Page 1 User Manual Insight Managed WiFi 6 AX5400 Access Point WAX628 NETGEAR, Inc. September 2022 350 E. Plumeria Drive 202-12625-01 San Jose, CA 95134, USA...
Page 2 See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
Page 3: Table Of Contents
Contents Chapter 1 Introduction Additional documentation..............9 About the local browser user interface and NETGEAR Insight..9 Chapter 2 Hardware Overview Unpack the access point..............11 Top panel with LEDs................11 Hardware interfaces................13 Access point label................14 Safety instructions and warnings for an indoor access point..16...
Page 4 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network..................51 Connect the access point as an extender to a root access point using the Insight app..................51 Chapter 5 Manage the Basic WiFi Features for a WiFi network Set up an open or secure WiFi network..........57...
Page 5 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Manually set up a MAC access control List.......116 Import an existing MAC access control list......119 Manage neighbor AP detection.............122 Enable neighbor access point detection and move access points to the Known AP List..............123 Import an existing neighbor access point list in the Known AP List....................125...
Page 6 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Return the access point to its factory default settings....169 Use the Reset button to reset the access point......169 Use the local browser UI to reset the access point....170 Enable SNMP and manage the SNMP settings......171 Manage the LEDs................173...
Page 7 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Check the Internet speed..............235 Quick tips for WiFi troubleshooting..........236 Troubleshoot with the LEDs............237 Power/Cloud LED remains off............238 Power/Cloud LED remains solid amber........238 Power/Cloud LED is blinking amber slowly, continuously..239 The access point functions as a PoE PD and the Power/Cloud LED remains solid amber............239...
Page 8: Chapter 1 Introduction
Model WAX628 ships without a power adapter, and model WAX628PA ships with a power adapter. If you ordered model WAX628 but prefer to use the access point without a PoE+ connection, you can order a power adapter separately.
Page 9: Additional Documentation
• netgear.com/support/product/insight.aspx • kb.netgear.com/000061848 If you install the access point as a NETGEAR Insight managed device, the settings for features that you can manage through the Insight Cloud Portal and Insight app are masked out in the local browser UI. However, using the local browser UI, you can still manage the settings for certain features that might not yet be supported in Insight.
Page 10: Chapter 2 Hardware Overview
Hardware Overview The NETGEAR Insight Managed WiFi 6 AX5400 Access Point Model WAX628 is an indoor access point that supports the 2.4 GHz and 5 GHz WiFi bands. The chapter contains the following sections: • Unpack the access point • Top panel with LEDs •...
Page 11: Unpack The Access Point
Note: Model WAX628 ships without a power adapter. Model WAX628PA ships with a power adapter (the type of power adapter varies by region). If you ordered model WAX628 but prefer to use the access point without a PoE+ connection, you can order a power adapter separately.
Page 12 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 1. LED descriptions LED Icon Color Description Power/Cloud LED Solid amber initially and then blinking amber slowly: The access point is starting or in the process of getting an IP address.
Page 13: Hardware Interfaces
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 1. LED descriptions (Continued) LED Icon Color Description 2.4 GHz WLAN LED Solid green: The 2.4 GHz WiFi radio is on but no clients are connected. Solid blue: One or more WLAN clients are connected to the 2.4 GHz WiFi radio.
Page 14: Access Point Label
Reset button for 10 seconds or longer. Note: If you added the access point to a NETGEAR Insight network location, you must first use the Insight Cloud Portal or Insight app to remove the access point from your Insight network location before the factory default settings function of the Reset button is available.
Page 15 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Figure 3. Access point label location Figure 4. Access point label Hardware Overview User Manual...
Page 16: Safety Instructions And Warnings For An Indoor Access Point
Before connecting the product to outdoor cables or wired outdoor devices, see https://kb.netgear.com/000057103 for additional safety and warranty information. Failure to follow these guidelines can result in damage to your NETGEAR product, which might not be covered by NETGEAR’s warranty, to the extent permissible by applicable law.
Page 17 PoE. If your product uses a power adapter: If you were not provided with a power adapter, contact your local NETGEAR reseller. The power adapter must be rated for the product and for the voltage and current marked on the product electrical ratings label.
Page 18 Install the Access Point in Your Network and Access It for Initial Configuration This chapter describes how you can install and access the access point in your network. The chapter contains the following sections: • Position your access point for best performance •...
Page 19: Position Your Access Point For Best Performance
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Position your access point for best performance Before you install and mount your access point as described in the installation guide or an appendix to this manual, consider how you can position the access point for best performance.
Page 20: Set Up And Connect The Access Point To Your Network
If connected to 2.5 Gbps equipment, the access point LAN PoE+ port supports Ethernet speeds up to 2.5 Gbps within your LAN. The following figure show a NETGEAR MS510TXUP switch, which supports speeds of 2.5 Gbps and higher, as well as PoE+. If your Internet connection, modem, router, and switch support a speed of 2.5 Gbps, the...
Page 21: Connect To The Access Point For Initial Configuration
For remote management of the access point (and of multiple devices and networks), you can use the NETGEAR Insight Cloud Portal on a computer or tablet or the NETGEAR Insight app on an iOS or Android mobile device. If you use the access point in a standalone configuration, you can use the local browser UI on a computer or tablet.
Page 22: Connect Over The Internet Using The Netgear Insight Cloud Portal
Portal The Insight Cloud Portal is available for Insight Premium or Insight Pro subscribers. To use the NETGEAR Insight Cloud Portal to configure and manage the access point, the access point must already be connected to the Internet. For more information about the Insight Cloud Portal, visit the following pages: •...
Page 23 You can use the Insight Cloud Portal or Insight app to configure and manage the access point. Note: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight Cloud Portal or Insight app, the admin password for the access point changes.
Page 24: Connect Over Wifi Using The Netgear Insight App
The NETGEAR Insight app is available for Insight Premium and Insight Pro subscribers. You can install the NETGEAR Insight app on an iOS or Android mobile device and set up the access point (and perform many other tasks as well).
Page 25 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 6. Add a new network location where you want to add the access point by tapping the Next button, and then tapping OK. You can also select an existing network location.
