ProSAFE Single Band 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com.
Contents Chapter 1 Introduction About the ProSAFE Single Band 802.11n Wireless Access Point WN203 . 7 What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Key Features and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Supported Standards and Conventions . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSAFE Single Band 802.11n Wireless Access Point WN203 Schedule the Wireless Radios to Be Turned Off . . . . . . . . . . . . . . . . . . . . 49 Configure Basic Wireless Quality of Service . . . . . . . . . . . . . . . . . . . . . . . 49 Chapter 4 Management Enable Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 SNMP Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Secure Shell and Telnet Management . . . . . . . . .
ProSAFE Single Band 802.11n Wireless Access Point WN203 Wireless-Capable Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101 You Cannot Configure the Wireless Access Point from a Browser . . . . .102 When You Enter a URL or IP Address a Time-Out Error Occurs . . . . . . .103 Troubleshoot a TCP/IP Network Using the Ping Utility. . . . . . . . . . . . . . .103 Test the LAN Path to Your Wireless Access Point . . . . . . . . . . . . . . . .
1. 1 Introduction This chapter introduces the NETGEAR® ProSAFE® Single Band 802.11n Wireless Access Point WN203, and describes some of the key features. The chapter includes the following sections: • About the ProSAFE Single Band 802.11n Wireless Access Point WN203 • What Is in the Box? • System Requirements • Key Features and Standards • Hardware Description Note: For more information about the topics covered in this manual, visit the support website at support.netgear.com.
ProSAFE Single Band 802.11n Wireless Access Point WN203 About the ProSAFE Single Band 802.11n Wireless Access Point WN203 The ProSAFE Single Band 802.11n Wireless Access Point WN203, going forward in this manual referred to as the wireless access point, is a solid building block of a wireless LAN infrastructure. It provides 2.4 GHz 802.11b/g/n connectivity between wired Ethernet networks and radio-equipped wireless notebook systems, desktop systems, print servers, and other devices.
ProSAFE Single Band 802.11n Wireless Access Point WN203 External antennas do not come standard with the wireless access point but can be purchased as an option. If you have purchased external antennas, see Configure Advanced Wireless Settings on page 70 for information about how to enable the external antennas.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The multiple BSSID feature allows you to configure up to eight SSIDs on your wireless access point and assign different configuration settings to each SSID. All the configured SSIDs are active, and the network devices can connect to the wireless access point by using any of these SSIDs. • DHCP server and client. The DHCP server of the wireless access point can provide a dynamic IP address to wireless clients.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • Access control. MAC address filtering can ensure that only trusted wireless clients can use the wireless access point to gain access to the wireless and wired LAN. • Security profiles. When using multiple BSSIDs, you can configure unique security settings (encryption, SSID, and so on) for each BSSID. • Hidden mode. The SSID is not broadcast, assuring that only clients configured with the correct SSID can connect.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • Roaming among wireless access points on the same subnet Autosensing Ethernet Connections with Auto Uplink The wireless access point can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point incorporates Auto Uplink technology.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 1. Front panel LEDs Item 1 2 3 4 LED Description Power Test LAN WLAN Off Power is off. Green Power is on. Off The wireless access point functions normally. Amber The wireless access point is starting. After about one minute, the LED turns off. Blinking amber New firmware is being loaded. Off No link is detected on the LAN port. Amber A 100 Mbps or 10 Mbps link is detected on the LAN port.
ProSAFE Single Band 802.11n Wireless Access Point WN203 4. Power socket for a 12 VDC, 1A power adapter. 5. Reverse SMA connector for an optional 2.4 GHz antenna. If you have purchased external antennas, see Configure Advanced Wireless Settings on page 70 for information about how to enable the external antennas.
2. Installation and Basic Configuration 2 This chapter describes how to install and configure the wireless access point for wireless connectivity to your LAN. This basic configuration enables computers with 2.4 GHz 802.11b/g/n wireless adapters to connect to the Internet or access printers and files on your LAN. In planning your wireless network, consider the level of security required. Chapter 3, Wireless Configuration and Security, describes how to set up wireless security for your network.
