ProSAFE Dual Band Wireless N Access Point WNDAP350 Reference Manual October, 2015 202-10534-03 350 East Plumeria Drive San Jose, CA 95134 USA
ProSAFE Dual Band Wireless N Access Point WNDAP350 Support Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Contact your Internet service provider for technical support. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Contents Chapter 1 Introduction About the ProSAFE Dual Band Wireless N Access Point WNDAP350 . . . . . . . . . 7 Key Features and Standards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Supported Standards and Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 802.11a/b/g/n Standards-Based Wireless Networking . . .
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configuring WPA-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configuring WPA2-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configuring WPA-PSK and WPA2-PSK . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Restricting Wireless Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Dual Band Wireless N Access Point WNDAP350 Appendix A Command Line Reference Appendix B Default Settings and Technical Specifications Factory Default Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. 1 Introduction This chapter describes some of the key features of the ProSAFE Dual Band Wireless N Access Point WNDAP350. It also includes the minimum prerequisites for installation, package contents, and a description of the front and back panels of the WNDAP350.
ProSAFE Dual Band Wireless N Access Point WNDAP350 About the ProSAFE Dual Band Wireless N Access Point WNDAP350 The ProSAFE Dual Band Wireless N Access Point WNDAP350 is the basic building block of a wireless LAN infrastructure. It provides connectivity between Ethernet wired networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • DHCP Client Support. DHCP provides a dynamic IP address to PCs and other devices upon request. The WNDAP350 can act as a client and obtain information from your DHCP server; it can also act as a DHCP server and provide network information for wireless clients. • SNMP Support. Support for Simple Network Management Protocol (SNMP) Management Information Base (MIB) management. • 802.1Q VLAN (Virtual LAN) Support.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Hidden Mode. The SSID is not broadcast, assuring only clients configured with the correct SSID can connect. • Secure Telnet Command Line Interface. The secure Telnet command line interface enables direct secure access over the serial port and easy scripting of configuration of multiple WNDAP350s across an extensive network via the Ethernet interface. An SSH client is required. • Configuration Backup.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Autosensing Ethernet Connections With Auto Uplink The WNDAP350 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point incorporates Auto UplinkTM technology. The Ethernet port will automatically sense whether the Ethernet cable plugged into the port should have a normal connection such as to a computer or an uplink connection such as to a switch or hub.
ProSAFE Dual Band Wireless N Access Point WNDAP350 System Requirements Before installing the WNDAP350, make sure your system meets these requirements: • A 10/100/1000 Mbps Local Area Network device such as a hub or switch • The Category 5 UTP straight through Ethernet cable with RJ-45 connector included in the package, or one like it • A 100-240 V, 50-60 Hz AC power source • A Web browser for configuration such as Microsoft Internet Explorer 5.0 or above, or Mozilla 3.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Hardware Description This section describes the front and rear hardware functions of the WNDAP350. Front Panel The WNDAP350 front hardware functions are described below. 1 4 3 2 5 Figure 1. The following table explains the LED indicators: Table 1. Front Panel LED Indicators Item LED DESCRIPTION 1 PWR/TEST Power Indicator 2 3 Off No power. On Power is on. Blink Indicates self test, loading software, or system fault (if continues).
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 1. Front Panel LED Indicators (continued) Item LED DESCRIPTION 4 802.11na WLAN Wireless LAN Link Activity Indicator (5 GHz) 5 Off Indicates WLAN 802.11n/a (5GHz) mode is disabled. Blink (Green) Indicates Wireless data traffic in 5GHz modes. 802.11ng WLAN Wireless LAN Link Activity Indicator (5 GHz) Off Indicates WLAN 802.11b/g (5GHz) mode is disabled. Blink (Green) Indicates Wireless data traffic in 2.4GHz modes.
