NETGEAR WNDAP350 - ProSafe 802.11n Dual Band Wireless Access Point User Manual
NETGEAR WNDAP350 - ProSafe 802.11n Dual Band Wireless Access Point User Manual

NETGEAR WNDAP350 - ProSafe 802.11n Dual Band Wireless Access Point User Manual

Prosafe dual band wireless-n access point
Hide thumbs Also See for WNDAP350 - ProSafe 802.11n Dual Band Wireless Access Point:
Table of Contents

Advertisement

ProSafe Dual Band
Wireless-N Access Point
WNDAP350 Reference
Manual
NETGEAR, Inc.
350 East Plumeria Drive
San Jose, CA 95134
202-10534-01
November 2009
v1.1

Advertisement

Table of Contents
loading

Summary of Contents for NETGEAR WNDAP350 - ProSafe 802.11n Dual Band Wireless Access Point

  • Page 1 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 202-10534-01 November 2009 v1.1...
  • Page 2: Technical Support

    In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein.
  • Page 3: Regulatory Compliance Information

    Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC. Español Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los [Spanish] requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE.
  • Page 4 [Swedish] väsentliga egenskapskrav och övriga relevanta bestämmelser som framgår av direktiv 1999/5/EG. Íslenska Hér með lýsir NETGEAR Inc. yfir því að Radiolan er í samræmi við grunnkröfur og aðrar [Icelandic] kröfur, sem gerðar eru í tilskipun 1999/5/EC. Norsk NETGEAR Inc. erklærer herved at utstyret Radiolan er i samsvar med de [Norwegian] grunnleggende krav og øvrige relevante krav i direktiv 1999/5/EF.
  • Page 5 FCC Declaration Of Conformity We NETGEAR, Inc.,350 east Plumeria Drive, San Jose, CA 95134, declare under our sole responsibility that the model ProSafe Dual Band Wireless-N Access Point WNDAP350 complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: •...
  • Page 6 This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. The availability of some specific channels and/or operational frequency bands are country dependent and are firmware programmed at the factory to match the intended destination. The firmware setting is not accessible by the end user. Industry Canada statements This device complies with RSS-210 of the Industry Canada Rules.
  • Page 7: Table Of Contents

    About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 ......1-1 Key Features and Standards ..................1-1 Compatible and Related NETGEAR Products ..............1-5 System Requirements ....................1-6 What’s In the Box? ......................1-6 Hardware Description .....................1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines ..........2-2...
  • Page 8 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK and WPA2-PSK ................2-42 Restricting Wireless Access by MAC Address .............2-44 Chapter 3 Management Remote Management .....................3-1 Remote Console ......................3-3 Upgrading the Wireless Access Point Software .............3-5 Configuration File Management ..................3-6 Changing the Administrator Password .................3-10 Enabling the SysLog Server ..................
  • Page 9 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Appendix A Default Settings and Technical Specifications Factory Default Settings ....................A-1 Technical Specifications ....................A-3 Appendix B Related Documents Appendix C Command Line Reference Command Sets ......................C-1 Index Contents v1.1, November 2009...
  • Page 10 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Contents v1.1, November 2009...
  • Page 11: About This Manual

    About This Manual The ProSafe™ Dual Band Wireless-N Access Point WNDAP350 Reference Manual describes how to install, configure and troubleshoot the ProSafe Dual Band Wireless-N Access Point WNDAP350. The information in this manual is intended for readers with intermediate computer and Internet skills.
  • Page 12: How To Print This Manual

    NETGEAR website in Appendix B, “Related Documents.” Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com/products/WNDAP350.asp. How to Print This Manual To print this manual, your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files.
  • Page 13: Introduction

    Chapter 1 Introduction This chapter describes some of the key features of the ProSafe Dual Band Wireless-N Access Point WNDAP350. It also includes the minimum prerequisites for installation (“System Requirements” on page 1-5.), package contents (“What’s In the Box?” on page 1-6) and a description of the front and back panels of the WNDAP350 (“Hardware Description”...
  • Page 14: Supported Standards And Conventions

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Supported Standards and Conventions The following standards and conventions are supported: • Standards Compliance. The Wireless Access Point complies with the IEEE 802.11 a/b/g/n standards for Wireless LANs. • Full WPA and WPA2 support. WPA and WPA2 enterprise-class strong security with RADIUS and certificate authentication as well as dynamic encryption key generation.WPA- PSK and WPA2-PSK preshared key authentication without the overhead of RADIUS servers but with all of the strong security of WPA.
  • Page 15 Power over Ethernet. Power can be supplied to the WNDAP350 over the Ethernet port from any 802.3af compliant mid-span or end-span source. Please refer to the Appendix for a list of compliant Netgear PoE switches. Autosensing Ethernet Connection with Auto Uplink Interface. Connects to 10/100/1000 •...
  • Page 16: Autosensing Ethernet Connections With Auto Uplink

