User Manual Insight Managed Smart Cloud Wireless Access Point AC3000 802.11ac Wave 2 Tri Radio Model WAC540 July 2021 202-11795-05 NETGEAR, Inc. 350 E.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Revision History Publication Publish Date Comments Part Number 202-11795-05 July 2021 We added the following sections: Dismiss a browser security warning on page 43 Configure advanced rate selection for a WiFi network on page 103 We made major changes to the following sections: About NETGEAR Insight on page 12 Connect to the access point for initial configuration on page 24 (see the subsections).
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Publication Publish Date Comments Part Number 202-11795-03 August 2019 We revised the manual to describe the following new features: To log in to the access point, you now must use a secure HTTP (HTTPS) browser connection. For more information, see Log in to the access point after initial setup on page 42.
Contents Chapter 1 Hardware Overview About NETGEAR Insight....................................................................12 Related documentation.....................................................................12 Unpack the access point....................................................................13 Top panel with LEDs...........................................................................13 Back panel........................................................................................
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Connect over the Internet using the NETGEAR Insight Cloud portal....................................................................................................51 Chapter 4 Manage the Basic WiFi and Radio Features Set up and manage WiFi networks..................................................53 Set up an open or secure WiFi network......................................53 View or change the settings of a WiFi network..........
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Manage load balancing for the radios......................................114 Manage Airtime Fairness for the radios....................................117 Manage the ARP proxy................................................................118 Manage the amount of broadcast traffic..................................119 Set a data volume limit for the access point.................................120 Enable the WiFi Traffic Analyzer..
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Chapter 8 Manage and Maintain the Access Point Change the management mode to NETGEAR Insight or Web-browser....................................................................................175 Change the country or region of operation..................................177 Change the admin user account password..................................178 Change the system name...............................................................
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Check the Internet speed................................................................232 Quick tips for troubleshooting.......................................................233 Troubleshoot with the LEDs............................................................234 Power/Cloud LED is off...............................................................235 Power/Cloud LED remains solid amber...................................
1 Hardware Overview The NETGEAR Insight Managed Smart Cloud Wireless Access Point (WAC540) AC3000 802.11ac Wave 2 Tri Radio, in this manual referred to as the access point, supports three radios with tri-band concurrent operation at 2.4 GHz, 5 GHz low band, and 5 GHz high band. The access point can provide a combined throughput of 3000 Mbps (400 Mbps at 2.4 GHz, 867 Mbps at 5 GHz low band, and 1733 Mbps at 5 GHz high band).
Note: For more information about the topics that are covered in this manual, visit the support website at netgear.com/support/. Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/. You can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this manual, you might need to update the firmware.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual About NETGEAR Insight The access point supports the NETGEAR Insight app, which lets you set up and manage the access point from your iOS or Android mobile device and connects to the Insight cloud-based management platform. For Insight Premium or Insight Pro subscribers, the access point also supports the Insight Cloud portal, which is the website that provides access to the Insight cloud-based management platform.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Unpack the access point The package includes the following items: • Access point model WAC540 or WAC540PA • Ceiling and wall-mount kit • Installation guide • Ceiling and wall-mount guide • DC power adapter (model WAC540PA only, sold separately for model WAC540) Other than a power adapter, model WAC540 and model WAC540PA are identical.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 1. LED descriptions LED Description Power/Cloud LED behavior for a standalone access point or a root access point Off. No power is supplied to the access point. Solid amber. During startup, the Power/Cloud LED lights solid amber. If after five minutes the amber light remains, either a boot error occurred, or, if the access point functions as a PoE+ PD device, it might not be receiving power at the required 802.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 1. LED descriptions (Continued) LED Description LAN 2 LED Off. Either no Ethernet device is connected to the LAN 2 port or no Ethernet link is detected. Solid green. A 1000 Mbps Ethernet link is detected on the LAN 2 port. Blinking green. 1000 Mbps traffic activity is detected on the LAN 2 port. Solid amber. A 10 or 100 Mbps Ethernet link is detected on the LAN 2 port. Blinking amber.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Figure 2. Back panel Viewed from left to right, the back panel contains the following components: 1. Reset button. Press the Reset button for about 2 seconds to reboot the access point or for more than 10 seconds to reset the access point to factory default settings.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Note: If you install the access point as a standalone access point or as a root access point, make sure that you use LAN port 1 on the access point for the Ethernet connection to your network. Do not use another port for this purpose. For example, connect LAN port 1 to a switch that is connected to your router or Internet gateway. By default, LAN port 1 functions in trunk mode as an uplink.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Safety instructions and warnings for an indoor access point Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage. To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment, observe the following precautions: • This product is designed for indoor use only in a temperature-controlled and humidity-controlled environment.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • Do not spill food or liquids on your product components, and never operate the product in a wet environment. If the product gets wet, see the appropriate section in your troubleshooting guide, or contact your trained service provider. • Do not push any objects into the openings of your product. Doing so can cause fire or electric shock by shorting out interior components. • Use the product only with approved equipment.
2 Install the Access Point in Your Network and Access It for Initial Configuration This chapter describes how you can install and access the access point in your network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Position your access point Before you install your access point as described in the mounting installation guide, consider how you will position the access point. The access point lets you access your network anywhere within the operating range of your WiFi network. However, the operating distance or range of your WiFi connection can vary significantly depending on the physical placement of your access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If you are using adjacent access points, use different radio frequency channels to reduce interference. Set up and connect the access point to your network The access point is intended to function as a WiFi access point point in your existing network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To set up the access point with a PoE connection to your network: 1. Connect an Ethernet cable to the LAN 1 port on the access point. This is the LAN port next to the DC power connector. Use LAN port 1 for the Ethernet connection to your network. By default, LAN port 1 functions in trunk mode as an uplink. 2.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To set up the access point with a non-PoE connection to your network: 1. Connect an Ethernet cable to the LAN 1 port on the access point. This is the LAN port next to the DC power connector. Use LAN port 1 for the Ethernet connection to your network. By default, LAN port 1 functions in trunk mode as an uplink. 2. Connect the other end of the Ethernet cable to a switch that is connected to your network and to the Internet. 3.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If you use the local browser interface to connect to the access point, follow the procedure in one of these sections: • Connect over WiFi using a WiFi-enabled computer or mobile device on page 28 • Connect over Ethernet using a computer connected to the same network on page 32 • Connect over Ethernet using a directly connected computer on page 37 Note: If your network does not include a DHCP server (or a router that functions