2. 2 Basic Installation and Configuration This chapter describes how to set up your ProSAFE Dual Band Wireless N Access Point WNDAP350 for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN. Note: Indoors, computers can connect over 802.11b/bg/ng or 802.11a/na wireless networks at ranges of several hundred feet or more.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Configuring WPA2 with RADIUS • Configuring WPA and WPA2 with RADIUS • Configuring WPA-PSK • Configuring WPA2-PSK • Configuring WPA-PSK and WPA2-PSK • Restricting Wireless Access by MAC Address Basic Installation and Configuration 15
ProSAFE Dual Band Wireless N Access Point WNDAP350 What You Need to Establish a Connection Through Your Wireless Access Point You need to prepare these three things before you can establish a connection through your wireless access point: • A location for the WNDAP350 that conforms to the Wireless Equipment Placement and Range Guidelines below. • The wireless access point connected to your LAN through a device such as a hub, switch, router, or cable/DSL gateway.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Understanding WNDAP350 Wireless Security Options Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WNDAP350 wireless access point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs. Figure 3.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Installing the WNDAP350 Wireless Access Point Before installing the ProSAFE Dual Band Wireless N Access Point WNDAP350, you should make sure that your Ethernet network is up and working. You will be connecting the access point to the Ethernet network so that computers with 802.11b/g/n or 802.11a/n wireless adapters will be able to communicate with computers on the Ethernet network.
ProSAFE Dual Band Wireless N Access Point WNDAP350 3. Click Login. The main menu of the WNDAP350 displays as shown in Figure 5, Access Point Name and Country / Region. • When the wireless access point is connected to the Internet, under the Support tab, select Documentation to view the documentation for the wireless access point. • On the top-right of the screen, select Logout to exit the WNDAP350 setup screens.
ProSAFE Dual Band Wireless N Access Point WNDAP350 outbound traffic to be tagged with this VLAN ID. However, if their VLAN ID is same as the Untagged VLAN ID, then the outbound traffic is not tagged. There can be only one Management VLAN. The default is 1. 8. Select Time from the left panel. The Time screen displays, as shown in Figure 6, Time zone and system time related settings. Figure 6. Time zone and system time related settings 9. Enter the Time Settings for your area.
ProSAFE Dual Band Wireless N Access Point WNDAP350 11. Configure the IP Address settings appropriate for your network. The default values are suitable for most users and situations. (See the online help or Setting Basic IP Options on page 24 for more information about how to configure the settings on this screen. 12. Click Apply. Configuring Time Settings To configure your time settings: 1. Under the Configuration tab, select System from the main menu, select Basic, and then select Time.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configuring Wireless Access To configure your wireless settings for 11b/bg/ng and 11a/na: 1. From the main menu under Configuration, select Wireless. The Wireless Settings screen displays, as shown in Figure 9, Basic Wireless Settings for 802.11b/bg/ng. 2. Enter the wireless settings for your area. See the online help or Wireless Settings on page 25. 3. Click Apply to save your settings. Figure 9. Basic Wireless Settings for 802.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Note: By default, WNDAP350 is set with the DHCP client disabled. If your network uses dynamic IP addresses, you must change this setting. To connect to the WNDAP350 after the DHCP server on your network assigns it a new IP address, enter the wireless access point name into your Web browser. The default wireless access point name is netgearxxxxxx, where xxxxxx represents the last 6 bytes of the MAC address.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 10. Connecting to the Access Point 3. Click Login. Your Web browser should automatically find the WNDAP350 wireless access point and display the home screen. Setting Basic IP Options The basic IP settings for your wireless access point are entered on this screen. Most of the default settings will work in most cases.
ProSAFE Dual Band Wireless N Access Point WNDAP350 2. Enter the IP Address fields of the WNDAP350. • DHCP Client. By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled. If you have a DHCP server on your LAN and you enable DHCP, the wireless access point will get its IP address, subnet mask and default gateway settings automatically from the DHCP server on your network when you connect the WNDAP350 to your LAN. • IP Address. Enter the IP Address of your wireless access point.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 12. Configure wireless settings 802.11b/bg/ng 2. Configure the Wireless LAN settings based on the following field descriptions: • Wireless Mode. Select the desired wireless operating mode. The default is 11ng. The options are: - 11b. All 802.11b wireless stations can be used. (The 802.11g wireless stations can still be used if they can operate in 802.11b mode.) - 11bg. Both 802.11b and 802.11g wireless stations can be supported. - 11ng.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Channel/Frequency. From the pull-down menu, select the channel you wish to use on your wireless LAN. The wireless channel in use will be between 1 to 11 for US and Canada, 1 to 13 for Europe and Australia. The default is channel Auto. It should not be necessary to change the wireless channel unless you experience interference (shown by lost connections and/or slow data transfers).
