Insight managed smart cloud wireless access point (232 pages)
Summary of Contents for NETGEAR WiFi 6 AX1800
Page 1
User Manual WiFi 6 AX1800 Dual Band Wireless Access Point Model WAX204 NETGEAR, Inc. July 2021 350 E. Plumeria Drive 202-12553-01 San Jose, CA 95134, USA...
Page 2
See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Page 3
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Revision History Publication Part Publish Date Comments Number 202-12553-01 July 2021 We removed information about registration and the registration key and changed the steps to log in to the local browser user interface (UI) for all tasks in this UM.
Contents Chapter 1 Introduction Additional documentation..............12 Position the AP..................12 Safety instructions and warnings for an indoor access point..13 Chapter 2 Hardware Overview Top panel with LEDs................17 Back panel with ports, buttons, and a power connector....19 Position the antennas for best WiFi performance......20 Access point label................20 Chapter 3 Installation and Initial Log-in What WiFi setup do you want?............22...
Page 5
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Specify a PPPoE Internet connection that uses a login [router mode]....................44 Specify a PPTP or L2TP Internet connection that uses a login [router mode].................46 IPv6 Internet connections and IPv6 addresses [router mode]..49 Use Auto Detect for an IPv6 Internet connection [router mode]....................50...
Page 6
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Add, remove, or change a device on the allowed list....88 Add, remove, or change a device on the blocked list....90 Block specific Internet sites [router mode]........92 Set up keyword and domain blocking [router mode]....92 Remove a keyword or domain from the blocked list [router mode]....................93...
Page 7
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Add an IPv4 static route..............123 Change an IPv4 static route............124 Remove an IPv4 static route............125 Bridge port and VLAN tag groups [router mode]......126 Set up a bridge for a port group [router mode]......126 Set up a bridge for a VLAN tag group [router mode].....127...
Page 8
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Unblock the traffic meter after the traffic limit is reached [router mode]....................165 Change the system mode to access point mode or to router mode....................166 Disable LED blinking or turn off LEDs..........168 Chapter 10 Dynamic DNS [Router Mode] About Dynamic DNS [router mode]..........171...
Page 9
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable or disable explicit beamforming........203 Enable or disable PMF..............205 Set up the AP as a WiFi Bridge to another device.......206 Change the CTS/RTS threshold and preamble mode for a radio.209 Chapter 14 Port Forwarding and Port Triggering [Router Mode] Port forwarding to a local server for services and applications [router mode]....................212...
Page 10
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 You cannot log in to the AP [router mode]......232 You cannot log in to the AP [access point mode]....233 You cannot access the Internet [router mode]......235 Check the Internet WAN IP address [router mode]....235 Check or manually start the PPPoE connection [router mode].237...
Introduction The WiFi 6 AX1800 Dual Band Wireless Access Point Model WAX204, in this manual referred to as the AP, supports 802.11ax high performance WiFi connectivity and dual-band concurrent operation at 2.4 GHz and 5 GHz with a combined throughput of 1.8 Gbps (600 Mbps at 2.4 GHz and 1200 Mbps at 5 GHz).
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Additional documentation The following documents are available at netgear.com/support/download/: • Installation guide • Data sheet Position the AP Consider how you want to position the AP. Place it where you want to add WiFi, positioned so the WiFi range of the AP provides an optimal coverage area for your WiFi devices.
Before connecting the product to outdoor cables or wired outdoor devices, see https://kb.netgear.com/000057103 for additional safety and warranty information. Failure to follow these guidelines can result in damage to your NETGEAR product, which might not be covered by NETGEAR’s warranty, to the extent permissible by applicable law.
Page 14
PoE. If your product uses a power adapter: If you were not provided with a power adapter, contact your local NETGEAR reseller. The power adapter must be rated for the product and for the voltage and current marked on the product electrical ratings label.
Page 15
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
Hardware Overview The WiFi 6 AX1800 Dual Band Wireless Access Point Model WAX204 is an indoor, standalone AP. The Gigabit Internet (WAN) port lets you connect the AP to a modem, gateway, router, or Ethernet outlet for Internet connectivity. Use the four Gigabit LAN ports to connect network devices through an Ethernet cable directly to the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Top panel with LEDs The five status LEDs are located on the top panel of the AP. From left to right, the top panel contains the Power LED, Internet LED, WiFi LED, LAN LED, and WPS LED.
Page 18
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 1. LED descriptions Description Power Solid green. The AP is ready. Solid red. The AP is starting or restarting. That is, when you apply power to the AP or reset the AP to factory default settings, the Power LED lights solid red for about five seconds and then turns solid amber.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Back panel with ports, buttons, and a power connector The back panel of the AP provides ports, buttons, and a DC power connector. Figure 2. Back panel Viewed from left to right, the back panel contains the following components: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 more information about this setup, in which the AP must function in AP mode, seeConnect the AP to a routing device and log in for the first time on page 24.
Installation and Initial Log-in This chapter describes how you can install and access the AP in your network and log in to the local browser user interface (UI). Depending on how you want to set up the AP in your environment, you can change the operation mode to AP mode or keep the AP in its default router mode.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 What WiFi setup do you want? Use the following table to determine the type of WiFi setup that you want and the section that you must follow for your setup. Table 2. What WiFi setup do you want?
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Depending on your setup (What WiFi setup do you want? on page 22), you can either change the operation mode to AP mode during the initial login procedure or keep the operation mode as router mode.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Connect the AP to a routing device and log in for the first time Use this procedure for the setups that are described in the following table: Table 3. WiFi setups behind a routing device with the AP functioning in AP mode...
