Table of Contents
- Contents
- 1. Introduction
- 2. Hardware Overview
- 3. Install the Access Point in Your Network and Access It for Initial Configuration
- Position your access point for best performance
- Set up and connect the access point to your network
- Connect to the access point for initial configuration
- Connect over WiFi using the NETGEAR Insight app
- Connect over the Internet using the NETGEAR Insight Cloud portal
- Connect over WiFi to the local browser UI for initial configuration
- Connect over the LAN to the local browser UI for initial configuration
- Configure the access point offline using a directly connected computer
- Log in to the access point after initial setup
- Dismiss a browser security warning
- 4. Install the Access Point in an Insight Instant Mesh WiFi Network
- What are a root access point and an extender access point?
- What is an Insight Instant Mesh WiFi network?
- Requirements for placing an extender access point in a mesh WiFi network
- Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
- Connect the access point as an extender to a root access point
- Connect over the Internet using the NETGEAR Insight Cloud portal
- 5. Manage the Basic WiFi Features for a WiFi network
- Set up an open or secure WiFi network
- View or change the settings of a WiFi network
- Remove a WiFi network
- Hide or broadcast the SSID for a WiFi network
- Change the VLAN ID for a WiFi network
- Change the authentication and encryption for a WiFi network
- Enable or disable PMF for a WiFi network
- Disable or enable a WiFi network or set up a WiFi activity schedule
- Enable or disable band steering with 802.11k RRM and 802.11v WiFi network management
- 6. Manage the Basic Radio Features
- 7. Set Up and Manage a Captive Portal
- 8. Manage Access and Security
- 9. Manage the Local Area Network and IP Settings
- Disable the DHCP client and specify a fixed IP address
- Enable the DHCP client
- Set the 802.1Q VLAN and management VLAN
- Set an existing domain name
- Enable or disable Spanning Tree Protocol
- Enable or disable the network integrity check function
- Enable or disable IGMP snooping
- Enable or disable Ethernet LLDP
- Enable or disable UPnP
- Manage the link aggregation capability
- 10. Manage and Maintain the Access Point
- Change the management mode to NETGEAR Insight or Web-browser
- Change the country or region of operation
- Change the admin user account password
- Change the system name
- Specify a custom NTP server
- Set the time zone
- Manage the syslog settings
- Manage the firmware of the access point
- Manage the configuration file of the access point
- Reboot the access point from the local browser UI
- Schedule the access point to reboot
- Return the access point to its factory default settings
- Enable SNMP and manage the SNMP settings
- Manage the LEDs
- 11. Monitor the Access Point and the Network
- Display the access point Internet, IP, and system settings
- Display the WiFi radio settings
- Display unknown and known neighbor access points
- Display client distribution, connected clients, and client trends
- View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization
- View or download tracked URLs
- View, save, download, or clear the logs
- View a WiFi bridge connection
- View alarms and notifications
- 12. Manage the Advanced WiFi Features for a WiFi network
- 13. Set up a WiFi Bridge
- 14. Manage the Advanced Radio Features
- 15. Diagnostics and Troubleshooting
- Perform a ping test
- Check the Internet speed
- Quick tips for WiFi troubleshooting
- Troubleshoot with the LEDs
- Power/Cloud LED remains off
- Power/Cloud LED remains solid amber
- Power/Cloud LED is blinking amber slowly, continuously
- The access point functions as a PoE PD and the Power/Cloud LED remains solid amber
- Power/Cloud LED does not light blue in the NETGEAR Insight management mode
- Power/Cloud LED does not stop blinking amber, green, and blue
- 2.4G or 5G WLAN LED is off
- The extender access point and root access point cannot connect
- Troubleshoot WiFi connectivity for a WiFi client device
- Troubleshoot Internet browsing
- You cannot log in to the access point over a LAN connection
- Changes are not saved
- You enter the wrong password and can no longer log in to the access point
- Troubleshoot your network using the ping utility
- A. Factory Default Settings and Technical Specifications
- B. Mount the Access Point to a Wall or Ceiling
NETGEAR AX6000 User Manual
Displayed below is the user manual for AX6000 by NETGEAR which is a product in the Wireless Access Points category. This manual has pages.
Related Manuals
User Manual
Insight Managed WiFi 6 AX6000
Tri-band Multi-Gig Access Point
WAX630
NETGEAR, Inc.
350 E. Plumeria DriveJune 2021
San Jose, CA 95134, USA202-12194-01
Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.
Do not use this device outdoors. The PoE port is intended for intra building connection
only.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
CommentsPublish DatePublication Part
Number
First publication.June 2021202-12194-01
2
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Contents
Chapter 1 Introduction
Additional documentation...................................................................9
About NETGEAR Insight......................................................................9
Chapter 2 Hardware Overview
Unpack the access point....................................................................11
Top panel with LEDs...........................................................................11
Hardware interfaces...........................................................................14
Access point label..............................................................................15
Safety instructions and warnings for an indoor access point........16
Chapter 3 Install the Access Point in Your Network and Access It
for Initial Configuration
Position your access point for best performance...........................19
Set up and connect the access point to your network...................20
Connect to the access point for initial configuration.....................22
Connect over WiFi using the NETGEAR Insight app.................22
Connect over the Internet using the NETGEAR Insight Cloud
portal...............................................................................................24
Connect over WiFi to the local browser UI for initial
configuration..................................................................................25
Connect over the LAN to the local browser UI for initial
configuration..................................................................................30
Configure the access point offline using a directly connected
computer.........................................................................................35
Log in to the access point after initial setup....................................41
Dismiss a browser security warning.................................................42
Chapter 4 Install the Access Point in an Insight Instant Mesh WiFi
Network
What are a root access point and an extender access point?......44
What is an Insight Instant Mesh WiFi network?...............................45
Requirements for placing an extender access point in a mesh WiFi
network................................................................................................46
Install the NETGEAR Insight app to manage an Insight Instant Mesh
WiFi network.......................................................................................47
3
Connect the access point as an extender to a root access point..48
Connect over the Internet using the NETGEAR Insight Cloud
portal....................................................................................................51
Chapter 5 Manage the Basic WiFi Features for a WiFi network
Set up an open or secure WiFi network..........................................53
View or change the settings of a WiFi network...............................61
Remove a WiFi network.....................................................................62
Hide or broadcast the SSID for a WiFi network..............................63
Change the VLAN ID for a WiFi network.........................................64
Change the authentication and encryption for a WiFi network....65
Enable or disable PMF for a WiFi network......................................69
Disable or enable a WiFi network or set up a WiFi activity
schedule..............................................................................................70
Enable or disable band steering with 802.11k RRM and 802.11v
WiFi network management...............................................................72
Chapter 6 Manage the Basic Radio Features
Manage the basic WiFi settings for the radios................................75
Turn a radio on or off.........................................................................78
Change the WiFi mode for a radio...................................................79
Change the channel width for a radio.............................................81
Change the guard interval for a radio.............................................83
Change the output power for a radio..............................................84
Change the channel for a radio........................................................85
Manage Quality of Service for a WiFi radio.....................................86
Chapter 7 Set Up and Manage a Captive Portal
Set up a click-through captive portal for a WiFi network..............89
Set up an external captive portal for a WiFi network.....................92
Register and configure Facebook Wi-Fi for the access point.......95
Set up a Facebook Wi-Fi captive portal for a WiFi network..........97
Unregister the access point from Facebook Wi-Fi.........................98
Chapter 8 Manage Access and Security
Block specific URLs and keywords for Internet access................101
Manage user accounts.....................................................................103
Add a user account......................................................................103
Change the time-out period for a user session.......................104
Change the settings for a user account....................................105
Remove a user account...............................................................106
Manage local MAC access control lists.........................................107
Manually set up a MAC access control List...............................108
Import an existing MAC access control list..............................111
4
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage neighbor AP detection.....................................................114
Enable neighbor access point detection and move access points
to the Known AP List....................................................................115
Import an existing neighbor access point list in the Known AP
List..................................................................................................117
Set up RADIUS servers.....................................................................120
Chapter 9 Manage the Local Area Network and IP Settings
Disable the DHCP client and specify a fixed IP address..............124
Enable the DHCP client...................................................................125
Set the 802.1Q VLAN and management VLAN............................127
Set an existing domain name..........................................................129
Enable or disable Spanning Tree Protocol...................................130
Enable or disable the network integrity check function..............131
Enable or disable IGMP snooping.................................................132
Enable or disable Ethernet LLDP....................................................133
Enable or disable UPnP...................................................................134
Manage the link aggregation capability........................................135
Enable link aggregation for the LAN 2 port.............................136
Disable link aggregation for the LAN 2 port............................137
Chapter 10 Manage and Maintain the Access Point
Change the management mode to NETGEAR Insight or
Web-browser....................................................................................140
Change the country or region of operation..................................142
Change the admin user account password..................................143
Change the system name................................................................144
Specify a custom NTP server...........................................................145
Set the time zone..............................................................................146
Manage the syslog settings.............................................................147
Manage the firmware of the access point.....................................148
Let the access point check for new firmware and update the
firmware........................................................................................149
Manually download firmware and update the access point...150
Revert to the backup firmware...................................................152
Use an SFTP server to update the access point.......................153
Manage the configuration file of the access point.......................155
Back up the access point configuration....................................155
Restore the access point configuration.....................................156
Reboot the access point from the local browser UI.....................158
Schedule the access point to reboot.............................................159
Return the access point to its factory default settings.................160
Use the Reset button to reset the access point........................160
Use the local browser UI to reset the access point..................161
5
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Enable SNMP and manage the SNMP settings............................162
Manage the LEDs.............................................................................164
Chapter 11 Monitor the Access Point and the Network
Display the access point Internet, IP, and system settings..........167
Display the WiFi radio settings.......................................................170
Display unknown and known neighbor access points................174
Display client distribution, connected clients, and client trends.175
View WiFi and Ethernet traffic, traffic and ARP statistics, and channel
utilization...........................................................................................179
View or download tracked URLs.....................................................181
View, save, download, or clear the logs........................................183
View a WiFi bridge connection.......................................................185
View alarms and notifications.........................................................186
Chapter 12 Manage the Advanced WiFi Features for a WiFi network
Enable or disable client isolation for a WiFi network...................189
Enable or disable URL tracking for a WiFi network......................191
Change the format of the DHCP offer messages in a WiFi
network..............................................................................................192
Select a MAC ACL for a WiFi network...........................................193
Set bandwidth rate limits for a WiFi network................................195
Configure advanced rate selection for a WiFi network...............196
Chapter 13 Set up a WiFi Bridge
WiFi base station, WiFi repeater, and WiFi bridge requirements.202
Set up a WiFi bridge between access points................................203
Chapter 14 Manage the Advanced Radio Features
Manage the advanced WiFi settings for the radios.....................208
Manage the maximum number of clients for a radio..................211
Manage the broadcast and multicast settings for a radio...........212
Manage load balancing for the radios..........................................214
Manage sticky clients.......................................................................216
Manage the ARP proxy....................................................................218
Manage the amount of broadcast traffic.......................................219
Chapter 15 Diagnostics and Troubleshooting
Perform a ping test...........................................................................222
Check the Internet speed................................................................223
Quick tips for WiFi troubleshooting...............................................224
Troubleshoot with the LEDs............................................................225
Power/Cloud LED remains off....................................................226
Power/Cloud LED remains solid amber...................................227
6
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Power/Cloud LED is blinking amber slowly, continuously.....227
The access point functions as a PoE PD and the Power/Cloud
LED remains solid amber............................................................228
Power/Cloud LED does not light blue in the NETGEAR Insight
management mode.....................................................................228
Power/Cloud LED does not stop blinking amber, green, and
blue................................................................................................229
2.4G or 5G WLAN LED is off.......................................................230
The extender access point and root access point cannot
connect..............................................................................................230
Troubleshoot WiFi connectivity for a WiFi client device.............232
Troubleshoot Internet browsing.....................................................233
You cannot log in to the access point over a LAN connection....233
Changes are not saved....................................................................234
You enter the wrong password and can no longer log in to the
access point.......................................................................................234
Troubleshoot your network using the ping utility........................235
Test the LAN path to your access point....................................236
Test the path from your computer to a remote device...........236
Appendix A Factory Default Settings and Technical Specifications
Factory default settings...................................................................239
Technical specifications...................................................................243
Appendix B Mount the Access Point to a Wall or Ceiling
Mounting parts.................................................................................246
Mount the access point on a wall...................................................247
Mount the access point to a T-bar..................................................248
Unmount the access point...............................................................251
7
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
1
Introduction
This manual is for the NETGEAR Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig
Access Point model WAX630.
Model WAX630, in this manual referred to as the access point, supports IEEE 802.11ax,
twelve (4+4+4) streams of WiFi 6, and tri-band concurrent operation at 2.4 GHz, 5 GHz
low band, and 5 GHz high band. The combined throughput is 6000 Mbps: 1200 Mbps
at 2.4 GHz, 2400 Mbps at 5 GHz low band, and 2400 Mbps at 5 GHz high band.
The access point functions as a Power over Ethernet plus (PoE++) powered device (PD)
in an existing network connected to a PoE++ switch that provides 802.3bt power (60W
PoE++ power on the port that is connected to the access point). The access point also
supports a power adapter for connection to a regular switch. Model WAX630 ships
without a power adapter, and model WAX630PA ships with a power adapter. If you
ordered model WAX630 but prefer to use the access point without a PoE++ connection,
you can order a power adapter separately.
The PoE++ Ethernet port supports a high speed up to 2.5 Gbps. A second Ethernet
LAN port supports a speed of 1 Gbps for a link aggregation (LAG) connection.
This chapter contains the following sections:
• Additional documentation
• About NETGEAR Insight
Note: For more information about the topics that are covered in this manual, visit the
support website at netgear.com/support/.
Note: Firmware updates with new features and bug fixes are made available from time
to time at netgear.com/support/download/. You can check for and download new
firmware manually. If the features or behavior of your product does not match what is
described in this manual, you might need to update the firmware.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network
we mean an individual SSID or VAP.
8
Additional documentation
The following documents are available at netgear.com/support/download/:
•Installation guide
•Data sheet
For information about the NETGEAR Insight app and the Insight Cloud portal, visit
insight.netgear.com and see the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx.
About NETGEAR Insight
For NETGEAR Insight Premium and Insight Pro subscribers, the access point supports
the NETGEAR Insight Cloud portal and Insight app:
•Insight Cloud portal: Lets you configure and manage the access point through the
portal of the Insight cloud-based management platform.
•Insight app: Lets you configure and manage the access point from your iOS or
Android mobile device and connects to the Insight cloud-based management
platform.
This user manual describes the local browser user interface (UI). For more information
about NETGEAR Insight, visit insight.netgear.com and see the NETGEAR knowledge
base at netgear.com/support/product/insight.aspx.
If you install the access point as a NETGEAR Insight managed device, the settings for
features that you can manage through the Insight Cloud portal and Insight app are
masked out in the local browser UI. However, using the local browser UI, you can still
manage the settings for certain features that might not yet be supported in Insight. For
more information, visit the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx and search for What is Hybrid Management
Mode.
User Manual9Introduction
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
2
Hardware Overview
The NETGEAR Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point model
WAX630 is an indoor access point.
The chapter contains the following sections:
• Unpack the access point
• Top panel with LEDs
• Hardware interfaces
• Access point label
• Safety instructions and warnings for an indoor access point
10
Unpack the access point
The package contains the following items:
•NETGEAR WAX630 access point
•Mounting plate
•Metal bracket with T-bar, lock screw, and 4 short screws
•3 tall screws and anchors for wall mounting
•Installation guide
Note: Model WAX630 ships without a power adapter. Model WAX630PA ships with a
power adapter (the type of power adapter varies by region). If you ordered model
WAX630 but prefer to use the access point without a PoE++ connection, you can order
a power adapter separately.
For information about the mounting options, see Mount the Access Point to a Wall or
Ceiling on page 245.
Top panel with LEDs
The LEDs that provide the status of the access point are located on the top panel of the
access point.
Figure 1. Top panel with LEDs
User Manual11Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 1. LED descriptions
DescriptionColorLED Icon
Solid amber initially and then blinking amber slowly: The access
point is starting or in the process of getting an IP address.
Power/Cloud LED
Solid green: The access point started up and functions either as a
standalone access point or as an Insight discovered access point that
is not connected to the Insight cloud-based management platform.
Solid blue: The access point functions in Insight mode and is
connected to the Insight cloud-based management platform.
Blinking amber fast: The access point is updating firmware or is
being reset to factory default settings.
Blinking multicolor: The access point is functioning in extender mode
and the mesh setup is in progress.
Solid amber during operation: The PoE power that the access point
received is not at the 802.3bt (PoE++) level.
Off: No power is supplied to the access point.
Solid green: A 2.5 Gbps Ethernet link is detected on the LAN 1 port.LAN 1 LED
Blinking green: 2.5 Gbps traffic activity is detected on the LAN 1
port.
Solid amber: An Ethernet link at a speed lower than 2.5 Gbps is
detected on the LAN 1 port.
Blinking amber: Traffic activity at a speed lower than 2.5 Gbps is
detected on the LAN 1 port.
Off: Either no Ethernet device is connected to the LAN 1 port or no
Ethernet link is detected.
Solid green: A 1 Gbps Ethernet link is detected on the LAN 2 port.LAN 2 LED
Blinking green: 1 Gbps traffic activity is detected on the LAN 2 port.
Solid amber: An Ethernet link at a speed lower than 1 Gbps is
detected on the LAN 2 port.
Blinking amber: Traffic activity at a speed lower than 1 Gbps is
detected on the LAN 2 port.
Off: Either no Ethernet device is connected to the LAN 1 port or no
Ethernet link is detected.
User Manual12Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 1. LED descriptions (Continued)
DescriptionColorLED Icon
Solid green: The 2.4 GHz WiFi radio is on but no clients are
connected.
2.4G WLAN LED
Solid blue: One or more WLAN clients are connected to the 2.4 GHz
WiFi radio.
Blinking blue: Traffic is detected on the 2.4 GHz WiFi radio.
Off: The 2.4 GHz WiFi radio is off.
Solid green: The 5 GHz high band WiFi radio is on but no clients are
connected.
5G H WLAN LED
Solid blue: One or more WLAN clients are connected to the 5 GHz
high band WiFi radio.
Blinking blue: Traffic is detected on the 5 GHz high band WiFi radio.
Off: The 5 GHz high band WiFi radio is off.
Solid green: The 5 GHz low band WiFi radio is on but no clients are
connected.
5G L WLAN LED
Solid blue: One or more WLAN clients are connected to the 5 GHz
low band WiFi radio.
Blinking blue: Traffic is detected on the 5 GHz low band WiFi radio.
Off: The 5 GHz low band WiFi radio is off.
Note: For information about troubleshooting with the LEDs, see Troubleshoot with the
LEDs on page 225.
User Manual13Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Hardware interfaces
The bottom panel of the access point provides the DC power connector for an optional
power adapter, LAN 1/PoE++ port, LAN 2 port, and Reset button.
Figure 2. Hardware interfaces
The bottom panel contains the following components:
•DC power connector: If you do not use a PoE++ switch to provide power to the
access point, connect an optional power adapter to the DC power connector.
•LAN 1/PoE++ port: Use the LAN 1/PoE++ Gigabit Ethernet RJ-45 LAN port to
connect the access point to a PoE++ switch, or if you use an optional power adapter,
to a non-PoE switch. You must use the LAN 1/PoE++ port for the access point network
connection. (Do not use the LAN 2 port for the network connection.)
The LAN 1/PoE++ port supports Ethernet speeds up to 2.5 Gbps when connected
to 2.5 Gbps equipment. Your Internet connection, modem, and switch all need to
support a speed of 2.5 Gbps. If one of these components supports only 1 Gbps
(which is a common speed), the access point LAN 1/PoE++ connection functions at
1 Gbps.
For more information about the LAN 1/PoE++ port connection, see Set up and
connect the access point to your network on page 20.
•LAN 2 port: The LAN 2 port is a Gigabit Ethernet RJ-45 port that you can use to
connect the access point to the same switch as the LAN 1 port for a link aggregation
(LAG) connection. The switch must be capable of supporting a LAG connection,
which you must configure on the switch. For more information about setting up and
enabling a LAG on the access point, see Manage the link aggregation capability on
page 135.
•Reset button: You can use the Reset button to restart the access point or to reset
the access point to its factory default settings. To restart the access point, press the
Reset button for about two seconds. To reset the access point to factory default
settings, press the Reset button for 10 seconds or longer.
User Manual14Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Note: If you added the access point to a NETGEAR Insight network location, you
must first use the Insight app or Insight Cloud portal to remove the access point from
your Insight network location before the factory default settings function of the Reset
button is available. For more information, see Use the Reset button to reset the
access point on page 160.
Access point label
The access point label on the bottom panel shows the QR code, serial number, MAC
address, default WiFi network name (SSID), and network key (password) of the access
point.
Figure 3. Access point label location
Figure 4. Access point label
User Manual15Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Safety instructions and warnings for an
indoor access point
Use the following safety guidelines to ensure your own personal safety and to help
protect your system from potential damage.
To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment,
observe the following precautions:
•This product is designed for indoor use only in a temperature-controlled and
humidity-controlled environment. Note the following:
-For more information about the environment in which this product must operate,
see the environmental specifications in the appendix or the data sheet.
-If you want to connect the product over an Ethernet cable to a device located
outdoors, the outdoor device must be properly grounded and surge protected,
and you must install an Ethernet surge protector inline between the indoor
product and the outdoor device. Failure to do so can damage the product.
-Before connecting the product to outdoor cables or wired outdoor devices, see
https://kb.netgear.com/000057103 for additional safety and warranty information.
Failure to follow these guidelines can result in damage to your NETGEAR product,
which might not be covered by NETGEAR’s warranty, to the extent permissible by
applicable law.
•Do not service the product except as explained in your product documentation.
Some devices should never be opened.
•If any of the following conditions occur, unplug the product from its power source,
and then replace the part or contact your trained service provider:
- Depending on your product, the power adapter, power adapter cable, power
adapter plug, or PoE Ethernet cable is damaged.
-An object fell into the product.
- The product was exposed to water.
- The product was dropped or damaged.
-The product does not operate correctly when you follow the operating
instructions.
•Keep the product away from radiators and heat sources. Also, do not block cooling
vents.
User Manual16Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Do not spill food or liquids on your product components, and never operate the
product in a wet environment. If the product gets wet, see the appropriate section
in your troubleshooting guide, or contact your trained service provider.
•Do not push any objects into the openings of your product. Doing so can cause fire
or electric shock by shorting out interior components.
•Use the product only with approved equipment.
•If applicable to your product, allow the product to cool before removing covers or
touching internal components.
•Be sure that devices that are attached over Ethernet cables are electrically rated to
operate with the power available in your location.
•Depending on your product, use only the supplied power adapter or an Ethernet
cable that provides PoE.
If your product uses a power adapter:
-If you were not provided with a power adapter, contact your local NETGEAR
reseller.
-The power adapter must be rated for the product and for the voltage and current
marked on the product electrical ratings label.
•To help prevent electric shock, plug any system and peripheral power cables into
properly grounded power outlets.
•If applicable to your product, the peripheral power cables are equipped with
three-prong plugs to help ensure proper grounding. Do not use adapter plugs or
remove the grounding prong from a cable. If you must use an extension cable, use
a three-wire cable with properly grounded plugs.
•Observe extension cable and power strip ratings. Make sure that the total ampere
rating of all products plugged into the extension cable or power strip does not
exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
•To help protect your system from sudden, transient increases and decreases in
electrical power, use a surge suppressor, line conditioner, or uninterruptible power
supply (UPS).
•Position system cables, power adapter cables, and PoE Ethernet cables carefully.
Route cables so that they cannot be stepped on or tripped over. Be sure that nothing
rests on any cables.
•Do not modify power adapters, power adapter cables, or plugs. Consult a licensed
electrician or your power company for site modifications.
•Always follow your local and national wiring rules.
User Manual17Hardware Overview
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
3
Install the Access Point in Your
Network and Access It for Initial
Configuration
This chapter describes how you can install and access the access point in your network.
The chapter contains the following sections:
• Position your access point for best performance
• Set up and connect the access point to your network
• Connect to the access point for initial configuration
• Log in to the access point after initial setup
• Dismiss a browser security warning
IMPORTANT: This device must be professionally installed. It is the installer’s
responsibility to follow local country regulations, including operations within legal
frequency channels, output power, and DFS requirements. The vendor, reseller, or
distributor is not responsible for illegal wireless operations. For more details, see the
device’s terms and conditions.
18
Position your access point for best
performance
Before you install and mount your access point as described in the installation guide or
an appendix to this manual, consider how you can position the access point for best
performance.
If you are within the access point WiFi range, you can connect any of your WiFi devices
to your WiFi network. The WiFi range can vary significantly depending on the physical
placement of your access point. For example, the thickness and number of walls the
WiFi signal passes through can limit the range.
Additionally, other WiFi devices in and around your office, home, yard, or campus, might
affect your access point’s signal. WiFi devices can be other access point, routers,
repeaters, WiFi range extenders, and any other devices that emit WiFi signals for network
access.
Tips for positioning your access point:
•Place your access point near the center of the area where your computers and other
devices operate.
A line of sight between the access point and your WiFi devices is not required for
good performance.
•If you use a power adapter, make sure that the access point is within reach of an AC
power outlet.
•Place the access point in an elevated location, minimizing the number walls and
ceilings between the access point and your other devices.
•Place the access point away from electrical devices such as these:
-Ceiling fans
- Home security systems
- Microwaves
- Computers
-Bases of cordless phones
- 2.4 GHz and 5.8 GHz cordless phones
•Place the access point away from large metal surfaces, large glass surfaces, insulated
walls, and items such as these:
- Solid metal doors
- Aluminum studs
User Manual19Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
- Fish tanks
- Mirrors
- Brick
- Concrete
If you are using adjacent access points, use different radio frequency channels to reduce
interference.
Set up and connect the access point to your
network
You can connect the access point to a Power over Ethernet plus (PoE++) switch in your
network. The switch must be connected to a network router that is connected to the
Internet. If you use a PoE++ connection, the access point does not require a power
adapter.
Note: Depending on the product ordered, the package might not include a power
adapter. You power up the access point by connecting it to a PoE++ switch. If you
ordered a package without a power adapter but do not want to use a PoE++ connection,
you can still order a power adapter as an option.
The access point LAN 1/PoE++ port supports Ethernet speeds up to 2.5 Gbps. The
following figure shows a NETGEAR MS510TXUP switch, which supports speeds of
2.5 Gbps and higher and can supply PoE++. To allow for this speed, your Internet
connection, modem, and switch all need to support a speed of 2.5 Gbps. If one of these
components supports only 1 Gbps (which is a common speed), the LAN connection
functions also at 1 Gbps.
