP660 User Manual

ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

Reference Manual
350 East Plumeria Drive San Jose, CA 95134 USA
October 2012 202-10984-01 v2.0
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Support
Thank you for choosing NETGEAR. After installing your device, locate the serial number on the label of your product and use it to register your product
at https://my.netgear.com. You must register your product before you can NETGEAR recommends registering your product through the NETGEAR w support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR. Phone (Other Countries): Check the li
http://support.netgear.com/general/cont
NETGEAR recommends that you use only the official NETGEAR support resources.
phone numbers at
st of
act/default.aspx.
use NETGEAR telephone support.
ebsite. For product updates and web
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change without notice. Other brand and product names are registered trademarks or trademarks of their respective holders. NETGEAR, Inc. All rights reserved.
Revision History
Publication Part Number
202-10984-01 2.0 October 2012 Minor nontechnical revisions 202-10984-01 1.0 September 2012 First publication
Version Publish Date Comments
2

Contents

Chapter 1 Introduction
Chapter 2 Installation and Basic Configuration
About the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point
WNDAP660 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
System Requirements . . . . . . . . .
Key Features and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Supported Standards and Conventions . . . . . . . . . . . . . . . . . . . . . . . . . .8
Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
802.11b/g/n and 802.11a/n Standards–Based W Autosensing Ethernet Connections with Auto Uplink .
Hardware Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Top Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Bottom Panel with Product Label . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Register the Wireless Access Point . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
s Networking. . .11
ireles
. . . . . . . . . . . . . .11
. .
. . . . . . . . . . . . . . . . . . .14
What You Need Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Wireless Equipment Placement and Range Gu
Ethernet Cabling Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
LAN Configuration Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Hardware Requirements for Computers on Your LAN
Operating Frequency (Channel) Guidelines. . . .
Requirements for Entering IP Addresses . . . . . . . . . . . . . . . . . . . . . . . .19
Install and Configure the Wireless Access Point . . . . . . . . . . . . . . . . . . . .20
Connect the Wireless Access Point to a Computer Log In to the Wireless Access Point. . Configure Basic General System Settings and Time
Configure the IPv4 Settings . . . . .
Configure the Optional DHCPv4 Server.
Configure the Basic Wireless Settings . .
Test Basic Wireless Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Mount the Wireless Access Point. . . . . . . . . . .
Ceiling Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Wall Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Desk Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
. . . . . . . . . . . . . . . . . . . . . . . . . .22
. . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
idelines. . . . . . . . . . . . .17
. . . . . . . . . . . . .19
.
. . . . . . . . . . . . . . . . . .19
. . . . . . . . . . . . . . .20
.
Settings . . . . . . . .23
. . . . . . . . . . . . . . . . . . . . . . . .27
. . . . . . . . . . . . . . . . . . . . . . . .28
. . . . . . . . . . . . . . . . . . . . .35
3
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Chapter 3 Wireless Configuration and Security
Wireless Data Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44
Before You Change the SSID, WEP, and WPA Settings . . . . . . . . . . . .46
Configure and Enable Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . 48
Configure RADIUS Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Restrict Wireless Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . .60
Schedule the Wireless Radios to Be Turned Off . . . . . . . . . . . . . . . . . . . .61
Configure Basic Wireless Quality of Service . . . . . . . . . . . . . . . . . . . . . . .62
Chapter 4 Management and Monitoring
Enable Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
SNMP Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Secure Shell and Telnet Management. . . . . . . . . . . . . . . . . . . . . . . . . .66
Upgrade the Wireless Access Point
Web Browser Upgrade Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
TFTP Server Upgrade Procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69
Manage the Configuration File or Reset to Factory
Save the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
Restore the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Restore the Wireless Access Point to the
Reboot the Wireless Access Point without Restoring the
Def
ault Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
Change the Administrator Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . .74
Manage User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
Enable the Syslog Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Monitor the Wireless Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77
View System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Monitor Wireless Stations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .80
View the Activity Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Traffic Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83
Enable Rogue AP Detection and Monitor Access
Enable and Configure Rogue AP Detection. . . .
View and Save Access Point Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87
Configure Wireless Intrusion Detection and Prevention
Configure Wireless Intrusion Detection and Prevention Policy Settings 89 Configure Wireless Intrusion Detection and Prevention Mail Settings . . 95
Monitor Traps, Counters, and Ad Hoc Networks . . . . . . . . . . . . . . . . . .96
tware . . . . . . . . . . . . . . . . . . . . . .67
Sof
Default
tory Default Settings. . . .71
Fac
Point
. . . . . . . . . . . . . . . . . . 85
s . . . . . . . . . . . 70
s. . . . . . . . . . . . . .85
. . . . . . . . . . . . . . . 89
Chapter 5 Advanced Configuration
Configure IPv6 Settings and Optional DHCPv6 Server Settings . . . . . . . . 99
Configure the IPv6 Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99
Configure the Optional DHCPv6 Server. .
Configure Spanning Tree Protocol, 802.1Q VLAN, and
Link Layer Discovery Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Configure STP and VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
4
. . . . . . . . . . . . . . . . . . . . . .101
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Configure Ethernet LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
Configure Hotspot Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106
Configure Advanced Wireless Settings . . . . . . . .
Configure Advanced Quality of Service Settings .
Configure Quality of Service Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Configure Wireless Bridging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119
Configure a Point-to-Point Wireless Network . . . . . . . . . . . . . . . . . . . .119
Configure a Point-to-Multipoint Wireless Net
Configure the Wireless Access Point to Repeat the Wireless
Signal Using Point-to-Multipoint Bridge Mode .
. . . . . . . . . . . . . . . . . .107
. . . . . . . . . . . . . . . . . .111
ork . . . . . . . . . . . . . . . .123
w
. . . . . . . . . . . . . . . . . .127
Chapter 6 Troubleshooting
Basic Functioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Verify the Correct Sequence of Events at Startup . . . . . . . . . . . . . . . .133
No LEDs Are Lit on the Wireless Access Point . . . . . . . . . . . . . . . . . .133
The Active LED or the LAN LED Is Not Lit . . . . . . . . . . . . . . . . . . . . . .134
The WLAN LED Does Not Light Up . . . . . . . . . . . . . . . . . . . . . . . . . . .134
You Cannot Access the Internet or the LAN from a
Wireless-Capable Computer . . . . . . . . . . . .
You Cannot Configure the Wireless Access Point from a Browser . . . . .135
When You Enter a URL or IP Address a Time-Out Error Occurs. . . . . . .136
Troubleshoot a TCP/IP Network Using the Ping Utility. . . . . . . . . . . . . . .136
Test the LAN Path to Your W
Test the Path from Your Co
Problems with Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Use the Packet Capture Tool . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139
reless Access Point. . . . . . . . . . . . . . . .137
i
mputer to a Remote Device . . . . . . . . . . .138
. . . . . . . . . . . . . . . . . . . .135
. .
Appendix A Supplemental Information
Technical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140
Factory Default Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143
Appendix B Command-Line Reference Appendix C Notification of Compliance Index
5

