Manuel d'utilisation / d'entretien du produit WNDAP620 du fabricant NETGEAR
Aller à la page of 172
350 East Plumeria Drive San Jose, CA 95134 USA October 2012 202-10983-02 v2.0 Pr oSaf e Pr emium 3 x 3 Dual-Ban d W ir e less -N A ccess P o in t WND AP6 20 Refe ren c e M a nu a l.
2 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Support Thank you for choosing NETGEAR. After installing your device, locate the serial number on the labe l of your product and use it to register your product at https://my .n etgear .
3 Contents Chapter 1 Introduction About the ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 What Is in the Box? . . . . . . . . . . .
4 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Chapter 3 Wireless Configur ation and Security Wireless Data Sec urity Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Security Profiles . . . . . . . . . .
5 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Ethernet LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Configure Hotspot Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
6 1 1. Intr oduc ti o n This chapter introduces the NETGEAR® ProSafe® Premium 3 x 3 Dua l-Band Wireless-N Access Point WNDAP620 a nd descr ibes some of the key features.
Introduction 7 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 chains and three receive radio chains, also refe rred to as 3x3 multiple input, multiple output (MIMO), can increase wireless throughput con siderably .
Introduction 8 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 System R equirements Before installing the wireless acce ss point, make sure that your system meets these requirements: .
Introduction 9 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • DHCP server and client . The DHCP server of the wireless access point can provide a dynamic IPv4 or IPv6 address to wireless cl ients. The wireless a cce ss point can also act as a client and obt ain an IPv4 or IPv6 address from a DHCP server on the LAN.
Introduction 10 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • QoS . Quality of Service (QoS) support let s you configure parameters tha t affect tra ffic flowing from the wirele.
Introduction 11 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 802.11b/g/n and 802.11a/n Standards–Based Wireless Networking The wireless access point prov ides a bridge between wired Et hernet LANs and 802.1 1b/g/n- and 802.1 1a/n-compatible wireless L AN networks.
Introduction 12 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 1. T able 1. T op pane l LEDs Item LED Description 1 Power/T est Off Power is of f. On (green) Power is on. Amber , then blinking gree n A self-test is running or software is being loaded.
Introduction 13 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Re ar P a ne l Figure 2. The rear p anel component s of the wireless access poin t, from lef t to right, are described in the following list: 1. First reverse SMA connector for an optional 2.
Introduction 14 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 3. R egister the Wireless Access P oint T o qualify for product updates and product warranty , NETGEAR encourages yo u to register your product.
Introduction 15 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 5. 3. Enter the information in the blank fields. The serial number , model number , and date of purchase are entered automatically .
Introduction 16 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 6. 5. Complete the registration form. 6. Click su bmit ..
17 2 2. Inst allati on and Basi c Conf igur ati on This chapter describes how to inst all and confi gure the wireless access p oint for wireless connectivity to your LAN. This basic confi guration en ables computers with either 2.4 GHz 802.1 1b/g/n or 5 GHz 802.
Inst allation and B asic Configuration 18 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Failure to follow these guideli nes can result in sig nificant performance degradation or inability to connect wire lessly to the wireless access point.
Inst allation and Basic Configuration 19 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Hardware R equirements for Computers on Y our LAN T o connect to the wireless access point on your network, each computer needs to h ave an 802.
Inst allation and B asic Configuration 20 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Install and Configure the Wireless Access P o int Install and configu re your wireless access poi nt in the ord er of the following sections: 1.
Inst allation and Basic Configuration 21 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 7. 5. T urn on your computer . 6. Conn ect the power adapter to the wireless access point. Tip: T he wireless access point supports Power ove r Ethernet (PoE).
Inst allation and B asic Configuration 22 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Log In to the Wireless Access P oint The default IP address of your wirele ss access point is 192.168 .0.100. By default, the DHCP client on the wireless access point is disable d so you can log in using the default IP a ddress.