Page 26: Connect Over Wifi To The Local Browser Ui For Initial Configuration
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Note: If you add the access point to a NETGEAR Insight network location and manage the access point through the Insight Cloud Portal or Insight app, the admin password for the access point changes. That is, the Insight network password for that location replaces the admin password.
Page 27 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 exception for the security warning. For more information, see What to do if you get a browser security warning on page 42. 3. Enter the access point user name and default password.
Page 28 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Page 29 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the setup SSID for regular operation. The setup SSID is for initial setup only.
Page 30 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network.
Page 31: Connect Over The Lan To The Local Browser Ui For Initial Configuration
Network from the Navigation pane, right-click the access point device icon, and select Properties to display the IP address. Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 32 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in. Instead, a login window displays.
Page 33 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description DHCP Client By default, the DHCP client of the access point allows the access point to receive an IP address from a DHCP server (or router that functions as a DHCP server) in your network.
Page 34 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 wireless encryption (OWE). The encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is automatically set to mandatory. Allow Clients to Authenticate using Legacy Open (OWE Transition Mode): If you select the Enhanced Open check box, the Allow Clients to Authenticate using Legacy Open (OWE Transition Mode) check box displays.
Page 35: Configure The Access Point Offline Using A Directly Connected Computer
DHCP server to discover the IP address of the access point in your network. Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 36 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 to the access point over its default IP address so that you can configure it offline. After you complete the configuration, you can bring the access point online. Note: Because the access point is not connected to a PoE+ switch, you can use this configuration method only if you have a power adapter for the access point.
Page 37 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The user name is admin. The default password is password. The user name and password are case-sensitive. 6. Select the Web-browser radio button. Note: After you save the basic settings that are shown on the page, the Day Zero Easy Setup page no longer displays when you log in.
Page 38 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Setting Description Country/Region From the menu, select the country and region in which the access point is operating. Note: Make sure that the country is set to the location where the device is operating. You are responsible for complying with the local, regional, and national regulations that are set for channels, power levels, and frequency ranges.
Page 39 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description Confirm New Enter exactly the same password that you entered in the AP Login New Password field. Password SSID You cannot use the setup SSID for regular operation. The setup SSID is for initial setup only.
Page 40 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • WPA3 Personal: This option allows only WiFi clients that support WPA3 to connect to the SSID. Select this option if all WiFi clients are capable of supporting WPA3. This option uses SAE encryption. In the Passphrase field, enter a new passphrase for the WiFi network.
Page 41: Log In To The Access Point After Initial Setup
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 42: What To Do If You Get A Browser Security Warning
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The Dashboard page displays various panes that let you see the status of your access point at a glance. For more information about the Dashboard page and its various panes, see Monitor the Access Point and the Network on page 176.
Page 43 Insight app are available for Insight Premium and Insight Pro subscribers. Note: To set up the extender access point in a NETGEAR Insight Instant Mesh WiFi network with a connection to a root access point, you must use either the NETGEAR Insight Cloud Portal or Insight app.
Page 44: Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 What are a root access point and an extender access point? The access point can function in an Insight Instant Mesh WiFi network as a root access point or and extender access point: •...
Page 45: What Is An Insight Instant Mesh Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Number or Icon and Description A network switch. A network router that is connected to the Internet. Broadcast in the 2.4 GHz radio band. Broadcast in the 5 GHz radio band.
Page 46: Requirements For Placing An Extender Access Point In A Mesh Wifi Network
25 feet (7.5 m), in a line of sight with minimal obstacles from the closest root access point. • You must use the NETGEAR Insight Cloud Portal or Insight app to install the extender access point in the existing WiFi network.
Page 47: Connect The Access Point As An Extender To A Root Access Point Using The Cloud Portal
WAX628, WAX630, or WAX630E models and WAC540 or WAC564 models, the WAC540 and WAC564 models must run firmware version 9.5 or a later version. In the near future, more NETGEAR models might be added to the previous list. Connect the access point as an extender to...
Page 48 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Figure 7. Connect the extender access point to a wired root access point Number or Icon and Description A root access point that is connected over Ethernet to a network switch.
Page 49 Internet. You can also use an optional power adapter. 6. Access the Insight Cloud Portal by visiting insight.netgear.com, enter your NETGEAR email address and password, and click the NETGEAR Sign In button.
Page 50 The extender access point and root access point cannot connect on page 242. For information about accessing, managing, and monitoring the extender access point with the NETGEAR Insight Cloud Portal and Insight app, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
Page 51: Install The Netgear Insight App To Manage An Insight Instant Mesh Wifi Network
Insight app You can use the NETGEAR Insight app to connect the access point as an extender to a root access point. The root access point must be set up with a wired connection to a...
Page 52 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 router or Internet gateway so that the root access point can provide Internet connectivity to the extender access point. Figure 8. Connect the extender access point to a wired root access point Number or Icon and Description A root access point that is connected over Ethernet to a network switch.
Page 53 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 To use the NETGEAR Insight app to connect the extender access point to a root access point in an existing WiFi network: 1. Make sure that the mesh mode for the Insight network location is set to Auto.