User Manual20Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Figure 5. Set up the access point with a PoE++ connection to your network
To set up the access point with an Ethernet connection to your network:
1. Connect an Ethernet cable to the LAN 1/PoE++ port on the access point.
2. Connect the other end of the Ethernet cable to a port on a switch that is connected
to your network and to the Internet.
If you use a PoE++ switch, the switch port that is connected to access point must be
able to supply 60W PoE++ power. The access point requires 802.3bt (PoE++) input.
Note: For optimal functioning, make sure that you use an 802.3bt (PoE++) switch
and not an 802.3at (PoE+) or 802.3af (PoE) switch. If the Power LED remains solid
amber after the access point started up, the access point might receive insufficient
PoE power. For more information, see The access point functions as a PoE PD and
the Power/Cloud LED remains solid amber on page 228.
While the access point is starting or in the process of getting an IP address from a
DHCP server (or router functioning as a DHCP server) in your network, the
Power/Cloud LED initially lights solid amber and then blinks amber slowly. After
about two minutes, the Power/Cloud LED turns solid green or solid blue and the
access point is ready for you to perform the initial configuration.
For information about accessing the access point for initial configuration, see Connect
to the access point for initial configuration on page 22.
User Manual21Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Connect to the access point for initial
configuration
After you set up the access point, you can use several methods to connect to it for initial
configuration.
You can use the NETGEAR Insight app on an iOS or Android mobile device, or use the
Insight Cloud portal or the local browser UI.
The Insight app and the Insight Cloud portal provide ease of access and let you configure
most features that are available on the access point. The local browser UI lets you
configure all features.
For information about using the Insight app or the Insight Cloud portal, see one of the
following sections:
•Connect over WiFi using the NETGEAR Insight app on page 22
•Connect over the Internet using the NETGEAR Insight Cloud portal on page 24
For information about using the local browser UI, see one of the following sections:
•Connect over WiFi to the local browser UI for initial configuration on page 25
•Connect over the LAN to the local browser UI for initial configuration on page 30
Note: If your network does not include a DHCP server (or a router that functions as a
DHCP server) and you do not perform the initial configuration of the access point as
described in one of these sections, you can connect only five clients to the access point
and the access point can provide an IP address to only five clients. To prevent this
situation, make sure that you perform the initial configuration of the access point.
Connect over WiFi using the NETGEAR Insight app
You can install the NETGEAR Insight app on an iOS or Android mobile device and set
up the access point (and perform many other tasks as well).
User Manual22Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
IMPORTANT: If you add the access point to a NETGEAR Insight network location and
manage the access point through the Insight app or Insight Cloud portal, the admin
password for the access point changes. That is, the Insight network password for that
location replaces the admin password. To access the local browser UI, you must then
enter the Insight network password and not the admin password. If you later decide to
remove the access point from the Insight network location or change the management
mode to Web-browser mode (see Change the management mode to NETGEAR Insight
or Web-browser on page 140), you must continue to use the Insight network password
to access the local browser UI until you manually change the admin password on the
access point.
For more information about the Insight app, visit insight.netgear.com and see the
NETGEAR knowledge base at netgear.com/support/product/insight.aspx.
To connect to the access point over WiFi using an iOS or Android mobile device:
1. On your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2. Connect your mobile device to the WiFi network of the access point.
The default SSID is on the access point label on the bottom of the access point and
is shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six
hexadecimal digits of the access point’s MAC address. The default password is
sharedsecret.
3. Launch the Insight app.
4. If you do not have a NETGEAR account, tap Create NETGEAR Account and follow
the onscreen instructions.
5. Enter the email address and password for your account and tap LOG IN.
After you log in to your account, the IP address of the access point displays in the
device list.
6. Write down the access point IP address and save it for later use.
7. To use the Insight app to configure and manage the access point, tap the access
point and follow the prompts to register the access point and add it to an Insight
network location.
User Manual23Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Connect over the Internet using the NETGEAR Insight Cloud
portal
The Insight Cloud portal is available for Insight Premium or Insight Pro subscribers. To
use the NETGEAR Insight Cloud portal to configure and manage the access point, the
access point must already be connected to the Internet.
IMPORTANT: If you add the access point to a NETGEAR Insight network location and
manage the access point through the Insight app or Insight Cloud portal, the admin
password for the access point changes. That is, after you add the access point to an
Insight network location, the Insight network password for that location replaces the
admin password. To access the local browser UI, you must then enter the Insight network
password and not the admin password. If you later decide to remove the access point
from the Insight network location or change the management mode to Web-browser
mode (see Change the management mode to NETGEAR Insight or Web-browser on
page 140), you must continue to use the Insight network password to access the local
browser UI until you manually change the admin password on the access point.
For more information about the Insight Cloud portal and the configuration and
management options that are available through the Insight Cloud portal, visit
insight.netgear.com and see the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx.
To connect to the access point over the Internet through the Insight Cloud portal:
1. Visit insight.netgear.com.
The NETGEAR Account Login page displays.
2. Enter your Insight email address and password.
If you do have an Insight account, you can create one.
3. Click the Login button.
You can now add the access point to an Insight network location so that you can
configure and manage the access point.
User Manual24Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Connect over WiFi to the local browser UI for initial
configuration
This section describes how to connect to the access point for the first time over WiFi
using a WiFi-enabled computer or mobile device (without using the NETGEAR Insight
app) and complete the initial configuration.
To connect over WiFi to the local browser UI for initial configuration:
1. From your computer or mobile device, connect over WiFi to the access point’s default
WiFi network.
The default SSID is on the access point label on the bottom of the access point and
is shown in the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six
hexadecimal digits of the access point’s MAC address. The default password is
sharedsecret.
2. On the computer or mobile device, launch a web browser and, in the address bar,
enter http://aplogin.net.
Note: You can use http://aplogin.net only during initial setup of the access point.
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
3. If your browser displays a security warning, dismiss the warning by doing one of the
following:
•Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of the
device.
•Apple Safari: Click the Show Details button. Then, click the visit this website
link. If a warning pop-up window displays, click the Visit Website button. If
another pop-up window displays to let you confirm changes to your certificate
trust settings, enter your Mac user name and password and click the Update
Setting button.
User Manual25Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception
button. In the pop-up window that displays, click the Confirm Security Exception
button.
•Microsoft Edge: Select Details > Go on to the webpage.
•Microsoft Internet Explorer: Click the Continue to this website (not
recommended) link.
4. Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
5. Select the Web-browser radio button.
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
6. Enter the settings that are described in the following table.
User Manual26Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
DescriptionSetting
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
Country/Region
From the menu, select the time zone for the country and region in which the access point
is operating.
Time Zone
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
DHCP Client
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
AP Name
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
!@#$%^&*()
Save the password for future use.
AP Login New
Password
User Manual27Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
DescriptionSetting
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
Password
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
SSID
7. From the Authentication menu, select one of the following authentication types for
the WiFi network, and, if applicable, set a new passphrase (network key or WiFi
password) for the WiFi network:
•Open: Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF)
is automatically disabled. This setting does not provide any security and is not
appropriate for most situations.
If you select Open from the menu, the Enhanced Open check box displays and
the Allow Devices to Connect with Open check box can display:
-Enhanced Open: If you select the Enhanced Open check box, the WiFi
enhanced open feature is enabled. This feature is based on opportunistic
wireless encryption (OWE). The encryption is set to CCM mode protocol
(CCMP) and 802.11w (PMF) is automatically set to mandatory.
-Allow Clients to Authenticate using Legacy Open (OWE Transition Mode):
If you select the Enhanced Open check box, the Allow Clients to
Authenticate using Legacy Open (OWE Transition Mode) check box
displays. If you select this check box, the WiFi network can accept both clients
that support the WiFi enhanced open feature and clients that do not. For
clients that do not support the WiFi open enhanced feature, traffic is not
encrypted. If you do not select this check box, the WiFi network can only
accept clients that support the WiFi enhanced open feature.
•WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA2. This option uses AES encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast packets
use TKIP. For unicast (that is, point-to-point) transmissions, WPA clients use TKIP
and WPA2 clients use AES. In the Passphrase field, enter a new passphrase for
the WiFi network.
User Manual28Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA3. This option uses SAE encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients
to connect to the SSID. This option uses AES and SAE encryption. WPA2 clients
use AES and WPA3 clients use SAE. In the Passphrase field, enter a new
passphrase for the WiFi network.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 65.
8. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
You are disconnected from the access point. If you changed the default country, the
access point restarts.
9. Reconnect over WiFi to the access point’s WiFi network using the new SSID and
passphrase that you just defined on the Day Zero Easy Setup page.
10. Enter the access point IP address in the address bar of your browser.
If you changed the IP address, enter the IP address that you specified in Step 6.
A login window displays.
11. If your browser displays a security warning, dismiss the warning.
For more information, see Step 3.
12. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the Day
Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings for
your network environment.
User Manual29Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Connect over the LAN to the local browser UI for initial
configuration
The following procedure assumes that your network includes a DHCP server (or router
that functions as a DHCP server) and that the access point and your computer are on
the same LAN. By default, the access point functions as a DHCP client.
To connect over the LAN to the local browser UI for initial configuration:
1. To determine the IP address that the DHCP server assigned to the access point,
access the DHCP server or use an IP network scanner.
If you use a Windows-based computer, launch File Explorer (or Windows Explorer),
select Network from the Navigation pane, right-click the access point device icon,
and select Properties to display the IP address.
Note: You can also use the NETGEAR Insight app to discover the IP address that is
assigned to the access point. For more information, see Connect over WiFi using
the NETGEAR Insight app on page 22.
2. On the computer, launch a web browser and, in the address bar, enter the IP address
that is assigned to the access point.
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
3. If your browser displays a security warning, dismiss the warning by doing one of the
following:
•Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of the
device.
•Apple Safari: Click the Show Details button. Then, click the visit this website
link. If a warning pop-up window displays, click the Visit Website button. If
another pop-up window displays to let you confirm changes to your certificate
trust settings, enter your Mac user name and password and click the Update
Setting button.
User Manual30Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception
button. In the pop-up window that displays, click the Confirm Security Exception
button.
•Microsoft Edge: Select Details > Go on to the webpage.
•Microsoft Internet Explorer: Click the Continue to this website (not
recommended) link.
4. Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
5. Select the Web-browser radio button.
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
6. Enter the settings that are described in the following table.
User Manual31Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
DescriptionSetting
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
Country/Region
From the menu, select the time zone for the country and region in which the access point
is operating.
Time Zone
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
DHCP Client
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
AP Name
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
!@#$%^&*()
Save the password for future use.
AP Login New
Password
User Manual32Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
DescriptionSetting
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
Password
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
SSID
7. From the Authentication menu, select one of the following authentication types for
the WiFi network, and, if applicable, set a new passphrase (network key or WiFi
password) for the WiFi network:
•Open: Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF)
is automatically disabled. This setting does not provide any security and is not
appropriate for most situations.
If you select Open from the menu, the Enhanced Open check box displays and
the Allow Devices to Connect with Open check box can display:
-Enhanced Open: If you select the Enhanced Open check box, the WiFi
enhanced open feature is enabled. This feature is based on opportunistic
wireless encryption (OWE). The encryption is set to CCM mode protocol
(CCMP) and 802.11w (PMF) is automatically set to mandatory.
-Allow Clients to Authenticate using Legacy Open (OWE Transition Mode):
If you select the Enhanced Open check box, the Allow Clients to
Authenticate using Legacy Open (OWE Transition Mode) check box
displays. If you select this check box, the WiFi network can accept both clients
that support the WiFi enhanced open feature and clients that do not. For
clients that do not support the WiFi open enhanced feature, traffic is not
encrypted. If you do not select this check box, the WiFi network can only
accept clients that support the WiFi enhanced open feature.
•WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA2. This option uses AES encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast packets
use TKIP. For unicast (that is, point-to-point) transmissions, WPA clients use TKIP
and WPA2 clients use AES. In the Passphrase field, enter a new passphrase for
the WiFi network.
User Manual33Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA3. This option uses SAE encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients
to connect to the SSID. This option uses AES and SAE encryption. WPA2 clients
use AES and WPA3 clients use SAE. In the Passphrase field, enter a new
passphrase for the WiFi network.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 65.
8. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
If you changed the default country, the access point restarts.
Note: Do not close the page!
After a short period, the Dashboard page displays automatically. If the Dashboard
page does not display, for example, because you assigned a static IP address, see
the next step.
You can now customize the access point settings for your network environment.
User Manual34Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
9. If the Dashboard does not display automatically, do the following:
a. Take one of the following actions:
•If you assigned a static IP address to the access point, enter the IP address
that you specified in Step 6 in the address bar of the web browser.
•If you did not assign a static IP address, reenter the IP address that is displayed
in the address bar of the web browser. If that does not work, write down the
IP address, close the web browser, launch the web browser again, and then
reenter the IP address in the address bar of the web browser.
•If you did not assign a static IP address and you closed the page so that you
cannot see the IP address of the access point, use an IP scanner tool, use a
network discovery tool, or access the DHCP server to discover the IP address
of the access point in your network.
Note: You can also use the NETGEAR Insight app to discover the IP address
that is assigned to the access point. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
Then, launch a browser and enter the IP address in the address bar of the
web browser.
A login window displays.
b. If your browser displays a security warning, dismiss the warning.
For more information, see Step 3.
c. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the
Day Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings
for your network environment.
Configure the access point offline using a directly
connected computer
You can take the access point offline (that is, disconnect it from your network), connect
a computer through an Ethernet cable to the LAN 2 of the access point, and connect
to the access point over its default IP address so that you can configure it offline. After
you complete the configuration, you can bring the access point online.
Note: After you complete the offline configuration and install the access point in your
network, make sure that you use the LAN 1/PoE++ port for your network connection.
Even if you use a power adapter and therefore do not need a PoE++ connection to the
access point, you must use the LAN 1/PoE++ port for your network connection.
User Manual35Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To connect to the access point using a computer that is connected to a LAN 1/PoE++
port of the access point:
1. Record the IP address and subnet mask of your computer so that you can reinstate
these IP address settings later.
2. Temporarily change the IP address on your computer to 192.168.0.210 with
255.255.255.0 as the subnet mask.
(You can actually use any IP address in the 192.168.0.2–192.168.0.254 range, with
the exception of IP address 192.168.0.100, which is the default IP address of the
access point.)
For more information about changing the IP address on your computer, see the help
or documentation for your computer.
3. Use an Ethernet cable to connect your computer to a LAN 1/PoE++ port on the
access point.
4. On the computer, launch a web browser and enter 192.168.0.100 in the address
bar.
IMPORTANT: If your browser does not display the Day Zero login page, see the
following step.
5. If your browser displays a security warning, dismiss the warning by doing one of the
following:
•Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of the
device.
•Apple Safari: Click the Show Details button. Then, click the visit this website
link. If a warning pop-up window displays, click the Visit Website button. If
another pop-up window displays to let you confirm changes to your certificate
trust settings, enter your Mac user name and password and click the Update
Setting button.
•Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception
button. In the pop-up window that displays, click the Confirm Security Exception
button.
User Manual36Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Microsoft Edge: Select Details > Go on to the webpage.
•Microsoft Internet Explorer: Click the Continue to this website (not
recommended) link.
6. Enter the access point user name and default password.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
7. Select the Web-browser radio button.
Note: After you save the basic settings that are shown on the page, the Day Zero
Easy Setup page no longer displays when you log in. Instead, a login window displays.
After you log in, the Dashboard page displays.
8. Enter the settings that are described in the following table.
User Manual37Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
DescriptionSetting
From the menu, select the country and region in which the access point is operating.
Note: Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that are
set for channels, power levels, and frequency ranges.
Note: It might not be legal to operate the access point in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
Country/Region
From the menu, select the time zone for the country and region in which the access point
is operating.
Time Zone
By default, the DHCP client of the access point allows the access point to receive an IP
address from a DHCP server (or router that functions as a DHCP server) in your network.
To set up the access point with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway, and IP address
of the DNS server.
DHCP Client
As an option, enter a new name for the access point. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer than 15
characters, and can contain hyphens but cannot start or end with a hyphen.
By default, the access point name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
AP Name
Enter a new admin password. This is the password that you must use to log in to the access
point’s local browser UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one uppercase
letter, one lowercase letter, and one number. The following special characters are allowed:
!@#$%^&*()
Save the password for future use.
AP Login New
Password
User Manual38Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
DescriptionSetting
Enter exactly the same password that you entered in the AP Login New Password field.Confirm New
Password
You cannot use the default SSID for regular operation. The default SSID is for setup only.
Enter a new name with a maximum of 32 characters. You can use a combination of
alphanumeric and special characters, except for quotation marks (") and a backslash (\).
SSID
9. From the Authentication menu, select one of the following authentication types for
the WiFi network, and, if applicable, set a new passphrase (network key or WiFi
password) for the WiFi network:
•Open: Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF)
is automatically disabled. This setting does not provide any security and is not
appropriate for most situations.
If you select Open from the menu, the Enhanced Open check box displays and
the Allow Devices to Connect with Open check box can display:
-Enhanced Open: If you select the Enhanced Open check box, the WiFi
enhanced open feature is enabled. This feature is based on opportunistic
wireless encryption (OWE). The encryption is set to CCM mode protocol
(CCMP) and 802.11w (PMF) is automatically set to mandatory.
-Allow Clients to Authenticate using Legacy Open (OWE Transition Mode):
If you select the Enhanced Open check box, the Allow Clients to
Authenticate using Legacy Open (OWE Transition Mode) check box
displays. If you select this check box, the WiFi network can accept both clients
that support the WiFi enhanced open feature and clients that do not. For
clients that do not support the WiFi open enhanced feature, traffic is not
encrypted. If you do not select this check box, the WiFi network can only
accept clients that support the WiFi enhanced open feature.
•WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA2. This option uses AES encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast packets
use TKIP. For unicast (that is, point-to-point) transmissions, WPA clients use TKIP
and WPA2 clients use AES. In the Passphrase field, enter a new passphrase for
the WiFi network.
User Manual39Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of supporting
WPA3. This option uses SAE encryption. In the Passphrase field, enter a new
passphrase for the WiFi network.
•WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients
to connect to the SSID. This option uses AES and SAE encryption. WPA2 clients
use AES and WPA3 clients use SAE. In the Passphrase field, enter a new
passphrase for the WiFi network.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 65.
10. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new WiFi
network and password (passphrase).
If you specified a static IP address, save the IP address information because you must
enter the IP address when you log in again.
You are disconnected from the access point. If you changed the default country, the
access point restarts.
11. After a few minutes, if the login window does not display automatically, enter
192.168.0.100 in the address bar of your browser.
If you changed the IP address, enter the IP address that you specified in Step 8.
A login window displays.
12. If your browser does not display the login window but displays a security warning,
dismiss the warning.
For more information, see Step 5.
13. Enter the access point user name and password.
The user name is admin. The password is the one that you just defined on the Day
Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard page displays. You can now customize the access point settings for
your network environment.
14. After you complete the setup process, or both the setup and customization process,
you can change the computer back to its original IP address settings.
User Manual40Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Log in to the access point after initial setup
After initial setup, the access point is ready for use and you can change the settings and
monitor the traffic.
To log in to the access point’s local browser UI:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
The following figure shows the upper part of the Dashboard page.
User Manual41Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The Dashboard page displays various panes that let you see the status of your access
point at a glance. For more information about the Dashboard page and its various
panes, see Monitor the Access Point and the Network on page 166.
Dismiss a browser security warning
When you enter the IP address that is assigned to the access point in the address field
of your browser, a security warning can display. This is normal. You can just dismiss the
security warning.
To dismiss a browser security warning:
•Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of the device.
•Apple Safari: Click the Show Details button. Then, click the visit this website link.
If a warning pop-up window displays, click the Visit Website button. If another
pop-up window displays to let you confirm changes to your certificate trust settings,
enter your Mac user name and password and click the Update Setting button.
•Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button.
In the pop-up window that displays, click the Confirm Security Exception button.
•Microsoft Edge: Select Details > Go on to the webpage.
•Microsoft Internet Explorer: Click the Continue to this website (not
recommended) link.
User Manual42Install the Access Point in Your
Network and Access It for Initial
Configuration
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4
Install the Access Point in an Insight
Instant Mesh WiFi Network
In addition to functioning as a regular standalone access point, the access point can
function in an Insight Instant Mesh WiFi network as either a root access point or an
extender access point.
This chapter describes how you can use the NETGEAR Insight app to connect the access
point to a root access point and let it function as an extender access point in an Insight
Instant Mesh WiFi network. The NETGEAR Insight app is available for Insight Premium
and Insight Pro subscribers.
IMPORTANT: To set up the extender access point in a NETGEAR Insight Instant Mesh
WiFi network with a connection to a root access point, you must use the NETGEAR
Insight app. You cannot use the local browser UI to set up a mesh WiFi connection to
a root access point.
For information about how you can manage and monitor the extender access point with
the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
The chapter contains the following sections:
• What are a root access point and an extender access point?
• What is an Insight Instant Mesh WiFi network?
• Requirements for placing an extender access point in a mesh WiFi network
• Install the NETGEAR Insight app to manage an Insight Instant Mesh WiFi network
• Connect the access point as an extender to a root access point
• Connect over the Internet using the NETGEAR Insight Cloud portal
43
What are a root access point and an extender
access point?
The access point can function in an Insight Instant Mesh WiFi network as a root access
point or and extender access point:
•Root access point: A mesh-capable access point that is set up with a wired
connection to your network and functions as a gateway to another mesh-capable
access point that functions as an extender. On the root access point, use the Ethernet
port for the connection to your network. A root access point can service multiple
extender access points simultaneously.
•Extender access point: A mesh-capable access point that functions as an extender
access point with a WiFi backhaul connection to a root access point that provides
Internet connectivity. The extender access point is not connected to your network
over a wired connection but over a WiFi connection.
33
4
5
1
2
Figure 6. Mesh network with an extender access point and a wired root access point
Number or Icon and Description
1
A root access point that is connected over Ethernet to a network switch.
2
An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point.
3
A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud portal.
The Insight app or Insight Cloud portal let you configure and manage the extender access point in the Insight
Instant Mesh WiFi network.
User Manual44Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
Number or Icon and Description
4
A network switch.
5
A network router that is connected to the Internet.
Broadcast in the 2.4 GHz radio band.
Broadcast in the 5 GHz high or low radio band.
What is an Insight Instant Mesh WiFi
network?
A mesh WiFi network consists of at least one mesh-capable root access point and one
or more extender access points that connect to the root access point over WiFi (see
What are a root access point and an extender access point? on page 44). The root access
point is connected over Ethernet to a router or Internet gateway and provides Internet
access to its extender access points. The root access point and extender access points
work together to cover a potentially large area with WiFi network, which is the mesh
network.
A mesh network can be a good solution if you want to bring WiFi to the following
environments:
•Nearby rooms where cabling is not available (in line of sight and in range of the
current WiFi reception)
•Neighboring office buildings (in line of sight and in range of the current WiFi
reception)
•Any environment in which you cannot run cables
In the mesh WiFi network, the extender access point connects to the root access point
over a WiFi connection and broadcasts (extends) the WiFi network to the WiFi clients:
•Backhaul connection. The WiFi connection between the root access point and the
extender access point is referred to as the backhaul connection.
•Fronthaul connection. The WiFi connection between the extender access point
and its WiFi clients is referred to as the fronthaul connection.
User Manual45Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
In a NETGEAR Insight Instant Mesh WiFi network, you must use the Insight app to set
up the mesh WiFi connection between the root access point and the extender access
point. That is, you cannot do so through the local browser UI of either the root access
point or the extender access point. In a network with multiple root access points,
NETGEAR Insight automatically connects the extender access point to the root access
point with the strongest WiFi signal.
Although the extender access point broadcasts the same WiFi network or networks as
the root access point, you can also set up a WiFi network on the extender access point,
which then can be broadcast by the root access point and other extender access points
in the mesh network.
The access point can broadcast on the 5 GHz high and low bands (the preferred bands
for the backhaul connection) and the 2.4 GHz band. Depending on the WiFi capability
of the WiFi client, any band can provide the fronthaul connection.
Requirements for placing an extender access
point in a mesh WiFi network
The following are the requirements for placing an extender access point in an Insight
Instant Mesh WiFi network:
•The existing WiFi network must include at least one mesh-capable access point that
runs the latest firmware version. On the root access point, use one Ethernet port for
the connection to your network.
•The extender access point must be within range of the WiFi signal of a root access
point so that it can sync with the root access point. For a reliable WiFi connection,
place the extender access point less than 25 feet (7.5 m), in a line of sight with minimal
obstacles from the closest root access point.
•You must use the NETGEAR Insight app to install the extender access point in the
existing WiFi network.
The following NETGEAR access point models can function either as a root access point
or as an extender access point:
•WAX610
•WAX610Y (Although this model can function as an extender access point, you can
power it through PoE only.)
•WAX620
•WAX630
User Manual46Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WAC564
•WAC540
Note: In a mesh WiFi network with WAX610, WAX610Y, WAX620, or WAX630 models
and WAC564 or WAC540 models, the WAC564 and WAC540 models must run firmware
version 9.0 or a later version.
In the near future, more NETGEAR models might be added to the previous list.
Install the NETGEAR Insight app to manage
an Insight Instant Mesh WiFi network
Before you can add the access point to an Insight Instant Mesh WiFi network, you must
install the NETGEAR Insight app on an iOS or Android mobile device. The NETGEAR
Insight app is available for Insight Premium and Insight Pro subscribers.
For more information about the Insight app, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
To install the Insight app:
1. On your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2. Launch the Insight app.
3. If you do not have a NETGEAR account, tap Create NETGEAR Account and follow
the onscreen instructions.
4. Enter the email address and password for your account and tap LOG IN.
You can now set up the access point mesh WiFi connection (see Connect the access
point as an extender to a root access point on page 48).
User Manual47Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Connect the access point as an extender to
a root access point
Use the NETGEAR Insight app to connect the access point as an extender to a root
access point. The root access point must be set up with a wired connection to a router
or Internet gateway so that the root access point can provide Internet connectivity to
the extender access point.
33
4
5
1
2
Figure 7. Connect the extender access point to a wired root access point
Number or Icon and Description
1
A root access point that is connected over Ethernet to a network switch.
2
An extender access point that is connected over a 5 GHz backhaul WiFi connection to the root access point.
3
A mobile phone with the Insight app or either a computer or a tablet with access to the Insight Cloud portal.
The Insight app or Insight Cloud portal let you configure and manage the extender access point in the Insight
Instant Mesh WiFi network.
4
A network switch.
5
A network router that is connected to the Internet.
User Manual48Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
Number or Icon and Description
Broadcast in the 2.4 GHz radio band.
Broadcast in the 5 GHz high or low radio band.
The extender access point can use any band to establish the backhaul connection to
the root access point and the fronthaul connection to WiFi clients. However, after the
backhaul connection is established, the extender access point automatically switches
to the 5 GHz band as the preferred band for its backhaul connection. Using the NETGEAR
Insight app, you can change the preferred band for the backhaul connection.