Page 25
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Figure 6. Connect the AP to an Ethernet wall outlet with Internet service To connect the AP directly to an existing router in your network and log in to the local browser UI for the first time: 1.
Page 26
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note the following: • If the Setup Wizard does not start and your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38.
Page 27
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 12. Click the Apply button, and in the pop-up window that displays, click the OK button. Your settings are saved and the AP is reconfigured in AP mode, and is assigned a new IP address by your routing device.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 c. Click the Apply button. Your settings are saved and the AP is configured for the new country or region. Do not close the browser page. If you are connected over WiFi, your connection might be terminated.
Page 29
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Figure 8. Connect the AP to an Ethernet wall outlet with Internet service When you set up the AP and connect it to your modem, the following applies, depending on the type of WAN connection your modem uses: •...
Page 30
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The startup process is complete when the following happens: • The Power LED turns solid green. • The WiFi LED lights solid green. 9. Log in to the AP by using one of the following methods: •...
Page 31
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Firmware update: During the Setup Wizard process, you can update the firmware (if new firmware is available). At the end of the Setup Wizard process, the AP restarts. Do not close the browser page.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 How the operation mode affects how you can reach the local browser UI The operation mode affects how you can reach the AP local browser UI: • Router mode: Enter http://www.routerlogin.net in the address field of your browser.
Page 33
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Your network includes another NETGEAR device that is also accessible by using http://www.routerlogin.net. In such a situation, if you use http://www.routerlogin.net, you might log in to the AP or you might log in to the other NETGEAR device, depending on your network situation.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 connected to it, including the AP. The IP address that is assigned to the AP is listed. Option 2. Use an IP scanner: Use an IP scanner application (they are available free of charge on the Internet) in the network of your existing router.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the language By default, the language of the local browser UI is set as Auto. You can change the language. To change the language: 1. Connect your computer or mobile device to the AP in one of the following ways •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the device that you are trying to connect is set up to use a static IP address, change the settings of your device so that it uses Dynamic Host Configuration Protocol (DHCP) and can receive an IP address through or from the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use Wi-Fi Protected Setup to join the Wireless 1 network You can use Wi-Fi Protected Setup (WPS) to add a WiFi device such as a WiFi-enabled computer, tablet, or smartphone to the Wireless 1 network of the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The AP LAN LED for the port to which you attached the device lights solid green. Your computer or LAN device connects to the local area network (LAN). Routing features enabled in router mode The AP can function in router mode (its default operation mode) or in AP mode.
Page 39
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 pop-up window displays to let you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button. • Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button.
Manually Set Up Internet Settings [Router Mode] This chapter describes how you can manually set up the Internet connection for your AP in router mode (the default operation mode). For information about changing the LAN settings if the AP is in router mode, see LAN IP address settings [router mode] on page 114.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use the Setup Wizard [router mode] In most situations, you do not need use the Setup Wizard in the local browser UI. In some situations, you might want to use the Setup Wizard to redetect your Internet settings.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Manually set up the AP Internet connection [router mode] If the AP is in router mode, you can view or change the AP’s Internet connection settings. Note: The information in the following sections is not required if the AP is operating in AP mode.
Page 43
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Internet Setup page displays. 5. Select the No radio button. This is the default setting. 6. If your Internet connection requires an account name (sometimes referred to as a host name), enter it in the Account Name field.
Your settings are saved. 15. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 235 •...
Page 45
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32. 3. Enter the AP local device password.
Your settings are saved. 17. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 235 •...
Page 47
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 For this procedure, use the settings that your Internet service provider (ISP) gave you. If you are not sure, contact your ISP. To specify or view the settings for an ISP Internet connection that uses PPTP or L2TP and that requires a login: 1.
Page 48
Your settings are saved. 16. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 235 •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 IPv6 Internet connections and IPv6 addresses [router mode] The AP supports multiple types of IPv6 Internet connections. Which connection type you must use depends on your IPv6 ISP. Follow the directions that your IPv6 ISP gave you.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 and the AP does not expect to receive such a packet, or the packet is not in the connection record, the AP blocks this packet. This function works either in secured more or in open mode.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired for the AP’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address.
Page 52
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays. 5. From the Internet Connection Type menu, select Auto Config. The page adjusts. The AP automatically detects the information in the following fields: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 10. (Optional) In the LAN Setup section, select the Use This Interface ID check box and specify the interface ID to be used for the IPv6 address of the AP’s LAN interface.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available. 6. Select a Remote 6to4 Relay Router radio button: • Auto. Your AP uses any remote relay router that is available on the Internet. This is the default setting.
Page 55
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 network and is under direct control of the service provider. The IPv6 service provided is equivalent to native IPv6. The 6rd mechanism relies on an algorithmic mapping between the IPv6 and IPv4 addresses that are assigned for use within the service provider’s network.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Router’s IPv6 Address on LAN. This field shows the IPv6 address that is acquired for the AP’s LAN interface. The number after the slash (/) is the length of the prefix, which is also indicated by the underline (_) under the IPv6 address.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To set up a pass-through IPv6 Internet connection: 1. Launch a web browser from a computer or mobile device that is connected to a WiFi network or LAN port on the AP.
