Page 1
ProSAFE Dual Band Wireless N Access Point WNDAP350 Reference Man ual October, 2015 202-10534-03 350 East Plumeria Drive San Jose, CA 95134...
Page 2
Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Contact your Internet service provider for technical support.
Autosensing Ethernet Connections With Auto Uplink ....10 Compatible and Related NETGEAR Products ......10 System Requirements .
Page 4
I cannot access the Internet or the LAN from a wireless capable computer . . 81 I cannot connect to the WNDAP350 to configure it ..... . 81 When I enter a URL or IP address I get a time-out error.
Page 5
ProSAFE Dual Band Wireless N Access Point WNDAP350 Appendix A Command Line Reference Appendix B Default Settings and Technical Specifications Factory Default Settings ..........95 Technical Specifications .
This chapter describes some of the key features of the ProSAFE Dual Band Wireless N Access Point WNDAP350. It also includes the minimum prerequisites for installation, package contents, and a description of the front and back panels of the WNDAP350.
500 foot radius. Consequently, the ProSAFE Dual Band Wireless N Access Point WNDAP350 can support a small group of users in a range of several hundred feet. Most access points can handle between 10 to 32 users simultaneously per radio.
DHCP Client Support. DHCP provides a dynamic IP address to PCs and other devices upon request. The WNDAP350 can act as a client and obtain information from your DHCP server; it can also act as a DHCP server and provide network information for wireless clients.
Configuration Backup. Configuration settings can be backed up to a file and restored. • Power over Ethernet. Power can be supplied to the WNDAP350 over the Ethernet port from any 802.3af compliant mid-span or end-span source. Please refer to the Appendix for a list of compliant Netgear PoE switches.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Autosensing Ethernet Connections With Auto Uplink The WNDAP350 can connect to a standard Ethernet network. The LAN interface is autosensing and capable of full-duplex or half-duplex operation. The wireless access point incorporates Auto Uplink technology.
Resource CD, which includes a link to this manual. If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. Keep the carton, including the original packing materials, in case you need to return the firewall for repair.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Hardware Description This section describes the front and rear hardware functions of the WNDAP350. Front Panel The WNDAP350 front hardware functions are described below. Figure 1. The following table explains the LED indicators: Table 1.
Power Socket. This socket connects to the WNDAP350 12V 1.2A power adapter. RJ-45 Ethernet Port. Use the WNDAP350 Ethernet RJ-45 port to connect to an Ethernet LAN through a device such as a hub, switch, router, or PoE switch.
This chapter describes how to set up your ProSAFE Dual Band Wireless N Access Point WNDAP350 for wireless connectivity to your LAN. This basic configuration will enable computers with 802.11b/g/n or 802.11a/n wireless adapters to do such things as connect to the Internet, or access printers and files on your LAN.
Page 15
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Configuring WPA2 with RADIUS • Configuring WPA and WPA2 with RADIUS • Configuring WPA-PSK • Configuring WPA2-PSK • Configuring WPA-PSK and WPA2-PSK • Restricting Wireless Access by MAC Address Basic Installation and Configuration...
Note: Failure to follow these guidelines can result in significant performance degradation or inability to wirelessly connect to the WNDAP350. For complete performance specifications, see Appendix B, Default Settings and Technical Specifications.
Your wireless data transmissions can be received well beyond your walls by anyone with a compatible adapter. For this reason, use the security features of your wireless equipment. The WNDAP350 wireless access point provides highly effective security features which are covered in detail in this chapter. Deploy the security features appropriate to your needs.
Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 for the Subnet Mask. Connect an Ethernet cable from the WNDAP350 to the computer. Turn on your computer, connect the power adapter to the WNDAP350 and verify the following: •...
Page 19
This unique name is the access point NetBIOS name. The default Access Point Name is located on the bottom label of WNDAP350. The default is netgearxxxxxx, where xxxxxx represents the last 6 digits of the WNDAP350 MAC address. You may modify the default name with a unique name up to 15 characters long.
Page 20
ProSAFE Dual Band Wireless N Access Point WNDAP350 outbound traffic to be tagged with this VLAN ID. However, if their VLAN ID is same as the Untagged VLAN ID, then the outbound traffic is not tagged. There can be only one Management VLAN.
Page 21
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configure the IP Address settings appropriate for your network. The default values are suitable for most users and situations. (See the online help or Setting Basic IP Options page 24 for more information about how to configure the settings on this screen.