To use the NETGEAR Insight app to connect the extender access point to a root
access point in an existing WiFi network:
1. For a reliable WiFi connection, place the extender access point less than 25 feet
(7.5 m), in a line of sight with minimal obstacles from the closest root access point.
2. Connect the extender access point to a power source.
The Power/Cloud LED of the extender access point lights amber and then lights
green.
IMPORTANT: To prevent a network loop, connect the extender access point to a
PoE++ switch that is not connected to the same network as the root access point or
to the Internet. You can also use an optional power adapter.
3. Connect your smartphone to the existing WiFi network that includes one or more
root access points.
4. Launch the Insight app and sign in to your NETGEAR account.
In most situations, the Insight app detects the extender access point automatically.
This process might take a few minutes.
5. Do one of the following:
•Automatically detected: If the Insight app detects the extender access point
automatically, tap the extender access point and follow the onscreen instructions
User Manual49Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
to add the extender access point to your Insight account and to an Insight network
location.
•Not automatically detected: If the Insight app does not detect the extender
access point automatically, do the following:
a. Tap +in the upper-right corner.
b. Manually add the extender access point to the Insight app using one of the
following options:
- Scan the QR code.
- Scan the serial number bar code.
- Type in the serial number.
c. Follow the onscreen instructions to add the extender access point to your
Insight account and to an Insight network location.
The extender access point attempts to detect and connect to the root access point
that provides the strongest WiFi signal in the Insight Instant Mesh WiFi network.
Note: The initial connection and configuration process might take up to 10 minutes.
The extender access point might restart during the configuration process.
6. Wait for the extender access point to go through the initial connection and
configuration process and for the Power/Cloud LED to stop blinking amber, green,
and blue and to light solid blue.
Note: The initial connection and configuration process might take up to 10 minutes.
The extender access point might restart during the configuration process.
The Power/Cloud LED lights as follows during the initial connection and configuration
process:
•Blinking green: The extender access point is attempting to detect a root access
point.
•Solid green: The extender access point is making its first connection with the
root access point that provides the strongest WiFi signal.
•Blinking amber slowly: The extender access point is contacting the network
router or DHCP server to receive an IP address.
If the Power/Cloud LED does not stop blinking amber, see Power/Cloud LED is
blinking amber slowly, continuously on page 227.
•Blinking amber, green, and blue: The extender access point is being configured
as a managed device in the Insight Instant Mesh WiFi network.
User Manual50Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If the Power/Cloud LED does not stop blinking amber, green, and blue, see
Power/Cloud LED does not stop blinking amber, green, and blue on page 229.
When the configuration is complete, the Power/Cloud LED lights as follows:
•Solid blue: The configuration is complete and the extender access point is ready
for operation. The extender access point functions in the Insight Instant Mesh
WiFi network and is connected to the Insight cloud.
The extender access point is automatically configured to broadcast (extend) the root
access point’s WiFi network.
If you are experiencing difficulty connecting the extender access point with a root access
point, see The extender access point and root access point cannot connect on page
230.
For information about accessing, managing, and monitoring the extender access point
with the NETGEAR Insight app and Insight Cloud portal, visit netgear.com/insight and
netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR
Insight, visit netgear.com/support.
Connect over the Internet using the
NETGEAR Insight Cloud portal
The NETGEAR Insight Cloud portal is available for Insight Premium and Insight Pro
subscribers.
After you install the access point in an Insight Instant Mesh WiFi network, you can use
the Insight Cloud portal to configure, manage, and monitor the access point.
For more information about the Insight Cloud portal and the configuration and
management options that are available through the Insight Cloud portal, visit
netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge
base articles about NETGEAR Insight, visit netgear.com/support.
To connect to the access point over the Internet through the Insight Cloud portal:
1. Visit insight.netgear.com.
The NETGEAR Account Login page displays.
2. Enter your Insight email address and password.
If you do not own an Insight account, you can create one.
3. Click the Login button.
You can now configure, manage, and monitor the access point.
User Manual51Install the Access Point in an
Insight Instant Mesh WiFi
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5
Manage the Basic WiFi Features for
a WiFi network
The access point can support eight WiFi networks, each with its own unique WiFi settings,
including WiFi security. This chapter describes how you can manage the basic WiFi
features for a WiFi network.
For information about the advanced WiFi features for a WiFi network, see Manage the
Advanced WiFi Features for a WiFi network on page 188.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network
we mean an individual SSID or VAP.
The chapter includes the following sections:
• Set up an open or secure WiFi network
• View or change the settings of a WiFi network
• Remove a WiFi network
• Hide or broadcast the SSID for a WiFi network
• Change the VLAN ID for a WiFi network
• Change the authentication and encryption for a WiFi network
• Enable or disable PMF for a WiFi network
• Disable or enable a WiFi network or set up a WiFi activity schedule
• Enable or disable band steering with 802.11k RRM and 802.11v WiFi network
management
Tip: If you want to change the settings of a WiFi network on the access point, use a
wired connection to avoid being disconnected when the new WiFi settings take effect.
52
Set up an open or secure WiFi network
The access point provides one default SSID that is enabled by default and that broadcasts
on the 2.4 GHz band, 5 GHz high band, and 5 GHz low band. This is the SSID that you
were required to rename when you logged in to the access point for the first time. You
can add more SSIDs: The access point can support a total of eight SSIDs.
The access point can simultaneously support the 2.4 GHz band for 802.11b/g/n/ax WiFi
devices and the 5 GHz high and low bands for 802.11a/na/ac/ax WiFi devices.
SSID stands for service set identifier, which is the WiFi network name. When you create
a new SSID, you are defining the settings for a new WiFi network or virtual access point
(VAP). That means that the access point supports up to eight WiFi networks or VAPs.
If you plan to use WPA2 Enterprise security or WPA3 Enterprise security for your WiFi
network, first set up RADIUS servers (see Set up RADIUS servers on page 120).
To set up a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select and add an SSID.
User Manual53Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Click the +button to the left of Add SSID.
The previous figure shows SSID2 as an example.
6. Specify the WiFi network name (SSID), select whether the SSID is broadcast, and
specify the VLAN ID as described in the following table.
DescriptionSetting
The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a maximum
of 32 characters. You can use a combination of alphanumeric and special characters, except
for quotation marks (") and a backslash (\).
For a WiFi device to be able to connect to the VAP, the SSID on the WiFi device must match
the SSID of the VAP.
Wireless
Network Name
(SSID)
By default, the VAP broadcasts its SSID so that WiFi clients can detect the SSID in their
scanned network lists. To turn off the SSID broadcast, select the No radio button.
Turning off the SSID broadcast provides additional WiFi security, but users must know the
SSID to be able to join the VAP.
Broadcast SSID
You can enter the VLAN ID that must be associated with the VAP. By default, the VLAN ID is
1.
This VLAN ID is not the same as the 802.1Q VLAN ID that is used for the wired network (see
Set the 802.1Q VLAN and management VLAN on page 127).
VLAN ID
User Manual54Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7. Specify the WiFi security by selecting an option from the Authentication menu and,
if applicable, by specifying a passphrase in the Passphrase field or selecting an
option from the Encryption menu:
•Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check
box displays.
-Enhanced Open check box cleared: The WiFi network is a legacy open
network without any security. This is the default option for an open network.
Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled (see Step 9).
-Enhanced Open check box selected: The WiFi enhanced open feature is
enabled. This feature is based on opportunistic wireless encryption (OWE).
The encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory (see Step 9). If you select the Enhanced Open
check box, the Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open enhanced
feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
•WPA2 Personal: This option, which is the same as WPA2-PSK, is the default
setting and uses AES encryption. This type of security enables only WiFi devices
that support WPA2 to join the VAP.
WPA2 provides a secure connection but some legacy WiFi devices do not detect
WPA2 and support only WPA. If your network includes such older devices, select
WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA2/WPA Personal: This option, which is the same as WPA2-PSK/WPA-PSK,
enables WiFi devices that support either WPA2 or WPA to join the VAP. This
option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and
limits the speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
User Manual55Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WPA2 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA2
Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS
servers on page 120).
From the Encryption menu, select the data encryption mode:
-TKIP + AES. This type of data encryption enables WiFi devices that support
either WPA or WPA2 to join the access point’s WiFi network. This is the default
mode.
-AES. This type of data encryption provides a secure connection but some
older WiFi devices do not detect WPA2 and support only WPA. Therefore, if
your network includes such older devices, select TKIP + AES encryption.
When you select WPA2 Enterprise authentication, the Dynamic VLAN radio
buttons display:
-Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
-Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
•WPA3 Personal: This option is the most secure personal authentication option.
WPA3 uses SAE encryption and enables only WiFi devices that support WPA3
to join the VAP. If you select this option, 802.11w (PMF) is automatically set to
mandatory (see Step 9).
WPA3 provides a secure connection but some legacy WiFi devices do not detect
WPA3 and support only WPA2. If your network also includes WPA2 devices,
select WPA3/WPA2 Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA3/WPA2 Personal: This option, which is the same as WPA3/WPA2-PSK,
enables WiFi devices that support either WPA3 or WPA2 to join the VAP. This
option uses SAE and AES encryption.
WPA2-PSK (which uses AES) is less secure than WPA3 (which uses SAE).
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA3 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA3
Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS
User Manual56Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
servers on page 120). If you select this option, 802.11w (PMF) is automatically set
to mandatory (see Step 9).
When you select WPA3 Enterprise security, the encryption is automatically set to
GCMP256, which is a 256-bit encryption protocol.
When you select WPA3 Enterprise authentication, the Dynamic VLAN radio
buttons display:
-Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
-Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
8. Optionally, disable the WiFi broadcast or set up a WiFi activity schedule by selecting
one of the following radio buttons:
•Always ON: When you set up an SSID, you are creating a new VAP. By default,
the new VAP is enabled and the Always ON radio button is selected.
•Always OFF: Select this radio button to set up the SSID but temporarily disable
the VAP.
•Custom: Select this radio button to set up a broadcast schedule. An icon displays
to the right of the radio button. Do the following:
a. Click the icon next to the radio button.
A pop-up window displays.
b. Either select a predefined time from the Preset menu or select custom time
blocks by clicking the time blocks.
A blue color for a time block indicates that the VAP will be enabled (on). A
gray color for a time block indicates that the VAP will be disabled (off).
c. Click the Done button.
The pop-up window closes.
For each SSID, you can create a single custom schedule. In that schedule, for
each day from 12:00 a.m. to 11:59 p.m., you specify the time or times that the
VAP is disabled.
9. Optionally, enable 802.11w Protected Management Frames (PMF).
Protected Management Frames (PMF), according to the 802.11w standard, is a
security feature that protects unicast and multicast management frames from being
intercepted and changed for malicious purposes. The type of authentication that
User Manual57Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
you select determines if this feature is mandatory, optional, disabled. You can also
set it manually.
•Mandatory: This option requires devices to use PMF. Devices that do not support
PMF cannot connect to the WiFi network. If you select Enhanced Open
authentication, WPA3 Personal authentication, or WPA3 Enterprise authentication,
the radio button for PMF is set to Mandatory, and you cannot change it.
•Optional: This option lets the access point automatically activate PMF based on
whether devices can support PMF. If you select WPA3/WPA2 Personal
authentication, the radio button for PMF is set to Optional, but you can change
it.
•Disable: This option disables PMF. If you select Open, WPA2 Personal,
WPA2/WPA Personal, or WPA2 Enterprise authentication, the radio button for
PMF is set to Disabled, but you can change it (except for Open authentication).
10. Optionally, select a single radio band only.
Select a radio button for a single band (2.4 GHz or 5 GHz) or keep the default
selection. By default, the Both radio button is selected, which lets the access point
broadcast the SSID on the 2.4 GHz band and both 5 GHz bands (the high band and
the low band).
11. Optionally, enable band steering with 802.11k radio resource management (RRM)
and 802.11v WiFi network management.
By default, band steering with 802.11k RRM and 802.11v WiFi network management
is disabled for the VAP.
To enable band steering with 802.11k RRM and 802.11v WiFi network management,
select the Enable radio button. Doing so allows the access point, under certain
channel conditions, to steer WiFi devices that are dual-band capable to the 2.4 GHz
band or 5 GHz bands of the VAP. Compared to the 2.4 GHz band, generally more
channels and bandwidth are available in the 5 GHz bands, causing less interference
and allowing for a better user experience.
802.11k RRM and 802.11v WiFi network management affect the network in the
following ways:
•802.11k RRM: This feature lets the access point and 802.11k-aware clients
dynamically measure the available radio resources. In an 802.11k-enabled
network, access points and clients can send neighbor reports, beacon reports,
and link measurement reports to each other, allowing 802.11k-aware clients to
automatically select the best access point for initial connection or for roaming.
•802.11v WiFi network management: This feature lets the access point steer
its WiFi clients to the 2.4 GHz band or 5 GHz bands, based on the access point’s
channel load.
User Manual58Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The access point sets the received signal strength indicator (RSSI) threshold
automatically. (That is, you cannot configure the RSSI threshold manually.)
12. To configure client isolation, configure URL tracking, configure if a DHCP Offer
message is unicast or broadcast, or do all of this, scroll down and click the >
Advanced tab.
13. Optionally, configure WiFi client isolation.
By default, client isolation is disabled for the VAP, and the Disable radio button is
selected. To block communication between WiFi clients that are associated with the
same SSID or different SSIDs on the access point, select the Enable radio button.
When you select the Enable radio button, the following check boxes display:
•Allow Access to AP UI: If the management VLAN and WiFi network VLAN are
identical (by default, both are VLAN 1) and you enable client isolation, the Allow
Access to AP UI check box displays. By default, this check box is selected, allowing
an admin user to access the local browser UI over the WiFi network. If you clear
the Allow Access to AP UI check box, an admin user cannot access the local
browser UI over the WiFi network.
If the management VLAN and WiFi network VLAN are identical (which they are
by default), an admin user can always access the local browser UI over a wired
network connection.
•Allow access to devices listed below: You can specify static IP addresses or
domains (that resolve to static IP addresses) of network devices that are exempt
from isolation so that clients are allowed to reach them. For more information,
see Enable or disable client isolation for a WiFi network on page 189.
14. Optionally, enable URL tracking.
By default, URL tracking is disabled, and the Disable radio button is selected. To
enable URL tracking for all URLs that are requested by WiFi clients that are connected
to the SSID, select the Enable radio button.
User Manual59Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
For information about how to view the tracked URLs per SSID or per WiFi client, see
View or download tracked URLs on page 181.
15. Optionally, change the DHCP Offer message settings.
When a device tries to associate with the WiFi network and negotiates an IP address,
the access point converts the broadcast DHCP offer message that it receives from
the DHCP server to a unicast message, and forwards it to the device. This is the
default option (that is, the Enable radio button is selected). To disable this option
so that the access point does not convert the broadcast DHCP offer messages to
unicast messages, select the Disable radio button.
16. To configure a captive portal, a MAC ACL, and bandwidth rate limits, see the
information in the following sections:
•Set Up and Manage a Captive Portal on page 88
•Manage local MAC access control lists on page 107 and Select a MAC ACL for a
WiFi network on page 193
•Set bandwidth rate limits for a WiFi network on page 195
Although you could also configure these features while you set up a WiFi network,
these features are more complicated and therefore described separately.
17. To configure advance rate selection, see Configure advanced rate selection for a
WiFi network on page 196.
18. Click the Apply button.
Your settings are saved.
19. Make sure that you can connect to the new WiFi network.
If you cannot connect to the new WiFi network, check the following:
•If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
•Does your WiFi device display as a connected client? (See Display client
distribution, connected clients, and client trends on page 175.) If it does, it is
connected to the network.
•Are you using the correct WiFi network name (SSID) and password?
User Manual60Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•If the WiFi authentication and encryption is set to WPA3 Personal, make sure that
the WiFi adapter device driver is updated to the latest version on your
WiFi-enabled computer or mobile device.
View or change the settings of a WiFi
network
You can view or change the settings of the default WiFi network (SSID or VAP) or any
custom WiFi network.
To view or change the settings of a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Change the settings of the WiFi network as needed.
For detailed descriptions of the settings, see Set up an open or secure WiFi network
on page 53.
7. If you made changes, click the Apply button.
User Manual61Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Your settings are saved.
8. If you made changes, make sure that you can reconnect over WiFi to the network
with its new settings.
If you cannot connect over WiFi, check the following:
•If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
•Does your WiFi device display as a connected client? (See Display client
distribution, connected clients, and client trends on page 175.) If it does, it is
connected to the network.
•Are you using the correct WiFi network name (SSID) and password?
Remove a WiFi network
You can remove a custom WiFi network (SSID or VAP) that you no longer need. You
cannot remove the default WiFi network.
To remove a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
User Manual62Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the trash can icon to the right of the SSID.
A warning pop-up window displays.
6. Click the Delete button.
The pop-window closes and the WiFi network is removed.
Hide or broadcast the SSID for a WiFi
network
By default, a WiFi network (SSID or VAP) broadcasts its network name (also referred to
as the SSID) so that WiFi clients can detect the SSID in their scanned network lists. For
additional security, you can turn off the SSID broadcast and hide the SSID so that users
must know the SSID to be able to join the WiFi network.
Note: If you set up a wireless distribution system (WDS; see Set up a WiFi Bridge on
page 201), you must keep the SSID broadcast enabled.
To hide or broadcast the network name for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
User Manual63Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Under Broadcast SSID, select one of the following radio buttons:
•No: The SSID is hidden for the WiFi network.
•Yes: The SSID is broadcast for the WiFi network.
7. Click the Apply button.
Your settings are saved.
Change the VLAN ID for a WiFi network
The VLAN ID for a WiFi network is not the same as the 802.1Q VLAN ID that is used for
the wired network (see Set the 802.1Q VLAN and management VLAN on page 127).
CAUTION: Before you change the VLAN ID, be sure that the VLAN is configured on
the network switch and the DHCP server and that the access point and its clients can
get IP addresses over the new VLAN.
To change the VLAN ID for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual64Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. In the VLAN ID field, enter a ID (that is, a number).
By default, the VLAN ID for a WiFi network is 1.
7. Click the Apply button.
Your settings are saved.
Change the authentication and encryption
for a WiFi network
You can change the authentication and encryption of the default WiFi network (SSID or
VAP) or any custom WiFi network.
Before you change the authentication and encryption, consider the types of clients that
must be able to connect to the WiFi network. WPA3 provides a more secure connection
than WPA2, but many WiFi devices might not yet detect WPA3 and support only WPA2.
Similarly, WPA2 provides a more secure connection than WPA, but some legacy WiFi
devices do not detect WPA2 and support only WPA.
If you plan to use WPA2 Enterprise security or WPA3 Enterprise security for your WiFi
network, first set up RADIUS servers (see Set up RADIUS servers on page 120).
To change the authentication and encryption for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
User Manual65Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select and add an SSID.
5. Click the +button to the left of Add SSID.
The settings for the selected SSID display.
6. From the Authentication menu, select one of the following authentication types for
the WiFi network, and, if applicable, set a new passphrase (network key or WiFi
password) in the Passphrase field or select an option from the Encryption menu:
•Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check
box displays:
-Enhanced Open check box cleared: The WiFi network is a legacy open
network without any security. This is the default option for an open network.
Clients are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled (see Enable or disable PMF for a WiFi network on page
69).
-Enhanced Open check box selected: The WiFi enhanced open feature is
enabled. This feature is based on opportunistic wireless encryption (OWE).
The encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory (see Enable or disable PMF for a WiFi network
on page 69).
If you select the Enhanced Open check box, the Allow Devices to Connect
with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open enhanced
feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
User Manual66Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WPA2 Personal: This option, which is the same as WPA2-PSK, is the default
setting and uses AES encryption. This type of security enables only WiFi devices
that support WPA2 to join the VAP.
WPA2 provides a more secure connection than WPA but some legacy WiFi devices
do not detect WPA2 and support only WPA. If your network includes such older
devices, select WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA2/WPA Personal: This option, which is the same as WPA2-PSK/WPA-PSK,
enables WiFi devices that support either WPA2 or WPA to join the VAP. This
option uses AES and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and
limits the speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA2 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA2
Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS
servers on page 120).
From the Encryption menu, select the data encryption mode:
-TKIP + AES: This type of data encryption enables WiFi devices that support
either WPA or WPA2 to join the access point’s WiFi network. This is the default
mode.
-AES: This type of data encryption provides a secure connection but some
older WiFi devices do not detect WPA2 and support only WPA. Therefore, if
your network includes such older devices, select TKIP + AES encryption.
When you select WPA2 Enterprise authentication, the Dynamic VLAN radio
buttons display:
-Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
-Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
•WPA3 Personal: This option is the most secure personal authentication option.
WPA3 uses SAE encryption and enables only WiFi devices that support WPA3
User Manual67Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
to join the VAP. If you select this option, 802.11w (PMF) is automatically set to
mandatory (see Enable or disable PMF for a WiFi network on page 69).
WPA3 provides a more secure connection than WPA2 but many WiFi devices
might not yet detect WPA3 and support only WPA2. If your network also includes
WPA2 devices, select WPA3/WPA2 Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA3/WPA2 Personal: This option, which is the same as WPA3/WPA2-PSK,
enables WiFi devices that support either WPA3 or WPA2 to join the VAP. This
option uses SAE and AES encryption.
WPA2-PSK (which uses AES) is less secure than WPA3 (which uses SAE).
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the VAP, a
user must enter this passphrase. To view the passphrase in clear text, click the
eye icon.
•WPA3 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA3
Enterprise security to function, you must set up RADIUS servers (see Set up RADIUS
servers on page 120). If you select this option, 802.11w (PMF) is automatically set
to mandatory (see Enable or disable PMF for a WiFi network on page 69).
When you select WPA3 Enterprise security, the encryption is automatically set to
GCMP256, which is a 256-bit encryption protocol.
When you select WPA3 Enterprise authentication, the Dynamic VLAN radio
buttons display:
-Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
-Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
7. Click the Apply button.
Your settings are saved.
8. Make sure that you can connect to the new WiFi network.
If you cannot connect to the new WiFi network, check the following:
•If your WiFi-enabled computer or mobile device is already connected to another
WiFi network in your area, disconnect it from that WiFi network and connect it to
the correct WiFi network. Some WiFi devices automatically connect to the first
open network without WiFi security that they discover.
•If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the WiFi
User Manual68Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
network selection in your WiFi-enabled computer or mobile device to match the
current settings for your network.
•Does your WiFi device display as a connected client? (See Display client
distribution, connected clients, and client trends on page 175.) If it does, it is
connected to the network.
•Are you using the correct WiFi network name (SSID) and password?
•If you changed the WiFi authentication and encryption to WPA3 Personal, make
sure that the WiFi adapter device driver is updated to the latest version on your
WiFi-enabled computer or mobile device.
Enable or disable PMF for a WiFi network
Protected Management Frames (PMF), according to the 802.11w standard, is a security
feature that protects unicast and multicast management frames from being intercepted
and changed for malicious purposes. The type of authentication that you select
determines if this feature is mandatory, optional, disabled. You can also set it manually.
To enable or disable PMF for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
User Manual69Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The settings for the selected SSID display.
6. Under 802.11w (PMF), select one of the following radio buttons:
•Mandatory: Requires devices to use PMF. Devices that do not support PMF
cannot connect to the WiFi network. If you select Enhanced Open authentication,
WPA3 Personal authentication, or WPA3 Enterprise authentication, the radio
button for PMF is set to Mandatory, and you cannot change it.
•Optional: Lets the access point automatically activate PMF based on whether
devices can support PMF. If you select WPA3/WPA2 Personal authentication, the
radio button for PMF is set to Optional, but you can change it.
•Disable: PMF is disabled for the WiFi network. If you select Open, WPA2 Personal,
WPA2/WPA Personal, or WPA2 Enterprise authentication, the radio button for
PMF is set to Disabled, but you can change it (except for Open authentication).
7. Click the Apply button.
Your settings are saved.
Disable or enable a WiFi network or set up
a WiFi activity schedule
You can temporarily disable a WiFi network (SSID or VAP), you can reenable the WiFi
network, or you can set up a schedule that specifies when the WiFi network is active.
Scheduling a WiFi network a green feature that allows you to turn off the WiFi network
during scheduled vacations, office shutdowns, on evenings, or on weekends.
For each WiFi network, you can create a single custom schedule. In that schedule, for
each day from 12:00 a.m. to 11:59 p.m., you specify the time or times that the VAP is
disabled.
To disable or enable a WiFi network or set up a WiFi activity schedule:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
User Manual70Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Under Schedule, select one of the following radio buttons:
•Always ON: The WiFi network is enabled.
•Always OFF: The WiFi network is disabled.
•Custom: The WiFi network is enabled or disabled according to a schedule that
you must set up.
An icon displays to the right of the radio button.
7. If you selected Custom in the previous step, do the following:
a. Click the icon next to the radio button.
A pop-up window displays.
b. Either select a predefined time from the Preset menu or select custom time
blocks by clicking the time blocks.
A blue color for a time block indicates that the WiFi network will be enabled (on).
A gray color for a time block indicates that the WiFi network will be disabled (off).
c. Click the Done button.
The pop-up window closes.
8. Click the Apply button.
Your settings are saved.
User Manual71Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Enable or disable band steering with 802.11k
RRM and 802.11v WiFi network management
Band steering lets the access point identify the WiFi devices that are dual-band capable
and steer those devices to the 2.4 GHz or or 5 GHz bands of a WiFi network (SSID or
VAP). Compared to the 2.4 GHz band, generally more channels and bandwidth are
available in the 5 GHz bands, causing less interference and allowing for a better user
experience. Band steering includes 802.11k radio resource management (RRM) and
802.11v WiFi network management. By default, band steering is disabled.
802.11k RRM and 802.11v WiFi network management affect the network in the following
ways:
•802.11k RRM: This feature lets the access point and 802.11k-aware clients
dynamically measure the available radio resources. In an 802.11k-enabled network,
access points and clients can send neighbor reports, beacon reports, and link
measurement reports to each other, allowing 802.11k-aware clients to automatically
select the best access point for initial connection or for roaming.
•802.11v WiFi network management: This feature lets the access point steer its
WiFi clients to the 2.4 GHz band or 5 GHz bands, based on the access point’s channel
load. In an environment with multiple access points, 802.11v WiFi network
management helps WiFi clients that are roaming to select the best access point.
The access point sets the received signal strength indicator (RSSI) threshold automatically.
(That is, you cannot configure the RSSI threshold manually.)
To enable or disable band steering with 802.11k RRM and 802.11v WiFi network
management for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual72Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Under Band Steering / 802.11 k/v, select one of the following radio buttons:
•Disable: Band steering is disabled for the VAP. This is the default setting.
•Enabled: Under certain channel conditions, the access point steers WiFi devices
that are dual-band capable to the 2.4 GHz band or 5 GHz bands of the VAP.
7. Click the Apply button.
Your settings are saved.
User Manual73Manage the Basic WiFi Features
for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6
Manage the Basic Radio Features
This chapter describes how you can manage the basic radio features of the access point.
