Installation Guide
Page 1
...Settings and select the Turn Radio On setting. g. Ceiling Mount Wall Mount Note: DO NOT place the AP in the illustration). Before proceeding with the WNDAP620 installation, familiarize yourself with an Ethernet adapter. If this PC is turned off or is still blinking,...menu and configure the IP settings for LAN access. A NETGEAR Cable d. Installation Guide ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point Package Contents Unpack the box and verify the contents: • ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point • Straight through Category 5 ...
...Settings and select the Turn Radio On setting. g. Ceiling Mount Wall Mount Note: DO NOT place the AP in the illustration). Before proceeding with the WNDAP620 installation, familiarize yourself with an Ethernet adapter. If this PC is turned off or is still blinking,...menu and configure the IP settings for LAN access. A NETGEAR Cable d. Installation Guide ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point Package Contents Unpack the box and verify the contents: • ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point • Straight through Category 5 ...
Product Data Sheet
Page 1
...Dual Band Wireless-N Access Point WNDAP620 Advanced Speed and Range with Comprehensive Internet Security • 3 x 3 multiple-input, multiple-output (MIMO) with three spatial streams • Dual band selectable in 2.4 or 5 GHz radio band for AC power Unified Threat Management (UTM) with dual... WPA2, rogue AP detection and 802...NETGEAR (638-4327) UK: 0844-875-4000 Australia: 1300-361-254 Email: info@NETGEAR.com Connects to optional accessory antenna Connects to optional accessory antenna Connects to optional accessory antenna Connects to Cable/DSL modem Desktop PC connects with Dual Band...
...Dual Band Wireless-N Access Point WNDAP620 Advanced Speed and Range with Comprehensive Internet Security • 3 x 3 multiple-input, multiple-output (MIMO) with three spatial streams • Dual band selectable in 2.4 or 5 GHz radio band for AC power Unified Threat Management (UTM) with dual... WPA2, rogue AP detection and 802...NETGEAR (638-4327) UK: 0844-875-4000 Australia: 1300-361-254 Email: info@NETGEAR.com Connects to optional accessory antenna Connects to optional accessory antenna Connects to optional accessory antenna Connects to Cable/DSL modem Desktop PC connects with Dual Band...
Product Data Sheet
Page 2
ProSafe Premium 3 x 3 Dual Band Wireless-N Access Point WNDAP620 Features ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point (WNDAP620) Frequency 2.4 GHz or 5 GHz ...up to 256 users 802.1x RADIUS support • with EAP TLS, TTLS, PEAP Rogue AP detection • Block SSID Broadcast • Secure SSH Telnet • Secure Socket Layer (...5 dBi Up to 32 users • • • • 8/9 • • • The NETGEAR ProSafe line of business networking products offers a wide array of business networks. Backed by a lifetime hardware warranty for the ...
ProSafe Premium 3 x 3 Dual Band Wireless-N Access Point WNDAP620 Features ProSafe 3x3 Single Radio, Dual Band Wireless-N Access Point (WNDAP620) Frequency 2.4 GHz or 5 GHz ...up to 256 users 802.1x RADIUS support • with EAP TLS, TTLS, PEAP Rogue AP detection • Block SSID Broadcast • Secure SSH Telnet • Secure Socket Layer (...5 dBi Up to 32 users • • • • 8/9 • • • The NETGEAR ProSafe line of business networking products offers a wide array of business networks. Backed by a lifetime hardware warranty for the ...
Reference Manual
Page 4
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Chapter 3 Wireless Configuration and Security Wireless Data Security Options 42 Security Profiles 44 Before You Change the SSID, WEP, and WPA Settings 46 Configure and ... Point 77 View System Information 77 Monitor Wireless Stations 80 View the Activity Log 83 Traffic Statistics 83 Enable Rogue AP Detection and Monitor Access Points 85 Enable and Configure Rogue AP Detection 85 View and Save Access Point Lists 87 Configure Wireless Intrusion Detection and Prevention 89 Configure Wireless Intrusion Detection...
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Chapter 3 Wireless Configuration and Security Wireless Data Security Options 42 Security Profiles 44 Before You Change the SSID, WEP, and WPA Settings 46 Configure and ... Point 77 View System Information 77 Monitor Wireless Stations 80 View the Activity Log 83 Traffic Statistics 83 Enable Rogue AP Detection and Monitor Access Points 85 Enable and Configure Rogue AP Detection 85 View and Save Access Point Lists 87 Configure Wireless Intrusion Detection and Prevention 89 Configure Wireless Intrusion Detection...
