Page 1 User Manual WiFi 6 AX1800 Dual Band Wireless Access Point Model WAX204 NETGEAR, Inc. November 2020 350 E. Plumeria Drive 202-12147-01 San Jose, CA 95134, USA...
Page 2 See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Page 3: Table Of Contents
Get a registration key.................26 Find the IP address of the access point when you cannot use routerlogin.net..................27 Find the IP address of the access point with the NETGEAR Insight mobile app..................29 Log in to the access point after initial setup........30 Change the language................31...
Page 4 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Specify a PPTP or L2TP Internet connection that uses a login [router mode].................41 IPv6 Internet connections and IPv6 addresses [router mode]..43 Use Auto Detect for an IPv6 Internet connection [router mode]....................44 Use Auto Config for an IPv6 Internet connection [router mode]....................46...
Page 5 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up keyword and domain blocking [router mode]....86 Remove a keyword or domain from the blocked list [router mode]....................88 Remove all keywords and domains from the blocked list [router mode]....................89 Block specific applications and services from the Internet [router mode]....................89...
Page 6 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Bridge port and VLAN tag groups [router mode]......121 Set up a bridge for a port group [router mode]......122 Set up a bridge for a VLAN tag group [router mode].....123 Change the MTU size [router mode]..........125 Chapter 8 Maintain and Monitor Update the firmware................129...
Page 7 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the system mode to access point mode or to router mode....................164 Disable LED blinking or turn off LEDs..........166 Chapter 9 Dynamic DNS [Router Mode] About Dynamic DNS [router mode]..........168 Set up a new Dynamic DNS account [router mode]....168 Use an existing Dynamic DNS account [router mode]....169...
Page 8 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up access point as a WiFi Bridge to another device.....202 Change the CTS/RTS threshold and preamble mode for a radio.205 Chapter 13 Port Forwarding and Port Triggering [Router Mode] Port forwarding to a local server for services and applications [router mode]....................208...
Page 9 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 You cannot log in to the access point [access point mode]..229 You cannot access the Internet [router mode]......231 Check the Internet WAN IP address [router mode]....231 Check or manually start the PPPoE connection [router mode].233 Troubleshoot Internet browsing.............234...
Page 10: Chapter 1 Hardware Overview
Hardware Overview The WiFi 6 AX1800 Dual Band Wireless Access Point Model WAX204, in this manual referred to as the access point, supports 802.11ax high performance WiFi connectivity and dual-band concurrent operation at 2.4 GHz and 5 GHz with a combined throughput of 1.8 Gbps (600 Mbps at 2.4 GHz and 1200 Mbps at 5 GHz).
Page 11: Top Panel With Leds
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Top panel with LEDs The five status LEDs are located on the top panel of the access point. From left to right, the top panel contains the Power LED, Internet LED, WiFi LED, LAN LED, and WPS LED.
Page 12 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 1. LED descriptions Description Power Solid green. The access point is ready. Solid amber. The access point is starting or upgrading firmware. Blinking amber. The access point was reset to factory default settings and is restarting.
Page 13: Back Panel With Ports, Buttons, And A Power Connector
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Back panel with ports, buttons, and a power connector The back panel of the access point provides ports, buttons, and a DC power connector. Figure 2. Back panel Viewed from left to right, the back panel contains the following components: •...
Page 14: Position The Antennas For Best Wifi Performance
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • LAN ports 1 through 4. Four Gigabit Ethernet RJ-45 LAN ports numbered LAN 1 through LAN 4 to connect the access point to Ethernet devices such as a computer and a switch.
Page 15: Chapter 2 Installation And Initial Log-In
However, the easiest way to register your access point is to connect it to the Internet, go though the initial log-in process, also referred to as single sign-on (SSO), and log in with a NETGEAR account. (You can create an account during the log-in process.) Note: When you log in to the access point, you connect to the local browser user interface (UI).
Page 16: About Router Mode And Access Point Mode
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 About router mode and access point mode Before you set up the access point, decide whether you will use the access point in its default router mode or in access point mode: •...
Page 17: Set Up The Access Point And Complete The Initial Log-In Process
• Registration. To get full and unlimited access to the local browser UI, you must log in with either a NETGEAR account or a registration key. If you do not have a NETGEAR account, you can create one during the initial log-in process. For information about getting a registration key, see Get a registration key on page 26.
Page 18: Connect The Access Point To A Modem And Log In For The First Time
Before you register the switch with your NETGEAR account, you can use one of the following options: • Access limited features. Select the option to access a restricted menu of the local browser UI without time limitations.
Page 19 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Figure 4. Connect the access point in default router mode to your modem To connect the access point to a modem and log in to the local browser UI for the first time: 1.
Page 20 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. Log in to the access point by using one of the following methods: • Connect over WiFi. On a WiFi-enabled computer or mobile device, find and connect to the access point’s WiFi network (SSID).
Page 21 11. Register the access point or select either restricted access or full access for a limited time to the local browser UI: • Register with a NETGEAR account. Click the Login In with Netgear account button and follow the prompts. Either use your existing NETGEAR account or create a new free NETGEAR account.
Page 22: Connect The Access Point To A Router And Log In For The First Time
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Connect the access point to a router and log in for the first time The easiest way to use the access point in access point mode is to connect it to an existing router in your network, either directly, or through a switch or hub (almost any router functions as a DHCP server).
Page 23 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Description Power When you turn on the access point, the Power LED lights solid red for about five seconds and then turns solid amber. After about 90 seconds, the Power LED lights solid green.
Page 24 7. Register the access point or select either restricted access or full access for a limited time to the local browser UI: • Register with a NETGEAR account. Click the Login In with Netgear account button and follow the prompts. Either use your existing NETGEAR account or create a new free NETGEAR account.
Page 25 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 the initial log-in process on page 17.) The password that you must enter is your new local device password. • Temporarily access all features. Click the Skip Registration and Temporarily Access All Features button to get access to the full menu of the local browser UI, but you get this access three times only.
Page 26: Get A Registration Key
If you do not have a free NETGEAR account, you can create one. Note: You can also use the NETGEAR Insight app to get a registration key. For more information, visit kb.netgear.com/000061819/How-do-I-find-my-NETGEAR-registration-key.
Page 27: Find The Ip Address Of The Access Point When You Cannot Use Routerlogin.net
6. Click the REGISTER button. The access point is registered with NETGEAR. An confirmation email that includes the registration key is sent to your NETGEAR account email address. 7. If the My Products page does not display, click My Product from the menu.
Page 28 • Regardless of whether the access point is connected to the Internet, do one of the following: Option 1. Use the NETGEAR Insight mobile app. To use the NETGEAR Insight mobile app to discover the IP address of the access point in your network, do the following: 1.
Page 29: Find The Ip Address Of The Access Point With The Netgear Insight Mobile App
2. Connect your mobile device to the access point WiFi network. 3. Open the NETGEAR Insight mobile app. 4. Tap LOG IN to log in to your existing NETGEAR account, which is the same account that you logged into or created during the initial log-in process.
Page 30: Log In To The Access Point After Initial Setup
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Log in to the access point after initial setup After initial setup, the access point is ready for use and you can change the settings and monitor the traffic. When you enter the IP address that is assigned to the access point and you use http, the browser automatically redirects your request to https.