For information about the advanced radio features, see Manage the Advanced Radio
Features on page 207.
CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all
WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio
feature on a 5 GHz radio (you can configure the 5 GHz high band and 5 GHz low band
separately), the change affects all WiFi networks that broadcast on the 5 GHz high band
or low band radio. If the change is not specific to one radio, the change affects all WiFi
networks on the access point.
The chapter includes the following sections:
• Manage the basic WiFi settings for the radios
• Turn a radio on or off
• Change the WiFi mode for a radio
• Change the channel width for a radio
• Change the guard interval for a radio
• Change the output power for a radio
• Change the channel for a radio
• Manage Quality of Service for a WiFi radio
Tip: If you want to change the radio settings, use a wired connection to avoid being
disconnected when the new radio settings take effect.
74
Manage the basic WiFi settings for the radios
The basic WiFi settings for each radios apply to all WiFi networks (VAPs or SSIDs) that
are configured on the radio. You can specify the radio settings for the 2.4 GHz, 5 GHz
high band, and 5 GHz low band radios individually.
To manage the basic WiFi settings for the radios:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual75Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The following descriptions apply to all radios, but you can specify the radio settings
for the 2.4 GHz, 5 GHz high band, and 5 GHz low band radios individually.
5. Configure the following settings:
•Turn Radio On: By default, the Turn Radio On check box is selected and the
radio broadcasts. Turning off a radio disables WiFi access for the band, which
can be helpful during configuration, network tuning, or troubleshooting.
•Wireless Mode:
Select one of the following wireless modes (WiFi modes) for the 2.4 GHz radio:
-11ax: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. This is the default setting.
-11ng: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ng (about 400 Mbps).
-11bg: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax and 802.11ng clients is
limited to the maximum speed that is supported by 802.11bg (about 54 Mbps).
User Manual76Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
-11b: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax, 802.11n, and 802.11bg
clients is limited to the maximum speed that is supported by 802.11b (about
11 Mbps).
Select one of the following wireless modes (WiFi modes) for a 5 GHz radio:
-11ax: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. This is the default setting.
-11ac: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ac (about 867 Mbps).
-11na: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax and 802.11ac clients is
limited to the maximum speed that is supported by 802.11na (about 450
Mbps).
-11a: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to
the access point. However, the speed of 802.11ax, 802.11ac, 802.11na clients
is limited to the maximum speed that is supported by 802.11a (up to about
54 Mbps).
•Channel Width: From the menu, select the channel width for the radio. Your
selection from the Wireless Mode menu determines if you can set the channel
width, and if so, which channel widths are available.
Use the following guidelines:
-A wider channel improves the performance (no or minimal interference and
better data rates).
-The 802.11n specification allows a 40 MHz–wide channel in addition to the
legacy 20 MHz channel that is available with other modes.
-The 802.11ac specification allows an 80 MHz–wide channel in addition to the
20 MHz and 40 MHz channels that are available with other modes.
-The 40 MHz and 80 MHz channels enable higher data rates but leave fewer
channels available for use.
For more information, see Change the channel width for a radio on page 81.
•Guard Interval: From the menu, select the transmission power of the radio. You
can select 100%(Max),50%,25%,12.5%,or4%(Min). The default is 100%(Max).
User Manual77Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Note: If two or more access points are operating in the same area and on the
same channel, interference can occur. In this a situation, you might want to
decrease the output power for the access point. Make sure that you comply with
the regulatory requirements for total radio frequency (RF) output power in your
country.
•Channel: From the menu, select the WiFi channel for the radio. The available
WiFi channels and frequencies depend on the country that you selected for the
access point and on the radio. The default is Auto, which enables a radio to
automatically select the most suitable channel.
Note: You do not need to change the WiFi channel unless you experience
interference (which is indicated by lost connections).
Note: If you use multiple access points, reduce interference by selecting different
channels for adjacent access points. We recommend a channel spacing of four
channels between adjacent access points (for example, in the 2.4 GHz band, use
channels 1 and 5, or 6 and 10).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Turn a radio on or off
By default, the 2.4 GHz, 5 GHz high band, and 5 GHz low band radios broadcast. Turning
off a radio disables WiFi access for the associated band, which affects all WiFi networks
(VAPs or SSIDs) in that band. Turning off a radio can be helpful during configuration,
network tuning, or troubleshooting.
To turn a radio on or off:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual78Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. Take one of the following actions:
•Turn a radio on: Select the Turn Radio ON check box for the radio.
•Turn a radio off: Clear the Turn Radio ON check box for the radio.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the WiFi mode for a radio
By default, all types of WiFi clients can access a WiFi network on the access point, that
is, the WiFi modes on the access point support 802.11ax, 802.11ac, 802.11na, 802.11ng,
802.11bg, 802.11b, and 802.11a clients. You can change the WiFi modes to limit access
to certain types of clients.
To change the WiFi mode for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual79Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. Select the WiFi mode for the radio:
•2.4 GHz radio: Select one of the following WiFi modes for the 2.4 GHz radio:
-11ax: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. This is the default setting.
-11ng: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ng (about 400 Mbps).
-11bg: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax and 802.11ng clients is
limited to the maximum speed that is supported by 802.11bg (about 54 Mbps).
-11b: 802.11ax, 802.11ng, 802.11bg, and 802.11b WiFi clients can connect
to the access point. However, the speed of 802.11ax, 802.11n, and 802.11bg
clients is limited to the maximum speed that is supported by 802.11b (about
11 Mbps).
•5 GHz radio: Select one of the following WiFi modes for a 5 GHz radio:
-11ax: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. This is the default setting.
-11ac: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax clients is limited to the
maximum speed that is supported by 802.11ac (about 867 Mbps).
-11na: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect
to the access point. However, the speed of 802.11ax and 802.11ac clients is
User Manual80Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
limited to the maximum speed that is supported by 802.11na (about 450
Mbps).
-11a: 802.11ax, 802.11ac, 802.11na, and 802.11a WiFi clients can connect to
the access point. However, the speed of 802.11ax, 802.11ac, 802.11na clients
is limited to the maximum speed that is supported by 802.11a (up to about
54 Mbps).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the channel width for a radio
Use the following guidelines when you determine the channel width for a radio:
•A wider channel generally improves the performance (no or minimal interference
and better data rates).
•A narrower channel generally results in lower throughput but might provide a more
stable connection in a demanding situation, such as an environment with a long
distance between the access point and WiFi clients and more than normal
interference.
•The 802.11n specification allows a 40 MHz–wide channel in addition to the legacy
20 MHz channel that is available with other WiFi modes.
•The 802.11ac specification and the 802.11ax specification for the 5 GHz band allow
an 80 MHz–wide channel in addition to the 20 MHz and 40 MHz channels that are
available with other WiFi modes.
•The 40 MHz and 80 MHz channels enable higher data rates but leave fewer channels
available for use.
Note: We recommend that leave the default options (20 MHz for the 2.4 GHz radio
and 40 MHz for the 5 GHz radios).
The WiFi mode (see Change the WiFi mode for a radio on page 79) determines if you
can set the channel width, and if so, which channel widths are available.
User Manual81Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To change the channel width for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Channel Width menu for the radio, select one of the following settings.
•20 MHz: This is the default setting for the 2.4 GHz radio.
•40 MHz: This is the default settings for a 5 GHz radio.
•80 MHz: This selection is available only for a 5 GHz radio.
•Dynamic 20 / 40 MHz. This selection is available only for the 2.4 GHz radio.
•Dynamic 20 / 40 / 80 MHz. This selection is available only for a 5 GHz radio.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
User Manual82Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Change the guard interval for a radio
From the menu, select the guard interval, which protects radio transmissions from
interference. The WiFi mode (see Change the WiFi mode for a radio on page 79)
determines if you can set the guard interval, and if so, which guard intervals are available.
For the 11a, 11b, and 11bg WiFi modes, you cannot set the guard interval at all.
Use the following guidelines:
•A shorter guard interval supports more throughput in an environment in which WiFi
devices operate at a shorter distance from the access point.
•A longer guard interval works well in an environment with multiple SSIDs and WiFi
devices that operate at a longer distance from the access point.
•Some legacy devices can operate with a long –800ns guard interval only.
To change the guard interval for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Guard Interval menu for the radio, select one of the following settings:
•Auto: The guard interval is set automatically by the access point. This option is
not available in the 11ax WiFi mode.
User Manual83Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Long-800 ns: This option is available in the 11ax, 11ac, 11na, and 11ng modes.
In the 11ax WiFi mode, this option is the default setting.
•Double Long-1600 ns: This option is available only in the 11ax WiFi mode.
•Quadruple Long-3200 ns: This option is available only in the 11ax WiFi mode.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the output power for a radio
By default, the output power of the access point is set at the maximum. If two or more
access points are operating in the same area and on the same channel, interference
can occur. In such a situation, you might want to decrease the output power for the
access point. Make sure that you comply with the regulatory requirements for total radio
frequency (RF) output power in your country.
To change the output power for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual84Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Output Power menu for the radio, select 100%(Max),50%,25%,12.5%,
or 4%(Min).
The default is 100%(Max).
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Change the channel for a radio
The available WiFi channels and frequencies depend on the country that you select for
the access point and the radio. The default is Auto, which enables a radio to automatically
select the most suitable channel.
Note: You do not need to change the WiFi channel unless you experience interference
(which is indicated by lost connections).
Note: If you use multiple access points, reduce interference by selecting different
channels for adjacent access points. We recommend a channel spacing of four channels
between adjacent access points (for example, in the 2.4 GHz band, use channels 1 and
5, or 6 and 10).
To change the channel for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual85Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Wireless Settings.
The Wireless Settings page displays.
5. From the Channel menu for the radio, select a channel.
The default is Auto. When you select a particular channel, the channel selection
becomes static.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Manage Quality of Service for a WiFi radio
You can specify the Quality of Service (QoS) setting for the 2.4 GHz and 5 GHz radios
separately. These settings are enabled by default for each radios. Disabling QoS for a
radio might impact the throughput and speed of WiFi traffic on the access point.
To manage the QoS settings for a WiFi radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual86Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > QoS Settings.
The QoS Settings page displays.
5. Enable or disable the following features for the radio by selecting the applicable
Enable or Disable radio buttons:
•Wi-Fi Multimedia (WMM): WiFi Multimedia (WMM) is a subset of the 802.11e
standard. Time-dependent information such as video or audio is given higher
priority than normal traffic. For WMM to function correctly, WiFi clients must also
support WMM. By enabling WMM, you allow WMM to control upstream traffic
flowing from WiFi devices to the access point and downstream traffic flowing
from the access point to WiFi devices. WMM defines the following four queues
in decreasing order of priority:
-Voice: The highest priority queue with minimum delay, which makes it very
suitable for applications such as VoIP and streaming media.
-Video: The second highest priority queue with low delay. Video applications
are routed to this queue.
-Best effort: The medium priority queue with medium delay. Most standard
IP applications use this queue.
-Background: The low priority queue with high throughput. Applications such
as FTP that are not time-sensitive but require high throughput can use this
queue.
•WMM Powersave: Enabling the WMM Powersave feature saves power for
battery-powered devices and fine-tunes power consumption.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
User Manual87Manage the Basic Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7
Set Up and Manage a Captive Portal
This chapter describes how you can set up and manage a captive portal on the access
point.
A captive portal is a web page that users see when they attempt to connect to a WiFi
network. A captive portal includes a splash page and usually requires some form of
authentication for the user. The access point supports three types of captive portals:
•Click-through captive portal: A basic portal for which the splash page is stored on
the access point. For each WiFi network, you can set up a unique click-through
captive portal.
•External captive portal: A portal that is hosted by an external captive portal vendor.
You can apply an external captive portal to multiple WiFi networks or you can apply
a unique external captive portal to each WiFi network.
•Facebook Wi-Fi captive portal: A Facebook business page that serves as a portal.
You can configure a single Facebook Wi-Fi captive portal on the access point but
you can apply it to multiple WiFi networks.
The chapter includes the following sections:
• Set up a click-through captive portal for a WiFi network
• Set up an external captive portal for a WiFi network
• Register and configure Facebook Wi-Fi for the access point
• Set up a Facebook Wi-Fi captive portal for a WiFi network
• Unregister the access point from Facebook Wi-Fi
88
Set up a click-through captive portal for a
WiFi network
A click-through captive portal is a basic portal for which the splash page is stored on
the access point, that is, it is not an external captive portal. Use a click-through captive
portal to welcome or instruct WiFi users and limit their sessions. You can require users
to agree to an end user license agreement (EULA) and redirect them a specific website.
A click-through captive portal is specific to the WiFi network (SSID) on which you set it
up.
To set up a click-through captive portal for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Select the Captive Portal check box.
The page adjusts. By default, the Click Through radio button is selected.
User Manual89Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. Specify the click-through settings as described in the following table.
DescriptionSetting
Enter the number of minutes from 1 to 1440 after which a WiFi session is terminated
and a user must log in again. The default is 60 minutes.
Session Timeout (in
min)
To redirect a user to a specific website after login, select the Redirect URL check box
and enter the URL. If the Redirect URL check box is cleared, a user is directed to the
default web page.
Redirect URL
Enter the title that is displayed on the captive portal login page. If you do not
customize the title, the default title displays on the captive portal login page.
Title
Enter a message to the user. This message is displayed on the captive portal login
page. If you do not customize the message, the default message displays on the
captive portal login page.
Message
User Manual90Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
DescriptionSetting
To customize the image that is displayed on the captive portal login page, click the
Browse button and navigate to and select an image. If you do not customize the
image, the default image displays on the captive portal login page.
JPEG/JPG Image
(Max 500 KB)
The field includes a default end user license agreement (EULA). You can enter or
copy custom text into the field. To show the EULA on the captive portal login page,
select the EULA check box.
EULA (Max 1 KB)
9. To preview the captive portal login page, click the Preview button.
The following figure shows an example (that is, the figure does not show the default
captive portal but a customized one).
10. Click the Apply button.
Your settings are saved. WiFi clients attempting to connect to the SSID are presented
with the captive portal login page.
Note: An HTTPS session is blocked until after the captive portal authentication
occurs.
User Manual91Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Set up an external captive portal for a WiFi
network
An external captive portal is a portal that is hosted by an external captive portal vendor.
That is, this type of portal is not stored on the access point. For an external captive portal,
you generally must register your devices with and purchase licenses from the vendor.
You can apply an external captive portal to multiple WiFi networks or you can apply a
unique external captive portal to each WiFi network
To set up an external captive portal for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Select the Captive Portal check box.
The page adjusts. By default, the Click-Through radio button is selected.
User Manual92Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. Click the External Captive Portal radio button.
9. In the Splash Page URL field, enter the URL that is provided by the vendor.
This URL redirects a user to the splash page on the website that hosts the captive
portal.
10. Select one of the following Captive Portal Authentication Type radio buttons:
•Web/HTTP: Authentication for access to the splash page occurs on the access
point using the HTTPS protocol. Specify the following settings:
-Web Authentication URL: Enter the web authentication URL that is provided
by the vendor.
-Key: Enter the key credential that is provided by the vendor. This field is
optional and depends on the authentication requirements of the vendor.
-Secret: Enter the secret credential that is provided by the vendor. This field
is optional and depends on the authentication requirements of the vendor.
•Radius: Authentication for access to the splash page occurs on an external RADIUS
authentication server. The vendor might also require an accounting RADIUS
User Manual93Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
server. Specify the following settings for each RADIUS server, as directed by the
vendor:
-IPv4 Address: Enter the IP address of the server. The IP address is provided
by the vendor.
-Port: Enter the port number that is used by the server. The IP port number is
provided by the vendor. By default, an authentication server uses port number
1812; an accounting server uses port number 1813.
-Password: Enter the password (shared secret) for interaction with the server.
The password is provided by the vendor.
11. Select one of the following FailSafe buttons to specify if users are allowed to reach
the splash page and access the Internet if authentication is not possible:
•Enable: If authentication is not possible—for example, because captive portal
servers do not respond—users are still allowed to access the Internet for a period
of 30 minutes.
•Disable: This is the default setting. If authentication is not possible, users cannot
reach the splash page and cannot access the Internet. Instead, they get a message
Oops. Something went wrong. Please try after some time.
12. Select one of the following Allow HTPPS buttons to specify when secure HTTP
(HTTPS) traffic is allowed to pass through:
•Enable: Before authentication occurs, HTTPS traffic is allowed to pass through.
•Disable: This is the default setting. HTTPS traffic is allowed only after
authentication occurs.
13. Configure the walled garden settings.
The walled garden specifies the external applications and sites that a user can access
from the captive portal. Generally, the vendor provides information about the
applications and sites. The vendor splash page, domain name, and authentication
servers must also be included in the walled garden. Follow the directions of the
vendor.
You can do the following to configure the walled garden:
•Add a single URL: In the right field, type the URL, press Enter, and click the Move
button.
•Add multiple URLs: In the right field, paste a list of URLs, and click the Move
button.
•Remove one or more URLs: Select the check boxes for URLs, and click the
Remove button.
User Manual94Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Remove all URLs: Select the Select All check box, and click the Remove button.
14. Click the Apply button.
Your settings are saved. WiFi clients attempting to connect to the SSID are presented
with the captive portal login page.
Register and configure Facebook Wi-Fi for
the access point
Before you can set up Facebook Wi-Fi on the access point so that you can provide
customers WiFi access by letting them check in to an existing Facebook business page
(see Set up a Facebook Wi-Fi captive portal for a WiFi network on page 97), you must
register the access point with Facebook and configure the Facebook settings. By default,
the capability to register is disabled.
To register and configure Facebook Wi-Fi for the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Facebook Wi-Fi.
The Facebook Wi-Fi page displays.
5. Select the Register with Facebook Wi-Fi Yes radio button.
The capability to register is enabled. By default, this capability is disabled.
User Manual95Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Click the Apply button.
Your settings are saved and the Add Page button displays.
7. Click the Add Page button.
A browser page launches and displays the Facebook Login page.
8. Log in to the Facebook account with which the Facebook business page is associated.
9. From the Select a Page menu, select the Facebook business page.
10. Select one of the following bypass mode options:
•To allow customers to skip check-in, select the Skip check-in link radio button.
If you enable this option, users can either check in to the selected Facebook
business page or skip the check-in.
•To require users to enter a WiFi code before they can gain WiFi access, select
the Require Wi-Fi code radio button and type a WiFi code in the field that
displays.
If you enable this option, users can either check in to the selected Facebook
business page or skip the check-in by using the WiFi code.
11. From the Session Length menu, select the period after which users are automatically
logged out.
12. To add terms of service to the Facebook check-in page, select the Terms of Service
check box and type or copy the terms of service.
13. Click the Save Settings button.
The Facebook Wi-Fi settings are saved.
User Manual96Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The name of the selected Facebook business page displays on the Facebook Wi-Fi
configuration page, along with the Change Page button, which lets you replace the
selected Facebook business page with another one.
14. To allow clients that are connected to the Facebook captive portal to establish a
secure HTTP (HTTPS) session before the captive portal authentication occurs, select
the Allow HTTPS Enable radio button.
By default, the Allow HTTPS Disable radio button is selected and clients that are
connected to the Facebook captive portal cannot establish an HTTPS session until
after the captive portal authentication occurs.
15. Click the Apply button.
Your settings are saved.
Set up a Facebook Wi-Fi captive portal for a
WiFi network
You can provide customers WiFi access by letting them check in to a Facebook business
page. Before you can do so, you must register the access point with Facebook Wi-Fi
(see Register and configure Facebook Wi-Fi for the access point on page 95).
To set up a Facebook Wi-Fi captive portal for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual97Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Select the Captive Portal check box.
The page adjusts. By default, the Click Through radio button is selected.
8. Select the Facebook Wi-Fi radio button.
The page adjusts again because you do not need to specify any further settings on
the page.
Customers receive WiFi access by checking in to a Facebook business page. To use
this option, first register the access point with Facebook Wi-Fi and configure the
Facebook settings (see Register and configure Facebook Wi-Fi for the access point
on page 95).
9. Click the Apply button.
Your settings are saved. WiFi clients attempting to connect to the SSID are presented
with the Facebook business page.
Note: When you set up a captive portal with Facebook Wi-Fi, you can configure the
option to allow clients that are connected to the Facebook captive portal to establish
a secure HTTP (HTTPS) session before the captive portal authentication occurs (see
Register and configure Facebook Wi-Fi for the access point on page 95).
Unregister the access point from Facebook
Wi-Fi
If the access point is registered with Facebook Wi-Fi but you no longer want to use that
option for a captive portal or you want to use another Facebook account, you can
unregister the access point from Facebook Wi-Fi and remove the access point’s entry.
User Manual98Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To unregister the access point from Facebook Wi-Fi and remove the access point’s
entry:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic > Facebook Wi-Fi.
The Facebook Wi-Fi page displays.
5. Select the No radio button.
The capability to register is disabled. However, the access point’s entry on the
Facebook business page is not yet removed.
6. Click the Apply button.
Your settings are saved.
7. Go to the Facebook business page and log in to your account.
8. Select the check box for the access point’s entry.
9. Click the Delete button.
The access point’s entry is removed.
User Manual99Set Up and Manage a Captive
Portal
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8
Manage Access and Security
This chapter describes how you can manage access and security features and user
accounts.
The chapter includes the following sections:
• Block specific URLs and keywords for Internet access
• Manage user accounts
• Manage local MAC access control lists
• Manage neighbor AP detection
• Set up RADIUS servers
Note: For information about essential WiFi security (network authentication and
encryption), see Set up an open or secure WiFi network on page 53.
100
Block specific URLs and keywords for Internet
access
You can set up a blacklist by specifying URLs (web addresses) for which Internet access
must be blocked. You can also specify keywords that cause the access point to reject
URLs that contain those keywords.
To set up a blacklist with URLs and keywords for which Internet access must be
blocked:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > URL Filtering.
The URL Filtering page displays.
User Manual101Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Select the Enable radio button.
6. Compose the blacklist in the following ways:
•Blocked URLs: To add a URL to the blacklist, type or copy the URL in the upper
field (to the left of the upper Add button) and click the upper Add button. You
can also select one or more URLs from the Popular URL list by selecting the check
boxes for the URLS and clicking the << Move button.
To remove a URL from the blacklist, select the check box for the URL and click
the upper left Remove button.
When you block a URL, the domain and all URLs in the domain are blocked. For
example, if you add www.google.com, all web pages in the www.google.com
domain are blocked, including, for example, www.google.com/finance.
•Blocked Keywords: To add a keyword entry to the blacklist, enter the keyword
in the lower field (to the left of the lower Add button) and click the lower Add
button.
To remove a keyword entry from the blacklist, select the check box for the entry
and click the lower Remove button.
All URLs that contain the keyword are blocked. For example, if you add Jobs, all
URLs that contains Jobs (or jobs) are blocked.
7. Click the Apply button.
Your settings are saved.
User Manual102Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage user accounts
User accounts provide either read/write or read-only access to the local browser UI of
the access point. You cannot delete the admin user account or change its user name,
but you can change its password. You can add accounts for other users, and you can
change or delete these accounts.
The following sections describe how you can manage user accounts:
• Add a user account
• Change the time-out period for a user session
• Change the settings for a user account
• Remove a user account
For information about changing the password for the default admin user account, see
Change the admin user account password on page 143.
Add a user account
To add a user account:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > User Accounts.
User Manual103Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Click the add user account icon.
Additional fields and a menu display.
6. Specify the settings for the new user account:
•User Name: Enter a user name.
•Password: Enter a password between 8 and 64 characters in length. The password
must contain at least one uppercase letter, one lowercase letter, and one number.
The following special characters are allowed:
!@#$%^&*()
•Privilege: From the menu, select Read-Write or Read-Only.
•Session Timeout: Use the Hours and Minutes fields to specify the period after
which a session automatically expires and the user must log in again.
By default, a session expires after 45 minutes.
7. Click the Apply button.
Your settings are saved.
Change the time-out period for a user session
When a user logs in to the local browser UI, the session times out automatically after 45
minutes. You can change the time-out period, which applies to all users, including the
admin user.
To change the time-out period for a user session:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual104Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > User Accounts.
5. Under Session Timeout, use the Hours and Minutes fields to specify the period after
which a session automatically expires and the user must log in again.
By default, a session expires after 45 minutes.
6. Click the Apply button.
Your settings are saved. Your session is terminated and you must log in again.
Change the settings for a user account
You cannot change the access privilege for the default admin user account.
To change the user name, password, or access privilege for a user account:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual105Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > User Accounts.
The existing user accounts display.
5. To the right of the user account, change the existing settings as needed:
•User Name: Enter another user name.
•Password: Enter another password between 8 and 64 characters in length. The
password must contain at least one uppercase letter, one lowercase letter, and
one number. The following special characters are allowed:
!@#$%^&*()
•Privilege: From the menu, select Read-Write or Read-Only.
6. Click the Apply button.
Your settings are saved.
Remove a user account
You can remove a user account that you no longer need. You cannot remove the default
admin user account.
To remove a user account:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual106Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > User Accounts.
The existing user accounts display.
5. Click the Xto the right of the user account.
A warning pop-up window displays.
6. Click the Delete button.
The pop-up windows closes and the user account is removed.
Manage local MAC access control lists
The access point supports eight local access control lists (ACLs) that are based on MAC
addresses. Each local MAC ACL can contain a total number of 256 MAC addresses.
If you set up an ACL with a policy that allows access and you apply that ACL to a WiFi
network (that is, to an SSID), the ACL functions as follows:
•A WiFi device for which you place the MAC address in the ACL is allowed access to
the WiFi network.
•All other WiFi devices are denied access to the WiFi network.
If you set up an ACL with a policy that denies access and you apply that ACL to a WiFi
network (that is, to an SSID), the ACL functions as follows:
•A WiFi device for which you place the MAC address in the ACL is denied access to
the WiFi network.
•All other WiFi devices are allowed access to the WiFi network.
User Manual107Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
An ACL takes effect only after you apply it to a WiFi network. For information about
applying an ACL to a WiFi network, see Select a MAC ACL for a WiFi network on page
193. You can apply a MAC ACL to more than one WiFi network.
The following sections describe how you can manage MAC ACLs:
• Manually set up a MAC access control List
• Import an existing MAC access control list
Manually set up a MAC access control List
You can compose up to eight access control lists (ACLs) that are each based on up to
256 MAC addresses. The access point includes MAC ACLs with the following default
group names and settings, which you can change:
•Management: If enabled, allows access to trusted stations by default.
•Guest: If enabled, allows access to trusted stations by default.
•Guest1: If enabled, denies access to untrusted stations by default.
•Custom: If enabled, denies access to untrusted stations by default.
•Custom 1: If enabled, allows access to trusted stations by default.
•Custom 2: If enabled, allows access to trusted stations by default.
•Custom 3: If enabled, allows access to trusted stations by default.
•Custom 4: If enabled, allows access to trusted stations by default.
By default, these MAC ACLs are disabled and do not include any stations. You can
manually add devices, import devices (see Import an existing MAC access control list
on page 111), or do both.