ProSAFE Single Band 802.11n Wireless Access Point WN203 What You Need Before You Begin You need to consider the guidelines and requirements in the following sections before you can set up your wireless access point. See also System Requirements on page 8.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Ethernet Cabling Requirements The wireless access point connects to your LAN using twisted-pair Category 5 Ethernet cable with RJ-45 connectors. LAN Configuration Requirements For the initial configuration of your wireless access point, you need to connect a computer to the wireless access point. Hardware Requirements for Computers on Your LAN To connect to the wireless access point on your network, each computer needs to have an 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Connect the Wireless Access Point to a Computer Tip: Before you place the wireless access point in an elevated position that is difficult to reach, first set up and test the wireless access point to verify wireless network connectivity. To set up the wireless access point: 1. Unpack the box and verify the contents. 2. Prepare a computer with an Ethernet adapter: a.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Test LED. The Test LED is amber. After about one minute, the Test LED turns off. LAN LED. The LAN LED indicates the LAN speed for the LAN port: green for 1000 Mbps or amber for 100 Mbps or 10 Mbps. WLAN LED. The WLAN LED is blue when the wireless LAN (WLAN) is ready. Log In to the Wireless Access Point The default IP address of your wireless access point is 192.168.0.100.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The navigation tabs across the top of the web management interface provide access to all the configuration functions of the wireless access point and remain constant. The menu items in the blue bar change according to the navigation tab that is selected. Figure 4. Navigation tabs and menu items The bottom right corner on all screens that allow you to make configuration changes show the Apply and Cancel buttons. Figure 5.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure Basic General System Settings and Time Settings After you have successfully logged in to the wireless access point, the basic General system settings screen displays. To configure basic system settings: 1. Select Configuration > System > Basic > General. The basic General system settings screen displays: 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 To configure time settings: 1. Select Configuration > System > Basic > Time. The Time screen displays: 2. Configure the settings as described in the following table: Setting Description Time Zone Select the time zone to match your location. Current Time This is a nonconfigurable field that displays the current date and time.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure the IP Settings WARNING: If you enable the DHCP client, the IP address of the wireless access point changes when you click the Apply button, causing you to lose your connection to the wireless access point. You then need to use the new IP address to reconnect to the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 2. Configure the IP settings as described in the following table: Setting Description DHCP Client By default, the Dynamic Host Configuration Protocol (DHCP) client is disabled.
ProSAFE Single Band 802.11n Wireless Access Point WN203 2. Configure the settings as described in the following table: Setting Description Select the Enable radio button to enable the DHCP server. Use the default settings or specify the pool of IP addresses to be assigned by setting the starting IP address and ending IP address. These addresses should be part of the same IP address subnet as the wireless access point’s LAN IP address. DHCP Server VLAN ID Enter the VLAN ID for the DHCP server.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Secondary WINS Server Enter the IP address of the secondary WINS server for the network, if there is any. Lease Enter the period that the DHCP server grants to DHCP clients to use the assigned IP addresses. The default time is 1 (one day). 3. Click the Apply button. Configure the Basic Wireless Settings For proper compliance and compatibility between similar products in your coverage area, you need to configure the 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 To configure the 802.11b/g/n wireless settings: 1. Select Configuration > Wireless > Basic > Wireless Settings. The basic Wireless Settings screen displays. The following figure shows the 11ng settings. Note: The radio wave icon ( mode (b, bg, or ng). ) displays next to the enabled wireless 2. Select one of the following 2.4 GHz band radio buttons: • 11b. Both 802.11n- and 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Note: Under normal conditions, you want the radio to be turned on. Turning off the radio disables access through the wireless access point, which can be helpful for configuration, network tuning, or troubleshooting activities. 4. Click the OK button to confirm the change of wireless mode. The change does not take effect until after you have completed the wireless configuration and have clicked the Apply button. 5.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Descriptions MCS Index / Data Rate 11ng mode only From the drop-down menu, select a Modulation and Coding Scheme (MCS) index and transmit data rate for the wireless network. The default setting is Best. For a list of all options that you can select, see Technical Specifications on page 107. Note: For most networks, the default settings work fine. Output Power Channel Width From the drop-down menu, select a channel width.
ProSAFE Single Band 802.11n Wireless Access Point WN203 3. Verify network connectivity by using a browser such as Microsoft Internet Explorer 8.0 or later, or Mozilla Firefox 18.0 or later to browse the Internet, or check for file and printer access on your network. Note: If you have trouble connecting to the wireless access point, see Chapter 7, Troubleshooting.
3. Wireless Configuration and Security 3 This chapter describes how to configure the wireless features of the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Before You Configure Wireless Security Before you set up wireless security and additional wireless features that are described in this chapter, connect the wireless access point, get the Internet connection working, set the country or region correctly, and configure the 802.11b, 11bg, or 11ng wireless settings. See Chapter 2, Installation and Basic Configuration. The wireless access point functions with an Ethernet LAN connection.