Inst allation and Basic Configuration 23 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 10. These buttons have th e following functions: • Edit . Allows you to edit the existing configuration . • Canc el . Cancels all configuration changes that you made on the screen.
Inst allation and B asic Configuration 24 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 2. Configure the settings as explained in the following table: 3. Click Apply to save your settings. T o configure time settings: 1. Select Confi guratio n > System > Basic > Ti me .
Inst allation and Basic Configuration 25 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the IPv4 Settings Note: For information about how t o configure the IPv6 settings, see Configure the IPv6 Settings on p age 99 .
Inst allation and B asic Configuration 26 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 13. 2. Configure the IPv4 settings as explained in the following table: 3.
Inst allation and Basic Configuration 27 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure the Optional DHCPv4 Server The wireless access point provides a built-in DHCPv4 server for wireless clients only , which can be especially useful in small networks .
Inst allation and B asic Configuration 28 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the Basic Wireless Settings For proper compliance and comp atibility between similar products in your coverage area, you need to configure the 802.
Inst allation and Basic Configuration 29 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Note: The radio wave icon ( ) displays next to the enabled wire less mode . Figure 15. 2. S pecify the wireless mode in the 2.4 GHz band by selecting one of the following radio buttons: • 11 b .
Inst allation and B asic Configuration 30 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. S pecify the remaining wireless settings as explained the following table: T able 6.
Inst allation and Basic Configuration 31 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 6. Click Apply to save your settings and enable the selected wireless mode. Note: For information about how t o configure advanced wireless settings, see Configure Advanced W ireless Settings on p age 107 .
Inst allation and B asic Configuration 32 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 16. 2. S pecify the wireless mode in the 5 GHz band by selecting one of the following radio buttons: • 11 a . 802.1 1n-compliant devices can connect to the access point because they are backward compatible .
Inst allation and Basic Configuration 33 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. S pecify the remaining wireless settings as explained the following table: T able 7.
Inst allation and B asic Configuration 34 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Click Apply to save your settings and enable the selected wireless mode. Note: For information about how to configure advanced wire less settings, see Configure Advanced W ireless Settings on p age 107 .
Inst allation and Basic Configuration 35 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 NETGEAR recommends that you comple te the following tasks before you deploy the wireless acce.
Inst allation and B asic Configuration 36 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Do not plac e the wireless access point in a false ceiling space facing up. T o instal l the wireless access point using the ceiling i nst allation kit: 1.
Inst allation and Basic Configuration 37 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 4. Attach the mounting plate to the clamp. 5. Conn ect the cables to the wireless access point. 6. Att ach the wireless access point to the mounting plate.
Inst allation and B asic Configuration 38 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. Attach the cover to the wireless access point. W all Installation The best location for wall inst allation is at the center of you r wireless coverage area, a nd within line of sight of all mobile devices.
Inst allation and Basic Configuration 39 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 2. Detach the mounting plate from the wireless access point. 3. Att ach the mounting plate to the wall. 4. Conn ect the cables to the wireless access point.
Inst allation and B asic Configuration 40 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Attach the wireless access point to the mounting plate.
Inst allation and Basic Configuration 41 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Desk Installation T o install th e wireless access point on a desk: Attach the rubber f eet to the holes in the bottom of the wireless access point.
42 3 3. Wir el ess Co nfigu r a tio n a nd S ecurit y This chapter describes how to configure the wirele ss features of the wire less access point. The chapter includes the followin g sections: • Wi.
Wireless Configuration and Security 43 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Unlike wired network dat a, your wireless dat a transmissions can extend beyond you r walls and can be received by anyon e with a compatible ada pter .
Wireless Configuration and Security 44 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • WP A and WP A-PSK (TKIP) . Wi-Fi Protected Access (WP A) data en cryption provides strong data secu rity with T emporal Key Integrity Protocol (TKIP) encryption.