You can use a MAC ACL to control which WiFi devices (stations) can access a WiFi
network. You can apply one MAC ACL to more than one WiFi network.
To manually set up a MAC ACL:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
User Manual108Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > MAC ACL.
5. Click the group name for the MAC ACL that you want to set up.
The previous figure shows some examples. Devices in the Available Stations table
are automatically detected by the access point and are common to all MAC ACLs,
which allows you to add a device to more than one MAC ACL. A neighboring station
displays as Neighbor and a connected station displays as connected.
6. To change the group name, enter a new name in the Group Name field.
The default group names for the eight MAC ACLs are Management, Guest, Guest1,
Custom, Custom 1, Custom 2, Custom 3, and Custom 4.
7. Select the ACL Policy Allow or Deny radio button.
User Manual109Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you select the Allow radio button, a WiFi device for which you place the MAC
address in the ACL is allowed access to the WiFi network, but all other WiFi devices
are denied access to the WiFi network.
If you select the Deny radio button, a WiFi device for which you place the MAC
address in the ACL is denied access to the WiFi network, but all other WiFi devices
are allowed access to the WiFi network.
8. Compose the ACL in the following way:
•For an ACL for which you selected the Allow radio button in Step 7, do the
following:
-To manually add a device to the Trusted Stations table, enter the MAC address
in the format 00-00-00-00-00-00 in the field below the Trusted Stations table,
and click the Add button.
The device is added to the Trusted Stations table.
-To move a device from the Available Stations table to the Trusted Stations
table, select the check box for the device and click the << Move button.
You can search the Available Stations table. You can also filter devices in the
Available Stations table by clicking the filter icon.
-To remove a device from the Trusted Stations table, select the check box for
the device and click the Remove button.
You can search the Trusted Stations table.
When you remove a device from the Trusted Stations table, after the access
point redetects the device, the device is once again placed in the Available
Stations table.
•For an ACL for which you selected the Deny radio button in Step 7, do the
following:
- To manually add a device to the Untrusted Stations table, enter the MAC
address in the format 00-00-00-00-00-00 in the field below the Untrusted
Stations table, and click the Add button.
The device is added to the Untrusted Stations table.
-To move a device from the Available Stations table to the Untrusted Stations
table, select the check box for the device and click the << Move button.
You can search the Available Stations table. You can also filter devices in the
Available Stations table by clicking the filter icon.
-To remove a device from the Untrusted Stations table, select the check box
for the device and click the Remove button.
You can search the Untrusted Stations table.
When you remove a device from the Untrusted Stations table, after the access
point redetects the device, the device is once again placed in the Available
Stations table.
User Manual110Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
9. Click the Apply button.
Your settings are saved.
For more information about applying an ACL to a WiFi network, see Select a MAC
ACL for a WiFi network on page 193.
WiFi devices in the Trusted Stations table can access the WiFi network to which you
apply the ACL. WiFi devices in the Untrusted Stations table cannot access the WiFi
network to which you apply the ACL.
Import an existing MAC access control list
You can import an existing access control list (ACL) that is based on up to 256 MAC
addresses. You can import the list into any MAC ACL, but the MAC addresses on the
list are available only for the MAC ACL into which you import the list. That is, if you want
to use the same list in another MAC ACL, you must also import the list into that MAC
ACL.
The file with MAC addresses must be in the following format:
•Entries in the file must be MAC addresses only in hexadecimal format with each octet
separated by a hyphen, for example 00-11-22-33-44-55.
•You must separate entries with a comma.
•The file must be in text format (that is, with a .txt or .cfg extension).
You can use a MAC ACL to control which WiFi devices can access a WiFi network. You
can apply a MAC ACL to more than one WiFi network.
To import an existing MAC ACL:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual111Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > MAC ACL.
5. Click the group name for the MAC ACL that you want to set up.
The previous figure shows some examples. Devices in the Available Stations table
are automatically detected by the access point and are common to all MAC ACLs,
which allows you to add a device to more than one MAC ACL. A neighboring station
displays as Neighbor and a connected station displays as connected.
6. To change the group name, enter a new name in the Group Name field.
The default group names for the eight MAC ACLs are Management, Guest, Guest1,
Custom, Custom 1, Custom 2, Custom 3, and Custom 4.
7. Select the ACL Policy Allow or Deny radio button.
If you select the Allow radio button, a WiFi device for which you import the MAC
address into the ACL is allowed access to the WiFi network, but all other WiFi devices
are denied access to the WiFi network.
User Manual112Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you select the Deny radio button, a WiFi device for which you import the MAC
address into the ACL is denied access to the WiFi network, but all other WiFi devices
are allowed access to the WiFi network.
8. To download a sample of a MAC ACL in the format that is required for importing,
click the Download Sample link.
9. Import and compose the ACL in the following way:
•For an ACL for which you selected the Allow radio button in Step 7, do the
following:
a. Replace or merge the MAC addresses in the import list with the MAC
addresses in the Trusted Stations table (if any are already in the table) by
selecting one of the following radio buttons:
-Replace: MAC addresses in the Trusted Stations table are replaced with
the ones in the import list.
-Merge: MAC addresses in the Trusted Stations table are merged with the
ones in the import list.
b. Click the Browse button and navigate to and select the import file.
The MAC addresses on the import list are placed in the Trusted Stations table.
c. To remove a MAC address from the Trusted Stations table, select the MAC
address and click the Remove button.
You can search the Trusted Stations table.
When you remove a device from the Trusted Stations table, after the access
point redetects the device, the device is once again placed in the Available
Stations table.
•For an ACL for which you selected the Deny radio button in Step 7, do the
following:
a. Replace or merge the MAC addresses in the import list with the MAC
addresses in the Untrusted Stations table (if any are already in the table) by
selecting one of the following radio buttons:
-Replace: MAC addresses in the Untrusted Stations table are replaced with
the ones in the import list.
-Merge: MAC addresses in the Untrusted Stations table are merged with
the ones in the import list.
b. Click the Browse button and navigate to and select the import file.
The MAC addresses on the import list are placed in the Untrusted Stations
table.
User Manual113Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
c. To remove a MAC address from the Untrusted Stations table, select the MAC
address and click the Remove button.
You can search the Untrusted Stations table.
When you remove a device from the Untrusted Stations table, after the access
point redetects the device, the device is once again placed in the Available
Stations table.
10. Click the Apply button.
Your settings are saved. For information about manually adding MAC addresses to
those in the Trusted Stations table or Untrusted Stations table, see Manually set up
a MAC access control List on page 108.
For more information about applying an ACL to a WiFi network, see Select a MAC
ACL for a WiFi network on page 193.
WiFi devices in the Trusted Stations table can access the WiFi network to which you
apply the ACL. WiFi devices in the Untrusted Stations table cannot access the WiFi
network to which you apply the ACL.
Manage neighbor AP detection
The access point can detect neighbor access points (APs) in a radio band and you can
classify them as known APs.
If you enable neighbor AP detection for a radio band, the access point regularly scans
the WiFi network, collects information about all access points on the channels, and
maintains a list of access points it detects in the area. Initially all detected access points
are displayed in the Unknown AP List. You can add access points that you are familiar
with to the Known AP List. You can also import a list of known access points in the Known
AP List.
CAUTION: Access points in the Unknown AP List require further investigation. They
could be rogue access points, which use the SSID of a legitimate network. These types
of access points can present a serious security threat.
The following sections describe how you can manage neighbor AP detection and add
neighbor access points to the Known AP List:
• Enable neighbor access point detection and move access points to the Known AP
List
• Import an existing neighbor access point list in the Known AP List
User Manual114Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Enable neighbor access point detection and move access
points to the Known AP List
The access point can detect neighbor access points (APs) and lets you classify them as
known APs. After you enable neighbor AP detection, the access point maintains a list
of access points it detects in the area. Initially all detected access points are displayed
in the Unknown AP List. You can manually move access points from the Unknown AP
List to the Known AP List.
By default neighbor access point detection is disabled.
To enable neighbor access point detection and move detected access points to
the Known AP List:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > Neighbor AP.
The page that displays lets you select the radio band (2.4 GHz, 5 GHz Low, or 5 GHz
High).
5. Click the >button to the left of the radio band.
The Neighbor AP page displays for the selected radio band.
6. Select the Enable Neighbor AP check box.
7. Click the Apply button.
User Manual115Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Your settings are saved. Neighbor AP detection is now enabled.
8. From the Detection Policy menu, select the scan method:
•Mild: The access point scans for neighbor access points every hour. This is the
default setting.
•Moderate: The access point scans for neighbor access points every 30 minutes.
•Aggressive: The access point scans for neighbor access points every 15 minutes.
Detected neighbor access points display in the Unknown AP List.
User Manual116Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
9. To view detected neighbor access points and move them from the Unknown AP List
to the Known AP List, do the following:
a. Click the Unknown AP List tab.
b. If no access points display, click the Refresh button.
c. Select the check boxes for the access points that you are familiar with and that
you trust.
d. Click the << Move to Known AP List button.
e. Click the Known AP List tab.
The selected access points display in the Known AP List.
Note: You can delete access points from the Known AP List. After being detected,
these access points once more display in the Unknown AP List.
10. Click the Apply button.
Your settings are saved.
Import an existing neighbor access point list in the Known
AP List
You can import a list with MAC addresses of known neighbor access points in the Known
AP List.
The file with MAC addresses must be in the following format:
•Entries in the file must be MAC addresses only in hexadecimal format with each octet
separated by a hyphen, for example 00-11-22-33-44-55.
User Manual117Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•You must separate entries with a comma.
•The file must be in text format (that is, with a .txt or .cfg extension).
For information about enabling neighbor AP detection, see Enable neighbor access
point detection and move access points to the Known AP List on page 115.
To import a list with MAC addresses of known neighbor access points in the Known
AP List:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > Neighbor AP.
The page that displays lets you select the radio band (2.4 GHz, 5 GHz Low, or 5 GHz
High).
User Manual118Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Click the >button to the left of the radio band.
6. To download a sample of an AP list in the format that is required for importing in
the Known AP List, click the Download Sample link.
7. Import and compose the Known AP List in the following way:
a. Replace or merge the MAC addresses in the import list with the MAC addresses
in the Known AP List by selecting one of the following radio buttons:
•Replace: MAC addresses in the Known AP List are replaced with the ones in
the import list.
•Merge: MAC addresses in the Known AP List are merged with the ones in the
import list.
b. Click the Browse button and navigate to and select the import file.
The MAC addresses on the import list are placed in the Known AP List.
c. To remove a MAC address from the Known AP List, select the MAC address and
click the Delete button.
When you remove a device from the Known AP List, after the access point
redetects the device, the device is once again placed in the Known AP List.
User Manual119Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. Click the Apply button.
Your settings are saved.
Set up RADIUS servers
If you use WPA2 Enterprise security, WPA3 Enterprise security, or a RADIUS MAC ACL,
you must set up RADIUS servers for authentication, accounting, or both authentication
and accounting using RADIUS. You must set up primary IPv4 servers and you can set
up secondary IPv4 servers. These RADIUS server settings apply either to all WiFi networks
that use WPA2 Enterprise security or WPA3 Enterprise security (see Set up an open or
secure WiFi network on page 53) or to all WiFi networks that use a RADIUS MAC ACL.
Note: Either WPA2 Enterprise security or WPA3 Enterprise security and a RADIUS MAC
ACL are mutually exclusive. If you want to use a RADIUS MAC ACL for a WiFi network,
select a different type of WiFi security (see Set up an open or secure WiFi network on
page 53). If you want to use WPA2 Enterprise security or WPA3 Enterprise security for
a WiFi network, use a local MAC ACL (see Manage local MAC access control lists on
page 107).
If you use a RADIUS MAC ACL, you must define the ACL on the RADIUS server, using
the format in the following example for client MAC addresses in the RADIUS server: If
the client MAC address is 00:0a:95:9d:68:16, specify it as 000a959d6816 in the RADIUS
server.
To set up RADIUS servers:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual120Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Security > RADIUS Settings.
5. For each RADIUS server that you want to set up, configure the following settings:
•IPv4 Address: Enter the IPv4 address of the RADIUS server. The access point
must be able to reach this IP address.
•Port: Enter the number of the UDP port on the access point that is used to access
the RADIUS server. For authentication servers, the default port number is 1812.
For accounting servers, the default port number is 1813.
•Password: Enter the password (shared key) that is used between the access point
and the RADIUS server during the authentication or accounting process. By
default, the password is sharedsecret.
User Manual121Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Configure the following authentication settings, which apply to all RADIUS server
that you set up:
•Reauthentication time: Enter the interval in seconds after which the supplicant
(the WiFi client) must be reauthenticated with the RADIUS server. The default
interval is 3600 seconds (1 hour). Enter 0to disable reauthentication.
•Update Global Key: Select the check box to allow the global key update, and
enter the interval in seconds. The check box is selected by default, and the default
interval is 1800 seconds (30 minutes). Clear the check box to prevent the global
key update.
7. Click the Apply button.
Your settings are saved.
User Manual122Manage Access and Security
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
9
Manage the Local Area Network
and IP Settings
This chapter describes how you can manage the local area network (LAN) and IP settings
of the access point.
The chapter includes the following sections:
• Disable the DHCP client and specify a fixed IP address
• Enable the DHCP client
• Set the 802.1Q VLAN and management VLAN
• Set an existing domain name
• Enable or disable Spanning Tree Protocol
• Enable or disable the network integrity check function
• Enable or disable IGMP snooping
• Enable or disable Ethernet LLDP
• Enable or disable UPnP
• Manage the link aggregation capability
123
Disable the DHCP client and specify a fixed
IP address
By default, the DHCP client of the access point is enabled and the access point receives
an IP address from a DHCP server (or a router that functions as a DHCP server) in your
network. If your network does not include a DHCP server or you prefer to specify a fixed
(static) IP address, disable the DHCP client of the access point.
To disable the DHCP client and specify a fixed IP address:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > IP > LAN.
The page that displays lets you specify the LAN settings, but the fields are masked
because the DHCP client is enabled.
User Manual124Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Select the Disable radio button.
The fields are now unmasked.
6. Specify the settings that are described in the following table.
DescriptionSetting
IP address in the range that is used by your LAN (usually 255.255.255.0).IP Address
The subnet mask must be compatible with your LAN.Subnet Mask
IP address of the gateway on your LAN.Gateway
IP address of the primary Domain Name System (DNS) server on your LAN.Primary DNS
IP address of the secondary DNS server on your LAN, or leave this field blank.Secondary DNS
7. Click the Apply button.
Your settings are saved. The access point restarts with the new IP settings.
Enable the DHCP client
By default, the DHCP client of the access point is enabled and the access point receives
an IP address from a DHCP server (or a router that functions as a DHCP server) in your
network.
If you disabled the DHCP client, you can reenable it.
User Manual125Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To enable the DHCP client:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > IP > LAN.
5. Select the Enable radio button.
The fields are masked.
6. Click the Apply button.
Your settings are saved. The access point restarts with the new IP settings. It might
take a while before the access point receives its IP address setting from the DHCP
server.
User Manual126Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Set the 802.1Q VLAN and management
VLAN
The 802.1Q VLAN protocol on the access point logically separates traffic on the same
physical (wired) network. This protocol can work with tagged and untagged VLANs, as
follows:
•Untagged VLAN: The access point sends untagged frames from its Ethernet interface.
Incoming untagged frames are assigned to the untagged VLAN. By default, the
untagged VLAN is VLAN 1. By default, the access point functions with an untagged
VLAN.
•Tagged VLAN: The access point tags all frames that it sends from its Ethernet
interface. Only the incoming frames that are tagged with known VLAN IDs are
accepted.
The management VLAN is used for managing traffic such as Telnet, SNMP, HTTP, and
HTTPS traffic sent to and from the access point. Frames that belong to the management
VLAN and that are sent over the trunk do not receive an 802.1Q header. If a port is a
member of a single VLAN, its traffic can be untagged.
To set the 802.1Q VLAN and management VLAN:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual127Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > IP > LAN.
5. To change the 802.1Q VLAN, either clear or select the Untagged VLAN check box:
•Untagged VLAN: By default, the Untagged VLAN check box is selected. The
access point sends untagged frames from its Ethernet interface. Incoming
untagged frames are assigned to the untagged VLAN. By default, the untagged
VLAN is VLAN 1 but you can enter another VLAN ID in the field if that VLAN ID is
supported on your network.
•Tagged VLAN: Clear the Untagged VLAN check box only if the hubs and switches
on your LAN support the 802.1Q VLAN protocol. The access point tags all frames
that it sends from its Ethernet interface. Only the incoming frames that are tagged
with known VLAN IDs are accepted. Similarly, change the ID for the untagged
VLAN only if the hubs and switches on your LAN support the 802.1Q VLAN
protocol and the new VLAN ID is supported on your network.
6. To change the VLAN ID for the management VLAN, enter another VLAN ID in the
Management VLAN field.
By default, the management VLAN is VLAN 1. If you change the VLAN ID, be sure
that the VLAN ID is supported on your network.
7. Click the Apply button.
Your settings are saved. The access point restarts with the new VLAN settings.
User Manual128Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Set an existing domain name
You can specify an existing fully qualified domain name (FQDN) for the access point so
that you can access the access point by using a domain name instead of an IP address.
The FQDN must be a domain name that is registered with a Domain Name System
(DNS) provider.
The following are the requirements for the FQDN:
•The length can be from 1 to 64 characters.
•Alphanumeric characters are allowed (a–z and 1–9)
•A dot (.) and a hyphen (-) are allowed but the name cannot start with either.
An example is myap01_firstfloor_myorganization.com.
To set an existing FQDN:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual129Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > IP > LAN.
5. In the Fully Qualified Domain Name field, specify the FQDN.
6. Click the Apply button.
Your settings are saved. The access point attempts to resolve the FDQN to an IP
address.
Enable or disable Spanning Tree Protocol
For locations where multiple access points are active and redundant network paths
might be present, Spanning Tree Protocol (STP) can prevent network loops. If your
location might include redundant network paths, we recommend that you enable STP.
To enable or disable Spanning Tree Protocol:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual130Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > General.
The General page displays.
5. Select a Spanning Tree Protocol radio button:
•Enable: STP is enabled.
•Disable: STP is disabled. This is the default setting.
6. Click the Apply button.
Your settings are saved.
Enable or disable the network integrity check
function
The network integrity check function enables the access point to validate whether the
upstream link is active before the access point allows WiFi associations. Make sure that
the default gateway is configured correctly. By default, the network integrity check
function is disabled.
To enable or disable the network integrity check function:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual131Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > General.
The General page displays.
5. Select a Network Integrity Check radio button:
•Enable: The network integrity check function is enabled.
•Disable: The network integrity check function is disabled. This is the default
setting.
6. Click the Apply button.
Your settings are saved.
Enable or disable IGMP snooping
IGMP snooping allows IP multicast packets to be transmitted only to the members of a
corresponding multicast group. Enabling IGMP snooping prevents flooding of multicast
traffic to all the ports in a broadcast domain. By default, IGMP snooping is disabled on
the access point.
To enable or disable IGMP snooping:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
User Manual132Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > General.
The General page displays.
5. Select an IGMP Snooping radio button:
•Enable: IGMP snooping is enabled.
•Disable: IGMP snooping is disabled. This is the default setting.
6. Click the Apply button.
Your settings are saved.
Enable or disable Ethernet LLDP
Link Layer Discovery Protocol (LLDP), as specified in IEEE 802.1AB, can provide link-layer
messages to adjacent network devices. For example, LLDP lets network devices such
as switches and management devices discover the access point in a network.
LLDP can also detect if the access point receives power through PoE. By default, LLDP
is enabled.
To enable or disable the LLDP:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual133Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > System > Advanced > Ethernet LLDP.
The Ethernet LLDP page displays.
5. Select a radio button:
•Enable: LLDP is enabled. This is the default setting.
•Disable: LLDP is disabled.
CAUTION: If the access point receives power from a PoE switch and you disable
LLDP, power to the access point might be turned off after you click the Apply button.
In that case, restart the access point.
6. Click the Apply button.
Your settings are saved.
Enable or disable UPnP
Universal Plug and Play (UPnP) lets the access point be discovered by other devices in
the network that support UPnP. UPnP is enabled by default.
To enable or disable UPnP:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > UPnP.
User Manual134Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The UPnP page displays.
5. Select a radio button:
•Enable: UPnP is enabled. This is the default setting.
•Disable: UPnP is disabled.
6. Click the Apply button.
Your settings are saved.
Manage the link aggregation capability
For a link aggregation (LAG) connection, you must use a switch that supports link
aggregation. You can make a LAG connection between the access point and a switch
that supports static link aggregation. Such a LAG connection allows for a single 2 Gbps
connection for increased throughput or a 1 Gbps redundancy connection.
Note: The LAN 1 port supports speeds up to 2.5 Gbps; The LAN 2 port supports speeds
up to 1 Gbps. For a LAG connection, both ports must function at the same speed.
Therefore, for a LAG connection, the speed of the LAN 1 port is limited to 1 Gbps.
However, if you use the LAG connection for increased throughput, the speed of the
LAG connection is 2 Gbps (1 Gbps + 1 Gbps).
By default, both the LAN 1 port and LAN 2 port are enabled on the access point and
both ports are members of the default VLAN (VLAN ID 1). You can use the LAN 2 port
as a LAG connection port. Also by default, the link aggregation capability is disabled
on the access point, but you can enable it. You also must configure link aggregation on
the switch with which you want to establish the LAG connection.
Figure 8. Link aggregation connection
User Manual135Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Enable link aggregation for the LAN 2 port
You can set up a static link aggregation connection between the access point and a
switch by doing the following:
1. On the switch, configure static link aggregation on the two Ethernet ports that you
intend to use for the LAG connection to the access point.
CAUTION: To prevent a network loop, configure the switch ports before connecting
them to the access point ports.
2. Connect the two Ethernet ports on the switch to the LAN 1 port and the LAN 2 port
on the access point.
To enable the link aggregation capability on the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > LAG.
The LAG page displays.
5. Select the Enable radio button.
6. Click the Apply button.
A pop-up warning window opens.
7. Click the OK button.
User Manual136Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The pop-up window closes and your settings are saved. The link aggregation
capability is enabled.
Disable link aggregation for the LAN 2 port
If you enabled link aggregation but no longer need it, you can disable link aggregation
on the access point and return the LAN 2 port to access mode.
Note: Before you disable link aggregation on the access point, disconnect the LAN 2
port on the access point from the Ethernet port on the switch that you used for link
aggregation.
To disable the link aggregation capability on the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > LAG.
The LAG page displays.
5. Select the Disable radio button.
CAUTION: To prevent a network loop, make sure that the access point is connected
to the switch through the LAN 1 port only.
6. Click the Apply button.
A pop-up warning window opens.
User Manual137Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7. Click the OK button.
The pop-up window closes and your settings are saved. The link aggregation
capability is disabled.
User Manual138Manage the Local Area Network
and IP Settings
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
10
Manage and Maintain the Access
Point
This chapter describes how you can manage and maintain the access point.
The chapter includes the following sections:
• Change the management mode to NETGEAR Insight or Web-browser
• Change the country or region of operation
• Change the admin user account password
• Change the system name
• Specify a custom NTP server
• Set the time zone
• Manage the syslog settings
• Manage the firmware of the access point
• Manage the configuration file of the access point
• Reboot the access point from the local browser UI
• Schedule the access point to reboot
• Return the access point to its factory default settings
• Enable SNMP and manage the SNMP settings
• Manage the LEDs
139
Change the management mode to
NETGEAR Insight or Web-browser
The access point can function in either of the following management modes:
•NETGEAR Insight mode: For NETGEAR Insight Premium and Insight Pro subscribers,
you can manage the access point remotely from a mobile device on which the
NETGEAR Insight app is installed or through the Insight Cloud portal.
The NETGEAR Insight mode is the default setting. In this mode, you can connect to
the access point over the local browser UI, but only a basic and limited local browser
UI is available. For information about the Insight app and Insight Cloud portal, visit
insight.netgear.com and see the NETGEAR knowledge base at
netgear.com/support/product/insight.aspx.
IMPORTANT: When you change the management mode from Web-browser mode
to NETGEAR Insight mode, the configuration of the access point is reset (cleared)
with the exception of the IP address, access point name, and password for the local
browser UI. The access point restarts and broadcasts SSID Netgearxxxxxx, in which
xxxxxx represents the last six hexadecimal digits of the access point’s MAC address.
The MAC address is listed on the product label. The default WiFi passphrase is
sharedsecret.
•Web-browser mode: You can manage the access point locally from a WiFi or wired
device through the local browser UI. In this mode, the access point functions as a
standalone device and is not connected to the Insight cloud-based management
platform.
IMPORTANT: If you first add the access point to a NETGEAR Insight network location
and manage the access point through the Insight app or Insight Cloud portal and
then you change the management mode to Web-browser mode, you must continue
to use the Insight network password to access the local browser UI until you manually
change the admin password on the access point.
To change the management mode to NETGEAR Insight mode or Web-browser
mode:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual140Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Basic > Management Mode.
The Management Mode page displays.
5. Select one of the following radio buttons:
•NETGEAR Insight: The access point functions in NETGEAR Insight management
mode.
•Web-browser: The access point functions in Web-browser management mode.
WARNING: When you change the management mode from Web-browser mode
to NETGEAR Insight mode, the configuration of the access point is reset (cleared)
with the exception of the IP address, access point name, and password for the local
browser UI. The access point restarts and broadcasts SSID Netgearxxxxxx, in which
xxxxxx represents the last six hexadecimal digits of the access point’s MAC address.
The MAC address is listed on the product label. The default WiFi passphrase is
sharedsecret.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The access point restarts in
the new management mode.
User Manual141Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Change the country or region of operation
You can change the country or region in which the access point operates. Note the
following:
•Make sure that the country is set to the location where the device is operating. You
are responsible for complying with the local, regional, and national regulations that
are set for channels, power levels, and frequency ranges.
•It might not be legal to operate the access point in a country or region other than
those listed in the menu. If your country or region is not listed in the menu, you must
check with your local government agency or check the NETGEAR website for
information about which channels you can use.
•In some countries, the access point is sold with a preconfigured country or region
and you cannot change it.
To change the country or region of operation:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Basic.
The General page displays the basic system settings.
5. Select a country or region from the Country / Region menu.
6. Click the Apply button.
A warning pop-up window displays.
User Manual142Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7. Click the OK button.
The pop-up window closes and your settings are saved. The access point restarts
with the default WiFi and radio settings that are specific to the selected country or
region.
Change the admin user account password
This admin user account password is the password that you use to log in to the local
browser UI of the access point with the user name admin. (It is not the passphrase that
you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least one
uppercase letter, one lowercase letter, and one number. The following special characters
are allowed:
!@#$%^&*()
To change the password for the user name admin:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > User Accounts.
The page that displays lets you change the user accounts.
5. Next to admin, in the Password field, enter the new password.
6. In the Confirm Password field, enter the same new password.
User Manual143Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Note: You cannot change the user name. The name must remain admin.