Page 54 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 9. Do one of the following to add the extender access point to the Insight network location: • Automatically detected: If the extender access point is automatically detected and listed in the Insight Manageable Devices section, tap the icon for the extender access point, and then tap the ADD DEVICE button.
Page 55 The extender access point and root access point cannot connect on page 242. For information about accessing, managing, and monitoring the extender access point with the NETGEAR Insight Cloud Portal and Insight app, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
Page 56: Chapter 5 Manage The Basic Wifi Features For A Wifi Network
Manage the Basic WiFi Features for a WiFi network The access point can support eight WiFi networks, each with its own unique WiFi settings, including WiFi security. This chapter describes how you can manage the basic WiFi features for a WiFi network. The chapter includes the following sections: •...
Page 57: Set Up An Open Or Secure Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 58 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Click the + button to the left of Add SSID. The previous figure shows SSID2 as an example. 6. Specify the WiFi network name (SSID), select whether the SSID is broadcast, and specify the VLAN ID as described in the following table.
Page 59 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 7. Specify the WiFi security by selecting an option from the Authentication menu and, if applicable, by specifying a passphrase in the Passphrase field or selecting an option from the Encryption menu: •...
Page 60 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • WPA2 Enterprise: This enterprise-level security uses RADIUS for centralized Authentication, Authorization, and Accounting (AAA) management. For WPA2 Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS servers on page 128).
Page 61 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 servers on page 128). If you select this option, 802.11w (PMF) is automatically set to mandatory (see Step 8). When you select WPA3 Enterprise security, the encryption is automatically set to GCMP256, which is a 256-bit encryption protocol.
Page 62 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 10. Optionally, disable the WiFi broadcast or set up a WiFi activity schedule by selecting one of the following radio buttons: • Always ON: When you set up an SSID, you are creating a new VAP. By default, the new VAP is enabled and the Always ON radio button is selected.
Page 63 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 network, access points and clients can send neighbor reports, beacon reports, and link measurement reports to each other, allowing 802.11k-aware clients to automatically select the best access point for initial connection or for roaming.
Page 64 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 from 172.31.0.2 to 172.31.3.254. The IP address of the default DNS server for the WLAN is 8.8.8.8. To change the default range for the DHCP address pool, the default DNS server, or both, do the following:123 a.
Page 65 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 When a device tries to associate with the WiFi network and negotiates an IP address, the access point converts the broadcast DHCP offer message that it receives from the DHCP server to a unicast message, and forwards it to the device. This is the default option (that is, the Enable radio button is selected).
Page 66: View Or Change The Settings Of A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 67: Remove A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 68: Hide Or Broadcast The Ssid For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 69: Change The Vlan Id For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the...
Page 70: Change The Authentication And Encryption For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic.
Page 71 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 72 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 and clients that do not. For clients that do not support the WiFi open enhanced feature, traffic is not encrypted. If you clear the Allow Devices to Connect with Open check box, the WiFi network can only accept clients that support the WiFi enhanced open feature.
Page 73 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • WPA3 Personal: This option is the most secure personal authentication option. WPA3 uses SAE encryption and enables only WiFi devices that support WPA3 to join the VAP. If you select this option, 802.11w (PMF) is automatically set to mandatory (see Enable or disable PMF for a WiFi network on page 74).
Page 74: Enable Or Disable Pmf For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 75: Set Up Multi Psk For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Click the > button to the left of the SSID. The settings for the selected SSID display. 6. Under 802.11w (PMF), select one of the following radio buttons: • Mandatory: Requires devices to use PMF. Devices that do not support PMF cannot connect to the WiFi network.
Page 76 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Note: Multi PSK is supported only if the WiFi security is WPA2 Personal or WPA2/WPA Personal. To configure Multi PSK on the default WiFi network (displayed as SSID1 in the local bowser UI), which is the WiFi network that you defined when you initially connected to the access point, you must first change the WiFi security to WPA2 Personal or WPA2/WPA Personal.
Page 77 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 78: Disable Or Enable A Wifi Network Or Set Up A Wifi Activity Schedule
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 8. Configure the Multi PSK settings: • VLAN ID: The VLAN ID, which is the VLAN that a WiFi client becomes a member • Passphrase: The unique passphrase (WiFi password) that a user must enter to let the WiFi client connect to the associated VLAN of the WiFi network.
Page 79 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 80: Enable Or Disable Band Steering With 802.11K Rrm And 802.11V Wifi Network Management
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the...
Page 81 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic.
Page 82: Chapter 6 Manage The Basic Radio Features
Manage the Basic Radio Features This chapter describes how you can manage the basic radio features of the access point. For information about the advanced radio features, see Manage the Advanced Radio Features on page 218. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio.
Page 83: Manage The Basic Wifi Settings For The Radios
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 84 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > Wireless > Basic > Wireless Settings. The following descriptions apply to both radios, but you can specify the radio settings for the 2.4 GHz and 5 GHz radios individually.
Page 85 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Select one of the following wireless modes (WiFi modes) for the 5 GHz radio: 11ax: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to the access point. This is the default setting.
Page 86: Turn A Radio On Or Off
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • Channel: From the menu, select the WiFi channel for the radio. The available WiFi channels and frequencies depend on the country that you selected for the access point and on the radio. The default is Auto, which enables a radio to automatically select the most suitable channel.
Page 87: Change The Wifi Mode For A Radio
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 88 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 89: Change The Channel Width For A Radio