Page 31: Change The Language
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 32: Connect A Wired Or Wifi Device To The Access Point's Network After Installation
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The page refreshes with the language that you selected. Connect a wired or WiFi device to the access point’s network after installation After you install the access point in your network (see Set up the access point and complete the initial log-in process on page 17), you can connect devices to the access point’s LAN through Ethernet cables or to the access point’s WiFi network over a WiFi...
Page 33: Use Wi-Fi Protected Setup To Join The Wifi Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use Wi-Fi Protected Setup to join the WiFi network You can use Wi-Fi Protected Setup (WPS) to add a WiFi device such as a WiFi-enabled computer, tablet, or smartphone to the WiFi network of the access point.
Page 34 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 3. Look for the access point’s network and select it. If you did not change the default SSID, the default SSID is printed on the access point label. Otherwise, the SSID is the one that you specified during the initial log-in process.
Page 35: Chapter 3 Manually Set Up Internet Settings
Manually Set Up Internet Settings Usually, the quickest way to set up the Internet connection is to allow the Setup Wizard to detect the Internet connection when go through the initial log-in procedure. After initial setup, you can use the Setup Wizard at any time. If the access point is in router mode, you can specify the WAN (Internet) settings manually, including IPv6 settings.
Page 36: Use The Setup Wizard
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use the Setup Wizard If the access point is in router mode, you can use the Setup Wizard to detect the WAN IP address that is issued by your Internet service provider (ISP) or an existing router in your network and automatically set up your access point.
Page 37: Manually Set Up The Access Point Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Setup Wizard searches your Internet connection for servers and protocols to determine your Internet configuration. When the access point connects to the Internet, you are prompted to change the local device password (also referred to as the admin password).
Page 38 6. If your Internet connection requires an account name (sometimes referred to as a host name), enter it in the Account Name field. The account name is the same as the device name, which, by default, is WAX204. 7. If your Internet connection requires a domain name, enter it in the Domain Name (if Required) field.
Page 39: Specify A Pppoe Internet Connection That Uses A Login [Router Mode]
Your settings are saved. 15. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 231 •...
Page 40 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select the Yes radio button. The settings on the page change. 6. From the Internet Service Provider menu, select PPPoE as the encapsulation method. 7. In the Login field, enter the login name that your ISP gave you.
Page 41: Specify A Pptp Or L2Tp Internet Connection That Uses A Login [Router Mode]
Your settings are saved. 17. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 231 •...
Page 42 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select the Yes radio button. The settings on the page change. 6. From the Internet Service Provider menu, select PPTP or L2TP as the encapsulation method. 7. In the Login field, enter the login name that your ISP gave you.
Page 43: Ipv6 Internet Connections And Ipv6 Addresses [Router Mode]
Your settings are saved. 16. Click the Test button to test your Internet connection. If the NETGEAR website does not display within one minute, see one of the following sections: • You cannot access the Internet [router mode] on page 231 •...
Page 44: Use Auto Detect For An Ipv6 Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • DHCP. For more information, see Set up an IPv6 DHCP Internet connection [router mode] on page 54. • 6rd. For more information, see Set up an IPv6 6rd Internet connection [router mode] on page 49.
Page 45 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 3. Enter the access point local device password. The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > IPv6.
Page 46: Use Auto Config For An Ipv6 Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. Use Auto Config for an IPv6 Internet connection [router mode] To set up an IPv6 Internet connection through autoconfiguration: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 47 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Most people can leave this field blank, but if your ISP gave you a specific host name, enter it here. 7. (Optional) In the DHCP Domain Name (if Required) field, enter a domain name.
Page 48: Set Up An Ipv6 6To4 Tunnel Internet Connection [Router Mode].48
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up an IPv6 6to4 tunnel Internet connection [router mode] The remote relay router is the router to which your router creates a 6to4 tunnel. Make sure that the IPv4 Internet connection is working before you apply the 6to4 tunnel settings for the IPv6 connection.
Page 49: Set Up An Ipv6 6Rd Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns these addresses. • Use These DNS Servers. If you know that your ISP requires specific servers, select this option.
Page 50 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use Auto Detect for an IPv6 Internet connection [router mode] on page 44). The access point uses the 6rd option information to establish the 6rd connection. • Manual mode. Select 6rd Tunnel. If the access point receives option 212, the fields are automatically completed.
Page 51: Set Up An Ipv6 Passthrough Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Select an IPv6 Domain Name Server (DNS) Address radio button: • Get Automatically from ISP. Your ISP uses DHCP to assign your DNS servers. Your ISP automatically assigns these addresses.
Page 52: Set Up An Ipv6 Fixed Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To set up a pass-through IPv6 Internet connection: 1. Launch a web browser from a computer or mobile device that is connected to the access point network. 2. Enter http//www.routerlogin.net in the address field.
Page 53 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 54: Set Up An Ipv6 Dhcp Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Secured. In secured mode, which is the default mode, the router inspects both TCP and UDP packets. • Open. In open mode, the router inspects UDP packets only. 10. Click the Apply button.
Page 55 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 of the prefix, which is also indicated by the underline (_) under the IPv6 address. If no address is acquired, the field displays Not Available. 6. (Optional) In the User Class (if Required) field, enter a host name.
Page 56: Set Up An Ipv6 Pppoe Internet Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up an IPv6 PPPoE Internet connection [router mode] To set up a PPPoE IPv6 Internet connection: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 57 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. To manually configure the PPPoE settings for IPv6, specify the following settings: • Login. Enter the login name that your ISP gave you. • Password. Enter the password for the ISP connection.
Page 58: Chapter 4 Basic Wifi And Radio Features
Basic WiFi and Radio Features This chapter describes how you can manage the basic WiFi and radio settings of the access point. For information about the advanced WiFi and radio settings, see Advanced WiFi and Radio Features on page 187. Tip: If you want to change the WiFi network settings, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
Page 59: Set Up Or Change An Open Or Secure Wifi Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Set up or change an open or secure WiFi network The access point provides three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By default, the Wireless 1 network is enabled and the other two WiFi networks are disabled.
Page 60 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 61 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Setting Description Enable SSID Broadcast By default, the access point broadcasts its SSID so that WiFi clients can detect the WiFi name (SSID) in their scanned network lists. To turn off the SSID broadcast, clear the Enable SSID Broadcast check box.
Page 62 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Setting Description WPA-Personal This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that [TKIP] + support either WPA2 or WPA to join the WiFi network. This option uses AES and TKIP WPA2-Personal encryption.
Page 63: Configure Wpa And Wpa2 Enterprise Wifi Security With A Radius Server
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Does your computer or device display as an attached device? (See Display the devices currently on the access point network and change device information on page 154.) If it does, it is connected to the network.
Page 64 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. From the WPA Mode menu, select the enterprise mode: • WPA2 [AES]. WPA2 provides a secure connection but some older WiFi devices do not detect WPA2 and support only WPA. If your WiFi network includes such older devices, select WPA [TKIP] + WPA2 [AES] security.