7. Click the Apply button.
Your settings are saved. The next time that you log in to the access point, you must
use the new password. If you forget the new password, you must reset the access
point to factory default settings. Doing so restores the password to the default
password.
Change the system name
The system name (also referred to as access point name, or AP name) is a unique NetBIOS
name for the access point. The default system name is located on the access point label.
By default, the system name is Netgearxxxxxx, in which xxxxxx represents the last six
hexadecimal digits of the access point’s MAC address.
To change the system name:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Basic.
The General page displays the basic system settings.
5. Enter a new name in the System Name field.
User Manual144Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Use the following guidelines:
•The name must contain alphanumeric characters, can contain hyphens, and
cannot be longer than 15 characters.
•The name cannot start or end with a hyphen.
•The name must contain at least one alphabetical character.
6. Click the Apply button.
Your settings are saved.
Specify a custom NTP server
By default, the access point receives its time from a default NETGEAR Network Time
Protocol (NTP) server, but you can also specify a custom NTP server.
To specify a custom NTP server:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual145Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > System > Basic > Time.
By default, the Enable radio button is selected and the access point receives its time
from a default NETGEAR NTP server.
5. Select the Use Custom NTP Server check box.
6. Take one of the following actions:
•Enter the host name of the NTP server.
By default, the Hostname radio button is selected.
•Select the IP address radio button and enter the IP address of the NTP server.
7. Click the Apply button.
Your settings are saved. When the access point connects over the Internet to the
new NTP server, the date and time that display on the page are adjusted according
to your settings.
For information about setting the time zone, see Set the time zone on page 146.
Set the time zone
When the access point synchronizes its clock with a Network Time Protocol (NTP) server,
the page shows the date and time. If the page does not show the correct date and time,
you might need to set the time zone and adjust the daylight saving time setting.
To set the time zone and adjust the daylight saving time setting:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
User Manual146Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Basic > Time.
The page that displays lets you change the time settings.
5. From the Time Zone menu, select the time zone for the area in which the access
point operates.
6. Click the Apply button.
Your settings are saved. When the access point connects over the Internet to an NTP
server, the date and time that display on the page are adjusted according to your
settings.
For information about other time settings, see Specify a custom NTP server on page
145.
Manage the syslog settings
If a syslog server is present on your network, you can configure the access point to send
its system logs to the syslog server.
To manage the syslog settings and enable the syslog function:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual147Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > Syslog.
5. Specify the IP address and port number for the syslog server:
•Syslog Server IP Address: Enter the IP address of the syslog server on your
network.
•Port Number: Enter the port number at which the syslog can be reached. By
default, the port number is 514.
6. To enable the syslog server function, select the Enable Syslog check box.
7. Click the Apply button.
Your settings are saved.
Manage the firmware of the access point
The access point firmware is stored in flash memory.
You can check to see if new firmware is available and update the access point to the
new firmware. You can also visit the NETGEAR support website, download the firmware
manually to a local computer, and update the access point to the new firmware. If
someone (usually the network administrator) places new firmware on a secure FTP (SFTP)
server in the network, you can load the firmware from the server and update the firmware
of the access point.
Depending on how you are connected to the access point, we recommend the following
firmware update methods:
•WiFi connection: If you are connected over WiFi to the access point, let the access
point check the Internet to see if new firmware is available. See Let the access point
check for new firmware and update the firmware on page 149.
With this method, if new firmware is available, it is downloaded directly to the access
point.
User Manual148Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•LAN connection: If you are connected over the LAN to the access point, manually
update the firmware from a computer or SFTP server. See Manually download
firmware and update the access point on page 150 or Use an SFTP server to update
the access point on page 153.
With this mode, if new firmware is available, you must either download it to your
computer and then upload it to the access point or upload it from an SFTP server to
the access point.
The following sections describe the firmware management methods:
• Let the access point check for new firmware and update the firmware
• Manually download firmware and update the access point
• Revert to the backup firmware
• Use an SFTP server to update the access point
Let the access point check for new firmware and update
the firmware
For you to check for new firmware, the access point must be connected to the Internet.
To check for new firmware and update the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Click the Check for Upgrade button.
The access point detects new firmware if any is available and displays the latest
version available.
User Manual149Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. To read the release notes if any are available, click the Release Notes link.
A web page displays the release notes.
6. To download and install the new firmware, click the Upgrade Now button, and
follow the prompts and dialog boxes.
The access point locates the firmware, downloads it, and begins the update.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the access point. Wait until the access point finishes restarting and the
Power/Cloud LED remains solid green or solid blue.
The firmware update process takes several minutes. When the update is complete,
your access point restarts.
7. Verify that the access point runs the new firmware version by logging back in to the
access point.
The firmware version is displayed on the Dashboard page.
8. Read the new firmware release notes to determine whether you must reconfigure
the access point after updating.
Manually download firmware and update the access point
Downloading firmware to a local computer and updating the access point are two
separate tasks that are combined in the following procedure. After you update the
access point to new firmware, the old firmware is saved as backup firmware so that you
can revert to it (see Revert to the backup firmware on page 152).
IMPORTANT: When you install an older firmware version (or the backup firmware
version), that is, you downgrade rather than update the firmware, the configuration of
the access point is reset (cleared) with the exception of the IP address, access point
name, and password for the local browser UI. The access point restarts and broadcasts
SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal digits of the
access point’s MAC address. The MAC address is listed on the product label. The default
WiFi passphrase is sharedsecret.
To download firmware manually and update the access point:
1. Visit netgear.com/support/download/, locate the support page for your product,
and download the new firmware.
2. Read the new firmware release notes to determine whether you must reconfigure
the access point after upgrading.
User Manual150Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
3. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
4. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
5. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
6. Select Management > Maintenance > Upgrade > Firmware Upgrade.
The Firmware Upgrade page displays.
7. Make sure that Local is selected from the Upgrade Options menu.
Local is the default selection.
8. Locate and select the firmware file on your computer by doing the following:
a. Click the Browse button.
b. Navigate to the firmware file.
The file name ends in .tar.
c. Select the firmware file.
9. Click the Upgrade button.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the access point. Wait until the access point finishes restarting and the
Power/Cloud LED remains solid green or solid blue.
The firmware update process takes several minutes. When the update is complete,
the access point restarts.
User Manual151Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
10. Verify that the access point runs the new firmware version by logging back in to the
access point.
The firmware version is displayed on the Dashboard page.
Revert to the backup firmware
After you upgrade the access point to new firmware, the old firmware is saved as backup
firmware so that you can revert to it.
IMPORTANT: When you revert to the backup firmware and the backup firmware is an
earlier version than the firmware version that is running on the access point, the
configuration of the access point is reset (cleared) with the exception of the IP address,
access point name, and password for the local browser UI. The access point restarts
and broadcasts SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal
digits of the access point’s MAC address. The MAC address is listed on the product
label. The default WiFi passphrase is sharedsecret.
To revert to the backup firmware on the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Upgrade > Firmware Upgrade.
The Firmware Upgrade page displays. The page shows both the current firmware
version and the backup firmware version.
5. Click the Boot up Backup Firmware button.
User Manual152Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
A warning pop-up window displays.
IMPORTANT: When you revert to the backup firmware, the configuration of the
access point is reset (cleared) with the exception of the IP address, access point
name, and password for the local browser UI. The access point restarts and broadcasts
SSID Netgearxxxxxx, in which xxxxxx represents the last six hexadecimal digits of the
access point’s MAC address. The MAC address is listed on the product label. The
default WiFi passphrase is sharedsecret.
6. Click the Swap button.
The pop-up window closes, the firmware reversion process initiates, and the access
point restarts.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the
reversion. For example, do not close the browser, click a link, or load a new page.
Do not turn off the access point. Wait until the access point finishes restarting and
the Power/Cloud LED remains solid green or solid blue.
7. Verify that the access point runs the backup firmware version by logging back in to
the access point.
The firmware version is displayed on the Dashboard page.
Use an SFTP server to update the access point
If someone (usually the network administrator) places new firmware on a secure FTP
(SFTP) server in the network, you can load the firmware from the SFTP server and update
the firmware of the access point.
To update the firmware of the access point from an SFTP server:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
User Manual153Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Upgrade > Firmware Upgrade.
The Firmware Upgrade page displays.
5. From the Upgrade Options menu, select SFTP.
6. Specify the following server settings:
•Firmware File: The name of the access point firmware file on the SFTP server.
•SFTP Server IP: The IP address of the SFTP server on your network.
•User Name: The user name that is required to access the SFTP server.
•Password: The password that is required to access the SFTP server.
7. Click the Upgrade button.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the access point. Wait until the access point finishes restarting and the
Power/Cloud LED remains solid green or solid blue.
The firmware update process takes several minutes. When the update is complete,
the access point restarts.
8. Verify that the access point runs the new firmware version by logging back in to the
access point.
The firmware version is displayed on the Dashboard page.
User Manual154Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage the configuration file of the access
point
The configuration settings of the access point are stored within the access point in a
configuration file. You can back up (save) this file to your computer or restore it.
Back up the access point configuration
You can save a copy of the current configuration settings. If necessary, you can restore
the configuration settings later.
Note: The backup file is saved in a binary format so that it is protected and cannot be
opened by a regular application.
To back up the access point’s configuration settings:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Upgrade > Backup and Restore > Backup
Settings.
The Backup Settings page displays.
5. Click the Backup button.
A pop-up window displays.
User Manual155Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Enter a password to protect the backup file, and click the Continue button.
You can either use your existing password (the one that you use to log in to the
access point) or enter a unique password.
The password must be 8 to 63 characters in length and must contain at least one
uppercase letter, one lowercase letter, and one number. Special characters are not
allowed.
Tip: We recommend that you save the password because you must enter it again
if you restore the configuration from the backup file.
7. Choose a location to store the file on your computer.
The name of the backup file can be
WAX6XX-NETGEARYYYYYY-dd-mm-yy_hh-mm-ss-config.tar or
WAX6XX-WAX6XX-YYYYYY-dd-mm-yy_hh-mm-ss-config.tar.
6XX represents the model number, YYYYYY represents the last six hexadecimal
digits of the access point’s MAC address (or the system name), dd is the date, mm
is the month, yy is the year, hh is the hour (in 24-hour format), mm is the minutes,
and ss is the seconds.
Examples of the name of a backup file are
WAX6XX-NETGEAR1A2B3C-06-18-21_16-44-12-config.tar and
WAX6XX-WAX6XX-1A2B3C-06-18-21_16-44-12-config.tar.
8. Follow the directions of your browser to save the file.
Restore the access point configuration
If you backed up the configuration file, you can restore the configuration from this file.
To restore configuration settings that you backed up:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
User Manual156Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Upgrade > Backup and Restore > Restore
Settings.
The Restore Settings page displays.
5. Click the Browse button and navigate to and select the saved configuration file.
The name of the backup file can be
WAX6XX-NETGEARYYYYYY-dd-mm-yy_hh-mm-ss-config.tar or
WAX6XX-WAX6XX-YYYYYY-dd-mm-yy_hh-mm-ss-config.tar.
6XX represents the model number, YYYYYY represents the last six hexadecimal
digits of the access point’s MAC address (or the system name), dd is the date, mm
is the month, yy is the year, hh is the hour (in 24-hour format), mm is the minutes,
and ss is the seconds.
Examples of the name of a backup file are
WAX6XX-NETGEAR1A2B3C-06-18-21_16-44-12-config.tar and
WAX6XX-WAX6XX-1A2B3C-06-18-21_16-44-12-config.tar.
6. Click the Restore button.
A pop-up window displays.
7. Enter the password that you specified when you saved the backup file, and click the
Continue button.
8. Click the Restore button.
The pop-up window closes and the configuration is uploaded to the access point.
When the restoration is complete, the access point reboots. This process takes about
two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the
restoration. For example, do not close the browser, click a link, or load a new page.
Do not turn off the access point. Wait until the access point finishes restarting and
the Power/Cloud LED turns solid green or solid blue.
User Manual157Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Reboot the access point from the local
browser UI
If you cannot physically access the access point to reboot it (that is, disconnect the power
and reconnect the power), you can use the local browser UI to reboot the access point.
To reboot the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Reset > Reboot AP.
The Reboot AP page displays.
5. Click the Reboot AP button.
A warning pop-up window displays.
6. Click the Reboot button.
The pop-up window closes and the access point reboots, which takes about one
minute.
User Manual158Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Schedule the access point to reboot
You can schedule the access point to reboot at a time that is more convenient for the
network, for example, when you do not expect any (or only a few) WiFi clients to be
connected to the access point. The schedule that you set up is a recurring schedule.
To schedule the access point to reboot:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Reset > Reboot AP.
The Reboot AP page displays.
5. Click the Enable Scheduled Reboot button so that the button displays blue.
The scheduling controls display.
6. Select the check box for the day on which you want the access point to reboot.
You can select multiple days.
7. Using the Start Time menus, specify the hour and minutes for the time at which the
access point must reboot.
Specify the hour in 24-hour format.
8. Click the Apply button.
Your settings are saved.
User Manual159Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Return the access point to its factory default
settings
Under some circumstances (for example, if you lost track of the changes that you made
to the access point settings or you move the access point to a different network), you
might want to erase the configuration and reset the access point to factory default
settings.
If you do not know the current IP address of the access point, first try to use an IP scanner
application to detect the IP address before you reset the access point to factory default
settings.
Note: You can also use the NETGEAR Insight app to discover the IP address that is
assigned to the access point. For more information, see Connect over WiFi using the
NETGEAR Insight app on page 22.
To reset the access point to factory default settings, you can use either the Reset button
on the access point or the use the reset function in the local browser UI. However, if you
cannot find the IP address or you lost the password to access the access point, you must
use the Reset button.
After you reset the access point to factory default settings, the password for the admin
user name is password, the access point’s DHCP client is enabled, the default SSID is
shown in the format NETGEARxxxxxx-SETUP, and the default password for WiFi access
is sharedsecret. If the access point does not receive an IP address from a DHCP server,
the LAN IP address is set to 192.168.0.100.
For an extensive list of factory default settings, see Factory default settings on page 239.
Use the Reset button to reset the access point
You can use the Reset button to return the access point to its factory default settings.
However, if you added the access point to a NETGEAR Insight network location, you
must first use the Insight app or Insight Cloud portal to remove the access point from
the Insight network location before the factory default settings function of the Reset
button is available.
CAUTION: This process erases all settings that you configured in the access point.
User Manual160Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To reset the access point to factory default settings:
1. On the bottom panel of the access point, locate the recessed Reset button.
2. Using a straightened paper clip, press and hold the Reset button for at least
10 seconds.
Note: If you hold the Reset button for less than 10 seconds and then release it, the
access point restarts rather than returns to its factory default settings.
3. Release the Reset button.
The configuration is reset to factory default settings. When the reset is complete,
the access point reboots. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset.
Do not turn off the access point. Wait until the access point finishes restarting and
the Power/Cloud LED turns solid green or solid blue.
Use the local browser UI to reset the access point
You can use the access point’s local browser UI to return the access point to its factory
default settings.
CAUTION: This process erases all settings that you configured in the access point.
To erase the settings:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual161Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Reset > Restore Defaults.
The Restore Defaults page displays.
5. Click the Restore Defaults button.
A warning pop-up window displays.
6. Click the Restore button.
The pop-up windows closes and the configuration is reset to factory default settings.
When the reset is complete, the access point reboots. This process takes about two
minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the access point. Wait until the access point finishes restarting and the
Power/Cloud LED turns solid green or solid blue.
Enable SNMP and manage the SNMP
settings
You can access the access point over a Simple Network Management Protocol (SNMP)
connection, which allows SNMP network management software such as HP OpenView
to manage the access point by using the SNMPv1 or SNMPv2 protocol. By default, SNMP
is disabled.
User Manual162Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To enable SNMP and manage the SNMP settings:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Maintenance > Remote Management.
The Remote Management page displays.
5. Select the SNMP Enable radio button.
By default, SNMP is disabled.
6. Specify the following settings:
•Read-Only Community Name: The community string that allows the SNMP
manager to read the access point’s MIB objects. The default is public.
User Manual163Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Read-Write Community Name: The community string that allows the SNMP
manager to read and write the access point’s MIB objects. The default is private.
•Trap Community Name: The community name that is associated with the IP
address that must receive traps. The default is trap.
•IP address (to receive traps): The IP address of the SNMP manager that must
receive traps.
•Trap Port: The port number at which the SNMP manager must receive traps. The
default is 162.
7. Click the Apply button.
Your settings are saved.
Manage the LEDs
To enable or disable the LEDs:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > System > Advanced > LED Control.
The LED Control page displays.
5. Select one of the following radio buttons:
•Enable All LEDs: All LEDs are enabled. This is the default setting.
User Manual164Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Disable All LEDs: All LEDs are disabled.
•Enable Power/Cloud LED: All LEDs are disabled except for the Power/Cloud
LED.
6. Click the Apply button.
Your settings are saved.
User Manual165Manage and Maintain the Access
Point
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
11
Monitor the Access Point and the
Network
This chapter describes how you can monitor the access point and the network.
The chapter includes the following sections:
• Display the access point Internet, IP, and system settings
• Display the WiFi radio settings
• Display unknown and known neighbor access points
• Display client distribution, connected clients, and client trends
• View WiFi and Ethernet traffic, traffic and ARP statistics, and channel utilization
• View or download tracked URLs
• View, save, download, or clear the logs
• View a WiFi bridge connection
• View alarms and notifications
166
Display the access point Internet, IP, and
system settings
To display the access point, Internet, IP, and system settings:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Locate the Connection Status Information pane, System Information pane, and IP
Settings Information pane, which are shown, respectively, on the left, upper center,
and lower center of the following Dashboard figure.
If the page width on your device is narrow, these panes might be located elsewhere
on the Dashboard.
For information about the radio settings, see Display the WiFi radio settings on page
170.
User Manual167Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Connection Status Information pane: This pane is in the top, left corner of the
Dashboard (if the page width on your device is sufficient; otherwise, it might be
elsewhere) and displays the following:
-Status of the connection to the NETGEAR Insight cloud-based management
platform, if any.
-Status of the Internet connection.
-Functioning mode of the access point, which is always Access Point.
-Number of clients connected to the access point.
•System Information pane: This pane is in the center at the top of the Dashboard
(if the page width on your device is sufficient; otherwise, it might be elsewhere)
and displays the following:
-System name of the access point and country or region of operation.
- Ethernet MAC address.
- The serial number.
- Device uptime.
- Firmware version.
-The date and time that the access point itself or someone manually last
checked if new firmware was available.
This pane also contains a button that you can click to check for firmware updates
for the access point. If an update is available, the Update Available button
displays. (For more information about firmware updates, see Let the access point
check for new firmware and update the firmware on page 149).
•IP Settings Information pane: This pane is in the center of the Dashboard page
(if the page width on your device is sufficient; otherwise, it might be elsewhere)
and displays the following:
-IP address of the access point and its DHCP status.
- Gateway IP address.
- Gateway status.
-Wired traffic volume.
5. To display more detailed information, select Management > Monitoring > System.
User Manual168Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The page shows four sections:
•System Information section: The following settings are displayed:
-System Name: The access point NetBIOS name.
-System Mode: The access point system mode (AP).
-LAN1 MAC Address: The MAC address of the LAN 1 Ethernet port of the
access point.
-LAN2 MAC Address: The MAC address of the LAN 2 Ethernet port of the
access point.
-Wireless MAC Address for 2.4 GHz: The MAC address of 2.4 GHz WiFi
interface (radio) of the access point.
-Wireless MAC Address for 5 GHz Low: The MAC address of 5 GHz low band
WiFi interface (radio) of the access point.
-Wireless MAC Address for 5 GHz High: The MAC address of 5 GHz high
band WiFi interface (radio) of the access point.
-Power Source: The type of power source (PoE 802.3bt, 802.3at, or Power
Adapter).
For more information about the PoE level, see The access point functions as
a PoE PD and the Power/Cloud LED remains solid amber on page 228.
-Ethernet LLDP: The status of Ethernet LLDP feature (Enabled or Disabled).
-LLDP Neighbour: The name of the LLDP neighbour, if any.
-Country / Region: The country or region in which the access point operates
or for which the access point is licensed.
User Manual169Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
-Current Firmware Version: The version of the firmware that is running on
the access point.
-Backup Firmware Version: The version of the backup firmware on the access
point.
-Bootloader Version: The primary bootloader (U-Boot) version that is installed
on the access point.
-Serial Number: The serial number of the access point.
-Current Time: The current system time of the access point.
-Uptime: The time since the access point was last restarted.
•AP Interface Status: A green icon indicates that the interface is in use. A gray
icon indicates that the interface is not in use.
•IPv4 Settings section: The following settings are displayed:
-IPv4 Address: The IPv4 address of the access point.
-Subnet Mask: The subnet mask of the access point.
-Default Gateway: The default gateway for the access point.
-DHCP Client: The status of DHCP client (Enabled or Disabled).
-LAG Status: The status of the LAG feature (Enabled or Disabled), independent
of whether a physical LAG connection is present.
•Wireless Settings section: The following settings are displayed, with separate
columns for the 2.4 GHz and 5 GHz radios:
-Antenna: The type of antenna (by default, 4x4).
-Wireless Mode: The operating WiFi mode of the radio.
-Channel / Frequency: The channel and frequency that are used by the radio.
Display the WiFi radio settings
To display the WiFi radio settings of the access point:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
User Manual170Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Locate the Radio Information pane at the top, right corner of the Dashboard page
(if the page width on your device is sufficient; otherwise, it might be elsewhere).
The following settings are displayed:
•Radio status (If the 2.4 GHz, 5 GHz Low, or 5 GHz High icon is displayed as gray,
the radio is turned off.)
•Mode
•Channel
•Channel width
•Number of connected clients and maximum number of supported clients
•WiFi traffic volume
•Channel utilization
5. To view information about another radio, click the 2.4 GHz,5 GHz Low,or5 GHz
High tab.
The pane adjusts.
User Manual171Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. To view more detailed information, select Management > Monitoring > System.
The page shows four sections:
•System Information section: The following settings are displayed:
-System Name: The access point NetBIOS name.
-System Mode: The access point system mode (AP).
-LAN1 MAC Address: The MAC address of the LAN 1 Ethernet port of the
access point.
-LAN2 MAC Address: The MAC address of the LAN 2 Ethernet port of the
access point.
-Wireless MAC Address for 2.4 GHz: The MAC address of 2.4 GHz WiFi
interface (radio) of the access point.
-Wireless MAC Address for 5 GHz Low: The MAC address of 5 GHz low band
WiFi interface (radio) of the access point.
-Wireless MAC Address for 5 GHz High: The MAC address of 5 GHz high
band WiFi interface (radio) of the access point.
-Power Source: The type of power source (PoE 802.3bt, 802.3at, or Power
Adapter).
For more information about the PoE level, see The access point functions as
a PoE PD and the Power/Cloud LED remains solid amber on page 228.
-Ethernet LLDP: The status of Ethernet LLDP feature (Enabled or Disabled).
-LLDP Neighbour: The name of the LLDP neighbour, if any.
User Manual172Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
-Country / Region: The country or region in which the access point operates
or for which the access point is licensed.
-Current Firmware Version: The version of the firmware that is running on
the access point.
-Backup Firmware Version: The version of the backup firmware on the access
point.
-Bootloader Version: The primary bootloader (U-Boot) version that is installed
on the access point.
-Serial Number: The serial number of the access point.
-Current Time: The current system time of the access point.
-Uptime: The time since the access point was last restarted.
•AP Interface Status: A green icon indicates that the interface is in use. A gray
icon indicates that the interface is not in use.
•IPv4 Settings section: The following settings are displayed:
-IPv4 Address: The IPv4 address of the access point.
-Subnet Mask: The subnet mask of the access point.
-Default Gateway: The default gateway for the access point.
-DHCP Client: The status of DHCP client (Enabled or Disabled).
-LAG Status: The status of the LAG feature (Enabled or Disabled), independent
of whether a physical LAG connection is present.
•Wireless Settings section: The following settings are displayed, with separate
columns for the 2.4 GHz and 5 GHz radios:
-Antenna: The type of antenna (by default, 4x4).
-Wireless Mode: The operating WiFi mode of the radio.
-Channel / Frequency: The channel and frequency that are used by the radio.
User Manual173Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Display unknown and known neighbor
access points
If you enabled neighbor access point (AP) detection (see Manage neighbor AP detection
on page 114), you can display the unknown access points in the Unknown AP list and
the known access points in the Known AP list.
To display the detected neighbor access points:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Monitoring > Neighbor AP.
At the top of the page, for each radio band, the page displays the total number of
unknown access points.
User Manual174Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
For information about moving unknown access points to the Known AP list, see
Enable neighbor access point detection and move access points to the Known AP
List on page 115.
5. To display the most recent unknown access points, click the Refresh button.
6. To view the Known AP list, click the Known AP tab.
At the top of the page, for each radio band, the page displays the total number of
known access points.
7. To display the most recent known access points, click the Refresh button.
Display client distribution, connected clients,
and client trends
To display the clients that are connected to the access point over WiFi:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual175Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Locate the Client Distribution pane (shown on the left side in the following figure)
and the Recent Clients pane (shown on the right side).
The Client Distribution pane shows the types of clients (Windows, Mac, iOS, Android,
Linux, and other operating systems) and how these clients are distributed over the
networks. (By default, the Network button is selected.)
The Recent Clients pane shows the top 5 recently connected clients list.
5. To display how the clients are distributed over the radios, click the Radio button in
the Client Distribution pane.
The page adjusts and shows the types of clients for each radio.
6. To display recent clients for all networks or a single network, in the Connected Clients
pane, click the icon in the menu under Recent Clients, and select All WiFi Clients
or the clients for a specific WiFi network (SSID).
For your selection, the pane displays the total number of connected clients and the
device names of the connected clients.
7. To display information about a connected client, click its device name.
The page displays the MAC address, device name, IP address, and SSID for the
client. You can also view more information, including very detailed information (see
Step 11 and Step 12).
User Manual176Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. To display trends about clients, scroll down to the Hours Trend pane.
The Hours Trend pane shows a graph with the number of clients, the traffic in MBps,
or the channel utilization over a period that you can select. (The previous figure
shows the trend for the last 2 hours.) By default, the client information is selected
(that is, the Client button is selected) and the graph shows the total number of clients
for all radios and the number of clients for each radio (2.4 GHz, 5 GHz Low, and 5
GHz High).
You can also click the Traffic button or the Channel Utilization button. For more
information, see View WiFi and Ethernet traffic, traffic and ARP statistics, and channel
utilization on page 179.
9. To display more information, point to a node on one of the lines on the graph.
10. To change the period over which information is filtered and displayed, select the
number of recent hours from the menu to the right of the buttons.
11. To display more information about currently connected WiFi clients, select
Management > Monitoring > Connected Clients.
For each radio, the page displays the number of connected clients and the maximum
number of supported clients.
