NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR. To register your product, get the latest product updates, get support online, or for more information about the topics covered in this manual, visit the Support website at: http://support.netgear.com...
Getting Started The ProSafe Wireless-N Access Point WNAP210 is the basic building block of a wireless LAN infrastructure. It provides connectivity between Ethernet wired networks and radio-equipped wireless computers, wireless devices, print servers, and other devices. This chapter covers the following topics: •...
Guide along with the original packing materials, and use the packing materials to repack the access point if you need to return it for repair. To qualify for product updates and product warranty, NETGEAR encourages you to register on the NETGEAR website at http://my.netgear.com/registration/login.aspx.
ProSafe Wireless-N Access Point WNAP210 Hardware Description This section describes the front and rear hardware functions of the access point. Front Panel The front hardware functions are described in the following figure and table. Power Test Ethernet WLAN Figure 1. Front view The following table explains the LEDs: Table 1.
ProSafe Wireless-N Access Point WNAP210 Rear Panel Power Ethernet Restore Factory Settings Figure 2. Rear panel The access point rear panel functions are described in the following list: Power socket. This socket connects to the 12V 1.0A power adapter. •...
Installation and Configuration This chapter describes how to set up your access point for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n wireless adapters to connect to the Internet, or access printers and files on your LAN. This chapter covers the following topics: •...
ProSafe Wireless-N Access Point WNAP210 Wireless Equipment Placement and Range Guidelines The operating distance or range of your wireless connection can vary significantly based on the physical placement of the access point. The latency, data throughput performance, and notebook power consumption of wireless adapters also vary depending on your configuration choices.
ProSafe Wireless-N Access Point WNAP210 Connect to the Access Point Before mounting the access point in a high location, set up and test the Tip: access point to verify wireless network connectivity. To connect the access point: Prepare a computer with an Ethernet adapter. If this computer is already part of your network, record its TCP/IP settings.
From the Country/Region drop-down list, select the region where the access point will be used (the country/region is not configurable in the United States but is configurable in the rest of the world). Click Apply. Note: If your country or region is not listed, check with NETGEAR support. Installation and Configuration...
ProSafe Wireless-N Access Point WNAP210 Select Configuration > System > Basic > Time. Adjust the following fields: Time Zone. From the drop-down list, select the local time zone for your access point • from a list of all available time zones. The default is USA-Pacific. The access point will get the current time from the connecting computer.
ProSafe Wireless-N Access Point WNAP210 To configure the basic IP settings of your access point: Select Configuration > IP. The IP Settings screen displays: If necessary, edit the IP address fields described in on page 14. IP Settings Fields Click Apply to save your basic IP settings.
ProSafe Wireless-N Access Point WNAP210 Set Up and Test Basic Wireless Connectivity Follow the instructions in this section to set up and test basic wireless connectivity. Once you have established basic wireless connectivity, you can enable security settings appropriate for your needs.
ProSafe Wireless-N Access Point WNAP210 Click Apply to save any changes. Select Security. For initial configuration and testing, the Security field for Profile 1 (the default profile) is set to Open System and the SSID is set to NETGEAR_11ng (for information about hot to configure a profile, see on page 21).
ProSafe Wireless-N Access Point WNAP210 Channel/Frequency The wireless channel in use can be from 1 to 11 for the United States and Canada, or 1 to 13 for Europe and Australia. The default is Auto. Do not change the wireless channel unless you experience interference (shown by lost connections or slow data transfers).
ProSafe Wireless-N Access Point WNAP210 Output Power This is the transmit power of the access point. The options are Full, Half, Quarter, Eighth, and Minimum. Decrease the transmit power if two or more access points are close together and use the same channel frequency. The default is Full. (The transmit power might vary depending on the local regulatory regulations.
ProSafe Wireless-N Access Point WNAP210 To deploy the access point: Disconnect the access point from the computer you used to configure it, and put the access point where it will be deployed. The best location is elevated, such as on a wall or ceiling or on the top of a cubicle, at the center of your wireless coverage area, and within line of sight of all the mobile devices.
See on page 21 Security Profiles WEP and TKIP provide only legacy (slower) rates of operation. Note: NETGEAR recommends AES encryption so that you can use the 11n rates and speed. See on page 22. Table 2 Installation and Configuration...
Profile Name. Use a name that makes it easy to recognize the profile and to tell profiles • apart. (The default names are NETGEAR_11ng, NETGEAR-1_11ng, NETGEAR-2_11ng, and so on.) You can enter a value of up to 32 alphanumeric characters.