1. Introduction

This chapter introduces the NETGEAR® ProSafe® Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660 and describes some of the key features. The chapter includes the following sections:
About the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
What Is in the Box?
System Requirements
Key Features and Standards
Hardware Description
Register the Wireless Access Point
Note: For more information about the topics covered in this manual, visit
the Support website at http://support.netgear.com.
1
Note: Firmware updates with new features and bug fixes are made
available from time to time at products can regularly check the site and download n or you can check for and download new firmware manually. If the features or behavior of your product do not match what is described in this guide, you might need to update your firmware.
downloadcenter.netgear.com. Some
ew firmware,

About the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

The ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660, going forward in this manual referred to as the wireless access point, is a powerful building block of a wireless LAN infrastructure. It provides concurrent 2.4 GHz 802.11b/g/n and 5 GHz 802.1 1a/n connectivity between wired Ethernet networks and radio-equipped wireless notebook systems, deskto
p systems, print servers, and other devices. Support for three
6
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
transmit radio chains and three receive radio chains, also referred to as 3x3 multiple input, multiple output (MIMO), can increase wireless throughput considerably.
The wireless access point provides wireless connectivi ty to multiple wireless network devices within (NIC) through an antenna. Typ ically , an individual in-building wireless access point p rovides a maximum connectivity area with about a 500-foot radius. The wireless access point can support a maximum of 128 clients in a range of several hundred feet. The throughput is shared between
points to meet the required coverage, throughput, and quality of your wireless network.
a fixed ran
ge or area of coverage—interacting with a wireless network interface card
all clients. Make sure that you install a sufficient number of wireless access
The wireless access point acts as a bridge between th Connecting multiple wireless access points through a wired Ethernet backbone can further increase the wireless network coverage. As a mobile computing device moves out of the range of one wireless access point, it moves into the range of another. As a result, wireless clients can freely roam from one wireless access point to another and still maintain a seamless connection to the network.
The autosensing capability of the wireless access point allows packet transmission at up to 450 Mbp
Advanced wireless features that are supported on the wireless access point include a wireless intrusion d configurable wireless QoS policies, and band steering.
You can manage the wireless access point from either an IPv4 or IPv6 address, and the wireless access
s, or at reduced speeds to compensate for distance or electromagnetic inte rference.
e
tection system (IDS), wireless intrusion prevention system (IPS),
point can allocate either IPv4 or IPv6 DHCP addresses to it
e wired LAN and wireless clients.
s wireless clients.

What Is in the Box?

The product package contains the following items:
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Power adapter and cord (12 VCD, 1.5A)
Straight-through Category 5 Ethernet cable
Installation guide
Resource CD, which includes th
Wall-mount kit made up of brackets and hardware
tact your reseller or customer support in your ar
Con parts.
See the NETGEAR website at http://support.netgear.com/general/contact/default.aspx for the telephone number of customer support in your area. Keep the installation guide, along with the
use the packing materials to repack the wireless access point.
original p
acking materials. If you need to return the wireless access point for repair,
is manual
ea if there are any missing or damaged
Introduction
7
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

System Requirements

Before installing the wireless access point, make sure that your system meets these
requirements:
A 10/10
The Category 5
package, or one like it
A 100–120V, 50–60 Hz AC power source
A computer with the
as Microsoft Internet Explorer 6.0 or later, or Mozilla 1.5 or later
An 802.11a/n- or 802.11b/g/n-compliant device, such as the NETGEAR N600 Wireless-N
Dual Ban
0/1000
Mbps local area network device such as a hub or switch
UTP straight-through Ethernet cable with RJ-45 connector included in the
TCP/IP protocol installed and a web browser for configuration, such
d USB Adapter (WNDA3100)