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Guard Interval. From the pull-down menu, select the desired guard interval. The guard interval protects from interference from other transmissions. The default is Auto. • Output Power. From the pull-down menu, select the transmit power of the access point. The options are Full, Half, Quarter, Eighth, and Minimum. Decrease the transmit power if two or more APs are close together and use the same channel frequency. The default is Full.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Turn Radio On. On by default, you can also turn off the radio to disable access through this device. This can be helpful for configuration, network tuning, or troubleshooting activities. • Wireless Network Name (SSID). This is the name of your wireless network. It is set to the default name of NETGEAR_11a for 802.11a/na and NETGEAR_11g for 802.11b/bg/ng modes. • Broadcast Wireless Network Name (SSID).
ProSAFE Dual Band Wireless N Access Point WNDAP350 - Data Rates for Channel Width=20MHz and Guard Interval=long (800ms). Best, 6.5 Mbps, 13 Mbps, 19.5 Mbps, 26 Mbps, 39 Mbps, 52 Mbps, 58.5 Mbps, 65 Mbps, 13 Mbps, 26 Mbps, 39 Mbps, 52 Mbps, 78 Mbps, 104 Mbps, 117 Mbps, 130 Mbps - Data Rates for Channel Width=40MHz and Guard Interval=short.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 14. Basic QoS settings screen 2. Wi-Fi Multimedia (WMM) is enabled by default. Select the Disable radio button to disable WMM support. 3. WMM Power Save is enabled by default. Select the Disable radio button to disable WMM power save. 4. Click Apply to save your settings Setting Up and Testing Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity.
ProSAFE Dual Band Wireless N Access Point WNDAP350 5. Click Apply to save any changes. 6. Under the Configuration tab, select Security from the main menu, and then select your network Security Profile settings, either Security Profile settings 11b/bg/ng or Security Profile settings 11a/na.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 15. Security Profile Settings An overview of the information that is required to set up a Security Profile follows, including a description of the Network Authentication choices that are available: • Profile Definition. Configure the following settings: - Security Profile Name. Use a name that makes it easy to recognize the profile, and to tell profiles apart. (The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on.
ProSAFE Dual Band Wireless N Access Point WNDAP350 You can configure the WNDAP350 to use the types of network authentication shown in the table below. Table 2. Network Authentication Types Typea Description Open System Can be used with WEP encryption or no encryption. Shared Key You must use WEP encryption and enter at least one shared key. Legacy 802.1x You must configure the RADIUS Server Settings to use this option.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 3. Data Encryption Settings - Data Encryption Type Description AES This is the standard encryption method for WPA2. TKIP + AES This setting supports both WPA and WPA2. Broadcast packets use TKIP. For unicast (point-to-point) transmissions, WPA clients use TKIP, and WPA2 clients use AES. The use of passphrases and keys is explained below: • Passphrase.
ProSAFE Dual Band Wireless N Access Point WNDAP350 SSID and WEP/WPA Settings Setup Form 802.11b/bg/ng Configuration For a new wireless network, print or copy this form and fill in the configuration parameters. For an existing wireless network, the person who set up or is responsible for the network will be able to provide this information. Be sure to set the Regulatory Domain correctly as the first step. • SSID. The Service Set Identification (SSID) identifies the wireless local area network.