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Wireless Multimedia (WMM) Support. WMM is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the kind of data. Time- dependent information, like video or audio, has a higher priority than normal traffic. For WMM to function correctly, Wireless clients must also support WMM.
  • Page 17: Compatible And Related Netgear Products

    For a list of compatible products from other manufacturers, see the Wireless Ethernet Compatibility Alliance Web site (WECA, see http://www.wi-fi.net). The following NETGEAR products work with the WNDAP350 wirelss access point: • FS108P - ProSafe 8 Port 10/100 Switch with 4 Port PoE •...
  • Page 18: What's In The Box

    Resource CD which includes a link to this manual. If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the firewall for repair.
  • Page 19: Front Panel

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Front Panel The WNDAP350 front hardware functions are described below. Figure 1-1 The following table explains the LED indicators: Table 1-1. Front Panel LED Indicators Item DESCRIPTION Power Indicator PWR/TEST No power. Power is on.
  • Page 20 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table 1-1. Front Panel LED Indicators (continued) Item DESCRIPTION Wireless LAN Link Activity Indicator (5 GHz) 802.11na WLAN Indicates WLAN 802.11n/a (5GHz) mode is disabled. Blink Indicates Wireless data traffic in 5GHz modes. (Green) Wireless LAN Link Activity Indicator (5 GHz) 802.11ng WLAN...
  • Page 21: Basic Installation And Configuration

    Chapter 2 Basic Installation and Configuration This chapter describes how to set up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN.
  • Page 22: Wireless Equipment Placement And Range Guidelines

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual “Configuring WPA2 with RADIUS “Configuring WPA and WPA2 with RADIUS “Configuring WPA-PSK “Configuring WPA2-PSK “Configuring WPA-PSK and WPA2-PSK “Restricting Wireless Access by MAC Address You need to prepare these three things before you can establish a connection through your wireless access point: •...
  • Page 23: Understanding Wndap350 Wireless Security Options

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual If you are using multiple access points for 11b/bg/ng, it is better if adjacent access points use different radio frequency channels to reduce interference. The recommended Channel spacing between adjacent access points is 5 Channels (for example, use Channels 1 and 6, or 6 and 11). For 11a/na, the 6 Channel spacing is not needed.
  • Page 24: Installing The Wndap350 Wirelss Access Point

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Turn Off the Broadcast of the Wireless Network Name (SSID). If you disable broadcast of the SSID, only devices that have the correct SSID can connect. This nullifies the wireless network “discovery”...
  • Page 25: Configuring Lan And Wireless Access

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 2. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 for the Subnet Mask. 3. Connect an Ethernet cable from the WNDAP350 to the computer. 4. Turn on your computer, connect the power adapter to the WNDAP350 and verify the following: •...
  • Page 26 5. From the Country/Region pull-down menu, select the region where the WNDAP350 can be used (the default Country/Region is the United States). Note: If your country or region is not listed, please check with Netgear Support. 6. Spanning Tree Protocol. Enable or disable spanning tree protocol. Spanning tree protocol enables network traffic optimization in settings with multiple WNDAP350 wirelss access points.
  • Page 27 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual – Untagged VLAN. Untagged VLANs do not cause the outbound traffic to be tagged with the VLAN ID. Also, there can be only one Untagged VLAN. The default is Enable and set to 1.
  • Page 28 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 10. Select IP on the main menu. The IP Settings screen displays, as shown in Figure 2-5. Figure 2-5 IP Settings 11. Configure the IP Address settings appropriate for your network. The default values are suitable for most users and situations.
  • Page 29 Use Custom NTP Server. Check the option if you have a custom NTP server. The default is Disabled. – Hostname / IP Address. Enter the host name or the IP address of the custom NTP server. The default is time-b.netgear.com. 3. Click Apply. Basic Installation and Configuration v1.1, November 2009...
  • Page 30 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring Wireless Access To configure your wireless settings for 11b/bg/ng and 11a/na: 1. From the main menu under Configuration, select Wireless. The Wireless Settings screen displays, as shown in Figure 2-7. 2.
  • Page 31: Verifying Wireless Connectivity

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Disconnect the WNDAP350 and position it where it will be deployed. The best location is elevated, such as wall mounted or on the top of a cubicle, at the center of your wireless coverage area, and within line of sight of all the mobile devices.
  • Page 32: Logging In Using The Default Ip Address