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 6. Click the Apply button. A warning pop-up window displays. 7. Click the OK button. The pop-up window closes and your settings are saved. The radio or radios restart and WiFi clients might need to reconnect.
Page 90: Change The Guard Interval For A Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 91 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 92: Change The Output Power For A Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 93: Change The Channel For A Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 94: Manage Quality Of Service For A Wifi Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 95 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Enable or disable the following features for the radio by selecting the applicable Enable or Disable radio buttons: • Wi-Fi Multimedia (WMM): WiFi Multimedia (WMM) is a subset of the 802.11e standard.
Page 96: Chapter 7 Set Up And Manage A Captive Portal
Set Up and Manage a Captive Portal This chapter describes how you can set up and manage a captive portal on the access point. A captive portal is a web page that users see when they attempt to connect to a WiFi network.
Page 97: Set Up A Click-Through Captive Portal For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 98 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 8. Specify the click-through settings as described in the following table. Setting Description Session Timeout (in Enter the number of minutes from 1 to 1440 after which a WiFi session is terminated min) and a user must log in again.
Page 99 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description JPEG/JPG Image To customize the image that is displayed on the captive portal login page, click the (Max 500 KB) Browse button and navigate to and select an image. If you do not customize the image, the default image displays on the captive portal login page.
Page 100: Set Up An External Captive Portal For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 101 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 8. Click the External Captive Portal radio button. 9. In the Splash Page URL field, enter the URL that is provided by the vendor. This URL redirects a user to the splash page on the website that hosts the captive portal.
Page 102 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 server. Specify the following settings for each RADIUS server, as directed by the vendor: IPv4 Address: Enter the IP address of the server. The IP address is provided by the vendor.
Page 103: Register And Configure Facebook Wi-Fi For The Access Point
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 104 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 6. Click the Apply button. Your settings are saved and the Add Page button displays. 7. Click the Add Page button. A pop-up window displays. 8. Click the OK button. The pop-up window closes.
Page 105: Set Up A Facebook Wi-Fi Captive Portal For A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 106: Unregister The Access Point From Facebook Wi-Fi
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the...
Page 107 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24. The Dashboard page displays. 4. Select Management > Configuration > Wireless > Basic > Facebook Wi-Fi.
Page 108: Chapter 8 Manage Access And Security
Manage Access and Security This chapter describes how you can manage access and security features and user accounts. The chapter includes the following sections: • Block specific URLs and keywords for Internet access • Manage user accounts • Manage local MAC access control lists •...
Page 109: Block Specific Urls And Keywords For Internet Access
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 110 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Select the Enable radio button. 6. Compose the blacklist in the following ways: • Blocked URLs: To add a URL to the blacklist, type or copy the URL in the upper field (to the left of the upper Add button) and click the upper Add button.
Page 111: Manage User Accounts
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 112: Change The Time-Out Period For A User Session
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Click the add user account icon. Additional fields and a menu display. 6. Specify the settings for the new user account: • User Name: Enter a user name. • Password: Enter a password between 8 and 64 characters in length. The password must contain at least one uppercase letter, one lowercase letter, and one number.
Page 113: Change The Settings For A User Account
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 114: Remove A User Account
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 115: Manage Local Mac Access Control Lists
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 116: Manually Set Up A Mac Access Control List
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 An ACL takes effect only after you apply it to a WiFi network. For information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 211.
Page 117 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 118 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you select the Allow radio button, a WiFi device for which you place the MAC address in the ACL is allowed access to the WiFi network, but all other WiFi devices are denied access to the WiFi network.
Page 119: Import An Existing Mac Access Control List
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 9. Click the Apply button. Your settings are saved. For more information about applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page 211.
Page 120 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 121 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you select the Deny radio button, a WiFi device for which you import the MAC address into the ACL is denied access to the WiFi network, but all other WiFi devices are allowed access to the WiFi network.
Page 122: Manage Neighbor Ap Detection
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 c. To remove a MAC address from the Untrusted Stations table, select the MAC address and click the Remove button. You can search the Untrusted Stations table. When you remove a device from the Untrusted Stations table, after the access point redetects the device, the device is once again placed in the Available Stations table.
Page 123: Enable Neighbor Access Point Detection And Move Access Points To The Known Ap List
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 124 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Your settings are saved. Neighbor AP detection is now enabled. 8. From the Detection Policy menu, select the scan method: • Mild: The access point scans for neighbor access points every hour. This is the default setting.
Page 125: Import An Existing Neighbor Access Point List In The Known Ap List
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 9. To view detected neighbor access points and move them from the Unknown AP List to the Known AP List, do the following: a. Click the Unknown AP List tab. b. If no access points display, click the Refresh button.
Page 126 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 127 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Click the > button to the left of the radio band. 6. To download a sample of an AP list in the format that is required for importing in the Known AP List, click the Download Sample link.
Page 128: Set Up Radius Servers
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the...