Wireless Configuration and Security 45 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 T o set up a security profile, select its network auth entication type, data encryptio n, wirel.
Wireless Configuration and Security 46 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Before Y ou Change the SSID , WEP , and WP A Settings For a new wireless network, print or copy one of t he following forms and fill in the settings.
Wireless Configuration and Security 47 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 F orm for 802.11a/an Modes Print this page and store th e security information in a safe place: • SSID : T he service set identifier (SSID) identifies the wireless local area network.
Wireless Configuration and Security 48 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure and Enable Security P rofiles T o configure and enable a security profile , you need to enable the associated radio: • For 80 2.1 1b/bg/ng modes, the 2.
Wireless Configuration and Security 49 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 19. The following ta ble explains the fields of the Profile Settings screen: 3. T o configure a wireless security prof ile, select the corresponding radio button to the left of the wireless security profile.
Wireless Configuration and Security 50 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 20. 4. S pecify the settings of the Profile Definition section of the Edit Secu rity Profile screen as explained in the following table: T able 9.
Wireless Configuration and Security 51 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. S pecify the settings of the Authentication Set tings section of the Edit Security Profile screen as explained in the following table. The wireless access point is set by default as an open syst em with no authentication.
Wireless Configuration and Security 52 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Optional: In the QoS Policies section of the screen, select a QoS policy from the Incoming drop-down list, Outgoing drop-down list, or both.
Wireless Configuration and Security 53 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 W ARNING: If you use a wireless computer to configure wireless sec urity settings, you are disconnected when you click Apply .
Wireless Configuration and Security 54 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 22. Configure Legacy 802.1X T o use legacy 802.1X security , you need to de fine RADIUS server settings. For information about RADIUS servers, see Configure RADIUS Se rver Settings on p age 57 .
Wireless Configuration and Security 55 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 23. Configure WP A with RADIUS , WP A2 wi th RADIUS, and WP A & WP A2 with RADIUS WP A, WP A2, and WP A & WP A2 security requires RADIUS-based 802.
Wireless Configuration and Security 56 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure WP A-PSK , WP A2-PSK , and WP A-PSK & WP A2-PSK WP A-PSK, WP A-PSK, and WP A-PSK &.
Wireless Configuration and Security 57 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • WP A-PSK & WP A2-PSK Figure 29. Configure RADIUS Server Settings For authentication, accounting, or both aut hentication and accounting using RADIUS, you need to configure primary servers an d optional secondary servers.
Wireless Configuration and Security 58 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T o configure the RADIUS server settings: 1. Select Configuration > Security > Advanced > Radius Server Settings . The Radius Server Settings screen displays.
Wireless Configuration and Security 59 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Secondary Authentication Serve r IPv4 Address or IPv6 Address Enter the IP ad dress of the secon dary RADIUS server for authentication.
Wireless Configuration and Security 60 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 R estrict Wireless Access by MA C Address For increased security , you can restrict access to an SSID by allowing access to only specific computers or wireless stations based on thei r MAC addresses.
Wireless Configuration and Security 61 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. Click Refresh to refresh the Available Wireless S tations table. The wi re le s s a cc e ss p o in t places the MAC addresses of the att ached wireless stations in this t able.
Wireless Configuration and Security 62 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 32. 2. S pecify the settings as explained in the following table: 3. Click Apply to save your settings. Configure Basic Wireless Quality of Service Wi-Fi Multimedia (WMM) is a subset of the 802.
Wireless Configuration and Security 63 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • V ideo . The second highest p riority queue with low delay is given to this q ueue. V ideo applications are routed to this queue. • Best Effort .
64 4 4. M anagemen t and Monitor ing This chapter describes how to use the ma nagement and monitoring features of the wireless access point. The chapter includes t he following sections: • Enable Re.
Management and M onitoring 65 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 34. 2. S pecify the settings as explained in the following table: 3.