Figure 9. Basic Wireless Settings for 802.11b/bg/ng When you have completed the setup steps, you can deploy the WNDAP350 in your network. If needed, you can now reconfigure the computer you used in step 1 (from the Static IP) back to its original TCP/IP settings.
Debugging. Logging In Using the Default IP Address After you install the WNDAP350, log in to the wireless access point to configure the basic settings and the wireless settings. The WNDAP350 is set, by default, with the IP address of 192.168.1.1 with DHCP disabled.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 10. Connecting to the Access Point Click Login. Your Web browser should automatically find the WNDAP350 wireless access point and display the home screen. Setting Basic IP Options The basic IP settings for your wireless access point are entered on this screen. Most of the default settings will work in most cases.
• Primary DNS Servers. The WNDAP350 will use this IP address as the primary Domain Name Server used by stations on your LAN. •...
Page 26
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 12. Configure wireless settings 802.11b/bg/ng Configure the Wireless LAN settings based on the following field descriptions: • Wireless Mode. Select the desired wireless operating mode. The default is 11ng. The options are: 11b.
Page 27
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Channel/Frequency. From the pull-down menu, select the channel you wish to use on your wireless LAN. The wireless channel in use will be between 1 to 11 for US and Canada, 1 to 13 for Europe and Australia. The default is channel Auto.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Guard Interval. From the pull-down menu, select the desired guard interval. The guard interval protects from interference from other transmissions. The default is Auto. • Output Power. From the pull-down menu, select the transmit power of the access point.
Page 29
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Turn Radio On. On by default, you can also turn off the radio to disable access through this device. This can be helpful for configuration, network tuning, or troubleshooting activities. •...
To set up and test basic wireless connectivity: From your Web browser, log in to the WNDAP350 using its default address of http://192.168.1.1. Use the default user name of admin and default password of password or use a new LAN address and password if you have set them up.
Configure and test your PCs for wireless connectivity. Program the wireless adapter of your PCs to have the same SSID that you configured in the WNDAP350. Check that they have a wireless link and are able to obtain an IP address by DHCP from the WNDAP350.
Page 33
Default is enabled. • Authentication Settings. Configure the following settings: Network Authentication. The WNDAP350 Access Point is set by default as an open system with no authentication. When setting up Network Authentication, bear in mind the following: •...
Page 34
ProSAFE Dual Band Wireless N Access Point WNDAP350 You can configure the WNDAP350 to use the types of network authentication shown in the table below. Table 2. Network Authentication Types Type Description Open System Can be used with WEP encryption or no encryption.
Page 35
VLAN ID. If the hubs/switches on your LAN support the VLAN (802.1Q) standard and this feature has been enabled, the default VLAN ID for WNDAP350 will be associated with each profile. The default Profile VLAN ID must match the IDs used by other network devices.
• SSID. The Service Set Identification (SSID) identifies the wireless local area network. NETGEAR_11g is the default WNDAP350 SSID. However, you may customize it by using up to 32 alphanumeric characters. Write your customized SSID on the line below. ___________________________________...
Page 37
WPA RADIUS Settings. For WPA, record the following settings for the primary and secondary RADIUS servers: Server Name/IP Address: Primary _________________ Secondary __________________ Port: ___________________________________ Shared Secret: ___________________________________ Use the procedures described in the following sections to configure the WNDAP350. Store this information in a safe place. Basic Installation and Configuration...
To set up or modify the RADIUS Server Settings: From your Web browser, log in to the WNDAP350 using the default LAN address of http://192.168.1.1, user name admin and password password, or use the LAN address and password that you set up.
Click Apply to save your settings. Setting up a Security Profile The WNDAP350 allows you to set up eight different security profiles for 802.11b/bg/ng and eight different profiles for 802.11a/na. Each profile can be configured with a different security option for network authentication.
Page 40
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure a Security Profile: From your Web browser, log in to the WNDAP350 using the default LAN address of http://192.168.1.1, user name admin and password password, or use the LAN address and password that you set up.
If the hubs/switches on your LAN support the VLAN (802.1Q) standard and this feature has been enabled, the default VLAN ID for WNDAP350 will be associated with each profile. The default Profile VLAN ID must match the IDs used by other network devices.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 19. Configure WEP Shared Key Select the key to be used as the default key by checking the radio box. (Data transmissions are always encrypted using the default key.) Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other.
ProSAFE Dual Band Wireless N Access Point WNDAP350 you selected displays. When the Security Profile screen displays, check the check box of the Security Profile you want to modify and click Edit. Figure 20. Configure WPA with RADIUS Choose WPA with RADIUS from the from the Network Authentication drop-down menu.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure WPA2 with RADIUS: Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select RADIUS Server Settings. The RADIUS Server Settings screen displays.