ProSAFE Dual Band Wireless N Access Point WNDAP350 802.11a/na Configuration For a new wireless network, print or copy this form and fill in the configuration parameters. For an existing wireless network, the person who set up or is responsible for the network will be able to provide this information. Be sure to set the Regulatory Domain correctly as the first step. • SSID. The Service Set Identification (SSID) identifies the wireless local area network. NETGEAR_11a is the default WNDAP350 SSID.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configuring the RADIUS Server Settings You can setup or modify the RADIUS Server settings to compliment Network Authentication security options. The RADIUS Server must be used with Legacy 802.1x, and can be used with WPA and WPA2 Network Authentication.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • - Port Number. The port number of the RADIUS Server. The default is 1812. - Shared Secret. This is shared between the Wireless Access Point and the RADIUS Server while authenticating the supplicant (wireless client). Accounting Server. This configuration is required for accounting using a RADIUS Server. The IP Address, Port Number, and Shared Secret are required for communication with the Primary RADIUS Server.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure a Security Profile: 1. From your Web browser, log in to the WNDAP350 using the default LAN address of http://192.168.1.1, user name admin and password password, or use the LAN address and password that you set up. 2. Under the Configuration tab, select Security from the main menu, and then select either Security Profile Settings for 802.11b/bg/ng or 802.11a/na.
ProSAFE Dual Band Wireless N Access Point WNDAP350 8. Wireless Client Security Separation is disabled by default. If enabled, the associated wireless clients will not be able to communicate with each other. 9. If the hubs/switches on your LAN support the VLAN (802.1Q) standard and this feature has been enabled, the default VLAN ID for WNDAP350 will be associated with each profile. The default Profile VLAN ID must match the IDs used by other network devices. 10.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 19. Configure WEP Shared Key 5. Select the key to be used as the default key by checking the radio box. (Data transmissions are always encrypted using the default key.) 6. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations. 7. Click Apply to save your settings.
ProSAFE Dual Band Wireless N Access Point WNDAP350 you selected displays. When the Security Profile screen displays, check the check box of the Security Profile you want to modify and click Edit. Figure 20. Configure WPA with RADIUS 5. Choose WPA with RADIUS from the from the Network Authentication drop-down menu. Data Encryption will be set to TKIP by default. 6. Wireless Client Security Separation is disabled by default.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure WPA2 with RADIUS: 1. Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select RADIUS Server Settings. The RADIUS Server Settings screen displays. 2. Enter the RADIUS settings as shown in Configuring the RADIUS Server Settings on page 38. 3. Click Apply to save your RADIUS settings. 4.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure WPA and WPA2 with RADIUS: 1. Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select RADIUS Server Settings. The RADIUS Server Settings screen displays. 2. Enter the RADIUS settings as shown in Configuring the RADIUS Server Settings on page 38. 3. Click Apply to save your RADIUS settings 4.
ProSAFE Dual Band Wireless N Access Point WNDAP350 2. Enter the preshared key passphrase (Network Key). 3. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations. 4. Click Apply to save your settings. Configuring WPA2-PSK Not all wireless adapters support WPA2. Furthermore, client software is required on the client.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Consult the product documentation for your wireless adapter; WPA client software for instructions on configuring WPA settings and WPA2 client software for instructions on configuring WPA2 settings. Figure 25. Configure WPA-PSK and WPA2-PSK To configure WPA-PSK and WPA2-PSK: 1. From the Network Authentication drop-down menu, select WPA-PSK & WPA2-PSK. By default, Data Encryption will be set to TKIP+AES. 2. Enter the WPA Passphrase (Network Key). 3.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To restrict access based on MAC addresses: 1. Log in to the WNDAP350 using the default address of http://192.168.1.1, user name of admin and default password of password, or whatever LAN address and password you have set up. 2. Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select MAC Authentication. The MAC Authentication screen displays. Figure 26. Configure MAC authentication 3.
3. 3 Management This chapter describes how to use the management features of your ProSAFE Dual Band Wireless N Access Point WNDAP350. To access these features, connect to the WNDAP350 as described in Logging In Using the Default IP Address on page 23. Then select the category under either the Monitoring or Maintenance headings in the main menu of the browser interface.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Remote Management Both the SNMP and Remote Console are enabled by default, which allows for remote management of the WNDAP350 from a client running SNMP management software, as well as from a secure Telnet console. To set up an SNMP management interface: 1. Under the Maintenance tab, select Remote Management, and then select SNMP from the left sidebar. The SNMP screen displays, as shown in Figure 27, Configure SNMP settings below: Figure 27.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Remote Console The Remote Console configuration features are located under the Maintenance tab, Remote Management, and then under Remote Console. Enter the following information in the Remote Console screen, as shown in Figure 28, Configure Remote Console: • Secure Shell (SSH). If set to Enable, the Wireless Access Point will only allow remote access via Secure Shell and Secure Telnet. The default is Enable. • Telnet.
