Page 1 ProSAFE Wireless Controller Models WC7500, WC7600, WC7600v2, and WC9500 Us e r Manual November 2016 202-11659-03 350 East Plumeria Drive San Jose, CA 95134...
Page 2 Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Page 3: Table Of Contents
Supported NETGEAR Access Points ........
Page 4 ProSAFE Wireless Controller Management VLAN and Data VLAN Strategies ......42 High-Level Deployment Scenarios ........44 Scenario Example 1: Network With Single VLAN.
Page 5 ProSAFE Wireless Controller Manage the Time Settings ......... . . 101 Manage the IP, VLAN, and Link Aggregation Settings .
Page 6 ProSAFE Wireless Controller Configure a Local MAC Authentication Group ......149 Remove a Local MAC Authentication Group ......151 Select an ACL for a Profile in the Basic Profile Group .
Page 7 ProSAFE Wireless Controller Load Balancing Concepts ......... . 210 Configure Load Balancing .
Page 8 ProSAFE Wireless Controller Save the System Logs ..........264 Save and Clear the Logs for an Access Point .
Page 9 ProSAFE Wireless Controller View DHCP Leases That Are Provided by the Wireless Controller ..342 View Captive Portal Users on Access Points That the Wireless Controller Manages........343 View the Guest Email Address Database for Access Points That the Wireless Controller Manages .
Page 10 ProSAFE Wireless Controller Appendix B Factory Default Settings, Technical Specifications, and Passwords Requirements Factory Default Settings ..........387 Technical Specifications Models WC7500 and WC7600v2.
Page 11: Chapter 1 Introduction
Note: Firmware updates with new features and bug fixes are made available from time to time on downloadcenter.netgear.com. Some products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this guide, you might need to update your firmware.
Page 12: Models, Key Features, And Capabilities
ProSAFE Wireless Controller Models, Key Features, and Capabilities The NETGEAR ProSAFE Wireless Controller is a high-capacity, secured wireless controller ® intended for medium to large-sized businesses, higher education institutions, hospitals, and hotels. The wireless controller supports the IEEE 802.11a/b/g/n/ac protocols. With the wireless...
Page 13: Model Wc7600V2
ProSAFE Wireless Controller Model WC7600v2 One WC7600v2 wireless controller with the appropriate licenses can support up to 50 access points (APs) with up to 2,000 users. In a stacked configuration, a stack of three wireless controllers can support up to 150 access points with up to 6,000 users. Model WC7600v2 provides four RJ-45 Gigabit Ethernet ports.
Page 14: Model Common Features And Capabilities
ProSAFE Wireless Controller Table 1. Model differences and scalable architecture (continued) Feature WC7500 WC7600 WC7600v2 WC9500 SD card slot None None Optional extra power supply Not supported Supported Not supported Supported 1. All four Gigabit Ethernet ports provide equal performance and are bonded together in Linux active-backup mode. 2.
Page 15: What Can You Do With A Wireless Controller
Logging and emailing of system events, RF events, load-balancing events, and rate-limiting events. For a list of all features and capabilities of the wireless controller, see the datasheets: • For the WC7500, visit netgear.com/support/product/WC7500. • For the WC7600, visit netgear.com/support/product/WC7600v1. •...
Page 16 ProSAFE Wireless Controller • Discover Access Points in the Network and Provision IP Addresses and Firmware Discover access points in the network. The access points can be in factory default state or functioning in standalone mode, but after discovery by the wireless controller and addition to the managed access point list, the access points become dependent (managed) access points.
Page 17: Licenses
Register Your Licenses on page 110 and Manage Licenses on page 274. Maintenance and Support NETGEAR offers technical support seven days a week, 24 hours a day. Information about support is available on the NETGEAR ProSupport website at prosupport.netgear.com. Introduction...
Page 18: Chapter 2 Hardware Descriptions
This chapter includes the following sections: • Package Contents • Hardware Models WC7500 and WC7600v2 • Hardware Models WC7600 and WC9500 • LED Functions (All Models) • Wireless Controller System Components • Supported NETGEAR Access Points • Supported NETGEAR Antennas...
Page 19: Package Contents
• ProSAFE Wireless Controller Installation Guide If any of the parts are incorrect, missing, or damaged, contact your NETGEAR dealer. We recommend that you keep the carton, including the original packing materials, in case you must return the product for repair.
Page 20 RS232 port for connecting to an optional console terminal. The port provides a DB9 male connector. The default baud rate is 115200 bits/second. Note: The console port is for debugging under guidance of NETGEAR technical support only. Reset button Using a sharp object, press and hold this button for about 10 seconds until the Status LED blinks and the wireless controller returns to factory default settings.
Page 21: Wc7500 And Wc7600V2 Back Panel Components
ProSAFE Wireless Controller WC7500 and WC7600v2 Back Panel Components The wireless controller comes with a single internal power supply and internal fans. The back panel provides a Kensington™ lock slot and the AC power supply connector for the 100–240V, 3A, 50–60 Hz power supply. Kensington lock slot Power supply connector Figure 3.
Page 22: Hardware Models Wc7600 And Wc9500
ProSAFE Wireless Controller Hardware Models WC7600 and WC9500 The front panel ports, slots, and LEDs, back panel components, and product label of models WC7600 and WC9500 are described in the following sections. WC7600 and WC9500 Front Panel Ports and Slots The following figure shows the front panel of models WC7600 and WC9500.
Page 23: Wc7600 And Wc9500 Back Panel Components
RS232 port for connecting to an optional console terminal. The port provides a DB9 male connector. The default baud rate is 9600 bits/second. Note: The console port is for debugging under guidance of NETGEAR technical support only. WC7600 and WC9500 Back Panel Components The wireless controller comes with a single internal power supply but supports an optional second power supply for power redundancy.
Page 24: Wc7600 And Wc9500 Product Labels
ProSAFE Wireless Controller From left to right, the back panel of models WC7600 and WC9500 provide the following components: • Power supply. 100–240V, 5A, 47–63 Hz power supply, which includes the following external components: AC power socket. Attach the power cord to this socket. (The wireless controller does not provide an on/off power switch.) Power supply with handle.
Page 25: Led Functions (All Models)
ProSAFE Wireless Controller Figure 9. Product label WC9500 LED Functions (All Models) The function of each LED is described in the following table. These LEDS apply to all models except where noted otherwise. Table 5. LED functions for all models Status Description Power LED...
Page 26: Wireless Controller System Components
The wireless controller system can include a single wireless controller or a group of up to three stacked wireless controllers that can function in a redundant configuration The wireless controller system supports the following NETGEAR ProSAFE access point models: •...
Page 27: Supported Netgear Access Points
• WNAP210v2 ProSAFE Wireless-N Access Point Supported NETGEAR Access Points You can connect access points to the wireless controller either directly with an Ethernet cable through a router or switch, or remotely through a VPN network. After you use the automatic...
Page 28 Supports Power over Ethernet plus (PoE+) with a power consumption that complies with the 802.3at standard. Accepts optional antennas. For product documentation and firmware, visit netgear.com/support/product/WAC740. • WAC730 ProSAFE 3x3 Dual-Band Wireless AC Access Point Supports concurrently 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac network devices.
Page 29 ProSAFE Wireless Controller For product documentation and firmware, visit netgear.com/support/product/WN370. • WND930 Outdoor Dual Band Wireless-N Supports 802.11a, 802.11b, 802.11g, and 802.11n network devices. Operates concurrently in the 2.4 GHz and 5 GHz radio bands. Supports speeds of up to 300 Mbps for 802.11n network devices.
Page 30: Supported Netgear Antennas
Operates concurrently in the 2.4 GHz and 5 GHz radio bands. Supports Power over Ethernet (PoE) with a power consumption of up to 10.75W. Accepts optional antennas. For product documentation and firmware, visit netgear.com/support/product/WNDAP350. • WNAP320 ProSAFE Wireless-N Access Point Supports 802.11b, 802.11g, and 802.11n network devices.
Page 31 ProSAFE Wireless Controller Frequency range 2400–2500 MHz Maximum range 8.5 km (5.28 miles) Polarization linear; vertical For product documentation and firmware, visit netgear.com/support/product/ANT224. Hardware Descriptions...
Page 32: Chapter 3 System Planning And Deployment Scenarios
System Planning and Deployment Scenarios This chapter includes the following sections: • Basic and Advanced Setting Concepts • Profile Group Concepts • System Planning Concepts • High-Level Configuration Examples • Management VLAN and Data VLAN Strategies • High-Level Deployment Scenarios...
Page 33: Basic And Advanced Setting Concepts
ProSAFE Wireless Controller Basic and Advanced Setting Concepts You can deploy the wireless controller in a small WiFi network with 10 or 20 access points or in a large WiFi network with up to 600 access points. Small networks require a basic configuration, but large networks can become complex and require you to configure the advanced features of the wireless controller.
Page 34: Profile Group Concepts
ProSAFE Wireless Controller Before you start the configuration of your wireless controller, decide whether you can use a basic configuration (that is, follow the Basic submenus) or must use an advanced configuration (that is, follow the Advanced submenus). Once you make your choice, configuring the wireless controller can be fairly easy if you consistently follow either the Basic submenus or the Advanced submenus.
Page 35 ProSAFE Wireless Controller Group-6 Group-7 Group-8 Group-2 Group-3 Group-4 Group-5 Group-1 5 GHz 2.4 GHz radio radio Security profiles Security profiles Figure 11. Advanced profile group architecture The following figure shows an example of three access point profile groups, in which the first profile group (Group-1) supports five security profiles.
Page 36: System Planning Concepts
For information about how to deploy the wireless controller in your network, see your model’s installation guide, which you can download by visiting downloads.netgear.com. For many configurations, you can use the default WiFi settings. The IP address, VLAN, DHCP server, client authentication, and data encryption settings are specific to your environment.
Page 37 ProSAFE Wireless Controller packets that are sent from the wireless controller do not carry the 802.1Q header, and all untagged packets that are sent to the wireless controller are treated as management VLAN traffic. Note: Use a tagged VLAN or change the tagged VLAN ID only if the hubs and switches on your LAN support 802.1Q.
Page 38 ProSAFE Wireless Controller Client Authentication and Data Encryption A user must authenticate to the WLAN to be able to access WLAN resources. The wireless controller supports several types of security methods, including those methods that require an external RADIUS or LDAP authentication server. The encryption option that you can select depends upon the authentication method that you selected.
Page 39: High-Level Configuration Examples
ProSAFE Wireless Controller High-Level Configuration Examples This section includes the following subsections: • Single Controller Configuration With Basic Profile Group • Single Controller Configuration With Advanced Profile Groups • Stacked Controller Configuration Single Controller Configuration With Basic Profile Group A basic configuration consists of a single wireless controller that controls a collection of access points that are organized into the basic default group.
Page 40: Single Controller Configuration With Advanced Profile Groups
ProSAFE Wireless Controller Single Controller Configuration With Advanced Profile Groups A more complex configuration consists of a single wireless controller that controls a collection of access points that are organized in access point profile groups and might use several profiles in each access point profile group. ...
Page 41: Stacked Controller Configuration
ProSAFE Wireless Controller Stacked Controller Configuration A stacked controller configuration can consist of up to three wireless controllers and up to 600 access points. Note: If the stack members are on different floors or in different buildings, you could configure a separate access point profile group for each building or floor.
Page 42: Management Vlan And Data Vlan Strategies
ProSAFE Wireless Controller Step Configuration Web Management Interface Path Configure the slave wireless controllers and deploy them in the network. For each slave wireless controller, configure up to eight access point profile groups, and for each access point profile in a group, do at least the following: Configure an SSID for WiFi access.
Page 43 ProSAFE Wireless Controller The following illustration shows a simplified view of how you can use VLANs to segregate traffic by user category. Management VLAN 100 Ethernet traffic Internet Finance VLAN 10 Ethernet traffic Employee VLAN 20 Ethernet traffic Network printer Backend L3 switch Deploy the wireless controller or router...
Page 44: High-Level Deployment Scenarios
ProSAFE Wireless Controller High-Level Deployment Scenarios This section provides three deployment scenarios to illustrate how the wireless controller can function in various network configurations: • Scenario Example 1: Network With Single VLAN • Scenario Example 2: Advanced Network With VLANs and SSIDs •...
Page 45 ProSAFE Wireless Controller The access points and wireless controller are connected in the same subnet and use the same IP address range that is assigned for that subnet. The configuration does not include any routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the wireless controller.
Page 46: Scenario Example 2: Advanced Network With Vlans And Ssids
ProSAFE Wireless Controller Step Configuration Web Management Interface Path When the access points are operating, open the Discovery Access Point > Discovery Wizard Wizard to do the following: Specify the state of the access points. The state can be either factory default in a Layer 2 network or already installed and functioning in standalone mode.
Page 47 ProSAFE Wireless Controller The access points and wireless controller are connected in the same subnet and same VLAN and use the same IP address range that is assigned for that subnet. The configuration does not include any routers between the access points and the wireless controller. The access points are connected to a PoE switch, which, in turn, is connected to the Layer 3 switch or router that provides Internet access.
Page 48: Scenario Example 3: Advanced Network With Redundancy
ProSAFE Wireless Controller Step Configuration Web Management Interface Path Configure the following profiles, and configure network authentication and data encryption for these profiles: A profile with SSID 1 and VLAN 10. Configuration > Profile > Basic A profile with SSID 2 and VLAN 20. If necessary for the selected network authentication options, Configuration >...
Page 49 ProSAFE Wireless Controller • One redundant wireless controller • Four VLANs: VLAN 10, VLAN 20, VLAN 30, and VLAN 40 • Three SSIDs: SSID 1, SSID 2, and SSID 3 In this scenario, the VLANs and SSIDs are used to accommodate traffic for different user groups in a school that is spread out over two buildings.
Page 50 ProSAFE Wireless Controller This network configuration requires the following conditions: • VLAN 1 is configured on the wireless controllers, core switch, and PoE switches. This VLAN is untagged. • VLANs 10, 20, and 30 are configured on the wireless controllers, core switch, and the PoE switch in Building 1.
Page 51 ProSAFE Wireless Controller Step Configuration Web Management Interface Path Deploy the access points and connect them to PoE switches. When the access points are operating, open the Discovery Access Point > Discovery Wizard Wizard to do the following: Specify the state of the access points, which is the factory default state in a Layer 2 network.
Page 52: Chapter 4 Rf Planning And Deployment
RF Planning and Deployment This chapter includes the following sections: • Application, Browser, and Port Requirements for RF Planning • RF Planning Overview • Manage a Building and Floors for an RF Plan • Use the WiFi Auto Planning Advisor to Generate an RF Plan for a Floor •...
Page 53: Application, Browser, And Port Requirements For Rf Planning
ProSAFE Wireless Controller Application, Browser, and Port Requirements for RF Planning For you to be able to access the RF planning pages in the web management interface, make sure that your computer can run Adobe Flash Player and that Java is enabled in your browser.
Page 54: Planning Requirements
ProSAFE Wireless Controller Note: In a redundancy group, after a failover occurs to a redundant controller, RF planning is no longer accessible. Only after a switchback to the primary controller occurs, RF planning becomes available again. Planning Requirements To expedite your planning efforts, collect the information that is listed in Table 8 Table 9 before you use RF planning.
Page 55 ProSAFE Wireless Controller Table 9. Floor planning table (continued) Item Your Information Brick walls Concrete walls Light doors Metal doors Heavy doors Thin windows Thick windows Other obstacles WiFi building obstruction areas Cubicle office areas Closed office areas Elevator shafts Warehouses with low-density stock Warehouses with medium-density stock Warehouses with high-density stock...
Page 56: Recommended Rf Planning Procedure For A Building
ProSAFE Wireless Controller Recommended RF Planning Procedure for a Building We recommend that you first set up your building and floors to scale and define the floor plans. For more information, see Manage a Building and Floors for an RF Plan on page 56.
Page 57: Add A Building And Floors
ProSAFE Wireless Controller Add a Building and Floors The wireless controller includes a default building and default floor with a default floor map. You cannot remove the default building or default floor but you can replace the default floor map with a custom floor map. You can add up to 30 buildings, each of which can include up to 20 floors.
Page 58 ProSAFE Wireless Controller The Floor-1 name displays. This default floor name was added automatically when you added the building. Click Floor-1. The default floor map displays. This default floor map was added automatically when you added the building. To add a custom floor map, click the Add Floor icon.
Page 59: Add A Single Floor To A Building
ProSAFE Wireless Controller Add a Single Floor to a Building You can add a single floor to an existing building.  To add a single floor to a building: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 60: Scale A Floor