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To connect to the access point over WiFi using an iOS or Android mobile device: 1. On your iOS or Android mobile device, go to the app store, search for NETGEAR Insight, and download the Insight app. 2. Connect your mobile device to the WiFi network of access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual IMPORTANT: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight app or Insight Cloud portal, the admin password for the access point changes. That is, after you add the access point to an Insight network location, the Insight network password for that location replaces the admin password.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Connect over WiFi using a WiFi-enabled computer or mobile device This section describes how to connect to the access point for the first time over WiFi using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight app). To connect to the access point over WiFi using a WiFi-enabled computer or mobile device: 1. From your computer or mobile device, connect over WiFi to the access point’s default WiFi network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • Apple Safari: Click the Show Details button. Then, click the visit this website link. If a warning pop-up window displays, click the Visit Website button. If another pop-up window displays to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button. • Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the default SSID for regular operation (the default SSID is for setup only). Enter a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). 7.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network. • WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to connect to the SSID. This option uses AES and SAE encryption.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To connect to the access point using a computer that is connected to the same network as the access point: 1. To determine the IP address that the DHCP server assigned to the access point, access the DHCP server or use an IP network scanner. Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window opens. After you log in, the Dashboard page displays. 5. Enter the settings that are described in the following table.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description AP Name As an option, enter a new system name for the access point. The name must contain alphanumeric characters, must contain at least one alphabetical character, cannot be longer than 15 characters, and can contain hyphens but cannot start or end with a hyphen.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual encrypted. If you do not select this check box, the WiFi network can only accept clients that support the WiFi enhanced open feature. • WPA2 Personal: This option allows only WiFi clients that support WPA2 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA2. This option uses AES encryption. In the Passphrase field, enter a new passphrase for the WiFi network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. If the Dashboard does not display automatically, do the following: a. Take one of the following actions: • If you assigned a static IP address to the access point, enter that IP address in the address bar of the web browser. • If you did not assign a static IP address, reenter the IP address that is displayed in the address bar of the web browser.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 3. Use an Ethernet cable to connect your computer to a LAN port on the access point. 4. On the computer, open a web browser and enter 192.168.0.100 in the address bar. The Day Zero Easy Setup page displays. 5. On the computer, open a web browser and enter 192.168.0.100 in the address bar. The Day Zero Easy Setup page displays. IMPORTANT: If your browser does not display the Day Zero login page, see the following step. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window opens. After you log in, the Dashboard page displays. 8. Enter the settings that are described in the following table.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description AP Name As an option, enter a new system name for the access point. The name must contain alphanumeric characters, must contain at least one alphabetical character, cannot be longer than 15 characters, and can contain hyphens but cannot start or end with a hyphen.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual encrypted. If you do not select this check box, the WiFi network can only accept clients that support the WiFi enhanced open feature. • WPA2 Personal: This option allows only WiFi clients that support WPA2 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA2. This option uses AES encryption. In the Passphrase field, enter a new passphrase for the WiFi network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Dashboard page displays. You can now customize the access point settings for your network environment. 14. After you complete the setup process, or both the setup and customization process, you can change the computer back to its original IP address settings. Log in to the access point after initial setup After initial setup, the access point is ready for use and you can change the settings and monitor the traffic.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Dashboard page displays various panes that let you see the status of your access point at a glance. For more information about the Dashboard page and its various panes, see Monitor the Access Point and the Network on page 200. Dismiss a browser security warning When you enter the IP address that is assigned to the access point in the address field of your browser, a security warning can display. This is normal.
3 Install the Access Point in an Insight Instant Mesh WiFi Network In addition to functioning as a regular standalone access point, the access point can function in an Insight Instant Mesh WiFi network as either a root access point or an extender access point. This chapter describes how you can use the NETGEAR Insight app to connect the access point to a root access point and let it function as an extender access point in an Insight Instant Mesh WiFi network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual What are a root access point and an extender access point? The NETGEAR WAC540 access point can function in an Insight Instant Mesh WiFi network as a root access point or as an extender access point: • Root access point. A mesh-capable access point that is set up with a wired connection to your network and functions as a gateway to another mesh-capable access point that functions as an extender.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual In the mesh WiFi network, the extender access point connects to the root access point over a WiFi connection and broadcasts (extends) the WiFi network to the WiFi clients: • Backhaul connection. The WiFi connection between the root access point and the extender access point is referred to as the backhaul connection. • Fronthaul connection.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The following NETGEAR access point models can function either as a root access point or as an extender access point: • WAC540 • WAC564 • WAX610 • WAC610Y (Although this model can function as an extender access point, you can power it through PoE only.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual You can now set up the extender access point mesh WiFi connection (see Connect the access point as an extender to a root access point on page 48). Connect the access point as an extender to a root access point Use the NETGEAR Insight app to connect the access point as an extender to a root access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To use the NETGEAR Insight app to connect the access point as an extender to a root access point in an existing WiFi network: 1. For a reliable WiFi connection, place the extender access point less than 25 feet (line of sight, with minimal obstacles) from the closest root access point. 2. Connect the extender access point to a power source.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Power/Cloud LED lights as follows during the initial connection and configuration process: • Blinks green. The Power/Cloud LED blinks green while the extender access point is attempting to detect a root access point. • Solid green. The Power/Cloud LED lights solid green while the extender access point is making its first connection with the root access point that provides the strongest WiFi signal. • Blinks amber.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Connect over the Internet using the NETGEAR Insight Cloud portal The NETGEAR Insight Cloud portal is available for Insight Premium and Insight Pro subscribers. After you install the extender access point in an Insight Instant Mesh WiFi network, you can use the Insight Cloud portal to configure, manage, and monitor the extender access point.