For each radio and each WiFi client, the page displays the SSID, MAC address, IP
address, host name, operating system (OS), WiFi mode, VLAN ID, and user name.
User Manual177Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
12. To display very detailed information about a WiFi client, click the information (I) icon
to the left of the client.
The Detailed Client Information page displays and shows the following information:
•MAC Address: The MAC address of the client.
•IP Address: The IP address associated with the client.
•Host Name: The host name of the client.
•OS: The operating system that runs on the client.
•BSSID: The BSSID that the client connects to.
•SSID: The SSID of the radio that the client connects to.
•Channel: The channel that the client connects to.
•Channel Width: The width of the channel that the client connects to.
•Tx Rate: The rate of traffic transmission of the client.
•Rx Rate: The rate of traffic reception of the client.
•RSSI: The RSSI threshold value of the client.
•Tx Bytes: The number of bytes that the client transmitted.
•Rx Bytes: The number of bytes that the client received.
•State: The QoS state of the connection.
•Type: The type of WiFi security that is used for the connection.
•Device Type: The type of device that the client is.
•Mode: The WiFi mode of the connection.
•Status: The security status of the connection.
•Idle Time: The time that the client remained idle.
•Assoc Time Stamp: The time that is associated with the information on the
Detailed Client Information page.
•PMF Support: If PMF is enabled on the access point, indicates if the client
supports PMF.
13. If you opened the Detailed Client Information page, click the Close button.
The Detailed Client Information page closes.
14. To display the most recent information, click the Refresh button.
User Manual178Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
View WiFi and Ethernet traffic, traffic and ARP
statistics, and channel utilization
To view WiFi and Ethernet (wired LAN) traffic, traffic and ARP statistics, and channel
utilization:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Scroll down to the Hours Trend pane at the bottom of the Dashboard page.
By default, the Clients button is selected.
5. To view traffic information, do the following:
a. Click the Traffic button.
The graph shows the information for Ethernet (wired LAN) traffic, total WiFi traffic,
WiFi traffic for the 2.4 GHz radio, and WiFi traffic for each 5 GHz radio.
b. To view more information, point to a node on one of the lines on the graph.
User Manual179Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. To view channel utilization, do the following:
a. Click the Channel Utilization button.
The graph shows the channel utilization for the 2.4 GHz radio.
b. To view the channel utilization for a 5 GHz radio, click the 5 GHz Low or 5 GHz
High button.
c. To view more information, point to a bar.
7. To change the period over which information is filtered and displayed, select the
number of recent hours from the menu to the right of the buttons.
8. To view traffic statistics, select Management > Monitoring > Statistics.
The page displays the network traffic statistics for both the WiFi and Ethernet
interfaces of the access point since the access point started or rebooted. The page
also displays the number of clients that are associated with each radio.
If the ARP proxy is enabled (see Manage the ARP proxy on page 218), the page also
displays the ARP statistics, including the number of proxied and dropped packets.
9. To display the most recent information, click the Refresh button.
User Manual180Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
View or download tracked URLs
If you enabled URL tracking for a WiFi network (see Enable or disable URL tracking for
a WiFi network on page 191), you can view the tracked URLs by URL, WiFi client, and
SSID. You can also download a URL tracking report as a .csv file.
To view or download tracked URLs:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual181Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Monitoring > URL Tracking.
By default, the table shows the URLs that were accessed, each with the MAC address
of the WiFi client that accessed the URL, the associated SSID, and the number of
times that the WiFi client accessed the URL.
5. To view additional information, click the …link to the right of a MAC address or
SSID.
6. To view URL tracking information by WiFi client, do the following:
a. From the menu, select Client.
The table shows the MAC addresses of the WiFi clients, each with the client host
name, and the first URL of the list of URLs that the client accessed.
b. To view all URLs that a WiFi client accessed, click the …link to the right of the
first URL.
A pop-up window displays all URLs that the WiFi client accessed.
c. Click the Close button.
The pop-up window closes.
7. To view URL tracking information by SSID, do the following:
a. From the menu, select SSID.
The table shows the SSIDs and the first URL of the list of URLs that were accessed
on the SSID.
b. To view all URLs that were accessed on the SSID, click the …link to the right of
the first URL.
User Manual182Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
A pop-up window displays all URLs that the were accessed on the SSID.
c. Click the Close button.
The pop-up window closes.
8. To download a URL tracking report as a .csv file, click the Download button, and
follow the directions of your browser.
9. To clear all URL tracking information, do the following:
a. Click the Clear button.
A warning pop-up window displays.
b. Click the OK button.
The pop-up window closes and the information is cleared.
View, save, download, or clear the logs
You can view and manage the activity logs of the access point. You can also download
a detailed log file.
Note: If the access point functions in the NETGEAR Insight management mode, you
can also view and manage the cloud activity logs, which show the connection of the
access point to the Insight cloud-based management platform. If the access point
functions in the NETGEAR Insight management mode, this is option is available from
the Dashboard page by selecting Management > Monitoring > Cloud Logs.
To view, save, download, or clear the logs:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
User Manual183Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Monitoring > Logs.
5. To save the logs, do the following:
a. Click the Save button.
b. Follow the directions of your browser to save the file to your computer.
6. To download the detailed log entries, do the following:
a. Click the Download Detailed Logs button.
Depending on the size of the file, downloading the detailed log entries might
take several minutes.
b. Follow the directions of your browser to save the file to your computer.
7. To refresh the log entries onscreen, click the Refresh button.
WARNING: After you clear the log entries, you can no longer save or download
them.
8. To clear the log entries, click the Clear button.
User Manual184Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
View a WiFi bridge connection
You can configure a wireless distribution system (WDS) that consists of point-to-point
WiFi bridge connections between two access points (see Set up a WiFi Bridge on page
201). This is different from a NETGEAR Insight Instant Mesh WiFi network.
You can view whether a WiFi bridge is established and view the function (base station
or repeater), MAC addresses, and IP addresses of the access points that form the WiFi
bridge.
To view a WiFi bridge connection:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Monitoring > Wireless Bridge.
The page that displays lets you select a WDS profile (WDS 1, WDS 2, WDS 3, or
WDS 4).
5. Click the >button to the left of a WDS profile.
User Manual185Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. To view the function, MAC address, and IP address of an access point, point your
cursor to the access point.
View alarms and notifications
You can view the alarms and notifications from any access point page. The following
procedure describes how you can view them from the Dashboard page.
To view the alarms and notifications:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Locate the alarm bell icon at the top-right of the page.
The icon shows a number, indicating the total number of new alarms and notifications
since the last time that you viewed alarms and notifications.
User Manual186Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Click the alarm bell icon.
The pop-up window shows the alarms (indicated by a red bell) and notifications
(indicated by a blue bell) with a description and time.
6. To view more alarms and notification, scroll down in the pop-up window.
User Manual187Monitor the Access Point and the
Network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
12
Manage the Advanced WiFi
Features for a WiFi network
This chapter describes how you can manage the advanced WiFi features for a WiFi
network.
For information about the basic WiFi features for a WiFi network, see Manage the Basic
WiFi Features for a WiFi network on page 52.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name) or VAP (virtual access point). That is, when we refer to a WiFi network
we mean an individual SSID or VAP.
The chapter includes the following sections:
• Enable or disable client isolation for a WiFi network
• Enable or disable URL tracking for a WiFi network
• Change the format of the DHCP offer messages in a WiFi network
• Select a MAC ACL for a WiFi network
• Set bandwidth rate limits for a WiFi network
• Configure advanced rate selection for a WiFi network
Tip: If you want to change the settings of a WiFi network on the access point, use a
wired connection to avoid being disconnected when the new WiFi settings take effect.
188
Enable or disable client isolation for a WiFi
network
By default, client isolation is disabled for a WiFi network (SSID or VAP), allowing
communication between WiFi clients that are associated with the same or different WiFi
networks on the access point. For additional security, you can enable client isolation so
that clients that are associated with the same or different WiFi networks cannot
communicate with each other, except for communication over the Internet, which remains
possible.
To enable or disable client isolation for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
User Manual189Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7. Under Wireless Client Isolation, select one of the following radio buttons:
•Disable: Client isolation is disabled for the WiFi network. This is the default
setting.
•Enable: Client isolation is enabled for the WiFi network. The following check
boxes display:
If you select the Enable radio button, two check boxes display (see the following
steps).
8. If the Allow Access to AP UI check box displays: To prevent an admin user from
accessing the local browser UI over the WiFi network, clear the Allow Access to AP
UI check box.
By default, this check box is selected, allowing an admin user to access the local
browser UI over the WiFi network.
Note: If the management VLAN and WiFi network VLAN are identical (which they
are by default), an admin user can always access the local browser UI over a wired
network connection, even if you disable access over the WiFi network.
9. If the Allow access to devices listed below check box displays: To add network
devices that are exempt from isolation so that clients are allowed to reach them, do
the following:
a. Select the Allow access to devices listed below check box.
By default, the check box is cleared.
The Allowlist displays.
b. In the field to the right, enter up to five static IP addresses and domain names of
devices that clients are allowed to reach over the WiFi network.
For example, you could enter the static IP address or domain name of a network
printer that you want to make available to WiFi clients. A domain name on the
Allowlist must resolve to a static IP address.
c. Click the Move button.
The addresses and domain names are added to the Allowlist.
d. To remove one, several, or all addresses and domain names, select individual
check boxes or the Select All check box, and click the Remove button.
10. Click the Apply button.
Your settings are saved.
User Manual190Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Enable or disable URL tracking for a WiFi
network
You can enable the access point to track all URLs that are requested by WiFi clients that
are connected to a WiFi network (SSID or VAP). This feature is disabled by default, but
you can enable it.
For information about how to view the tracked URLs per SSID or per WiFi client, see
View or download tracked URLs on page 181.
To enable or disable URL tracking for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Under URL Tracking, select one of the following radio buttons:
•Enable: URL Tracking is enabled for the WiFi network.
User Manual191Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Disable: URL Tracking is disabled for the WiFi network.
8. Click the Apply button.
Your settings are saved.
Change the format of the DHCP offer
messages in a WiFi network
When a device tries to associate with the WiFi network and negotiates an IP address,
the access point converts the broadcast DHCP offer message that it receives from the
DHCP server to a unicast message, and forwards it to the device. This is the default
configuration. For the DHCP message exchange, unicast packets are more reliable and
minimize the traffic in the network. However, if your situation requires that DHCP offer
messages must be distributed as broadcast packets, you can change the format so that
in a specific WiFi network, the access point does not convert the broadcast DHCP offer
messages to unicast messages.
To change the format of the DHCP offer messages in a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
User Manual192Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Under DHCP Offer Broadcast to Unicast, select one of the following radio buttons:
•Enable. The access point forwards DHCP offer messages as unicast packets in
the WiFi network. This is the default selection.
•Disable. The access point forwards DHCP offer messages as broadcast packets
in the WiFi network.
8. Click the Apply button.
Your settings are saved
Select a MAC ACL for a WiFi network
After you set up one or more local MAC access control lists (ACLs, also referred to as
access lists; see Manage local MAC access control lists on page 107), you can select an
ACL for use with an SSID. Only WiFi devices for which the MAC address is on the MAC
ACL can connect to the access point through this SSID. (These devices might be able
to connect to the access point through another SSID if you did not set up MAC ACL
security for that SSID.)
You can also set up a RADIUS server (see Set up RADIUS servers on page 120) and select
the RADIUS MAC ACL. You must define the ACL on the RADIUS server, using the
following format for client MAC addresses in the RADIUS server: If the client MAC
address is 00:0a:95:9d:68:16, specify it as 000a959d6816 in the RADIUS server.
Note: A RADIUS MAC ACL cannot function if the WiFi security is WPA2 Enterprise or
WPA3 Enterprise. If you want to use a RADIUS MAC ACL, select a different type of WiFi
security for the WiFi network (see Change the authentication and encryption for a WiFi
network on page 65).
When selected, the MAC ACL blocks WiFi access to the SSID for WiFi devices that are
not in the selected access list. The blockage applies only to the SSID for which you
enable the MAC ACL. Only WiFi devices that are in the selected access list can connect
to the SSID.
User Manual193Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To select a MAC ACL for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
7. Select the MAC ACL check box.
8. Do one of the following:
•Select the Local MAC ACL radio button, and from the Select Group menu, select
the MAC ACL that you defined earlier.
To change the MAC ACL policy, MAC addresses in the ACL, or both, click the
link next to the group. For more information, see Manage local MAC access
control lists on page 107.
•Select the Radius MAC ACL radio button.
This option functions only if you set up a RADIUS server (see Set up RADIUS
servers on page 120).
9. Click the Apply button.
User Manual194Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Your settings are saved.
Set bandwidth rate limits for a WiFi network
You can set rate limits for the upload and download bandwidths for devices that are
connected to a WiFi network. The minimum bandwidth rate is 64 Kbps, the maximum
bandwidth rate is 1024 Mbps. You can set one rate for the upload bandwidth and
another rate for the download bandwidth.
Note: Before you set bandwidth rate limits, check the Internet speed of the access
point (see Check the Internet speed on page 223).
To set bandwidth rate limits for devices that are connected to a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
6. Scroll down and click the > Advanced tab.
The page expands.
User Manual195Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
7. Select the Rate Limit check box.
8. Specify the values:
•Upload: For the upload bandwidth limitation, enter a value from 64 to 1024 and
select Kbps or Mbps from the menu.
•Download: For the download bandwidth limitation, enter a value from 64 to
1024 and select Kbps or Mbps from the menu.
9. Click the Apply button.
Your settings are saved.
Configure advanced rate selection for a WiFi
network
Advanced rate selection lets you improve the capacity of an individual WiFi network (as
opposed to a radio, which affects all WiFi network on the radio) so that you can reach
the optimal balance between the following components in the WiFi network:
•Types of traffic (multicast, management, control, and data traffic)
•Number and proximity of clients (the client density)
•Types of clients (the WiFi modes that clients can support, including legacy WiFi
modes)
•Throughput speed for clients
•Area that the WiFi network must cover
To successfully configure advanced rate selection, we recommend that you determine
what the clients in your network can require (the types of traffic, the supported WiFi
modes, and the expected throughput speed), how many clients potentially can connect
simultaneously to the WiFi network, and where the clients can be located.
Note: By default, advanced rate selection is disabled. If you enable advanced rate
selection, the access point applies rate control settings to WiFi connections in a regular
WiFi network but not to connections in a wireless distribution system (WDS) or Insight
Instant Mesh WiFi network.
User Manual196Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Advanced rate selection lets you configure the following settings for each radio band
in a WiFi network:
•Fixed multicast rate: The multicast traffic transmission rate that you select is
automatically applied. The rates that you can select are the basic multicast rates that
the radio band supports.
•Rate control: The rate that you select is automatically applied to beacon and other
management frames and to control and data frames. If you enable rate control, you
can set the density level, which consists of four components that are described below.
That is, the density level includes much more than the client density (the number
and proximity of clients in the WiFi network).
The available settings for the density level in the WiFi network depend on the WiFi
mode in which the radio operates. (For more information about WiFi modes, see
Change the WiFi mode for a radio on page 79.)
You can set a density level of 0 (actually spanning 0–4, the default setting), 1 (spanning
1–4), 2 (spanning 2–4), 3 (spanning 3–4), or 4. The setting is then applied to the
following interdependent components, which you cannot set individually precisely
because they are interdependent:
-Density: The density (the number and proximity) of clients in the WiFi network.
(The density is one of the four components of the density level.) A setting of 0–4
means a very low client density. A setting of 4 means a very high client density.
-Compatibility: The compatibility with WiFi modes for legacy clients in the WiFi
network. A setting of 0 means compatibility with 802.11b/g/n/ax clients. A setting
of 4 means compatibility with 802.11g/n/ax clients but not with 802.11b legacy
clients.
-Overall performance: The throughput speed for the clients in the WiFi network.
A setting of 0 means a reduced performance. A setting of 4 means an optimal
performance. As an example, you can deliberately select a reduced performance
if you require a very wide coverage area.
-Coverage: The area that the WiFi network must cover. A setting of 0 means a
very wide coverage area. A setting of 4 means a very narrow coverage area. As
an example, you can deliberately select a very narrow area if you require an
optimal performance.
Another way to describe the density level is that a selected level is mapped to a
corresponding client density level, WiFi mode, minimum legacy rate, beacon rate, and
minimum Modulation Coding Scheme (MCS) rate.
User Manual197Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To configure advanced rate selection for a WiFi network:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Basic.
The page that displays lets you select and add an SSID.
5. Click the >button to the left of the SSID.
The settings for the selected SSID display.
User Manual198Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Scroll down and click the Advanced Rate Selection tab.
Note: For the selected SSID, you can specify the radio settings for the 2.4 GHz, 5
GHz Low, and 5 GHz High radio bands individually. The descriptions in the following
steps apply to all radios.
7. To apply basic fixed multicast rates, from the Fixed Multicast Rate menu, select
one of the following rates, depending on the radio band:
•2.4 GHz:1,2,5.5,or11 Mbps or Auto. (By default, Auto is 11 Mbps.)
•5 GHz Low:6,12,or24 Mbps or Auto. (By default, Auto is 24 Mbps.)
•5 GHz High:6,12,or24 Mbps or Auto. (By default, Auto is 24 Mbps.)
User Manual199Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. To enable automatic minimum rate control for beacon and other management frames
and for control and data frames, select the Rate Control check box.
If you select the Rate Control check box, the Density Level slider becomes available.
9. To set the density level for your environment, move the Density Level slider to 0,
1,2,3,or4.
As you move the slider, the selected density level is mapped to a corresponding
WiFi mode, beacon rate, minimum legacy rate, and minimum MCS rate. The available
settings depend on the WiFi mode that you select for the radio (see Change the
WiFi mode for a radio on page 79). By default, the WiFi mode for each radio is 11ax.
The density level for the WiFi network is based on the following interdependent
components, for which a setting is assigned by the position of the slider but which
you cannot set individually:
•Density of the WiFi clients: In the default 11ax WiFi mode for the radios, the
setting can be very low, low, medium, high, or very high, depending on the
position of the slider.
•Compatibility with WiFi modes for legacy clients: In the default 11ax WiFi
mode for the radios, the setting can be as follows:
-2.4 GHz: 802.11b/g/n/ax, which supports 802.11b clients, or 802.11g/n/ax,
which does not.
-5 GHz Low: 802.11a/n/ac/ax, which supports all types of clients in the 5 GHz
Low radio band in any position of the slider.
-5 GHz High: 802.11a/n/ac/ax, which supports all types of clients in the 5 GHz
High radio band in any position of the slider.
•Overall performance for the WiFi clients: In the default 11ax WiFi mode for
the radios, the setting can be reduced, moderate, good, very good, or optimal,
depending on the position of the slider.
•WiFi coverage: In the default 11ax WiFi mode for the radios, the setting can be
very narrow, narrow, average, wide, or very wide, depending on the position of
the slider.
Note: The help text in the local browser UI provides a table with detailed information
about how the WiFi mode of a radio affects these components and how these
components depend on each other.
10. Click the Apply button.
Your settings are saved.
User Manual200Manage the Advanced WiFi
Features for a WiFi network
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
13
Set up a WiFi Bridge
This chapter describes how you can configure a wireless distribution system (WDS) that
consists of point-to-point WiFi bridge connections between two access points. Each
WiFi bridge connection requires a WDS profile for which the settings must match on
the access points that make up the bridge.
A WDS is not the same as a NETGEAR Insight Instant Mesh WiFi network, which requires
a root access point (see Install the Access Point in an Insight Instant Mesh WiFi Network
on page 43).
The chapter includes the following sections:
• WiFi base station, WiFi repeater, and WiFi bridge requirements
• Set up a WiFi bridge between access points
201
WiFi base station, WiFi repeater, and WiFi
bridge requirements
If the access point is connected to the Internet over a wired connection, the access point
can function as the WiFi base station for up to four other access points that function as
WiFi repeaters. The access point itself can also function as a WiFi repeater if it is
connected to another access point that functions as a WiFi base station.
A WiFi base station connects to the Internet, wired and WiFi clients can connect to the
base station, and the base station sends its WiFi signal to one or more access points
that function as WiFi repeaters. Wired and WiFi clients can also connect to a WiFi
repeater, but the repeater connects to the Internet through the WiFi base station.
The following figure shows two access points in a WiFi repeating setup with a WiFi base
station on the left side and a single WiFi repeater on the right side.
Figure 9. WiFi bridge configuration between two access points in a 5 GHz radio band
To use a WiFi bridge, you cannot use the auto channel feature for the access point and
the SSID broadcast must be enabled.
For a WiFi bridge, you must set up one access point as a WiFi base station and another
access point as a WiFi repeater:
•WiFi base station: The base station is connected over Ethernet to a network switch
(usually with an Internet connection) and bridges traffic to and from the repeater.
The base station also handles local WiFi and wired traffic. To configure this mode,
you must know the MAC address of the 2.4 GHz or 5 GHz radio on the repeater.
User Manual202Set up a WiFi Bridge
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•WiFi repeater: The repeater sends all traffic from its local WiFi or wired devices to
the WiFi base station. Similarly, the repeater receives all traffic for its local WiFi or
wired computers from the base station. The repeater is connected to the network
(and Internet) over the WiFi connection to the base station. To configure this mode,
you must know the MAC address of the 2.4 GHz or 5 GHz radio on the base station.
By default, the access point functions in dual-band concurrent mode. If you enable the
WiFi repeater in either radio band, the WiFi base station or WiFi repeater cannot be
enabled in the other radio band. However, if you enable the WiFi base station in either
radio band and use the other radio band for either client access or as a WiFi base station,
dual-band concurrent mode is not affected.
Before you can set up a WiFi network with WDS, your configuration must meet the
following conditions:
•Both access points must use the same WiFi channel and WiFi security settings.
•Both access points must be on the same LAN IP subnet. That is, all of the access
point LAN IP addresses are in the same network.
•All LAN devices (wired and WiFi computers) are configured to operate in the same
LAN network address range as the access points.
Note: If you are using the access point as the base station with a non-NETGEAR access
point as a repeater, you might need to change more configuration settings. In particular,
you might need to disable the DHCP server function on the non-NETGEAR access point
that is the repeater.
CAUTION: Before you set up a WiFi bridge between two access points, enable STP on
the access points (see Enable or disable Spanning Tree Protocol on page 130) and on
the switches to which the access points are connected. If your switches do not support
STP, after the WiFi bridge is established, disconnect one of the access points from its
switch to prevent a network loop and connectivity problems. If you used a PoE++ switch
for that access point, you now must use a power adapter.
Set up a WiFi bridge between access points
The following procedure describes how you can configure the WiFi bridge settings on
one access point and then do the same on another access point, allowing the WiFi
bridge to be established.
User Manual203Set up a WiFi Bridge
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To set up a WiFi bridge between two access points:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless Bridge.
The page that displays lets you select a WDS profile (WDS 1, WDS 2, WDS 3, or WDS
4).
5. Click the >button to the left of a WDS profile.
The WDS profile page displays.
6. Select the Band 2.4 GHz,5 GHz Low,or5 GHz High radio button.
Your selection determines the radio band on which the WDS is established. For
countries that do not support dual-band or tri-band operation, you cannot select
the radio.
7. Select the VAP Enable radio button.
User Manual204Set up a WiFi Bridge
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
By default, a WDS profile is disabled.
8. Configure the WDS profile settings as described in the following table.
DescriptionSetting
The WiFi network name of the network on which the WDS is established. The default
name is Netgear-WDS-x, in which x is the number of the WDS (1, 2, 3, or 4).
Note: The WiFi network name must be identical on the WiFi base station and the
WiFi repeater.
Wireless Network
Name (SSID)
The MAC address of the local WDS radio interface, that is, the MAC address of the
local radio on which the WDS is established. You cannot change this MAC address
on this page. The MAC address is displayed for your information.
Enter this MAC address on the remote access point of the WDS connection.
Local MAC Address
The MAC address of the remote WDS radio interface, that is, the MAC address of
the remote radio on which the WDS is established.
Remote MAC Address
By default, the selection from the menu is Open, in which case authentication and
data encryption are not applicable. To secure the WDS connection, select WPA2
Personal and specify the following settings:
•Encryption: The data encryption is AES and you cannot change this setting.
•Passphrase: The passphrase for the WDS connection. For you to enable the WDS
connection, the passphrase on the remote access point must match the passphrase
that you define in this field.
Network
Authentication, Data
Encryption, and
Passphrase
9. Click the Apply button.
Your settings are saved.
10. Configure the WiFi bridge settings on the access point at the other end of the WiFi
bridge and restart that access point.
User Manual205Set up a WiFi Bridge
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Note: If the device at the other end of the WiFi bridge is a NETGEAR access point,
you might not need to restart it.
The WiFi bridge is established.
11. Verify connectivity across the LANs of both access points.
If the configuration is set up correctly, a computer on any WiFi or wired LAN segment
of the access point that functions as the WiFi repeater can connect to the Internet
or share files and printers with any other computer or server connected to the access
point that functions as the WiFi base station.
Note: After the WiFi bridge is established, you cannot change the WiFi channel for the
radio on which the WiFi bridge is established.
User Manual206Set up a WiFi Bridge
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
14
Manage the Advanced Radio
Features
This chapter describes how you can manage the advanced radio features of the access
point. For information about the basic radio features, see Manage the Basic Radio
Features on page 74.
CAUTION: If you change a radio feature on the 2.4 GHz radio, the change affects all
WiFi networks that broadcast on the 2.4 GHz radio. Similarly, if you change a radio
feature on a 5 GHz radio (you can configure the 5 GHz high band and 5 GHz low band
separately), the change affects all WiFi networks that broadcast on the 5 GHz high band
or low band radio. If the change is not specific to one radio, the change affects all WiFi
networks on the access point.
The chapter includes the following sections:
• Manage the advanced WiFi settings for the radios
• Manage the maximum number of clients for a radio
• Manage the broadcast and multicast settings for a radio
• Manage load balancing for the radios
• Manage sticky clients
• Manage the ARP proxy
• Manage the amount of broadcast traffic
Tip: If you want to change the radio settings, use a wired connection to avoid being
disconnected when the new radio settings take effect.
207
Manage the advanced WiFi settings for the
radios
The advanced WiFi settings for the radios apply to all WiFi networks (VAPs or SSIDs).
Although these settings work fine for most network environments and it is unlikely that
you need to change them, you can change the radio settings, and you can do so for the
2.4 GHz, 5 GHz high band, and 5 GHz low band radios individually.
CAUTION: We recommend that you change these advanced WiFi settings only if you
fully understand the consequences. Incorrect configuration might cause connectivity
problems for devices trying to connect to the access point.
A radio must be turned on for you to change the settings. For more information about
turning a radio on, see Turn a radio on or off on page 78.
To manage the advanced WiFi settings for the radios:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual208Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Configuration > Wireless > Advanced.