ProSAFE Single Band 802.11n Wireless Access Point WN203 There are many ways in which you can enhance the security of your wireless network: • Use multiple BSSIDs combined with VLANs. You can configure combinations of VLANS and BSSIDs (security profiles) with stronger or less restrictive access security according to your requirements. For example, visitors could be given wireless Internet access but be excluded from any access to your internal network.
ProSAFE Single Band 802.11n Wireless Access Point WN203 WPA-PSK uses a pre-shared key (PSK) for authentication; for more information, see the following sections: • - Configure and Enable Security Profiles on page 36 - Configure WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK on page 43 WPA2 and WPA2-PSK (AES). Wi-Fi Protected Access version 2 (WPA2) data encryption provides strong data security with Advanced Encryption Standard (AES) encryption.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Security profiles let you configure unique security settings for each SSID on each radio of the wireless access point. For each radio, the wireless access point supports up to eight security profiles (BSSIDs) that you can configure on the individual Edit Wireless Network screens that are accessible from the Edit Security Profile screen (see Configure and Enable Security Profiles on page 36).
ProSAFE Single Band 802.11n Wireless Access Point WN203 Write Down Your Wireless Network Settings For a new wireless network, print or copy the following form and fill in the settings. For an existing wireless network, the network administrator can provide this information. Print the form and store the security information in a safe place: • SSID. The service set identifier (SSID) identifies the wireless local area network. You can customize it by using up to 32 alphanumeric characters.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure and Enable Security Profiles The wireless access point is set by default as an open system with no authentication. When you configure network authentication, bear in mind the following: • If you are using access point mode (which is the default mode if you did not enable wireless bridging), all options are available. In other modes such as bridge mode, some options might be unavailable. • Not all wireless adapters support WPA or WPA2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The following table explains the fields of the Profile Settings screen: Setting Description Profile Name The unique name of the wireless security profile that makes it easy to recognize the profile. SSID The wireless network name (SSID) for the wireless security profile. Security The configured wireless authentication method for the wireless security profile. VLAN The default VLAN ID that is associated with the wireless security profile.
ProSAFE Single Band 802.11n Wireless Access Point WN203 3. Specify the settings of the Profile Definition section of the Edit Security Profile screen as described in the following table: Setting Description Profile Name Enter a unique name of the wireless security profile that makes it easy to recognize the profile. The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on, through NETGEAR-7. You can enter a value of up to 32 alphanumeric characters.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Network Authentication and Data Encryption (continued) WPA & WPA2 with Configure the RADIUS server setting. TKIP + AES Radius encryption is the default encryption. For more information, see Configure WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS on page 42. Note: This setting allows clients to connect through either WPA with TKIP or WPA2 with AES.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description VLAN ID Enter the VLAN ID to be associated with this wireless security profile. The default VLAN ID is 1. The VLAN ID needs to match the VLAN ID that is used by the other devices in your network. Access Control Access control functions only when static VLANs are enabled, that is, you select Disable from the Dynamic VLAN drop-down menu.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Figure 7. Open system with WEP • Shared key with WEP Shared key provides pre-shared WEP key encryption without RADIUS authentication. The security level of static WEP is not very strong. When you select Shared Key from the Network Authentication drop-down menu, the screen expands to display the WEP fields: Figure 8. Shared key with WEP Table 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 2. WEP encryption settings (continued) Setting Descriptions Encryption Key (Key1–Key4) Specify the active key by selecting one of the four radio buttons. Only one key can be the active key. Either enter a key manually or allow the key to be automatically generated by clicking the Generate Keys button.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • WPA2 with RADIUS Figure 11. WPA2 with RADIUS • WPA & WPA2 with RADIUS Figure 12. WPA & WPA2 with RADIUS Table 3. Settings for WPA with RADIUS, WPA2 with RADIUS, and WPA & WPA2 with RADIUS Setting Descriptions TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • WPA2-PSK Figure 14. WPA2-PSK • WPA-PSK & WPA2-PSK Figure 15. WPA-PSK & WPA2-PSK Table 4. Settings for WPA-PSK, WPA2-PSK, and WPA-PSK & WPA2-PSK Setting Descriptions Data Encryption TKIP Temporal Key Integrity Protocol (TKIP) is the standard encryption method used with WPA. You can also use TKIP with WPA2. Note: TKIP provides only legacy (slower) rates of operation.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure RADIUS Server Settings For authentication, accounting, or both authentication and accounting using RADIUS, you need to configure primary servers and optional secondary servers. These RADIUS server settings can apply to all devices that are connected to the wireless access point. To configure the RADIUS server settings: 1. Select Configuration > Security > Advanced > Radius Server Settings. The Radius Server Settings screen displays. 