ProSAFE Dual Band Wireless N Access Point WNDAP350 To configure WPA and WPA2 with RADIUS: Under the Configuration tab, select Security on the main menu, select Advanced from the left panel, and then select RADIUS Server Settings. The RADIUS Server Settings screen displays.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Enter the preshared key passphrase (Network Key). Wireless Client Security Separation is disabled by default. If enabled, associated wireless clients will not be able to communicate with each other. (This feature is intended for hotspots and other public access situations.
Restricting Wireless Access by MAC Address The optional Access Control window lets you block the network access privilege of any specified stations through the WNDAP350 wireless access point. When you enable access control, the access point only accepts connections from clients on the selected access control list.
Page 48
Click Apply to save your wireless access control list settings. Now, only devices on this list will be allowed to wirelessly connect to the WNDAP350. Basic Installation and Configuration...
Management This chapter describes how to use the management features of your ProSAFE Dual Band Wireless N Access Point WNDAP350. To access these features, connect to the WNDAP350 as described in Logging In Using the Default IP Address on page 23. Then select the category under either the Monitoring or Maintenance headings in the main menu of the browser interface.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Remote Management Both the SNMP and Remote Console are enabled by default, which allows for remote management of the WNDAP350 from a client running SNMP management software, as well as from a secure Telnet console. ...
Figure 28. Configure Remote Console Using the Secure Telnet Interface The WNDAP350 includes a secure Telnet command line interface (CLI). You can access the CLI from a secure Telnet client over the Ethernet port or over the serial console port.
The software of the WNDAP350 wireless access point is stored in FLASH memory, and can be upgraded as new software is released by NETGEAR. Upgrade files can be downloaded from Netgear's Web site. The upgrade file can be sent to the wireless access point using your browser.
Page 53
You cannot perform the software upgrade from a computer that is connected to the WNDAP350 wireless access point with a wireless link. You must use a computer that is connected to the WNDAP350 wireless access point with a Ethernet cable.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Configuration File Management The WNDAP350 wireless access point settings are stored in the wireless access point in a configuration file. This file can be saved (backed up) to a user’s computer, retrieved (restored) from the user’s computer, or cleared to factory default settings.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Restoring Saved Settings To restore your settings from a saved configuration file: Under the Maintenance tab on the main menu, select Upgrade, then select Restore Settings from the sidebar to back up your current settings. The following screen displays: Figure 32.
Page 56
Use something with a small point, such as a pen, hold the Reset button for 5 seconds while you Power On the WNDAP350. Continue holding the Reset Button until the LEDs blink twice. Release the Reset Button. The factory default configuration has now been restored and the WNDAP350 is ready for use. Management...
ProSAFE Dual Band Wireless N Access Point WNDAP350 Changing the Administrator Password The default password is password. You should change this password to a more secure password, since you cannot change the administrator login name. To change the Administrator password: Under the Maintenance tab on the main menu, select Password, and then select Change Password.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Enabling the SysLog Server The SysLog screen allows you to enable the SysLog option if you have a SysLog server on your LAN. To enable a SysLog server: Under the Configuration tab on the main menu, select System, then select the...
Viewing General Summary Information The System screen, under the Monitoring tab provides a summary of the current WNDAP350 configuration settings, including current IP settings and current Wireless settings. This information is read only, so any changes must be made on other pages.
Page 60
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 37. View system information This screen shows the parameters listed in Table Table 4. System Information Fields Field Description Access Point Information Access Point Name Indicates the NetBIOS name. The default name may be changed, if desired.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 4. System Information Fields (continued) Field Description Current Wireless Settings for 802.11b/bg/ng Operating Mode Identifies the 802.11 operating mode of the WNDAP350. Channel/Frequency Identifies the channel the wireless port is using. Auto is the default channel setting.
Total Packets The Wireless packets sent and received in 802.11n/g mode since the WNDAP350 was restarted. Total Bytes The Wireless bytes sent and received in 802.11n/g mode since the WNDAP350 was restarted. Wireless 11n/na Unicast Packets The Unicast packets sent and received in 802.11n/a mode since the WNDAP350 was restarted.
To force the wireless access point to look for associated devices, click the Refresh button. Enabling Rogue AP Detection The WNDAP350 can detect rogue APs and wireless stations and show their details to the administrator. ...
