Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 1
... 192.168.1.x/24 VLAN20 (Guest1) IP 192.168.20.1 Membership: Port 1 DHCP enabled 192.168.20.x/24 VLAN30 (Engineering) IP 192.168.30.1 Membership: Port 1 DHCP enabled 192.168.30.x/24 UTM Port 1 to host a multi-SSID and multi-VLAN network. UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (Corporate -...192.168.1.x/24 Version 2.0 Management VLAN: 1 SSID Corporate - maintaining same VLAN communication. VLAN 20 (ID 20) SSID Engineering - The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or...
... 192.168.1.x/24 VLAN20 (Guest1) IP 192.168.20.1 Membership: Port 1 DHCP enabled 192.168.20.x/24 VLAN30 (Engineering) IP 192.168.30.1 Membership: Port 1 DHCP enabled 192.168.30.x/24 UTM Port 1 to host a multi-SSID and multi-VLAN network. UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (Corporate -...192.168.1.x/24 Version 2.0 Management VLAN: 1 SSID Corporate - maintaining same VLAN communication. VLAN 20 (ID 20) SSID Engineering - The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or...
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 3
...VLAN: 1 Membership: all ports Untagged in VLAN1 Version 2.0 Network Setup Physical setup Layer 2/Layer 3 switch Port 0/1 connected to UTM10 Port 2 Wireless AP LAN port connected to UTM10 Port 1 UTM10 WAN port connected to the Internet Logical setup UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (...default) IP 192.168.1.1 Membership: Port 1, 2, 3, 4 DHCP enabled 192.168.1.x/24 VLAN20 IP 192.168.20.1 Membership: Port 1 DHCP enabled 192.168.20.x/24 VLAN30 IP 192.168.30.1 Membership: Port 1 DHCP enabled 192.168.30.x/24 AP configuration LAN IP 192.168.1.235 Untagged VLAN: 1...
...VLAN: 1 Membership: all ports Untagged in VLAN1 Version 2.0 Network Setup Physical setup Layer 2/Layer 3 switch Port 0/1 connected to UTM10 Port 2 Wireless AP LAN port connected to UTM10 Port 1 UTM10 WAN port connected to the Internet Logical setup UTM 10 Configuration LAN IP 192.168.1.1 VLAN1 (...default) IP 192.168.1.1 Membership: Port 1, 2, 3, 4 DHCP enabled 192.168.1.x/24 VLAN20 IP 192.168.20.1 Membership: Port 1 DHCP enabled 192.168.20.x/24 VLAN30 IP 192.168.30.1 Membership: Port 1 DHCP enabled 192.168.30.x/24 AP configuration LAN IP 192.168.1.235 Untagged VLAN: 1...
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 4
...the port the Access Point will be prompted with the VLAN Profiles summary NOTE: Although not relevant in this scenario, attention should be the equivalent of it. Changing the Default VLAN for example a Netgear switch 802.1q capable. UTM10 Configuration Create a new VLAN Access the VLAN configuration ...via Network Config, LAN settings, LAN Setup. VLAN1 exists on for a Port will be instead be dedicated to . (If required enable DHCP with a scope of each VLAN...
...the port the Access Point will be prompted with the VLAN Profiles summary NOTE: Although not relevant in this scenario, attention should be the equivalent of it. Changing the Default VLAN for example a Netgear switch 802.1q capable. UTM10 Configuration Create a new VLAN Access the VLAN configuration ...via Network Config, LAN settings, LAN Setup. VLAN1 exists on for a Port will be instead be dedicated to . (If required enable DHCP with a scope of each VLAN...
Application Note: Deploy a ProSecure UTM in a Multi SSID Multi VLAN network
Page 6
...will be managed, upon being configured, from a DHCP server or hard-code an IP address relevant to the VLAN the Wireless client will be accessible using the IP address configured on the VLAN the managing device will be performed by connecting a Wireless client to the SSID. Inter-VLAN routing will ...work between VLANs if the following option is the management VLAN for the Access Point (IP 192.168.1.235) Layer2/Layer3 switch The unit will be managed ...