ProSafe Wireless-N Access Point WNAP210 Network Authentication Settings The access point is set by default as an open system with no authentication. When setting up network authentication, bear in mind the following: If you are using access point mode, then all options are available. In other modes such as •...
If the hubs or switches on your LAN support the VLAN (802.1Q) standard and this feature has been enabled, the default VLAN ID for WNAP210 is associated with each profile. The default profile VLAN ID has to match the IDs used by other network devices.
ProSafe Wireless-N Access Point WNAP210 RADIUS Server Settings You can set up or modify the RADIUS server settings to compliment network authentication security options. The RADIUS server needs to be used with Legacy 802.1x, and can be used with WPA and WPA2 network authentication. When using a RADIUS server, specify the RADIUS server settings before completing the network authentication security profile.
ProSafe Wireless-N Access Point WNAP210 Change or Edit a Security Profile The access point allows you to set up eight different security profiles. You can configure each profile with a different security option for network authentication. To set up a security profile: If you are using a RADIUS server, configure the RADIUS settings first, as described in the on page 24.
Page 26
If the hubs and switches on your LAN support the VLAN (802.1Q) standard and this feature has been enabled, the default VLAN ID for WNAP210 is associated with each profile. The default profile VLAN ID has to match the IDs used by other network devices.
Page 27
ProSafe Wireless-N Access Point WNAP210 Select the radio button of the security profile you want to modify, and click Edit.. In the Network Authentication field, select one of the following: WPA2 with Radius • WPA with Radius • WPA2 & WPA with Radius •...
Page 28
This feature is intended for hotspots and other public access situations. Click Apply to save your settings. WEP Security WEP is a legacy security option. NETGEAR recommends that you use a newer security option such as WPA2 or WPA to protect your network. ...
To restrict access based on MAC addresses: Log in to the WNAP210 using the default address of http://192.168.0.236, user name of admin, and default password of password, or whatever LAN address and password you have set up.
Page 30
ProSafe Wireless-N Access Point WNAP210 Select Configuration > Security > Advanced > MAC Authetication. The MAC Authetication screen displays. Select the Turn Access Control On check box to enable the access control feature. Select the access control database options. The options are: Local MAC Address Database.
Management This chapter covers the following topics: • Change the Password • Remote Management • Remote Console • Upgrade the Access Point Firmware • Save or Restore the Configuration File • Enable the Syslog Server • Restore Defaults...
Click Apply to save your change. Remote Management Both the SNMP and Remote Console are enabled by default, which allows for remote management of the WNAP210 from a client running SNMP management software, as well as from a secure Telnet console. Management...
Page 33
ProSafe Wireless-N Access Point WNAP210 To set up an SNMP management interface: Select Maintenance > Remote Management > SNMP. The SNMP screen displays, as shown in the following figure: Enter the following information in the SNMP fields: SNMP. Enable SNMP to allow the SNMP network management software, such as HP •...
ProSafe Wireless-N Access Point WNAP210 Remote Console Select Maintenance > Remote Management > Remote Console. Enter the following information in the Remote Console screen. Secure Shell (SSH). If set to Enable, the wireless access point allows remote access • only through Secure Shell and Secure Telnet. The default is Enable.
The firmware is stored in flash memory, and can be upgraded as NETGEAR releases new firmware . You can download upgrade files from the NETGEAR website. If the upgrade file is compressed (.zip file), you need to first extract the image (.rmt) file before sending it to the access point.
Backup Settings screen displays. Click Backup. Your browser extracts the configuration file from the access point and prompts you for a location on your computer to store the file. Give the file a meaningful name, such as WNAP210.cfg and click Save. ...
ProSafe Wireless-N Access Point WNAP210 Enable the Syslog Server The Syslog screen allows you to enable the syslog option if you have a syslog server on your LAN. To enable a syslog server: Select Configuration > System > Advanced > SysLog to display the Syslog screen.
Page 38
ProSafe Wireless-N Access Point WNAP210 To restore the factory settings: Select Maintenance > Reset > Restore Defaults. The Restore Defaults screen displays: Select the Yes radio button. Click Apply. The access point password is password, the access point DHCP client is disabled, the default LAN IP address is 192.168.0.236, and the access point name is reset to the name...
Monitoring This chapter covers the following topics: • System Information • Wireless Stations • Enable Rogue AP Detection • View and Save AP Lists • Activity Log • Network Traffic Statistics...
ProSafe Wireless-N Access Point WNAP210 System Information The System screen you access from the Monitoring tab provides a summary of the current access point configuration settings, including current IP settings and current wireless settings. This information is read-only, so any changes have to be made on other screens.