ProSAFE Wireless Controller • To specify the floor length, click the Length(Y) button, select Meter or Feet from the menu, and enter the floor length. Note: If you do not want to enter the length or width or the information is not available, you can scale the floor later (see Scale a Floor on page 60).
Page 61: Add A Wifi Coverage Or Wifi Noncoverage Zone To A Floor
ProSAFE Wireless Controller Select Meter or Feet from the menu and enter the distance between the two points. Click the Confirm button. The floor map is scaled. Click the Save icon. Your settings are saved. Add a WiFi Coverage or WiFi Noncoverage Zone to a Floor A WiFi coverage zone on a floor is an area in which access points must provide WiFi coverage.
Page 62: Remove A Wifi Coverage Or Noncoverage Zone From A Floor
ProSAFE Wireless Controller To add another zone, repeat Step 7 though Step Remove a WiFi Coverage or Noncoverage Zone From a Floor After you add and save a WiFi coverage or noncoverage zone on a floor, you can remove it from the floor.
Page 63 ProSAFE Wireless Controller • Concrete wall (12 dB) • Light door (4 dB) • Metal door (11 dB) • Heavy door (15 dB) • Thin window (2 dB) • Thick window 4 dB) These obstacles contribute to the WLAN signal degradation based on their construction materials and interferences.
Page 64: Remove A Building Obstacle From A Floor
ProSAFE Wireless Controller f. Click the Obstacle icon. g. Select the icon for the custom obstacle that you just added. Select a line between two points on the map by anchoring the line at one point and releasing the line at the other point. To remove the obstacle, click the Undo link, and repeat Step 7 though...
Page 65: Add A Wifi Obstruction Area
ProSAFE Wireless Controller Add a WiFi Obstruction Area WiFi obstructions areas can be any of the following predefined areas: • Cubicle office area • Closed office area • Elevator shaft • Warehouse stock with low density • Warehouse stock with medium density •...
Page 66: Remove A Wifi Obstruction Area
ProSAFE Wireless Controller Remove a WiFi Obstruction Area After you add and save a WiFi obstruction area on a floor, you can remove it from the floor.  To remove a WiFi obstruction area from a floor: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 67: Change The Name Of A Building
ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Plans > Planning. The page displays the Planning icons. In the building tree on the left, click the + icon of the building that contains the floor. The floor names display.
Page 68: Duplicate An Entire Building With All Floors
ProSAFE Wireless Controller Change the name. Click the Confirm button. Your settings are saved. Duplicate an Entire Building With All Floors You can duplicate an entire building with all floors and floor plans, including all floor definitions. For information about duplicating a single floor in a building, see Duplicate a Single Floor on page 68.
Page 69: Remove A Single Floor
ProSAFE Wireless Controller The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Plans > Layout. The page displays the Planning icons. In the building tree on the left, click the + icon of the building that contains the floor.
Page 70: Remove An Entire Building With All Its Floors
ProSAFE Wireless Controller The floor names display. Click the floor name. The floor map displays. Click the Trashcan icon. Confirm the removal. The floor is removed. Remove an Entire Building With All Its Floors You can remove an entire building with all its floors. However, you cannot remove the default building.
Page 71 The WiFi auto planning advisor bases its calculations on the building and floor definitions and lets you enter the following parameters to determine the WiFi coverage for your environment: • NETGEAR access point (see Supported NETGEAR Access Points on page 27) •...
Page 72 ProSAFE Wireless Controller  To run the WiFi auto planning advisor and generate an RF plan and heat map for a floor: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens.
Page 73 ProSAFE Wireless Controller Specify the WLAN requirements for the floor as described in the following table. Setting Description Select AP and External Antenna for Planning AP Model Specify the access point that you intend to use for the floor: Click the Browse button. The access points that the wireless controller supports display in a pop-up window.
Page 74 ProSAFE Wireless Controller Setting Description Criteria of Auto-placement Wi-Fi Coverage Move the slider to the required WiFi coverage. The minimum coverage is 10 percent; Percentage The maximum coverage is 100 percent. Base the WiFi coverage on the following components: • The required bandwidth for each connection in the covered area •...
Page 75 ProSAFE Wireless Controller Signal strength at this location The WiFi auto planning advisor generates a heat map that suggests the required number of access points (15 in the figure) and the locations on the floor map to achieve the optimum WiFi coverage that is based on the WLAN requirements that you specified (see Step To see the signal strength at a location on the floor map, point to the location (-44dBm at the location in the figure).
Page 76: Manually Add And Manage Access Points On A Floor Map For An Rf Plan
ProSAFE Wireless Controller By default, the access point name is shown. Because this section describes an RF plan that is not yet deployed, the IP address and channel cannot be displayed on the map. To save the floor map with its new configuration, click the Save icon.
Page 77 ProSAFE Wireless Controller Specify the access point settings as described in the following table. Setting Description AP name Enter a name for the access point. By default, the access points are numbered, for example, AP-16. AP Model Specify the access point that you intend to use for the floor: Click the Browse button.
Page 78 ProSAFE Wireless Controller Setting Description 2.4G Specify the settings for the 2.4 GHz band: • Enable. By default, the On radio button is selected and the 2.4 GHz band is enabled. To disable the 2.4 GHz band, select the Off radio button. •...
Page 79: Manually Add And Manage Antennas On A Floor Map For An Rf Plan
ProSAFE Wireless Controller To add another access point to the floor map, change the properties for another access point, move another access point on the floor map, remove another access point from the floor map, or perform a combination of these tasks, repeat Step 7 through Step...
Page 80 ProSAFE Wireless Controller  To manually add and manage individual antennas on a floor map for an RF plan: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens.
Page 81 ProSAFE Wireless Controller Specify the antenna settings as described in the following table. Setting Description Name Enter a name for the antenna. By default, the access points are numbered, for example, Antenna-1. Model Specify the antenna that you intend to use for the floor: Click the Browse button.
Page 82 ProSAFE Wireless Controller To change the properties for an antenna, do the following: a. Double-click the antenna. A pop-up menu displays. b. From the pop-menu, select Edit Properties. The Edit Antenna pop-up window opens. This window is identical to the Add Antenna pop-up window.
Page 83: Display And Recalculate The Wifi Coverage For A Heat Map
ProSAFE Wireless Controller Display and Recalculate the WiFi Coverage for a Heat Map After you set up an RF plan and generate a heat map for a floor, you can display the WiFi coverage and view how the WiFi coverage changes if you change the minimum signal strength with the same number of access points and antennas.
Page 84: Display Or Change The Wifi Inventory For An Rf Plan
ProSAFE Wireless Controller Note: The Coverage icon is masked if you did not generate a heat map. The Total Number of AP and Total Number of Antenna fields are based on the RF plan and fixed. The Wi-Fi Coverage Percentage (%) field displays the WiFi coverage based on the position of the Minimum Signal Strength slider at –62dBm.
Page 85 ProSAFE Wireless Controller The page displays the Planning icons. In the building tree on the left, click the + icon of the building that contains the floor. The floor names display. Click the floor name. The floor map displays. Click the Inventory icon.
Page 86 ProSAFE Wireless Controller The inventory is based on the antennas that you added by running the WiFi auto planning advisor (see Use the WiFi Auto Planning Advisor to Generate an RF Plan for a Floor page 70), the antennas that you added manually (see Manually Add and Manage Antennas on a Floor Map for an RF Plan on page 79), or a combination of both.
Page 87: Download A Report For An Rf Plan
ProSAFE Wireless Controller Download a Report for an RF Plan The report for an RF plan includes the following components: • Floor summary • Inventory summary that could serve as a purchase list • Detailed list of access points • Detailed list of antennas (if you added any manually) •...
Page 88: View The Heat Map For A Deployed Floor Plan
ProSAFE Wireless Controller View the Heat Map for a Deployed Floor Plan For an RF plan, you can assign access points and antennas to a building and floor. However, these access points and antennas are used only for the purpose of planning and are not actual access points and antennas.
Page 89 ProSAFE Wireless Controller  To move the access points and antennas to the correct locations on the floor map and generate a realistic heat map for a deployed floor plan: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 90 ProSAFE Wireless Controller To generate the heat map for the 5 GHz band, on the right, click the Band icon. The heat map for the 5 GHz band is generated and displays. Use the color information on the right as guidance for WiFi coverage. To see the information about an individual access point or antenna, point to the location.
Page 91: Chapter 5 Installation And Configuration Overview
Installation and Configuration Overview This chapter includes the following sections: • Connect Your Computer to the Wireless Controller • Log In to the Wireless Controller • Roadmap for Initial Configuration • Roadmap for Configuring Management of Your WiFi Network • Choose a Location for the Wireless Controller •...
Page 92: Connect Your Computer To The Wireless Controller
Connect Your Computer to the Wireless Controller To connect to the wireless controller for initial configuration, follow the steps in this section. You can also download your model’s installation guide by visiting downloads.netgear.com.  To connect your computer to the wireless controller: Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 as...
Page 93 ProSAFE Wireless Controller  To log in to the wireless controller: Open your browser and type http://192.168.0.250 in the browser’s address field. When prompted, enter admin for the user name and password for the password, both in lowercase letters. Click the Login button. The first time that you log in, the Change Password Notification pop-up window opens.
Page 94: Roadmap For Initial Configuration
ProSAFE Wireless Controller In the Old Password field, the old password is automatically entered. In the New Password field, enter your new password and repeat it in the Confirm New Password field. Note: You cannot change the default user name (admin), but you can create a new administrative account with a customized user name.
Page 95 ProSAFE Wireless Controller  To perform the initial configuration of the wireless controller: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 96: Roadmap For Configuring Management Of Your Wifi Network
ProSAFE Wireless Controller Your settings are saved. If your network does not include a DHCP server, configure the wireless controller’s DHCP server. For more information, see Manage the DHCP Server on page 106. Click the Apply button. Your settings are saved. The connection to the wireless controller is terminated because you changed its IP address.
Page 97 ProSAFE Wireless Controller (Optional but recommended) Configure logs, alerts, and alarms. For more information, see Configure Syslog, Alarm Notification, and Email Settings page 114. Configure security profiles: a. Configure the security profiles for the basic profile group or for advanced profile groups.
Page 98: Choose A Location For The Wireless Controller
ProSAFE Wireless Controller For more information, see Chapter 9, Configure WiFi and QoS Settings. (Optional but recommended) Back up the configuration. For more information, see Back Up the Configuration File on page 254. Choose a Location for the Wireless Controller The wireless controller is suitable for use in an office environment where it can be freestanding on its runner feet or mounted into a standard 19-inch equipment rack.
Page 99: Register The Licenses
Configure the System and Network Settings and Register the Licenses This chapter includes the following sections: • Configure the General Settings • Manage the Time Settings • Manage the IP, VLAN, and Link Aggregation Settings • Manage the DHCP Server •...
Page 100: Configure The General Settings
If your location is not listed, check with your local government agency or check the NETGEAR website for more information about which channels to use.
Page 101: Manage The Time Settings
ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Name Enter a unique value as the wireless controller name. We recommend changing the name as soon as possible after setting up. The name must contain only alphabetical characters, numbers, and hyphens, and must be 31 characters or less.
Page 102: Manage The Ip, Vlan, And Link Aggregation Settings
Select the Disable radio button if you do not want to use an NTP server. Use Custom NTP Server Select the Use Custom NTP Server check box if you want to use an alternate NTP server. By default, the NETGEAR NTP server is used. Hostname/IP Address Enter the host name or IP address of the NTP server, if you are using a custom NTP server.
Page 103: Untagged Vlan Concepts
ProSAFE Wireless Controller The wireless controller and access points share heartbeat messages to keep synchronized and share configurations and client key data to facilitate seamless roaming. Untagged VLAN Concepts When the Untagged VLAN check box is selected on the IP Settings page, one VLAN can be configured as an untagged VLAN: •...
Page 104: Configure The Ip, Vlan, And Controller Link Aggregation Settings
ProSAFE Wireless Controller Configure the IP, VLAN, and Controller Link Aggregation Settings Note: Link aggregation is not supported on model WC7500 and model WC7600v2. You can configure the management IP address, VLAN settings, and link aggregation (LAG) settings of the wireless controller. ...
Page 105 ProSAFE Wireless Controller Setting Description IP Settings section IP Address Enter the IP address of the wireless controller. The default IP address is 192.168.0.250. To change it, enter an available IP address from the address range used on your LAN. Note: If you assign a static IP address to the wireless controller and then use the web management interface of a discovered access point to configure a static IP...
Page 106: Manage The Dhcp Server
ProSAFE Wireless Controller Manage the DHCP Server Note: Make sure that a DHCP server is available; otherwise, the Discovery Wizard does not function correctly. If your network already includes a DHCP server, do not enable the DHCP server on the wireless controller. The wireless controller can function as a DHCP server.
Page 107 ProSAFE Wireless Controller The DHCP Server List shows the DHCP servers that are already configured on the wireless controller. Click the Add button. Configure the settings as described in the following table. Setting Description Enabled Select the Enabled check box to enable the DHCP server. If the check box is cleared, the DHCP server is disabled.
Page 108: Change The Settings For A Dhcp Server
ProSAFE Wireless Controller Setting Description IP Network Enter the IP address for the wireless controller in the VLAN that you specified in the VLAN field. Note: If you do not select the Use VLAN Interface check box, the IP address of the wireless controller’s management VLAN is used.
Page 109: Remove A Dhcp Server
ProSAFE Wireless Controller Select the radio button in the Edit/Remove column that corresponds to the DHCP server for which you want to change the settings. Click the Edit button. Change the settings. Click the Apply button. Your settings are saved. Remove a DHCP Server You can remove a DHCP server.
Page 110: Register Your Licenses
ProSAFE Wireless Controller Register Your Licenses Make sure that your licenses cover the number of access points in your network. Before you can register your licenses, you must configure the license server settings. Note: When you install your licenses, they replace the default trial license. For more information about licenses, see Licenses on page 17 and...
Page 111: Register Your Licenses With The License Server
Server Address Enter the IP address or FQDN of the server from which you import your licenses. By default, the FQDN of the NETGEAR license server is update1.eng.netgear.com. Use a Proxy Server to Select the Use a Proxy Server to Connect to the Internet check box if you use Connect to the Internet a proxy server to connect to the Internet.
Page 112 ProSAFE Wireless Controller The following figure shows some licenses already registered and installed. If you register licenses for the first time, the page does not yet show any licenses. Complete the fields in the Customer Information section with the customer information that is associated with the key that you want to add and register.
Page 113: Manage Certificates
ProSAFE Wireless Controller These fields are self-explanatory. In the Registration Key field at the top of the page, enter the registration key for the license that you want to add and register. Click the Add button. The license is added to the table. The key details in the table mean the same as the key details that are shown on the Inventory page (see the Key Details section in the table in View Your Licenses on page 274).
Page 114: Configure Syslog, Alarm Notification, And Email Settings
ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Password Enter the password for wireless controller certificates. Controller Key Click the Browse button, and select the controller key. Controller Certificate Click the Browse button, and select the controller certificate. CA Certificate Click the Browse button, and select the CA certificate.
Page 115 ProSAFE Wireless Controller  To configure the syslog settings for an internal location: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 116: Configure The Syslog Settings For An External Syslog Location
ProSAFE Wireless Controller Setting Description Storage Device Displays the Storage Device status: • Not connected. Device is not connected. Insert and mount a device. • Not mounted. Device is not mounted. • USB0. If a device is mounted in the USB0 slot. •...