Page 58
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. From the Internet Connection Type menu, select Fixed. The page adjusts. 6. In the WAN Setup section, specify the fixed IPv6 addresses for the WAN connection: • IPv6 Address/Prefix Length. The IPv6 address and prefix length of the AP’s Internet (WAN) port.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up an IPv6 DHCP Internet connection [router mode] To set up an IPv6 Internet connection with a DHCP server: 1. Launch a web browser from a computer or mobile device that is connected to a WiFi network or LAN port on the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. Select an IPv6 Domain Name Server (DNS) Address radio button: • Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns these addresses.
Page 61
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > IPv6. The IPv6 page displays.
Page 62
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. In the LAN Setup section, select an IP Address Assignment radio button: • Use DHCP Server. This method passes more information to LAN devices but some IPv6 systems might not support the DHCv6 client function.
Basic WiFi and Radio Features This chapter describes how you can manage the basic WiFi and radio settings of the AP. For information about the advanced WiFi and radio settings, see Advanced WiFi and Radio Features on page 190. Tip: If you want to change the WiFi network settings, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up or change an open or secure WiFi network The AP provides three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By default, the Wireless 1 network is enabled and the other two WiFi networks are disabled. The default security is WPA2-Personal [AES].
Page 65
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
Page 66
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Setting Description Enable SSID Broadcast By default, the AP broadcasts its SSID so that WiFi clients can detect the WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear the Enable SSID Broadcast check box.
Page 67
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Setting Description WPA-Personal This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that [TKIP] + support either WPA2 or WPA to join the WiFi network. This option uses AES and TKIP WPA2-Personal encryption.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Does your computer or device display as an attached device? (See Display the devices currently on the AP network and change device information on page 158.) If it does, it is connected to the network.
Page 69
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The WPA and WPA2 Enterprise settings display. 7. From the WPA Mode menu, select the enterprise mode: • WPA2 [AES]. WPA2 provides a secure connection but some older WiFi devices do not detect WPA2 and support only WPA. If your WiFi network includes such older devices, select WPA [TKIP] + WPA2 [AES] security.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable or disable a WiFi network You can temporarily disable a WiFi network (that is, an SSID) and you can reenable the WiFi network. Note: For information about setting up a WiFi schedule that temporarily turns off a radio band (and, therefore, all WiFi networks that are active on that band), see Add a WiFi schedule for a radio on page 200.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Disable. Disables the WiFi network. By default, the Wireless 1 network is enabled, but you can disable it. 7. Click the Apply button. Your settings are saved. Hide or broadcast the SSID for a WiFi...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Select or clear the Enable SSID Broadcast check box. When you select the check box, the WiFi network broadcasts the SSID. When you clear the check box, the WiFi network hides the SSID.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 4. Select BASIC > Wireless. The Wireless Network page displays. 5. Select the WiFi network (Wireless 2 or Wireless 3). 6. Select a Client Isolation radio button: •...
Page 74
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To specify whether WiFi clients of the Wireless 2 or Wireless 3 network can access devices that are connected to the LAN ports: 1. Connect your computer or mobile device to the AP in one of the following ways •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Manage SSID isolation for all WiFi networks By default, as an added security measure, SSID isolation is enabled for all WiFi networks (SSIDs) on the AP, preventing communication between WiFi clients that are associated with different WiFi networks on the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. Enable or disable a WiFi radio The AP has internal WiFi radios that broadcast signals in the 2.4 GHz and 5 GHz bands.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page. (As you scroll down on the page, the page name changes.) 5. Do one of the following: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use WPS with the push button method in the local browser For you to use the push button method to connect a WiFi device to the AP’s Wireless 1 network, the WiFi device that you are trying to connect must provide either a physical button or a software button.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. Click the button (that is, the green icon) onscreen. 8. Within two minutes, press the WPS button on the WiFi device, or follow the WPS instructions that came with the device.
Page 80
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Add WPS Client page adjusts. The Push Button (recommended) radio button is selected by default. 7. Select the PIN Number radio button. 8. In the Enter Client’s PIN field, enter the PIN number of the WiFi device.
Security, Firewall, and Access Rules The AP comes with a built-in firewall that helps to protect your network from unwanted intrusions from the Internet and lets you control access to the Internet. This chapter includes the following sections: • Firewall WAN settings [router mode] •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Firewall WAN settings [router mode] If the AP is in router mode, the basic firewall settings let you manage port scan protection and denial of service (DoS) protection, specify whether the AP can respond to a ping from the Internet (WAN) port, set up a DMZ server, and manage IGMP proxying, NAT filtering, and the application-level gateway (ALG) for the Session Initiation Protocol (SIP).
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. To enable the AP to respond to a ping on its Internet (WAN) port, select the Respond to Ping on Internet Port check box. 7. Click the Apply button. Your settings are saved.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select the Default DMZ Server check box. 6. Enter the LAN IP address of the computer that must function as the DMZ server. 7. Click the Apply button. Your settings are saved.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 from working. Open NAT provides a much less secured firewall but allows almost all Internet applications to work. Secured NAT is the default setting. To change the default NAT filtering settings: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
Page 87
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 devices from accessing the network. You can also view information about connected devices. To set up network access control and view information about connected devices: 1. Connect your computer or mobile device to the AP in one of the following ways •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Block all new devices from connecting. With this setting, if you add a new device, before it can access your network, you must enter its MAC address in the allowed list.
Page 89
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 access your entire network. You do so by adding the MAC addresses of these devices to the allowed list. You can also change or remove a device from the allowed list.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. To remove a device from the allowed list, do the following: a. Select the check box for the device. b. Click the Remove from the list button. The device is removed from the allowed list.