ProSAFE Dual Band Wireless N Access Point WNDAP350 2. Configure the terminal-emulation program to use the following settings: • Baud rate: 9600 bps • Data bits: 8 • Parity: none • Stop bit: 1 • Flow control: none These settings appear below the connector on the back panel. 3. Press Enter. The screen shown below displays. Figure 29. 4. Enter the login name and password (admin and password are the defaults). After successful login, the prompt should appear.
ProSAFE Dual Band Wireless N Access Point WNDAP350 You cannot perform the software upgrade from a computer that is connected to the WNDAP350 wireless access point with a wireless link. You must use a computer that is connected to the WNDAP350 wireless access point with a Ethernet cable. WARNING: When uploading software to the WNDAP350 wireless access point, it is important not to interrupt the Web browser by closing the window, clicking a link, or loading a new page.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configuration File Management The WNDAP350 wireless access point settings are stored in the wireless access point in a configuration file. This file can be saved (backed up) to a user’s computer, retrieved (restored) from the user’s computer, or cleared to factory default settings. Saving Your Configuration Settings To backup your configuration settings: 1.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Restoring Saved Settings To restore your settings from a saved configuration file: 1. Under the Maintenance tab on the main menu, select Upgrade, then select Restore Settings from the sidebar to back up your current settings. The following screen displays: \ Figure 32. Restore Configuration settings from file 2. Enter the full path to the file on your computer or click the Browse button to locate the file. 3.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 33. Restore to factory defaults 2. On the Restore Defaults screen, enable the Restore to factory default settings option by selecting the Yes radio button. 3. Click Apply to reset to the factory default settings. After a restore, the wireless access point password will be password, the default LAN IP address will be 192.168.1.1, and the access point name will reset to the name printed on the label on the bottom of the unit.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Changing the Administrator Password The default password is password. You should change this password to a more secure password, since you cannot change the administrator login name. To change the Administrator password: 1. Under the Maintenance tab on the main menu, select Password, and then select Change Password. The Change Password screen displays as shown in Figure 34, Change administrator password below. Figure 34.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Enabling the SysLog Server The SysLog screen allows you to enable the SysLog option if you have a SysLog server on your LAN. To enable a SysLog server: 1. Under the Configuration tab on the main menu, select System, then select the Advanced option, and select SysLog to view the screen shown in Figure 35, Enable SysLog server. Figure 35. Enable SysLog server 2. Enable SysLog. Enable this option if you have a SysLog server on your LAN.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Using Activity Log Information The Activity Log screen displays the Access Point system activity. To view the Activity Log, under the Monitoring tab on the main menu, click Logs. The Activity Logs screen displays as shown in Figure 36, View activity logs below. Figure 36. View activity logs The Activity Log Window displays the Access Point system activity.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 37. View system information This screen shows the parameters listed in Table 4: Table 4. System Information Fields Field Description Access Point Information Access Point Name Indicates the NetBIOS name. The default name may be changed, if desired. Ethernet MAC Address Displays the Media Access Control address (MAC address) of the wireless access point’s Ethernet port. Wireless MAC address for 2.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 4. System Information Fields (continued) Field Description Current Wireless Settings for 802.11b/bg/ng Operating Mode Identifies the 802.11 operating mode of the WNDAP350. Channel/Frequency Identifies the channel the wireless port is using. Auto is the default channel setting. Rogue AP Detection Identifies whether the Rogue AP detection feature is enabled or disabled. Current Wireless Settings for 802.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 5. Statistics Fields Field Description Wired Ethernet Packets The number of packets sent and received since the WNDAP350 was restarted. Bytes The number of bytes sent and received since the WNDAP350 was restarted. Wireless 11b/bg/ng Unicast Packets The Unicast packets sent and received in 802.11n/g mode since the WNDAP350 was restarted. Broadcast Packets The Broadcast packets sent and received in 802.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Note: A wireless network can include multiple wireless access points, all using the same network name (SSID). This enables extending the reach of the wireless network and allows users to roam from one access point to another, providing seamless network connectivity. Under these circumstances, be aware that only the stations associated with this access point will be presented in the Available Station List.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 40. Enable Rogue AP detection 2. Check the Turn Rogue AP Detection On radio box to enable rogue AP detection and click Apply. If you enable Rogue AP Detection, the AP continuously scans the wireless network and collects information about all APs heard on its channel. 3. You can Import AP List from a File. See Importing Rogue AP List from a File on page 64 for more information. 4. Under the Unknown AP List, click Refresh to discover the APs. 5.