ProSAFE Dual Band Wireless N Access Point WNDAP350 Figure 40. Enable Rogue AP detection Check the Turn Rogue AP Detection On radio box to enable rogue AP detection and click Apply. If you enable Rogue AP Detection, the AP continuously scans the wireless network and collects information about all APs heard on its channel.
Select the file and click Open. Click Import to upload the list to the AP. Viewing Rogue AP Statistics The WNDAP350 can detect rogue APs and wireless stations and show a complete list of unknown or known APs to the administrator. ...
ProSAFE Dual Band Wireless N Access Point WNDAP350 To view the list of known APs: Under the Monitoring tab on the main menu, select Rogue AP. Select Known AP List. The following screen displays with a list of known APs: Figure 42.
Advanced Configuration This chapter describes how to configure the advanced features of your ProSAFE Dual Band Wireless N Access Point WNDAP350. The advanced configuration features are located under various sub-menus under Configuration. The chapter includes the following sections: • IP Settings for Wireless Clients •...
ProSAFE Dual Band Wireless N Access Point WNDAP350 IP Settings for Wireless Clients You can turn the WNDAP350 into a DHCP Server for wireless clients for both DHCP-enabled wireless clients. The default advanced IP wireless settings usually work well. This feature is intended for use by a systems administrator.
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Gateway Address. The Access Point will assign this IP address as the default gateway for any traffic beyond the local network. • Primary DNS Server. The Access Point will assign this IP address as the primary Domain Name Server used by the connected wireless stations.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Specify the following settings: • HTTP Redirect. Enable HTTP Redirect. • Redirect URL. Enter the URL of the Web server where you wish to redirect HTTP (port 80) requests. Click Apply. All port 80 requests will now be redirected to the specified URL.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Collision Detection) mechanism or the CSMA/CA mechanism for packet transmission. With the CSMA/CD transmission mechanism, the transmitting station sends out the actual packet as soon as it has waited for the silence period. With the...
Page 72
ProSAFE Dual Band Wireless N Access Point WNDAP350 Select the 802.11a/na tab. The Advanced Wireless Settings screen you selected displays, as shown in Figure 46, Advanced Wireless Settings - 802.11b/bg/ng. Figure 47. Advanced Wireless Settings - 802.11n/na Enter the appropriate information in the fields described below: •...
Specify the QoS options on the WNDAP350 are as follows: • AP EDCA Parameters. Specify the AP EDCA (Enhanced Distributed Channel Access) parameters for different types of data transmitted from the WNDAP350 wireless access point to the wireless client. Advanced Configuration...
ProSAFE Dual Band Wireless N Access Point WNDAP350 • Station EDCA Parameters. Specify the Station EDCA parameters for different types of data transmitted from the wireless client to the WNDAP350 wireless access point. If WMM is disabled, you cannot configure Station EDCA parameters. Table 6 describes the settings for QoS queues.
Page 75
Association option to enable wireless clients to associate with this access point. The other bridge-mode wireless access points must be set to point-to-point bridge mode, using the MAC address of this WNDAP350. They then send all traffic to this Master, rather than communicate directly with each other.
Figure 49, Enable Wireless Point-to-Point Bridge). Configure the WNDAP350 (AP1) on LAN Segment 1 in Point-to-Point Bridge mode. Configure the WNDAP350 (AP2) on LAN Segment 2 in Point-to-Point Bridge mode. AP1 must have AP2’s MAC address in its Remote MAC Address field and AP2 must have AP1’s MAC address in its Remote MAC Address field.
WNDAP350 (AP1) on LAN Segment 1 in Point-to-Point Bridge mode with the Remote MAC Address of AP2. • Because it is in the central location, configure WNDAP350 (AP2) on LAN Segment 2 in Point-to-Multi-Point Bridge mode. The MAC addresses of the adjacent APs are required in AP2.
Page 78
All access points must be on the same LAN. That is, all the APs LAN IP address must be in the same network. • If using DHCP, all WNDAP350 wireless access points should be set to Obtain an IP address automatically (DHCP Client) in the IP Address Source portion of the Basic IP Settings menu.
This chapter provides information about troubleshooting your ProSAFE Dual Band Wireless N Access Point WNDAP350. After each problem description, instructions are given to help you diagnose and solve the problem. For the common problems listed, go to the section indicated.
If it is plugged directly into the wall, verify that it is not a switched outlet. • Make sure you are using the correct NETGEAR power adapter supplied with your access point. The Wireless LAN activity light does not light up The access point antennas are not working.
• If you are using the NetBIOS name of the WNDAP350 to connect, ensure that your computer and the WNDAP350 are on the same network segment or that there is a WINS server on your network. •...