Page 91
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. Block specific Internet sites [router mode] If the AP is in router mode, you can block keywords and domains (websites) to prevent certain types of HTTP traffic from accessing your network. Keyword and domain blocking does not work for HTTPS traffic.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Here are some sample entries: • Specify XXX to block http://www.badstuff.com/xxx.html. • Specify the domain suffix (for example, .com) if you want to block only sites with a domain suffix such as .com. In such a situation, sites with domain suffixes such as .edu and .gov are still allowed.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. In the Block sites containing these keywords or domain names field, select the keyword or domain. 6. Click the Delete Keyword button. The keyword or domain is removed from the blocked list.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Block specific applications and services from the Internet [router mode] If the AP is in router mode, you can add service blocking rules to prevent access from your LAN to specific services and applications on the Internet. In addition, you can specify if a blocking rule applies to one user, a range of users, or all users on your LAN.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Always. Use service blocking continuously. 6. Click the Add button. The Block Services Setup page displays. 7. From the Service Type menu, select the service or application to be covered by this rule.
Page 97
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To add service blocking rule for a custom service or application: 1. Find out which protocol and port number or range of numbers the service or application uses. You can usually find this information by contacting the publisher of the service or application or through online user or news groups.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Service Type/User Defined. In the field, enter the name of the custom service or application. 10. Specify which devices on your LAN are affected by the rule, based on their IP addresses: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 For more information about the settings, see Add a service blocking rule for a custom service or application [router mode] on page 96. 8. Click the Apply button. Your settings are saved. The modified rule displays in the Service Table on the Block Services page.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Assign a trusted device [router mode] If the AP is in router mode, you can exempt one trusted device from blocking and logging. The device that you exempt must be assigned a fixed (static) IP address.
Page 101
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The schedule can specify the days and times that these features are active. After you set up the schedule, if you want it to become active, you must apply it to keyword and...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up security event email notifications If the AP is in router mode, the AP can email you its logs of router activity. The log records activity and security events such as attempts to access blocked sites or services.
Page 103
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. In the Outgoing Mail Server Port Number field, enter the port number that the mail server uses. If you do not know the port number, leave the default port number, which is 25.
Optimize Performance This chapter describes how you can optimize the AP’s performance and manage the traffic flows through the AP. The chapter contains the following sections: • Enable QoS and automatically set the Internet bandwidth • Enable QoS and manually set the Internet bandwidth •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable QoS and automatically set the Internet bandwidth You can enable QoS and let the AP automatically set its Internet download and upload bandwidth based on an automated speedtest. Although can you manually set the...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 For information about bandwidth utilization by device and application, see Display the devices currently on the AP network and change device information on page 158. Enable QoS and manually set the Internet...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select BASIC > Quality of Service. The QoS Setup page displays. By default, Quality of Service (QoS) is enabled, and the Enable QoS check box is selected. By default, the Let Speedtest detect my Internet bandwidth radio button is selected.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To enable or disable the automatic update of the Performance Optimization Database: 1. Connect your computer or mobile device to the AP in one of the following ways • Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either operation mode.)
Page 109
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 control upstream traffic flowing from WiFi devices to the access point and downstream traffic flowing from the access point to WiFi devices. WMM defines the following four queues in decreasing order of priority: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Clear the Enable WMM (Wi-Fi multimedia) settings check box for the radio to disable WWM, or clear both check boxes for both radios. 7. Click the Apply button. Your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select the Turn UPnP On check box. By default, this check box is selected. You can disable or enable UPnP for automatic configuration. If the Turn UPnP On check box is cleared, a device cannot automatically control the resources of the AP.
Page 112
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 the priority for an attached device so that it receives a different treatment in the AP network. To change the priority for an attached device: 1. Connect your computer or mobile device to the AP in one of the following ways •...
Network Settings This chapter describes how you can manage various network settings of the AP. The chapter includes the following sections: • LAN IP address settings [router mode] • Change the AP network device name • Reserved LAN IP addresses [router mode] •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 LAN IP address settings [router mode] If the AP is in router mode, the LAN subnet defines the LAN IP address settings for the AP, including the IP address at which you can access the AP over the local browser UI, the DHCP IP address settings, and the Router Information Protocol (RIP) settings.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 4. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 5. In the IP Address fields, enter the new LAN IP address. The LAN IP address at which you can access the local browser UI of the AP also changes.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32. 3. Enter the AP local device password.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To disable the DHCP server: 1. Launch a web browser from a computer or mobile device that is connected to a WiFi network or LAN port on the AP. 2. Enter http://www.routerlogin.net in the address field.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 5. From the RIP Direction menu, select the RIP direction: • Both. The AP broadcasts its routing table periodically and incorporates information that it receives.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Setup > LAN Setup.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Setup > LAN Setup. The LAN Setup page displays. 5. In the Address Reservation table, select the radio button for the reserved address. 6. Click the Edit button.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Static routes The AP supports IPv4 static routes. Static routes can provide detailed routing information to your AP. Typically, you do not need to add static routes. You must configure static routes only for unusual cases such as when you use multiple routers or multiple IP subnets on your network.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Add an IPv4 static route You can add an IPv4 static route to a destination IP address and specify the subnet mask, gateway IP address, and metric. To add an IPv4 static route: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. Enter the route IP address and metric settings in the following fields: • Destination IP Address. Enter the IP address for the final destination of the route. • IP Subnet Mask. Enter the IP subnet mask for the final destination of the route.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Advanced Setup > Static Routes. The Static Routes page displays. 5. In the Static Routes table, select the radio button for the route. 6. Click the Edit button.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. In the Static Routes table, select the radio button for the route. 6. Click the Delete button. The route is removed from the table on the Static Routes page. Bridge port and VLAN tag groups [router...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32. 3. Enter the AP local device password.