Management and Monito ring 66 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Secure Shell and T elnet Management T o configure remote console features: 1. Select Ma intenance > Remote Management > Remote Console . The Remote Console screen displays: Figure 35.
Management and M onitoring 67 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 36. 4. Enter the login name and password ( admin and password are the default s). After successful login, the > prompt ap pears, preceded by the name of the wireless access point.
Management and Monito ring 68 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Y ou cannot perform the sof tware upgrade from a comp uter that is connected to the wireless access point over a wireless link. Y ou need to use a computer that is connecte d to the wireless access point over an Ethernet cable.
Management and M onitoring 69 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 5. Click Browse and locate the image (.zip) upgrade file. 6. Click App ly to initiate the upgrade process. During the upgrade process, the wireless ac cess point auto matically restart s.
Management and Monito ring 70 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 7. V erify that the new software file has been installed by selecting Monitoring > System . The System screen displays (see Figure 46 on p ag e 78 ). The firmware version is shown in the Access Point Information section of the screen.
Management and M onitoring 71 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 R estore the Configuration IMPORT ANT : During the restoration process, do not try to go online , turn o.
Management and Monito ring 72 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: After you have restored the factory default sett ings on the wireless access point: * All custo m configurations are lost. * The login password is p assword.
Management and M onitoring 73 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Use the R eset Button to R est ore Factory Default Settings T o restore the factory default settings whe.
Management and Monito ring 74 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The reboot process typically t akes about 1 minute. When the T est LED turns off, wait a few more seconds before doing a nything with the wireless access point.
Management and M onitoring 75 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Manage User Accounts The admin user account is the defau lt user account, which you cannot delete. However , you can add other user account s, modify them, and delete them.
Management and Monito ring 76 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T o change the name for a user account: 1. On the User Accounts screen, in the lower p art of the screen, select the user from the Existing Users drop-down list.
Management and M onitoring 77 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 45. S pecify the settings as explained in the following t able: 2.
Management and Monito ring 78 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T o view the System screen: Select Monitoring > System .
Management and M onitoring 79 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 The following ta ble explains the fields of the System screen: T a bl e 19 . Syst em sc reen fiel ds Setting Description Access Point Information Access Point Name The NetBIOS name .
Management and Monito ring 80 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Monitor Wireless Stations The Wireless S tatio ns screen contains the A vailable Wireless S tations t able.
Management and M onitoring 81 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 47. T o update the list, click Refresh . If the wireless access point is rebooted, th e wireless station dat a is lost until the wireless access point rediscovers the devices.
Management and Monito ring 82 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 The following t able explains the fields of the Wireless S tations Details screen: T able 20. Wireless st ations det ails fields Setting Description MAC Address The MAC address of the wireless station.
Management and M onitoring 83 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 View the Activity Log Y ou can vie w the wireless access point’s activity log s onscreen and save the logs. T o display the activity log and save it: 1.
Management and Monito ring 84 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 50. T o update the statistics inf ormation, click Refresh .
Management and M onitoring 85 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Enable R ogue AP Detection and Monitor Access P oints • Enable and Configure Rogue AP Detection • V .
Management and Monito ring 86 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 51. 2. Optional: T o enable and configure rogu e AP detection for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. Select the T urn Rogu e AP Detection On check box to enable rogue AP detection.
Management and M onitoring 87 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • Select the Merge radio button to add the imported list of access point s to the existing Known AP List . 2. Click Br owse an d locate the file that contains the li st o f ac ce ss p oi nts .
Management and Monito ring 88 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 3. Click Save to export the list of unknown or known APs to a file. A window opens so you can browse to the location where you want to save the file. The default file name is macList.
Management and M onitoring 89 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and P r evention • Configure Wirele ss Intrusion Detection and .
Management and Monito ring 90 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Unauthentica ted association • Att ack . Multiple unauthenticated associati on request s (5 or more) that use spoofed MAC addresses of legitimate clients are sent to the wireless access point.