4 Manage the Basic WiFi and Radio Features This chapter describes how you can manage the basic WiFi and radio settings of the access point. For information about the advanced WiFi and radio settings, see Manage the Advanced WiFi and Radio Features on page 102. Tip: If you want to change the settings of the access point’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Set up and manage WiFi networks The access point supports eight WiFi networks (four in the 2.4 GHz radio band and four in the 5 GHz radio band), each with its own unique WiFi settings.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To set up a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Setting Description Wireless Network The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a maximum Name (SSID) of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (") and a backslash (\). For a WiFi device to be able to connect to the VAP, the SSID on the WiFi device must match the SSID of the VAP.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • WPA2 Personal: This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption. This type of security enables only WiFi devices that support WPA2 to join the VAP. WPA2 provides a secure connection but some legacy WiFi devices do not detect WPA2 and support only WPA. If your network includes such older devices, select WPA2/WPA Personal authentication.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual WPA3 provides a secure connection but some legacy WiFi devices do not detect WPA3 and support only WPA2. If your network also includes WPA2 devices, select WPA3/WPA2 Personal authentication. In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a user must enter this passphrase. To view the passphrase in clear text, click the eye icon.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Optionally, disable the WiFi broadcast or set up a WiFi activity schedule by selecting one of the following radio buttons: • Always ON. When you set up an SSID, you are creating a new virtual access point (VAP). By default, the new VAP is enabled and the Always ON radio button is selected. • Always OFF. Select this radio button to set up the SSID but temporarily disable the VAP. • Custom.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Select a radio button for a single band (2.4 GHz or 5 GHz) or keep the default selection. By default, the Both radio button is selected, which lets the access point broadcast the SSID on the 2.4 GHz band and both 5 GHz bands. 11. Optionally, enable band steering with 802.11k radio resource management (RRM) and 802.11v WiFi network management. By default, band steering with 802.11k RRM and 802.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, client isolation is disabled for the VAP, and the Disable radio button is selected. To block communication between WiFi clients that are associated with the same SSID or different SSIDs on the access point, select the Enable radio button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • If your WiFi-enabled computer or mobile device is already connected to another WiFi network in your area, disconnect it from that WiFi network and connect it to the WiFi network that the access point provides. Some WiFi devices automatically connect to the first open network without WiFi security that they discover.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The settings for the selected SSID display. 6. Change the settings of the WiFi network as needed. For detailed descriptions of the settings, see Set up an open or secure WiFi network on page 53. 7. If you made changes, click the Apply button. Your settings are saved. 8. If you made changes, make sure that you can reconnect over WiFi to the network with its new settings.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Remove a WiFi network You can remove a custom WiFi network (SSID or VAP) that you no longer need. You cannot remove the default WiFi network. To remove a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable client isolation for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, this check box is selected, allowing an admin user to access the local browser UI over the WiFi network. Note: If the management VLAN and WiFi network VLAN are identical (which they are by default), an admin user can always access the local browser UI over a wired network connection, even if you disable access over the WiFi network. 9.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual access points and clients can send neighbor reports, beacon reports, and link measurement reports to each other, allowing 802.11k-aware clients to automatically select the best access point for initial connection or for roaming. • 802.11v WiFi network management. This feature lets the access point steer its WiFi clients to the 2.4 GHz or 5 GHz band, based on the access point’s channel load.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. Click the Apply button. Your settings are saved. Change the VLAN ID for a WiFi network This VLAN ID is not the same as the 802.1Q VLAN ID that is used for the wired network (see Set the 802.1Q VLAN and management VLAN on page 155). CAUTION: Before you change the VLAN ID, be sure that the VLAN is configured on the network switch and the DHCP server and that the access point and its clients can get IP addresses over the new VLAN.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. Click the Apply button. Your settings are saved. Enable or disable PMF for a WiFi network Protected Management Frames (PMF), according to the 802.11w standard, is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes. This feature is disabled by default, but you can enable it as either optional or mandatory.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • Disable. PMF is disabled for the WiFi network. 7. Click the Apply button. Your settings are saved. Enable or disable URL tracking for a WiFi network You can enable the access point to track all URLs that are requested by WiFi clients that are connected to a WiFi network (SSID or VAP). This feature is disabled by default, but you can enable it.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. Under URL Tracking, select one of the following radio buttons: • Enable. URL Tracking is enabled for the WiFi network. • Disable. URL Tracking is disabled for the WiFi network. 8. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Click the > Advanced tab. The page expands. 7. Under DHCP Offer Broadcast to Unicast, select one of the following radio buttons: • Enable. The access point forwards DHCP offer messages as unicast packets in the WiFi network. This is the default selection. • Disable.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Set bandwidth rate limits for a WiFi network You can set rate limits for the upload and download bandwidths for devices that are connected to a WiFi network. The minimum bandwidth rate is 64 Kbps, the maximum bandwidth rate is 1024 Mbps. You can set one rate for the upload bandwidth and another rate for the download bandwidth.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Specify the values: • Upload. For the upload bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. • Download. For the download bandwidth limitation, enter a value from 64 to 1024 and select Kbps or Mbps from the menu. 9. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A click-through captive portal is specific to the WiFi network (SSID) on which you set it up. To set up a click-through captive portal for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Specify the click-through settings as described in the following table. Setting Description Session Timeout (in Enter the time after which a WiFi session is terminated and a user must log in again. min) The period is in the range from 1 to 1440 minutes. The default is 60 minutes.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description JPEG/JPG Image (Max To customize the image that is displayed on the captive portal login page, click the 500KB) Browse button and navigate to and select an image. If you do not customize the image, the default image displays on the captive portal login page. EULA (Max 1KB) The field includes a default end user license agreement (EULA). You can enter or copy custom text into the field.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual You can apply an external captive portal to multiple WiFi networks or you can apply a unique external captive portal to each WiFi network To set up an external captive portal for a WiFi network: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Click the External Captive Portal radio button. 9. Specify the external captive portal settings as described in the following table.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Setting Description Splash Page URL Enter the URL that is provided by the vendor. This URL redirects a user to the splash page on the website that hosts the captive portal. Captive Portal The access point supports two types of external captive portal authentication. These Authentication Type types are mutually exclusive. Web/HTTP.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description Allow HTTPS Select one of the following radio buttons: • Enable. Before authentication occurs, secure HTTP (HTTPS) traffic is allowed to pass through. • Disable. This is the default setting. HTTPS traffic is allowed only after authentication occurs. Walled Garden The walled garden specifies the external applications and sites that a user can access from the captive portal.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To register and configure Facebook Wi-Fi for the access point: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Log in to the Facebook account with which the Facebook business page is associated. 9. From the Select a Page menu, select the Facebook business page. 10. Select one of the following bypass mode options: • To allow customers to skip check-in, select the Skip check-in link radio button. If you enable this option, users can either check in to the selected Facebook business page or skip the check-in.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, the Allow HTTPS Disable radio button is selected and clients that are connected to the Facebook captive portal cannot establish an HTTPS session until after the captive portal authentication occurs. 15. Click the Apply button. Your settings are saved. Set up a Facebook Wi-Fi captive portal for a WiFi network You can provide customers WiFi access by letting them check in to a Facebook business page.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The page adjusts. By default, the Click Through radio button is selected. 8. Select the Facebook Wi-Fi radio button. The page adjusts again because you do not need to specify any further settings on the page. Customers receive WiFi access by checking in to a Facebook business page. To use this option, first register the access point with Facebook Wi-Fi (see Register and configure Facebook Wi-Fi for the access point on page 83). 9.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic > Facebook Wi-Fi. The Facebook Wi-Fi page displays. 5. Select the No radio button. The capability to register is disabled. However, the access point’s entry on the Facebook business page is not yet removed. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual information about the advanced radio settings, see Manage the advanced WiFi settings for the radios on page 107. To manage the basic WiFi settings for the radios: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > Wireless > Basic > Wireless Settings. 5. Configure the settings as described in the following table. The descriptions in the table apply to all radios, but you can specify the radio settings for the 2.4 GHz, 5 GHz Low, and 5 GHz High radios individually.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Setting Description Turn Radio On By default, the Turn Radio On check box is selected and the radio broadcasts. Turning off a radio disables WiFi access for the band, which can be helpful during configuration, network tuning, or troubleshooting. Wireless Mode Select one of the following WiFi modes for the 2.4 GHz radio: • 11b. 802.11n, 802.11g, and 802.11b WiFi clients can connect to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description Guard Interval From the menu, select the value that protects radio transmissions from interference. An Auto guard interval (which is the default) improves performance, but some legacy devices can operate only with a long –800ns guard interval. The guard interval and channel width determine the available MCS index and data transmit rates.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To turn a radio on or off: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To change the WiFi mode for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • 5 GHz radio. Select one of the following WiFi modes for a 5 GHz radio (you can select a different mode each 5 GHz radio): - 11a. 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the access point. However, the speed of 802.11ac and 802.11na clients is limited to the maximum speed that is supported by 802.11a (about 54 Mbps). - 11na. 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To change the guard interval for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To change the output power for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Note: If you use multiple access points, reduce interference by selecting different channels for adjacent access points. We recommend a channel spacing of four channels between adjacent access points (for example, use Channels 1 and 5, or 6 and 10). To change the channel for a radio: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual QoS for a radio might impact the throughput and speed of WiFi traffic on the access point. To manage the QoS settings for a WiFi radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual flowing from WiFi devices to the access point and downstream traffic flowing from the access point to WiFi devices. WMM defines the following four queues in decreasing order of priority: • - Voice. The highest priority queue with minimum delay, which makes it very suitable for applications such as VoIP and streaming media. - Video. The second highest priority queue with low delay. Video applications are routed to this queue.
