Home » Netgear Manuals » Wireless » Netgear WAX204-WiFi » Manual Viewer

Netgear WAX204-WiFi User Manual - Page 61

To set up or change the access point WiFi security for selected WiFi network, select, and con

View all Netgear WAX204-WiFi manuals

Add to My Manuals
Save this manual to your list of manuals

Page 61 highlights

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Setting Description Enable SSID Broadcast By default, the access point broadcasts its SSID so that WiFi clients can detect the WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear the Enable SSID Broadcast check box. Turning off the SSID broadcast provides additional WiFi security, but users must know the SSID to be able to join the WiFi network. Client isolation You cannot configure this setting for the Wireless 1 network. By default, client isolation is enabled for the WiFi network, and the Enable radio button is selected. To allow communication between WiFi clients that are associated with the same SSID or different SSIDs on the access point, select the Disable radio button. Allow access to wired ports You cannot configure this setting for the Wireless 1 network. By default, WiFi clients cannot reach devices that are connected to the wired ports (LAN ports) of the access point, and the Disable radio button is selected. To allow communication between WiFi clients and devices that are connected to the wired ports, select the Enable radio button. 7. To set up or change the access point WiFi security for selected WiFi network, select and configure one of the options that are described in the following table. Setting Description None An open WiFi network does not provide any security. Any WiFi device can join the network. We recommend that you do not use an open WiFi network but configure WiFi security. However, an open network might be appropriate for a WiFi hotspot. Note: If you change the Wireless 1 network to an open network, WPS is disabled and the WPS LED turns off. WPA2 Personal [AES] This option, which is the same as WPA2-PSK, is the default setting and uses AES encryption. This type of security enables only WiFi devices that support WPA2 to join the WiFi network. WPA2 provides a secure connection but some legacy WiFi devices do not detect WPA2 and support only WPA. If your network includes such older devices, select WPA-Personal [TKIP] + WPA2-Personal [AES] authentication. In the Password (Network Key) field, enter a phrase of 8 to 63 characters or 64 hexadecimal digits. To join the WiFi network, a user must enter this password. To view the password in clear text, click the eye icon. Basic WiFi and Radio Features 61 User Manual