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you install the WNDAP350, log in to the wireless access point to configure the basic settings and the wireless settings. The WNDAP350 is set, by default, with the IP address of 192.168.0.237 with DHCP disabled.
  • Page 33: Setting Basic Ip Options

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point are entered on this screen. Most of the default settings will work in most cases. However, if your wireless access point is part of a more complex LAN network, then modify the settings to meet the requirements of your network based on the explanation of the various fields.
  • Page 34: Wireless Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual – IP Subnet Mask. The Access Point will automatically calculate the subnet mask based on the IP address that you assign. Otherwise, you can use 255.255.255.0 (the default) as the subnet mask. –...
  • Page 35 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. From main menu under Configuration, select Wireless. The Wireless Settings screen of your 802.11 b/bg/ng wireless access point displays, as shown in Figure 2-10 below. Figure 2-10 Configure wireless settings 802.11b/bg/ng 2.
  • Page 36 Auto channel option for the AP to intelligently pick the channel with least interference. See the article on “Wireless Channels” available on the NETGEAR website. (A link to this article and other articles of interest can be found in Appendix B, “Related...
  • Page 37 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual – Wireless stations normally scan all channels, looking for an access point. If more than one access point can be used, the one with the strongest signal is used. This can only happen when the various access points are using the same SSID.
  • Page 38 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. From the main menu under Configuration, select Wireless, and then select the 802.11a/na tab. The Wireless Settings screen for your 11a/na access point displays as shown in Figure 2- below. Figure 2-11 Basic Wireless Settings - 802.11a/na 2.
  • Page 39 (shown by lost connections and/or slow data transfers). Should this happen, you may want to experiment with different channels to see which is the best. See the article on “Wireless Channels” available on the NETGEAR website. (A link to this article and other articles of interest can be found in Appendix B, “Related...
  • Page 40 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.56 Mbps, 130 Mbps, 144.44 Mbps •...
  • Page 41: Configuring Basic Qos Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring Basic QoS Settings Wi-Fi Multimedia Support (WMM). Wireless Multimedia (WMM) is a subset of the 802.11e standard. WMM allows wireless traffic to have a range of priorities, depending on the type of data. Time-dependent information, such as video or audio, has a higher priority than normal traffic.
  • Page 42: Setting Up And Testing Basic Wireless Connectivity

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Up and Testing Basic Wireless Connectivity Follow the instructions below to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate to your needs. 1.
  • Page 43: Understanding Security Profiles

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Program the wireless adapter of your PCs to have the same SSID that you configured in the WNDAP350. Check that they have a wireless link and are able to obtain an IP address by DHCP from the WNDAP350.
  • Page 44 Security Profile Name. Use a name that makes it easy to recognize the profile, and to tell profiles apart. (The default names are NETGEAR, NETGEAR-1, NETGEAR-2, and so on.) You can enter a value of up to 32 alphanumeric characters.
  • Page 45 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Broadcast Wireless Network Name (SSID). If you disable broadcast of the SSID, only devices that have the correct SSID can connect. This nullifies the wireless network “discovery” feature of some products such as Windows XP, Vista and Unix systems but the data is still fully exposed to a determined snoop using specialized test equipment like wireless sniffers.
  • Page 46 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table 2-1. Network Authentication Types Type Description WPA2-PSK Only select this if all clients support WPA2. If selected, you must use (WPA2 is a later version of WPA ) AES or TKIP + AES encryption and enter the WPA passphrase (Network key).
  • Page 47: Ssid And Wep/Wpa Settings Setup Form

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual – WPA Preshared Key Passphrase. If using WPA-PSK or WPA2-PSK, enter the passphrase here. All wireless stations must use the same passphrase (network key). The network key must be from 8 to 64 characters in length. •...
  • Page 48 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Key 3: ___________________________________ Key 4: ___________________________________ • WPA-PSK (Preshared Key) Record the WPA-PSK key. Key: ___________________________________ • WPA RADIUS Settings. For WPA, record the following settings for the primary and secondary RADIUS servers: Server Name/IP Address: Primary _________________ Secondary __________________ Port: ___________________________________ Shared Secret: ___________________________________...
  • Page 49: Configuring The Radius Server Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK (Preshared Key) Record the WPA-PSK key. Key: ___________________________________ • WPA RADIUS Settings. For WPA, record the following settings for the primary and secondary RADIUS servers: Server Name/IP Address: Primary _________________ Secondary __________________ Port: ___________________________________ Shared Secret: ___________________________________ Use the procedures described in the following sections to configure the WNDAP350.
  • Page 50 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-14 RADIUS server settings 3. Enter the following RADIUS Server settings: • Authentication Server. This configuration is required for authentication using a RADIUS Server.The IP Address, Port Number, and Shared Secret are required for communication with the Primary RADIUS Server.
  • Page 51: Setting Up A Security Profile