ProSafe Wireless-N Access Point WNAP210 Wireless Stations This screen shows all IP devices associated with this access point in the wireless network defined by the wireless network name (SSID). For each device, the screen shows the station ID, MAC address, IP address, BSSID, SSID, AID, channel rate, status (whether or not the station is allowed to communicate with the access point), type, mode, and state.
ProSafe Wireless-N Access Point WNAP210 To enable rogue AP detection: Select Configuration > Security > Advanced > Rogue AP. The Rogue AP screen displays: Click Refresh to discover the APs. See the following section for more information. Click Move to add APs in the Unknown AP List to the Known AP List.
ProSafe Wireless-N Access Point WNAP210 View and Save AP Lists The access point detects nearby access points and wireless stations and maintains them in a list. You can use this list to prevent wireless stations from connecting to the access point.
ProSafe Wireless-N Access Point WNAP210 Activity Log The Activity Log screen displays the access point system activity. Select Monitoring > Logs. The Logs screen displays: Click Refresh to update the display, click Clear to clear the log content, or click Save As to save the log contents into a file on your computer or to save the file to a disk drive.
Page 45
ProSafe Wireless-N Access Point WNAP210 You can click Refresh to update the statistics information for each interface. The following information fields are displayed on the Statistics screen. Packets. The number of packets sent and received since the access point was restarted.
Advanced Configuration This chapter describes how to configure the advanced features of your access point. This chapter includes the following sections: • 802.1Q VLAN • Hotspot Settings • Advanced Wireless Settings • Advanced QoS Settings • Wireless Bridging and Repeating...
ProSafe Wireless-N Access Point WNAP210 802.1Q VLAN The 802.1Q VLAN protocol on the access point logically separates traffic on the same physical network. Select Configuration > System > General to display the following screen: Untagged VLANs When the Untagged VLAN check box is selected, one VLAN can be configured as an untagged VLAN.
ProSafe Wireless-N Access Point WNAP210 Hotspot Settings If you want the access point to capture and redirect all HTTP (TCP, port 80) requests, use this feature to redirect the requests to the specified URL. For example, a hotel might want all wireless connections to go to its server to start a billing transaction.
ProSafe Wireless-N Access Point WNAP210 To configure advanced wireless settings: Select Configuration > Wireless > Advanced > Wireless Settings. The Wireless Settings screen displays: Enter the appropriate information in the following fields: Click Apply to enable the wireless settings.
ProSafe Wireless-N Access Point WNAP210 RIFS Transmission. Reduced interframe space. RIFS transmissions are shorter than • other interframe spaces, and if this feature is enabled, the access point allows transmission of successive frames at different transmit powers. The default is disabled.
ProSafe Wireless-N Access Point WNAP210 The following table describes the settings for QoS queues. Table 4. QoS queues and parameters QoS queue Description Data 0 (Voice) High-priority queue, minimum delay. Time-sensitive data such as VoIP and streaming media are automatically sent to this queue.
Page 52
Enable Wireless Clients Association table, and select the corresponding check box in the Enable column. Wireless Point-to-Multi-Point Bridge. Select this only if this WNAP210 access point is • the master for a group of bridge-mode wireless stations. This mode supports default association with wireless clients.
ProSafe Wireless-N Access Point WNAP210 Point-to-Point Bridge APs in point-to-point bridge mode AP 2 AP 1 Hub or switch Router LAN Segment 2 LAN Segment 1 Figure 3. Point-to-point bridge mode To configure a point-to-point bridge: Select Configuration > Wireless Bridge > Bridging and Repeating. The Bridging and Repeating screen displays.
ProSafe Wireless-N Access Point WNAP210 Configure the other access point (AP 2) on LAN Segment 2 in point-to-point bridge mode. AP 1 needs to have AP 2’s MAC address in its Remote MAC Address field, and AP 2 needs to have AP 1’s MAC address in its Remote MAC Address field.
Page 55
Click Apply to save your settings. You can extend this multi-point bridging by adding additional access points configured in point-to-point bridge mode for each additional LAN segment. Furthermore, you can extend the range of the wireless network with NETGEAR wireless antenna accessories. Advanced Configuration...
ProSafe Wireless-N Access Point WNAP210 Wireless Repeater AP 1 All APs in repeater mode AP 3 AP 2 Router Router LAN Segment 1 LAN Segment 2 Figure 5. Wireless repeater To configure the access point as a wireless repeater: For the first access point (AP 1) on LAN Segment 1, select Configuration >...