Key Features and Standards

Supported Standards and Conventions
Key Features
802.11b/g/n and 802.11a/n Standards–Based Wireless Networking
Autosensing Ethernet Connections with Auto Uplink
The wireless access point is easy to use and provide
It also offers a wide range of security options.
solid wireless and networking support.
s

Supported Standards and Conventions

The wireless access point supports the following standards and conventions:
Standards compliance. The wireless access point complies with t
standards for wireless LANs and is Wi-Fi certified for 802.11n standard.
WPA and WPA2. The wireless access point provides WPA and WPA2 enterprise-class
stro
ng security with RADIUS and certificate authentication as well as dynamic encryption key generation. The WPA-PSK and WPA2-PSK pre-shared key authentication does not have the overhead of RADIUS servers but provides the strong security of WPA.
Multiple BSSIDs. The wire
access point is connected to a wired network and a set of wireless stations, it is called a basic service set (BSS). The basic service set identifier (BSSID) is a unique identifier attached to the header of packets sent over a WLAN that differentiates one WLAN from another when a mobile device tries to connect to the network.
The multiple BSSID feature allows you to configure up to 16 SSIDs (8 per radio) on your wireless access point and configured SSIDs are active, and the network devices can connect to the wireless access point by using any of these SSIDs.
less access point supports multiple BSSIDs. When a wireless
assign
different configuration settings to each SSID. All the
Introduction
he IEEE 802.11a/b/g
8
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
DHCP server and client. The DHCP server of the wireless access point can provide a
dynamic IPv4 or IPv6 address to wireless clients. The wireless access point can also act as a client and obtain an IPv4 or IPv6 address from a DHCP server on the LAN.
SNMP. The wireless access point support
(SNMP) for Management Information Base (MIB) management.
STP and LLDP.
Ethernet Link Layer Discovery Protocol (LLDP). LLDP is enabled by default.
802.1Q VLAN. A network of computers can behave as if they are connected to the same
n
etwork even though they might actually be physically on different segments of a LAN. Virtual LANs (VLANs) are configured through software rather than hardware, which makes them very flexible. VLANs are very useful for user and host management, bandwidth allocation, and resource optimization.
The wireless access point supports Spanning Tree Protocol (STP) and
s Simple Network Management Protocol

Key Features

The wireless access point provides solid functionality, including the following features:
Dual band. T
5 GHz bands.
Band steering. Band steering can ensure that a dual-band wireless station operates in
t
he 5 GHz band rather than in the 2.4 GHz band, which is often highly congested. Band steering can also move a wireless st the 5 GHz band. Band steering is an advanced wireless feature that reduces the client density in the
IPv4 and IPv6. The wireless access point is manageable from eit
address, it can function as an IPv4 or IPv6 DHCP client, and its DHCP server can allocate either IPv4 or IPv6 addresses.
Multiple operating
- Wireless access point. Ope
access point.
- Point-to-point bridge. In this
with another bridge-mode wireless station or wireless access point. Network authentication should be used to protect this communication.
- Point-to-multipoint bridge.
master for a group of bridge-mode wireless stations. The other bridge-mode wireless stations send all traffic to this master and do not communicate directly with each other. Network authentication should be used to protect this traffic.
- Repeater. In
point for clients but functions only in point-to-multipoint bridge mode to repeat the wireless signal and send all traffic to a remote access point. Network authentication should be used to protect this communication.
WMM. Wi-Fi Multimedia
wireless traffic to have a range of priorities, depending on the kind of data. Time-dependent information, like video or audio, has a higher priority than normal traffic. For WMM to function correctly, wireless clients also need to support WMM.
he wireless access point can operate concurrently in the 2.4 GHz and
ation that already operates in the 2.4 GHz band to
2.4 GHz band and increases the wireless network capacity. her an IPv4 or IPv6
modes:
rates as a standard 802.11b/g/n and 802.11a/n wireless
mode, the wireless access point communicates only
Select this op
this mode, the wireless access point does not function as an access
(WMM) is a subset of the 802.11e standard. WMM allows
tion only if this wireless access point is the
Introduction
9
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
QoS. Quality of Service (QoS) support lets you configure parameters that affect traffic
flowing from the wireless access point to the client station and traffic flowing from the client station to the wireless access point:
- The QoS settings let yo
u prioritize traffic, such as voice and video traffic, so that
packets do not get dropped.
- The QoS policies let you configure classifications (match clauses) and apply traffic to
eig
ht priority queues based on IP precedence, DSCP, MAC address, IP address, and
other information that might be present in Layer 2 and Layer 3 packet headers.
W
ireless IDS/IPS. The wireless intru
sion detection system (IDS) and intrusion prevention system (IPS) can detect and prevent a variety of wireless attacks. Att acks are covered by preconfigured policy rules. When an attack occurs, the wireless access point can notify a network administrator though an email.
Hotspot support. Y
ou can allow all HTTP (TCP, port 80) requests to be captured and
redirected to the URL you specify.
Rogue AP and ad hoc n
etwork detection. Rogue AP filtering and ad hoc network
detection ensure that unknown APs and networks are no t g ive n a cce ss to any part of the secured wireless and wired LAN.
Access control
. MAC address filtering can ensure that only trusted wireless st ations can
use the wireless access point to gain access to the wireless and wired LAN.
Security profiles. Whe
n using multiple BSSIDs, you can configure unique security
settings (encryption, SSID, and so on) for each BSSID.
Hidden mode. The
SSID is not broadcast, assuring that only clients configured with the
correct SSID can connect.
Secure Telnet
command-line interface. The secure Telnet command-line interface
(CLI) enables direct secure access over the serial port and easy scripting of configuration of multiple wireless access points across an extensive network through the Ethernet interface. A Secure Shell (SSH) client is required.
Upgradeable firmwa
re. Firmware is stored in a flash memory. You can upgrade it easily,
using only your web browser, and you can upgrade it remotely. You can also use the command-line interface.
Configuration backup. Config
Secure and econom
ical operation. Adjustable power output allows more secure or
uration settings can be backed up to a file and restored.
economical operation.
PoE support. Using Powe
r over Ethernet (PoE), any 802.3af-compliant midspan or end-span sources can supply power to the wireless access point over one or two Ethernet ports. The wireless access point can receive all required power on one Ethernet port from a single PoE source. However, with two Ethernet ports and two PoE sources, power redundancy ensures that if one Ethernet port is down, the other Ethernet port can still supply all power to the wireless access point for continued operation.
Autosensing Ethernet c
onnection with Auto Uplink™ interface. Connects to
10/100/1000 Mbps IEEE 802.3 Ethernet networks.
LED indicators. Power/T
est, Active, LAN, and WLAN for each radio mode are easily
identified.
Introduction
10
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
VLAN security profiles. Each security profile is automatically allocated a VLAN ID when
the security profile is modified.