5 Manage the Advanced WiFi and Radio Features This chapter describes how you can manage the advanced WiFi and radio features of the access point. For information about the basic WiFi and radio settings, see Manage the Basic WiFi and Radio Features on page 52. Tip: If you want to change the settings of the access point’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Configure advanced rate selection for a WiFi network Advanced rate selection lets you improve the capacity of an individual WiFi network (as opposed to a radio, which affects all WiFi network on the radio) so that you can reach the optimal balance between the following components in the WiFi network: • Types of traffic (multicast, management, control, and data traffic) • Number and proximity of clients (the client density) • T
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual following interdependent components, which you cannot set individually precisely because they are interdependent: - Density: The density (the number and proximity) of clients in the WiFi network. (The density is one of the four components of the density level.) A setting of 0 means a very low client density. A setting of 4 means a very high client density.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select and add an SSID. 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Scroll down and click the Advanced Rate Selection tab. Note: For the selected SSID, you can specify the radio settings for the 2.4 GHz, 5 GHz Low, and 5 GHz High radio bands individually.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. To apply basic fixed multicast rates, from the Fixed Multicast Rate menu, select one of the following rates, depending on the radio band: • 2.4 GHz: 1, 2, 5.5, or 11 Mbps or Auto. (By default, Auto is 11 Mbps.) • 5 GHz Low: 6, 12, or 24 Mbps or Auto. (By default, Auto is 24 Mbps.) • 5 GHz High: 6, 12, or 24 Mbps or Auto. (By default, Auto is 24 Mbps.) 8.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Note: The help text in the local browser UI provides a table with detailed information about how the WiFi mode of a radio affects these components and how these components depend on each other. 10. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 256 QAM feature applies to the 2.4 GHz radio only and the MU-MIMO and 802.11h features apply to the 5 GHz radios only. Setting Description Max. Wireless Clients Enter the maximum number of WiFi clients that can simultaneously associate with the radio. The range is from 1 to 200. The default is 200 WiFi clients. RTS Threshold Enter the Request to Send (RTS) threshold. The range is from 256 to 2346.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description MU-MIMO By default, the MU-MIMO Enable radio button is selected and multiuser MIMO (MU-MIMO) is enabled. To disable MU-MIMO, select the MU-MIMO Disable radio button. 802.11ac Wave 2 supports MU-MIMO, which enables multiple users to receive data from the access point simultaneously using the same channel.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To manage the broadcast and multicast settings for a radio: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Manage sticky clients During roaming, sticky clients do not change to an access point with a better signal but remain associated with (that is, stick to) their initial access point, even though the quality of the connection to that access point is degraded. Such a situation causes delay for other clients that are associated with that access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Load Balancing page displays. 5. Either select or clear the Force Sticky Clients To Disassociate check box. Selecting the check box forces sticky clients to disassociate from a radio. Clearing the check box allows sticky clients to remain associated with a radio. 6. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual point. Clients with an RSSI below the defined minimum are rejected. Even though this is a global setting, it is implemented per radio. Note: If a client is rejected but persistently tries to associate with the access point, the access point grants access to that client. You can change the default settings for each type of load balancing, or completely disable one or more types of load balancing.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > Wireless > Advanced > Load Balancing. 5. To globally enable load balancing for the radios, select the Load Balancing Mode Enable radio button. The page adjusts and displays a slider for each type of load balancing and each radio. By default, load balancing is disabled. When you enable load balancing, all three types of load balancing are enabled.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • Based on Channel Receive Signal Strength. For each radio, move the associated slider to specify the minimum required RSSI value for an individual client, below which the radio does not accept the client association. For each radio, the minimum RSSI value is 1, the maximum value is 50, and the default value is 23. 8. Click the Apply button. A pop-up warning window opens. 9. Click the OK button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > Wireless > Advanced > Air Time Fairness. The Air Time Fairness page displays. 5. To enable Airtime Fairness for all radios, select the Enable radio button. By default, Airtime Fairness is disabled for all radios. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > Wireless > Advanced > ARP Proxy. The ARP Proxy page displays. 5. Select one of the following radio buttons • Enable. The ARP proxy is enabled. This is the default setting. • Disable. The ARP proxy is disabled.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25).
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual You can specify when the monthly counter resets or manually reset the counter. If the consumed data reaches a definable percentage of the profile data volume limit for an SSID, either the data is dropped for all WiFi clients of the SSID or those WiFi clients are disconnected. To set a data volume limit for the access point: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Select the Data Volume Limit check box. 6. In the Data Volume Limit Setup section, specify the following settings, which apply to SSIDs collectively, whether or not you set a data volume limit for an SSID in Step 7: a. Monthly limit. Enter the total monthly data volume limit in MB for the access point, that is, for all SSIDs collectively.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. In the SSID Profiles section, specify the following settings for any individual SSID for which you want to set a percentage of the total monthly data volume limit: a. No Data Volume Limit. To specify that the data volume limit applies to the SSID, clear the No Data Volume Limit check box for the SSID. If you leave the check box selected, no data volume limit applies to the SSID, which means that the SSID is assigned 100 percent.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. In the Data Volume Limit Policy on SSID Profile section, specify the following settings that apply to each individual SSID for which you set a profile data volume limit in Step 7: a. Pop-up a warning message. Specify the percentage of the profile data volume limit for an SSID that, if exceeded, causes a pop-up message to be displayed.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable the Traffic Analyzer: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A WiFi base station connects to the Internet, wired and WiFi clients can connect to the base station, and the base station sends its WiFi signal to one or more access points that function as WiFi repeaters. Wired and WiFi clients can also connect to a WiFi repeater, but the repeater connects to the Internet through the WiFi base station.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual radio band and use the other radio band for either client access or as a WiFi base station, dual-band concurrent mode is not affected. Before you can set up a WiFi network with WDS, your configuration must meet the following conditions: • Both access points must use the same WiFi channel and WiFi security settings. • Both access points must be on the same LAN IP subnet.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > Wireless Bridge. The page that displays lets you select a WDS profile (WDS 1, WDS 2, WDS 3, or WDS 4). 5. Click the > button to the left of a WDS profile. The WDS profile page displays. 6. Select the Band 2.4 GHz, 5 GHz Low, or 5 GHz High radio button. Your selection determines the radio band on which the WDS is established.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description Remote MAC Address The MAC address of the remote WDS radio interface, that is, the MAC address of the remote radio on which the WDS is established. Network By default, the selection from the menu is Open, in which case authentication and Authentication, Data data encryption are not applicable.