Management and M onitoring 91 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 EAPOL-start attack • Attack . Multiple EAPOL st art frames (5 or more) are sent to the wireless access point to i nitia te the RADIUS authentication process for clients.
Management and Monito ring 92 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 RF jamming attack • Att ack . Multiple RF transmissions (100 or more) are sent to the wireless access poin t, jamming the radio frequen cy . • R esult .
Management and M onitoring 93 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Known client associating with ad-hoc network • Detection . Clients that should be connected to the secured wireless network are instea d connected to wireless access points that are part of an ad hoc network.
Management and Monito ring 94 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T o enable and configure the IDS/IPS: 1. Select Configuration > IDS/IPS . The IDS/IPS screen displays: Figure 54. 2. Select the Enable radio button. By default , the IDS/IPS is disabled.
Management and M onitoring 95 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Configure Wireless Intrusion Detection and Prevention Mail Settings For the IDS/IPS to send a not ification according to the policy rule, you need to configure th e email settings.
Management and Monito ring 96 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Monitor T raps, Counters, and Ad Hoc Networks The IDS/IPS monitoring screens provide information about the most recent att acks, the number of occurrences per att ack, and ad hoc networks.
Management and M onitoring 97 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 57. T o update the information onscreen, click Refresh . Ad Hoc Networks T o display the ad hoc networks and their associated client s: Select Monit oring > IPS/IDS > Adhoc Networks .
Management and Monito ring 98 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 58. T o update the information onscreen, click Refresh .
99 5 5. Advan ce d Con figu r a tio n This chapter describes how to configure the advanced feat ures of the wireless access point. The chapter includes the followin g sections: • Configure IPv6 Se ttings and Optional DHCPv6 Server Settings • Configure Spa nning T ree Protocol, 802.
Advanced Configuration 100 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 W ARNING: If you enable the DHCP client, the IP address of the wireless access point changes when you c lick Apply , causing you to lose your connection to the wireless access point.
Advanced Configuration 101 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure the Optional DHCPv6 Server The wireless access point provides a built-in DHCPv6 server for wireless clients only , which can be especially useful in small networks .
Advanced Configuration 102 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 60. 2. Configure the settings as explained in the following table: T able 29. DHCP server settings for IPv6 Setting Description Select the DHCPv6 Server Enable radio button to enable the DHCP se rver .
Advanced Configuration 103 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 3. Click Apply to save your settings. Configure Spanning T ree Protocol, 802.
Advanced Configuration 104 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Select the Unt agged VLAN check box only if the hubs and switches on your LAN support the 802.1Q VL AN p rotocol. Likewise, change the untagged VLAN value only if the hub s and switches on your LAN support the 802.
Advanced Configuration 105 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 2. S pecify the settings as explained in the following table: W ARNING: Selecting the Unt agged VLAN check .
Advanced Configuration 106 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 62. 2. Select the Disable radio button. By default, the Enable radio button is selected.
Advanced Configuration 107 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 63. 2. T o enable HTT P redirection, select the Enable radio button. By default, the Disable radio button is selected. 3. In the Re direct URL field, enter the URL of the web server to which you wish to redirect HTTP requests.
Advanced Configuration 108 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 64. 2. Optional: T o configure adva nced wireless settings for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. S pecify the settings as explained in the following table: T able 31.
Advanced Configuration 109 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Beacon Interval (100–10 00) Enter the interval between 100 ms and 1000 ms for each beacon transmission, which a llows the wir eless access point to synchronize the wireless network.
Advanced Configuration 11 0 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Click Apply to save your settings. Configure Advanced Quality of Service Settings For most networks, the default Quality of Service (QoS) que ue settings work well.
Advanced Configuration 111 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 65. 2. Optional: T o configure advanced QoS for the 802.1 1a/na modes, click the 802.1 1a/na tab. 3. S pecify the settings as explained in the following table: T a bl e 32 .