Section	Page
Contents	3
1. Hardware Overview	10
Top panel with LEDs	11
Back panel with ports, buttons, and a power connector	13
Position the antennas for best WiFi performance	14
Access point label	14
2. Installation and Initial Log-in	15
About router mode and access point mode	16
Routing features enabled only in router mode	16
Set up the access point and complete the initial log-in process	17
Connect the access point to a modem and log in for the first time	18
Connect the access point to a router and log in for the first time	22
Get a registration key	26
Find the IP address of the access point when you cannot use routerlogin.net	27
Find the IP address of the access point with the NETGEAR Insight mobile app	29
Log in to the access point after initial setup	30
Change the language	31
Connect a wired or WiFi device to the access point’s network after installation	32
Connect to the access point through an Ethernet cable	32
Use Wi-Fi Protected Setup to join the WiFi network	33
Manually join the WiFi network	33
3. Manually Set Up Internet Settings	35
Use the Setup Wizard	36
Manually set up the access point Internet connection [router mode]	37
Specify a dynamic or fixed WAN IP address Internet connection without a login [router mode]	37
Specify a PPPoE Internet connection that uses a login [router mode]	39
Specify a PPTP or L2TP Internet connection that uses a login [router mode]	41
IPv6 Internet connections and IPv6 addresses [router mode]	43
Use Auto Detect for an IPv6 Internet connection [router mode]	44
Use Auto Config for an IPv6 Internet connection [router mode]	46
Set up an IPv6 6to4 tunnel Internet connection [router mode]	48
Set up an IPv6 6rd Internet connection [router mode]	49
Set up an IPv6 passthrough Internet connection [router mode]	51
Set up an IPv6 fixed Internet connection [router mode]	52
Set up an IPv6 DHCP Internet connection [router mode]	54
Set up an IPv6 PPPoE Internet connection [router mode]	56
4. Basic WiFi and Radio Features	58
Set up or change an open or secure WiFi network	59
Configure WPA and WPA2 Enterprise WiFi security with a RADIUS server	63
Enable or disable a WiFi network	65
Hide or broadcast the SSID for a WiFi network	66
Manage client isolation for clients of the Wireless 2 or Wireless 3 network	67
Manage access to LAN ports for clients of the Wireless 2 or Wireless 3 network	68
Manage SSID isolation for all WiFi networks	69
Enable or disable a WiFi radio	70
Use WPS to connect to the WiFi network	72
Use WPS with the push button method	72
Use WPS with the PIN method	73
5. Security, Firewall, and Access Rules	75
Firewall WAN settings [router mode]	76
Manage port scan protection and denial of service protection [router mode]	76
Set up a default DMZ server [router mode]	77
Manage IGMP proxying [router mode]	78
Manage NAT filtering [router mode]	79
Manage the SIP application-level gateway [router mode]	80
Network access control lists	81
Enable and manage network access control	81
Add, remove or change a device on the the allowed list	83
Add, remove or change a device on the blocked list	84
Block specific Internet sites [router mode]	86
Set up keyword and domain blocking [router mode]	86
Remove a keyword or domain from the blocked list [router mode]	88
Remove all keywords and domains from the blocked list [router mode]	89
Block specific applications and services from the Internet [router mode]	89
Add a service blocking rule for a predefined service or application [router mode]	90
Add a service blocking rule for a custom service or application [router mode]	91
Change a service blocking rule [router mode]	93
Remove a service blocking rule [router mode]	94
Assign a trusted device [router mode]	95
Schedule blocking [router mode]	96
Set up security event email notifications	97
6. Optimize Performance	99
Enable QoS and automatically set the Internet bandwidth	100
Enable QoS and manually set the Internet bandwidth	101
Enable or disable the automatic update of the Performance Optimization Database	102
Manage WiFi Multimedia (WMM) for a radio	103
Improve network connections with Universal Plug and Play [router mode]	105
Change the priority for a connected device [router mode]	106
7. Network Settings	108
LAN IP address settings [router mode]	109
Change the LAN IP address and subnet settings [router mode]	109
Manage the DHCP server address pool [router mode]	110
Disable the DHCP server [router mode]	112
Manage the Router Information Protocol settings [router mode]	113
Change the access point network device name	114
Reserved LAN IP addresses [router mode]	115
Reserve a LAN IP address [router mode]	115
Change a reserved LAN IP address [router mode]	116
Remove a reserved LAN IP address entry [router mode]	117
Static routes	118
Add an IPv4 static route	118
Change an IPv4 static route	120
Remove an IPv4 static route	121
Bridge port and VLAN tag groups [router mode]	121
Set up a bridge for a port group [router mode]	122
Set up a bridge for a VLAN tag group [router mode]	123
Change the MTU size [router mode]	125
8. Maintain and Monitor	128
Update the firmware	129
Let the access point check for new firmware and update the firmware	129
Manually check for new firmware and update the firmware	131
Back up or restore the settings	133
Back up the access point settings	133
Restore the access point settings	134
Change the local device password	135
Change the password recovery questions for the local device password	136
Recover the local device admin password	137
Factory default settings	138
Use the dual-function Reset button to return to factory defaults	138
Use the local browser UI to return to factory defaults	140
Time and Network Time Protocol server	142
Manually set the time zone and adjust the daylight saving time	142
Change the Network Time Protocol server	143
Logs	144
Specify which activities the access point logs	144
View, send, or clear the logs	145
Status and statistics	146
Display information about the Internet port, access point, and WiFi settings [router mode]	146
Display information about the LAN port, access point, and WiFi settings [access point mode]	149
Check the Internet connection status	151
Display the Internet port statistics	153
Display the devices currently on the access point network and change device information	154
Traffic meter [router mode]	157
Start the traffic meter without traffic restrictions [router mode]	158
Restrict Internet traffic by volume [router mode]	159
Restrict Internet traffic by connection time [router mode]	160
View the Internet traffic volume and statistics [router mode]	162
Unblock the traffic meter after the traffic limit is reached [router mode]	163
Change the system mode to access point mode or to router mode	164
Disable LED blinking or turn off LEDs	166
9. Dynamic DNS [Router Mode]	167
About Dynamic DNS [router mode]	168
Set up a new Dynamic DNS account [router mode]	168
Use an existing Dynamic DNS account [router mode]	169
Change the Dynamic DNS account settings [router mode]	171
10. VPN Client [Router Mode]	172
About setting up the access point as a VPN client [router mode]	173
Enable the VPN client in the access point and connect to a VPN server [router mode]	174
Disconnect the access point from the VPN server [router mode]	176
11. VPN Server and Service with OpenVPN [Router Mode]	177
Enable and configure OpenVPN and VPN client access on the access point [router mode]	178
OpenVPN client utility and VPN configuration files [router mode]	179
Install OpenVPN on a Windows-based computer [router mode]	180
Install OpenVPN on a Mac [router mode]	181
Install OpenVPN on an iOS device [router mode]	182
Install OpenVPN on an Android device [router mode]	183
About setting up an OpenVPN connection [router mode]	184
About VPN access to your network or Internet service at your office or home [router mode]	185
Use a VPN tunnel to remotely access your Internet service [router mode]	186
12. Advanced WiFi and Radio Features	187
Change the region of operation	188
Manage 802.11ax and enable or disable OFDMA for a radio	189
Enable or disable smart connect for the access point	190
Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio	192
Change the channel for a radio	193
Change the WiFi throughput mode for a radio	194
Change the transmission output power for a radio	196
Add a WiFi schedule for a radio	197
Enable or disable MU-MIMO	199
Enable or disable explicit beamforming	200
Enable or disable PMF	201
Set up access point as a WiFi Bridge to another device	202
Change the CTS/RTS threshold and preamble mode for a radio	205
13. Port Forwarding and Port Triggering [Router Mode]	207
Port forwarding to a local server for services and applications [router mode]	208
Forward incoming traffic for a default service or application [router mode]	208
Add a port forwarding rule for a custom service or application [router mode]	209
Change a port forwarding rule [router mode]	211
Remove a port forwarding rule [router mode]	212
How the access point implements a port forwarding rule [router mode]	213
Application example: Make a local web server public [router mode]	213
Port triggering for services and applications [router mode]	214
Add a port triggering rule [router mode]	214
Change a port triggering rule [router mode]	216
Remove a port triggering rule [router mode]	217
Specify the time-out for port triggering [router mode]	218
Disable port triggering [router mode]	219
Application example: Port triggering for Internet Relay Chat [router mode]	220
14. Diagnostics and Troubleshooting	221
Reboot the access point from the local browser UI	222
Quick tips for troubleshooting	223
Restart your access point network if in router mode	223
Restart your access point when in access point mode	223
Check the Ethernet cable connections	223
Check the WiFi settings of your computer or mobile device	223
Check the DHCP network settings of your computer or mobile device	224
Standard LED behavior when the access point is powered on	225
Troubleshoot with the LEDs	225
Power LED is off	225
Power LED does not turn green	226
Internet LED is solid amber or off [router mode]	226
Internet LED is solid amber or off [access point mode]	227
WiFi LED is Off	227
The LAN LED is off while a device is connected	228
You cannot log in to the access point	228
You cannot log in to the access point [router mode]	228
You cannot log in to the access point [access point mode]	229
You cannot access the Internet [router mode]	231
Check the Internet WAN IP address [router mode]	231
Check or manually start the PPPoE connection [router mode]	233
Troubleshoot Internet browsing	234
Troubleshoot the WiFi connectivity	235
Changes are not saved	236
Troubleshoot your network using the ping utility of your computer or mobile device	236
Test the LAN path from a Windows-based computer to the access point	237
Test the path from a Windows-based computer to a remote device [router mode]	238
A. Factory Default Settings and Technical Specifications	239
Factory default settings	240
Technical specifications	242
B. Positioning and Wall-Mounting	244
Position the access point	245