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Descriptions Secondary IP Address Authentication Server Primary Accounting Server Secondary Accounting Server Enter the IP address of the secondary RADIUS server for authentication. The secondary RADIUS server is used when the primary RADIUS server is not available. Port Enter the number of the UDP port on the wireless access point that is used to access the secondary RADIUS server for authentication. The default port number is 1812.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Note: For wireless adapters, you can usually find the MAC address printed on the wireless adapter label. To restrict access based on MAC addresses: 1. Select Configuration > Security > Advanced > MAC Authentication. The MAC Authentication screen displays. (The following figure shows some examples.) 2. Select the Turn Access Control On check box. The access control feature is enabled. 3.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Depending on your network configuration, use one of the following three methods: • Select MAC addresses from the Available Wireless Stations table: a. Select check boxes for individual MAC addresses or select the check box in the heading to select all MAC addresses. b. Click the Move button. The MAC addresses are transferred from the Available Wireless Stations table to the Trusted Wireless Stations table. • Enter MAC addresses manually: a.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Schedule the Wireless Radios to Be Turned Off Scheduling the wireless radios to be turned off is a green feature that allows you to turn off the wireless radios during scheduled vacations, office shutdowns, on evenings, or on weekends. To schedule the radios to be turned on and off: 1. Select Configuration > Wireless > Basic > Wireless On-Off. The Wireless On-Off screen displays: 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 By enabling WMM, you allow Quality of Service (QoS) control for upstream traffic flowing from a wireless client to the wireless access point and for downstream traffic flowing from the wireless access point to a wireless client. WMM defines the following four queues in decreasing order of priority: • Voice. The highest priority queue with minimum delay, which makes it ideal for applications like VoIP and streaming media. • Video.
4. 4 Management This chapter describes how to use the management features of the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Enable Remote Management This section describes the different options for remote management. • SNMP Management • Secure Shell and Telnet Management Both Simple Network Management Protocol (SNMP) and the remote console Secure Shell (SSH) are enabled by default, which allows for remote management of the wireless access point from a client running SNMP management software, as well as from an SSH client. The Telnet console is disabled by default.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Read-Write Community Name Enter the community string to allow the SNMP manager to read and write the wireless access point’s MIB objects. The default is private. Trap Community Name Enter the community string to allow the SNMP manager to send traps. The default is trap. IP Address to Receive Traps Enter the IP address of the SNMP manager to receive traps sent from the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 After successful login, the > prompt displays, preceded by the name of the wireless access point. 3. Enter the CLI commands that you want to use. You can enter ? to display the available CLI commands. The CLI commands are also listed in Appendix B, Command-Line Reference. Upgrade the Wireless Access Point Software The software of the wireless access point is stored in flash memory and can be upgraded as NETGEAR releases new software.
ProSAFE Single Band 802.11n Wireless Access Point WN203 IMPORTANT: In some cases, such as a major upgrade, you might need to erase the configuration and manually reconfigure your wireless access point after upgrading it. To find out if you need to reconfigure the wireless access point, see the release notes included with the software. Web Browser Upgrade Procedure Upgrading firmware through a web browser is the most common upgrade method.
ProSAFE Single Band 802.11n Wireless Access Point WN203 TFTP Server Upgrade Procedure To use this method, you need to have a TFTP server set up. To use a TFTP server to upgrade the wireless access point firmware: 1. Download the new software file from the NETGEAR website and save it to your hard disk. 2. Place the software file in your TFTP server location. (You do not need to unzip the file.) 3. If available, read the release notes before upgrading the software. 4.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Manage the Configuration File or Reset to Factory Default The wireless access point settings are stored in the configuration file. You can save this file (back it up) to a computer, restore it from a computer, or reset it to factory default settings.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Restore the Configuration IMPORTANT: During the restoration process, do not try to go online, turn off the wireless access point, shut down the computer, or do anything else to the wireless access point until it finishes restarting! To restore your settings from a saved configuration file: 1. Select Maintenance > Upgrade > Restore Settings. The Restore Settings screen displays: 2. Click the Browse button. 3.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Note: After you have restored the factory default settings on the wireless access point: * All custom configurations are lost. * The login password is password. * The default LAN IP address is 192.168.0.100. * The DHCP client is disabled. * The Access Point Name field is reset to the name printed on the label of the unit. For more information about the factory default settings, see Factory Default Settings on page 108.