Advanced Configuration 11 2 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Click Apply to save your settings. Configure Quality of Service P olicies The wireless access point let s you configure an d apply QoS policies to wireless clients.
Advanced Configuration 11 3 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • EtherT ype. Indicates the EtherT ype field in Ethernet-II frame header . • Sou rce MAC. Indicates the source MAC address in Etherne t-II frame header .
Advanced Configuration 11 4 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Depending on your selection from the Match Frame Fie lds drop-down list, Match Classifications appears either as a drop-down list from wh ich you need to make a selection or a field in which you need to enter information.
Advanced Configuration 11 5 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Match Frame Fields and Match Classifications (continued) 802.
Advanced Configuration 11 6 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 6. Optional: S pecify rate limiting for the classification as explained in the follo wing table: 7. Click Add to add the classification to the Classifica tions field.
Advanced Configuration 11 7 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Note: Rate limiting for the wireless interface is an op tional setting that applies to all traf fic on the wireless interface.
Advanced Configuration 11 8 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multip.
Advanced Configuration 11 9 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 67. T o configure a point-to-point wireless network: 1. Con figure the wireless access point (AP1 on LAN Segmen t 1 in the previous figure) as a point-to-point bridge: a.
Advanced Configuration 120 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 e. If you want to enable wireless client association while the wireless access point functions as a point-to-point bridge, select the Enable W ireless Client Associati on check box .
Advanced Configuration 121 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 h. Click Apply to save your security profile settings. The Bridging screen displays again. i. I f the correct profile name and security option are displayed in the ta ble, select the check box in the Enable colu mn.
Advanced Configuration 122 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 A computer on either LAN segment should be able to connect to the Internet or share files and printers of any other compu ters or servers connected to LAN Segment 1 or LAN Segment 2.
Advanced Configuration 123 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Figure 71. b. Optional: T o disp lay the Bridging screen for the 802. 1 1a/ na modes, click t he 80 2.1 1a/na tab . c. Select the Enable Wireless Bridging check box.
Advanced Configuration 124 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 g. S pecify the settings as explained in the following tab le: h. Click Apply to save your security profile settings. The Bridging screen displays again. i. Repeat St e p c through Ste p h for any other security profile that you want to edit.
Advanced Configuration 125 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 For example, first co nfigure security p r ofile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profil e NETGEAR-WDS-2 with the MAC address of AP3 (s ee Figure 70 on p age 122 ).
Advanced Configuration 126 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Note: Y ou can extend this mult ipoint bridging configuration by ad ding additional wireless access po ints t hat are configured in point-to-point mode for each additional LAN segment .
Advanced Configuration 127 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 T o configure the wireless access point to repeat the wire less signal: 1. Configure the security profiles on the wireless access point (AP2 in the previous figure): a.
Advanced Configuration 128 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 75. g. S pecify the settings as explained in the following tab le: T able 38. Wireless signal repeati ng profile and authentication settings Setting Description Profile Definition Profile Name Enter a profile name that is easy to remember .
Advanced Configuration 129 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 h. Click Apply to save your security profile settings. The Bridging screen displays again. i. Rep eat St e p e through Ste p h for any other security profile that you want to edit.
Advanced Configuration 130 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. V erify the following for all wireless access points: • All APs are on the same LAN, that is, the LAN IP addre sses of all APs are in the same network as the LAN devices.
131 6 6. Tr o u b l e s h o o t i n g This chapter provides information about troubleshooting the wireless access point. Af ter each problem description, instructions are given to help you diagnose and solve the proble m. For the common problems listed, go to the section in dicated.
T roubleshooting 132 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Basic F unctioning • V erify the Correct Sequence of Events at S tartup • No LEDs Are Lit on the Wire less Acc.
T roubleshooting 133 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 If you use a power cord to provide power to the wireless access point, check these items: • Make sure that the power cord is connected to the wireless a ccess point.