Page 65: Enable Or Disable A Wifi Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable or disable a WiFi network You can temporarily disable a WiFi network (that is, an SSID) and you can reenable the WiFi network. Note: For information about setting up a WiFi schedule that temporarily turns off a radio band (and, therefore, all WiFi networks that are active on that band), see Add a WiFi schedule for a radio on page 197.
Page 66: Hide Or Broadcast The Ssid For A Wifi Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. Click the Apply button. Your settings are saved. Hide or broadcast the SSID for a WiFi network By default, a WiFi network (SSID) broadcasts its network name (also referred to as the SSID) so that WiFi clients can detect the SSID in their scanned network lists.
Page 67: Manage Client Isolation For Clients Of The Wireless 2 Or Wireless 3 Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Manage client isolation for clients of the Wireless 2 or Wireless 3 network If client isolation is disabled for a WiFi network (SSID) on the access point, WiFi clients that are associated with that WiFi network can communicate with each other. This is the default setting for the Wireless 1 network and you cannot change the setting for the Wireless 1 network.
Page 68: Manage Access To Lan Ports For Clients Of The Wireless 2 Or Wireless 3 Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Select a Client Isolation radio button: • Enable. All WiFi clients are isolated. That is, WiFi clients that are connected to the same WiFi network are prevented from communicating with each other.
Page 69: Manage Ssid Isolation For All Wifi Networks
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 70: Enable Or Disable A Wifi Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 71 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To enable or disable a WiFi radio: 1. Launch a web browser from a computer or mobile device that is connected to the access point network. 2. Enter http//www.routerlogin.net in the address field.
Page 72: Use Wps To Connect To The Wifi Network
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. If you turn off both radios, the WiFi LED turns off. Use WPS to connect to the WiFi network WPS (Wi-Fi Protected Setup) lets you connect a computer or mobile device to the access point’s network without entering the WiFi network passphrase or key.
Page 73: Use Wps With The Pin Method
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > WPS Wizard. The Add WPS Client page displays and shows a description of the WPS method.
Page 74 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 75: Chapter 5 Security, Firewall, And Access Rules
Security, Firewall, and Access Rules The access point comes with a built-in firewall that helps to protect your network from unwanted intrusions from the Internet and lets you control access to the Internet. This chapter includes the following sections: • Firewall WAN settings [router mode] •...
Page 76: Firewall Wan Settings [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Firewall WAN settings [router mode] If the access point is in router mode, the basic firewall settings let you manage port scan protection and denial of service (DoS) protection, specify whether the access point can...
Page 77: Set Up A Default Dmz Server [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 5. To enable a port scan and disable DoS protection, select the Disable Port Scan and DoS Protection check box.
Page 78: Manage Igmp Proxying [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 79: Manage Nat Filtering [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Setup > WAN Setup. The WAN Setup page displays. 5. Clear the Disable IGMP Proxying check box. By default, this check box is selected and IGMP proxying is disabled.
Page 80: Manage The Sip Application-Level Gateway [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 applications, or multimedia applications from functioning. By default, the Secured radio button is selected. • Open. Provides a much less secured firewall but allows almost all Internet applications to function. 6. Click the Apply button.
Page 81: Network Access Control Lists
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Network access control lists You can use access control to block or allow device access to your network. An access control list (ACL) functions with the MAC addresses of wired and WiFi devices that can either access your entire network or are blocked from accessing your entire network.
Page 82 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Security > Access Control. The Access Control page displays.
Page 83: Add, Remove Or Change A Device On The The Allowed List
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 c. In the Device Name field, change the name. d. Click the Apply button. The Access Control page displays again. 9. Click the Apply button. Your settings are saved. 10. To refresh the information in the table with currently connected devices, click the Refresh button.
Page 84: Add, Remove Or Change A Device On The Blocked List
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Click the View list of allowed devices not currently connected to the network link. A table displays the detected device name, MAC address, and connection type of the devices that are not connected but allowed to access the network.
Page 85 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 MAC addresses of these devices to the blocked list. You can also change or remove a device from the allowed list. To add, remove, or change a device on the blocked list: 1.
Page 86: Block Specific Internet Sites [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. To change the MAC address or device for a device on the blocked list, do the following: a. Select the check box for the device. b. Click the Edit button.
Page 87 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 88: Remove A Keyword Or Domain From The Blocked List [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Remove a keyword or domain from the blocked list [router mode] If you no longer need a keyword or domain on the blocked list, you can remove the keyword or domain.
Page 89: Remove All Keywords And Domains From The Blocked List [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Remove all keywords and domains from the blocked list [router mode] You can simultaneously remove all keywords and domains from the blocked list. To remove all keywords and domains from the blocked list: 1.
Page 90: Add A Service Blocking Rule For A Predefined Service Or Application [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 use in blocking rules. You can also add a service blocking rule for a custom service or application. Note: The information in this section and subsections does not apply if the access point is in access point mode.
Page 91: Add A Service Blocking Rule For A Custom Service Or Application [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Add button. The Block Services Setup page displays. 7. From the Service Type menu, select the service or application to be covered by this rule. The Protocol, Starting Port, and Ending Port fields are automatically populated when you select the service or application.
Page 92 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 3. Enter http//www.routerlogin.net in the address field. If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 93: Change A Service Blocking Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 10. Specify which devices on your LAN are affected by the rule, based on their IP addresses: • Only This IP Address. Enter the required address in the fields to apply the rule to a single device on your LAN.
Page 94: Remove A Service Blocking Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. Change the settings. For more information about the settings, see Add a service blocking rule for a custom service or application [router mode] on page 91. 8. Click the Apply button.
Page 95: Assign A Trusted Device [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Assign a trusted device [router mode] If the access point is in router mode, you can exempt one trusted device from blocking and logging. The device that you exempt must be assigned a fixed (static) IP address.
Page 96: Schedule Blocking [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Schedule blocking [router mode] If the access point is in router mode, you can set up a schedule that you can apply to keyword and domain blocking, Internet service and application blocking, or both.
Page 97: Set Up Security Event Email Notifications
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. Set up security event email notifications If the access point is in router mode, the access point can email you its logs of router activity.
Page 98 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 You might be able to find this information in the configuration window of your email program. If you leave this field blank, log and alert messages are not sent. 8. In the Outgoing Mail Server Port Number field, enter the port number that the mail server uses.
Page 99: Chapter 6 Optimize Performance
Optimize Performance This chapter describes how you can optimize the access point’s performance and manage the traffic flows through the access point. The chapter contains the following sections: • Enable QoS and automatically set the Internet bandwidth • Enable QoS and manually set the Internet bandwidth •...