...will be managed, upon being configured, from a DHCP server or hard-code an IP address relevant to the VLAN the Wireless client will be accessible using the IP address configured on the VLAN the managing device will be performed by connecting a Wireless client to the SSID. Inter-VLAN routing will ...work between VLANs if the following option is the management VLAN for the Access Point (IP 192.168.1.235) Layer2/Layer3 switch The unit will be managed ...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 1
... (Untagged) VLAN 2: Ports: 1/0/2, 1/0/3 (PVID = 2, Untagged), 1/0/6 (Tagged) VLAN 3: Ports: 1/0/4, 1/0/5 (PVID = 3, Untagged) , 1/0/6 (Tagged) DGFV338 LAN IP: 10.0.0.1/24 DHCP 10.0.0.0/24 1/0/4 to host a multi-SSID and multiVLAN network. The diagram below shows a typical scenario. Layer 2 / Layer 3 switches and multi-SSID multi-VLAN network with... with firmware 7.3.1.7) and a WNDAP330 to LAN Internet Corporate LAN Version 1.0 The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or...
... (Untagged) VLAN 2: Ports: 1/0/2, 1/0/3 (PVID = 2, Untagged), 1/0/6 (Tagged) VLAN 3: Ports: 1/0/4, 1/0/5 (PVID = 3, Untagged) , 1/0/6 (Tagged) DGFV338 LAN IP: 10.0.0.1/24 DHCP 10.0.0.0/24 1/0/4 to host a multi-SSID and multiVLAN network. The diagram below shows a typical scenario. Layer 2 / Layer 3 switches and multi-SSID multi-VLAN network with... with firmware 7.3.1.7) and a WNDAP330 to LAN Internet Corporate LAN Version 1.0 The solution will allow separating the Wireless traffic and Wired traffic of each of the VLANs configured, from any other VLAN which will exist on the Wired or...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 3
... switch Corporate LAN connected to port 1/0/4 on Layer2/Layer3 switch WNDAP330 connected to port 1/0/6 on Layer2/Layer3 switch Logical setup DGFV338 LAN IP: 10.0.0.1/24 DHCP: 10.0.0.0/24 WNDAP330 Management VLAN = 1 Untagged VLAN = 1 LAN management IP = 102.168.0.235 SSID VLAN2 (VLAN ID=2), Network authentication (Optional) SSID VLAN3 (VLAN ID=3), Network...
... switch Corporate LAN connected to port 1/0/4 on Layer2/Layer3 switch WNDAP330 connected to port 1/0/6 on Layer2/Layer3 switch Logical setup DGFV338 LAN IP: 10.0.0.1/24 DHCP: 10.0.0.0/24 WNDAP330 Management VLAN = 1 Untagged VLAN = 1 LAN management IP = 102.168.0.235 SSID VLAN2 (VLAN ID=2), Network authentication (Optional) SSID VLAN3 (VLAN ID=3), Network...
Layer 2/Layer and WNDAP330 to host a multi-SSID and multi-VLAN network.
Page 7
In this is the management VLAN for the Access Point Layer2/Layer3 switch The unit will be managed, upon being configured, from the DGFV338 DHCP server and be performed by connecting a Wireless client to each of the SSID alternatively (i.e. VLAN2, VLAN3) and try to ping a device in VLAN1 on the ... should also be able to access the Internet Managing devices DGFV338 The unit will be managed via a device (wired or wireless) connected to VLAN2 only WNDAP330 The unit will be managed connecting to . Ensure the Wireless client obtains an IP address from a DHCP server or hard-code an IP ...
In this is the management VLAN for the Access Point Layer2/Layer3 switch The unit will be managed, upon being configured, from the DGFV338 DHCP server and be performed by connecting a Wireless client to each of the SSID alternatively (i.e. VLAN2, VLAN3) and try to ping a device in VLAN1 on the ... should also be able to access the Internet Managing devices DGFV338 The unit will be managed via a device (wired or wireless) connected to VLAN2 only WNDAP330 The unit will be managed connecting to . Ensure the Wireless client obtains an IP address from a DHCP server or hard-code an IP ...