ProSafe Wireless-N Access Point WNAP210 A computer on any LAN segment should be able to connect to the Internet or share files and printers with computers or servers connected to any of the three WLAN segments. Click Apply to save your settings.
• Troubleshooting with the LEDs • Cannot Connect to the Access Point to Configure It • Wireless Access to the Network • Time-Out Error for URL or IP Address For up-to-date WNAP210 installation details and troubleshooting Note: guidance, visit http://support.netgear.com.
If it is plugged directly into the wall, verify that it is not a switched outlet. Make sure that you are using the correct NETGEAR power adapter supplied with your •...
ProSafe Wireless-N Access Point WNAP210 Cannot Connect to the Access Point to Configure It Check these items: The access point is installed correctly, LAN connections are OK, and it is powered on. • Check that the LAN port LED is green to verify that the Ethernet connection is OK.
Page 61
ProSafe Wireless-N Access Point WNAP210 If the access point is configured correctly, check your Internet connection (DSL or cable • modem, and so on.) to make sure that it is working correctly. Try again. • Troubleshooting and Debugging...
ProSafe Wireless-N Access Point WNAP210 Factory Default Settings You can use the Restore Factory Settings button on the rear panel to reset all settings to their factory defaults. This is called a hard reset. Pressing this button for a shorter period of time simply causes your device to reboot.
Page 64
ProSafe Wireless-N Access Point WNAP210 Table 5. Access point default configuration settings (continued) Feature Default setting Spanning Tree Protocol Disabled Secure Telnet Enabled Wireless operating mode Access Point Access point name netgearxxxxxx, where xxxxxx represents the last 6 digits of the wireless access point MAC address.
Command Line Reference The ProSafe Wireless-N Access Point WNAP210 (AP) can be configured through either the command-line interface (CLI), a web browser, or a MIB browser. The CLI allows viewing and modification of the configuration from a terminal or computer through a Telnet connection.
Eesti [Estonian] Käesolevaga kinnitab NETGEAR Inc. seadme Radiolan vastavust direktiivi 1999/5/EÜ põhinõuetele ja nimetatud direktiivist tulenevatele teistele asjakohastele sätetele. English Hereby, NETGEAR Inc., declares that this Radiolan is in compliance with the essential requirements and other relevant provisions of Directive 1999/5/EC.
Page 76
ProSafe Wireless-N Access Point WNAP210 Español Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los [Spanish] requisitos esenciales y cualesquiera otras disposiciones aplicables o exigibles de la Directiva 1999/5/CE. Ελληνική ΜΕ ΤΗΝ ΠΑΡΟΥΣΑ NETGEAR Inc. ΔΗΛΩΝΕΙ ΟΤΙ Radiolan ΣΥΜΜΟΡΦΩΝΕΤΑΙ ΠΡΟΣ...
Page 77
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. FCC Declaration of Conformity We, NETGEAR, Inc., 350 East Plumeria Drive, San Jose, CA 95134, declare under our sole responsibility that the ProSafe Wireless-N Access Point WNAP210 complies with Part 15 Subpart B of FCC CFR47 Rules. Operation is subject to the following two conditions: •...
Canadian Department of Communications Radio Interference Regulations This digital apparatus (ProSafe Wireless-N Access Point WNAP210) does not exceed the Class B limits for radio-noise emissions from digital apparatus as set out in the Radio Interference Regulations of the Canadian Department of Communications.
Page 79
ProSafe Wireless-N Access Point WNAP210 Interference Reduction Table The following table shows the recommended minimum distance between NETGEAR equipment and household appliances to reduce interference (in feet and meters). Household Appliance Recommended Minimum Distance (in feet and meters) Microwave ovens...
Index DHCP client Numerics DTIM interval 192.168.0.210, static IP address dynamic IP addresses, enabling 255.255.255.0 default subnet equipment placement access control Ethernet RJ-45 port access point default name access point mode access point, deployment of access points, placement of multiple factory default settings activity logs factory default settings, restoring...
Page 81
ProSafe Wireless-N Access Point WNAP210 LEDs restricting access by MAC address LEDs, troubleshooting with RIFS transmission logs, activity rogue AP detection logs, syslog RTS threshold MAC address secondary DNS server restricting access security options MAC authentication security options, described MCS Index...
Page 82
ProSafe Wireless-N Access Point WNAP210 wireless network name wireless radio, turning off and on wireless range wireless repeater, configuring wireless security options wireless settings, advanced wireless stations wireless stations, trusted WPA with RADIUS...