Page 100: Enable Qos And Automatically Set The Internet Bandwidth
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable QoS and automatically set the Internet bandwidth You can enable QoS and let the access point automatically set its Internet download and upload bandwidth based on an automated speedtest. Although can you manually...
Page 101: Enable Qos And Manually Set The Internet Bandwidth
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 For information about bandwidth utilization by device and application, see Display the devices currently on the access point network and change device information on page 154. Enable QoS and manually set the Internet...
Page 102: Enable Or Disable The Automatic Update Of The Performance Optimization Database
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The QoS Setup page displays. By default, Quality of Service (QoS) is enabled, and the Enable QoS check box is selected. By default, the Let Speedtest detect my Internet bandwidth radio button is selected.
Page 103: Manage Wifi Multimedia (Wmm) For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 To enable or disable the automatic update of the Performance Optimization Database: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 104 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 traffic flowing from the access point to WiFi devices. WMM defines the following four queues in decreasing order of priority: • Voice. The highest priority queue with minimum delay, which makes it very suitable for applications such as VoIP and streaming media.
Page 105: Improve Network Connections With Universal Plug And Play [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. The radio or radios restart and WiFi clients might need to reconnect. Improve network connections with Universal Plug and Play [router mode] Universal Plug and Play (UPnP) helps devices such as Internet appliances and computers access the network and connect to other devices as needed.
Page 106: Change The Priority For A Connected Device [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Enter the advertisement period in minutes. The advertisement period specifies how often the access point broadcasts its UPnP information. This value can range from 1 to 1440 minutes. The default period is 30 minutes.
Page 107 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27. A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 108: Chapter 7 Network Settings
Network Settings This chapter describes how you can manage various network settings of the access point. The chapter includes the following sections: • LAN IP address settings [router mode] • Change the access point network device name • Reserved LAN IP addresses [router mode] •...
Page 109: Lan Ip Address Settings [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 LAN IP address settings [router mode] If the access point is in router mode, the LAN subnet defines the LAN IP address settings for the access point, including the IP address at which you can access the access point over the local browser UI, the DHCP IP address settings, and the Router Information Protocol (RIP) settings.
Page 110: Manage The Dhcp Server Address Pool [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 111 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • DNS server IP address To change the DHCP pool of IP addresses that the access point assigns: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 112: Disable The Dhcp Server [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Disable the DHCP server [router mode] If the access point is in router mode, you can use another device on your network as the DHCP server or specify the network settings of all your computers.
Page 113: Manage The Router Information Protocol Settings [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Manage the Router Information Protocol settings [router mode] If the access point is in router mode, Router Information Protocol (RIP) lets the access point exchange routing information with other routers. By default, RIP is enabled in both directions (in and out) without a particular RIP version.
Page 114: Change The Access Point Network Device Name
Change the access point network device name The default network device name of the access point is the model number (WAX204). This device name displays in, for example, a file manager when you browse your network. To change the access point network device name: 1.
Page 115: Reserved Lan Ip Addresses [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. Reserved LAN IP addresses [router mode] If the access point is in router mode, you can specify a reserved IP address for a device on the LAN subnet. Each time such a device accesses the access point’s DHCP server, the device receives the same IP address.
Page 116: Change A Reserved Lan Ip Address [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Either select the radio button for an attached device that displays in the table or specify the reserved IP address settings in the following fields: • IP Address. Enter the IP address to assign to the computer or device.
Page 117: Remove A Reserved Lan Ip Address Entry [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Edit button. The Address Reservation page displays. 7. Change the settings. 8. Click the Apply button. Your settings are saved. Remove a reserved LAN IP address entry [router mode] If the access point is in router mode, you can remove a reserved LAN IP address entry that you no longer need.
Page 118: Static Routes
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Static routes The access point supports IPv4 static routes. Static routes can provide detailed routing information to your access point. Typically, you do not need to add static routes. You must configure static routes only for unusual cases such as when you use multiple routers or multiple IP subnets on your network.
Page 119 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 120: Change An Ipv4 Static Route
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. The static route is added to the table on the Static Routes page. Change an IPv4 static route You can change an IPv4 static route. To change an IPv4 static route: 1.
Page 121: Remove An Ipv4 Static Route
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Remove an IPv4 static route You can remove an existing IPv4 static route that you no longer need. To remove an IPv4 static route: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 122: Set Up A Bridge For A Port Group [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Also, some ISPs might require the access point to send VLAN packets for the Internet connection. This requirement is common for ISP fiber connections. Note: If your ISP provides directions on how to set up a bridge port or VLAN tag group for IPTV, Internet service, or both, follow those directions.
Page 123: Set Up A Bridge For A Vlan Tag Group [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The VLAN / Bridge Settings page displays. 5. Select the Enable VLAN / Bridge group check box. The page expands. 6. Select the By bridge group radio button. The page adjusts.
Page 124 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 125: Change The Mtu Size [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. Click the Apply button. The new VLAN tag group is added . The VLAN / Bridge Settings page display again. 9. To enable the bridge using the new VLAN tag group, do the following: a.
Page 126 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: An incorrect MTU setting can cause Internet communication problems. For example, you might not be able to access certain websites, frames within websites, secure login pages, or FTP or POP servers.
Page 127 Table 3. Common MTU sizes Application 1500 The largest Ethernet packet size. This setting is typical for connections that do not use PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches. 1492 Used in PPPoE environments. 1472 Maximum size to use for pinging.
Page 128: Chapter 8 Maintain And Monitor
Maintain and Monitor This chapter describes how you can maintain the access point by changing the password for local login, by managing the firmware, configuration file, and logs, and by setting up the traffic meter. The chapter also describes how you can monitor the access point and its network traffic.
Page 129: Update The Firmware
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Update the firmware From time to time, or as needed, NETGEAR makes new firmware (software) available. The firmware is stored in flash memory. You can log in to the access point and check if new firmware is available, or you can manually load a specific firmware version to your access point.
Page 130 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The access point finds new firmware information if any is available and displays a message asking if you want to download and install it. 6. Click the Yes button. The access point locates and downloads the firmware and begins the update.
Page 131: Manually Check For New Firmware And Update The Firmware
Ethernet connection to update the firmware. To download new firmware manually and update the access point manually: 1. Visit netgear.com/support/download/ and locate the support page for the router. 2. If available, download the new firmware to your computer or mobile device.