ProSAFE Single Band 802.11n Wireless Access Point WN203 During the restoration process, the wireless access point automatically restarts. The restoration process typically takes about one minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 2. Select the Yes radio button. By default, the No radio button is selected. 3. Click the Apply button. The wireless access point reboots and the Test LED lights amber. The reboot process typically takes about one minute. When the Test LED turns off, wait a few more seconds before doing anything with the wireless access point. Change the Administrator Password The default password is password.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Enable the Syslog Option If you have a syslog server on your LAN, the Syslog screen allows you to enable the syslog option. If syslog is enabled, the wireless access point sends its syslog files to the syslog server. To enable a syslog option: 1. Select Configuration > System > Advanced > Syslog. The Syslog screen displays: 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Enable and Configure Rogue AP Detection The wireless access point can detect rogue access points and prevent them from connecting to the wireless access point. The wireless access point maintains a list of access points it detects in the area. Initially, all detected access points are displayed in the Unknown AP List. You restrict communication to approved access points by adding them to the Known AP List and enabling the rogue AP detection feature.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The wireless access point detects the removed access points and repopulates the Unknown AP List. To import a file with a precompiled list of access points into the Known AP List: 1. Take one of the following actions: • Select the Replace radio button. The imported list of access points replaces the existing Known AP List. • Select the Merge radio button. The imported list of access points is added to the existing Known AP List. 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The following table explains the fields of the Unknown AP List screen: Setting Description MAC Address The MAC address of the unknown AP. SSID The SSID that the unknown AP is using. Privacy Indicates whether security is enabled (1 means enabled; 0 means disabled). Channel The channel that the unknown AP is using. Rate The transmit data rate in Mbps of the unknown the AP. Beacon Int. The interval for each beacon transmission in ms.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The following table explains the fields of the Known AP List screen: Setting Description MAC Address The MAC address of the known AP. SSID The SSID that the known AP is using. Channel The channel that the known AP is using. 3. Click the Save button. Export the list of known APs to a file. A window opens so you can browse to the location where you want to save the file. The default file name is macList.txt.
5. Advanced Configuration 5 This chapter describes how to configure the advanced features of the wireless access point. The chapter includes the following sections: • Configure Spanning Tree Protocol and 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure Spanning Tree Protocol and 802.1Q VLANs Spanning Tree Protocol (STP) provides network traffic optimization in locations where multiple wireless access points are active by preventing path redundancy. If you have more than one active wireless access point at your location, NETGEAR recommends that you enable STP. The 802.1Q VLAN protocol on the wireless access point logically separates traffic on the same physical network: • Untagged VLAN.
ProSAFE Single Band 802.11n Wireless Access Point WN203 To configure STP and VLANs: 1. Select Configuration > System > Advanced > General. The advanced General system settings screen displays: 2. Specify the settings as described in the following table: Setting Description Spanning Tree Protocol Spanning Tree Protocol Select the Enable radio button to enable STP to prevent path redundancy. By default, the Disable radio button is selected. 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Note: The redirection occurs only the first time that a wireless client opens a web browser. To set up a hotspot server: 1. Select Configuration > System > Advanced > Hotspot. The Hotspot screen displays: 2. To enable HTTP redirection, select the Enable radio button. By default, HTTP redirection is disabled. 3. In the Redirect URL field, enter the URL of the web server to which you wish to redirect HTTP requests. 4. Click the Apply button.
ProSAFE Single Band 802.11n Wireless Access Point WN203 2. Specify the settings as described in the following table: Setting Description RTS Threshold (0–2347) Enter the Request to Send (RTS) threshold. The default setting is 2347. If the packet size is equal to or less than the RTS threshold, the wireless access point uses the Carrier Sense Multiple Access with Collision Detection (CSMA/CD) mechanism, and the data frame is transmitted immediately after the silence period.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Aggregation Length (1024–65535) Enter the maximum length of aggregated MAC protocol data unit (A-MPDU) packets. Larger aggregation lengths could lead to better Note: This setting does not apply network performance. Aggregation is a mechanism used to achieve to the 802.11b/bg modes. higher throughput. The default setting is 65535.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) queue settings work well. For information about how to configure basic QoS, see Configure Basic Wireless Quality of Service on page 49.