Page 117 ProSAFE Wireless Controller In the Syslog Settings section of the page, configure the settings as described in the following table. Setting Description Enable Syslog Enable the syslog settings using the Enable Syslog check box to forward system wide logs to an external syslog server or to save to a storage device such as a USB or SD card connected to the wireless controller.
Page 118: Configure Alarm Notification Settings
ProSAFE Wireless Controller Configure Alarm Notification Settings You can classify certain events as critical, major, normal, or minor. Some events you can classify only as critical or major.  To configure alarm actions: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 119: Configure The Email Notification Server
ProSAFE Wireless Controller Configure the Email Notification Server The email notification server is the location from which the email alerts originate.  To configure email settings: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 120: Chapter 7 Manage Security Profiles And Profile Groups
Manage Security Profiles and Profile Groups This chapter includes the following sections: • WiFi Security Profile Concepts • Manage Security Profiles for the Basic Profile Group • Manage Security Profiles for Advanced Profile Groups • Network Authentication and Data Encryption Options •...
Page 121: Wifi Security Profile Concepts
ProSAFE Wireless Controller WiFi Security Profile Concepts Profiles are sets of configurations that you can apply to an access point. The configuration includes radio parameters, load-balancing parameters, and rate-limit parameters. Each WiFi radio on an access point can support 8 profiles. For example, the dual-band WNDAP660 access point can support a total of 16 profiles.
Page 122: Large Wlan Networks
ProSAFE Wireless Controller Large WLAN Networks For large network deployments that consist of different sets of WLAN networks, consider using the advanced configuration to create multiple profile groups. The access points that belong to the same profile group use the same WiFi, security, and QoS configurations. The wireless controller supports up to eight profile groups.
Page 123: Basic And Advanced Security Configuration Concepts
ProSAFE Wireless Controller Note: You can configure profiles to function with different authentication servers. For example, you could set up a guest profile with no authentication, an engineering profile that uses external RADIUS authentication, and a marketing profile that uses external LDAP authentication.
Page 124: Manage Security Profiles For The Basic Profile Group
ProSAFE Wireless Controller • Advanced security settings. You can apply the following security settings to any profile, whether in the basic profile group or in an advanced profile group: Advanced MAC authentication (the MAC ACLs that are, by default, called Acl-1, Acl-2, Acl-3, and so on;...
Page 125 ProSAFE Wireless Controller Click + to add another profile. Your selection from the Network Authentication menu determines the information that is displayed onscreen. Select the Local radio button to display the Local MAC ACL Group menu. Select the External radio button to display the External Radius Server menu.
Page 126 ProSAFE Wireless Controller The newly created profile displays onscreen, and the tab for the new profile is automatically selected to let you configure the new profile. Note: The authentication server settings that you specify on the Authentication Server page affect the selections that are available from the Network Authentication menu.
Page 127 ProSAFE Wireless Controller Setting Description Authentication Settings section Note: The options that display onscreen depend on the selection from Network Authentication menu. Note: The MAC ACL MAC ACL Select one of the following radio buttons: button displays only when • Local.
Page 128: Change The Settings For A Profile In The Basic Profile Group
ProSAFE Wireless Controller Setting Description Note: Authentication Select one of the following radio buttons: Authentication Server Server • Local. Use the local authentication server. buttons and menu display • External. Use an external authentication server. only when you select WPA Select an external authentication server from the with Radius, WPA2 with Authentication Server menu.
Page 129: Remove A Profile From The Basic Profile Group
ProSAFE Wireless Controller For information about how to change the settings, see Configure a Profile in the Basic Profile Group on page 124. Click the Apply button. Your settings are saved. Remove a Profile From the Basic Profile Group You can remove a profile from the basic profile group. ...
Page 130 ProSAFE Wireless Controller  To add an advanced profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button.
Page 131: Remove An Advanced Profile Group
ProSAFE Wireless Controller Remove an Advanced Profile Group You can remove an advanced profile group  To remove an advanced profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens.
Page 132 ProSAFE Wireless Controller Select Configuration > Profile > Advanced > Radio. The Profile Groups page displays. Click the Edit button. The Edit Profile (Group-X) page displays. Click the tab for the radio that for which you want to add a profile. Click the + button to add the profile to the selected advanced profile group.
Page 133 ProSAFE Wireless Controller The newly created profile displays onscreen, and the tab for the new profile is automatically selected to let you configure the new profile. Note: The authentication server settings that you specify on the Authentication Server page affect the selections that are available from the Network Authentication menu.
Page 134 ProSAFE Wireless Controller Setting Description Authentication Settings section Note: The options that display onscreen depend on the selection from Network Authentication menu. Note: The MAC ACL MAC ACL Select one of the following radio buttons: buttons displays only when • Local.
Page 135: Change The Settings For A Profile In An Advanced Profile Group
ProSAFE Wireless Controller Setting Description Note: Authentication Select one of the following radio buttons: Authentication Server Server • Local. Use the local authentication server. buttons and menu display • External. Use an external authentication server. only when you select WPA Select an external authentication server from the with Radius, WPA2 with Authentication Server menu.
Page 136: Remove A Profile From An Advanced Profile Group
ProSAFE Wireless Controller Click the tab for the radio for which you want to change a profile. Click the tab for the profile that you want to change. Change the settings. For information about how to change the settings, see Configure a Profile in an Advanced Profile Group on page 131.
Page 137: Network Authentication And Data Encryption Options
ProSAFE Wireless Controller Network Authentication and Data Encryption Options This section describes the detailed network authentication and data encryption options that you can select in the procedures that are described in Configure a Profile in the Basic Profile Group on page 124 and Configure a Profile in an Advanced Profile Group on page 131.
Page 138 ProSAFE Wireless Controller Table 10. Network authentication and data encryption settings (continued) Network Authentication Data Configuration Steps Selection Encryption Options Shared Key 64-bit WEP To configure Shared Key authentication with WEP: 128-bit WEP From the Data Encryption menu, select a level of WEP 152-bit WEP encryption: 64-bit WEP.
Page 139 ProSAFE Wireless Controller Table 10. Network authentication and data encryption settings (continued) Network Authentication Data Configuration Steps Selection Encryption Options WPA2 with Radius To configure WPA2 authentication with a RADIUS server: TKIP + AES Set up and enable an internal or external (RADIUS or LDAP) authentication server.
Page 140: Manage Authentication Servers And Authentication Server Groups
ProSAFE Wireless Controller Table 10. Network authentication and data encryption settings (continued) Network Authentication Data Configuration Steps Selection Encryption Options WPA2-PSK To configure WPA2-PSK authentication: TKIP + AES From the Data Encryption menu, select the type of encryption: AES. Supports AES only. TKIP + AES.
Page 141 ProSAFE Wireless Controller option during the configuration of a profile. As part of the advanced authentication server settings, you can define multiple external RADIUS servers that you would typically use in a more complex network with many profiles. You can then assign different RADIUS servers to different profiles.
Page 142: Configure Basic Authentication Server Settings
ProSAFE Wireless Controller Configure Basic Authentication Server Settings Use the basic Authentication Server page to set up the internal authentication server, the basic external RADIUS server (which is called Auth-basic), and the external LDAP server (which is called Auth-LDAP). After you set up these authentication servers, you can assign any of them to any profile, whether in the basic profile group or in an advanced profile group.
Page 143 ProSAFE Wireless Controller Setting Description External Enable Authentication Select the Enable Authentication check box to enable RADIUS authentication. Server Enable Accounting Select the Enable Accounting check box to enable accounting. Primary Server Do the following for each server: For information about Specify the IP address.
Page 144: Configure A Radius Authentication Server Group
ProSAFE Wireless Controller For information about how to add an authentication server to a security profile in the basic profile group, see Configure a Profile in the Basic Profile Group on page 124. For information about how to add an authentication server to a security profile in an advanced profile group, see Configure a Profile in an Advanced Profile Group on page 131.
Page 145: Remove A Radius Authentication Server Group
ProSAFE Wireless Controller The new authentication group displays on the advanced Authentication Server page, and the tab for the new authentication is automatically selected to let you configure the new group. In the Group Name field, enter a unique name for the authentication group. By default, authentication groups are named Auth-1, Auth-2, Auth-3, and so on.
Page 146: Manage Mac Authentication And Mac Authentication Groups
ProSAFE Wireless Controller Manage MAC Authentication and MAC Authentication Groups MAC authentication lets you set up an external or a local access control list (ACL) with MAC addresses of clients to either allow or deny the network access privilege of the specified clients with the wireless controller–managed access point.
Page 147 ProSAFE Wireless Controller  To set up basic MAC authentication ACL: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 148: Remove A Mac Address From A Wireless Client List
ProSAFE Wireless Controller Click the Apply button. Your settings are saved. Remove a MAC Address From a Wireless Client List You can remove a MAC address from a wireless clients list.  To remove a MAC address from a wireless clients list: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 149: Configure A Local Mac Authentication Group
ProSAFE Wireless Controller 00:00:11:11:22:27 00:00:11:11:22:26 00:00:11:11:22:25 Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button.
Page 150 ProSAFE Wireless Controller  To set up a MAC authentication group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 151: Remove A Local Mac Authentication Group
ProSAFE Wireless Controller For information about how to add a MAC authentication group to a security profile in the basic profile group, see Configure a Profile in the Basic Profile Group on page 124. For information about how to add a MAC authentication group to a security profile in an advanced profile group, see Configure a Profile in an Advanced Profile Group on page 131.
Page 152: Select An Acl For A Profile In An Advanced Profile Group
ProSAFE Wireless Controller Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > Profile > Basic > Radio. The Edit Profile (Basic) page displays. Click the tab for the radio on which the profile is configured for which you want to select a MAC ACL.
Page 153 ProSAFE Wireless Controller By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > Profile > Advanced > Radio. The Profile Groups page displays.
Page 154: Chapter 8 Discover And Manage Access Points
Discover and Manage Access Points This chapter includes the following sections: • Access Point Discovery Guidelines • Discover Access Points With the Discovery Wizard • Manage the Managed AP List • Assign Access Points to Buildings, Floors, and Advanced Profile Groups IMPORTANT: Before you use the wireless controller to discover your access points and push the configurations to the access points, do the...
Page 155: Access Point Discovery Guidelines
You must run the Discovery Wizard for the wireless controller to discover supported NETGEAR access points on the LAN or WAN. The wireless controller can discover access points that are still in their factory default state and access points that are already deployed in a standalone configuration.
Page 156 ProSAFE Wireless Controller them is discovered at a time. You must add the access point to the managed list, change its IP address, and run discovery again to discover the next access point with that IP address. • Enable DHCP option 43 (vendor-specific information) on an external DHCP server. Specifying an internal DHCP server on the wireless controller automatically enables DHCP option 43 with the IP address of the wireless controller.
Page 157: Remote Access Point Discovery Guidelines
ProSAFE Wireless Controller Remote Access Point Discovery Guidelines The following guidelines apply to the discovery of remote access points: • Enable SNMP and SSH on all standalone access points. • Unblock the following ports in the firewall at the site where the wireless controller is located so that the remote access points can communicate with the wireless controller: For models WC7600 and WC9500: •...
Page 158 ProSAFE Wireless Controller • UDP port 7892. Used for access point registration with the wireless controller after discovery. • UDP port 7893. Used for access point registration with the wireless controller during multicast discovery. • Enable DHCP option 43 (vendor-specific information) on the DHCP server. Specify the wireless controller’s IP address to allow the access points to receive the wireless controller’s IP address and the DHCP server to assign IP addresses to the access points.
Page 159: Discover Access Points With The Discovery Wizard
ProSAFE Wireless Controller If the access point is rebooted, it loses its configuration. After the connection with the wireless controller is reestablished, the remote access point functions once again as a managed access point. Discover Access Points With the Discovery Wizard The Discovery Wizard provides two methods to find access points that are not yet on the managed access point list.
Page 160 The I am not sure radio button directs you to the product documentation. Click the Next button. The wireless controller searches for NETGEAR products on the LAN based on MAC address and identifies which products are supported access point models. Progress bars show the progress of the discovery process.
Page 161 ProSAFE Wireless Controller To make sure that all the access points are listed, review the discovery results. The effectiveness of the discovery process depends in part on how the access points on your LAN are set up. If each access point is configured with a unique IP address and is running current firmware, discovery is simple.
Page 162 ProSAFE Wireless Controller Click the Add button. Depending on the type of access points that were discovered, a page that lets you enter or ignore a login name and a password might display. If necessary, enter the login name and password. The Managed AP List page displays.
Page 163: Discover Access Points Installed And Working In Standalone Mode In Different Layer 3 Networks
ProSAFE Wireless Controller If one or more access points do not transition to the Connected state (see the Status column in the Managed AP List), see Resolve Problems With Access Points page 365. For information about how to manage the Managed AP List, see Manage the Managed AP List on page 167.
Page 164 ProSAFE Wireless Controller Select the Installed and working in Standalone Mode radio button. Note: The I am not sure radio button directs you to the product documentation. Click the Next button. In the Range 1 section, fill in the Start IP and End IP fields. These IP addresses specify the range in which the wireless controller must discover access points.
Page 165 ProSAFE Wireless Controller The wireless controller searches for NETGEAR products on the LAN based on MAC address and then identifies which products are supported access point models. A progress bar show the progress of the discovery process. When the discovery process is finished, the total number of access points is displayed and the table shows the access points that were discovered.
Page 166 ProSAFE Wireless Controller To designate an access point as a remote access point, from the Site menu, select Remote. By default, all discovered access points are designated as Local. The Remote and Local designations are for organization only. Note: The wireless controller cannot discover remote access points over a site-to-site VPN connection or behind a remote NAT router without a VPN connection.
Page 167: Manage The Managed Ap List
ProSAFE Wireless Controller After the access points are added to the Managed AP List, the wireless controller upgrades the firmware of the access points to the latest firmware that is loaded on the wireless controller, and the access points become managed access points. Depending on the number of access points that you add to the Managed AP List, this process might take several minutes.
Page 168 ProSAFE Wireless Controller The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Access Point > Managed AP List. The Managed AP List page displays. Because this page is wide, it is shown in the following two figures.
Page 169 ProSAFE Wireless Controller Item Description Name The name of the access point. Status Shows one of the following states: • Authentication in progress. This state occurs during the discovery and upgrade process of a standalone access point when the wireless controller logs in to the access point using the access point’s password.
Page 170: Change Access Point Information On The Managed Ap List
ProSAFE Wireless Controller Change Access Point Information on the Managed AP List For each individual access point, you can change the general information, IP settings, and VLAN settings, you can switch between the internal and external antenna (if the access point supports an external antenna), and you can enter location information.
Page 171 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Access Point Info section Name Enter a unique value that indicates the access point name. By default, the name is netgearxxxxxx, where xxxxxx represents the last six hexadecimal digits of the access point’s MAC address.