Page 132 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 WARNING: To avoid the risk of corrupting the firmware, do not interrupt the upload. For example, do not close the browser, click a link, or load a new page. Do not turn off the access point.
Page 133: Back Up Or Restore The Settings
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Back up or restore the settings The configuration settings of the access point are stored within the access point in a configuration file. You can back up (save) this file to your computer or restore it.
Page 134: Restore The Access Point Settings
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Restore the access point settings If you backed up the configuration file, you can restore the configuration settings from this file. To restore configuration settings that you backed up: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 135: Change The Local Device Password
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the local device password During the initial log-in process, when you followed the prompts of the Setup Wizard, you specified the local device password (also referred to as the admin password). This is the password that you use to log in to the access point with the user name admin.
Page 136: Change The Password Recovery Questions For The Local Device Password
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Enter the current password. 6. Enter the new password twice. For information about password recovery, see Change the password recovery questions for the local device password on page 136. 7. Click the Apply button.
Page 137: Recover The Local Device Admin Password
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Make sure that the Enable Password Reset check box is selected. This check box is selected by default. 6. Select two security questions and provide answers to them. 7. Click the Apply button.
Page 138: Factory Default Settings
If the access point is in access point mode and you do not know the current IP address of the access point, first try to use the NETGEAR Insight mobile app or an IP scanner application to detect the IP address. If you still cannot find the current IP address of the access point, reset the access point to factory default settings.
Page 139 After you use this option, you must go through the initial log-in process again but you do not need to reregister access point with NETGEAR and can use your local device password to log in to the local browser UI.
Page 140: Use The Local Browser Ui To Return To Factory Defaults
17), but you do not need to register the access point with NETGEAR and can use your local device password to log in to the local browser UI. • Reset to factory default settings and reset the registration status. Return the access point to factory default settings and reset the NETGEAR registration status on the access point.
Page 141 After you use this option, you must go through the initial log-in process again but you do not need to reregister access point with NETGEAR and can use your local device password to log in to the local browser UI.
Page 142: Time And Network Time Protocol Server
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Time and Network Time Protocol server By default, the access point receives its time settings from a NETGEAR Network Time Protocol (NTP) server. You can change to another NTP server or set the time zone and daylight saving time manually.
Page 143: Change The Network Time Protocol Server
Change the Network Time Protocol server By default, the access point uses the NETGEAR NTP server to synchronize the network time. You can change the Network Time Protocol (NTP) server to your preferred NTP server.
Page 144: Logs
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Logs The log is a detailed record of the websites that users on your network accessed or attempted to access and many other access point actions. You can manage which activities are logged.
Page 145: View, Send, Or Clear The Logs
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Port forwarding and port triggering • WiFi access • Scheduled deactivation of the WiFi signal • VPN service 6. Clear the check boxes that correspond to the activities that you do not want to be logged.
Page 146: Status And Statistics
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. To clear the log entries, click the Clear Log button. Status and statistics You can view information about the access point and its ports and the status of the Internet connection and WiFi network. In addition, you can view traffic statistics for the various ports.
Page 147 Field Description Router Information Hardware Version The access point hardware version, which is the model number WAX204. Firmware Version The access point firmware version. If you update the firmware, the version changes (see Update the firmware on page 129). GUI Language Version The access point language version for the local browser UI.
Page 148 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description IP Subnet Mask The IP subnet mask that applies to all four access point LAN ports. For more information, see Change the LAN IP address and subnet settings [router mode] on page 109.
Page 149: Display Information About The Lan Port, Access Point, And Wifi Settings [Access Point Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Mode The WiFi throughput mode that the radio uses (see Change the WiFi throughput mode for a radio on page 194). Wireless AP Displays if the WiFi network is enabled (see Set up or change an open or secure WiFi network on page 59 or Enable or disable a WiFi network on page 65).
Page 150 Field Description Router Information Hardware Version The access point hardware version, which is the model number WAX204. Firmware Version The access point firmware version. If you update the firmware, the version changes (see Update the firmware on page 129). GUI Language Version The access point language version for the local browser UI.
Page 151: Check The Internet Connection Status
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Gateway IP Address The IP address of the gateway to which the access point connects to the Internet. Domain Name Server The IP address of the Domain Name System (DNS) server that the access point uses.
Page 152 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 153: Display The Internet Port Statistics
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 In access point mode, the IP address is a LAN IP address. In router mode, the IP address is a WAN IP address. • Lease Obtained. The date and time when the DHCP IP address lease was obtained.
Page 154: Display The Devices Currently On The Access Point Network And Change Device Information
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 A pop-up window displays, showing the following information: • System Up Time. The time elapsed since the access point was last restarted. • Port. The statistics for the WAN (Internet) port, LAN (Ethernet) ports, and WLANs.
Page 155 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 156 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Connection Type For WiFi devices, the connection type information shows the radio and WiFi network (Wireless 1, Wireless 2, or Wireless 3) to which the device is connected.
Page 157: Traffic Meter [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 (Continued) Field Description Local IP Address The IP address that is assigned to the device when it joined the access point network. This address can change when a device is disconnected and rejoins the network.
Page 158: Start The Traffic Meter Without Traffic Restrictions [Router Mode].158
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Start the traffic meter without traffic restrictions [router mode] If the access point is in router mode, you can monitor the traffic volume without setting a limit on the volume or connection time.
Page 159: Restrict Internet Traffic By Volume [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Restrict Internet traffic by volume [router mode] If the access point is in router mode, you can record and restrict the traffic by volume in MB. This is useful when your ISP measures your traffic volume.
Page 160: Restrict Internet Traffic By Connection Time [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 11. In the Traffic Control section, enter a value in MB to specify when the access point issues a warning message before the monthly limit in MB is reached. This setting is optional. The access point issues a warning when the balance falls below the number of MB that you enter.
Page 161 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Advanced Setup > Traffic Meter. The Traffic Meter page displays. 5. Select the Enable Traffic Meter check box. 6. Select the Connection time control radio button. The access point must be connected to the Internet for you to be able to select the Connection time control radio button.
Page 162: View The Internet Traffic Volume And Statistics [Router Mode].162
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 View the Internet traffic volume and statistics [router mode] If the access point is in router mode and you enabled the traffic meter (see Start the traffic meter without traffic restrictions [router mode] on page 158), you can view the Internet traffic volume and statistics.