6 Manage Access and Security This chapter describes how you can manage access and security features and user accounts. The chapter includes the following sections: • • • • • Block specific URLs and keywords for Internet access Manage local MAC access control lists Manage user accounts Manage neighbor AP detection Set up RADIUS servers Note: For information about essential WiFi security (network authentication and encryption), see Set up an open or secure WiFi network on page 53.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Block specific URLs and keywords for Internet access You can set up a blacklist by specifying URLs (web addresses) for which Internet access must be blocked. You can also specify keywords that cause the access point to reject URLs that contain those keywords. To set up a blacklist with URLs and keywords for which Internet access must be blocked: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Select the Enable radio button. 6. Compose the blacklist in the following ways: • Blocked URLs. To add a URL to the blacklist, type or copy the URL in the upper field (to the left of the upper Add button) and click the upper Add button. You can also select one or more URLs from the Popular URL list by selecting the check boxes for the URLS and clicking the << Move button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Manage local MAC access control lists The access point supports eight local access control lists (ACLs) that are based on MAC addresses. Each local MAC ACL can contain a total number of 256 MAC addresses.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, these MAC ACLs are disabled and do not include any stations. You can manually add devices, import devices (see Import an existing MAC access control list on page 137), or do both. You can use a MAC ACL to control which WiFi devices (stations) can access a WiFi network. You can apply one MAC ACL to more than one WiFi network. To manually set up a MAC ACL: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Click the group name for the MAC ACL that you want to set up. The previous figure shows some examples. Devices in the Available Stations table are automatically detected by the access point and are common to all MAC ACLs, which allows you to add a device to more than one MAC ACL. A neighboring station displays as Neighbor and a connected station displays as connected. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 8. Compose the ACL in the following way: • • For an ACL for which you selected the Allow radio button in Step 7, do the following: - To manually add a device to the Trusted Stations table, enter the MAC address in the format 00-00-00-00-00-00 in the field below the Trusted Stations table, and click the Add button. The device is added to the Trusted Stations table.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual WiFi devices in the Trusted Stations table can access the WiFi network to which you apply the ACL. WiFi devices in the Untrusted Stations table cannot access the WiFi network to which you apply the ACL. Import an existing MAC access control list You can import an existing access control list (ACL) that is based on up to 256 MAC addresses.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Click the group name for the MAC ACL that you want to set up. The previous figure shows some examples. Devices in the Available Stations table are automatically detected by the access point and are common to all MAC ACLs, which allows you to add a device to more than one MAC ACL. A neighboring station displays as Neighbor and a connected station displays as connected. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 9. Import and compose the ACL in the following way: • For an ACL for which you selected the Allow radio button in Step 7, do the following: a. Replace or merge the MAC addresses in the import list with the MAC addresses in the Trusted Stations table (if any are already in the table) by selecting one of the following radio buttons: - Replace.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 10. Click the Apply button. Your settings are saved. For information about manually adding MAC addresses to those in the Trusted Stations table or Untrusted Stations table, see Manually set up a MAC access control List on page 133. For more information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 73.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > System > Advanced > User Accounts. 5.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Change the settings for a user account You cannot change the access privilege for the default admin user account. To change the user name, password, or access privilege for a user account: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Remove a user account You can remove a user account that you no longer need. You cannot remove the default admin user account. To remove a user account: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual in the Unknown AP List. You can add access points that you are familiar with to the Known AP List. You can also import a list of known access points in the Known AP List. CAUTION: Access points in the Unknown AP List require further investigation. They could be rogue access points, which use the SSID of a legitimate network. These types of access points can present a serious security threat.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Dashboard page displays. 4. Select Management > Configuration > Security > Neighbor AP. The page that displays lets you select the radio band (2.4 GHz, 5 GHz Low, or 5 GHz High). 5. Click the > button to the left of the radio band. The Neighbor AP page displays for the selected radio band. 6. Select the Enable Neighbor AP check box. 7. Click the Apply button. Your settings are saved. Neighbor AP detection is now enabled. 8.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 9. To move access points from the Unknown AP List to the Known AP List, do the following: a. Click the Unknown AP List tab. b. If no access points display, click the Refresh button. c. Select the check boxes for the access points that you are familiar with. d. Click the << Move to Known AP List button. e. Click the Known AP List tab. The selected access points display in the Known AP List.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual For information about enabling neighbor AP detection, see Enable neighbor access point detection and move access points to the Known AP List on page 144. To import a list with MAC addresses of known neighbor access points in the Known AP List: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Click the > button to the left of the radio band. 6. To download a sample of an AP list in the format that is required for importing in the Known AP List, click the Download Sample link. 7. Import and compose the Known AP List in the following way: a. Replace or merge the MAC addresses in the import list with the MAC addresses in the Known AP List by selecting one of the following radio buttons: • Replace.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Set up RADIUS servers If you use WPA2 Enterprise security or a RADIUS MAC ACL, you must set up RADIUS servers for authentication, accounting, or both authentication and accounting using RADIUS. You must set up primary IPv4 servers and you can set up secondary IPv4 servers.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > Security > RADIUS Settings. 5. For each RADIUS server that you want to set up, configure the following settings: • IPv4 Address. Enter the IPv4 address of the RADIUS server. The access point must be able to reach this IP address. • Port. Enter the number of the UDP port on the access point that is used to access the RADIUS server.
7 Manage the Local Area Network and IP Settings This chapter describes how you can manage the local area network (LAN) and IP settings of the access point. The chapter includes the following sections: • • • • • • • • • • • • Disable the DHCP client and specify a fixed IP address Enable the DHCP client Set the 802.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Disable the DHCP client and specify a fixed IP address By default, the DHCP client of the access point is enabled and the access point receives an IP address from a DHCP server (or a router that functions as a DHCP server) in your network. If your network does not include a DHCP server or you prefer to specify a fixed (static) IP address, disable the DHCP client of the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. Select the Disable radio button. 6. Specify the settings that are described in the following table. Setting Description IP Address IP address in the range that is used by your LAN (usually 255.255.255.0). Subnet Mask The subnet mask must be compatible with your LAN. Gateway IP address of the gateway on your LAN. Primary DNS IP address of the primary Domain Name System (DNS) server on your LAN.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable the DHCP client: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Your settings are saved. The access point restarts with the new IP settings. It might take a while before the access point receives its IP address setting from the DHCP server. Set the 802.1Q VLAN and management VLAN The 802.1Q VLAN protocol on the access point logically separates traffic on the same physical (wired) network. This protocol can work with tagged and untagged VLANs, as follows: • Untagged VLAN.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > IP > LAN. 5. To change the 802.1Q VLAN, either clear or select the Untagged VLAN check box: • Untagged VLAN. By default, the Untagged VLAN check box is selected. The access point sends untagged frames from its Ethernet interface.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Specify an existing domain name You can specify an existing fully qualified domain name (FQDN) for the access point so that you can access the access point by using a domain name instead of an IP address. The FQDN must be a domain name that is registered with a Domain Name System (DNS) provider. The following are the requirements for the FQDN: • The length can be from 1 to 64 characters.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > IP > LAN. 5. In the Fully Qualified Domain Name field, specify the FQDN. 6. Click the Apply button. Your settings are saved. The access point attempts to resolve the FDQN to an IP address. Manage port VLANs A virtual LAN (VLAN) is a local area network (LAN) that maps devices on a basis other than geographic location, for example, by department, type of user, or primary application.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • Decide whether an access point port must be a tagged member or an untagged member of the VLAN: - Tagged member. A port is tagged for a VLAN when traffic that leaves the access point through that port includes an IEEE 802.1Q header with that VLAN’s numerical identifier (VLAN ID) on it. - Untagged member. If a port is an untagged member of a VLAN, the access point removes the existing 802.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > Wired > VLAN. The VLAN page displays. The Wired VLAN(s) table shows the port VLAN profiles. The default VLAN is VLAN 1, which includes all ports as members. The Wireless VLAN(s) table shows the WiFi VLAN profiles.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To change a port VLAN profile: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Remove a port VLAN profile You can remove a port VLAN profile from the access point. You cannot remove the default port VLAN profile. To remove a port VLAN profile: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual mode for a port that is connected to an end device such as a printer, media device, or computer. When a port that functions in access mode receives data that is untagged, the data is delivered normally. When a port that functions in access mode receives data that is tagged for a VLAN other than the one the port belongs to, the data is discarded. • Trunk mode.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25).