Reference Manual
Page 10
...dropped. - ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • QoS. The QoS policies let you can use the command-line interface. • Configuration backup. Rogue AP filtering and ad hoc network detection ensure that unknown APs and networks are not given access to ... You can be present in a flash memory. Configuration settings can upgrade it easily, using multiple BSSIDs, you specify. • Rogue AP and ad hoc network detection. Adjustable power output allows more secure or economical operation. • PoE support. Power/Test, Active, LAN...
...dropped. - ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • QoS. The QoS policies let you can use the command-line interface. • Configuration backup. Rogue AP filtering and ad hoc network detection ensure that unknown APs and networks are not given access to ... You can be present in a flash memory. Configuration settings can upgrade it easily, using multiple BSSIDs, you specify. • Rogue AP and ad hoc network detection. Adjustable power output allows more secure or economical operation. • PoE support. Power/Test, Active, LAN...
Reference Manual
Page 73
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the Reset Button to Restore Factory Default...the factory default settings using the Reset button: 1. Note: Pressing the Reset button for about 1 minute. The Reboot AP screen displays: Figure 42. 2. Click Apply to reboot the wireless access point. To reboot the wireless ...on again, you need to use the software to reboot the wireless access point. Select Maintenance > Reset > Reboot AP. Select the Yes radio button. (By default, the No radio button is selected.) 3. During the restoration process,...
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Use the Reset Button to Restore Factory Default...the factory default settings using the Reset button: 1. Note: Pressing the Reset button for about 1 minute. The Reboot AP screen displays: Figure 42. 2. Click Apply to reboot the wireless access point. To reboot the wireless ...on again, you need to use the software to reboot the wireless access point. Select Maintenance > Reset > Reboot AP. Select the Yes radio button. (By default, the No radio button is selected.) 3. During the restoration process,...
Reference Manual
Page 80
...page 118. Disabled indicates a static IP configuration. Disabled indicates that rogue AP detection is not. The table heading indicates the wireless mode (802.11b, 802.11bg, or 802.11ng for the 2.4-GHz band, or 802.11a or 802.11na for 802.11a or 802.11na... on your LAN network. For information about how to another, providing seamless network connectivity. Rogue AP Detection Enabled indicates that it is enabled. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 19. Channel / Frequency The channel that the current IP address was obtained from one ...
...page 118. Disabled indicates a static IP configuration. Disabled indicates that rogue AP detection is not. The table heading indicates the wireless mode (802.11b, 802.11bg, or 802.11ng for the 2.4-GHz band, or 802.11a or 802.11na for 802.11a or 802.11na... on your LAN network. For information about how to another, providing seamless network connectivity. Rogue AP Detection Enabled indicates that it is enabled. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 19. Channel / Frequency The channel that the current IP address was obtained from one ...
Reference Manual
Page 85
... about all detected access points are displayed in the configured wireless modes. Select Configuration > Security > Advanced > Rogue AP. The total number of bytes received and transmitted over the wireless connection since the wireless access point was restarted. The... was restarted. Initially all access points on its channel. To enable and configure rogue AP detection: 1. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 21. Statistics fields (continued) Setting Broadcast Packets Multicast Packets Total Packets Total Bytes Client Association...
... about all detected access points are displayed in the configured wireless modes. Select Configuration > Security > Advanced > Rogue AP. The total number of bytes received and transmitted over the wireless connection since the wireless access point was restarted. The... was restarted. Initially all access points on its channel. To enable and configure rogue AP detection: 1. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 21. Statistics fields (continued) Setting Broadcast Packets Multicast Packets Total Packets Total Bytes Client Association...
Reference Manual
Page 86
...boxes for access points, or select all access points by selecting the check box in the column heading. 2. In the Unknown AP List, select individual check boxes for access points, or select all access points by selecting the check box in the column heading...Aggressive. Take one of access points into the Known AP List: 1. Select the Turn Rogue AP Detection On check box to the Known AP List. 8. Click Move to transfer the access points from the Unknown AP List to enable rogue AP detection. 4. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 51. 2.
...boxes for access points, or select all access points by selecting the check box in the column heading. 2. In the Unknown AP List, select individual check boxes for access points, or select all access points by selecting the check box in the column heading...Aggressive. Take one of access points into the Known AP List: 1. Select the Turn Rogue AP Detection On check box to the Known AP List. 8. Click Move to transfer the access points from the Unknown AP List to enable rogue AP detection. 4. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 51. 2.
Reference Manual
Page 87
...screen displays: Figure 52. 2. Description The MAC address of the unknown the AP. The channel that the unknown AP is enabled (1 means enabled; 0 means disabled). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • Select the Merge radio button to add the imported list of access ...points. Select the file, and click Open. 4. View and Save Access Point Lists The wireless access point detects nearby APs and wireless stations and maintains...