Page 129 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24. The Dashboard page displays. 4. Select Management > Configuration > Security > RADIUS Settings.
Page 130: Enable L2 Security
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 131 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 6. Click the Apply button. Your settings are saved. Manage Access and Security User Manual...
Page 132: Chapter 9 Manage The Local Area Network And Ip Settings
Manage the Local Area Network and IP Settings This chapter describes how you can manage the local area network (LAN) and IP settings of the access point. The chapter includes the following sections: • Disable the DHCP client and specify a fixed IP address •...
Page 133: Disable The Dhcp Client And Specify A Fixed Ip Address
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 134: Enable The Dhcp Client
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Select the Disable radio button. The fields are now unmasked. 6. Specify the settings that are described in the following table. Setting Description IP Address IP address in the range that is used by your LAN (usually 255.255.255.0).
Page 135 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 136: Set The 802.1Q Vlan And Management Vlan
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 137 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > IP > LAN. 5. To change the 802.1Q VLAN, either clear or select the Untagged VLAN check box: • Untagged VLAN: By default, the Untagged VLAN check box is selected. The access point sends untagged frames from its Ethernet interface.
Page 138: Set An Existing Domain Name
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 139: Enable Or Disable Spanning Tree Protocol
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > IP > LAN. 5. In the Fully Qualified Domain Name field, specify the FQDN. 6. Click the Apply button. Your settings are saved. The access point attempts to resolve the FDQN to an IP address.
Page 140: Enable Or Disable The Network Integrity Check Function
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 141: Enable Or Disable Igmp Snooping
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 142: Enable Or Disable Ethernet Lldp
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 143: Enable Or Disable Upnp
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 144: Manage The Link Aggregation Capability
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The UPnP page displays. 5. Select a radio button: • Enable: UPnP is enabled. This is the default setting. • Disable: UPnP is disabled. 6. Click the Apply button. Your settings are saved.
Page 145: Enable Link Aggregation For The Lan 2 Port
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 146: Disable Link Aggregation For The Lan 2 Port
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 147 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 7. Click the OK button. The pop-up window closes and your settings are saved. The link aggregation capability is disabled. Manage the Local Area Network User Manual and IP Settings...
Page 148: Chapter 10 Manage And Maintain The Access Point
This chapter describes how you can manage and maintain the access point. The chapter includes the following sections: • Change the management mode to NETGEAR Insight or Web-browser • Change the country or region of operation • Change the admin user account password •...
Page 149: Change The Management Mode To Netgear Insight Or Web-Browser
NETGEAR Insight app is installed. The NETGEAR Insight mode is the default setting. In this mode, you can connect to the access point over the local browser UI, but only a basic and limited local browser UI is available.
Page 150 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 151: Change The Country Or Region Of Operation
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 152: Change The Admin User Account Password
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 153: Change The System Name
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 154: Specify A Custom Ntp Server
Your settings are saved. Specify a custom NTP server By default, the access point receives its time from a default NETGEAR Network Time Protocol (NTP) server, but you can also specify a custom NTP server. To specify a custom NTP server: 1.
Page 155: Set The Time Zone
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > System > Basic > Time. By default, the Enable radio button is selected and the access point receives its time from a default NETGEAR NTP server.
Page 156: Manage The Syslog Settings
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 157: Manage The Firmware Of The Access Point
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 158: Let The Access Point Check For New Firmware And Update The Firmware
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 159: Manually Download Firmware And Update The Access Point
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The access point detects new firmware if any is available and displays the latest version available. 5. To read the release notes if any are available, click the Release Notes link.
Page 160 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 161: Revert To The Backup Firmware
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 162: Use An Sftp Server To Update The Access Point
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The Dashboard page displays. 4. Select Management > Maintenance > Upgrade > Firmware Upgrade. The Firmware Upgrade page displays. The page shows both the current firmware version and the backup firmware version.
Page 163 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 164: Manage The Configuration File Of The Access Point
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 165: Restore The Access Point Configuration
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 6. Enter a password to protect the backup file, and click the Continue button. You can either use your existing password (the one that you use to log in to the access point) or enter a unique password.
Page 166 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 167: Reboot The Access Point From The Local Browser Ui
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 168: Schedule The Access Point To Reboot
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 169: Return The Access Point To Its Factory Default Settings
IP address before you reset the access point to factory default settings. Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 170: Use The Local Browser Ui To Reset The Access Point
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 To reset the access point to factory default settings: 1. On the bottom panel of the access point, locate the recessed Reset button. 2. Using a straightened paper clip, press and hold the Reset button for at least 10 seconds.
Page 171: Enable Snmp And Manage The Snmp Settings
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 172 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 173: Manage The Leds
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 174: Manage The Energy Efficiency Mode
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Select or clear one of the following radio buttons: • Enable All LEDs: All LEDs are enabled. This is the default setting. • Disable All LEDs: All LEDs are disabled.
Page 175 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 176: Chapter 11 Monitor The Access Point And The Network
