Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 4
...VLAN 20 and VLAN 30 (for administration purposes each of the new VLANs as the VLAN IP address). Change VLAN1 Profile name to changing the PVID of the port on the default configuration and all the ports are members of multiple VLANs will have the profile name matching... with a scope of setting an 802.1q trunk port, as long as the default VLAN is the port the Access Point will be the equivalent of addresses within the same range as this is VLAN 1. Version 2.0 Click on Add... Changing the Default VLAN for example a Netgear switch 802.1q capable. Click on Apply. ...
...VLAN 20 and VLAN 30 (for administration purposes each of the new VLANs as the VLAN IP address). Change VLAN1 Profile name to changing the PVID of the port on the default configuration and all the ports are members of multiple VLANs will have the profile name matching... with a scope of setting an 802.1q trunk port, as long as the default VLAN is the port the Access Point will be the equivalent of addresses within the same range as this is VLAN 1. Version 2.0 Click on Add... Changing the Default VLAN for example a Netgear switch 802.1q capable. Click on Apply. ...
WNDAP350 User Manual
Page 7
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting Basic IP ...
Contents ProSafe Dual Band Wireless-N WNDAP350 Reference Manual About This Manual Chapter 1 Introduction About the ProSafe Dual Band Wireless-N Access Point WNDAP350 1-1 Key Features and Standards 1-1 Compatible and Related NETGEAR Products 1-5 System Requirements ...1-6 What's In the Box? ...1-6 Hardware Description ...1-7 Chapter 2 Basic Installation and Configuration Wireless Equipment Placement and Range Guidelines 2-2 Understanding WNDAP350 Wireless Security Options 2-3 Installing the WNDAP350 wirelss access point 2-4 Logging In Using the Default IP Address 2-12 Setting Basic IP ...
WNDAP350 User Manual
Page 8
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK and WPA2-PSK 2-42 Restricting Wireless Access by MAC Address 2-44 Chapter 3 Management Remote Management ...3-1 Remote Console ...3-3 Upgrading the Wireless Access Point Software 3-5 Configuration File Management 3-6 Changing the Administrator Password 3-10 Enabling the SysLog Server 3-11 Using Activity Log Information 3-12 Viewing General Summary Information 3-12 Viewing ...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Configuring WPA-PSK and WPA2-PSK 2-42 Restricting Wireless Access by MAC Address 2-44 Chapter 3 Management Remote Management ...3-1 Remote Console ...3-3 Upgrading the Wireless Access Point Software 3-5 Configuration File Management 3-6 Changing the Administrator Password 3-10 Enabling the SysLog Server 3-11 Using Activity Log Information 3-12 Viewing General Summary Information 3-12 Viewing ...
WNDAP350 User Manual
Page 21
... This chapter contains the following sections: 1. "Understanding WNDAP350 Wireless Security Options 3. "Setting Basic IP Options 6. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to access your network from unauthorized access. "Configuring WPA with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to secure your network. "Logging In Using the Default IP Address 5. "Understanding Security Profiles 9. It is important to...
... This chapter contains the following sections: 1. "Understanding WNDAP350 Wireless Security Options 3. "Setting Basic IP Options 6. "Setting up your ProSafe Dual Band Wireless-N Access Point WNDAP350for wireless connectivity to access your network from unauthorized access. "Configuring WPA with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to secure your network. "Logging In Using the Default IP Address 5. "Understanding Security Profiles 9. It is important to...
WNDAP350 User Manual
Page 28
Configure the IP Address settings appropriate for more information about how to configure the settings on the main menu. Click Apply. Under the Configuration tab, select ... as shown in Figure 2-6. 2-8 Basic Installation and Configuration v1.1, November 2009 Configuring Time Settings To configure your network. The IP Settings screen displays, as shown in Figure 2-5. Figure 2-5 IP Settings 11. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 10. The default values are suitable for most users and situations. (See the online help or "Setting Basic...