Match case Limit results 1 per page

(Continued)

Description

Setting

By default, the access point broadcasts its SSID so that WiFi clients can detect the

WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear

the

Enable SSID Broadcast

check box. Turning off the SSID broadcast provides

additional WiFi security, but users must know the SSID to be able to join the WiFi

network.

Enable SSID Broadcast

You cannot configure this setting for the Wireless 1 network.

By default, client isolation is enabled for the WiFi network, and the

Enable

radio

button is selected. To allow communication between WiFi clients that are associated

with the same SSID or different SSIDs on the access point, select the

Disable

radio

button.

Client isolation

You cannot configure this setting for the Wireless 1 network.

By default, WiFi clients cannot reach devices that are connected to the wired ports

(LAN ports) of the access point, and the

Disable

radio button is selected. To allow

communication between WiFi clients and devices that are connected to the wired

ports, select the

Enable

radio button.

Allow access to wired

ports

To set up or change the access point WiFi security for selected WiFi network, select

and configure

one

of the options that are described in the following table.

Description

Setting

An open WiFi network does not provide any security. Any WiFi device can join the

network. We recommend that you do

not

use an open WiFi network but configure

WiFi security. However, an open network might be appropriate for a WiFi hotspot.

Note

: If you change the Wireless 1 network to an open network, WPS is disabled and

the WPS LED turns off.

None

This option, which is the same as WPA2-PSK, is the default setting and uses AES

encryption. This type of security enables only WiFi devices that support WPA2 to join

the WiFi network.

WPA2 provides a secure connection but some legacy WiFi devices do not detect

WPA2 and support only WPA. If your network includes such older devices, select

WPA-Personal [TKIP] + WPA2-Personal [AES]

authentication.

In the

Password (Network Key)

field, enter a phrase of 8 to 63 characters or 64

hexadecimal digits. To join the WiFi network, a user must enter this password. To

view the password in clear text, click the

eye

icon.

WPA2 Personal

[AES]

User Manual

Basic WiFi and Radio Features

WiFi 6 AX1800 Dual Band Wireless Access Point WAX204