Page 163: Unblock The Traffic Meter After The Traffic Limit Is Reached [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Unblock the traffic meter after the traffic limit is reached [router mode] If the access point is in router mode and you configured the traffic meter to disconnect and disable the Internet connection after the traffic limit is reached, you cannot access the Internet until you unblock the traffic meter.
Page 164: Change The System Mode To Access Point Mode Or To Router Mode
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the system mode to access point mode or to router mode By default, the access point functions in router mode, that is, the system mode is router mode. You can connect the access point to a router, switch, or hub in your network and change the system mode to access point mode.
Page 165 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Advanced Setup > Router / AP / Bridge Mode. The Router / AP / Bridge Mode page displays. 5. Specify the system mode by doing one of the following: •...
Page 166: Disable Led Blinking Or Turn Off Leds
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Disable LED blinking or turn off LEDs The LEDs on the top panel of the access point indicate activities and behavior. By default, the Internet LED, LAN LED, and WiFi LED blink when the access point detects data traffic.
Page 167: Chapter 9 Dynamic Dns [Router Mode]
Dynamic DNS [Router Mode] If the access point is in router mode, with Dynamic DNS (DDNS), you can use the Internet and a domain name to access a storage device that is attached to the access point when you are not in your office or home. If you know the IP address of the access point (and the IP address did not change), you can also access the storage device by using the IP address.
Page 168: About Dynamic Dns [Router Mode]
Internet. Set up a new Dynamic DNS account [router mode] NETGEAR offers you the opportunity to set up and register for a free Dynamic DNS account. To set up Dynamic DNS and register for a free NETGEAR account: 1.
Page 169: Use An Existing Dynamic Dns Account [Router Mode]
Use an existing Dynamic DNS account [router mode] If you already created a Dynamic DNS (DDNS) account with NETGEAR, No-IP, or Dyn, you can set up the access point to use your account. To set up DDNS if you already created an account: 1.
Page 170 • For a No-IP or Dyn account, in the User Name field, enter the user name for your account. • For a NETGEAR account, in the Email field, enter the email address for your account. 10. In the Password field, enter the password for your DDNS account.
Page 171: Change The Dynamic Dns Account Settings [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the Dynamic DNS account settings [router mode] You can change the settings for your Dynamic DNS (DDNS) account. To your DDNS account settings: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 172: Chapter 10 Vpn Client [Router Mode]
VPN Client [Router Mode] If the access point is in router mode, you can use it as a VPN client (as opposed to a VPN server) to let devices on the access point’s network securely access an external network using virtual private networking (VPN). This chapter describes how to set up the access point as a VPN client and use VPN access.
Page 173: About Setting Up The Access Point As A Vpn Client [Router Mode].173
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 About setting up the access point as a VPN client [router mode] In addition to using a virtual private network (VPN) to securely access your own network over the Internet when you are not home (see VPN Server and Service with OpenVPN [Router Mode] on page 177), you can also set up the access point as a VPN client to let devices on the access point’s network securely access an external network, while...
Page 174: Enable The Vpn Client In The Access Point And Connect To A Vpn Server [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable the VPN client in the access point and connect to a VPN server [router mode] The access point comes with a commercial VPN service provider (HideMyAss) predefined. To use the VPN client feature in the access point, you need a license from the HideMyAss server provider.
Page 175 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 c. Follow the instructions on the web page. d. When you obtain a license, save your user name and password for the VPN service. For more information about VPN service, click the Help Center button.
Page 176: Disconnect The Access Point From The Vpn Server [Router Mode].176
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Disconnect the access point from the VPN server [router mode] To disconnect the router from the VPN server and terminate the VPN connection: 1. Launch a web browser from a computer or mobile device that is connected to the access point network.
Page 177: Chapter 11 Vpn Server And Service With Openvpn [Router Mode]
VPN Server and Service with OpenVPN [Router Mode] If the access point is in router mode, you can use OpenVPN software to set up VPN connections and remotely access an office or site at which the access point is installed. In such a situation, the access point functions as a VPN server.
Page 178: Enable And Configure Openvpn And Vpn Client Access On The Access Point [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable and configure OpenVPN and VPN client access on the access point [router mode] If the access point is in router mode, you can configure OpenVPN and VPN client access on the access point.
Page 179: Openvpn Client Utility And Vpn Configuration Files [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 We recommend that you use the default TUN mode and TAP mode settings. However, if you know that you need other settings, you can change the TUN mode and TAP mode settings by doing the following: •...
Page 180: Install Openvpn On A Windows-Based Computer [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 files on on their computer or mobile device. A remote client can install this software on a Windows computer, Mac computer, iOS device, and Android device. Install OpenVPN on a Windows-based computer [router mode] To download and install the OpenVPN client utility and the access point’s VPN...
Page 181: Install Openvpn On A Mac [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. Modify the VPN interface name to NETGEAR-VPN by doing the following: a. In Windows, open Network Connection or Network and Sharing Center. The network connection information displays. b. In the local area connection list, find the local area connection with the device name TAP-Windows Adapter.
Page 182: Install Openvpn On An Ios Device [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays. 6. Make sure that the Enable VPN Service check box is selected.
Page 183: Install Openvpn On An Android Device [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays. 6. Make sure that the Enable VPN Service check box is selected. For more information, see Enable and configure OpenVPN and VPN client access on the access point [router mode] on page 178.
Page 184: About Setting Up An Openvpn Connection [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 5. Select ADVANCED > Advanced Setup > VPN Service. The VPN Service page displays.
Page 185: About Vpn Access To Your Network Or Internet Service At Your Office Or Home [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the access point does not use a static WAN IP address, you can use a DDNS service for the access point and register for an account with a host name (also referred to as a domain name).
Page 186: Use A Vpn Tunnel To Remotely Access Your Internet Service [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Use a VPN tunnel to remotely access your Internet service [router mode] Before you leave the location with your Internet service (for example, your office or home), make sure that you do the following: •...
Page 187: Chapter 12 Advanced Wifi And Radio Features
Advanced WiFi and Radio Features This chapter describes how you can manage the advanced WiFi and radio features of the access point. For information about the basic WiFi and radio settings, see Basic WiFi and Radio Features on page 58. Tip: If you want to change the settings of the access point’s WiFi network, use a wired connection to avoid being disconnected when the new WiFi settings take effect.
Page 188: Change The Region Of Operation
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Change the region of operation You can change the region of operation, which is region in which you operate the access point. For some countries such as North America, you cannot change the region because it is preset.
Page 189: Manage 802.11Ax And Enable Or Disable Ofdma For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Manage 802.11ax and enable or disable OFDMA for a radio If 802.11ax (11AX) WiFi is enabled (which it is by default), you can enable Orthogonal Frequency-Division Multiple-Access (OFDMA) for each radio band independently. By default, OFDMA is disabled on both radio bands, even when 11AX WiFi is enabled.
Page 190: Enable Or Disable Smart Connect For The Access Point
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > Wireless Settings. The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page. (As you scroll down on the page, the page name changes.)
Page 191 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the smart connect feature is enabled, in addition to the SSID and network key, the following WiFi settings apply to both radios simultaneously, which means that you cannot configure these settings for each radio individually: •...