Configure the IP Address settings appropriate for more information about how to configure the settings on the main menu. Click Apply. Under the Configuration tab, select ... as shown in Figure 2-6. 2-8 Basic Installation and Configuration v1.1, November 2009 Configuring Time Settings To configure your network. The IP Settings screen displays, as shown in Figure 2-5. Figure 2-5 IP Settings 11. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 10. The default values are suitable for most users and situations. (See the online help or "Setting Basic...
WNDAP350 User Manual
Page 29
... or the IP address of all available time zones. The default is USA-Pacific. - Time Zone. Check the option if you have an Internet connection to synchronize the time of the access point with an NTP Server. Use Custom NTP Server. The default is time-b.netgear.com. 3. Enable NTP Client to get the current time. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual...
... or the IP address of all available time zones. The default is USA-Pacific. - Time Zone. Check the option if you have an Internet connection to synchronize the time of the access point with an NTP Server. Use Custom NTP Server. The default is time-b.netgear.com. 3. Enable NTP Client to get the current time. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual...
WNDAP350 User Manual
Page 31
... uses dynamic IP addresses, you are vertical. If your wireless coverage area, and within line of sight of the Reference Manual. 3. Connect the power adapter to the wireless access point and plug the power adapter in to the WNDAP350 after the DHCP server on your WNDAP350 wirelss access point to the antenna positioning and wireless mode configuration information in the ProSafe Dual Band Wireless-N Access Point WNDAP350. Note...
... uses dynamic IP addresses, you are vertical. If your wireless coverage area, and within line of sight of the Reference Manual. 3. Connect the power adapter to the wireless access point and plug the power adapter in to the WNDAP350 after the DHCP server on your WNDAP350 wirelss access point to the antenna positioning and wireless mode configuration information in the ProSafe Dual Band Wireless-N Access Point WNDAP350. Note...
WNDAP350 User Manual
Page 32
... for the user name and password for the password, both in to the wireless access point to the Access Point 3. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the default IP Address: 1. To log in using to connect to the WNDAP350 by default, with the IP address of 192.168.0.237 with 192.168.0.x and a Subnet Mask of http://192...
... for the user name and password for the password, both in to the wireless access point to the Access Point 3. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the default IP Address: 1. To log in using to connect to the WNDAP350 by default, with the IP address of 192.168.0.237 with 192.168.0.x and a Subnet Mask of http://192...
WNDAP350 User Manual
Page 33
... your network when you enable DHCP, the wireless access point will work in Figure 2-9 below. or enable DHCP. Enter the IP Address fields of your wireless access point are entered on your LAN. - Most of your wireless access point: 1. Enter the IP Address of the WNDAP350. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point.The default IP address is 192.168.0.237. Under Configuration, select...
... your network when you enable DHCP, the wireless access point will work in Figure 2-9 below. or enable DHCP. Enter the IP Address fields of your wireless access point are entered on your LAN. - Most of your wireless access point: 1. Enter the IP Address of the WNDAP350. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point.The default IP address is 192.168.0.237. Under Configuration, select...
WNDAP350 User Manual
Page 34
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - Primary DNS Servers. IP Subnet Mask. Otherwise, you assign. Default Gateway. Wireless Settings The following sections describe how to save your 802.11 b/bg/ng wireless access point: 2-14 Basic Installation and Configuration v1.1, November 2009 The WNDAP350 will use this IP address as the primary Domain Name Server used by stations on your LAN. - The WNDAP350 will automatically calculate...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual - Primary DNS Servers. IP Subnet Mask. Otherwise, you assign. Default Gateway. Wireless Settings The following sections describe how to save your 802.11 b/bg/ng wireless access point: 2-14 Basic Installation and Configuration v1.1, November 2009 The WNDAP350 will use this IP address as the primary Domain Name Server used by stations on your LAN. - The WNDAP350 will automatically calculate...