802.11b/g/n and 802.11a/n Standards–Based Wireless Networking

The wireless access point provides a bridge between wired Ethernet LANs and 802.11b/g/n­and 802.11a/n-compatible wireless LAN networks. It provides connectivity between wired Ethernet networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices.
In addition, the wireless access point supports the following wireless features:
Aggregation support
Reduced InterFrame spacing support
3 x 3 multiple input, multiple output (MIMO) support
Distributed coordinated function (CSMA/CA, back-off procedure, ACK procedure,
re
transmission of unacknowledged frames)
RTS/CTS handshake
Beacon generation
Packet fragmentation and reassembly
Auto or long preamble
Roaming among wireless access points on the same subnet

Autosensing Ethernet Connections with Auto Uplink

The wireless access point can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation.
The wireless access point incorporates Auto Uplink technology. The Ethernet port au
tomatically senses whether the Ethernet cable plugged into the port should have a “normal” connection such as to a computer or an “uplink” connection such as to a switch or hub. That port then configures itself correctly. This feature also eliminates any concerns about crossover cables, as Auto Uplink accommodates either type of cable to make the right connection.

Hardware Description

This section describes the top and rear hardware functions of the wireless access point.
Top Panel
Rear Panel
Bottom Panel with Product Label
Introduction
11
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
1
23
4
5
6

Top Pa n el

The LEDs of the wireless access point are described in the following figure and table:
Figure 1. Table 1. Top panel LEDs
Item LED Description 1 Power/Test Off Power is off.
On (green) Power is on. Amber, then blinking
green
2 Active Off No Ethernet traffic is detected, or no link is detected.
On or blinking (green) Ethernet traffic is detected.
3 LAN 1 Off 10 Mbps or no link is detected on LAN port 1.
Amber 10/100 Mbps link is detected on LAN port 1. Green 1000 Mbps link is detected on LAN port 1.
4 LAN 2 Off 10 Mbps or no link is detected on LAN port 2.
A self-te During startup, the LED is first steady amber, then goes off, and then blinks green before turning steady green after about 45 seconds. If after 1 minute the LE indicates a system fault.
st is running or software is being loaded.
D remains amber or continues to blink green, it
Amber 10/100 Mbps link is detected on LAN port 2. Green 1000 Mbps link is detected on LAN port 2.
Introduction
12
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
1
2
3
5
6
7
8
94
Table 1. Top panel LEDs (continued)
Item LED Description 5
2.4 Ghz
5
6
Ghz

Rear Panel

WLAN Off Wireless 802.11b/g/n (2.4 GHz) LAN is not ready, or
no wireless activity is detected.
On or blinking (green) Wireless 802.11b/g/n (2.4 GHz) LAN is ready, or
wireless activity is detected.
WLAN Off Wireless 802.11n/a (5 GHz) LAN is not ready, or no
wireless activity is detected.
On or blinking (green) Wireless 802.11n/a (5 GHz) LAN is ready, or wireless
activity is detected.
Figure 2.
The rear panel components of the wireless access point, from left to right, are described in the following list:
1. First reverse
SMA connect
2. Factory default Re
set button. Using a sharp object, press and hold this button for about
or for an optional 2.4 GHz antenna.
5 seconds to reset the wireless access point to factory defaults settings. All configuration settings are
the Wireless Access Point to the Factory Default Settings on pa
3. First 10/100/100
lost, and the default password is restored. For more information, see Restore
ge 71.
0BASE-T Gigabit Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X) with
IEEE 802.3af Power over Ethernet (PoE) support for connection to a switch or router.
4. Second 10/100/1000BASE-T Gigabit Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X)
with IEEE 802.
3af Power over Ethernet (PoE) support for connection to a switch or router.
5. Second reverse SMA connector for an optional 2.4 GHz antenna.
6. Console
port for connecting to an optional console terminal. The port has an RJ-45 connector and supports the following settings: 9600 K default baud rate, 8 data bits, no (N) parity bit, and one (1) stop bit.
7. Cable security lock receptacle for an optional lock.
Introduction
13
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
8. Power socket for a 12 VDC, 1.5A power adapter.
9. Third reverse SMA connector for an optional 2.4 GHz antenna. Note: The wireless access point can support up to three optional 2.4 GHz
antennas.