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual – Shared Secret. This is shared between the Wireless Access Point and the RADIUS Server while authenticating the supplicant (wireless client). 4. Click Apply to save your settings. Setting up a Security Profile The WNDAP350 allows you to set up eight different security profiles for 802.11b/bg/ng and eight different profiles for 802.11a/na.
  • Page 52 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To configure a Security Profile: 1. From your Web browser, log in to the WNDAP350 using the default LAN address of http://192.168.0.237, user name admin and password password, or use the LAN address and password that you set up.
  • Page 53: Configuring Wep

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • To configure WPA with RADIUS, see “Configuring WPA with RADIUS” on page 2-35. • To configure WPA2 with RADIUS, see “Configuring WPA2 with RADIUS” on page 2-37. • To configure WPA and WPA2 with RADIUS, see “Configuring WPA and WPA2 with RADIUS”...
  • Page 54 See the document “Wireless Communications” for a full explanation of each of these options, as defined by the IEEE 802.11 wireless communication standard. A link to this document on the NETGEAR website is in Appendix B, “Related Documents.”...
  • Page 55: Configuring Wpa With Radius

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 5. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations. 6.
  • Page 56 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 4. Under the Configuration tab, select Security from the main menu, and then select either Security Profile Settings for 802.11b/bg/ng or 802.11a/na. The screen for the Profile Settings you selected displays. When the Security Profile screen displays, check the check box of the Security Profile you want to modify and click Edit.
  • Page 57: Configuring Wpa2 With Radius

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA2 with RADIUS Not all wireless adapters support WPA2. Furthermore, client software is required on the client. Make sure your client card supports WPA2. Consult the product document for your wireless adapter and WPA2 client software for instructions on configuring WPA2 settings.
  • Page 58: Configuring Wpa And Wpa2 With Radius

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 5. From the Network Authentication drop-down menu, select WPA2 with RADIUS from the list. By default, Data Encryption will be set to AES. 6. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other.
  • Page 59 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To configure WPA and WPA2 with RADIUS: 1. Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select RADIUS Server Settings. The RADIUS Server Settings screen displays.
  • Page 60: Configuring Wpa-Psk

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK Not all wireless adapters support WPA. Furthermore, client software is required on the client. Windows XP and Windows 2000 with Service Pack 3 or above include the client software that supports WPA.
  • Page 61: Configuring Wpa2-Psk

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To configure WPA-PSK: 1. From the Network Authentication drop-down menu, select WPA-PSK. By default, Data Encryption will be set to TKIP. 2. Enter the preshared key passphrase (Network Key). 3. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other.
  • Page 62: Configuring Wpa-Psk And Wpa2-Psk

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. From the Network Authentication drop-down menu, select WPA2-PSK from the list. By default, Data Encryption will be set to AES. 2. Enter the preshared key passphrase (Network Key). 3. Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other.
  • Page 63 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-23 Configure WPA-PSK and WPA2-PSK To configure WPA-PSK and WPA2-PSK: 1. From the Network Authentication drop-down menu, select WPA-PSK & WPA2-PSK. By default, Data Encryption will be set to TKIP+AES. 2.
  • Page 64: Restricting Wireless Access By Mac Address

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Restricting Wireless Access by MAC Address The optional Access Control window lets you block the network access privilege of any specified stations through the WNDAP350 wirelss access point. When you enable access control, the access point only accepts connections from clients on the selected access control list.
  • Page 65 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-24 Configure MAC authentication 3. Check the Turn Access Control On radio box to enable Access Control feature. 4. Select the desired Access Control Database options. The options are: • Local MAC Address Database –...
  • Page 66 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 8. Click Add to add the wireless device to the Trusted Wireless Stations list. Repeat these steps for each additional device you want to add to the list. 9. Click Apply to save your wireless access control list settings. Now, only devices on this list will be allowed to wirelessly connect to the WNDAP350.
  • Page 67: Remote Management

    Chapter 3 Management This chapter describes how to use the management features of your ProSafe Dual Band Wireless- N Access Point WNDAP350. To access these features, connect to the WNDAP350 as described in “Logging In Using the Default IP Address” on page 2-12.
  • Page 68 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To set up an SNMP management interface: 1. Under the Maintenance tab, select Remote Management, and then select SNMP from the left sidebar. The SNMP screen displays, as shown in Figure 3-1 below: Figure 3-1 Configure SNMP settings 2.
  • Page 69: Remote Console