Page 172 ProSAFE Wireless Controller Setting Description Group The group to which the access point is assigned. After the access point discovery process, the access point is automatically assigned to the basic group. If you set up profile groups, you can assign the access point to another profile group by selecting one from the menu.
Page 173: Remove Access Points From The Managed Ap List
ProSAFE Wireless Controller Setting Description Wireless Settings section Antenna You can specify which antenna the access point uses by making a selection from the menu: • Internal. The access point uses its internal antenna. • External. The access point uses its external antenna or antennas. External antennas are optional antennas that do not come standard with an access point.
Page 174: Assign Access Points To Buildings, Floors, And Advanced Profile Groups
ProSAFE Wireless Controller Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Access Point > Managed AP List. The Managed AP List page displays. Select the radio button to the right of the access point that you want to remove. Select the check box to the left of the access point that you want to remove.
Page 175 ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > WLAN Network. The settings are described in the following table. Setting Description The IP address of the access point. The MAC address of the access point. Model The model of the access point.
Page 176 ProSAFE Wireless Controller Setting Description Status Shows one of the following states: • Authentication in progress. This state occurs during the discovery and upgrade process of a standalone access point when the wireless controller logs in to the access point using the access point’s password. This state can last several minutes.
Page 177 ProSAFE Wireless Controller • Assign all access points to another group, building, or floor, or a combination of these by selecting the check box in the upper right of the table heading. Select the building from the Building menu in the table heading. Select the floor from the Floor menu in the table heading.
Page 178: Chapter 9 Configure Wifi And Qos Settings
Configure WiFi and QoS Settings This chapter includes the following sections: • Basic and Advanced WiFi and QoS Configuration Concepts • Configure the Radio • Configure WiFi Settings • Configure Channels • Specify Radio Frequency Management • Manage AirQual for a Profile Group •...
Page 179: Basic And Advanced Wifi And Qos Configuration Concepts
ProSAFE Wireless Controller Basic and Advanced WiFi and QoS Configuration Concepts It is important to know how to configure your network and decide which configuration model better fits your needs, basic or advanced. Once you follow one, it is easy to use the same configuration model for the WiFi and Quality of Service (QoS) settings.
Page 180: Configure The Radio For An Advanced Profile Group
ProSAFE Wireless Controller Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > Wireless > Basic > Radio On/Off. Configure the settings as described in the following table. Setting Description Current Time...
Page 181 ProSAFE Wireless Controller  To schedule the radio for an advanced profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 182: Configure Wifi Settings
ProSAFE Wireless Controller Click the Apply button. Your settings are saved. Configure WiFi Settings During initial setup, you entered your country and region in the General Settings page (see Configure the General Settings on page 100). Based on your location and environment, the wireless controller determined the best WiFi settings for the discovered access points and pushed these settings to your managed access points.
Page 183 ProSAFE Wireless Controller Click the tab for the radio for which you want to configure the WiFi settings. Select the Turn Radio On check box. The WiFi settings become accessible and you can configure them. If you cannot select the Turn Radio On check box, see the requirements are the beginning of this section. Configure the settings as described in the following table.
Page 184 ProSAFE Wireless Controller Setting Description Wireless Mode The selections that are available depend on the selected radio mode. From the menu select the wireless mode: • 802.11b/bg/ng mode: 802.11b. 802.11bg. 802.11ng. This is the default setting. • 802.11a/na/ac mode: 802.11a. 802.11na.
Page 185 ProSAFE Wireless Controller Setting Description Aggregation Length Enter the maximum length of aggregated MAC protocol data unit (802.11ng and 802.11na/ac only) (AMPDU) packets. Larger aggregation lengths could lead to better network performance. Aggregation is a mechanism used to achieve higher throughput. The default setting depends on the selection from the Wireless Mode menu: •...
Page 186: Override Channel And Transmission Power In The Basic Profile Group
ProSAFE Wireless Controller Setting Description Multicast/Broadcast Rate Limiting Select the enable radio button to enable multicast and broadcast rate limiting, which can increase bandwidth and minimize interference. To configure the maximum packet rate, enter a packet rate in the Multicast/Broadcast Rate Limiting Packet Count field. By default, the wireless controller uses the following maximum packets rates: •...
Page 187 ProSAFE Wireless Controller  To override the channel and transmission power for individual access points in a security profile of the basic profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250.
Page 188: Configure Wifi Settings For An Advanced Profile Group
ProSAFE Wireless Controller Configure the settings in the table at the bottom of the page as described in the following table. Setting Description AP Name The name of the access point. Access Point Channel Override these settings only if a specific need exists. From the menu, select a channel and frequency for the access point to operate in.
Page 189 ProSAFE Wireless Controller Click the tab for the profile group for which you want to configure the WiFi settings. Click the tab for the radio for which you want to configure the WiFi settings. Select the Turn Radio On check box. The WiFi settings become accessible and you can configure them.
Page 190 ProSAFE Wireless Controller Setting Description MU MIMO Select the MU MIMO check box to enable multi-user MIMO (MU-MIMO). (WAC740 access point and 802.11na/ac only) By default, the MU MIMO check box is cleared and MU-MIMO is disabled. 802.11ac Wave 2 supports MU-MIMO, which enables multiple users to receive data from the access point simultaneously using the same channel.
Page 191 ProSAFE Wireless Controller Setting Description RTS Threshold (0-2347) Enter the size of the Request to Send (RTS) threshold packet. The RTS threshold is related to the transmission mechanism (CSMA/CA or CSMA/CD) for the packets. If the packet size is equal to or less than this threshold, the data frame is transmitted immediately;...
Page 192 ProSAFE Wireless Controller Setting Description High Density Bandwidth Select the bandwidth type: (802.11ng and 802.11na/ac only) • Auto. Automatically handles both high-density bandwidth (that is, high throughput) and low-density bandwidth (that is, extended range) environments. Auto is the default setting. •...
Page 193: Override Channel And Transmission Power In An Advanced
ProSAFE Wireless Controller Override Channel and Transmission Power in an Advanced Profile Group The table on the Advanced Wireless Settings page shows the access points that are managed in the profiles of an advanced profile group and to which the channel allocation and advanced RF management settings apply.
Page 194 ProSAFE Wireless Controller Click the tab for the profile group for which you want to configure the WiFi settings. Click the tab for the radio for which you want to configure the WiFi settings. Configure the settings in the table at the bottom of the page as described in the following table.
Page 195: Configure Channels
ProSAFE Wireless Controller Setting Description Tx Power From the menu, select the transmission power of the access point. Note: By default, the access point’s transmission power is set to the configuration that is selected on the basic RF Management page. For more information, see Configure Radio Frequency Management for an Advanced Profile Group...
Page 196 ProSAFE Wireless Controller However, you can override the general channel allocation settings for individual access points on the Basic Wireless Settings page and on the Advanced Wireless Settings page. For more information, see: • Override Channel and Transmission Power in the Basic Profile Group •...
Page 197 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Automatic channel allocation Ensure that the enable radio button is selected during normal operation. Automatic channel allocation distributes channels across the managed access points to reduce interference. To disable automatic channel allocation, select the disable radio button.
Page 198: Specify Radio Frequency Management
ProSAFE Wireless Controller Specify Radio Frequency Management Radio frequency (RF) management lets you specify the transmission power settings, WLAN healing settings, and band steering settings. Radio Frequency Concepts Radio frequency (RF) management optimizes the channel allocation for access points based on clients, user data traffic, and the nearby RF environment of access points.
Page 199: Configure Radio Frequency Management For The Basic Profile Group
ProSAFE Wireless Controller Configure Radio Frequency Management for the Basic Profile Group You can configure the WiFi transmission power, WLAN healing, and band steering for the basic profile group.  To configure RF management for access points in the basic profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 200: Configure Radio Frequency Management For An Advanced
ProSAFE Wireless Controller Setting Description Automatic Tx Power Control Select the enable radio button to enable automatic Tx power control: • When a client attempts to connect to an access point at low power, the access point’s Tx power is automatically increased above the default level.
Page 201 ProSAFE Wireless Controller  To configure RF management for access points in an advanced profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 202 ProSAFE Wireless Controller Setting Description Automatic Tx Power Control Select the enable radio button to enable automatic Tx power control: • When a client attempts to connect to an access point at low power, the access point’s Tx power is automatically increased above the default level.
Page 203: Manage Airqual For A Profile Group
ProSAFE Wireless Controller Manage AirQual for a Profile Group AirQual, short for air quality, lets you display WiFi channel utilization levels and detect non-WiFi interference. One access point can monitor the AirQual for a profile group. Note: AirQual can be configured on a WAC740 access point only. However, the WAC740 access point can monitor the WiFi channel utilization and interference for a profile group, independent of the access point models that serve the profile group.
Page 204 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Enable/Disable Select the Enable/Disable check box to enable AirQual. By default, the Enable/Disable check box is cleared and AirQual is disabled. Note: If you enable AirQual in a WiFi network that does not include WAC740 access points, AirQual does not take effect.
Page 205: Configure Airqual For An Advanced Profile Group
ProSAFE Wireless Controller Dedicated mode means that the WAC740 access point is dedicated to AirQual monitoring and does not accept WiFi client associations. Click the Apply button. Your settings are saved. For information about monitoring AirQual, see View AirQual for the Channels in a Profile Group on page 346.
Page 206 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Enable/Disable Select the Enable/Disable check box to enable AirQual. By default, the Enable/Disable check box is cleared and AirQual is disabled. Note: If you enable AirQual in a WiFi network that does not include WAC740 access points, AirQual does not take effect.
Page 207: Manage Quality Of Service For An Advanced Profile Group
ProSAFE Wireless Controller Manage Quality of Service for an Advanced Profile Group Quality of Service (QoS) management lets you fine-tune priorities for different types of traffic. Quality of Service Concepts Quality of Service (QoS) works by default for the advanced profile groups. Change QoS only if a specific reason exists, such as when specifications of a device vendor require you to use different QoS settings.
Page 208: Configure Quality Of Service For A Profile Group
ProSAFE Wireless Controller Configure Quality of Service for a Profile Group You can configure Quality of Service (QoS) settings for each advanced profile group.  To configure the QoS settings for a profile group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 209 ProSAFE Wireless Controller Setting Description AIFS Specify a wait time (in milliseconds) for data frames. Valid values for arbitration inter-frame space (AIFS) are 1 through 255. The following are the default values for The following are the default values for the AP EDCA parameters: the Station EDCA parameters: •...
Page 210: Manage Load Balancing
ProSAFE Wireless Controller Setting Description TXOP Limit Specify the transmission opportunity (TXOP) limit. The TXOP limit applies only to station AP EDCA parameters and specifies the Note: Station EDCA maximum period during which the client station client can initiate transmissions. parameters only The following are the default values for the Station EDCA parameters: •...
Page 211: Configure Load Balancing
ProSAFE Wireless Controller RSSI percentages translate into the following power levels in dBm: • RSSI of 0% = 95 dBm (load balancing is disabled) – • RSSI of 25% = 81 dBm – • RSSI of 50% = 68 dBm –...
Page 212: Manage Rate Limiting
ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Max Client Drag the slider to specify or enter the maximum number of WiFi clients that can connect to each radio of an access point at one time. You can select a value of 64 to allow the maximum number of clients that a radio of an access point can support.
Page 213: Configure Rate Limiting For The Basic Profile Group
ProSAFE Wireless Controller If you do not want to configure rate limiting for a profile, configure rate limiting as 0 (zero) percent. Configuring 0 percent effectively disables rate limiting for that profile. A setting of 0 percent can work well for profiles that are used for management, administration, or testing.
Page 214: Configure Rate Limiting For An Advanced Profile Group
ProSAFE Wireless Controller Click the Apply button. Your settings are saved. Configure Rate Limiting for an Advanced Profile Group For each advanced profile group, and for each radio mode (802.11b/bg/ng mode and 802.11a/na/ac mode), rate limiting per profile adds up to a maximum of 100 percent. (It can be less than 100 percent.) ...
Page 215: Manage The Led Behavior
ProSAFE Wireless Controller For each profile on a WiFi radio in the selected profile group, specify the rate limit as a percentage. You can drag the sliders to adjust the values in the Rate Limit fields to the right of the sliders.
Page 216: Manage The Led Behavior For An Advanced Profile Group
ProSAFE Wireless Controller Select the tab for the model access point that you want to configure. Select a radio button: • Enable all LEDs. All LEDs function normally. This is the default selection. • Enable Power LED. Only the Power LED functions and the other LEDs are off. •...
Page 217 ProSAFE Wireless Controller The page provides a tab for each group. Click the tab for the profile group for which you want to manage the LED behavior. Select the tab for the model access point that you want to configure. Select a radio button: •...
Page 218: Chapter 10 Manage Rogue Access Points, Guest Network
Manage Rogue Access Points, Guest Network Access, and Users This chapter includes the following sections: • Manage Rogue Access Points • Manage Guest Network Access Through Guest Portals and Captive Portals • Manage Users, Accounts, and Passwords...
Page 219: Manage Rogue Access Points
ProSAFE Wireless Controller Manage Rogue Access Points The wireless controller can detect rogue access points in your network, you can classify the detected rogue access points, and you can import a list of known access points. Rogue Access Point Concepts Rogue access point detection is disabled by default on the wireless controller.
Page 220: Classify Rogue Access Points
ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > Security > Basic > Rogue AP. The wireless controller can support a total of up to 512 access points from the known and unknown lists combined.
Page 221 ProSAFE Wireless Controller By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Configuration > Security > Advanced > Rogue AP. The page displays the Rogue List, which shows all detected rogue access points with essential information, including information about their last beacon.
Page 222: Import A List Of Known Access Points From A File
ProSAFE Wireless Controller • Unknown. Moves the selected access points to the unknown list. For each known access point, enter a name in the Name column. A name allows access points to be more easily identified. Click the Apply button. Your settings are saved.
Page 223: Manage Guest Network Access Through Guest Portals And Captive Portals
ProSAFE Wireless Controller The wireless controller imports the MAC addresses that are in the text file into the Rogue List table. Click the Apply button. Your settings are saved. Manage Guest Network Access Through Guest Portals and Captive Portals Users with management (admin) credentials—for example, receptionists or hotel clerks—can provision guests.
Page 224: Configure A Basic Guest Portal Or Captive Portal
ProSAFE Wireless Controller Note: If the network authentication uses an external RADIUS server, you cannot configure captive portal authentication. That is, if you configure an external RADIUS server with WPA, WPA2, or WPA & WPA2 (or if you use legacy 802.1X), you cannot configure captive portal authentication;...
Page 225 ProSAFE Wireless Controller  To configure a basic guest portal or captive portal: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 226 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Portal Settings section Portal Type Select one of the following radio buttons: • Guest. A guest portal with a field for entering an email address. Guests do not need to provide a password and can get unlimited access to the network.
Page 227 ProSAFE Wireless Controller Setting Description Background Page You can either select a background image or configure a custom background page. To navigate to and select an image file for the background of the login page, do the following: Keep the Background Page Default radio button selected. Next to Load Backgrounds Image, click the Browse button.
Page 228 ProSAFE Wireless Controller Setting Description Login Panel You can either keep the default login panel or configure a custom login panel. The default login panel for a guest portal provides an email field and a login button. The default login panel for a captive portal provides a user name and password field and a login button.
Page 229: Configure An Advanced Guest Portal Or Captive Portal