Bottom Panel with Product Label

The product label on the bottom of the wireless access point’s enclosure displays factory default settings, regulatory compliance, and other information:
Figure 3.

Register the Wireless Access Point

To qualify for product updates and product warranty, NETGEAR encourages you to register your product. The first time that you connect to the wireless access point while it is connected to the Internet, you have the option to register your product. At any time, you can register your product from the web management interface, or you can go to the NETGEAR website for registration at https://my.netgear.com/registration/login.aspx.
To register the wireless access point with NETGEAR:
1. Select Support > Registration. The Product Registration screen di
splays:
Introduction
14
Figure 4.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
2. Click Register. A new screen displays in your browser:
Figure 5.
3. Enter the information in the blank fields. The serial number, model number, and date of
purchase are entered automatically.
4. Click Register. The reg
istration web page displays:
Introduction
15
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Figure 6.
5. Complete the registration form.
6. Click submit.
Introduction
16

2. Installation and Basic Configuration

This chapter describes how to install and configure the wireless access point for wireless connectivity to your LAN. This basic configuration enables computers with 2.4 GHz 802.11b/g/n and 5 GHz 802.1 1a/n wireless adapter s to connect to the Internet or access printers and files on your LAN. In planning your wireless network, consider the level of security required. Chapter 3,
Wireless Configuration and Security, describes how to set up wireless security for your network.
This chapter includes the following sections:
What You Need Before You Begin
Install and Configure the Wireless Access Point
Test Basic Wireless Connectivity
Mount the Wireless Access Point

What You Need Before You Begin

2
Wireless Equipment Placement and Range Guidelines
Ethernet Cabling Requirements
LAN Configuration Requirements
Hardware Requirements for Computers on Your LAN
Operating Frequency (Channel) Guidelines
Requirements for Entering IP Addresses
You need to consider the following guidelines an wireless access point. See also System Requirements on pag
d requireme
nts before you can set up your
e 8.

Wireless Equipment Placement and Range Guidelines

The range of your wireless connection can vary significantly based on the location of the wireless access point. The latency , dat a throughput performance, and power consumption of wireless adapters also vary depending on your configuration choices.
17
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Note: Failure to follow these guidelines can result in significant
performance degradation or inability to connect wirelessly to the wireless access point. For complete performance specifications, see
Appendix A, Supplemental Information.
Note: Before you position and mount the wireless access point at its
permanent position, first configure the wireless access point and test the computers on your LAN for wireless connectivity as explained in this chapter.
For best results, place your wireless access point according to the following general guidelines:
cen
Near the
ter of the area in which the wireless devices will operate.
In an elevated location such as a
line-of-sight access (even if through walls).
Away from sources of interference, such as computers, microwaves ovens, and 2.4 GHz
cord
less phones.
Away from large metal surfaces or water.
Placing an external anten
Placing an external antenna in a horizontal position provides best up-and-down coverage. (An external antenna does not come standard with the wireless access point.)
If you are using mu
points use different radio frequency channels to reduce interference. The recommended channel spacing between adjacent wireless access points is five channels (for example, use Channels 1 and 6, or 6 and 11, or 1 and 11).
The time it takes to establish a wireless connection can settings and placement. WEP connections can take slightly longer to establish. Also, WEP encryption can consume more battery power on a notebook computer.
ltiple wireless access points, it is better if adjacent wireless access
na in a vertical position provides best side-to-side coverage.
high shelf where the wirelessly connected devices have
vary depending on both your security

Ethernet Cabling Requirements

The wireless access point connects to your LAN using twisted-p air Category 5 Ethernet cable with RJ-45 connectors.

LAN Configuration Requirements

For the initial configuration of your wireless access point, you need to connect a computer to the wireless access point.
Installation and Basic Configuration
18
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

Hardware Requirements for Computers on Your LAN

To connect to the wireless access point on your network, each computer needs to have an
802.11b/g/n or 802.11a/n wireless adapter installed. NETGEAR recommends using the wireless access point with computers that have the NETGEAR N600 Wireless Dual Band USB Adapter (WNDA3100) installed.