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable Spanning Tree Protocol: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable the network integrity check function: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable IGMP snooping: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable the LLDP: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable UPnP: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual procedure) . Also by default, the link aggregation capability is disabled on the access point, but you can enable it (see the following procedure). You also must configure link aggregation on the switch. Figure 8. Link aggregation connection You can set up a static link aggregation connection between the access point and a switch by doing the following: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25).
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To disable the link aggregation capability on the access point and change the LAN 2 port to access mode: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Your settings are saved.
8 Manage and Maintain the Access Point This chapter describes how you can manage and maintain the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Change the management mode to NETGEAR Insight or Web-browser The access point can function in one of the following management modes: • NETGEAR Insight mode. For NETGEAR Insight Premium and Insight Pro subscribers, you can manage the access point remotely from a mobile device on which the NETGEAR Insight app is installed or through the Insight Cloud portal. The NETGEAR Insight mode is the default setting.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Change the country or region of operation You can change the country or region in which the access point operates. Note the following: • Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The pop-up window closes and your settings are saved. The access point restarts with the default WiFi settings that are specific to the selected country or region. Change the admin user account password This admin user account password is the password that you must use to log in to the local browser interface of the access point with the user name admin. (It is not the passphrase that you use for WiFi access.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. Click the Apply button. Your settings are saved. The next time that you log in to the access point, you must use the new password. If you forget the new password, you must reset the access point to factory default settings. Doing so restores the password to the default password. Change the system name The system name is a unique NetBIOS name for the access point. The default system name is located on the access point label.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • The name cannot start or end with a hyphen. • The name must contain at least one alphabetical character. 6. Click the Apply button. Your settings are saved. Specify a custom NTP server By default, the access point receives its time from a default NETGEAR Network Time Protocol (NTP) server, but you can also specify a custom NTP server. To specify a custom NTP server: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, the Enable radio button is selected and the access point receives its time from a default NETGEAR NTP server. 5. Select the Use Custom NTP Server check box. 6. Take one of the following actions: • Enter the host name of the NTP server. By default, the Hostname radio button is selected. • Select the IP address radio button and enter the IP address of the NTP server. 7. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Configuration > System > Basic > Time. The page that displays lets you change the time settings. 5. From the Time Zone menu, select the time zone for the area in which the access point operates. 6. Click the Apply button. Your settings are saved.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Configuration > System > Advanced > Syslog. 5. Specify the IP address and port number for the syslog server: • Syslog Server IP Address. Enter the IP address of the syslog server on your network. • Port Number. Enter the port number at which the syslog can be reached. By default, the port number is 514. 6. To enable the syslog server function, select the Enable Syslog check box. 7.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual With this mode, if new firmware is available, you must either download it to your computer and then upload it to the access point or upload it from an SFTP server to the access point.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual WARNING: To avoid the risk of corrupting the firmware, do not interrupt the upgrade. For example, do not close the browser, click a link, or load a new page. Do not turn off the access point. Wait until the access point finishes restarting and the Power/Cloud LED remains solid green. The firmware upgrade process takes several minutes. When the upgrade is complete, your access point restarts. 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 5. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Revert to the backup firmware After you upgrade the access point to new firmware, the old firmware is saved as backup firmware so that you can revert to it.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual IMPORTANT: When you revert to the backup firmware, the configuration of the access point is reset (cleared) with the exception of the IP address, access point name, and password for the local browser interface. The access point restarts and broadcasts SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal digits of the access point’s MAC address. The MAC address is listed on the product label.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade page displays. 5. From the Upgrade Options menu, select SFTP. 6. Specify the following server settings: • Firmware File. The name of the access point firmware file on the SFTP server.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Note: The backup file is saved in a binary format so that it is protected and cannot be opened by a regular application. To back up the access point’s configuration settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The name of the backup file is WAC540-WAC540-dd-mm-yy_hh-mm-ss-config.tar, in which dd is the date, mm is the month, yy is the year, hh is the hour (in 24-hour format), mm is the minutes, and ss is the seconds. An example of a name of a backup file is WAC540-WAC540-03-01-19_18-55-52-config.tar. 8. Follow the directions of your browser to save the file.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 6. Click the Restore button. A pop-up window opens. 7. Enter the password that you specified when you saved the backup file, and click the Continue button. 8. Click the Restore button. The pop-up window closes and the configuration is uploaded to the access point. When the restoration is complete, the access point reboots. This process takes about two minutes.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight App on page 25). The Dashboard page displays. 4. Select Management > Maintenance > Reset > Reboot AP. The Reboot AP page displays. 5. Click the Reboot AP button. A pop-up warning window opens. 6. Click the Reboot button. The pop-up window closes and the access point reboots, which takes about one minute.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Reboot AP page displays. 5. Click the Enable Scheduled Reboot button so that the button displays blue. The scheduling controls display. 6. Select the check box for the day on which you want the access point to reboot. You can select multiple days. 7. Using the Start Time menus, specify the hour and minutes for the time at which the access point must reboot. Specify the hour in 24-hour format. 8. Click the Apply button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Use the Reset button to reset the access point You can use the Reset button to return the access point to its factory default settings. However, if you added the access point to a NETGEAR Insight network location, you must first use the Insight app or Insight Cloud portal to remove the access point from the Insight network location before the factory default settings function of the Reset button is available.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Use the local browser interface to reset the access point You can use the access point’s local browser interface to return the access point to its factory default settings. CAUTION: This process erases all settings that you configured in the access point. To erase the settings: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Enable SNMP and manage the SNMP settings You can access the access point over a Simple Network Management Protocol (SNMP) connection, which allows SNMP network management software such as HP OpenView to manage the access point by using the SNMPv1 or v2 protocol. By default, SNMP is disabled. To enable SNMP and manage the SNMP settings: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual By default, SNMP is disabled. 6. Specify the following settings: • Read-Only Community Name. The community string that allows the SNMP manager to read the access point’s MIB objects. The default is public. • Read-Write Community Name. The community string that allows the SNMP manager to read and write the access point’s MIB objects. The default is private. • Trap Community Name.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual To enable or disable the LEDs: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning.