T roubleshooting 134 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Y ou Cannot Access the Inte rnet or the LAN from a Wireless - Capable Computer There is a configuration problem. Check these items: • Y ou might not have resta rted the computer with the wireless adapter to allow TCP/IP changes take e ffect.
T roubleshooting 135 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 • Make sure that your browser has Java, JavaScript, or ActiveX enab led. If you are using Internet Explorer , click Refresh to be sure that the Java applet is loaded.
T roubleshooting 136 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 T est the LAN P ath to Y our Wireless Access P oint Y ou can ping the wireless access po int from your co mputer to verify that the LAN p ath to your wireless access point is set up correctly .
T roubleshooting 137 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 T est the P ath from Y o ur Co mputer to a R emote Device After verifying that the LAN p ath works correctly , test the path from your computer to a remote device. 1.
T roubleshooting 138 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the P a cket Capture T ool Y ou can capture wir eless packet s to analyze traf fic p atterns with a network traf fic analyzer tool. The captured packet flow can show if traffic is flowing correctly to it s destinations or if packet s are dropped.
139 A A. Supplemental Inf or mation This appendix provides facto ry default settings and technical sp ecifications for the ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620. The appendix includes the following sections: • T echnical Specifications • Factory Default Settings T e chnical Specifications T a b le 39 .
Supplement al Information 140 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 802.1 1ng MCS index an d data rates (continued) Data rates for a 40 MHz channel width and a long guard in terval (800 ms): 0 / 13.5 Mbps, 1 / 27 Mbps, 2 / 40.
Supplement al Information 141 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 802.1 1a/na operating frequencies • 5.180–5.240 GHz (US, lower frequencies) • 5.260–5.320 GHz (US, middle frequen cies) • 5.180–5240 GHz (CE [EU], lower frequencies) • 5.
Supplement al Information 142 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Factory Default Settings Y ou can use the Reset button locat ed on the rear of the wireless access poin t to reset all settings to their factory default s. This is called a hard reset.
Supplement al Information 143 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Hotspot Disabled Secure T elnet Disabled T ime zone USA-Pacific NTP client Enabled Custom NTP server Dis.
Supplement al Information 144 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Wireless mode 11 n g Wireless network name (SSID) NETGEAR_1 1ng Broadcast network name SSID Enabled 802.1 1ng radio frequency channel Auto MCS index/data rate (transmission speed) Best Note: Maximum wireless signal rate derived from IEEE Standard 80 2.
Supplement al Information 145 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 QoS policies None Wireless bridging Disabled Default wireless profile and profile secu rity Profile name.
146 B B. Co mmand-L ine R ef er ence The wireless access point can be configured through eith er the command-line interface (CLI), a web browser , or a MIB browser . The CLI allows viewing and modification of the conf igu ration from a terminal or computer through a T elnet or SSH connection.
Command-Line Refe rence 147 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | |-send-notifications --Administrator/superuser mail addre ss | | | |-interface> --Select wireless lan interface | | |-wlan> --Wireless LAN interface setting | | | |-2.
Command-Line Reference 148 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-delete-outgoing-QoSpolicy--Delete outgoing QoS policy | | | | | | | | | | | |-2> --2nd secu.
Command-Line Refe rence 149 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-presharedkey --Pre-shared key | | | | | | |-security-separation --Disable associated wireles.
Command-Line Reference 150 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-authentication --Wireless authentication type | | | | | | |-encryption --Data encryption | | |.
Command-Line Refe rence 151 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-authentication-failure-attack --Authentication failure a ttack status | | | | | | |-authenti.
Command-Line Reference 152 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-presharedke.
Command-Line Refe rence 153 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | |-security-profile> --Create security profile | | | | | |-1> --1st security profile | | | | .