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Remote Console The Remote Console configuration features are located under the Maintenance tab, Remote Management, and then under Remote Console. Enter the following information in the Remote Console screen, as shown in Figure 3-2: •...
  • Page 70: Cli Commands

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To use the CLI from a Console Port: 1. Using the null-modem cable, connect a VT100/ANSI terminal or a workstation to the port labeled Console. If you attached a PC, Apple Macintosh, or UNIX workstation, start a secure terminal- emulation program.
  • Page 71: Upgrading The Wireless Access Point Software

    NETGEAR. Upgrade files can be downloaded from Netgear's Web site. The upgrade file can be sent to the wireless access point using your browser. Note: The Web browser used to upload new firmware into the WNDAP350 must support HTTP uploads, such as Microsoft Internet Explorer 6.0 or above or Mozilla 1.5 or...
  • Page 72: Configuration File Management

    Figure 3-4 Firmware upgrade screen To upgrade the WNDAP350 firmware: 1. Download the new software file from the NETGEAR website, save it to your hard disk. 2. Under the Maintenance tab, select Upgrade from the main menu, and then select Firmware Upgrade.
  • Page 73: Saving Your Configuration Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Saving Your Configuration Settings To backup your configuration settings: Under the Maintenance tab on the main menu, select Upgrade, then select Backup Settings from the left sidebar to back up your current settings. The following screen displays: Figure 3-5 Backup configuration settings 1.
  • Page 74: Restoring The Wndap350 To The Factory Default Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Under the Maintenance tab on the main menu, select Upgrade, then select Restore Settings from the sidebar to back up your current settings. The following screen displays: Figure 3-6 Restore Configuration settings from file 1.
  • Page 75 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 3-7 Restore to factory defaults 2. On the Restore Defaults screen, enable the Restore to factory default settings option by selecting the Yes radio button. 3. Click Apply to reset to the factory default settings. After a restore, the wireless access point password will be password, the default LAN IP address will be 192.168.0.237, and the access point name will reset to the name printed on the label on the bottom of the unit.
  • Page 76: Changing The Administrator Password

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 2. Use something with a small point, such as a pen, hold the Reset button for 5 seconds while you Power On the WNDAP350. 3. Continue holding the Reset Button until the LEDs blink twice. 4.
  • Page 77: Enabling The Syslog Server

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 3. Then enter the new password twice, once in the New Password field and again in the Repeat New Password field. 4. Click Apply to save your change. Enabling the SysLog Server The SysLog screen allows you to enable the SysLog option if you have a SysLog server on your LAN.
  • Page 78: Using Activity Log Information

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 5. Click Apply to save your SysLog settings. Using Activity Log Information The Activity Log screen displays the Access Point system activity. To view the Activity Log, under the Monitoring tab on the main menu, click Logs. The Activity Logs screen displays as shown in Figure 3-10 below.
  • Page 79 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Under the Monitoring tab on the main menu, select System to view the System screen, shown in Figure 3-11 below. This screen shows the parameters listed in Table 3-1: Table 3-1. System Information Fields Field Description Access Point Information...
  • Page 80: Viewing Network Traffic Statistics

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table 3-1. System Information Fields (continued) Field Description Channel/Frequency Identifies the channel the wireless port is using. 11 is the default channel setting. (Channel frequencies used on each channel can be found in “Wire- less Communications”;...
  • Page 81 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 3-12 View network statistics 2. Click Refresh to update the Statistics information for each interface. Table 3-2, shown below, describes the information fields detailed on the Statistics screen. Table 3-2. Statistics Fields Field Description Wired Ethernet...
  • Page 82: Viewing Available Wireless Station Statistics

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table 3-2. Statistics Fields Field Description Multicast Packets The Multicast packets sent and received in 802.11n/g mode since the WNDAP350 was restarted. Total Packets The Wireless packets sent and received in 802.11n/g mode since the WNDAP350 was restarted.
  • Page 83: Enabling Rogue Ap Detection

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To view the Available Wireless Stations List: 1. Under the Monitoring tab, select Wireless Stations on the main menu. The Available Wireless Stations list displays, as shown in Figure 3-13. Figure 3-13 Available Wireless Stations list 2.
  • Page 84: Importing Rogue Ap List From A File

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Under the Configuration tab on the main menu, select Security, select Advanced from the sidebar, and then select Rogue AP. The Rogue AP screen displays, as shown in Figure 3-8 below.
  • Page 85: Viewing Rogue Ap Statistics