ProSAFE Dual Band Wireless N Access Point WNDAP350 3. Click Browse and navigate to the location where you saved the text file. 4. Select the file and click Open. 5. Click Import to upload the list to the AP. To import the list from an existing file: 1. Click Browse and navigate to the location where you saved the text file. 2. Select the file and click Open. 3. Click Import to upload the list to the AP.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To view the list of known APs: 1. Under the Monitoring tab on the main menu, select Rogue AP. Select Known AP List. The following screen displays with a list of known APs: Figure 42. Known APs list 2. Click Refresh to refresh the list. 3. Click Save to export the list of known APs to a file. A window opens so you can browse to the location where you want to save the file.
4. Advanced Configuration 4 This chapter describes how to configure the advanced features of your ProSAFE Dual Band Wireless N Access Point WNDAP350. The advanced configuration features are located under various sub-menus under Configuration.
ProSAFE Dual Band Wireless N Access Point WNDAP350 IP Settings for Wireless Clients You can turn the WNDAP350 into a DHCP Server for wireless clients for both DHCP-enabled wireless clients. The default advanced IP wireless settings usually work well. This feature is intended for use by a systems administrator. By default, this feature is not enabled. To use this wireless access point as a DHCP server: 1. From the main menu under Configuration, select IP, and then select DHCP Server Settings.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Gateway Address. The Access Point will assign this IP address as the default gateway for any traffic beyond the local network. • Primary DNS Server. The Access Point will assign this IP address as the primary Domain Name Server used by the connected wireless stations. • Secondary DNS Server. The Access Point will assign this IP address as the secondary Domain Name Server used by the connected wireless stations. • Primary WINS Server.
ProSAFE Dual Band Wireless N Access Point WNDAP350 3. Specify the following settings: • HTTP Redirect. Enable HTTP Redirect. • Redirect URL. Enter the URL of the Web server where you wish to redirect HTTP (port 80) requests. 4. Click Apply. All port 80 requests will now be redirected to the specified URL. Configuring Advanced Wireless Settings The Advanced option of the Wireless Settings menu is used to configure and enable various wireless LAN parameters for both the 11a/na and 11b/bg/ng modes.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Collision Detection) mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD transmission mechanism, the transmitting station sends out the actual packet as soon as it has waited for the silence period. With the CSMA/CA transmission mechanism, the transmitting station sends out an RTS packet to the receiving station, and waits for the receiving station to send back a CTS (Clear to Send) packet before sending the actual packet data.
ProSAFE Dual Band Wireless N Access Point WNDAP350 3. Select the 802.11a/na tab. The Advanced Wireless Settings screen you selected displays, as shown in Figure 46, Advanced Wireless Settings - 802.11b/bg/ng. Figure 47. Advanced Wireless Settings - 802.11n/na 4. Enter the appropriate information in the fields described below: • RTS Threshold (0 - 2347). Request to Send Threshold.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • DTIM Interval. The Delivery Traffic Indication Message. Specifies the data beacon rate between 1 and 255. The default is 3. • Client Isolation. This option, when enabled, blocks communication between wireless clients that are associated to different VAPs. The default is Disable. • Max Wireless Clients. The number of wireless clients that can associate with the AP at one time. The default is 63. 5. Click Apply to enable the Wireless Settings.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Station EDCA Parameters. Specify the Station EDCA parameters for different types of data transmitted from the wireless client to the WNDAP350 wireless access point. If WMM is disabled, you cannot configure Station EDCA parameters. Table 6 describes the settings for QoS queues. Table 6. QoS Queues and Parameters QoS Queue Description Data 0 (Voice) High priority queue, minimum delay.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Wireless Point-to-Multi-Point Bridge. Select this only if this WNDAP350 is the Master for a group of bridge-mode wireless access points. Select the Enable Wireless Client Association option to enable wireless clients to associate with this access point. The other bridge-mode wireless access points must be set to point-to-point bridge mode, using the MAC address of this WNDAP350.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 50. Bridging - Edit WDS Security Profile Configuring a WNDAP350 as a Point-to-Point Bridge Figure 51, Wireless point-to-point bridge setup shows a point-to-point bridge configuration. AP1 ETH ER N ET AP in Point-to-Point Bridge Mode AP2 5 -1 2 V DC R ESET ETH ER N ET 5 -1 2 V DC R ESET AP in Point-to-Point Bridge Mode Hub or Switch Router LAN Segment 2 LAN Segment 1 Figure 51.