ProSAFE Wireless Controller Assign the captive portal or guest portal to a security profile in the basic profile group, in an advanced profile group, or in both: • Basic profile group. Assign the captive portal or guest portal to a security profile in the basic profile group: a.
Page 230 ProSAFE Wireless Controller  To configure an advanced guest portal or captive portal: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 231 ProSAFE Wireless Controller The previous figure shows the settings for a captive portal. The settings for a guest portal are identical, except for the RADIUS server settings, which you cannot configure for a guest portal. Click the + button to create an additional portal. The new portal displays on the advanced Captive Portal Settings page, and the tab for the new portal is automatically selected to let you configure the new group.
Page 232 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Portal Settings section Portal Type Select one of the following radio buttons: • Guest. A guest portal with a field for entering an email address. Guests do not need to provide a password and can get unlimited access to the network.
Page 233 ProSAFE Wireless Controller Setting Description Background Page You can either select a background image or configure a custom background page. To navigate to and select an image file for the background of the login page, do the following: Keep the Background Page Default radio button selected. Next to Load Backgrounds Image, click the Browse button.
Page 234 ProSAFE Wireless Controller Setting Description Login Panel You can either keep the default login panel or configure a custom login panel. The default login panel for a guest portal provides an email field and a login button. The default login panel for a captive portal provides a user name and password field and a login button.
Page 235 ProSAFE Wireless Controller Assign the captive portal or guest portal to a security profile in the basic profile group, in an advanced profile group, or in both: • Basic profile group. Assign the captive portal or guest portal to a security profile in the basic profile group: a.
Page 236: Remove A Portal
ProSAFE Wireless Controller Remove a Portal You can remove a portal.  To remove a portal: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 237: Change The Password Of The Default Admin Account Of The Wireless Controller
ProSAFE Wireless Controller Guest provisioning users. These users can configure only captive portal users, that is, they can access only the User Management configuration menu tab under the Maintenance main navigation tab. License management only users. These users can configure only licenses, that is, they can access only the License configuration menu tab under the Maintenance main navigation tab (for more information, see Manage Licenses...
Page 238 ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > User Management. The previous figure contains some account examples. Select the radio button for the admin user name. Click the Edit button. In the Old Password field, enter the current password.
Page 239: Add A Management User
ProSAFE Wireless Controller Add a Management User You can add an administrator, a user with read-only access to the wireless controller’s web management interface, a user who can provision captive portal users only, and a user who can manage licenses only. ...
Page 240: Add A Wifi User
ProSAFE Wireless Controller Configure the user settings as described in the following table. Setting Description User Name Enter a unique user name. Only alphanumerical characters and underscore characters (_) are supported. User Type From the menu, select the type of user, which determines the users’s access to the wireless controller’s web management interface.
Page 241: Add A Captive Portal Account
ProSAFE Wireless Controller The previous figure contains some account examples. Click the Add button. Configure the client settings as described in the following table. Setting Description User Name Enter a unique user name. Only alphanumerical characters and underscore characters (_) are supported. Password Enter a password in the Password field.
Page 242 ProSAFE Wireless Controller Note: If you configure a guest portal, you cannot add a captive portal account.  To add a captive portal account: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250.
Page 243: Add A Logo And Message On Captive Portal User Information
ProSAFE Wireless Controller The previous figure contains some account examples. Click the Add button. Configure the account settings as described in the following table. Setting Description Account Name Enter a unique account name. Only alphanumerical characters and underscore characters (_) are supported. Amount Enter the total amount that is charged for the period during which access is available.
Page 244 ProSAFE Wireless Controller Note: If you configure a guest portal, you cannot add a logo or message.  To add a logo and message on printed captive portal user information: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 245: Add A Captive Portal User
ProSAFE Wireless Controller The previous figure contains some account examples. To load a logo that displays on the print message, click the Browse button, and follow the directions of your browser to navigate to the logo and select it. You can upload a logo in .bmp, .gif, .jpg, or .png format. The maximum size for the file is 5 MB.
Page 246 ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > User Management. The User Management page displays with the Management tab and associated page in view. Click the Captive Portal Users tab. The previous figure contains some account examples.
Page 247: Add Multiple Captive Portal Users Simultaneously
ProSAFE Wireless Controller Setting Description Password Use one of the following methods to populate the password fields. Method 1: Enter a password in the Password field. Confirm the password in the Confirm Password field. Method 2: Click the Generate button. A password is generated automatically.
Page 248 ProSAFE Wireless Controller Select Maintenance > User Management. The User Management page displays with the Management tab and associated page in view. Click the Captive Portal Users tab. The previous figure contains some account examples. Click the Bulk Add button. Manage Rogue Access Points, Guest Network Access, and Users...
Page 249 ProSAFE Wireless Controller Configure the user settings as described in the following table. Setting Description User Name Prefix Enter a user name prefix. Only alphanumerical characters and underscore characters (_) are supported. Note: As an example, if you want to add 17 captive portal users for a group of conference guests that are booked in a hotel under the name Johnson, enter Johnson_.
Page 250: Change The Settings For A User Or Account
ProSAFE Wireless Controller Change the Settings for a User or Account You can change the settings for a user or an account.  To change the settings for a user or an account: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 251: Export A List Of Users Or Accounts
ProSAFE Wireless Controller The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > User Management. The User Management page displays with the Management tab and associated page in view.
Page 252 ProSAFE Wireless Controller Click one of the following tabs: • Management • WiFi Clients • Captive Portal Account • Captive Portal Users Click the EXPORT button. The selected list is opened or saved as a zipped CSV file to a location that you specify. To complete the procedure, follow the directions of your browser.
Page 253: Chapter 11 Maintain The Wireless Controller And Access Points
Maintain the Wireless Controller and Access Points This chapter includes the following sections: • Manage the Configuration File or Upgrade the Firmware • Reboot the Wireless Controller • Reset the Wireless Controller • Manage Extended Storage • Manage Remote Access •...
Page 254: Manage The Configuration File Or Upgrade The Firmware
ProSAFE Wireless Controller Manage the Configuration File or Upgrade the Firmware This section includes the following subsections: • Back Up the Configuration File • Restore the Configuration File • Upgrade the Firmware The configuration settings of the wireless controller are stored in a configuration file on the wireless controller.
Page 255: Restore The Configuration File
ProSAFE Wireless Controller A dialog box displays, showing the file name of the backup file. The backup file is in the following format: backup.tgz. To save the configuration file, follow the instructions of your browser. Restore the Configuration File Restore only settings that were backed up from your model wireless controller. (You cannot restore settings that were backed up from another model wireless controller.) ...
Page 256: Upgrade The Firmware
 To upgrade the firmware: Download the firmware from NETGEAR: a. Visit the NETGEAR support page for the your model wireless controller at downloads.netgear.com. b. Download the firmware and save it on your computer or on a network server. Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 257 ProSAFE Wireless Controller The previous figure shows the fields that display when you select the FTP radio button. When you select the TFTP or Local File radio button, fewer fields are shown. Configure the settings as described in the following table. Setting Description TFTP, FTP, or Local File...
Page 258 ProSAFE Wireless Controller Setting Description Password (FTP only) Enter the password to access the FTP server. Boot Information section Active Partition This field is an informational field that displays the active partition and the current firmware version. Boot Partition to Upgrade Select the radio button for the partition to which the new firmware must be saved.
Page 259: Reboot The Wireless Controller
ProSAFE Wireless Controller Reboot the Wireless Controller The Reboot/Reset Controllers page lets you reset the wireless controller.  To reboot the wireless controller: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens.
Page 260: Manage Extended Storage
ProSAFE Wireless Controller  To reset the wireless controller: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button.
Page 261 ProSAFE Wireless Controller Note: Do not reboot the wireless controller while an extended storage device is connected. Doing so causes the wireless controller to halt in the boot process. First, disconnect the extended storage device. Then, reboot the wireless controller. ...
Page 262: Manage Remote Access
Note: The wireless controller supports SSH through the console port. However, the console port is for debugging under guidance of NETGEAR technical support only.  To enable and configure SNMP: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 263: Specify Session Time-Outs
ProSAFE Wireless Controller Enable SNMP and configure the settings as described in the following table. Setting Description SNMP Select the SNMP check box to enable SNMP for the wireless controller. Read-Only Community Name Enter the community string that allows the SNMP manager to read the wireless controller’s MIB objects.
Page 264: Save The Logs
ProSAFE Wireless Controller  To specify the length of the HTTP session time-out for the wireless controller: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens.
Page 265: Save And Clear The Logs For An Access Point
ProSAFE Wireless Controller  To save the system logs: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button.
Page 266 ProSAFE Wireless Controller The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > Logs & Alerts > Logs. To search the table with access points, in the Search field, enter the information that you are looking for, such as an IP address or MAC address.
Page 267: View Alerts And Events
ProSAFE Wireless Controller View Alerts and Events The wireless controller lets you view the following alerts and events: • System alerts. System alerts such as an access point coming up or being shut down, the wireless controller coming up or being shut down, and a firmware upgrade. •...
Page 268: View Radio Frequency Events
ProSAFE Wireless Controller If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button.
Page 269: View Load-Balancing Events
ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > Logs & Alerts > RF Events. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: •...
Page 270 ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Maintenance > Logs & Alerts > Load Balancing. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: •...
Page 271: View Rate-Limit Events
ProSAFE Wireless Controller View Rate-Limit Events The wireless controller generates alerts for rate-limit events such as the violation of a rate-limit threshold.  To view rate-limit events: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 272: View Redundancy Events
ProSAFE Wireless Controller View Redundancy Events The wireless controller generates alerts for redundancy events such as the redundant wireless controller coming up or going down, or a failover to another wireless controller.  To view redundancy events: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 273: View Stacking Events
ProSAFE Wireless Controller View Stacking Events The wireless controller generates alerts for stacking events such as a slave wireless controller coming up or going down, or two wireless controllers synchronizing.  To view stacking events: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 274: Manage Licenses
• Advanced. Lets you retrieve your licenses. This page displays relevant information only if you receive a replacement unit from NETGEAR and install the unit. Under normal circumstances, you do not need this page. For information, see Retrieve Your Licenses on page 276.
Page 275 ProSAFE Wireless Controller The following table describes the fields of the page. Setting Description Summary section Total AP License The number of access points that your licenses support. Nmode License Status Availability of the 802.11n mode license. (This license is available by default, indicated by either Preinstalled or Available.) Used License Count The number of access points that are used from the total number that your...
Page 276: Retrieve Your Licenses
ProSAFE Wireless Controller Retrieve Your Licenses If NETGEAR exchanged your wireless controller for another one, your licenses no longer display on the Inventory and Registration pages. You must retrieve your licenses from the license update server.  To retrieve licenses after you receive a replacement unit from NETGEAR: Make sure that the wireless controller is connected to the Internet.
Page 277: Reboot Access Points
ProSAFE Wireless Controller Reboot Access Points Under normal circumstances, you do not need to reboot an access point. If a problem occurs with an access point, you can reboot it to see if this resolves the problem.  To reboot an access point: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 278: Configure Multicast Firmware Upgrade For Access Points
ProSAFE Wireless Controller Configure Multicast Firmware Upgrade for Access Points When you add access points to the managed list (see Chapter 8, Discover and Manage Access Points), the wireless controller upgrades the firmware of the access points to the latest firmware that is loaded on the wireless controller. By default, this firmware upgrade process uses multicast, which allows all access points to be upgraded simultaneously.
Page 279: Disable Multicast Firmware Upgrade
ProSAFE Wireless Controller Setting Description Start IP Enter the start IP address of the multicast range that the wireless controller must use. End IP Enter the end IP address of the multicast range that the wireless controller must use. Port Number Enter the port number that the wireless controller must use.
Page 280: Chapter 12 Manage Stacking And Redundancy
Manage Stacking and Redundancy This chapter includes the following sections: • Stacking Concepts • Configure a Stack of Wireless Controllers • Remove a Wireless Controller From a Stack • Select Which Wireless Controller in a Stack to Configure • Manage Redundancy for a Single Controller •...
Page 281: Stacking Concepts
ProSAFE Wireless Controller Stacking Concepts The wireless controller supports stacking of up to three units for management of up to 150 access points (models WC7600 and WC7600v2) or 600 access points (model WC9500) through purchased licensing (see Licenses on page 17). In a stack, one wireless controller functions as the master controller, and the other two wireless controllers function as slave controllers.
Page 282 ProSAFE Wireless Controller After you configure the stack, you can change profiles, security settings, and WiFi settings on the master controller, synchronize these changes with the slave controllers, and let the slave controllers push the changes to the individual access points that they manage. For ease of management, you can configure location-based profiles on the master controller and assign a location to each slave controller.
Page 283: Configure A Stack Of Wireless Controllers
ProSAFE Wireless Controller Configure a Stack of Wireless Controllers A stack can consist of up to three wireless controllers, one of which is the master controller and two of which are slave controllers. The following procedure assumes that you already configured the system settings, profiles, security settings, and WiFi settings on the master controller, and that you already configured the system settings on the slave controller.
Page 284 ProSAFE Wireless Controller Configure the settings for the slave controller as described in the following table. Setting Description Controller IP Enter the IP address of the slave controller. This is the address that you use to log in to the slave controller’s web management interface. UserName The user name is a nonconfigurable field that displays the user name with which you log in to the web management interface of the slave controller.
Page 285 ProSAFE Wireless Controller Click the Apply button. Your settings are saved. After the configuration of the master controller synchronizes with the slave controller, the stack is established. Manage Stacking and Redundancy...
Page 286 ProSAFE Wireless Controller The Stacking table shows the following fields: Setting Description Role The role or function that the wireless controller provides in the stack: either Master or Slave. Controller IP The IP address of the wireless controller. In a stacking configuration, the controller IP address is identical to the local IP address.
Page 287: Remove A Wireless Controller From A Stack
ProSAFE Wireless Controller Remove a Wireless Controller From a Stack You can remove a wireless controller from a stack.  To remove a wireless controller from a stack: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 288: Select Which Wireless Controller In A Stack To Configure
ProSAFE Wireless Controller Select Which Wireless Controller in a Stack to Configure After you add one or more wireless controllers to the stack, most pages of the web management interface display a controller selection menu at the top. This menu lets you select the wireless controller that you want to configure.