WNDAP350 Product datasheet
Page 2
NETGEAR, the NETGEAR Logo, NETGEAR Digital Entertainer Logo, Connect with the RangeMax™ Dual Band Wireless USB 2.0 Adapter (WNDA3100) Package Contents --ProSafe Dual Band Wireless-N Access Point (WNDAP350) --Ethernet cable --Wall-mount kit --Installation guide --Resource CD --12V, 1A power adapter, localized to identify authorized wireless network devices --MAC address authentication ; and other countries. D-WNDAP350-0 Wi-Fi Multimedia prioritization --Wireless Distribution System --IEEE 802.3af Power over Ethernet...
NETGEAR, the NETGEAR Logo, NETGEAR Digital Entertainer Logo, Connect with the RangeMax™ Dual Band Wireless USB 2.0 Adapter (WNDA3100) Package Contents --ProSafe Dual Band Wireless-N Access Point (WNDAP350) --Ethernet cable --Wall-mount kit --Installation guide --Resource CD --12V, 1A power adapter, localized to identify authorized wireless network devices --MAC address authentication ; and other countries. D-WNDAP350-0 Wi-Fi Multimedia prioritization --Wireless Distribution System --IEEE 802.3af Power over Ethernet...
WNDAP350 User Manual
Page 14
...supported: • Standards Compliance. All the configured SSIDs are very useful for wireless clients. • SNMP Support. WPA and WPA2 enterprise-class strong security with the IEEE 802.11 a/b/g/n standards for Simple Network Management Protocol (SNMP) Management Information Base (... be physically located on your DHCP server; The Wireless Access Point can also act as a client and obtain information from another when a mobile device tries to connect to PCs and other devices upon request. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Supported Standards and ...
...supported: • Standards Compliance. All the configured SSIDs are very useful for wireless clients. • SNMP Support. WPA and WPA2 enterprise-class strong security with the IEEE 802.11 a/b/g/n standards for Simple Network Management Protocol (SNMP) Management Information Base (... be physically located on your DHCP server; The Wireless Access Point can also act as a client and obtain information from another when a mobile device tries to connect to PCs and other devices upon request. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Supported Standards and ...
WNDAP350 User Manual
Page 31
... a power outlet. Note: If you must match the SSID configured in to the wireless access point and plug the power adapter in the ProSafe Dual Band Wireless-N Access Point WNDAP350. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Note: Refer to connect, see Chapter 5, "Troubleshooting and Debugging." The default SSID for the 802.11a/na mode is NETGEAR_11g; Basic Installation and Configuration v1.1, November 2009 2-11 Note...
... a power outlet. Note: If you must match the SSID configured in to the wireless access point and plug the power adapter in the ProSafe Dual Band Wireless-N Access Point WNDAP350. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual 1. Note: Refer to connect, see Chapter 5, "Troubleshooting and Debugging." The default SSID for the 802.11a/na mode is NETGEAR_11g; Basic Installation and Configuration v1.1, November 2009 2-11 Note...
WNDAP350 User Manual
Page 32
... should be configured with an IP address that starts with DHCP disabled. Note: The computer you install the WNDAP350, log in to the wireless access point to the WNDAP350 should automatically find the WNDAP350 wirelss access point and display the home screen. 2-12 Basic Installation and ...192.168.0.237 into your browser. The login screen displays. Connect to the Access Point 3. The WNDAP350 is set, by entering its default address of 255.255.255.0. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the...
... should be configured with an IP address that starts with DHCP disabled. Note: The computer you install the WNDAP350, log in to the wireless access point to the WNDAP350 should automatically find the WNDAP350 wirelss access point and display the home screen. 2-12 Basic Installation and ...192.168.0.237 into your browser. The login screen displays. Connect to the Access Point 3. The WNDAP350 is set, by entering its default address of 255.255.255.0. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Logging In Using the Default IP Address After you are using the...
WNDAP350 User Manual
Page 33
.... - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point are entered on your LAN; However, if your wireless access point: 1. To configure the basic IP settings of the WNDAP350. - Figure 2-9 Basic IP options 2. Enter the IP Address fields of your wireless access point is 192.168.0.237. By default, the Dynamic Host Configuration Protocol (DHCP...
.... - ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Setting Basic IP Options The basic IP settings for your wireless access point are entered on your LAN; However, if your wireless access point: 1. To configure the basic IP settings of the WNDAP350. - Figure 2-9 Basic IP options 2. Enter the IP Address fields of your wireless access point is 192.168.0.237. By default, the Dynamic Host Configuration Protocol (DHCP...
WNDAP350 User Manual
Page 43
... able to obtain an IP address by DHCP from a wireless computer and you change the wireless settings of your PCs have a wireless link and are configuring the WNDAP350 from the WNDAP350. You can configure the advanced wireless security functions. You must then change the...ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Program the wireless adapter of your PCs to have the same SSID that they have basic wireless connectivity to the WNDAP350, you can configure up to eight unique 802.11b/bg/ng wireless security profiles or up to eight unique 802.11a/na wireless...
... able to obtain an IP address by DHCP from a wireless computer and you change the wireless settings of your PCs have a wireless link and are configuring the WNDAP350 from the WNDAP350. You can configure the advanced wireless security functions. You must then change the...ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual Program the wireless adapter of your PCs to have the same SSID that they have basic wireless connectivity to the WNDAP350, you can configure up to eight unique 802.11b/bg/ng wireless security profiles or up to eight unique 802.11a/na wireless...
WNDAP350 User Manual
Page 79
... for 802.11n/na Operating Mode Identifies the 802.11 operating mode of the WNDAP350. It may be found in Figure 3-11 below. Disabled indicated a static IP configuration. a link to view the System screen, shown in "Wire- Current Wireless Settings for use. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference...the Media Access Control address (MAC address) of the AP was obtained from a DHCP server on the main menu, select System to this field. Current IP Settings IP Address Subnet Mask Default Gateway DHCP Client The IP address of the wireless access point. The ...
... for 802.11n/na Operating Mode Identifies the 802.11 operating mode of the WNDAP350. It may be found in Figure 3-11 below. Disabled indicated a static IP configuration. a link to view the System screen, shown in "Wire- Current Wireless Settings for use. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference...the Media Access Control address (MAC address) of the AP was obtained from a DHCP server on the main menu, select System to this field. Current IP Settings IP Address Subnet Mask Default Gateway DHCP Client The IP address of the wireless access point. The ...
WNDAP350 User Manual
Page 89
... ProSafe Dual Band Wireless-N Access Point WNDAP350. Enabling HTTP redirect ("Hotspot Settings). • Wireless Settings: Configuring advanced wireless LAN parameters ("Configuring Advanced Wireless Settings). • Advanced QoS Settings: Configuring advanced QoS settings ("Configuring Advanced QoS Settings) • Access Point Settings: Enabling wireless bridge modes ("Enabling Wireless Bridging). By default, this wireless access point as a DHCP server. 4-1 v1.1, November 2009 IP Settings for Wireless Clients You can turn the WNDAP350 into a DHCP...
... ProSafe Dual Band Wireless-N Access Point WNDAP350. Enabling HTTP redirect ("Hotspot Settings). • Wireless Settings: Configuring advanced wireless LAN parameters ("Configuring Advanced Wireless Settings). • Advanced QoS Settings: Configuring advanced QoS settings ("Configuring Advanced QoS Settings) • Access Point Settings: Enabling wireless bridge modes ("Enabling Wireless Bridging). By default, this wireless access point as a DHCP server. 4-1 v1.1, November 2009 IP Settings for Wireless Clients You can turn the WNDAP350 into a DHCP...
WNDAP350 User Manual
Page 90
... gateway settings automatically from the AP. • DHCP Server VLAN ID: All the stations that are part of the configured VLAN ID will assign this Access Point. • Ending IP Address: Enter the Ending IP address that can be assigned from the DHCP server on the AP is disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual . Figure 4-1 DHCP server settings 3.
... gateway settings automatically from the AP. • DHCP Server VLAN ID: All the stations that are part of the configured VLAN ID will assign this Access Point. • Ending IP Address: Enter the Ending IP address that can be assigned from the DHCP server on the AP is disabled. ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual . Figure 4-1 DHCP server settings 3.