WNDAP350 User Manual
Page 48
...RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret 802.11a/na Configuration For a new wireless network, print or copy this information. Note: The SSID in the wireless access point is the default WNDAP350 SSID. Note: If you...802.11b/bg/ng keys for more security. For an existing wireless network, the person who set the Regulatory Domain correctly as those in the same network must be able to 32 alphanumeric characters. Be sure to set up to provide this form and fill in the wireless adapter card. ProSafe Dual Band Wireless-N Access Point WNDAP350...
...RADIUS servers: Server Name/IP Address: Primary Secondary Port Shared Secret 802.11a/na Configuration For a new wireless network, print or copy this information. Note: The SSID in the wireless access point is the default WNDAP350 SSID. Note: If you...802.11b/bg/ng keys for more security. For an existing wireless network, the person who set the Regulatory Domain correctly as those in the same network must be able to 32 alphanumeric characters. Be sure to set up to provide this form and fill in the wireless adapter card. ProSafe Dual Band Wireless-N Access Point WNDAP350...
WNDAP350 User Manual
Page 49
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK ...configured once per wireless access point. Under the Configuration tab, select Security on implementing these security options). To set up or modify the RADIUS Server Settings: 1. When using the default LAN address of http://...802.1x, and can setup or modify the RADIUS Server settings to configure the WNDAP350. Key • WPA RADIUS Settings. Configuring the RADIUS Server Settings You can be used with RADIUS" on page 2-38 for the primary and secondary RADIUS servers: Server Name/IP Address...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • WPA-PSK ...configured once per wireless access point. Under the Configuration tab, select Security on implementing these security options). To set up or modify the RADIUS Server Settings: 1. When using the default LAN address of http://...802.1x, and can setup or modify the RADIUS Server settings to configure the WNDAP350. Key • WPA RADIUS Settings. Configuring the RADIUS Server Settings You can be used with RADIUS" on page 2-38 for the primary and secondary RADIUS servers: Server Name/IP Address...
WNDAP350 User Manual
Page 50
...IP address of the RADIUS Server. The default: 1813 2-30 Basic Installation and Configuration v1.1, November 2009 The IP address of the RADIUS Server. IP Address. IP Address. The default is shared between the Wireless Access Point and the RADIUS Server while authenticating the supplicant (wireless...Port number of the RADIUS Server. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-14 RADIUS server settings 3. Enter the following RADIUS Server settings: • Authentication Server. The IP Address, Port Number, and Shared Secret are required...
...IP address of the RADIUS Server. The default: 1813 2-30 Basic Installation and Configuration v1.1, November 2009 The IP address of the RADIUS Server. IP Address. IP Address. The default is shared between the Wireless Access Point and the RADIUS Server while authenticating the supplicant (wireless...Port number of the RADIUS Server. - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure 2-14 RADIUS server settings 3. Enter the following RADIUS Server settings: • Authentication Server. The IP Address, Port Number, and Shared Secret are required...
WNDAP350 User Manual
Page 67
... a client running SNMP management software, as well as described in the main menu of your ProSafe Dual Band WirelessN Access Point WNDAP350. "Upgrading the Wireless Access Point Software 4. Then select the category under either the Monitoring or Maintenance headings in "Logging In Using the Default IP Address" on page 2-12. "Enabling the SysLog Server 8. "Viewing Rogue AP Statistics 14. Chapter 3 Management This...
... a client running SNMP management software, as well as described in the main menu of your ProSafe Dual Band WirelessN Access Point WNDAP350. "Upgrading the Wireless Access Point Software 4. Then select the category under either the Monitoring or Maintenance headings in "Logging In Using the Default IP Address" on page 2-12. "Enabling the SysLog Server 8. "Viewing Rogue AP Statistics 14. Chapter 3 Management This...
WNDAP350 User Manual
Page 68
... allow the SNMP manager to read the wireless access point's MIB objects. Under the Maintenance tab, select Remote Management, and then select SNMP from the wireless access point. • Trap Port: The port number on which the SNMP Manager will receive traps. The default is 162/UDP. 3-2 Management v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To set up an...