Operating Frequency (Channel) Guidelines

You do not need to change the operating frequency (channel) unless you notice interference problems or you place the wireless access point near another wireless access point. If you do change the operating frequency, observe the following guidelines:
Wireless access points use a fixed channel. You can select a channel that provides the
least inte
e available.
ar
If you use multiple wireless access points, it is bett
use different channels to reduce interference. The recommended channel spacing between adjacent wireless access points is 5 channels (for example, use channels 1 and 6, or 6 and 11).
In infrastructure mode (which is the default mode for the wireless access point), wireless
st
ations normally scan all channels, looking for a wireless access point. If more than one wireless access point can be used, the one with the strongest signal is used. This is possible only if the wireless access points use the same SSID.
rference and best performance. In the United States and Canada, 11 channels
er if adjacent wireless access points

Requirements for Entering IP Addresses

IPv4
The fourth octet of an IP address needs to be between 0 and 255 (both inclusive). This requirement applies to any IP address that you enter on a screen of the web management interface.
IPv6
IPv6 addresses are denoted by eight groups of hexadecimal quartets that are separated by colons. Any four-digit group of zeroes within an IPv6 address can b e reduced to a single zero or altogether omitted.
The following errors invalidate an IPv6 address:
More t
More than four hexadecimal characters in a quartet
More than two colons in a row
han eight groups of hexadecimal quartets
Installation and Basic Configuration
19
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

Install and Configure the Wireless Access Point

Install and configure your wireless access point in the order of the following sections:
1. Connect the Wireless Access Point to a Computer
2. Log In to the Wireless Access Point
3. Configure Basic General System Settings a
4. Configure the IPv4 Settings
5. Configure the Optional DHCPv4 Server
6. Configure the Basic Wireless Settings
Before installing the wireless access point, make sure that your Ethernet network functions. Af
te
r you have connected the wireless access point to the Ethernet network, computers with
802.11b/g/n and 802.11a/n wireless adapters are able to communicate with the Ethernet network.
For this to work correctly, verify that you have met all the system requirements, shown in
n p
System Requirements o
age 8.
nd Time Settings

Connect the Wireless Access Point to a Computer

Tip: Before you place the wireless access point in an elevated position that is
difficult to reach, first set up and test the wireless access point to verify wireless network connectivity.
To set up the wireless access point:
1. Unpack the box and verify the contents.
2. Prepare a computer with an Ethernet adapter. If this computer is already part of your
net
work, record its TCP/IP configuration settings. Configure the computer with a static IP
address of 192.168.0.210 and 255.255.255.0 as the sub net mask.
3. Connect an Etherne
following figure).
4. Securely insert
.
(point B in the following figure).
t cable from the wireless access point to the computer (point A in the
the other end of the cable into the wireless access point’s Ethernet port
Installation and Basic Configuration
20
Figure 7.
A
B
Ethernet cable
Ethernet port
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
5. Turn on your computer.
6. Connect the power adapter to the wireless access point.
Ti
p: The wireless access point supports Power over Ethernet (PoE) with
p
ower redundancy. Both Ethernet ports can provide power. If you have a switch that provides PoE, you do not need to use the power adapter to power the wireless access point. Using PoE can be especially convenient when the wireless access point is installed in a high location far away from a power outlet.
7. Verify the following:
Power/T
first turned on. (To be exact, during startup, the LED is first steady amber, then
goes (steady green). If after 1 minute the Power/Test LED is not lit or is still blinking, check the connections and see if the power outlet is controlled by a wall switch that is turned off.
Active LED.
LAN 1 LED. The LAN LED ind
1000 Mbps, amber for 100 Mbps, and no light for 10 Mb p s. If the LAN LED is not
lit, make sure
LAN 2 LED. The LAN LED ind
1000 Mbps, amber for 100 Mbps, and no light for 10 Mb p s. If the LAN LED is not
lit, make sure
est LED. T
off, and then blinks green.) After about 45 seconds, the LED should stay lit
The Active
he P ower/Test LED blinks when the wireless access point is
LED is lit or blinks green when there is Ethernet traffic.
icates the LAN speed for LAN port 1: green for
that the Ethernet cable is securely attached at both ends.
icates the LAN speed for LAN port 2: green for
that the Ethernet cable is securely attached at both ends.
Installation and Basic Configuration
21
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
2.4
Ghz
5
Ghz
WLAN LED. The 2.4 GHz WLAN LED is lit or blinks green when the wireless LAN
(WLAN) is ready.
WLAN LED. The
(WLAN) is ready.
5 GHz WLAN LED is lit
or blinks green when the wireless LAN

Log In to the Wireless Access Point

The default IP address of your wireless access point is 192.168.0.100. By default, the DHCP client on the wireless access point is disabled so you can log in using the default IP address.
To log in to the wireless access point:
1. Open a web browser such as Microsoft Internet Explorer 6.0 or later, or Mozilla Firefox
1.5 or later
2. Connect to
your browser (use http and not https). The Login screen displays:
.
the wireless access point by entering its default address of 192.168.0.100 into
Figure 8.
3. Enter the default user name of admin and the default password of p assword.
4. Click Login
Configuration tab of the main menu as shown in Figure 11 on page 23
. The web browser displays the basic General system settings screen under the
.
Web Management Interface
The navigation tabs across the top of the web management interface provide access to all the configuration functions of the wireless access point and remain constant. The menu items in the blue bar change according to the navigation tab that is selected.
Installation and Basic Configuration
22
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Figure 9.
The bottom right corner of all screens that allow you to make configuration changes show the Apply and Cancel buttons, and on several screens the Edit button.
Figure 10.
These buttons have the following functions:
Edit. Allows you to edit the
existing configuration.
Cancel. Cancels all configuration changes that you made on the screen.
Apply . Save
s and applies all configuration changes that you made on the screen.