Page 128
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 CAUTION: Unless you are comfortable with advanced network configurations, be sure to follow the directions of your ISP. Incorrect configuration might cause the Internet connection of the AP to go down.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 You must select at least one LAN port or one WiFi network. You can select more than one LAN port and WiFi network. 8. Click the Apply button. The new VLAN tag group is added . The VLAN / Bridge Settings page display again.
Page 130
Table 6. Common MTU sizes Application 1500 The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches. 1492 Used in PPPoE environments. 1472 Maximum size to use for pinging.
Page 131
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 6. Common MTU sizes (Continued) Application 1468 Used in some DHCP environments. 1436 Used in PPTP environments or with VPN. Network Settings User Manual...
Maintain and Monitor This chapter describes how you can maintain the AP by changing the password for local login, by managing the firmware, configuration file, and logs, and by setting up the traffic meter. The chapter also describes how you can monitor the AP and its network traffic.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Update the firmware From time to time, or as needed, NETGEAR makes new firmware (software) available. You can log in to the AP and let the AP check if new firmware is available, or you can manually upload a specific firmware version to your AP.
Page 134
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
Manually check for new firmware and update the firmware To download new firmware and update the AP: 1. Visit netgear.com/support/download/ and locate the support page for the router. 2. If available, download the new firmware to your computer or mobile device.
Page 136
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 7. Select ADVANCED > Administration > Firmware Update. The Firmware Update page displays. 8. Locate and select the firmware file on your computer or mobile device: a.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The firmware version is stated in the Firmware Version field at the top right of the page. Back up or restore the settings The configuration settings of the AP are stored within the AP in a configuration file. You can back up (save) this file to your computer or restore it.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Restore the AP settings If you backed up the configuration file, you can restore the configuration settings from this file. To restore configuration settings that you backed up: 1. Connect your computer or mobile device to the AP in one of the following ways •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 WARNING: To avoid the risk of corrupting the firmware, do not interrupt the restoration. For example, do not close the browser, click a link, or load a new page. Do not turn off the AP. Wait until the AP finishes restarting and the Power LED turns solid green.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 the IP address or lost the password to access the AP and cannot recover it, you must use the Reset button. After you reset the AP to factory default settings, the AP is in router mode, the login URL is www.routerlogin.net, and the DHCP server is enabled.
Page 144
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 CAUTION: The following process erases all settings that you configured in the AP. To erase the settings: 1. Connect your computer or mobile device to the AP in one of the following ways •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Time and Network Time Protocol server By default, the AP receives its time settings from a NETGEAR Network Time Protocol (NTP) server. You can change to another NTP server or set the time zone and daylight saving time manually.
Change the Network Time Protocol server By default, the AP uses the NETGEAR NTP server to synchronize the network time. You can change the Network Time Protocol (NTP) server to your preferred NTP server.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. When the AP connects over the Internet to the new NTP server, the date and time that display on the page might be adjusted. Logs The log is a detailed record of the websites that users on your network accessed or attempted to access and many other AP actions.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 By default, all check boxes are selected, and the following activities are logged: • Attempted access to allowed sites • Attempted access to blocked sites and services • Connections to the local browser UI of the AP •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Administration > Logs. The Logs page displays.
Page 150
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED. The ADVANCED Home page displays. The color in the heading of each of the panes uses the following coding: • Green circle. The settings are fine and no problems exist. For a WiFi network, a green circle displays if the network is enabled and secured.
Page 151
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description IP Subnet Mask The IP subnet mask that applies to all four AP LAN ports. For more information, see Change the LAN IP address and subnet settings [router mode] on page 114.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Wireless AP Displays if the WiFi network is enabled (see Set up or change an open or secure WiFi network on page 64 or Enable or disable a WiFi network on page 70).
Page 153
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED. The ADVANCED Home page displays. The color in the heading of each of the panes uses the following coding: • Green circle. The settings are fine and no problems exist. For a WiFi network, a green circle displays if the network is enabled and secured.
Page 154
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Gateway IP Address The IP address of the gateway to which the AP connects to the Internet. Domain Name Server The IP address of the Domain Name System (DNS) server that the AP uses.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Check the Internet connection status To check the Internet connection status: 1. Connect your computer or mobile device to the AP in one of the following ways • Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either operation mode.)
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 In access point mode, the IP address is a LAN IP address. In router mode, the IP address is a WAN IP address. • DHCP Server. The IP address for the Dynamic Host Configuration Protocol server that provides the TCP/IP configuration to the AP.
Page 157
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Display the devices currently on the AP network and change device information You can display the active wired and WiFi devices in the AP network. If you do not recognize a WiFi device, it might be an intruder.