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Create a text file that contains the MAC address of each known AP, separated by a space. The following example shows a list of six known APs that an administrator might upload to the 00:0c:41:d7:ee:a5 00:0f:b5:92:cd:49 00:12:17:70:85:3d 00:14:bf:ae:b1:e4 00:40:f4:f8:47:03 00:0c:41:d7:ee:b4 2.
  • Page 86 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 3-15 Unknown APs list 2. Click Refresh to refresh the list. 3. Click Save to export the list of unknown APs to a file. A window opens so you can browse to the location where you want to save the file.
  • Page 87: Packet Capture

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Under the Monitoring tab on the main menu, select Rogue AP. Select Known AP List.The following screen displays with a list of known APs: Figure 3-16 Known APs list 2. Click Refresh to refresh the list. 3.
  • Page 88 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual The packet capture screen is shown below: Figure 3-17 Packet capture screen 3-22 Management v1.1, November 2009...
  • Page 89: Advanced Configuration

    Chapter 4 Advanced Configuration This chapter describes how to configure the advanced features of your ProSafe Dual Band Wireless-N Access Point WNDAP350. The advanced configuration features are located under various sub-menus under Configuration and provide the following functions: • IP Settings. Using the wireless access point as a DHCP server for wireless clients (“IP Settings for Wireless Clients).
  • Page 90 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 4-1 DHCP server settings 3. Configure the following TCP/IP configurations for using the WNDAP350 as a DHCP Server for wireless clients. • DHCP Server: By default, the Dynamic Host Configuration Protocol (DHCP) server on the AP is disabled.
  • Page 91: Hotspot Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Secondary DNS Server: The Access Point will assign this IP address as the secondary Domain Name Server used by the connected wireless stations. • Primary WINS Server: The Access Point will assign this IP address as the primary WINS Server used by the connected wireless stations.
  • Page 92: Configuring Advanced Wireless Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Redirect URL: Enter the URL of the Web server where you wish to redirect HTTP (port 80) requests. 3. Click Apply. All port 80 requests will now be redirected to the specified URL. Configuring Advanced Wireless Settings The Advanced option of the Wireless Settings menu is used to configure and enable various wireless LAN parameters for both the 11a/na and 11b/bg/ng modes.
  • Page 93 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 3. Select the 802.11b/bg/ng tab. The Advanced Wireless Settings screen you selected displays, as shown in Figure 4-3., Figure 4-3 Advanced Wireless Settings - 802.11b/bg/ng 4. Enter the appropriate information in the fields described below: •...
  • Page 94 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Aggregation Length (1024-65535) (11ng): The aggregation length defines the size of aggregated packets. Larger aggregation lengths may sometimes lead to better network performance. The default is 65535. • A-MPDU (11ng): Aggregated MAC Protocol Data Unit. Aggregates several MAC frames into a single large frame to achieve higher throughput.
  • Page 95 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 3. Select the 802.11a/na tab. The Advanced Wireless Settings screen you selected displays, as shown in Figure 4-3., Figure 4-4 Advanced Wireless Settings - 802.11n/na 4. Enter the appropriate information in the fields described below: •...
  • Page 96: Configuring Advanced Qos Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • Aggregation Length (1024-65535) (11na only): The aggregation length defines the size of aggregated packets. Larger aggregation lengths may sometimes lead to better network performance. The default is 65535. • A-MPDU (11na only): Aggregated MAC Protocol Data Unit. Aggregates several MAC frames into a single large frame to achieve higher throughput.
  • Page 97 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 4-5 Advanced QoS settings The QoS options on the WNDAP350 are as follows: • AP EDCA Parameters. Specify the AP EDCA (Enhanced Distributed Channel Access) parameters for different types of data transmitted from the WNDAP350 wirelss access point to the wireless client.
  • Page 98: Enabling Wireless Bridging

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table 4-1. QoS Queues and Parameters QoS Queue Description Data 3 (Background) Lowest priority queue, high throughput. Bulk data that requires maxi- mum throughput and is not time-sensitive is sent to this queue (FTP data, for example).
  • Page 99 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual When you click the Edit button, you must enter the profile name and the MAC address (physical address) of the other bridge mode wireless station in the fields provided. WEP, WPA-PSK, or WPA2-PSK are supported. WPA2-PSK can (and should) be used to protect this communication.
  • Page 100 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 4-7 Bridging - Edit WDS Security Profile 4-12 Advanced Configuration v1.1, November 2009...
  • Page 101 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a WNDAP350 as a Point-to-Point Bridge To configure a point-to-point bridge as shown in Figure 4-8: 1. Under the Configuration tab, select Wireless Bridge. Then, select Bridging. The Bridging screen displays (see Figure 4-6).
  • Page 102 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring a Point-to-Multi-Point Wireless Bridge To configure a point-to-multi-point wireless bridge as shown in Figure 4-9: 1. Under the Configuration tab, select Wireless Bridge. Then, select Bridging. The Bridging screen displays. E T H E R N E T 5 - 1 2 V D C E T H E R N E T...
  • Page 103 5. Click Apply to save your settings. Note: You can extend this multi-point bridging by adding additional WNDAP350s configured in Point-to-Point mode for each additional LAN segment. Furthermore, you can extend the range of the wireless network with NETGEAR wireless antenna accessories. Advanced Configuration 4-15 v1.1, November 2009...
  • Page 104 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 4-16 Advanced Configuration v1.1, November 2009...
  • Page 105: Troubleshooting And Debugging