Monitor the Access Point and the Network This chapter describes how you can monitor the access point and the network. The chapter includes the following sections: • Display the access point Internet, IP, and system settings • Display the WiFi radio settings •...
Page 177: Display The Access Point Internet, Ip, And System Settings
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 178 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 For information about the radio settings, see Display the WiFi radio settings on page 181. • Connection Status Information pane: This pane is in the top, left corner of the Dashboard (if the page width on your device is sufficient; otherwise, it might be...
Page 179 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • IP Settings Information pane: This pane is in the center of the Dashboard page (if the page width on your device is sufficient; otherwise, it might be elsewhere) and displays the following: IP address of the access point and its DHCP status.
Page 180 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Power Source: The type of power source (PoE 802.3at or Power Adapter). Ethernet LLDP: The status of Ethernet LLDP feature (Enabled or Disabled). Country / Region: The country or region in which the access point operates or for which the access point is licensed.
Page 181: Display The Wifi Radio Settings
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 182 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • Channel width • Number of connected clients and maximum number of supported clients • WiFi traffic volume • Channel utilization 5. To view information about the other radio, click either the 2.4 GHz or 5 GHz tab.
Page 183 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Ethernet LLDP: The status of Ethernet LLDP feature (Enabled or Disabled). Country / Region: The country or region in which the access point operates or for which the access point is licensed.
Page 184: Display Unknown And Known Neighbor Access Points
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 185: Display Client Distribution, Connected Clients, And Client Trends.185
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 At the top of the page, for each radio band, the page displays the total number of unknown access points. For information about moving unknown access points to the Known AP list, see Enable neighbor access point detection and move access points to the Known AP List on page 123.
Page 186 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 187 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 8. To display trends about clients, scroll down to the Hours Trend pane. The Hours Trend pane shows a graph with the number of clients, the traffic in MBps, or the channel utilization over a period that you can select. (The previous figure shows the trend for the last 48 hours.) By default, the client information is selected...
Page 188 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The Detailed Client Information page displays and shows the following information: • MAC Address: The MAC address of the client. • IP Address: The IP address associated with the client. • Host Name: The host name of the client.
Page 189: View Wifi And Ethernet Traffic, Traffic And Arp Statistics, And Channel Utilization
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 190 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 By default, the Clients button is selected. 5. To view traffic information, do the following: a. Click the Traffic button. The graph shows the information for Ethernet (wired LAN) traffic, total WiFi traffic, WiFi traffic for the 2.4 GHz radio, and WiFi traffic for the 5 GHz radio.
Page 191 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 8. To view traffic statistics, select Management > Monitoring > Statistics. The page displays the network traffic statistics for both the WiFi and Ethernet interfaces of the access point since the access point started or rebooted. The page also displays the number of clients that are associated with each radio.
Page 192: View Or Download Tracked Urls
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 193 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Monitoring > URL Tracking. By default, the table shows the URLs that were accessed, each with the MAC address of the WiFi client that accessed the URL, the associated SSID, and the number of times that the WiFi client accessed the URL.
Page 194: View, Save, Download, Or Clear The Logs
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the...
Page 195 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24. The Dashboard page displays. 4. Select Management > Monitoring > Logs.
Page 196: View A Wifi Bridge Connection
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 197: View Alarms And Notifications
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 198 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 5. Click the alarm bell icon. The pop-up window shows the alarms (indicated by a red bell) and notifications (indicated by a blue bell) with a description and time. 6. To view more alarms and notification, scroll down in the pop-up window.
Page 199: Chapter 12 Set Up A Wifi Bridge
A WDS is not the same as a NETGEAR Insight Instant Mesh WiFi network, which requires a root access point (see Install the Access Point in an Insight Instant Mesh WiFi Network on page 43).
Page 200: Wifi Base Station, Wifi Repeater, And Wifi Bridge Requirements.200
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 WiFi base station, WiFi repeater, and WiFi bridge requirements If the access point is connected to the Internet over a wired connection, the access point can function as the WiFi base station for up to four other access points that function as WiFi repeaters.
Page 201: Set Up A Wifi Bridge Between Access Points
• All LAN devices (wired and WiFi computers) are configured to operate in the same LAN network address range as the access points. Note: If you are using the access point as the base station with a non-NETGEAR access point as a repeater, you might need to change more configuration settings. In particular, you might need to disable the DHCP server function on the non-NETGEAR access point that is the repeater.
Page 202 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 203 The WiFi network name of the network on which the WDS is established. The default Name (SSID) name is Netgear-WDS-x, in which x is the number of the WDS (1, 2, 3, or 4). Note: The WiFi network name must be identical on the WiFi base station and the WiFi repeater.
Page 204: Chapter 13 Manage The Advanced Wifi Features For A Wifi Network
Manage the Advanced WiFi Features for a WiFi network This chapter describes how you can manage the advanced WiFi features for a WiFi network. For information about the basic WiFi features for a WiFi network, see Manage the Basic WiFi Features for a WiFi network on page 56. The chapter includes the following sections: •...
Page 205: Set Nat Mode Or Bridge Mode For Addressing And Traffic
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 206: Enable Or Disable Client Isolation For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 7. From the Addressing and Traffic menu, select the addressing and traffic mode: • Bridge: The WiFi clients receive their IP addresses from the DHCP server in the same network as the access point. This is the default mode.
Page 207 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 208: Enable Or Disable Url Tracking For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 9. If the Allow access to devices listed below check box displays: To add network devices that are exempt from isolation so that clients are allowed to reach them, do the following: a.