Page 159
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 106), the page displays the detected download and upload speeds for the AP and the automatically assigned priority. The following tables describe the fields on the Attached Devices page. Field Description...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Remote IP Address The IP address of the device at the other side of the VPN tunnel. Local IP Address The IP address that is assigned to the device when it joined the AP network. This address can change when a device is disconnected and rejoins the network.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Start the traffic meter without traffic restrictions [router mode] If the AP is in router mode, you can monitor the traffic volume without setting a limit on the volume or connection time.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Restrict Internet traffic by volume [router mode] If the AP is in router mode, you can record and restrict the traffic by volume in MB. This is useful when your ISP measures your traffic volume.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Turn the Internet LED to blinking green or amber. This setting is optional. When the traffic limit is reached, the Internet LED alternates between green and amber. • Disconnect and disable the Internet connection. This setting is optional. When the traffic limit is reached, the Internet connection is disconnected and disabled.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. In the Traffic Counter section, set the traffic counter to begin at a specific time and date. 9. In the Traffic Control section, enter a period in minutes to specify when the AP issues a warning message before the monthly limit in hours is reached.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Scroll down to the Internet Traffic Statistics section. The Internet Traffic Statistics section displays when the traffic counter was started and what the traffic balance is. The table displays information about the connection time and traffic volume in MB.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > Traffic Meter. The Traffic Meter page displays. 5. In the Traffic Control section, clear the Disconnect and disable the Internet connection check box.
Page 167
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved and the AP is reconfigured in the new system mode. Disable LED blinking or turn off LEDs The LEDs on the top panel of the AP indicate activities and behavior. By default, the Internet LED, LAN LED, and WiFi LED blink when the AP detects data traffic.
Page 169
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Turn off all LEDs. To turn off all LEDs except the Power LED, select the Turn off all LEDs except Power LED radio button. 6. Click the Apply button. Your settings are saved.
Dynamic DNS [Router Mode] If the AP is in router mode, with Dynamic DNS (DDNS), you can use the Internet and a domain name to access a storage device that is attached to the AP when you are not in your office or home.
Internet. Set up a new Dynamic DNS account [router mode] NETGEAR offers you the opportunity to set up and register for a free Dynamic DNS account. To set up Dynamic DNS and register for a free NETGEAR account: 1.
Use an existing Dynamic DNS account [router mode] If you already created a Dynamic DNS (DDNS) account with NETGEAR, No-IP, or Dyn, you can set up the AP to use your account. To set up DDNS if you already created an account: 1.
• For a No-IP or Dyn account, in the User Name field, enter the user name for your account. • For a NETGEAR account, in the Email field, enter the email address for your account. 10. In the Password field, enter the password for your DDNS account.
Page 174
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Change your DDNS account settings as necessary. 6. Click the Apply button. Your settings are saved. Dynamic DNS [Router Mode] User Manual...
VPN Client [Router Mode] If the AP is in router mode, you can use it as a VPN client (as opposed to a VPN server) to let devices on the AP’s network securely access an external network using virtual private networking (VPN). This chapter describes how to set up the AP as a VPN client and use VPN access.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 About setting up the AP as a VPN client [router mode] In addition to using a virtual private network (VPN) to securely access your own network over the Internet when you are not home (see VPN Server and Service with OpenVPN [Router Mode] on page 180), you can also set up the AP as a VPN client to let devices on the AP’s network securely access an external network, while protecting your own network...
Page 177
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 You must enable the VPN client in the router before you can select one of two predefined VPN services and establish a connection to the VPN server. To enable the VPN client in the router and connect to a VPN server: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 12. In the Password field, enter the password for authentication with the VPN server. 13. Click the Connect button. Your settings are saved and the AP attempts to connect to the VPN server.
Page 179
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The VPN connection is terminated. When the AP is disconnected from the VPN server, the Disconnect button changes into the Connect button, allowing you to reestablish the VPN connection. VPN Client [Router Mode]...
VPN Server and Service with OpenVPN [Router Mode] If the AP is in router mode, you can use OpenVPN software to set up VPN connections and remotely access an office or site at which the AP is installed. In such a situation, the AP functions as a VPN server.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable and configure OpenVPN and VPN client access on the AP [router mode] If the AP is in router mode, you can configure OpenVPN and VPN client access on the You must enable OpenVPN and specify the OpenVPN service settings on the AP before remote clients can access the AP with a VPN connection using OpenVPN software.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • To change the TAP mode service type, select the UDP or TCP radio button. • To change the TAP mode service port, type the port number that you want to use in the field.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Install OpenVPN on a Windows-based computer [router mode] To download and install the OpenVPN client utility and the AP’s VPN configuration files on a Windows-based computer: 1. Visit openvpn.net/index.php/download/community-downloads.html, download the OpenVPN client utility for a Windows-based computer, and install it on the Windows-based computer.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. Modify the VPN interface name to NETGEAR-VPN by doing the following: a. In Windows, open Network Connection or Network and Sharing Center. The network connection information displays. b. In the local area connection list, find the local area connection with the device name TAP-Windows Adapter.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays. 6. Make sure that the Enable VPN Service check box is selected. For more information, see Enable and configure OpenVPN and VPN client access on the AP [router mode] on page 181.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays. 6. Make sure that the Enable VPN Service check box is selected.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 About VPN access to your network or Internet service at your office or home [router mode] When you are away from your office or home and you access the Internet, you usually use a local Internet service provider.
Page 189
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Download and install OpenVPN client software on the computer or mobile device that you intend to use as a VPN client and download and install the AP’s VPN configuration files (see OpenVPN client utility and VPN configuration files [router mode] on page 182).