Configure Basic General System Settings and Time Settings

Note: After you have successfully logged in to the wireless access point,
the basic General system settings screen displays.
To configure basic system settings:
1. Select Configuration >
screen displays:
System > Basic > Gene ra l. The basic General system settings
Figure 11.
Installation and Basic Configuration
23
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
2. Configure the settings as explained in the following table:
Table 2. Basic general system settings
Setting Description
Access Point Name This unique name is the wireless access poi nt
on the rear label of the wireless access point. The default is netgearxxxxxx, in which xxxxxx represents the last 6 digits of the wireless access point MAC address. You can replace the default name with a unique name up to 15 characters long. The access point name can be retrieved through SNMP.
Country / Region From the Country / Region drop-down list, sele
access point is installed.
Note: It might not be legal to operate this wireless access point in a region other than
of those identified in this field.
one
3. Click Apply to save
your settings.
To configure time settings:
1. Select Configuratio
n > System > Basic > Tim e. The Time screen displays:
NetBIOS name. The name is printed
ct th
e country where the wireless
Figure 12.
2. Configure the settings as explained in the following table:
Table 3. Time system settings
Setting Description
Time Zone Select the time zone to matc Current Time This is a nonconfigurable field that di
Installation and Basic Configuration
24
h your location.
splays the current date and time.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
WARNING:
Table 3. Time system settings (continued)
Setting Description
NTP Client Enable the Network Time Protocol (NTP) client to synchronize the time of the
wireless access point with an NTP server. By default the Enable radio button is selected.
Use Custom NTP Server Select this check box if you want to use a custom
Note: You need to have an Internet connection to use an NTP server that is
not on your loca
Hostname / IP Address
l network.
Enter the host name or IP address of the custom NTP server. The default is time-b.netgear.com.
Note: If you use a host name, make sure that you have
ured a DNS server.
config section.
3. Click Apply to save your settings.

Configure the IPv4 Settings

Note: For information about how to configure the IPv6 settings, see
Configure the IPv6 Settings on page 99.
NTP server.
For more information, see the next
If you enable the DHCP client, the IP address of the wireless access point changes when you click Apply, causing you to lose your connection to the wireless access point. You then need to use the new IP address to reconnect to the wireless access point.
Tip: If you enable the DHCP client on the wireless access point, you can
discover the new IP address of the wireless access point by accessing the DHCP server on your LAN, or by using a network IP address scanner application.
To configure the IPv4 settings:
1. Select Configuration > IP > IP Settings.
Installation and Basic Configuration
The IP Settings screen displays:
25
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Figure 13.
2. Configure the IPv4 settings as explained in the following table:
Table 4. IPv4 settings
Setting Description
DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled. If
you have a DHCP server on your LAN and you select the Enable check box, the wireless access point receives its IP address, subnet mask, and default gateway settings automatically from the DHCP server on your network when you connect the wireless access point to your LAN.
IP Address Enter the IP address of your wireless access
192.168.0.100. T o change the address, enter an unused IP address from the address range used on your LAN, or enable DHCP the server.
IP Subnet Mask Enter the network number portion of an IP address. Un
implementing subnetting, enter 255.255.0.0 as the subnet mask.
Default Gateway Enter the IP address of the ISP gateway to which th
connects.
Primary DNS Server
Secondary DNS Server
Network Integrity Check Select this check box to validate that the up
Enter the IP address of the primary and A DNS server is a host on the Internet that www.netgear.com) to numeric IP addresses. Typically your ISP transfers the IP address of one or two DNS servers to your wireless access point during login. If the ISP does not transfer an address, you need to obtain it from the ISP and enter it manually in this field.
wireless associations. Ensure that the default gateway is configured.
point. The
secondary DNS servers.
translates Internet names (such as
stream lin
default IP address is
less you are
e wireless access point
k is active before allowing
3. Click Apply to save
your settings.
Installation and Basic Configuration
26
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660

Configure the Optional DHCPv4 Server

The wireless access point provides a built-in DHCPv4 server for wireless clients only, which can be especially useful in small networks. When the DHCP server is enabled, the wireless access point provides preconfigured TCP/IP configurations to all connected wireless stations.
Note: For information about how to configure the DHCPv6 server, see
Configure the Optional DHCPv6 Server on page 101.
To configure DHCPv4 server settings:
1. Select Configuration > IP > DHCP Server Settings. The
DHCP Server Settings screen displays. The following figure displays the DHCPv4 server settings only. For information about the DHCPv6 server settings, see Configure the Optional DHCPv6 Server on
ge 101.
pa
Figure 14.
2. Configure the settings as explained in the following table:
Table 5. DHCP server settings for IPv4
Setting Description
Select the DHCPv4 Serv pool of IPv4 addresses to be assigned by setting the starting IPv4 address and ending IPv4 address. These addresses should be part of the same IPv4 address subnet as the wireless access point’s LAN IPv4 address.
DHCP Server VLAN ID Enter the VLAN ID for the DHCP server. The VLAN ID ran
Starting IPv4 Address Enter the first address in the range of IPv4 addresses to be assigned to DHCP
er check box to enable the DHCP server. Use the default settings or specify the
The default VLAN is 1.
clien
ts. The default address is 192.168.1.02.
Installation and Basic Configuration
27
ge is from 1 to
4094.
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
WARNING:
Table 5. DHCP server settings for IPv4 (continued)
Setting Description
Ending IPv4 Address Enter the last address in the range of IPv4 addresses to be assigned to DHCP
clients. The default address is 192.168.1.50.
Subnet Mask Enter the subnet mask to be used by DHCP clients. The default mask is
255.255
Gateway IPv4 Address Enter the IPv4 address of the default routing gateway to be used by DHCP
clients. The default address is 192.168.0.1.
Primary DNS Address Enter the IP address of the primary Domain Name System (DNS) server
availab
Secondary DNS Address Enter the IP address of the secondary DNS server available to DHCP clients.
.255.0.
le to DHCP clients.
Primary WINS Server Enter the IP address of the primary WINS serve Secondary WINS Server Enter the IP address of the secondary WINS server for the network, if there is
any.
Lease Enter the period that the DHCP server grants to DHCP clients to use the
assigned
IP addresses. The default time is one day.
r for the network, if there is any.
3. Click Apply to save your settings.