Page 289 ProSAFE Wireless Controller The controller selection menu shows Self in orange font as the wireless controller that you are accessing through the web management interface. In the controller selection menu, next to Self, click the + button. The IP address of the other wireless controller in the stack displays in white font in the controller selection menu.
Page 290 ProSAFE Wireless Controller To change back to the original wireless controller, in the controller selection menu next to the IP address (172.16.192.31), click the + button. In the controller selection menu, Self displays in white font to the left of the IP address of the other wireless controller in the stack.
Page 291: Manage Redundancy For A Single Controller
ProSAFE Wireless Controller Manage Redundancy for a Single Controller The wireless controller supports 1:1 redundancy with failover. Redundancy is implemented through the use of the Virtual Router Redundancy Protocol (VRRP). For information about N:1 redundancy, see Manage a Redundancy Group With N:1 Redundancy on page 297.
Page 292 ProSAFE Wireless Controller Example of a 1:1 Redundancy Configuration The following figure shows a configuration with a primary controller and a redundant controller before a failover occurs. Figure 19. Primary and redundant controllers before a failover The following figure shows the settings on the Stacking/Redundancy page before a failover occurs.
Page 293: Configure A Single Controller With Redundancy
ProSAFE Wireless Controller The following figure shows a configuration with a primary controller and a redundant controller after a failover occurred in which the primary controller went down and the redundant controller became the active controller. Figure 21. Primary and redundant controllers after a failover Configure a Single Controller With Redundancy To enable 1:1 redundancy, configure the secondary IP address (that is, the IP address for the redundant controller), the VRPP ID for the connection between the primary and the...
Page 294 ProSAFE Wireless Controller The Stacking/Redundancy page displays. Select the Enable Redundancy check box. The Redundancy page expands to display the Redundancy table and the Secondary Controller Information pop-up window opens. Configure the settings for the redundant controller (that is, the secondary controller) as described in the following table.
Page 295 ProSAFE Wireless Controller Configure the VRRP ID and local IP address of the primary controller (that is, the master) as described in the following table. These settings are required so that the primary controller and redundant controller can establish a redundancy group. The following table also includes descriptions of the nonconfigurable fields.
Page 296 ProSAFE Wireless Controller WARNING: Enabling redundancy causes the redundancy process on the primary wireless controller to restart, which might temporarily affects traffic on the managed access points in the network. Click the Apply button. Your settings are saved. After the configuration of the primary controller synchronizes with the redundant controller, redundancy goes into effect.
Page 297: Manage A Redundancy Group With N:1 Redundancy
ProSAFE Wireless Controller Manage a Redundancy Group With N:1 Redundancy The wireless controller supports N:1 redundancy with failover. Redundancy is implemented through the use of the Virtual Router Redundancy Protocol (VRRP). For information about 1:1 redundancy, see Manage Redundancy for a Single Controller page 291.
Page 298 ProSAFE Wireless Controller When the primary controller that went down and for which the redundant controller took over comes back up and is stable, a switchback occurs automatically, in which case ownership of the controller IP address is returned to the primary controller that came back up. The redundant controller reassumes its passive position, and redundancy is once again available for all primary controllers in the redundancy group.
Page 299 ProSAFE Wireless Controller Figure 22. Primary and redundant controllers in an N:1 configuration before a failover The following figure shows the N:1 settings on the Redundancy page before a failover occurs. Figure 23. Redundancy page for an N:1 configuration before a failover Manage Stacking and Redundancy...
Page 300: Configure A Redundancy Group With N:1 Redundancy
ProSAFE Wireless Controller The following figure shows an N:1 configuration with three primary controllers and one redundant controller after a failover occurs: Figure 24. Primary and redundant controllers in an N:1 configuration after a failover Configure a Redundancy Group With N:1 Redundancy To enable N:1 redundancy, configure the redundancy settings on the primary controllers (the master and one or two slaves) and on the redundant controller (the secondary controller) that serves all primary controllers.
Page 301 ProSAFE Wireless Controller  To configure N:1 redundancy for a stack of three controllers: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 302 ProSAFE Wireless Controller Configure the settings for the redundant controller (that is, the secondary controller) as described in the following table. Setting Description Controller IP Enter the IP address of the redundant controller. This is the address that you use to log in to the redundant controller’s web management interface.
Page 303 ProSAFE Wireless Controller Configure the VRRP ID and local IP address of all primary controllers (that is, the master and the slaves) as described in the following table. These settings are required so that the primary controllers and redundant controller can establish a redundancy group.
Page 304 ProSAFE Wireless Controller WARNING: Enabling redundancy causes the redundancy process on the primary wireless controller to restart, which might temporarily affects traffic on the managed access points in the network. Click the Apply button. Your settings are saved. After the configuration of the primary controller that functions as the master in the stack synchronizes with the redundant controller, redundancy goes into effect.
Page 305: Replace A Redundant Controller
ProSAFE Wireless Controller Replace a Redundant Controller After you configure redundancy, you can replace the redundant controller with another one. Even if you change only the password of the redundant controller, use the replace tool.  To replace a redundant controller: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 306: Remove A Redundancy Group
ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Controller IP Enter the IP address of the redundant controller. This is the address that you use to log in to the redundant controller’s web management interface. UserName The user name is a nonconfigurable field that displays the user name with which you log in to the web management interface of the redundant controller.
Page 307 ProSAFE Wireless Controller  To remove a redundancy group: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password. Click the Login button.
Page 308: Chapter 13 Monitor The Wifi Network And Its Components
Monitor the WiFi Network and Its Components This chapter includes the following sections: • Monitor the Network • Monitor the Wireless Controller • Monitor the SSIDs on the Wireless Controller • Monitor Local Clients in the Network Note: The information that is shown in the figures in this chapter is not always consistent.
Page 309: Monitor The Network
ProSAFE Wireless Controller Monitor the Network Note: The Network configuration menu tab displays under the Monitor main navigation menu tab only if you configured stacking. If you did not configure stacking, see Monitor the Wireless Controller page 324. Note: Monitoring the network does not apply to the WC7500. For this model, Monitor the Wireless Controller on page 324.
Page 310 ProSAFE Wireless Controller The following table describes the fields of the Stacking/Redundancy Status table, the Network Status table, and the Rogue Access Points section of the page. Item Description Stacking/Redundancy Status Role The role of the wireless controller in a stacking configuration (Master or Slave).
Page 311: View The Wireless Controllers In The Network
ProSAFE Wireless Controller Item Description Access The number of access points that a wireless controller manages and that are Points running correctly. This number is shown for each wireless controller in the stack and for all wireless controllers together. Down The number of access points that a wireless controller manages but cannot ping.
Page 312 ProSAFE Wireless Controller Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Monitor > Network > Controller. The following table explains the fields of the Controllers table on the network Controllers page. Item Description Controller IP...
Page 313: View The Access Points In The Network
ProSAFE Wireless Controller View the Access Points in the Network You can monitor all managed access points in the network and see which wireless controller manages a particular access point.  To view the network Access Point page: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 314 ProSAFE Wireless Controller The following table describes the fields of the Access Point page. Item Description Select The radio button that lets you select the access point. Status The status of the access point (healthy or down). Name The name of the access point (see Change Access Point Information on the Managed AP List on page 170).
Page 315 ProSAFE Wireless Controller Item Description 2.4/5 GHz Channel The active 2.4 GHz or 5 GHz channel on the access point. This information can change after initial configuration of the access point because of automatic channel allocation. The color coding specifies the channel utilization on each radio and means the following: •...
Page 316 ProSAFE Wireless Controller The following table describes the fields of the AP Details pop-up window. Monitor the WiFi Network and Its Components...
Page 317 ProSAFE Wireless Controller Item Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na/ac). SSID The WiFi network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
Page 318: View The Clients In The Network
ProSAFE Wireless Controller Click the OK button. The AP Details pop-up window closes, and the network Access Point page displays again. View the Clients in the Network You can view all clients that are connected to managed access points and see which wireless controller manages a particular access point.
Page 319 ProSAFE Wireless Controller The following table describes the fields of the Clients page. Item Description Select The radio button that lets you select the client. The MAC address of the WiFi client. The IP address of the WiFi client. Note the following: •...
Page 320 ProSAFE Wireless Controller Item Description RSSI The received signal strength indicator (RSSI) of the WiFi client. Building The building to which you assigned the access point (see Change Access Point Information on the Managed AP List on page 170 or Assign Access Points to Buildings, Floors, and Advanced Profile Groups on page 174).
Page 321 ProSAFE Wireless Controller c. To display details about the client, point to the client. A pop-up window opens and displays details about the client. d. To close the floor plan, click the Back button. The Clients page displays again. To export the table, do the following: a.
Page 322: View The Profiles In The Network
ProSAFE Wireless Controller Item Description Auth The security mode that the WiFi client is using to connect to the access point (Open, WEP, WPA, WPA2, or WPA/WPA2). Client Type The wireless mode that the WiFi client is using to connect to the access point (802.11ng, 802.11bg, 802.11b, 802.11ac, 802.11na, or 802.11a).
Page 323 ProSAFE Wireless Controller The following table describes the fields of the Profiles page. Item Description SSID The WiFi network SSID for the security profile. Profile Name The name of the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
Page 324: Monitor The Wireless Controller
ProSAFE Wireless Controller If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: • To move to the next page, click the Next button. • To move to the previous page, click the Previous button.
Page 325 ProSAFE Wireless Controller  To view the wireless controller Summary page: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address. By default, the IP address is 192.168.0.250. The wireless controller’s login window opens. Enter your user name and password.
Page 326 ProSAFE Wireless Controller Item Description Wireless Clients Open The number of WiFi clients that are connected to managed access points using security profiles configured with open mode. The number of WiFi clients that are connected to managed access points using security profiles configured with WEP.
Page 327: View Wireless Controller Usage
ProSAFE Wireless Controller View Wireless Controller Usage The page displays graphics that show the access point usage, SSID usage, and number of clients on the wireless controller. Note: The Java plug-in is required to display the graphics.  To view the Usage page: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 328: View Access Points That The Wireless Controller Manages
ProSAFE Wireless Controller Data for the 2.4 GHz network (for the combined 802.11b, 802.11bg, and 802.11ng modes) is shown in purple; data for the 5 GHz network (for the combined 802.11a, 802.11na, and 802.11ac modes) is shown in green. The page shows the following graphs: •...
Page 329 ProSAFE Wireless Controller The following table describes the fields of the Access Point page. Item Description Select The radio button that lets you select the access point. Status The status of the access point (healthy or down). Name The name of the access point (see Change Access Point Information on the Managed AP List on page 170).
Page 330 ProSAFE Wireless Controller Item Description 2.4/5 GHz Channel The active 2.4 GHz or 5 GHz channel on the access point. This information can change after initial configuration of the access point because of automatic channel allocation. The color coding specifies the channel utilization on each radio and means the following: •...
Page 331 ProSAFE Wireless Controller The following table describes the fields of the AP Details pop-up window. Item Description AP Info This information is self-explanatory. Monitor the WiFi Network and Its Components...
Page 332 ProSAFE Wireless Controller Item Description Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na/ac). SSID The WiFi network SSID for the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
Page 333: View Clients On Access Points That The Wireless Controller Manages
ProSAFE Wireless Controller View Clients on Access Points That the Wireless Controller Manages You can view all clients that are connected to access points that the wireless controller manages.  To view the Clients page: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 334 ProSAFE Wireless Controller The following table describes the fields of the Clients page. Item Description Select The radio button that lets you select the client. The MAC address of the WiFi client. The IP address of the WiFi client. Note the following: •...
Page 335 ProSAFE Wireless Controller Item Description Usage (KBytes) The traffic usage of the WiFi client in KB. RSSI The received signal strength indicator (RSSI) of the WiFi client. Building The building to which you assigned the access point (see Change Access Point Information on the Managed AP List on page 170 or Assign Access Points to...
Page 336 ProSAFE Wireless Controller A pop-up window opens and displays details about the client. d. To close the floor plan, click the Back button. The Clients page displays again. To export the table, do the following: a. Click the EXPORT button. b.
Page 337: View Neighboring Clients That The Wireless Controller Detects
ProSAFE Wireless Controller Item Description Auth The security mode that the WiFi client is using to connect to the access point (Open, WEP, WPA, WPA2, or WPA/WPA2). Client Type The wireless mode that the WiFi client is using to connect to the access point (802.11ng, 802.11bg, 802.11b, 802.11ac, 802.11na, or 802.11a).
Page 338 ProSAFE Wireless Controller The following table describes the fields of the Neighboring Clients page. Item Description Location This radio button is nonfunctional. The MAC address of the neighboring client. RSSI The received signal strength indicator (RSSI) of the neighboring client. Rogue Shows whether or not (Yes or No) the neighboring client is connected to a rogue access point.
Page 339: View Neighboring Access Points That The Wireless Controller
ProSAFE Wireless Controller To export the table, do the following: a. Click the EXPORT button. b. To save the file, follow the directions of your browser. View Neighboring Access Points That the Wireless Controller Does Not Manage You can monitor the access points that the wireless controller detects but does not manage. ...
Page 340: View Security Profiles That The Wireless Controller Manages
ProSAFE Wireless Controller Item Description Privacy The security of the access point (Secured or Unsecured). Last Beacon The last beacon that the access point transmitted. Type The category that the access point belongs to (Neighbor AP or Rogue AP). Classification The status of the access point (Known or Unknown).
Page 341 ProSAFE Wireless Controller The following table describes the fields of the Profiles page. Item Description SSID The WiFi network SSID for the security profile. Profile Name The name of the security profile. Security The security mode (Open, WEP, WPA, WPA2, or WPA/WPA2) for the security profile.
Page 342: View Dhcp Leases That Are Provided By The Wireless Controller
ProSAFE Wireless Controller To display the latest information onscreen, click the REFRESH button. To export the table, do the following: a. Click the EXPORT button. b. To save the file, follow the directions of your browser. View DHCP Leases That Are Provided by the Wireless Controller You can view the current DHCP clients that were allocated IP addresses by the DHCP server on the wireless controller.
Page 343: View Captive Portal Users On Access Points That The Wireless Controller Manages
ProSAFE Wireless Controller The following table describes the fields of the DHCP Leases page. Item Description Host Name The host name of the DHCP client. The IP address that is allocated to the DHCP client. End Time The DHCP lease end time for the DHCP client. End Date The DHCP lease end date for the DHCP client.
Page 344 ProSAFE Wireless Controller The wireless controller’s web management interface opens and displays the Summary page. Select Monitor > Controller > Captive Portal Users. The following table describes the fields of the Captive Portal Users page. Item Description User Name The login name of the user. Account Name The account name, if any, that is associated with the user.
Page 345: View The Guest Email Address Database For Access Points That The Wireless Controller Manages