Page 209: Change The Format Of The Dhcp Offer Messages In A Wifi Network
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 210 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 211: Select A Mac Acl For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Select a MAC ACL for a WiFi network After you set up one or more local MAC access control lists (ACLs, also referred to as access lists; see Manage local MAC access control lists on page 115), you can select an ACL for use with an SSID.
Page 212: Set Bandwidth Rate Limits For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 213 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 214: Configure Advanced Rate Selection For A Wifi Network
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Configure advanced rate selection for a WiFi network Advanced rate selection lets you improve the capacity of an individual WiFi network (as opposed to a radio, which affects all WiFi network on the radio) so that you can reach the optimal balance between the following components in the WiFi network: •...
Page 215 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 216 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > Wireless > Basic. The page that displays lets you select and add an SSID. 5. Click the > button to the left of the SSID.
Page 217 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 9. To set the density level for your environment, move the Density Level slider to 0, 1, 2, 3, or 4. As you move the slider, the selected density level is mapped to a corresponding WiFi mode, beacon rate, minimum legacy rate, and minimum MCS rate.
Page 218: Chapter 14 Manage The Advanced Radio Features
Manage the Advanced Radio Features This chapter describes how you can manage the advanced radio features of the access point. For information about the basic radio features, see Manage the Basic Radio Features on page 82. CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all WiFi networks that broadcast on the 2.4 GHz radio.
Page 219: Manage The Advanced Wifi Settings For The Radios
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 220 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > Wireless > Advanced. 5. Configure the settings as described in the following table. The descriptions in the table apply to both radios. You can specify the radio settings for the 2.4 GHz and 5 GHz radios individually, but the check box for the 802.11n 256...
Page 221 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description Beacon Interval Enter an interval between 100 ms and 300 ms for each beacon transmission, which (100-300) allows the radio to synchronize the WiFi network. The default is 100 ms.
Page 222: Manage The Maximum Number Of Clients For A Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 223: Manage The Broadcast And Multicast Settings For A Radio
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 224: Manage Load Balancing For The Radios
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > Wireless > Advanced > Wireless Settings. The Wireless Settings page displays. 5. To change the multicast and broadcast rate limiting settings, under Broadcast/Multicast Rate Limiting for the radio, take one of the following actions: •...
Page 225 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 226 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Select Management > Configuration > Wireless > Advanced > Load Balancing. 5. To globally enable load balancing for the radios, select the Load Balancing Mode Enable radio button. The page adjusts and displays a slider for each type of load balancing and each radio.
Page 227: Manage Sticky Clients
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • Based on Channel Receive Signal Strength: For each radio, move the associated slider to specify the minimum required RSSI value for an individual client, below which the radio does not accept the client association.
Page 228: Manage The Arp Proxy
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 229 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 230: Chapter 15 Diagnostics And Troubleshooting
Diagnostics and Troubleshooting This chapter describes how you can capture WiFi packets and troubleshoot the access point and network. The chapter includes the following sections: • Perform a ping test • Capture WiFi and Ethernet packets • Check the Internet speed •...
Page 231: Perform A Ping Test
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 232: Capture Wifi And Ethernet Packets
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Setting Description Ping Count The number of pings that the access point must send. The default number is 16. Packet Size (in Bytes) The size of each ping packet. The default size is 64 bytes.
Page 233 The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 234 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 (Continued) Setting Description Promiscuous Capture To enable the access point to capture packets in promiscuous mode, select the Enable check box. By default, promiscuous mode is disabled. In promiscuous mode the radio or radios receive all traffic on the channel, including traffic that is not destined for the access point.
Page 235: Check The Internet Speed
The user name is admin. The password is the one that you specified. The user name and password are case-sensitive. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, enter the Insight network password for that location.
Page 236: Quick Tips For Wifi Troubleshooting
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Quick tips for WiFi troubleshooting If one or more WiFi networks do not function normally, consider to repower the access point: 1. Unplug the Ethernet cable from the access point to the network switch.
Page 237: Troubleshoot With The Leds
• The access point functions as a PoE PD and the Power/Cloud LED remains solid amber • Power/Cloud LED does not light blue in the NETGEAR Insight management mode • Power/Cloud LED does not stop blinking amber, green, and blue...
Page 238: Power/Cloud Led Remains Off
• Make sure that you are using the NETGEAR power adapter for this product. That is, do not use the NETGEAR power adapter for another NETGEAR product or a third-party power adapter.
Page 239: Power/Cloud Led Is Blinking Amber Slowly, Continuously
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Do the following: 1. Disconnect the access point from its power source, reconnect it, and wait several minutes to see if the startup procedure completes successfully. 2. If the startup procedure still does not complete successfully and the Power/Cloud LED remains solid amber after five minutes, use the Reset button to return the access point to its factory default settings.
Page 240: Power/Cloud Led Does Not Light Blue In The Netgear Insight Management Mode
If the access point functions in the Web-browser management mode, the Power/Cloud LED lights green. This is normal LED behavior. However, if the access point functions in the NETGEAR Insight management mode and the Power/Cloud LED does not light blue but remains green, the access point is not connected to the Insight cloud-based management platform.
Page 241: 2.4G Or 5G Wlan Led Is Off
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 being configured as an extender access point. For more information, see Connect the access point as an extender to a root access point using the Insight app on page 51. If the Power/Cloud LED does not stop blinking amber, green, and blue, the extender access point cannot connect.