9 Monitor the Access Point and the Network This chapter describes how you can monitor the access point and the network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual View the access point Internet, IP, and system settings To view the access point, Internet, IP, and system settings: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (If the page width on your device is narrow, these panes might be located elsewhere on the Dashboard.) • • Connection Status Information pane. The Connection Status Information pane is in the top, left corner of the Dashboard (if the page width on your device is sufficient; otherwise, it might be elsewhere) and displays the following: - Status of the connection to the NETGEAR Insight cloud-based management platform, if any.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The page shows four sections: • System Information section. The following settings are displayed: - System Name. The access point NetBIOS name. - System Mode. The access point system mode (AP). - Lan 1 MAC Address. The MAC address of the LAN 1 Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz. The MAC address of 2.4 GHz WiFi interface (radio) of the access point. - Wireless MAC Address for 5 GHz Low.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual - Bootloader Version. The primary bootloader (U-Boot) version that is installed on the access point. - Serial Number. The serial number of the access point. - Current Time. The current system time of the access point. - Uptime. The time since the access point was last restarted. • AP Interface Status. A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight app or Insight Cloud portal, enter the Insight network password for that location.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 6. To view more detailed information, select Management > Monitoring > System. The page shows four sections: • System Information section. The following settings are displayed: - System Name. The access point NetBIOS name. - System Mode. The access point system mode (AP). - Lan 1 MAC Address. The MAC address of the LAN 1 Ethernet port of the access point. - Wireless MAC Address for 2.4 GHz. The MAC address of 2.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual - Bootloader Version. The primary bootloader (U-Boot) version that is installed on the access point. - Serial Number. The serial number of the access point. - Current Time. The current system time of the access point. - Uptime. The time since the access point was last restarted. • AP Interface Status. A green icon indicates that the interface is in use. A gray icon indicates that the interface is not in use.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A login window opens. If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 6. To view the Known AP list, click the Known AP tab. At the top of the page, for each radio band, the page states the total number of known access points. 7. To display the most recent known access points, click the Refresh button. View client distribution, connected clients, and client trends To view the clients that are connected to the access point over WiFi: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Locate the Client Distribution pane (shown on the left side in the following figure) and the Recent Clients pane (shown on the right side). The Client Distribution pane shows the types of clients (Windows, Mac, iOS, Android, Linux, and other operating systems) and how these clients are distributed over the networks. (By default, the Network button is selected.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual shows the trend for the last 2 hours.) By default, the client information is selected (that is, the Client button is selected) and the graph shows the total number of clients for all radios and the number of clients for each radio (2.4 GHz, 5 GHz Low, and 5 GHz High). You can also click the Traffic button or the Channel Utilization button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual • BSSID. The BSSID that the client connects to. • SSID. The SSID of the radio that the client connects to. • Channel. The channel that the client connects to. • Channel Width. The width of the channel that the client connects to. • Tx Rate. The rate of traffic transmission of the client. • Rx Rate. The rate of traffic reception of the client. • RSSI. The RSSI threshold value of the client. • Tx Bytes.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization To view WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization: 1. Launch a web browser from a computer that is connected to the same network as the access point or directly to the access point through an Ethernet cable or WiFi connection. 2. Enter the IP address that is assigned to the access point. A login window opens.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 5. To view traffic information, do the following: a. Click the Traffic button. The graph shows the information for Ethernet traffic, total WiFi traffic, WiFi traffic for the 2.4 GHz radio, WiFi traffic for the 5 GHz Low radio, and WiFi traffic for the 5 GHz High radio. b. To view more information, point to a node on one of the lines on the graph. 6. To view channel utilization, do the following: a.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual also displays the number of clients that are associated with each radio. If the LAG is disabled, the page does not show (LAG Enabled). If the ARP proxy is enabled (see Manage the ARP proxy on page 118), the page also displays the ARP statistics, including the number of proxied and dropped packets. 9. To display the most recent information, click the Refresh button.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Monitoring > URL Tracking. By default, the table shows the URLs that were accessed, each with the MAC address of the WiFi client that accessed the URL, the associated SSID, and the number of times that the WiFi client accessed the URL. 5. To view additional information, click the … link to the right of a MAC address or SSID. 6. To view URL tracking information by WiFi client, do the following: a.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 7. To view URL tracking information by SSID, do the following: a. From the menu, select SSID. The table shows the SSIDs and the first URL of the list of URLs that were accessed on the SSID. b. To view all URLs that were accessed on the SSID, click the … link to the right of the first URL. A pop-up window opens and displays all URLs that the were accessed on the SSID. c. Click the Close button. The pop-up window closes. 8.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual WARNING: After you clear the log entries, you can no longer save or download them. 8. To clear the log entries, click the Clear button. View a WiFi bridge connection You can view whether a WiFi bridge is established and view the function (master or slave), MAC addresses, and IP addresses of the access points that form the WiFi bridge. To view a WiFi bridge connection: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual View the data volume consumption If you enabled data limits for one or more WiFi networks (see Set a data volume limit for the access point on page 120), you can view the data volume consumption and volume status details. To view the data volume consumption and volume status details: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual At the top, the page states the start date and time of the data volume counter, the current date and time, and the total volume that is left in relation to the data volume limit that you set. For each SSID, the table shows the allocated data (which is the allocated SSID percentage of the total monthly data volume limit that you set), the uploaded and downloaded data, and the total data consumption. 5.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Monitoring > Air Time Fairness. The Air Time Fairness page displays. 5. From the menu at the top left on the page, select the radio band for which you want to view the client distribution and associated performance. The graph shows the performance for the connected WiFi clients. (The previous figure shows multiple clients connected in the 5 GHz High radio band.) 6.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual of activity, and the number of WiFi clients. You can drill down to more details by viewing the WiFi clients for each application. In addition, for each WiFi client, you can view the host name, MAC address, IP address, traffic usage, usage percentage, the volume of uploaded and downloaded data (traffic), and the period of activity. To view the data volume consumption and volume status details: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Monitoring > Traffic Analysis. The pie chart graphic represents the traffic analysis of the top ten applications by data usage. For each application, the table displays the following information: • Application name. The name of the application that is used by at least one client. • Traffic usage. The total amount of traffic that is used by the application. • Percent usage.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The page adjusts to display application details. For each client, the table displays the following information: • Host name. The host name of the client. • MAC address. The MAC address of the client. • IP Address. The IP address that is associated with the client. • Traffic usage. The total amount of traffic that is used by the client for the application. • Upload/Download traffic.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The icon shows a number, indicating the total number of new alarms and notifications since the last time that you viewed alarms and notifications. 5. Click the alarm bell icon. The pop-up window shows the alarms (indicated by a red bell) and notifications (indicated by a blue bell) with a description and time. 6. To view more alarms and notification, scroll down in the pop-up window.