Advanced WiFi and Radio Features This chapter describes how you can manage the advanced WiFi and radio features of the AP. For information about the basic WiFi and radio settings, see Basic WiFi and Radio Features on page 63. Tip: If you want to change the settings of the AP’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the region of operation You can change the region of operation, which is region in which you operate the AP. For some countries such as North America, you cannot change the region because it is preset.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. The AP restarts with the settings for the new region. Manage 802.11ax and enable or disable OFDMA for a radio If 802.11ax (11AX) WiFi is enabled (which it is by default), you can enable Orthogonal Frequency-Division Multiple-Access (OFDMA) for each radio band independently.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive.
Page 194
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: If smart connect is enabled and the SSID and passwords for the 2.4 GHz and 5 GHz bands do not match, the WiFi settings for 2.4 GHz band overwrite the WiFi settings for the 5 GHz band.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 By default, smart connect is enabled and the check box is selected. 6. Click the Apply button. Your settings are saved. The radios restart and WiFi clients might need to reconnect.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page. (As you scroll down on the page, the page name changes.) 5. Select or clear the Enable 20/40 MHz co-existence 2.4 GHz check box.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password. The local device password is the one that you specified. The local device password is case-sensitive.
Page 198
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 This mode supports a 20 MHz–wide channel and 1024 QAM. Up to 573 Mbps (11ax, HT40, 1024-QAM). Neighbor-friendly mode for reduced interference with neighboring WiFi networks. This mode allows 802.11ax, 802.11ac, 802.11n, and 802.11a devices to join the network but limits 802.11ax and 802.11ac devices to functioning at up to 573 Mbps.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Instead, if you are connected to same network as the AP, enter the LAN IP address that is assigned to the AP. For information about finding the IP address, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
Page 201
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 or for a holiday. You can add multiple schedules but only a single schedule can be active for each radio. Note: You can add a WiFi schedule only if the AP is connected to the Internet and synchronizes its internal clock with a time server on the Internet.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • 5 GHz radio. To change the settings for the 5 GHz radio, scroll down to the Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section. Note: If the smart connect feature is enabled (which it is by default), the page presents a single option in the Advanced Wireless Settings (2.4 GHz/b/g/n/ax &...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: When MU-MIMO is enabled, Tx beamforming is automatically enabled and you cannot disable it. To enable or disable MU-MIMO: 1. Connect your computer or mobile device to the AP in one of the following ways •...
Page 204
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 With this technique, the AP uses information about the WiFi communication link with clients to improve signal transmission to the clients. Explicit beamforming provides better reception, range, and throughput while minimizing interference.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. The radios restart and WiFi clients might need to reconnect. Enable or disable PMF Protected Management Frames (PMF), according to the 802.11w standard, is a security feature that protects unicast and multicast management frames from being intercepted and changed for malicious purposes.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. The radios restart and WiFi clients might need to reconnect. Set up the AP as a WiFi Bridge to another device You can use the AP as a WiFi bridge and connect multiple devices with WiFi, for example, at the faster 802.11ax speed.
Page 207
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: The Internet (WAN) and LAN ports of the WAX204 AP support gigabit speed. That means that speeds up to 1 GB can be achieved between the AP and its connected devices. It does not necessarily mean that traffic to and from the Internet is also at gigabit speed, because the speed for Internet traffic depends on your Internet connection.
Page 208
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select ADVANCED > Advanced Setup > Router / AP / Bridge Mode. The Router / AP / Bridge Mode page displays. 6. Select the Bridge Mode radio button. The page adjusts.
(In general, these settings are intended for WiFi testing.) CAUTION: Do not change these settings unless directed by NETGEAR support or unless you are sure what the consequences are. Incorrect settings might disable the WiFi function of a radio unexpectedly.
Page 210
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser displays a security warning, dismiss the warning. For more information, see Dismiss a browser security warning on page 38. 3. Enter the AP local device password.
Port Forwarding and Port Triggering [Router Mode] As an advanced function of the AP firewall, you can use port forwarding and port triggering to set up port traffic rules for Internet services and applications. These rules apply specifically to ports. You need networking knowledge to set up port traffic rules. Note: In AP mode, the port forwarding and port triggering settings that are described in this chapter are not required because they can be provided by the routing device to which the AP connects.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Port forwarding to a local server for services and applications [router mode] If the AP is in router mode, and if a server is part of your network, you can allow certain types of incoming traffic to reach the server.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Select ADVANCED > Advanced Setup > Port Forwarding / Port Triggering. The Port Forwarding / Port Triggering page displays. 7. Make sure that the Port Forwarding radio button is selected.
Page 214
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Port Forwarding / Port Triggering page displays. 6. Make sure that the Port Forwarding radio button is selected. 7. Click the Add Custom Service button. The Ports - Custom Services page opens.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change a port forwarding rule [router mode] If the AP is in router mode, you can change an existing port forwarding rule. To change a port forwarding rule: 1. Launch a web browser from a computer or mobile device that is connected to a WiFi network or LAN port on the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Remove a port forwarding rule [router mode] If the AP is in router mode, you can remove a port forwarding rule that you no longer need. To remove a port forwarding rule: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 How the AP implements a port forwarding rule [router mode] The following sequence shows the effects of a port forwarding rule: 1. When you enter the URL www.example.com in your browser, the browser sends a web page request message with the following destination information: •...
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Dynamic DNS makes it much easier to access a server from the Internet because you can enter the name in the web browser. Otherwise, you must know the IP address that the ISP assigned, which typically changes.