Page 242: The Extender Access Point And Root Access Point Cannot Connect
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The extender access point and root access point cannot connect When you add the access point as an extender to an Insight network location that includes one or more root access points (see Connect the access point as an extender...
Page 243: Troubleshoot Wifi Connectivity For A Wifi Client Device
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 • Blinking amber, green, and blue: The extender access point is being configured as a managed device in the Insight Instant Mesh WiFi network. If the Power/Cloud LED does not stop blinking amber, green, and blue, see Power/Cloud LED does not stop blinking amber, green, and blue on page 240.
Page 244: Troubleshoot Internet Browsing
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Note: If the access point’s WiFi authentication and encryption is set to WPA3 Personal and the WiFi client device does support WPA3, make sure that the WiFi adapter device driver is updated to the latest version on the WiFi client device.
Page 245: You Cannot Log In To The Access Point Over A Lan Connection
IP address, use an IP scanner application to detect the IP address. Note: You can also use the NETGEAR Insight app to discover the IP address that is assigned to the access point. For more information, see Connect over WiFi using the NETGEAR Insight app on page 24.
Page 246: Changes Are Not Saved
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Changes are not saved If you are logged in to the access point’s local browser UI and the access point does not save the changes that you make on a page, do the following: •...
Page 247: Troubleshoot Your Network Using The Ping Utility
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 if you enter the wrong password twice but enter the correct password at the third login attempt, the two failed login attempts are erased from memory after 30 minutes. • If the number of failed login attempts is larger than the number of allowed retry attempts, the counter for failed login attempts is reset after 24 hours.
Page 248: Test The Path From Your Computer To A Remote Device
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 If the path is not functioning correctly, one of the following problems might be occurring: • Wrong physical connections Check that the appropriate LEDs are on for your network devices. If your access...
Page 249: Appendix A Factory Default Settings And Technical Specifications
Factory Default Settings and Technical Specifications This appendix includes the following sections: • Factory default settings • Technical specifications...
Page 250: Factory Default Settings
Note: The first time that you log in to the local browser UI, you must change the SSID. If you previously added the access point to a NETGEAR Insight network location and managed the access point through the Insight Cloud Portal or Insight app, this requirement might not apply.
Page 251 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 3. Factory default settings (Continued) Feature Default Setting DHCP client Enabled so that the access point receives an IP address from a DHCP server or router in the network. NTP client...
Page 252 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 3. Factory default settings (Continued) Feature Default Setting DHCP offer broadcast to Enabled unicast Captive portal None MAC ACL None assigned Rate limit None Advanced rate selection Fixed multicast rate: Auto...
Page 253 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 3. Factory default settings (Continued) Feature Default Setting DTIM interval 2.4 GHz radio: 2 5 GHz radio: 2 Broadcast and multicast 2.4 GHz radio: Enabled with a limit of 50 pps...
Page 254: Technical Specifications
12 VDC, 2.5A The plug is localized to the country of sale. Note: For model WAX628PA, a power adapter is included. For model WAX628, a power adapter is not included but can be ordered as an option. Factory Default Settings and...
Page 255 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Table 4. Technical specifications (Continued) Feature Description Hardware interfaces One RJ-45 LAN 1/PoE+ Ethernet port that supports 2.5 Gbps, 1 Gbps, 100 Mbps, and 10 Mbps. The port also supports Auto Uplink (Auto MDI-X).
Page 256: Appendix B Mount The Access Point To A Wall Or Ceiling
Mount the Access Point to a Wall or Ceiling You can mount the access point to a wall or to a ceiling with a 15/16 in. (24 mm) T-bar, or you can install the access point freestanding on a flat surface. Before you mount the access point, first set up and test the access point to verify WiFi network connectivity.
Page 257: Mounting Parts
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Mounting parts The package includes the following mounting parts: Figure 11. Mounting plate Figure 12. Metal bracket with T-bar, lock screw, and 4 short screws Figure 13. 3 tall screws and anchors for wall mounting...
Page 258: Mount The Access Point On A Wall
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Mount the access point on a wall CAUTION: Make sure that the wall is not damaged. For example, water damage can destroy a drywall. To mount the access point on a wall: 1.
Page 259: Mount The Access Point To A T-Bar
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 7. Attach the access point to the mounting plate. 8. Twist the access point clockwise to lock it onto the mounting plate. Mount the access point to a T-bar To mount the access point to a T-bar: 1.
Page 260 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 4. Use the lock screw to lock the metal bracket into place. 5. Use the four short screws to attach the mounting plate to the T-bar. 6. Connect an Ethernet cable (if you use a PoE+ switch) or both a power adapter and an Ethernet cable to the access point before you attach the access point to the mounting plate.
Page 261 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 7. Hold the access point upside down and attach it to the mounting plate. 8. Turn the access point clockwise until it locks in the mounting plate. Mount the Access Point to a Wall...
Page 262 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Mount the Access Point to a Wall User Manual or Ceiling...
Page 263: Unmount The Access Point
Insight Managed WiFi 6 AX5400 Access Point Model WAX628 Unmount the access point CAUTION: Make sure you hold the access point so that it does not drop when you release it from the mounting plate. To unmount the access point: 1.
Page 264 Insight Managed WiFi 6 AX5400 Access Point Model WAX628 The mounting plate remains attached to the ceiling or the wall. Mount the Access Point to a Wall User Manual or Ceiling...

NETGEAR WAX628 User Manual

Chapter 1 Introduction

Chapter 2 Hardware Overview

Chapter 5 Manage the Basic Wifi Features for a Wifi Network

Chapter 6 Manage the Basic Radio Features

Chapter 7 Set up and Manage a Captive Portal

Chapter 8 Manage Access and Security

Chapter 9 Manage the Local Area Network and IP Settings

Chapter 10 Manage and Maintain the Access Point

Chapter 11 Monitor the Access Point and the Network

Chapter 12 Set up a Wifi Bridge

Chapter 13 Manage the Advanced Wifi Features for a Wifi Network

Chapter 14 Manage the Advanced Radio Features

Chapter 15 Diagnostics and Troubleshooting

Appendix A Factory Default Settings and Technical Specifications

Appendix B Mount the Access Point to a Wall or Ceiling

Quick Links

Troubleshooting

Related Manuals for NETGEAR WAX628

Summary of Contents for NETGEAR WAX628