10 Diagnostics and Troubleshooting This chapter describes how you can capture WiFi packets and troubleshoot the access point and network.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Capture WiFi and Ethernet packets You can capture WiFi and Ethernet packets that are received and transmitted by the access point and save the file with captured packets to your computer. During the packet capture process, normal functioning of the access point is not affected.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual 4. Select Management > Diagnostics > Packet Capture. 5. Specify the settings that are described in the following table. Setting Description Capture Interface From the Capture Interface menu, select one of the following interfaces on which packets must be captured: • brtunk. All packets are captured, that is, packets on the Ethernet interfaces, 2.4 GHz radio, 5 GHz low band radio, and 5 GHz high band radio.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual (Continued) Setting Description Client Filter To capture packets for a specific client only, select the Client Filter check box and enter the client’s MAC address in the Client Filter MAC Address field. Client Filter MAC If you select the Client Filter check box, enter the client’s MAC address to capture Address the packets only for the specific client on the selected interface.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If your browser does not display the login window but displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 43. 3. Enter the access point user name and password. The user name is admin. The password is the one that you specified. The user name and password are case-sensitive.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The results of the ping test display in the Ping Result field. 7. To stop the ping test before the ping count is reached or if the ping times out, click the Stop button. Check the Internet speed You can check the Internet speed of the access point. The results might be helpful if you want to set bandwidth rate limits (see Set bandwidth rate limits for a WiFi network on page 75). To check the Internet speed: 1.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual A table shows the results of previous tests. Quick tips for troubleshooting If your network is unresponsive or does not function normally, restart your network: 1. Unplug the Ethernet cable from the access point to your network switch. 2. If you use a power adapter, disconnect it from the access point. 3. Plug in the Ethernet cable from the access point to your network switch. Wait two minutes. 4.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If you cannot connect over an Ethernet cable to the access point, try the following: • Make sure that the Ethernet cables are securely plugged in. • Make sure that your network includes a DHCP server that can issue an IP address to the access point or, if your access point requires a fixed (static) IP address, that the IP address and subnet are correct.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Power/Cloud LED is off If you use a Power over Ethernet (PoE) connection and the Power/Cloud LED and other LEDs are off when the Ethernet cables are connected, do the following: • Make sure that the Ethernet cable between the access point and the PoE switch is correctly connected at both ends. • Make sure that the other end of the Ethernet cable is plugged into a PoE port on a PoE switch that is receiving power.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Power/Cloud LED is blinking amber slowly, continuously When you turn on the power to the access point, the Power/Cloud LED lights solid amber temporarily and then turns solid green or solid blue, indicating that the startup procedure is complete and the access point is ready. During regular operation, the only time that the Power/Cloud LED blinks amber temporarily is when firmware is being upgraded.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Power/Cloud LED does not light blue in the NETGEAR Insight management mode If the access point functions in the Web-browser management mode, the Power/Cloud LED lights green. This is normal LED behavior. However, if the access point functions in the NETGEAR Insight management mode and the Power/Cloud LED does not light blue but remains green, the access point is not connected to the Insight cloud-based management platform.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If the Power/Cloud LED does not stop blinking red, green, and blue, the extender access point cannot connect. Check the following items or try the following troubleshooting steps: • Make sure that at least one root access point is available for the extender access point to connect to. • Make sure that all root access points run the latest firmware version.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If the LAN 1 LED or LAN 2 LED remains off, a hardware connection problem might be occurring. Check these items: • Make sure that the Ethernet cable connectors are securely plugged in at the access point and the network device. • Make sure that the connected network device is actually turned on. • Make sure that you are using the correct Ethernet cable. Use a standard Category 5 Ethernet patch cable.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual The Power/Cloud LED lights as follows during the initial connection and configuration process: • Blinks green. The Power/Cloud LED blinks green while the extender access point is attempting to detect a root access point. • Solid green. The Power/Cloud LED lights solid green while the extender access point is making its first connection with the root access point that provides the strongest WiFi signal. • Blinks amber.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Troubleshoot the WiFi connectivity If you are experiencing trouble connecting over WiFi to the access point, try to isolate the problem: • Make sure that the WiFi settings in your WiFi device and access point match exactly. For a device that is connected over WiFi, the WiFi network name (SSID) and WiFi security settings of the access point and WiFi device must match exactly.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If you manually entered a DNS address when you set up the access point (that is, the access point uses static IP address settings), reboot your computer and verify the DNS address. Alternatively, you can configure your computer manually with DNS addresses, as described in your operating system documentation. • Your computer might not use the correct TCP/IP settings.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Changes are not saved If you are logged in to the access point’s local browser interface and the access point does not save the changes that you make on a page, do the following: • When entering configuration settings, always click the Apply button before moving to another page or tab or your changes are lost. • Click the Refresh or Reload button in the web browser.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual if you enter the wrong password twice but enter the correct password at the third login attempt, the two failed login attempts are erased from memory after 30 minutes. • If the number of failed login attempts is larger than the number of allowed retry attempts, the counter for failed login attempts is reset after 24 hours.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual If the path is not functioning correctly, one of the following problems might be occurring: • Wrong physical connections For a wired connection, make sure that the numbered LAN LED is lit for the port to which you are connected. Check that the appropriate LEDs are on for your network devices.
A Factory Default Settings and Technical Specifications This appendix includes the following sections: • • Factory default settings Technical specifications 246
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Factory default settings You can reset the access point to the factory default settings, which are shown in the following table. For more information about resetting the access point to its factory settings, see Return the access point to its factory default settings on page 194. Table 3.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 3. Factory default settings (Continued) Feature Default Setting Security WPA2 Personal (which is WPA2-PSK) WiFi password (network key): sharedsecret RF channel Auto. The available channels depend on the region. WLAN settings for an individual WiFi network (SSID or VAP) WiFi communication The 2.4 GHz radio and both 5 GHz radios are enabled.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 3. Factory default settings (Continued) Feature Default Setting Channel Auto WiFi schedule None Wi-Fi Multimedia (WMM) Enabled WMM powersave Enabled Advanced WiFi settings for all WiFi networks (SSIDs or VAPs) Number of WiFi clients Default: 200 per radio Maximum: 200 per radio Beacon interval 100 millisec. 802.11n 256 QAM Disabled for the 2.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Technical specifications The following table shows the technical specifications of the access point. Table 4. Technical specifications Feature Description Supported WiFi radio frequencies and WiFi modes 2.4 GHz band: 802.11ng, 801.11bg, and 802.11b 5 GHz band: 802.11ac, 802.11na, and 802.11a Supports 2.
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 4. Technical specifications (Continued) Feature Description Power over Ethernet If you do not use a power adapter, the PoE port requires 802.3at (PoE+) power but can also function with 802.3at (PoE) power. We recommend that you use 802.3at (PoE+) power. PoE might be considered a network environment 0 per IEC TR 62101, and thus the interconnected ITE circuits might be considered safety extra low voltage (SELV).
Insight Managed Smart Cloud Wireless Access Point AC3000 WAC540 User Manual Table 4.