Use something with a small point, such as a pen, to press the Reset button in and hold it in for at least 5 seconds. Release the Reset button. The factory default configuration has now been restored, and the WNDAP350 is ready for use. Troubleshooting and Debugging...
Page 83
Command Line Reference The ProSAFE Dual Band Wireless N Access Point WNDAP350 can be configured either through the command line interface (CLI), a Web browser, or an MIB browser. The CLI allows viewing and modification of the configuration from a terminal or PC through a telnet connection.
Page 84
ProSAFE Dual Band Wireless N Access Point WNDAP350 | | | | |-rate --wireless transmission date rate | | | | |-rifs-transmission --enable successive frame transmission at different transmit powers | | | | |-rogue-ap-detection --enable rogue access point detection...
Default Settings and Technical Specifications This appendix provides the factory default settings and technical specifications for the ProSAFE Dual Band Wireless N Access Point WNDAP350. The appendix includes the following sections: • Factory Default Settings • Technical Specifications...
ProSAFE Dual Band Wireless N Access Point WNDAP350 Factory Default Settings You can use the reset button located on the front of your device to reset all settings to their factory defaults. This is called a hard reset. • To perform a hard reset, push and hold the reset button for approximately 5 seconds (until the TEST LED blinks rapidly).
Page 96
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 7. Access Point Default Configuration Settings (continued) Feature Description Wireless Operating Mode Access Point Access Point Name netgearxxxxxx where xxxxxx are the last 6 digits of the wireless access point MAC address.
ProSAFE Dual Band Wireless N Access Point WNDAP350 Technical Specifications Table 8. WNDAP350 Technical Specifications Parameter ProSAFE Dual Band Wireless N Access Point WNDAP350 802.11a Data Rates 6, 9, 12, 18, 24, 36, 48, 54, and 108 Mbps (Auto-rate capable) 802.11na Data Rates...
Page 98
ProSAFE Dual Band Wireless N Access Point WNDAP350 Table 8. WNDAP350 Technical Specifications (continued) Parameter ProSAFE Dual Band Wireless N Access Point WNDAP350 802.11ng Data Rates Data Rates for Channel Width=20MHz and Guard Interval=short (400ms): Best, 7.2 Mbps, 14.4 Mbps, 21.7 Mbps, 28.9 Mbps, 43.3 Mbps, 57.8 Mbps, 65 Mbps, 72.2 Mbps, 14.44 Mbps, 28.88 Mbps, 43.33 Mbps, 57.77 Mbps, 86.66 Mbps,...
Page 99
Index Numerics AID see association ID A-MPDU (Aggregation of MAC Protocol Data Units) 2.4 GHz/5 GHz concurrent 20 MHz antenna 20/40 MHz 2.4 GHz 20/40MHz 5 GHz 40 MHz accessories 802.11a/b/g/n position standards compliance associated stations 802.11a/n present in AWSL, only default SSID association ID 802.11b/g/n...
Page 100
ProSAFE Dual Band Wireless N Access Point WNDAP350 wireless point-to-multi-point bridge default SSID 802.11b/g/n BSSID default user name default wireless access point name DHCP point-to-multi-point bridging Category 5 Ethernet cable DHCP client change password default setting channel auto DHCP client, configure...
Page 101
ProSAFE Dual Band Wireless N Access Point WNDAP350 support for placement of wIreless client security separation multiple BSSIDs, support for wireless client security separation multiple input, multiple output (MIMO), support for HTTP redirect multi-point bridging hotspot settings extend extend range...
Page 102
ProSAFE Dual Band Wireless N Access Point WNDAP350 configure RIFS (Reduced Interframe Space) transmission point-to-point bridge mode roaming wireless point-to-multi-point bridge multiple wireless access points power adapter roaming on same subnet, support for power consumption rogue AP detection configure Power over Ethernet (PoE), support for...
Page 103
ProSAFE Dual Band Wireless N Access Point WNDAP350 Spanning Tree Protocol enabling unauthorized access, secure from SSID untagged VLAN hidden mode default settings SSID broadcast, disable upgradeable firmware, support for SSID match verify connectivity SSID, wireless network name standards, supported VLAN (802.1Q)
Page 104
ProSAFE Dual Band Wireless N Access Point WNDAP350 wireless point-to-point bridge wireless client security separation wireless security options WPA preshared key passphrase, use with WPA-PSK restrict access based on MAC address. WPA with RADIUS, configure turn off broadcast of wireless network name (SSID)