Configure the Basic Wireless Settings

For proper compliance and compatibility between similar products in your coverage area, you need to configure the 802.1 1b/g/n and 802.11a/n wireless adapter settings correctly, including the operating channel and country. You also need to configure the basic wireless network settings for wireless devices to connect to your network. For other wireless features, including wireless security, see Chapter 3, Wireless Configuration and Security.
If you configure the wireless access point from a wireless computer and you change the wireless access point’s SSID, channel, or wireless security settings, you lose your wireless connection when you click Apply. You then need to change the wireless settings of your computer to match the wireless access point’s new settings.
Configure 802.11b/bg/ng Wireless Settings
To configure the 802.11b/g/n wireless settings:
1. Select Configuration
Settings screen displays. (The following figure shows the 11ng settings.)
> Wireless > Basic > Wireless Settings. The basic Wireless
Installation and Basic Configuration
28
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
Note: The radio wave icon ( ) displays next to the enabled wireless mode
(b, bg, or ng).
Figure 15.
2. Spe cify the wireless mode in the 2.4 GHz band by selecting one of the following radio
buttons:
11b. Both
802.11n- and 802.11g-compliant devices can connect to the access point
because they are backward compatible.
11bg. 802.11n-compliant devices can connect to the access point because they are
backward compatible.
11ng. This is the default setting. 802.11b-co
mpliant devices cannot connect to the
access point. If you keep the default setting, go to Step 5.
When you change the wireless mode, the Turn Radio On check box is automatically cleared,
3. Turn on the radio by selecting the Tu
and all fields, buttons, and drop-down lists onscreen are masked out.
r n R a di o On c h ec k b ox . A pop-up scree n displays.
Note: Under normal conditions, you want the radio to be
turned on. Turning off
the radio disables access through the wireless access point, which can be helpful for configuration, network tuning, or troubleshooting activities.
4. Click OK to co
nfirm the change of wireless mode. The change does not take effect until you
click the Apply button after you have completed the wireless configuration.
Installation and Basic Configuration
29
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP660
5. Specify the remaining wire less settings as explained the following table:
Table 6. Basic 2.4 GHz band wireless settings
Setting Descriptions
Wireless Network Name (SSID)
Wireless On-Off Status This field is not configurable. It shows the status of the wireless scheduler. For
Broadcast Wireless
rk Name (SSID)
Netwo
Channel / Frequency From the drop-down list, select the channel you wish to use for your wireless
Enter a 32-character (maximum) service set identifie case-sensitive. The default is NETGEAR_11ng. The SSID assigned to a wireless device needs to match the wireless access point’s SSID for the wireless device to communicate with the wireless access point. If the SSIDs do not match, you do not get a wireless connection to the wireless access point.
e
information, see Schedule the Wireless Radios to Be Turned Off on
mor page 61.
Select the Yes radio button to enable the wireless access point to broadcast its SSID, allowing wireless stations that have a null (blank) SSID to adopt the wireless access point’s SSID. Yes is the default setting. To prevent the SSID from being broadcast, select the No radio button.
N. The wireless channels and frequencies depend on the country and
LA wireless mode. The default setting is Auto.
Note: It should not be necessary to change the wireless channel unless you
perience interference (indicated by lost connections or slow data transfers). If
ex this happens, you might want to experiment with different channels to see which is the best. For more information, see Operating Frequency (Channel)
ge 19
Guidelines on pa
Note: For more information about available channels and frequencies, see
Technical Specifications on page 140.
.
r (SSID); the characters are
1ng mode only
1
Note: For most
orks, the default
netw settings work fine.
MCS Index / Data Rate
Channel Width From the drop-down list, select a channel width. The options
Guard Interval From the drop-down list, select the guard interval to protect
F
rom the drop-down list, select a Modulation and Coding Scheme (MCS) index and transmit data rate for the wireless network. The default setting is Best. For a list of all options that you can select from in 11ng mode, see Factory Default
Settings on page 14
e Dynamic 20/40 MHz, 20 MHz, and 40 MHz. The default is
ar 20 MHz. A wider channel improves the performance, but some legacy devices can operate only in either 20 MHz or 40 MHz.
transmission can select Long - 800 ns. Some legacy devices can operate only with a long guard interval.
3.
s from interference. The default is Auto, or you
Installation and Basic Configuration
30
Loading...
+ 144 hidden pages