    If it is plugged directly into the wall, verify that it is not a switched outlet. • Make sure you are using the correct NETGEAR power adapter supplied with your access point. v1.1, November 2009...
  • Page 106: The Wireless Lan Activity Light Does Not Light Up

    • Make sure the antennas are tightly connected to the WNDAP350. • Contact NETGEAR technical support if the Wireless LAN activity light remains off. The LAN light is not lit. There is a hardware connection problem.Check these items: •...
  • Page 107: I Cannot Connect To The Wndap350 To Configure It

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • The access point’s default values may not work with your network. Check the access point default configuration against the configuration of other devices in your network. I cannot connect to the WNDAP350 to configure it. Check these items: •...
  • Page 108: Using The Reset Button To Restore Factory Default Settings

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Using the Reset Button to Restore Factory Default Settings The Reset button (see “Rear Panel” on page 1-8) has two functions: • Reboot. When pressed and released quickly, the WNDAP350 will reboot (restart). •...
  • Page 109: Default Settings And Technical Specifications

    Appendix A Default Settings and Technical Specifications This appendix provides the factory default settings and technical specifications for the ProSafe Dual Band Wireless-N Access Point WNDAP350. Factory Default Settings You can use the reset button located on the front of your device to reset all settings to their factory defaults.
  • Page 110 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table A-1. Access Point Default Configuration Settings Feature Description DHCP Client Disabled Time Zone USA-Pacific Time Zone Adjusted for Daylight Saving Disabled Time SNMP Enabled, but Trap forwarding disabled Spanning Tree Protocol Disabled Secure Telnet Enabled...
  • Page 111: Technical Specifications

    ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Technical Specifications Table A-2. WNDAP350 Technical Specifications Parameter ProSafe Dual Band Wireless-N Access Point WNDAP350 802.11a Data Rates 6, 9, 12, 18, 24, 36, 48, 54, and 108 Mbps (Auto-rate capable) 802.11na Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps,...
  • Page 112 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Table A-2. WNDAP350 Technical Specifications Parameter ProSafe Dual Band Wireless-N Access Point WNDAP350 802.11ng Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps, 115.56 Mbps, 130 Mbps, 144.44 Mbps Data Rates for Channel Width=20MHz and Guard Interval=long (800ms): Best,...
  • Page 113: Appendix B Related Documents

    Appendix B Related Documents This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product. Document Link Windows XP and Vista Wireless http://documentation.netgear.com/reference/enu/winzerocfg/index.htm Configuration Utilities Internet Networking and TCP/IP http://documentation.netgear.com/reference/enu/tcpip/index.htm...
  • Page 114 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Related Documents v1.1, November 2009...
  • Page 115: Appendix C Command Line Reference