Page 192: Enable Or Disable 20/40 Mhz Coexistence For The 2.4 Ghz Radio.192
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio 20/40 coexistence allows a 20 MHz and 40 MHz channel width to be supported simultaneously. By default, 20/40 MHz coexistence is enabled on the 2.4 GHz radio to prevent interference between WiFi networks in your environment at the expense of the WiFi speed.
Page 193: Change The Channel For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. The 2.4 GHz radio restarts and WiFi clients might need to reconnect. Change the channel for a radio The available WiFi channels and frequencies depend on the region or country and the radio.
Page 194: Change The Wifi Throughput Mode For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. From the 2.4 GHz Channel or 5 GHz Channel menu, select a channel. For the 2.4 GHz radio, the default is Auto, which means that the radio automatically selects the most suitable channel. For the 5 GHz radio, the default channel depends on the region.
Page 195 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page. (As you scroll down on the page, the page name changes.) 5. From the Mode menu for a radio, select the WiFi throughput mode: •...
Page 196: Change The Transmission Output Power For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. Click the Apply button. Your settings are saved. The radio or radios restart and WiFi clients might need to reconnect. Change the transmission output power for a radio By default, the transmission output power of the access point is set at the maximum. If two or more access points are operating in the same area and on the same channel, interference can occur.
Page 197: Add A Wifi Schedule For A Radio
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 5. Do one of the following: • 2.4 GHz radio. To change the settings for the 2.4 GHz radio, scroll down to the Advanced Wireless Settings (2.4 GHz/b/g/n/ax) section. • 5 GHz radio. To change the settings for the 5 GHz radio, scroll down to the Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section.
Page 198 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 199: Enable Or Disable Mu-Mimo
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved, the Advanced Wireless Settings page displays again, and the new schedule shows in the table for the selected radio. 9. To enable a schedule immediately, do the following above the table, In the table, select the radio button for the schedule.
Page 200: Enable Or Disable Explicit Beamforming
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The local device password is the one that you specified. The local device password is case-sensitive. The BASIC Home page displays. 4. Select ADVANCED > Advanced Setup > Wireless Settings. The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page.
Page 201: Enable Or Disable Pmf
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 202: Set Up Access Point As A Wifi Bridge To Another Device
You can also connect the access point in router mode to the modem and use the other WAX204 access point, WiFi router or AP as a WiFi bridge (assuming that the WiFi router or AP is capable of functioning as a WiFi bridge).
Page 203 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: The Internet (WAN) and LAN ports of the WAX204 access point support gigabit speed. That means that speeds over 1 GB can be achieved only between the access point and its connected devices, but not for traffic to and from the Internet.
Page 204 7. Click the Setup bridge mode wireless settings button. The Wireless Settings pop-up window displays. 8. Enter the WiFi settings of the WAX204 access point, WiFi router, or AP that is connected to the modem (that is, the other device): a.
Page 205: Change The Cts/Rts Threshold And Preamble Mode For A Radio.205
(In general, these settings are intended for WiFi testing.) CAUTION: Do not change these settings unless directed by NETGEAR support or unless you are sure what the consequences are. Incorrect settings might disable the WiFi function of a radio unexpectedly.
Page 206 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED > Advanced Setup > Wireless Settings. The Wireless Settings page displays. The lower part of the page is called the Advanced Wireless Settings page. (As you scroll down on the page, the page name changes.)
Page 207: Chapter 13 Port Forwarding And Port Triggering [Router Mode]
Port Forwarding and Port Triggering [Router Mode] As an advanced function of the access point firewall, you can use port forwarding and port triggering to set up port traffic rules for Internet services and applications. These rules apply specifically to ports. You need networking knowledge to set up port traffic rules.
Page 208: Port Forwarding To A Local Server For Services And Applications [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Port forwarding to a local server for services and applications [router mode] If the access point is in router mode, and if a server is part of your network, you can allow certain types of incoming traffic to reach the server.
Page 209: Add A Port Forwarding Rule For A Custom Service Or Application [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 210 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27. A login window displays. If your browser does not display the login window but displays a security message and does not let you proceed, see Log in to the access point after initial setup on page 30.
Page 211: Change A Port Forwarding Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 9. Click the Apply button. Your settings are saved. The rule is added to the table on the Port Forwarding / Port Triggering page. 10. To sort the table by internal IP addresses, click the Arrange By Internal IP button.
Page 212: Remove A Port Forwarding Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. The changed rule displays in the table on the Port Forwarding / Port Triggering page. Remove a port forwarding rule [router mode] If the access point is in router mode, you can remove a port forwarding rule that you no longer need.
Page 213: How The Access Point Implements A Port Forwarding Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 How the access point implements a port forwarding rule [router mode] The following sequence shows the effects of a port forwarding rule: 1. When you enter the URL www.example.com in your browser, the browser sends a web page request message with the following destination information: •...
Page 214: Port Triggering For Services And Applications [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Dynamic DNS makes it much easier to access a server from the Internet because you can enter the name in the web browser. Otherwise, you must know the IP address that the ISP assigned, which typically changes.
Page 215 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are not connected to the access point network but to the same network as the access point, enter the IP address that is assigned to the access point. If you do not know the IP address, see Find the IP address of the access point when you cannot use routerlogin.net on page 27.
Page 216: Change A Port Triggering Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 8. Set up the inbound connection by specifying the following settings: • Service Type. Select the protocol (TCP or UDP) that is associated with the inbound connection. If you are unsure, select TCP/UDP.
Page 217: Remove A Port Triggering Rule [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 7. Click the Edit Service button. The Port Triggering - Services page displays. 8. Change the settings. For information about the settings, see Add a port triggering rule [router mode] on page 214.
Page 218: Specify The Time-Out For Port Triggering [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 6. In the Port Triggering Portmap Table, select the radio button for the service or application name. 7. Click the Delete Service button. The rule is removed from the Port Triggering Portmap Table. If you want to reinstate the rule, you must redefine it.
Page 219: Disable Port Triggering [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Your settings are saved. Disable port triggering [router mode] If the access point is in router mode, port triggering is enabled by default. You can disable port triggering temporarily without removing any port triggering rules.
Page 220: Application Example: Port Triggering For Internet Relay Chat [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Application example: Port triggering for Internet Relay Chat [router mode] Some application servers, such as FTP and IRC servers, send replies to multiple port numbers. Using port triggering (if the access point is in router mode), you can tell the access point to open more incoming ports when a particular outgoing port starts a session.
Page 221: Chapter 14 Diagnostics And Troubleshooting
Diagnostics and Troubleshooting This chapter provides information to help you diagnose and solve problems you might experience with the access point. If you do not find the solution here, visit the NETGEAR support site at netgear.com/support for more product and contact information.
Page 222: Reboot The Access Point From The Local Browser Ui