ProSAFE Wireless Controller To export the table, do the following: a. Click the EXPORT button. b. To save the file, follow the directions of your browser. View the Guest Email Address Database for Access Points That the Wireless Controller Manages You can view the email addresses of users who are or were logged in through a guest portal.
Page 346: View Airqual For The Channels In A Profile Group
ProSAFE Wireless Controller The table shows the user email addresses and the date and time that the user logged in. To sort the table, click the double triangle icon or single triangle icon at the top right of a column. To search the table, in the Search field, enter the information that you are looking for, such as an IP address or MAC address.
Page 347 ProSAFE Wireless Controller The wireless controller’s login window opens. Enter your user name and password. Click the Login button. The wireless controller’s web management interface opens and displays the Summary page. Select Monitor > Controller > AirQual. The AP List includes the WAC740 access points for which AirQual is enabled. (In the previous figure, AirQual is enabled for a single WAC740 access point only.) If the AP List includes more than one WAC740 access point, select the radio button for a WAC740 access point.
Page 348: Monitor The Ssids On The Wireless Controller
ProSAFE Wireless Controller To search the table, in the Search field, enter the information that you are looking for, such as an IP address or MAC address. If the table contains many entries, navigate through the table by using the following buttons and menu that display at the bottom of the table: •...
Page 349 ProSAFE Wireless Controller The following table describes the fields of the SSID Mapping page. Item Description Select The radio button that lets you select the access point. Name The name of the access point (see Change Access Point Information on the Managed AP List on page 170).
Page 350 ProSAFE Wireless Controller Item Description Building The building to which you assigned the access point (see Change Access Point Information on the Managed AP List on page 170 or Assign Access Points to Buildings, Floors, and Advanced Profile Groups on page 174). Floor The floor to which you assigned the access point (see Change Access Point...
Page 351 ProSAFE Wireless Controller Monitor the WiFi Network and Its Components...
Page 352 ProSAFE Wireless Controller The following table describes the fields of the AP Details pop-up window. Item Description AP Info This information is self-explanatory. Profile Info For each security profile that is configured on the selected access point, the following information displays: Type The type of profile (802.11b/bg/ng or 802.11a/na/ac).
Page 353: Monitor Local Clients In The Network
ProSAFE Wireless Controller Item Description In Interfering Channel The total number of detected rogue access points in the interfering channel. Statistics For each type of usage (Wired Ethernet, Wireless 11ng, Wireless 11bg, Wireless 11b, Wireless 11ac, Wireless 11na, Wireless 11a, or a combination), statistics about transmitted and received packets and bytes display for the selected access point.
Page 354 ProSAFE Wireless Controller Note: The Network configuration menu tab displays under the Monitor main navigation menu tab only if you configured stacking. Monitor the WiFi Network and Its Components...
Page 355 ProSAFE Wireless Controller The following table describes the fields of the Clients table on the Local Client List page. Item Description Select The radio button that lets you select the client. The MAC address of the WiFi client. The IP address of the WiFi client. Location The location of the access point (see Change Access Point Information on the...
Page 356 ProSAFE Wireless Controller To locate a client on a deployed floor plan, do the following: a. Select the radio button that corresponds to the client that you want to locate. b. Click the Locate button. The selected client displays on the floor plan and is indicated by a red icon. Client Access point c.
Page 357: Monitor Blacklisted Clients
ProSAFE Wireless Controller The following table describes the fields of the Client Details pop-up window. Item Description The MAC address of the WiFi client. Access Point The name of the access point to which the WiFi client is connected. BSSID The MAC address of the access point’s radio to which the WiFi client is connected.
Page 358 ProSAFE Wireless Controller The wireless controller places the following types of clients on the black list: • Clients for which an authentication failure occurred because they are included in a MAC ACL that denies them access. • Clients for which an authentication failure occurred, for example, because an incorrect password was entered or a RADIUS server denied them access.
Page 359 ProSAFE Wireless Controller The following table describes the fields of the Blacklisted Clients table on the Blacklisted Clients page. Item Description Select The radio button that lets you select the client. The MAC address of the WiFi client. TYPE The reason why the WiFi client was denied access. AP-Name The name of the access point (see Change Access Point Information on the...
Page 360: Chapter 14 Troubleshooting And Diagnostics
Troubleshooting and Diagnostics This chapter includes the following sections: • Troubleshoot Basic Functioning • Troubleshoot the Web Management Interface • Troubleshoot a TCP/IP Network Using the Ping Utility • Use the Reset Button to Restore Default Settings • Resolve Problems With Date and Time •...
Page 361: Troubleshoot Basic Functioning
If the error persists, a hardware problem might exist. Contact NETGEAR technical support. Status LED Never Turns Off When the wireless controller is powered on, the Status LED is lit yellow for approximately two minutes and then turns green when the wireless controller completes its initialization.
Page 362: Troubleshoot The Web Management Interface
ProSAFE Wireless Controller Troubleshoot the Web Management Interface If you are unable to access the wireless controller’s web management interface from a computer on your local network, try to isolate the problem. You can most likely solve the problem by following the suggestions that are described in the following sections. Check the Ethernet Cabling Check the Ethernet connection between the computer and the wireless controller as described in the previous section (see...
Page 363: Check The Internet Browser
ProSAFE Wireless Controller Check the Internet Browser If the Ethernet cabling and IP address configuration are fine, the Internet browser might prevent you from accessing the web management interface. Check the following: • Make sure that you are using the http://address login rather than the https://address login. •...
Page 364: Use The Reset Button To Restore Default Settings
ProSAFE Wireless Controller If the path is not working, you see this message: Request timed out If the path is not functioning correctly, one of the following problems might be occurring: • Wrong physical connections Make sure that the Ethernet LEDs are lit. If they are off, follow the instructions in Ethernet Port LEDs Are Not Lit on page 361.
Page 365: Resolve Network Problems
Make sure that the access points run at least their initial firmware release or a newer version. For firmware requirements, see Supported NETGEAR Access Points page 27. For local access points that are installed across a Layer 3 network, check the following: •...
Page 366: Resolve Connection Problems
ProSAFE Wireless Controller Resolve Connection Problems If the Power LED of an access point blinks amber, the access point lost its connection to the wireless controller. In this situation, check the network connectivity between the access point and the wireless controller. When an access point is converted from standalone AP mode to managed AP mode, its static IP address is changed to an IP address that a DHCP server issues, either a DHCP server in the network or a DHCP server that is configured on the wireless controller.
Page 367: Ping An Access Point
ProSAFE Wireless Controller Ping an Access Point You can ping an access point to see if the wireless controller can reach the access point.  To ping an access point: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 368: Trace A Route To An Access Point
ProSAFE Wireless Controller Trace a Route to an Access Point You can trace a route to verify the route from the wireless controller to an access point.  To trace a route to an access point: Open a web browser, and in the browser’s address field, type the wireless controller’s IP address.
Page 369: View The Console Debug Logs Of An Access Point
ProSAFE Wireless Controller View the Console Debug Logs of an Access Point Note: On the wireless controller, you can view console debug logs for the WNDAP660, WAC720, WAC730, and WAC740 access points only. The console debug logs that you can download by connecting a device with a serial cable to an access point’s console point can be very useful for troubleshooting or debugging a WLAN network.
Page 370 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Enable Console Logs Enable the console log settings by selecting the Enable Console Logs check box. By default, the console log settings are disabled. Server IP Address Enter the IP address of the syslog server or UDP server.
Page 371: Capture Wifi Packets
ProSAFE Wireless Controller Capture WiFi Packets You can use the wireless controller packet capture utility to capture WiFi packets in a network. This capability can be useful for analyzing a WiFi deployment, monitoring a WiFi network, debugging protocols, determining WiFi network bottlenecks, and, in general, troubleshooting any irregularities in a WiFi network.
Page 372 ProSAFE Wireless Controller Configure the settings as described in the following table. Setting Description Capture Beacon Select the Capture Beacon check box to enable capturing of beacon frames. If the check box is cleared (which is the default), beacon frames are ignored during the packet capture process.
Page 373 ProSAFE Wireless Controller If you specified that the file with captured packets must be saved to the access point logs, do the following to retrieve and view the content of the file: a. Select Maintenance > Logs & Alerts > Logs. b.
Page 374: Appendix A Controller-Managed Access Points
Controller-Managed Access Points Standalone access points provide a full web management interface. Access points that are controlled by a wireless controller provide a limited web management interface. This appendix describes the limited web management interface and includes the following sections: •...
Page 375: Overview
For more information about standalone mode, see the user manual for your access point. (Because the WAC740 and WN370 access points do not function in standalone mode, NETGEAR does not provide user manuals for these models.) •...
Page 376: Change Ip Address And Vlan Settings On A Controller-Managed Access Point
ProSAFE Wireless Controller Change IP Address and VLAN Settings on a Controller-Managed Access Point By default, a controller-managed access point functions as a DHCP client. The only reason to manually change the IP address settings on a controller-managed access point is that you must assign a static IP address to the access point.
Page 377: Reenable The Dhcp Client On A Controller-Managed Access Point
ProSAFE Wireless Controller In the IP Settings section, select the DHCP client disable radio button. The fields become available. By default, the DHCP client enable radio button is selected and the access point functions as a DHCP client. In the IP Settings sections, configure the IP address information for the access point in the network.
Page 378: Upgrade Or Change Firmware On A Controller-Managed Access Point
 To upgrade or change the firmware on a controller-managed access point: Download the desired software file from the NETGEAR website and save it to a computer that is connected to the same network as the controller-managed access point.
Page 379 ProSAFE Wireless Controller In the address bar, enter the IP address of the access point. A login window displays. Enter the user name and password. The user name is admin. The default password is password. The user name and password are case-sensitive. Select Configuration >...
Page 380 ProSAFE Wireless Controller c. Reconfigure the static IP address setting and the VLAN settings or reenable the DHCP client. For more information, see Change IP Address and VLAN Settings on a Controller-Managed Access Point on page 376 and Reenable the DHCP Client on a Controller-Managed Access Point on page 377.
Page 381: Save And View The Logs On A Controller-Managed Access Point
ProSAFE Wireless Controller The Upgrade page displays. The page states the current firmware version that is running on the access point. g. Reconfigure the static IP address setting and the VLAN settings or reenable the DHCP client. For more information, see Change IP Address and VLAN Settings on a Controller-Managed Access Point on page 376 and...
Page 382: Enable Link Aggregation On A Wac740 Access Point
Configure link aggregation on the switch. For more information, see the documentation for your switch. If you use a NETGEAR M4200 ProSAFE Managed Switch, see the M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual, which you can download by visiting downloadcenter.netgear.com.
Page 383: Change The Password On An Access Point
ProSAFE Wireless Controller The Network Settings page displays. (The full path is Configuration > System > Network Settings.) In the Link Aggregation section, select the enable radio button. By default, the disable radio button is selected. Click the Apply button. You changes are saved.
Page 384 ProSAFE Wireless Controller to log into the access point to load a standalone firmware image or change the configuration, you can change the password to block access.  To change the password on an access point that is no longer managed by a wireless controller but does not function in standalone mode either: In the address bar, enter the IP address of the access point.
Page 385: Convert An Access Point From Controller-Managed To Standalone
ProSAFE Wireless Controller Convert an Access Point From Controller-Managed to Standalone Note: You cannot convert a WAC740 or RN370 access point to a standalone access point. The WAC740 and WN370 access points are intended to function as controller-managed access points only. ...
Page 386: Appendix B Factory Default Settings, Technical Specifications, And Passwords Requirements
Factory Default Settings, Technical Specifications, and Passwords Requirements This appendix includes the following sections: • Factory Default Settings • Technical Specifications Models WC7500 and WC7600v2 • Technical Specifications Models WC7600 and WC9500 • Password Requirements...
Page 387: Factory Default Settings
ProSAFE Wireless Controller Factory Default Settings You can restore the wireless controller to its factory default settings on the Reboot/Reset Controllers page (see Reboot the Wireless Controller on page 259) or by using the Reset button on the front panel (see Use the Reset Button to Restore Default Settings page 364).
Page 388: Technical Specifications Models Wc7600 And Wc9500
Environmental WEEE, RoHS, REACH For a list of all features and capabilities of the wireless controller, see the datasheet: • For the WC7500, visit netgear.com/support/product/WC7500. • For the WC7600v2, visit netgear.com/support/product/WC7600v2. Technical Specifications Models WC7600 and WC9500 The following table lists the technical and physical specifications for models WC7600 and WC9500.
Page 389: Password Requirements
ProSAFE Wireless Controller Password Requirements Note: We recommend that you change the administrator password of the wireless controller to a secure password (see Change the Password of the Default admin Account of the Wireless Controller on page 237). The administrator password that you configure on the wireless controller is also pushed to all managed access points.
Page 390 ProSAFE Wireless Controller Table 15. Password requirements (continued) Web Management Interface Path User Type Restrictions Section in This Manual Allowed Length Data Encryption Characters Advanced profile: Shared Key 64-bit WEP Hexadecimal 10 fixed Select Configuration > 128-bit WEP Hexadecimal 26 fixed Profile >...
Page 391: Index
Index Numerics IP subnet known and unknown – 1 to 1 redundancy limited management web interface 2.4 GHz and 5 GHz channels local 802.11 wireless modes managed status 802.1Q VLAN header models, supported password, changing pinging rebooting AC power supply remote WC7500 and WC7600v2 RF planning, adding and managing...
Page 392 ProSAFE Wireless Controller assigning access points to channels and transmission power, overriding back panel components described WC7500 and WC7600v2 LED behavior, configuring WC7600 and WC9500 profiles, adding and configuring background QoS queue QoS, configuring backing up the configuration radio, turning on and off band steering rate limiting, configuring RF management, configuring...
Page 393 ProSAFE Wireless Controller channel width WC7500 and WC7600v2 WC7600 and WC9500 classify rogue access points delivery traffic indication message (DTIM) interval client separation client VLANs denied access, clients clients, DHCP detecting rogue access points clients, viewing DHCP client, access points accepted in the network DHCP leases, viewing blacklisted in the network...
Page 394 ProSAFE Wireless Controller inventory, RF planning IP addresses factory default IP addresses, access points access points factory default settings, wireless controller DHCP server assignment factory default state, access point autodiscovery license server failover, redundancy local address Fan LED, described redundancy setting fans stacking setting WC7500 and WC7600v2...
Page 395 ProSAFE Wireless Controller legacy 802.1x authentication neighboring clients, viewing levels, logging network authentication licenses network performance, troubleshooting – managing network status, viewing summary number and types required noncoverage zone, RF planning redundancy group, matching notification server, emails – registering NTP (Network Time Protocol), client and server limited web management interface, access points link aggregation WAC740 access point...
Page 396 ProSAFE Wireless Controller management obstructions QoS (quality of service) planning RF planning access points, adding and managing antennas, adding and managing rack-mounting overview and requirements radio band steering RIFS (reduced interframe space) transmission radio frequency (RF) – roadmaps for configuration logs, viewing and saving rogue access points management...
Page 397 DHCP server resetting factory default settings wireless controller TCP/IP network support, NETGEAR time and time zone suppression, ARP tracing an access point route syslog server web management interface external Tx power...
Page 398 ProSAFE Wireless Controller DHCP leases guest email address database VAR information, licenses in the network video QoS queue managed access points Virtual Router Redundancy Protocol (VRRP) managed clients VLANs neighboring access points clients neighboring clients DHCP server profiles management summary security profiles usage settings, access points...