ProSAFE Dual Band Wireless N Access Point WNDAP350 4. Configure and verify the following parameters for both access points: • Verify that the LAN network configuration of the WNDAP350 wireless access points both are configured to operate in the same LAN network address range as the LAN devices • Both use the same ESSID, Channel, authentication mode, if any, and security settings if security is in use. 5. Verify connectivity across the LAN 1 and LAN 2.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Configure the WNDAP350 (AP3) on LAN 3 in Point-to-Point Bridge mode with the Remote MAC Address of AP2. 3. Verify the following parameters for all access points: • Verify that the LAN network configuration the WNDAP350 wireless access points are configured to operate in the same LAN network address range as the LAN devices • Only one access point is configured in Point-to-Multi-Point Bridge mode, and all the others are in Point-to-Point Bridge mode.
5. Troubleshooting and Debugging 5 This chapter provides information about troubleshooting your ProSAFE Dual Band Wireless N Access Point WNDAP350. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated.
ProSAFE Dual Band Wireless N Access Point WNDAP350 No lights are lit on the wireless access point It takes a few seconds for the power indicator to light up. Wait a minute and check the power light status on the access point. If the access point has no power. • Make sure the power cord is connected to the access point. • Make sure the power adapter is connected to a functioning power outlet. If it is in a power strip, make sure the power strip is turned on.
ProSAFE Dual Band Wireless N Access Point WNDAP350 I cannot access the Internet or the LAN from a wireless capable computer There is a configuration problem. Check these items: • You may not have restarted the computer with the wireless adapter to have TCP/IP changes take effect. Restart the computer. • The computer with the wireless adapter may not have the correct TCP/IP settings to communicate with the network. Restart the computer and check that TCP/IP is set up properly for that network.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • If the WNDAP350 is configured correctly, check your Internet connection (DSL/Cable modem etc.) to make sure that it is working correctly. • Try again. How do I use the Reset button to restore the factory default settings? The Reset button (see Rear Panel on page 13) has two functions: • Reboot. When pressed and released quickly, the WNDAP350 will reboot (restart). • Reset to Factory Defaults.
A. Command Line Reference A The ProSAFE Dual Band Wireless N Access Point WNDAP350 can be configured either through the command line interface (CLI), a Web browser, or an MIB browser. The CLI allows viewing and modification of the configuration from a terminal or PC through a telnet connection.