ProSAFE Single Band 802.11n Wireless Access Point WN203 2. Specify the settings as described in the following table: Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the wait time (in milliseconds) between data frames. A higher AIFS value means a higher priority for a queue. Valid values for AIFS are 0 through 8. The default values are Data 0: 3; Data 1: 7; Data 2: 1; Data 3: 1.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Station EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the wait time (in milliseconds) between data frames. A higher AIFS value means a higher priority for a queue. Valid values for AIFS are 0 through 8. The default values are Data 0: 3; Data 1: 7; Data 2: 2; Data 3: 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • Repeating the wireless signal. In this mode, this wireless access point repeats the wireless signal, does not support communication with wireless clients, and sends all traffic to a remote access point. In this mode, wireless clients cannot associate with the wireless access point. Use WEP, WPA-PSK, or WPA2-PSK to secure the communication with the remote access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 To configure a point-to-point wireless network with or without client association: 1. Configure the wireless access point (AP1 on LAN Segment 1 in the previous figure) as a point-to-point bridge: a. Select Configuration > Wireless Bridge. The Bridging screen displays (see the following figure). b. Select the Enable Wireless Bridging check box.
ProSAFE Single Band 802.11n Wireless Access Point WN203 e. Specify the settings as described in the following table: Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default name is NETGEAR-WDS-1. Remote MAC Address Enter the MAC address of the remote wireless access point (the MAC address of AP2 on LAN Segment 1 in Figure 16 on page 76).
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Authentication Settings Network Authentication and Data Encryption From the Network Authentication drop-down menu, select Open System, WPA-PSK, or WPA2-PSK. Your selection determines the options that the Data Encryption drop-down menu provides, and whether the WPA Passphrase (Network Key) field displays.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description IP Address Enter an IP address that can be reached through the remote access point for which you are setting up a bridge configuration. Click the Link Test button. Link Test Process Status After one minute or less, the link test returns one of the following results: • Success. The link can be established using the bridge configuration, and the IP address behind the remote access point is reachable.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Configure a Point-to-Multipoint Wireless Network In a point-to-multipoint bridge, the wireless access point is the master for a group of bridge-mode wireless access points. All traffic is sent to the master rather than to the other wireless access points. Use wireless security to protect this communication.
ProSAFE Single Band 802.11n Wireless Access Point WN203 d. Select a security profile to edit by selecting the corresponding radio button to the left of the profile. e. Click the Edit button to configure the selected security profile settings. The Edit Security Profile screen displays for the selected security profile.
ProSAFE Single Band 802.11n Wireless Access Point WN203 f. Specify the settings as described in the following table: Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4. Remote MAC Address Enter the MAC address of the remote wireless access point (the MAC address of AP2 or AP 3 on LAN Segment 1 in Figure 17 on page 81).
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Network Authentication WPA2-PSK and Data Encryption (continued) AES (Advanced Encryption Standard) is the standard encryption method used with WPA2-PSK and the only selection possible from the Data Encryption drop-down menu. In the WPA Passphrase (Network Key) field, enter a passphrase. The passphrase length needs to be between 8 and 63 characters (inclusive).
ProSAFE Single Band 802.11n Wireless Access Point WN203 c. If the correct profile names and security options are displayed in the table, select the check boxes in the Enable column for all security profiles that you want to enable. d. On the Bridging screen, click the Apply button. The point-to-multipoint bridge settings are activated. 3. Configure AP2 on LAN Segment 2 (see Figure 17 on page 81) in point-to-point bridge mode with the remote MAC address of AP1. 4.
ProSAFE Single Band 802.11n Wireless Access Point WN203 AP1 AP2 Multipoint bridge mode repeating only Router Internet AP3 Multipoint bridge mode repeating only LAN segment 1 Multipoint bridge mode repeating only Hub or switch LAN segment 2 Figure 18. Repeating the wireless signal in point-to-multipoint bridge mode To configure the wireless access point to repeat the wireless signal: 1. Configure the security profiles on the wireless access point (AP2 on LAN Segment 2 in the previous figure): a.
ProSAFE Single Band 802.11n Wireless Access Point WN203 d. Select a security profile to edit by selecting the corresponding radio button to the left of the profile. e. Click the Edit button to configure the selected security profile settings. The Edit Security Profile screen displays for the selected security profile.
ProSAFE Single Band 802.11n Wireless Access Point WN203 f. Specify the settings as described in the following table: Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember. The default names for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4. Remote MAC Address Enter the MAC address of the remote wireless access point (the MAC address of AP1 or AP3 in Figure 18 on page 86).