...screen displays: Figure 52. 2. Description The MAC address of the unknown the AP. The channel that the unknown AP is enabled (1 means enabled; 0 means disabled). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 • Select the Merge radio button to add the imported list of access ...points. Select the file, and click Open. 4. View and Save Access Point Lists The wireless access point detects nearby APs and wireless stations and maintains...
Reference Manual
Page 88
... save it to a file. You can now import the saved list into the Known AP List on the Rogue AP screen (see Enable and Configure Rogue AP Detection on page 85). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 22. Unknown AP List fields (continued) Setting Description # of Beacons The number of known access points to...
... save it to a file. You can now import the saved list into the Known AP List on the Rogue AP screen (see Enable and Configure Rogue AP Detection on page 85). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 22. Unknown AP List fields (continued) Setting Description # of Beacons The number of known access points to...
Reference Manual
Page 92
...Trap Note: The IDS detects ad hoc networks, but the IPS does not take action against this attack. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. Virtual carrier attack • • • Attack. Result. MAC spoofing • Attack. Trap Trap Note: The... service is disrupted. Trap Note: The IDS detects ad hoc networks, but the IPS does not take action against MAC spoofing. Rogue AP detection • • Detection. Wireless security might broadcast the same SSID as the secured wireless network. • Result. Wireless service...
...Trap Note: The IDS detects ad hoc networks, but the IPS does not take action against this attack. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. Virtual carrier attack • • • Attack. Result. MAC spoofing • Attack. Trap Trap Note: The... service is disrupted. Trap Note: The IDS detects ad hoc networks, but the IPS does not take action against MAC spoofing. Rogue AP detection • • Detection. Wireless security might broadcast the same SSID as the secured wireless network. • Result. Wireless service...
Reference Manual
Page 93
The affected wireless access point is suspect when there are too many probe requests with ad-hoc network AP property changed , but the IPS does not take action. Select the check box to 30 collect information about the wireless access point for...; Result. The changes that the IDS detects are 50 sent to the wireless access point. Trap Trap Management and Monitoring 93 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. For example, it is identified by its SSID. PS poll flood attack • Attack. Trap • Detection. Wireless security is lost...
The affected wireless access point is suspect when there are too many probe requests with ad-hoc network AP property changed , but the IPS does not take action. Select the check box to 30 collect information about the wireless access point for...; Result. The changes that the IDS detects are 50 sent to the wireless access point. Trap Trap Management and Monitoring 93 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 24. For example, it is identified by its SSID. PS poll flood attack • Attack. Trap • Detection. Wireless security is lost...
Reference Manual
Page 110
...point to the Type of Service on page 62. The queues defined for different types of the queues. Specify the access point (AP) Enhanced Distributed Channel Access (EDCA) settings for different types of audio, video, and streaming media, as well as VoIP and ... Lowest priority queue, high throughput. For information about how to this queue. • Data 3 (Voice). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Time-sensitive data such as traditional IP data. Highest priority queue, minimum delay. Time-sensitive video data is sent to enable WMM,...
...point to the Type of Service on page 62. The queues defined for different types of the queues. Specify the access point (AP) Enhanced Distributed Channel Access (EDCA) settings for different types of audio, video, and streaming media, as well as VoIP and ... Lowest priority queue, high throughput. For information about how to this queue. • Data 3 (Voice). ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 4. Time-sensitive data such as traditional IP data. Highest priority queue, minimum delay. Time-sensitive video data is sent to enable WMM,...
Reference Manual
Page 111
EDCA settings Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the upper limit (in milliseconds) between data frames. The ... than the value for a queue. cwMax Enter the maximum contention window (cwMax) value that specifies the wait time (in milliseconds) for cwMax. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 65. 2. The default values are Data 0: 3; Data 3: 7. Advanced Configuration 111 Data 2: 1; Data 3: 1. Data 2: 7; The value for cwMax needs to ...
EDCA settings Setting Description AP EDCA parameters AIFS Enter the Arbitration Inter-Frame Spacing (AIFS) interval that specifies the upper limit (in milliseconds) between data frames. The ... than the value for a queue. cwMax Enter the maximum contention window (cwMax) value that specifies the wait time (in milliseconds) for cwMax. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Figure 65. 2. The default values are Data 0: 3; Data 3: 7. Advanced Configuration 111 Data 2: 1; Data 3: 1. Data 2: 7; The value for cwMax needs to ...
Reference Manual
Page 118
...to protect this wireless access point repeats the wireless signal, does not support communication with wireless clients. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multipoint Wireless Network •... system (WDS) that Auto is not selected from the following figure shows an example in which two wireless access points (APs) function in point-to-point bridge mode: Advanced Configuration 118 In this mode, see Configure the Basic Wireless Settings on ...