Command-Line Reference 154 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-ssid --Network name (1-32 chars) | | | | | | |-status --Profile status | | | | | | |-vlan-id -.
Command-Line Refe rence 155 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | |-encryption --Data encryption | | | | | | |-hide-network-name --Hide network name | | | | | |.
Command-Line Reference 156 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | | | | |-wep-pass-phras --Wireless wep passphrase key | | | | | | |-wepkeytype --Wireless wep key type .
Command-Line Refe rence 157 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | | | | | | |-encryption --Data encryption | | | | | | | |-name --Profile name | | | | | | | |-preshared.
Command-Line Reference 158 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | |-default-gateway --IPv6 address of default gateway | | |-dhcp-client --Enable dhcpv6 client | | |-dns-s.
Command-Line Refe rence 159 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 | | |-write-community --SNMP WriteCommunity | | | |-spanning-tree --Enable spanning tree protocol | | | |-.
Command-Line Reference 160 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 | | | |-log> --System log | |-system --System setting | |-time --System time settings | |.
161 C C. Notif i cati on of C omp li ance NET GEAR Dual Band - W ir eless Regulatory Compliance Information This section includes user requ irement s for operating this product in acco rdance with National laws for usage of radio spectrum and operation of radio devices.
Notification of Compliance 162 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Es pañol [S pan ish] Por medio de la presente NETGEAR Inc. declara que el Radiolan cumple con los requisitos esenciales y cualesquiera otras disposiciones aplica bles o exigibles de la Directiva 1999/5/CE.
Notification of Compliance 163 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 This device is a 2.4 GHz wideband tran smission system (tra nsceiver), intended for use in all EU member states and EFT A countries, except in France and Italy where restrictive use applies.
Notification of Compliance 164 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • This transmitter must not be co-l ocated or operati ng in con junction with any other antenna or transmitter . • For o peration within 5.15 ~ 5.25GHz frequen cy range, it is restricted to ind oor environment.
Notification of Compliance 165 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 Avertissement Les dispositifs fonctionnant dans la bande 5150 - 5250 MHz sont réservés uniquement pou.
166 Inde x Numerics 1 1a and 1 1na wireless modes 32 1 1b, 1 1bg, and 1 1ng wireless modes 29 2.4 GHz antenna, connectors for 13 2.4 GHz or 5 GHz operation 9 64-bit, 128-bit, and 152-bit WEP 54 802.1 1b/g/n and 802.1 1a/n wireless adapters 19 wireless settings 28 – 34 802.
167 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 burst rate, QoS policies 116 – 117 bytes, received and transmitted Ethernet connection 84 wireless connection 82 C capturing packets 138 Carrier Sense Multiple Access (CSMA) 108 Category 5 Ethernet cable 7 channel width (802.
168 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Ethernet packets and bytes, received and transmitte d 84 extended servi ce set (ESS) 45 Extensible Auth entication Protocol EAPOL) .
169 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 lease DHCPv4 28 DHCPv6 103 LEDs behavior 21 described 12 troubleshooting 132 legacy 802.
170 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 RADIUS serve rs 58 SNMP manager , traps 65 syslog server 77 power adapter specifications 141 power socket 13 Power/T est LED behavi.
171 ProSafe Premium 3 x 3 Dual-Ban d Wireless-N Access Point WNDAP620 software backing up 70 factory defaults 71 restoring from backup fi le 71 upgrading 68 version, viewing 79 source port, QoS polici.
172 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 video traffic advanced QoS 110 WMM QoS 63 virtual access points (V APs) 109 virtual carrier attack 92 VLANs DHCPv4 server VLAN ID 2.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté NETGEAR WNDAP620 c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du NETGEAR WNDAP620 - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation NETGEAR WNDAP620, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le NETGEAR WNDAP620 va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le NETGEAR WNDAP620, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du NETGEAR WNDAP620.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le NETGEAR WNDAP620. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei NETGEAR WNDAP620 ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