Page 219
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. Click the Apply button. Your settings are saved and the rule is added to the Port Triggering Portmap Table on the Port Forwarding / Port Triggering page. Change a port triggering rule [router mode] If the AP is in router mode, you can change an existing port triggering rule.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Remove a port triggering rule [router mode] If the AP is in router mode, you can remove a port triggering rule that you no longer need. To remove a port triggering rule: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser displays a security warning, dismiss the warning. For more information, see Find the IP address of the AP when you cannot use routerlogin.net on page 32. 3. Enter the AP local device password.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The port triggering settings display. 6. Select the Disable Port Triggering check box. If this check box is selected, the AP does not apply port triggering rules even if you specified them.
Page 224
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. When your AP receives the incoming message to destination port 113, it checks its session table and finds an active session for port 113 associated with your computer. The AP replaces the message’s destination IP address with your computer’s IP address and forwards the message to your computer.
Diagnostics and Troubleshooting This chapter provides information to help you diagnose and solve problems you might experience with the AP. If you do not find the solution here, visit the NETGEAR support site at netgear.com/support for more product and contact information.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Reboot the AP from the local browser UI You or NETGEAR technical support can reboot the AP from its local browser UI, either locally or remotely, for example, if the AP seems to be unstable or is not operating normally.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Quick tips for troubleshooting Many common problems can be resolved by following our tips for troubleshooting. Restart your AP network if in router mode If the AP is in router mode and you must restart your network, follow this sequence: 1.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (also referred to as network key or WiFi password), the unique default passphrase is also printed on the AP label. The default security is WPA2-Personal [AES]. Note: If you set up an access control list on the AP, you must add each computer or mobile device to the access control list (see Enable and manage network access control on page 86).
• Make sure that the power adapter is securely connected to your AP and securely connected to a working power outlet. • Make sure that you are using the power adapter that NETGEAR supplied for this product. Power LED does not turn green When you turn on the AP, the Power LED lights solid red for about five seconds and then turns solid amber.
143. If the problem occurs again, try one more time. If the error persists, a hardware problem might be the cause. Contact NETGEAR technical support at netgear.com/support/. Internet LED is solid amber or off [router mode] If the AP is in its default router mode and the Internet LEDs is solid amber, the AP attempted to get an Internet connection but failed.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 When you connect the AP’s Internet port to a modem, use the cable that was supplied with the modem. This cable can be a standard straight-through Ethernet cable or an Ethernet crossover cable.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Make sure that the connected network device is actually turned on. • Make sure that you are using the correct Ethernet cable. Use a standard Category 5 Ethernet patch cable. If the network device incorporates Auto Uplink™ (MDI/MDIX) ports, you can use either a crossover cable or a normal patch cable.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Make sure that you log in using http://www.routerlogin.net (which, in router mode, is the same as 192.168.1.1). • Make sure that the IP address of your computer or mobile device is on the same subnet as the LAN subnet of the AP.
Page 234
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 on the AP label. If you did not change the passphrase (also referred to as network key or WiFi password), the unique default passphrase is also printed on the AP label.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Clear your browsing data. • Make sure that Java, JavaScript, or ActiveX is enabled in your browser. If you are using Internet Explorer, click the Refresh button to be sure that the Java applet is loaded.
Page 236
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Check to see that a valid IP address is shown in the IP address field. If 0.0.0.0 is shown, the AP did not obtain an IP address from your ISP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Check or manually start the PPPoE connection [router mode] If the AP is in router mode and your ISP uses a PPPoE connection, you can check or manually start the PPPoE connection.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Troubleshoot Internet browsing If the AP can obtain an IP address but your computer or mobile device is unable to load any web pages from the Internet, check the following: • If the AP is in router mode and you can log in to the AP’s local browser UI but you cannot get an Internet connection, check if the AP can obtain an IP address from your ISP (see You cannot access the Internet [router mode] on page 235).
Page 239
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: If you set up an access control list on the AP, you must add each computer or mobile device to the access control list (see Enable and manage network access control on page 86).
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Changes are not saved If the AP does not save the changes that you make through the local browser UI, do the following: • When entering configuration settings, always click the Apply button before moving to another page or tab, or your changes are lost.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the path is not functioning correctly, check to see if the following is correct: • Correct LAN subnet? Verify that the IP addresses and LAN subnet for the AP and your computer are correct.
Page 242
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • If your ISP assigned a host name to your registered computer, use that host name as the account name (see Manually set up the AP Internet connection [router mode] on page 42).
Factory Default Settings and Technical Specifications This appendix includes the following sections: • Factory default settings • Technical specifications Note: In this appendix, we refer to the access point as the AP.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Factory default settings You can reset the AP to the factory default settings, which are shown in the following table. For more information about resetting the AP to its factory settings, see Factory default settings on page 142.
Page 245
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 7. WAX204 AP factory default settings (Continued) Feature Default Setting Country/region North America: United States Europe: Europe Other continents: Varies by region Channel 2.4 GHz: Auto. The available channels depend on the region.
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 7. WAX204 AP factory default settings (Continued) Feature Default Setting Port forwarding and port Disabled in router mode (does not apply to access point mode) triggering Security Access control Disabled...
Page 247
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 8. WAX204 AP specifications (Continued) Feature Description Storage temperature –4°F to 158°F (–20ºC to 70ºC) Storage humidity 5 to 95% maximum relative humidity, noncondensing WAN (Internet) One 10/100/1000BASE-T Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X)
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Wall-mount the AP Wall-mounting holes are on the bottom of the AP. The distance between the holes is 4.125 in. (105 mm), center-to-center. We recommend that you use M3 type screws, with a length of 0.75 inch (U.S.) or 20 mm (European).