This manual is also suitable for:

Prosafe wc7600v2 Prosafe wc7600 Prosafe wc9500

NETGEAR ProSAFE WC7500 User Manual

Chapter 1 Introduction

Chapter 2 Hardware Descriptions

Chapter 3 System Planning and Deployment Scenarios

Chapter 4 RF Planning and Deployment

Chapter 5 Installation and Configuration Overview

Chapter 6 Configure the System and Network Settings and

Chapter 7 Manage Security Profiles and Profile Groups

Chapter 8 Discover and Manage Access Points

Chapter 9 Configure Wifi and Qos Settings

Chapter 10 Manage Rogue Access Points, Guest Network

Chapter 11 Maintain the Wireless Controller and Access Points

Chapter 12 Manage Stacking and Redundancy

Chapter 13 Monitor the Wifi Network and Its Components

Chapter 14 Troubleshooting and Diagnostics

Appendix A Controller-Managed Access Points

Change IP Address and VLAN Settings on a Controller-Managed Access Point

Reenable the DHCP Client on a Controller-Managed Access Point

Upgrade or Change Firmware on a Controller-Managed Access Point

Save and View the Logs on a Controller-Managed Access Point

Enable Link Aggregation on a WAC740 Access Point

Convert an Access Point from Controller-Managed to Standalone

Quick Links

Related Manuals for NETGEAR ProSAFE WC7500

Summary of Contents for NETGEAR ProSAFE WC7500