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Network Authentication WPA2-PSK and Data Encryption (continued) AES (Advanced Encryption Standard) is the standard encryption method used with WPA2-PSK and the only selection possible from the Data Encryption drop-down menu. In the WPA Passphrase (Network Key) field, enter a passphrase. The passphrase length needs to be between 8 and 63 characters (inclusive).
ProSAFE Single Band 802.11n Wireless Access Point WN203 d. If the correct profile names and security options are displayed in the table, select the check boxes in the Enable column for all security profiles that you want to enable. e. On the Bridging screen, click the Apply button. The repeater settings are activated. 3. Configure AP1 on LAN Segment 1 (see Figure 18 on page 86) in repeater mode with the remote MAC address of AP2. 4.
6. 6 Monitoring This chapter describes how to monitor the wireless access point and its network traffic. The chapter includes the following sections: • View System Information • Monitor Wireless Clients • View the Activity Log • Traffic Statistics Note: For information about monitoring rogue and known access points, see View and Save Access Point Lists on page 64.
ProSAFE Single Band 802.11n Wireless Access Point WN203 View System Information The System screen provides a summary of the current wireless access point configuration settings, including current IP settings and current wireless settings. This information is read only, so any changes need to be made on other screens. To view the System screen: Select Monitoring > System.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Country / Region The country or region for which the wireless access point is licensed for use. For information about how to change the country or region, see Configure Basic General System Settings and Time Settings on page 20. Note: It might not be legal to operate this wireless access point in a country or region other than one of those identified in this field.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Monitor Wireless Clients The Wireless Stations screen contains the Available Wireless Stations table. This table shows all IP devices that are associated with the wireless access point in the wireless network that is defined by the wireless network name (SSID). The table headings indicate the wireless modes (802.11b, 802.11bg, or 802.11ng). Note: A wireless network can include multiple wireless access points, all using the same network name (SSID).
ProSAFE Single Band 802.11n Wireless Access Point WN203 The following table explains the fields of the Wireless Stations Details screen: Setting Description MAC Address The MAC address of the wireless client. BSSID The BSSID that the wireless client is using. SSID The SSID that the wireless client is using. Channel The channel that the wireless client is using. Rate The transmit data rate in Mbps of the wireless client. State The features that are enabled on the wireless client.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Setting Description Cipher The cipher that the wireless client is using and that defines the type of encryption. SNR The signal-to-noise ratio (SNR) that indicates how much the signal of the wireless client has been corrupted by noise. Recv. Bytes The number of bytes received on the wireless client since it last started. Trans. bytes The number of bytes transmitted by the wireless client since it last started. Assoc.
ProSAFE Single Band 802.11n Wireless Access Point WN203 5. (Optional) Click the Clear button. The log contents are cleared. Traffic Statistics The Statistics screen displays information for both wired (LAN) and wireless (WLAN) network traffic. To display the Statistics screen: Select Monitoring > Statistics. To update the statistics information, click the Refresh button.
ProSAFE Single Band 802.11n Wireless Access Point WN203 The following table explains the fields of the Statistics screen: Setting Description Wired Ethernet Packets The number of packets received and transmitted over the Ethernet connection since the wireless access point was restarted. Bytes The number of bytes received and transmitted over the Ethernet connection since the wireless access point was restarted. Wireless 802.11b, Wireless 802.11bg, or Wireless 801.
7. 7 Troubleshooting This chapter provides information about troubleshooting the wireless access point. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated. • Is the wireless access point on? See Basic Functioning on page 100. • Did I connect the wireless access point correctly? See Basic Functioning on page 100. • I cannot access the Internet or the LAN.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Basic Functioning This section describes how you can use the LEDs to troubleshoot the wireless access point. • Verify the Correct Sequence of Events at Startup • No LEDs Are Lit on the Wireless Access Point • LAN LED Is Not Lit • WLAN LED Is Not Lit Note: For descriptions of the LEDs, see Front Panel on page 11.
ProSAFE Single Band 802.11n Wireless Access Point WN203 If the wireless access point has no power and you use a power cord to provide power to the wireless access point: • Make sure that the power cord is connected to the wireless access point. • Make sure that the power adapter is connected to a functioning power outlet. If it is in a power strip, make sure that the power strip is turned on. If it is plugged directly into the wall, verify that it is not a switched outlet.