...to protect this wireless access point repeats the wireless signal, does not support communication with wireless clients. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Configure Wireless Bridging • Configure a Point-to-Point Wireless Network • Configure a Point-to-Multipoint Wireless Network •... system (WDS) that Auto is not selected from the following figure shows an example in which two wireless access points (APs) function in point-to-point bridge mode: Advanced Configuration 118 In this mode, see Configure the Basic Wireless Settings on ...
Reference Manual
Page 124
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 g. From the Data Encryption drop-down list, select one of AP2 or AP 3 on LAN Segment 1 in the following : • None. Standard WEP encryption, using 104/128-bit encryption. • 152-bit WEP.... of the following table: Table 37. h. Click Apply to remember. Repeat Step c through Step h for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4. Point-to be between 8 and 63 characters (inclusive). No authentication and encryption. • 64-bit WEP. WPA-PSK TKIP ...
ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 g. From the Data Encryption drop-down list, select one of AP2 or AP 3 on LAN Segment 1 in the following : • None. Standard WEP encryption, using 104/128-bit encryption. • 152-bit WEP.... of the following table: Table 37. h. Click Apply to remember. Repeat Step c through Step h for the four security profiles are NETGEAR-WDS-1, NETGEAR-WDS-2, NETGEAR-WDS-3, and NETGEAR-WDS-4. Point-to be between 8 and 63 characters (inclusive). No authentication and encryption. • 64-bit WEP. WPA-PSK TKIP ...
Reference Manual
Page 125
...be able to connect to -multipoint bridge settings. 3. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 For example, first configure security profile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profile NETGEAR-WDS-2 with the remote MAC address of AP1. 4. Select the Enable Wireless ...following for all wireless access points: • Only AP1 on LAN Segment 1 is configured in point-to-multipoint bridge mode, and all others APs are configured in point-to-point bridge mode. • AP2 and AP3 (the point-to enable. Configure AP3 on LAN Segment 3 (see...
...be able to connect to -multipoint bridge settings. 3. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 For example, first configure security profile NETGEAR-WDS-1 with the MAC address of AP2, and then configure security profile NETGEAR-WDS-2 with the remote MAC address of AP1. 4. Select the Enable Wireless ...following for all wireless access points: • Only AP1 on LAN Segment 1 is configured in point-to-multipoint bridge mode, and all others APs are configured in point-to-point bridge mode. • AP2 and AP3 (the point-to enable. Configure AP3 on LAN Segment 3 (see...
Reference Manual
Page 130
...; All wireless access points use DHCP, all APs are configured in the same network as the LAN devices. • If you can obtain IP addresses automatically (as DHCP clients). Also, you use the same channel, authentication mode, and security settings. 6. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Note: You can extend repetition of... 27 or Configure the Optional DHCPv6 Server on any LAN segment should be able to connect to the Internet or share files and printers with NETGEAR wireless antenna accessories.
...; All wireless access points use DHCP, all APs are configured in the same network as the LAN devices. • If you can obtain IP addresses automatically (as DHCP clients). Also, you use the same channel, authentication mode, and security settings. 6. ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 5. Note: You can extend repetition of... 27 or Configure the Optional DHCPv6 Server on any LAN segment should be able to connect to the Internet or share files and printers with NETGEAR wireless antenna accessories.
Reference Manual
Page 144
...Beacon interval Aggregation length AMPDU RIFS transmission DTIM interval Preamble type Antenna 802.11d Client isolation Maximum wireless clients Wi-Fi Multimedia (WMM) WMM powersave AP EDCA parameters (QoS settings) Station EDCA parameters (QoS settings) Description 11ng NETGEAR_11ng Enabled Auto Best Note: Maximum wireless signal rate derived from IEEE ...radio frequency channel MCS index/data rate (transmission speed) Channel width Guard interval Output power Wireless on page 111. Supplemental Information 144 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 40.
...Beacon interval Aggregation length AMPDU RIFS transmission DTIM interval Preamble type Antenna 802.11d Client isolation Maximum wireless clients Wi-Fi Multimedia (WMM) WMM powersave AP EDCA parameters (QoS settings) Station EDCA parameters (QoS settings) Description 11ng NETGEAR_11ng Enabled Auto Best Note: Maximum wireless signal rate derived from IEEE ...radio frequency channel MCS index/data rate (transmission speed) Channel width Guard interval Output power Wireless on page 111. Supplemental Information 144 ProSafe Premium 3 x 3 Dual-Band Wireless-N Access Point WNDAP620 Table 40.