Reboot the access point from the local browser UI You or NETGEAR technical support can reboot the access point from its local browser UI, either locally or remotely, for example, if the access point seems to be unstable or is not operating normally.
Page 223: Quick Tips For Troubleshooting
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Quick tips for troubleshooting Many common problems can be resolved by following our tips for troubleshooting. Restart your access point network if in router mode If the access point is in router mode and you must restart your network, follow this sequence: 1.
Page 224: Check The Dhcp Network Settings Of Your Computer Or Mobile Device
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 the SSID, the access point’s default SSID is “NETGEARXXXXXX”, where XXXXXX represents the last six characters of the access point’s MAC address, as printed on the access point label. If you did not change the passphrase (also referred to as network key or WiFi password), the unique default passphrase is also printed on the access point label.
Page 225: Standard Led Behavior When The Access Point Is Powered On
• Make sure that the power adapter is securely connected to your access point and securely connected to a working power outlet. • Make sure that you are using the power adapter that NETGEAR supplied for this product. Diagnostics and...
Page 226: Power Led Does Not Turn Green
Use the dual-function Reset button to return to factory defaults on page 138. If the problem occurs again, try one more time. If the error persists, a hardware problem might be the cause. Contact NETGEAR technical support at netgear.com/support/. Internet LED is solid amber or off [router mode] If the access point is in its default router mode and the Internet LEDs is solid amber, the access point attempted to get an Internet connection but failed.
Page 227: Internet Led Is Solid Amber Or Off [Access Point Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the access point is in its default router mode and the Internet LEDs is off, check the following: • Make sure that the Ethernet cable connection is secure at the yellow Internet port (not a LAN port) of the access point and at an Ethernet port on the modem.
Page 228: The Lan Led Is Off While A Device Is Connected
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 The LAN LED is off while a device is connected If the LAN LED remains off while a powered-on device is connected, check these items: • Make sure that the Ethernet cable connectors are securely plugged in at the access point and the network device.
Page 229: You Cannot Log In To The Access Point [Access Point Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 • Make sure that you are using the correct login information. Use the user name admin and your customized local device password, also referred to as the admin password. When you used the Setup Wizard for the initial log-in process on the access point, you customized the local device password.
Page 230 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 between the computer and the LAN port on the access point. (Do not connect your computer to the yellow Internet port on the access point.) Connect over WiFi. If you are using a WiFi-enabled computer or mobile device, check the WiFi connection between the computer or device and the access point.
Page 231: You Cannot Access The Internet [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Note: Some versions of Windows and Mac OS generate and assign an IP address if a device cannot reach a DHCP server. These autogenerated addresses are in the range of 169.254.x.x. If your IP address is in this range, check the connection from the device to the access point and reboot your device.
Page 232 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 4. Select ADVANCED. The ADVANCED Home page displays. 5. In the Internet Port pane, click the CONNECTION STATUS button. The Connection Status pop-up window displays. Note: The information that displays depends on the type of Internet connection. If...
Page 233: Check Or Manually Start The Pppoe Connection [Router Mode].233
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 address. You can configure your computer or mobile device manually with DNS addresses, as explained in your operating system documentation. • The access point might not be configured as the TCP/IP gateway on your computer ore mobile device.
Page 234: Troubleshoot Internet Browsing
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If the access point is not connected, click the Connect button. The access point continues to attempt to connect indefinitely. 7. If you cannot connect after several minutes, the access point might be set up with an incorrect PPPoE login name, password, or service name, or your ISP might be experiencing a provisioning problem.
Page 235: Troubleshoot The Wifi Connectivity
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Troubleshoot the WiFi connectivity If you are experiencing trouble connecting over WiFi to the access point, try to isolate the problem: • Make sure that the WiFi settings in your WiFi device and access point match exactly.
Page 236: Changes Are Not Saved
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Tip: If you want to change the WiFi settings of the access point’s network, use a wired connection to avoid being disconnected when the new WiFi settings take effect. If your WiFi device finds your network but the signal strength is weak, check these conditions: •...
Page 237: Test The Lan Path From A Windows-Based Computer To The Access Point
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Test the LAN path from a Windows-based computer to the access point You can ping the access point from a Windows-based computer to verify that the path to your access point is set up correctly. You can do with a WiFi or wired connection to the access point, which can be in router mode or access point mode.
Page 238: Test The Path From A Windows-Based Computer To A Remote Device [Router Mode]
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Test the path from a Windows-based computer to a remote device [router mode] If the access point is in router mode, to test the path from a Windows-based computer that is connected to the access point to a remote device: 1.
Page 239: Appendix A Factory Default Settings And Technical Specifications
Factory Default Settings and Technical Specifications This appendix includes the following sections: • Factory default settings • Technical specifications...
Page 240: Factory Default Settings
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Factory default settings You can reset the access point to the factory default settings, which are shown in the following table. For more information about resetting the access point to its factory settings, see Factory default settings on page 138.
Page 241 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 4. WAX204 access point factory default settings (Continued) Feature Default Setting Country/region North America: United States Europe: Europe Other continents: Varies by region Channel 2.4 GHz: Auto. The available channels depend on the region.
Page 242: Technical Specifications
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 4. WAX204 access point factory default settings (Continued) Feature Default Setting Port forwarding and port Disabled in router mode (does not apply to access point mode) triggering Security Access control...
Page 243 WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Table 5. WAX204 access point specifications (Continued) Feature Description Storage temperature –4°F to 158°F (–20ºC to 70ºC) Storage humidity 5 to 95% maximum relative humidity, noncondensing WAN (Internet) One 10/100/1000BASE-T Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X)
Page 244: Appendix B Positioning And Wall-Mounting
Positioning and Wall-Mounting This appendix includes the following sections: • Position the access point • Wall-mount the access point...
Page 245: Position The Access Point
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 Position the access point Before you install the access point, consider how you will position the access point. The access point lets you access your network anywhere within the operating range of your WiFi network.
Page 246: Wall-Mount The Access Point
WiFi 6 AX1800 Dual Band Wireless Access Point WAX204 If you are using adjacent access points, consider to use different radio frequency channels to reduce interference (see Change the channel for a radio on page 193). Wall-mount the access point Wall-mounting holes are on the bottom of the access point.

NETGEAR WAX204 User Manual

Chapter 1 Hardware Overview

Chapter 2 Installation and Initial Log-In

Chapter 3 Manually Set up Internet Settings

Chapter 4 Basic Wifi and Radio Features

Chapter 5 Security, Firewall, and Access Rules

Chapter 6 Optimize Performance

Chapter 7 Network Settings

Chapter 8 Maintain and Monitor

Chapter 9 Dynamic DNS [Router Mode]

Chapter 10 VPN Client [Router Mode]

Chapter 11 VPN Server and Service with Openvpn [Router Mode]

Chapter 12 Advanced Wifi and Radio Features

Chapter 13 Port Forwarding and Port Triggering [Router Mode]

Chapter 14 Diagnostics and Troubleshooting

Appendix A Factory Default Settings and Technical Specifications

Appendix B Positioning and Wall-Mounting

Quick Links

Troubleshooting

Related Manuals for NETGEAR WAX204

Summary of Contents for NETGEAR WAX204