ProSAFE Single Band 802.11n Wireless Access Point WN203 • The wireless access point’s default values might not work with your network. Check the wireless access point’s default configuration against the configuration of other devices in your network. • Make sure that the SSID, network authentication, and data encryption settings of the computer with the wireless adapter are the same as those of the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 When You Enter a URL or IP Address a Time-Out Error Occurs A number of things could be causing this. Try the following troubleshooting steps: • Check whether other computers on the LAN work correctly. If they do, ensure that your computer’s TCP/IP settings are correct. If you use a fixed (static) IP address, check the subnet mask, default gateway, DNS, and IP addresses of the wireless access point (see Configure the IP Settings on page 22).
ProSAFE Single Band 802.11n Wireless Access Point WN203 If the path is not working, you see this message: Request timed out If the path is not functioning correctly, you might have one of the following problems: • • Wrong physical connections: - Make sure that the Active LED and LAN LED are lit. If one or both of these LEDs are off, follow the instructions in LAN LED Is Not Lit on page 101.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Problems with Date and Time The Time screen that is accessible through the Configuration > System > Basic > Time menu choices displays the current date and time of day. The wireless access point uses the Network Time Protocol (NTP) to obtain the current time from a network time server on the Internet that you specify in the Time screen (see Configure Basic General System Settings and Time Settings on page 20).
A. Supplemental Information A This appendix provides factory default settings and technical specifications for the wireless access point.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Technical Specifications The following table lists the technical specifications of the wireless access point: Table 5. Technical specifications Feature Description 802.11b/bg/ng wireless specifications 802.11b data rates 1, 2, 5.5, and 11 Mbps, and auto-rate capable (referred to as Best) 802.11bg data rates 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, 54 Mbps, and auto-rate capable (referred to as Best) 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 5. Technical specifications (continued) Feature Description Status LEDs • • • • Power LED Test LED LAN LED WLAN LED Electrical and physical specifications Power adapter 12VDC, 1A; plug is localized to country of sale Power consumption 4.0W Physical specifications • • Dimensions (h x w x d): 35 x 133 x 173 mm (1.4 x 5.3 x 6.8 in.) Weight: 240 g (0.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 6. Default configuration settings Feature Description Login for management and configuration LAN management address 192.168.0.100 Subnet mask for management address 255.255.255.0 Required static address for management computer 192.168.0.210 and 255.255.255.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 6. Default configuration settings (continued) Feature Description DHCP server gateway IP address 192.168.0.1 DHCP server IP address lease for clients 1 (one day) Radio and wireless settings Operating mode Access point, infrastructure mode Wireless access point name netgearxxxxxx, where xxxxxx are the last 6 digits of the wireless access point MAC address Country and region Varies by region Wireless communication 2.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Table 6. Default configuration settings (continued) Feature Description Antenna Internal 802.11d Enabled Client isolation Disabled Maximum wireless clients 64 Wi-Fi Multimedia (WMM) Enabled WMM powersave Enabled AP EDCA parameters (QoS settings) See the table in Configure Advanced Quality of Service Settings on page 73.
B. Command-Line Reference B The wireless access point can be configured through either the command-line interface (CLI), a web browser, or a MIB browser. The CLI allows viewing and modification of the configuration from a terminal or computer through a Telnet or SSH connection.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.11n Wireless Access Point WN203 |-exit |-firmware-upgrade | |-firmware-upgrade-tftp | |-reset-ap |-restore-configuration |-restore-default-password |-restore-factory-default |-save-and-activate |-show> | |-country | |-dhcp | |-ethernet> | | |-statistics | |-hotspot | |-ip> | | |-config | | |-status | |-log | |-name | | | |-radio> | | |-2.4 | | |-2.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
C. Notification of Compliance N E T GEAR wirele ss rout er s , gat eway s , APs C Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operation and adverse action against the end-user by the applicable National regulatory authority.
ProSAFE Single Band 802.11n Wireless Access Point WN203 FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
ProSAFE Single Band 802.11n Wireless Access Point WN203 Interference Reduction Table The table below shows the recommended minimum distance between NETGEAR equipment and household appliances to reduce interference (in feet and meters).
Index Numerics B 11b, 11bg, and 11ng wireless modes 26 2.4 GHz external antennas connectors for 12 enabling 72 64-bit, 128-bit, and 152-bit WEP 41 802.11b/g/n and 802.11a/n wireless adapters 16 wireless settings 25–28 802.11d support 72 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
ProSAFE Single Band 802.