... allow the SNMP manager to read the wireless access point's MIB objects. Under the Maintenance tab, select Remote Management, and then select SNMP from the wireless access point. • Trap Port: The port number on which the SNMP Manager will receive traps. The default is 162/UDP. 3-2 Management v1.1, November 2009 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual To set up an...
WNDAP350 User Manual
Page 69
The default is Disable. You can access the CLI from a secure Telnet client over the Ethernet port or over the Ethernet port, use a secure Telnet client such as shown in the Remote Console screen, as Absolute Telnet. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference ...Manual Remote Console The Remote Console configuration features are located under the Maintenance tab, Remote Management, and then under Remote Console. Note: You must use the IP address of the WNDAP350 as the host name....
The default is Disable. You can access the CLI from a secure Telnet client over the Ethernet port or over the Ethernet port, use a secure Telnet client such as shown in the Remote Console screen, as Absolute Telnet. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference ...Manual Remote Console The Remote Console configuration features are located under the Maintenance tab, Remote Management, and then under Remote Console. Note: You must use the IP address of the WNDAP350 as the host name....
WNDAP350 User Manual
Page 75
...; Reset to the factory default values. After a restore, the wireless access point password will be password, the default LAN IP address will be used to factory default settings option by selecting the Yes radio button. 3. To restore the factory default configuration settings without knowing the login password or IP address, you must use the Default Reset button on page 1-7). ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure...
...; Reset to the factory default values. After a restore, the wireless access point password will be password, the default LAN IP address will be used to factory default settings option by selecting the Yes radio button. 3. To restore the factory default configuration settings without knowing the login password or IP address, you must use the Default Reset button on page 1-7). ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Figure...
WNDAP350 User Manual
Page 77
... configured in the SysLog server on your LAN. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 3. Enable this option if you have a SysLog server on the main menu, select System, then select the Advanced option, and select SysLog to the specified IP address if SysLog option is Disabled. 3. Enable SysLog - Default is configured to save your SysLog server is...
... configured in the SysLog server on your LAN. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 3. Enable this option if you have a SysLog server on the main menu, select System, then select the Advanced option, and select SysLog to the specified IP address if SysLog option is Disabled. 3. Enable SysLog - Default is configured to save your SysLog server is...
WNDAP350 User Manual
Page 107
.../Cable modem etc.) to "Obtain an IP Address automatically" (DHCP client), restart it is using the NetBIOS name of other PCs work with DHCP disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • The access point's default values may not work . Troubleshooting and Debugging 5-3 v1.1, November 2009 Check the access point default configuration against the configuration of the WNDAP350 to it . Connect to connect...
.../Cable modem etc.) to "Obtain an IP Address automatically" (DHCP client), restart it is using the NetBIOS name of other PCs work with DHCP disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • The access point's default values may not work . Troubleshooting and Debugging 5-3 v1.1, November 2009 Check the access point default configuration against the configuration of the WNDAP350 to it . Connect to connect...
WNDAP350 User Manual
Page 130
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual rate 3-16 SSID 3-16 state 3-16 status 3-16 type 3-16 wireless network name (SSID) 3-16 coverage area 1-1, 2-11 CSMA/CA 4-5, 4-7 CSMA/CD (Carrier Sense Multiple Access with Collision Detection) 4-5, 4-7 CTS (Clear to Send) 4-5 B back off 1-4 Basic Service Set (BSS) 1-2 Basic Service Set Identifier (BSSID) 1-2 beacon generation, support for 1-4 beacon interval 4-5, 4-7 bridge...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual rate 3-16 SSID 3-16 state 3-16 status 3-16 type 3-16 wireless network name (SSID) 3-16 coverage area 1-1, 2-11 CSMA/CA 4-5, 4-7 CSMA/CD (Carrier Sense Multiple Access with Collision Detection) 4-5, 4-7 CTS (Clear to Send) 4-5 B back off 1-4 Basic Service Set (BSS) 1-2 Basic Service Set Identifier (BSSID) 1-2 beacon generation, support for 1-4 beacon interval 4-5, 4-7 bridge...