WNDAP350 User Manual
Page 103
... any LAN segment should be set to "Obtain an IP address automatically (DHCP Client)" in Point-to-Point mode for each additional LAN segment. Advanced Configuration v1.1, November 2009 4-15 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • If using DHCP, all WNDAP350 wirelss access points should be able to connect to the Internet or share files and printers with NETGEAR wireless antenna accessories.
... any LAN segment should be set to "Obtain an IP address automatically (DHCP Client)" in Point-to-Point mode for each additional LAN segment. Advanced Configuration v1.1, November 2009 4-15 ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • If using DHCP, all WNDAP350 wirelss access points should be able to connect to the Internet or share files and printers with NETGEAR wireless antenna accessories.
WNDAP350 User Manual
Page 107
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • The access point's default values may not work . If they do, ensure that your network. If using an IP Address in your PCs TCP/IP settings are configured .... • If your computer is set to "Obtain an IP Address automatically" (DHCP client), restart it . Connect to configure it . • If your computer uses a Fixed (Static) IP address, ensure that the WNDAP350 is 255.255.255.0. Check the access point default configuration against the configuration of things could be causing this. Check that...
ProSafe Dual Band Wireless-N Access Point WNDAP350 Reference Manual • The access point's default values may not work . If they do, ensure that your network. If using an IP Address in your PCs TCP/IP settings are configured .... • If your computer is set to "Obtain an IP Address automatically" (DHCP client), restart it . Connect to configure it . • If your computer uses a Fixed (Static) IP address, ensure that the WNDAP350 is 255.255.255.0. Check the access point default configuration against the configuration of things could be causing this. Check that...
WNDAP350 User Manual
Page 109
... (case sensitive) Ethernet Connection Static IP Address Ethernet MAC Address Port Speed Local Network (LAN) Lan IP Subnet Mask Gateway Address DHCP Server Description 192.168.0.237 admin password 192.168.0.210 See bottom label. 10/100/1000 192.168.1.1 255.255.255.0 0.0.0.0... LED blinks rapidly). This is called a hard reset. • To perform a hard reset, push and hold the reset button for the ProSafe Dual Band Wireless-N Access Point WNDAP350. Your device will return to the factory configuration settings shown in Table A-1 below. • Pressing the reset button for a shorter period of...
... (case sensitive) Ethernet Connection Static IP Address Ethernet MAC Address Port Speed Local Network (LAN) Lan IP Subnet Mask Gateway Address DHCP Server Description 192.168.0.237 admin password 192.168.0.210 See bottom label. 10/100/1000 192.168.1.1 255.255.255.0 0.0.0.0... LED blinks rapidly). This is called a hard reset. • To perform a hard reset, push and hold the reset button for the ProSafe Dual Band Wireless-N Access Point WNDAP350. Your device will return to the factory configuration settings shown in Table A-1 below. • Pressing the reset button for a shorter period of...
WNDAP350 User Manual
Page 110
...including volume of the wireless access point MAC address. Access Point Default Configuration Settings Feature Description DHCP Client Time Zone Time Zone Adjusted for Daylight Saving Time SNMP Spanning Tree Protocol Secure Telnet Wireless Disabled USA-Pacific Disabled... Access Point netgearxxxxxx where xxxxxx are the last 6 digits of network traffic, building materials and construction, and network overhead, lower actual data throughput rate. Maximum Wireless signal rate derived from IEEE Standard 802.11 specifications. ProSafe Dual Band Wireless-N Access Point WNDAP350 ...
...including volume of the wireless access point MAC address. Access Point Default Configuration Settings Feature Description DHCP Client Time Zone Time Zone Adjusted for Daylight Saving Time SNMP Spanning Tree Protocol Secure Telnet Wireless Disabled USA-Pacific Disabled... Access Point netgearxxxxxx where xxxxxx are the last 6 digits of network traffic, building materials and construction, and network overhead, lower actual data throughput rate. Maximum Wireless signal rate derived from IEEE Standard 802.11 specifications. ProSafe Dual Band Wireless-N Access Point WNDAP350 ...