    Appendix C Command Line Reference The ProSafe Dual Band Wireless-N Access Point WNDAP350 can be configured either through the command line interface (CLI), a Web browser, or an MIB browser. The CLI allows viewing and modification of the configuration from a terminal or PC through a telnet connection. Command Sets keyword Description...
  • Page 116 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual transmissions) | | | | |-knownap-add --add known access point | | | | |-knownap-del --delete known access point | | | | |-macacl-add --add wireless access control (ACL) | | | | |-macacl-database --delete wireless access control (ACL) database | | | | |-macacl-del...
  • Page 117 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | |-name --profile name | | | | | | |-presharedkey --pre-shared key | | | | | | |-security-separation --disable associated wireless client communication | | | | | | |-ssid --network name (1-32 chars) | | | | | | |-status --profile status...
  • Page 118 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | |-5> --5th security profile | | | | | | |-authentication --authentication type | | | | | | |-encryption --data encryption | | | | | | |-hide-network-name --hide network name | | | | | | |-key1 --wireless wep key 1...
  • Page 119 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | |-presharedkey --pre-shared key | | | | | | |-security-separation --disable associated wireless client communication | | | | | | |-ssid --network name (1-32 chars) | | | | | | |-status --profile status | | | | | | |-vlan-id...
  • Page 120 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | | |-status --profile status | | | | | | | |-wep-pass-phrase --wireless wep passphrase key | | | | | | | |-wepkey --wireless wep key | | | | | | | |-wepkeytype --wireless wep key type | | | | | | |...
  • Page 121 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | |-dtim-interval --wireless DTIM period in beacon interval | | | | |-extension-protection-spacing --wireless extension protection spacing | | | | |-fragmentation-length --wireless fragmentation threshold(even only) | | | | |-guardinterval --interval (from interference from other transmissions) | | | | |-knownap-add...
  • Page 122 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | |-encryption --data encryption | | | | | | |-hide-network-name --hide network name | | | | | | |-key1 --wireless wep key 1 | | | | | | |-key2 --wireless wep key 2 | | | | | | |-key3 --wireless wep key 3...
  • Page 123 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | |-security-separation --disable associated wireless client communication | | | | | | |-ssid --network name (1-32 chars) | | | | | | |-status --profile status | | | | | | |-vlan-id --VLAN id | | | | | | |-wep-pass-phrase...
  • Page 124 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | |-encryption --data encryption | | | | | | |-hide-network-name --hide network name | | | | | | |-key1 --wireless wep key 1 | | | | | | |-key2 --wireless wep key 2 | | | | | | |-key3 --wireless wep key 3...
  • Page 125 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | | |-wepkeytype --wireless wep key type | | | | | | | | | | | | | |-2> --2nd security profile | | | | | | | |-authentication --authentication type | | | | | | | |-encryption --data encryption...
  • Page 126 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | | | | | | | | |-ip> --set host IP | | |-address --host IP address | | |-default-gateway --IP address of default gateway | | |-dhcp-client --enable dhcp client | | |-dns-server --IP address of DNS server | |-log>...
  • Page 127 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual | |-time> --time Setting | | |-custom-ntp-server --custom NTP server host name | | |-daylightsaving --daylight saving | | |-ntp-client --NTP client host name | | |-ntp-server --NTP server host name | | |-time-zone --time zone | |-vlan>...
  • Page 128 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual C-14 Command Line Reference v1.1, November 2009...
  • Page 129 Index Numerics access point name access point, more than one 2-17 2.4 GHz/5 GHz concurrent 2.4Ghz activity log 3-12 20 MHz 2-17 20/40 MHz 2-17, 2-20 802.11n, recommended for 20/40MHz 2-19 with WPA2, with RADIUS 2-38 40 MHz 2-17 with WPA2-PSK 2-42 5 GHz aggregation length...
  • Page 130 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual rate 3-16 coverage area 1-1, 2-11 SSID 3-16 CSMA/CA 4-5, 4-7 state 3-16 CSMA/CD (Carrier Sense Multiple Access with status 3-16 Collision Detection) 4-5, 4-7 type 3-16 CTS (Clear to Send) wireless network name (SSID) 3-16 data encryption settings...
  • Page 131 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual documentation DTIM (Delivery Traffic Indication Message) interval Infrastructure mode, selecting or changing channels 2-19 6, 4-8 interference, channel settings 2-16 dual band concurrent, use interference, least 2-16 dynamic encryption key generation, support interference, reduce 2-3, 2-16 dynamic IP address, configure...
  • Page 132 4-14 point-to-point bridge 4-10 configure 4-13 point-to-point bridge mode NetBIOS name wireless point-to-multi-point bridge 4-10 Netgear products, compatible power adapter 1-10 network authentication, types of power consumption legacy 802.1x 2-25 Power over Ethernet (PoE), support for open system 2-25...
  • Page 133 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual reset button, using broadcast wireless network name (SSID) 2-25 data encryption 2-26 rebooting security profile name 2-24 losing previous state 3-17 VLAN ID 2-27 reception wireless client security separation 2-27 redirect HTTP wireless network name (SSID) 2-24 redirect URL...
  • Page 134 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual default upgradeable firmware, support for support documentation syslog server setup 3-11 VLAN (802.1Q) 2-33 system information 3-12 VLAN ID fields 3-13 DHCP server system requirements VLAN security profiles (VLAN ID), support for Voice-over-IP (VoIP) technical specifications Telnet client...
  • Page 135 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Wireless Multimedia (WMM), support for output power 2-17 turn radio on 2-16 Wireless Multimedia Extension (WME) wireless mode 2-15 wireless network name (SSID) 2-32 wireless network name (SSID) 2-16 wireless point-to-multi-point bridge 4-10 wireless settings, basic 2-10...
  • Page 136 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual restrictions for WPA 2-40 wireless client security separation 2-41 Index-8 v1.1, November 2009...

This manual is also suitable for:

Wndap350-100nas

Table of Contents