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-3> --3rd security profile | | | | |-authentication --authentication type | | | | |-encryption --data
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |-wepkeytype --wireless wep key type | | | | | | | | | | | |-3> --3rd security profile | | | | | | |-authentication --authentication type | | | | | | |-encryption --data encryption | | | | | | |-name --profile name | | | | | | |-presharedkey --preshared key | | | | | | |-remote-mac --remote MAC | | | | | | |-status --profile stat
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | |-authentication-server-primary --primary authentication server | | |-authentication-server-primary-port --primary system accounting server shared secret | | |-authentication-server-primary-sharedsecret --primary authentication server shared secret | | |-authentication-server-secondary --secondary authentication server | | |-authentication-server-secondary-port --secondary authentication server port | | |-authentication-server-secondary-sharedsecret --
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | | | | | | | | | |-stationlist | | | |-statistics | | | |-trusted-stationlist | | | |-unknownaplist | | | | | | |-log |-system --station list --interface statistics --trusted station list --unknown access point list --system log --system setting Command Line Reference 93
B. Default Settings and Technical Specifications B This appendix provides the factory default settings and technical specifications for the ProSAFE Dual Band Wireless N Access Point WNDAP350.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Factory Default Settings You can use the reset button located on the front of your device to reset all settings to their factory defaults. This is called a hard reset. • To perform a hard reset, push and hold the reset button for approximately 5 seconds (until the TEST LED blinks rapidly). Your device will return to the factory configuration settings shown in Table 7 below.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 7. Access Point Default Configuration Settings (continued) Feature Description Wireless Operating Mode Access Point Access Point Name netgearxxxxxx where xxxxxx are the last 6 digits of the wireless access point MAC address.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Technical Specifications Table 8. WNDAP350 Technical Specifications Parameter ProSAFE Dual Band Wireless N Access Point WNDAP350 802.11a Data Rates 6, 9, 12, 18, 24, 36, 48, 54, and 108 Mbps (Auto-rate capable) 802.11na Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 8. WNDAP350 Technical Specifications (continued) Parameter ProSAFE Dual Band Wireless N Access Point WNDAP350 802.11ng Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.56 Mbps, 130 Mbps, 144.
Index AID see association ID A-MPDU (Aggregation of MAC Protocol Data Units) 71, 72 antenna 71 2.
ProSAFE Dual Band Wireless N Access Point WNDAP350 wireless point-to-multi-point bridge 75 BSSID 62 C Category 5 Ethernet cable 11 change password 57 channel auto testing connectivity 31 channel auto selection 31 channel interference 31 channel spacing 16, 29 channel spacing, recommended 27 channel width 29 channel, auto configuring channel/frequency 27 channel, default 27 CLI command set 52 command line interface (CLI) 51 configuration file 54 backup or restore 54 country/region, configure 19 coverage 16
ProSAFE Dual Band Wireless N Access Point WNDAP350 support for 8 wIreless client security separation 42 wireless client security separation 43, 44, 45, 46, 47 HTTP redirect hotspot settings 69 placement of 16 multiple BSSIDs, support for 7 multiple input, multiple output (MIMO), support for 9 multi-point bridging extend 78 extend range 78 I Infrastructure mode, selecting or changing channels 29 interference, channel settings 27 interference, least 27 interference, reduce 16, 27 interference, sources 16 I
ProSAFE Dual Band Wireless N Access Point WNDAP350 configure 76 point-to-point bridge mode wireless point-to-multi-point bridge 75 power adapter 13 power consumption 16 Power over Ethernet (PoE), support for 9 preamble type 71 preshared key passphrase WPA-PSK 46 primary DNS server, configure 25 profile name bridge mode wireless station 74 wireless point-to-multi-point bridge 75 Q QoS queues 74 QoS settings 30 QoS settings, advanced AP EDCA parameters 73 station EDCA parameters 74 R RADIUS and certificate
ProSAFE Dual Band Wireless N Access Point WNDAP350 Spanning Tree Protocol enabling 19 SSID 26, 29 hidden mode 9 SSID broadcast, disable 33 SSID match verify connectivity 23 SSID, wireless network name 33 standards, supported 7 static IP address 81 default 18 statistics 61 subnet mask default 81 support documentation 19 syslog server setup 58 system information 59 fields 60 system requirements 11 T technical specifications 97 Telnet client recommendations 51 Telnet options 51 terminal-emulation program, co
ProSAFE Dual Band Wireless N Access Point WNDAP350 wireless point-to-point bridge 74 wireless security options restrict access based on MAC address. 17 turn off broadcast of wireless network name (SSID) 17 WEP, use 17 WPA or WPA-PSK, use 17 wireless settings 802.11a/na broadcast wireless network name (SSID) 29 channel width 30 channel/frequency 29 guard interval 30 MCS index/data rate 29 output power 30 turn radio on 29 wireless mode 28 wireless network name (SSID) 29 wireless settings 802.