5. Configure the settings as described in the following table.
The descriptions in the table apply to all radios. You can specify the radio settings
for the 2.4 GHz, 5 GHz high band, and 5 GHz low band radios individually, but the
check box for the 802.11n 256 QAM feature applies to the 2.4 GHz radio only (the
feature is always enabled for the 5 GHz radios) and the 802.11h feature applies to
the 5 GHz radios only.
User Manual209Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
DescriptionSetting
Enter the maximum number of WiFi clients that can simultaneously associate with
the radio. The range is from 1 to 200. The default is 200 WiFi clients.
Max. Wireless Clients
Enter the Request to Send (RTS) threshold. The range is from 256 to 2346. The default
is 2346.
If the packet size is equal to or less than the RTS threshold, the radio uses the Carrier
Sense Multiple Access with Collision Detection (CSMA/CD) mechanism and the data
frame is transmitted immediately after the silence period. If the packet size is larger
than the RTS threshold, the system uses the CSMA with Collision Avoidance
(CSMA/CA) mechanism. In this situation, the transmitting device sends the RTS packet
to the receiving device and waits for the receiving device to return a Clear to Send
(CTS) packet before sending the actual packet data.
RTS Threshold
(256-2346)
Enter an interval between 100 ms and 300 ms for each beacon transmission, which
allows the radio to synchronize the WiFi network. The default is 100 ms.
Note: If you set up more than four WiFi networks, the beacon interval is automatically
changed to 300.
Beacon Interval
(100-300)
When the WiFi mode is 802.11n, you can select the 802.11n 256 QAM check box
to enable the 2.4 GHz radio to function over 256-quadrature amplitude modulation
(QAM), which can increase the 2.4 GHz radio throughput for 802.11n clients that are
capable of supporting 256 QAM. By default, 256 QAM is disabled for the 2.4 GHz
radio, that is, the check box is cleared.
By default, 256-QAM is enabled for the 5 GHz radios and you cannot disable it (the
page does not provide check boxes for the 5 GHz radios).
802.11n 256 QAM
Move the slider to specify the delivery traffic indication message (DTIM) interval or
the data beacon rate, which indicates the beacon delivery traffic indication message
period in multiples of beacon intervals. This value must be between 1 and 255. The
default is 2.
DTIM Interval (1-255)
Multicast and broadcast rate limiting is enabled by default to improve the overall
network performance by limiting the number of packets that are transmitted across
the network. By default, the setting is 50 (the maximum possible value), which specifies
a maximum rate limit of 50 packets per second. To change the setting, move the
slider. To disable multicast and broadcast rate limiting, clear the small check box.
Broadcast/Multicast
Rate Limiting
User Manual210Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
(Continued)
DescriptionSetting
By default, the MU-MIMO Enable radio button is selected and multiuser MIMO
(MU-MIMO) is enabled. To disable MU-MIMO, select the MU-MIMO Disable radio
button.
MU-MIMO enables multiple users to receive data from the access point simultaneously
using the same channel. With MU-MIMO, the access point can transmit to multiple
clients simultaneously using the same channel. MU-MIMO is used in the downstream
direction and requires both the access point and the WiFi clients to be capable of
802.11ac Wave 2 or 802.11ax.
MU-MIMO
Select the 802.11h Enable radio button to enable 802.11h-capable WiFi clients to
automatically switch to a new channel without disconnecting from the access point
and without losing any data when the access point changes to another channel. By
default, the 802.11h Disable radio button is selected and 802.11h is disabled.
You can enable or disable 802.11h for the 5 GHz radios but not for the 2.4 GHz radio.
802.11h
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Manage the maximum number of clients for
a radio
The number of clients that are allowed to associate with a radio affects the reliability
and throughput of the WiFi connection. A smaller number can increase the reliability
and throughput and a large number can decrease the reliability and throughput.
By default, one radio allows up to 200 client associations. You can specify a lower number
of clients. If the number of associated clients exceeds the maximum number that you
specify, the radio rejects new client associations until the number drops below that
maximum number.
User Manual211Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To manage the maximum number of clients for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced.
The Wireless Settings page displays.
5. In the Max.Wireless Clients field for the radio, enter the maximum number of WiFi
clients that can simultaneously associate with the radio.
The range is from 1 to 200 for the radio. The default is 200 WiFi clients for the radio.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
Manage the broadcast and multicast settings
for a radio
Because multicast and broadcast traffic can adversely affect the throughput and latency
of a WiFi network, you can change the multicast and broadcast rate limiting settings for
a radio.
User Manual212Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
By default, multicast and broadcast rate limiting is enabled to improve the overall
network performance by limiting the number of packets that are transmitted across the
network. By default, the setting is 50 (the maximum possible value), which specifies a
maximum rate limit of 50 packets per second. You can lower this number.
To manage the broadcast and multicast settings for a radio:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced > Wireless Settings.
The Wireless Settings page displays.
5. To change the multicast and broadcast rate limiting settings, under
Broadcast/Multicast Rate Limiting for the radio, take one of the following actions:
•To change the rate limiting setting, move the slider. By default, the setting is 50
(the maximum possible value), which specifies a maximum rate limit of 50 packets
per second.
•To disable or enable multicast and broadcast rate limiting, clear or select the
small check box.
6. Click the Apply button.
A warning pop-up window displays.
7. Click the OK button.
The pop-up window closes and your settings are saved. The radio or radios restart
and WiFi clients might need to reconnect.
User Manual213Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage load balancing for the radios
You can configure the radio utilization thresholds to enable each radio to maintain the
speed and performance of the WiFi network as clients associate with and disassociate
from the WiFi network.
If you enable load balancing, client associations depend on the maximum number of
clients per radio, the channel load per radio, and each client’s Received Signal Strength
Indicator (RSSI). New client associations are allowed if a radio’s utilization remains within
the defined load balancing settings. If a radio’s utilization exceeds the defined load
balancing settings, new client associations are temporary halted until the radio’s
utilization falls within the defined load balancing settings.
Note: The Dashboard page can show information about the client and traffic distribution
per radio as well as the client, traffic, and channel utilization for each radio (see Display
client distribution, connected clients, and client trends on page 175 and View WiFi and
Ethernet traffic, traffic and ARP statistics, and channel utilization on page 179).
By default, all of the following types of load balancing are enabled with their default
settings:
•Load balancing based on the maximum number of clients: The access point
allows client associations up to the specified maximum number of clients. After the
maximum number is exceeded, new clients are rejected. Even though this is a global
setting, it is implemented per radio.
•Load balancing based on the channel load: The access point allows client
associations up to the defined maximum channel utilization. After the maximum
channel utilization is exceeded, new clients are rejected. Even though this is a global
setting, it is implemented per radio.
Note: If a client is rejected but persistently tries to associate with the access point,
the access point grants access to that client.
•Load balancing based on the RSSI of the client: Clients with an RSSI that is equal
to or higher than the defined minimum are allowed to associate with the access
point. Clients with an RSSI below the defined minimum are rejected. Even though
this is a global setting, it is implemented per radio.
Note: If a client is rejected but persistently tries to associate with the access point,
the access point grants access to that client.
User Manual214Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
You can change the default settings for each type of load balancing, or completely
disable one or more types of load balancing.
To manage load balancing for the radios:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced > Load Balancing.
5. To globally enable load balancing for the radios, select the Load Balancing Mode
Enable radio button.
The page adjusts and displays a slider for each type of load balancing and each
radio.
User Manual215Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
By default, load balancing is disabled. When you enable load balancing, all three
types of load balancing are enabled. You can individually disable one or more types
of load balancing.
6. To individually enable or disable one or more types of load balancing, do the
following:
•To disable a particular type of load balancing, clear the small blue check box to
the left of the Based On text.
•To enable a particular type of load balancing, select the small blue check box to
the left of the Based On text.
7. To change the load balancing settings, do the following:
•Based On Maximum Number Of Clients: For each radio, move the associated
slider to specify the maximum number of clients allowed, before the radio stops
accepting new client associations. For each radio, the minimum number of clients
is 5 and the maximum number is 200, and the default number is 200.
•Based On Channel Load: For each radio, move the associated slider to specify
the maximum percentage of channel load that is allowed on the radio, before it
stops accepting new client associations. For each radio, the minimum percentage
of channel load is 50, the maximum percentage is 90, and the default percentage
is 70.
•Based on Channel Receive Signal Strength: For each radio, move the associated
slider to specify the minimum required RSSI value for an individual client, below
which the radio does not accept the client association. For each radio, the
minimum RSSI value is 1, the maximum value is 50, and the default value is 23.
8. Click the Apply button.
Your settings are saved.
Manage sticky clients
During roaming, sticky clients do not change to an access point with a better signal but
remain associated with (that is, stick to) their initial access point, even though the quality
of the connection to that access point is degraded. Such a situation causes delay for
other clients that are associated with that access point.
Note: For a home WiFi network with a single access point, a sticky client is useful
because no other access point is available to associate with during roaming. For a
business or enterprise network with multiple access points, a sticky client can cause a
drain on WiFi resources.
User Manual216Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
You can force sticky clients to disassociate from the radios of the access point.
If load balancing based on the RSSI of the client is enabled (see Manage load balancing
for the radios on page 214), after a client is forced to disassociate, the client can join
again in the following situations:
•The client can associate again if its RSSI is equal to or higher than the minimum
required RSSI.
•If the client persistently tries to associate with the access point, the access point
grants access to that client, even if its RSSI is below minimum required RSSI.
To manage sticky clients:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced > Load Balancing.
The Load Balancing page displays.
5. Either select or clear the Force Sticky Clients To Disassociate check box.
Selecting the check box forces sticky clients to disassociate from a radio. Clearing
the check box allows sticky clients to remain associated with a radio.
6. Click the Apply button.
Your settings are saved.
User Manual217Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage the ARP proxy
By default, the ARP proxy is enabled on the access point, allowing it to inspect all ARP
broadcast packets for its clients. In this way, the access point responds to ARP requests
for its clients, preventing unnecessary broadcast traffic on the radios.
For information about the ARP statistics, including the number of proxied and dropped
packets, see View WiFi and Ethernet traffic, traffic and ARP statistics, and channel
utilization on page 179.
To manage the ARP proxy:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced > ARP Proxy.
The ARP Proxy page displays.
5. Select one of the following radio buttons
•Enable: The ARP proxy is enabled. This is the default setting.
•Disable: The ARP proxy is disabled. Broadcast traffic on the radios might increase.
6. Click the Apply button.
Your settings are saved.
User Manual218Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Manage the amount of broadcast traffic
The access point supports broadcast enhancements that reduce the broadcast traffic
on the radios, and therefore on all WiFi networks that you configure on the access point.
We recommend that you enable the broadcast enhancements only if you expect the
access point to host less than 20 clients on both 5 GHz radios and less than 10 clients
on the 2.4 GHz radio. By default, the broadcast enhancements are disabled.
Note the following limitations for the broadcast enhancements:
•If more 20 clients are connected to a WiFi network, the broadcast enhancements do
not work for that WiFi network.
•Broadcast enhancement do not work if the access point functions in a wireless
distribution system (WDS) or in an Insight Instant Mesh WiFi network.
To manage broadcast enhancements:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Configuration > Wireless > Advanced > Broadcast
Enhancements.
The Broadcast Enhancements page displays.
5. Select one of the following radio buttons
•Enable: The broadcast enhancements are enabled.
User Manual219Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Disable: The broadcast enhancements are disabled. This is the default setting.
6. Click the Apply button.
Your settings are saved.
User Manual220Manage the Advanced Radio
Features
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
15
Diagnostics and Troubleshooting
This chapter describes how you can capture WiFi packets and troubleshoot the access
point and network.
The chapter includes the following sections:
• Perform a ping test
• Check the Internet speed
• Quick tips for WiFi troubleshooting
• Troubleshoot with the LEDs
• The extender access point and root access point cannot connect
• Troubleshoot WiFi connectivity for a WiFi client device
• Troubleshoot Internet browsing
• You cannot log in to the access point over a LAN connection
• Changes are not saved
• You enter the wrong password and can no longer log in to the access point
• Troubleshoot your network using the ping utility
221
Perform a ping test
You can ping the IP address of a device or network location from the access point and
view the results of the ping test.
To perform a ping test:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
4. Select Management > Diagnostics > Ping Test.
5. Specify the settings that are described in the following table.
User Manual222Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
DescriptionSetting
The number of pings that the access point must send. The default number is 16.Ping Count
The size of each ping packet. The default size is 64 bytes.Packet Size (in Bytes)
The interval between pings. The default interval is 1 second.Ping Interval (in sec)
The period after which a ping times out. The default period is 60 seconds.Ping Timeout (in sec)
The IP address that the access point must ping.Remote Host
6. To start the ping test, click the Start button.
The results of the ping test display in the Ping Result field.
7. To stop the ping test before the ping count is reached or if the ping times out, click
the Stop button.
Check the Internet speed
You can check the Internet speed of the access point. The results might be helpful if
you want to set bandwidth rate limits (see Set bandwidth rate limits for a WiFi network
on page 195).
To check the Internet speed:
1. Launch a web browser from a computer that is connected to the same network as
the access point or directly to the access point through an Ethernet cable or WiFi
connection.
2. Enter the IP address that is assigned to the access point.
A login window displays.
If your browser does not display the login window but displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 42.
3. Enter the access point user name and password.
The user name is admin. The password is the one that you specified. The user name
and password are case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
The Dashboard page displays.
User Manual223Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Select Management > Diagnostics > Speed Check.
The Internet Speed Check page displays.
5. To view the privacy policy, click the Privacy Policy link.
The Privacy Policy pop-up window displays.
6. To close the pop-up window, click the Xin the upper right corner.
7. Click the Test Speed button.
After a short delay, the page displays the measured latency in ms, download speed
in Mbps, and upload speed in Mbps.
8. To view the test history, click the View History link.
A table shows the results of previous tests.
Quick tips for WiFi troubleshooting
If one or more WiFi networks do not function normally, consider to repower the access
point:
1. Unplug the Ethernet cable from the access point to the network switch.
2. If you use a power adapter, disconnect it from the access point.
3. Plug in the Ethernet cable from the access point to the network switch. Wait two
minutes.
4. If you use a power adapter, connect it to the access point. Wait two minutes.
If a WiFi client device cannot connect to the access point, check the following:
•Make sure that a WLAN LED on the access point is not off.
If a WLAN LED is off and you did not disable the LEDs (see Manage the LEDs on
page 164), the associated WiFi radio is probably off too. For more information about
the WiFi radios, see Turn a radio on or off on page 78.
•Make sure that the WiFi settings in the WiFi client device and access point match
exactly.
The WiFi network name (SSID) and WiFi security settings of the access point and
WiFi client device must match exactly.
For information about accessing the access point for initial configuration over a WiFi
connection, see Connect to the access point for initial configuration on page 22.
•Make sure that the WiFi client device supports the authentication and encryption
that you are using for the WiFi network. For more information, see Change the
authentication and encryption for a WiFi network on page 65.
User Manual224Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Note: If the access point’s WiFi authentication and encryption is set to WPA3 Personal
and the WiFi client device does support WPA3, make sure that the WiFi adapter
device driver is updated to the latest version on the WiFi client device.
•Make sure that the WiFi client device is not too far from the access point or too close.
To see if the signal strength improves, move the WiFi client device near the access
point but at least 6 feet (1.8 meters) away.
•Make sure that the WiFi signal is not blocked by objects between the access point
and the WiFi client device.
•Make sure that the access point’s SSID broadcast is not disabled.
If the access point’s SSID broadcast is disabled, the WiFi network name is hidden
and does not display in the WiFi client device’s scanning list. To connect to a hidden
network, the user must enter the network name and the WiFi password. For more
information about the SSID broadcast, see Hide or broadcast the SSID for a WiFi
network on page 63.
•Make sure that the WiFi client device does not use a static IP address but is configured
to receive an IP address automatically with DHCP. (For most devices, DHCP is the
default setting.)
Troubleshoot with the LEDs
When you connect the access point to a power source and you did not disable the LEDs
(see Manage the LEDs on page 164), the LEDs light as described here:
1. The Power/Cloud LED lights solid amber initially and then blinks amber slowly. After
about two minutes, the Power/Cloud LED turns either solid green or solid blue,
indicating that the startup procedure is complete and the access point is ready:
•Solid green: The access point functions either as a standalone access point, or
as an Insight discovered access point that is not connected to the Insight
cloud-based management platform.
•Solid blue: The access point functions in Insight mode and is connected to the
Insight cloud-based management platform.
2. When the startup procedure is complete, verify the following:
•The LAN 1 LED lights solid green or solid amber, depending on the speed of the
Ethernet link.
If the access point processes Ethernet traffic, the LAN LED blinks green or blue.
•The 2.4G WLAN LED and 5G WLAN LEDs light solid green.
If clients are connected to a radio, the associated WLAN LED lights solid blue. If
a radio processes traffic, the associated WLAN LED blinks blue.
User Manual225Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
You can use the LEDs for troubleshooting. For more information, see the following
sections:
• Power/Cloud LED remains off
• Power/Cloud LED remains solid amber
• Power/Cloud LED is blinking amber slowly, continuously
• The access point functions as a PoE PD and the Power/Cloud LED remains solid
amber
• Power/Cloud LED does not light blue in the NETGEAR Insight management mode
• Power/Cloud LED does not stop blinking amber, green, and blue
• 2.4G or 5G WLAN LED is off
Power/Cloud LED remains off
If you use a PoE++ connection and the Power/Cloud LED and other LEDs are off when
the Ethernet cable is connected to a PoE++ switch, do the following:
•Make sure that the LEDs are not disabled (see Manage the LEDs on page 164).
•Make sure that the Ethernet cable between the access point and the PoE++ switch
is correctly connected at both ends.
•Make sure that the other end of the Ethernet cable is plugged into a PoE++ port on
a PoE++ switch that is receiving power.
•Make sure that the PoE power budget of the PoE++ switch is not oversubscribed so
that the PoE++ switch is capable of delivering PoE++ (802.3bt) power to the access
point.
If you use an optional power adapter and the Power/Cloud LED and other LEDs remain
off when the access point is turned on, do the following:
•Make sure that the LEDs are not disabled (see Manage the LEDs on page 164).
•Make sure that the power adapter is correctly connected to the access point, and
that the power adapter is correctly connected to a functioning power outlet. If it is
plugged into a power strip, make sure that the power strip is turned on. If it is plugged
directly into the wall, verify that the outlet is not switched off.
•Make sure that you are using the NETGEAR power adapter for this product. That is,
do not use the NETGEAR power adapter for another NETGEAR product or a
third-party power adapter.
If the error persists, a hardware problem might exist. For recovery instructions or help
with a hardware problem, contact technical support at netgear.com/support.
User Manual226Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Power/Cloud LED remains solid amber
When you connect the access point to a power source, the Power/Cloud LED lights
solid amber initially, then blinks amber slowly, and finally turns solid green or solid blue,
indicating that the startup procedure is complete and the access point is ready.
If the Power/Cloud LED remains solid amber after five minutes, either a boot error
occurred or the access point is malfunctioning.
Do the following:
1. Disconnect the access point from its power source, reconnect it, and wait several
minutes to see if the startup procedure completes successfully.
2. If the startup procedure still does not complete successfully and the Power/Cloud
LED remains solid amber after five minutes, use the Reset button to return the access
point to its factory default settings.
If the error persists, a hardware problem might exist. For recovery instructions or help
with a hardware problem, contact technical support at netgear.com/support.
Power/Cloud LED is blinking amber slowly, continuously
When you connect the access point to a power source, the Power/Cloud LED lights
solid amber temporarily and then turns solid green or solid blue, indicating that the
startup procedure is complete and the access point is ready. During regular operation,
the only time that the Power/Cloud LED blinks amber temporarily is when firmware is
being upgraded. Also, in that situation, the Power/Cloud LED blinks amber quickly, not
slowly.
If the Power/Cloud LED blinks amber slowly and continuously, the access point did not
receive an IP address from a DHCP server.
Check to make sure that the DHCP client of the access point is enabled (see Enable the
DHCP client on page 125), that your network includes a DHCP server (or a router that
functions as a DHCP server), and that the DHCP server can reach the access point (both
must be on the same network).
In the unlikely situation that your network does not include a DHCP server, you might
need to configure a fixed (static) IP address on the access point (see Disable the DHCP
client and specify a fixed IP address on page 124).
User Manual227Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The access point functions as a PoE PD and the
Power/Cloud LED remains solid amber
When you connect the access point to a power source, the Power/Cloud LED lights
solid amber initially, then blinks amber slowly, and finally turns solid green or solid blue,
indicating that the startup procedure is complete and the access point is ready.
If the access point functions as a PoE PD and the Power/Cloud LED remains solid amber
after five minutes, the access point might not be receiving power at the required 802.3bt
(PoE++) level. For example, this situation might occur if the access point is connected
to a switch that provides only 802.3at (PoE+) rather than 802.3bt (PoE++).
Note: If the access point receives power at the 802.3at (PoE+) level, the access point
limits its operation to 2x2 streams for 2.4 GHz radio and 5 GHz low band radio, which
results in half the peak throughput for these two radios. If the access point receives
power at the 802.3af (PoE) level, the 2.4 GHz radio and 5 GHz low band radios remain
off. In either case, the 5 GHz high band radio functions normally.
Do the following:
1. Disconnect and reconnect the Ethernet cable at the LAN 1/PoE++ port on the access
point and at the 802.3bt (PoE++) port on the PoE++ switch.
The access point restarts.
2. If the Power/Cloud LED remains solid amber after five minutes, check to see why
the PoE++ switch cannot provide sufficient PoE power to the access point.
Most likely, the PoE power budget of the PoE++ switch is oversubscribed and you
might need to disconnect another PoE device from the PoE++ switch to make
sufficient PoE power available for the access point.
If the error persists, see Power/Cloud LED remains solid amber on page 227.
Power/Cloud LED does not light blue in the NETGEAR
Insight management mode
If the access point functions in the Web-browser management mode, the Power/Cloud
LED lights green. This is normal LED behavior.
However, if the access point functions in the NETGEAR Insight management mode and
the Power/Cloud LED does not light blue but remains green, the access point is not
connected to the Insight cloud-based management platform.
User Manual228Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If the access point functions in the NETGEAR Insight management mode and the
Power/Cloud LED does not light blue, do the following:
1. Verify that the management mode of the access point is NETGEAR Insight.
For more information, see Change the management mode to NETGEAR Insight or
Web-browser on page 140.
2. Make sure that the Ethernet cable connection between the access point and your
network is good.
3. Make sure that the access point is connected to the Internet and that the Internet
connection is good.
4. Make sure that the access point is running the latest firmware version.
For more information, see Manage the firmware of the access point on page 148.
5. Disconnect and reconnect the Ethernet cable at the LAN 1/PoE++ port and wait five
minutes to see if the Power/Cloud LED lights solid blue.
If you use a power adapter with the access point, disconnect and reconnect the
power adapter and wait five minutes to see if the Power/Cloud LED lights solid blue.
6. Use the Reset button to return the access point to its factory default settings.
If the error persists, a hardware problem might exist. For recovery instructions or help
with a hardware problem, contact technical support at netgear.com/support.
Power/Cloud LED does not stop blinking amber, green,
and blue
During the initial installation and configuration process in an Insight Instant Mesh WiFi
network, the Power/Cloud LED blinks amber, green, and blue while the access point is
being configured as an extender access point. For more information, see Connect the
access point as an extender to a root access point on page 48.
If the Power/Cloud LED does not stop blinking amber, green, and blue, the extender
access point cannot connect.
Check the following items or try the following troubleshooting steps:
•Make sure that at least one root access point is available for the extender access
point to connect to.
•Make sure that all root access points run the latest firmware version.
•Make sure that the output power of each radio on each root access point is at its
maximum level. By default, the output power for a radio is at its maximum level. For
more information, see Change the output power for a radio on page 84.
User Manual229Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
•Make sure that the extender access point is not too far away from a root access point.
For more information, see The extender access point and root access point cannot
connect on page 230.
•Restart the extender access point.
•Remove the extender access point from your Insight network location and from your
Insight account. Then, add the extender access point to your Insight account again
and to your Insight network location.
2.4G or 5G WLAN LED is off
If the 2.4G WLAN LED, 5G H WLAN LED, or 5G L WLAN LED is off, do the following:
•Check to see if a radio is disabled (see Turn a radio on or off on page 78). By default,
the radios are enabled and the WLAN LEDs light as follows:
-Solid green: The radio is operating without any clients.
-Solid blue: The radio is operating with clients.
-Blinking blue: The radio is operating with clients and is processing traffic.
•If you are using a PoE connection, make sure that the PoE++ switch is providing
sufficient power to the access point. The access point requires power at the 802.3bt
(PoE++) level. Power at a level lower than PoE++ affects the radios. For more
information, see The access point functions as a PoE PD and the Power/Cloud LED
remains solid amber on page 228.
If the error persists, a hardware problem might exist. For recovery instructions or help
with a hardware problem, contact technical support at netgear.com/support.
The extender access point and root access
point cannot connect
When you add the access point as an extender to an Insight network location that
includes one or more root access points (see Connect the access point as an extender
to a root access point on page 48), we recommend that you place the extender access
point in the same room as a root access point during the initial sync. After a successful
sync, move the extender access point to the location where you intend to use it.
For a reliable WiFi connection, place the extender access point less than 25 feet (7.5 m),
in a line of sight with minimal obstacles from the closest root access point.
User Manual230Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
To sync the extender access point and the root access point after you already added
the extender access point to an Insight network location:
1. Place the extender access point in the same room as the root access point.
Use this extender access point location only during the sync process.
2. Connect the extender access point to a power source.
If you do not use a PoE connection to a PoE switch, connect a power adapter to the
DC power connector.
The Power/Cloud LED on the extender access point lights solid amber.
3. Wait for the extender access point to go through the initial connection and
configuration process and for the Power/Cloud LED to stop blinking amber, green,
and blue and to light solid blue.
Note: The initial connection and configuration process might take up to 10 minutes.
The extender access point might restart during the configuration process.
The Power/Cloud LED lights as follows during the initial connection and configuration
process:
•Blinking green: The extender access point is attempting to detect a root access
point.
•Solid green: The extender access point is making its first connection with the
root access point that provides the strongest WiFi signal.
•Blinking amber slowly: The extender access point is contacting the network
router or DHCP server to receive an IP address.
If the Power/Cloud LED does not stop blinking amber, see Power/Cloud LED is
blinking amber slowly, continuously on page 227.
•Blinking amber, green, and blue: The extender access point is being configured
as a managed device in the Insight Instant Mesh WiFi network.
If the Power/Cloud LED does not stop blinking amber, green, and blue, see
Power/Cloud LED does not stop blinking amber, green, and blue on page 229.
When the configuration is complete, the Power/Cloud LED lights as follows:
•Solid blue: The configuration is complete and the extender access point is ready
for operation. The extender access point functions in the Insight Instant Mesh
WiFi network and is connected to the Insight cloud.
4. Disconnect the extender access point and move it to the location where you intend
to use it.
5. At the new location, repeat Step 2 and Step 3.
User Manual231Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Wait for the extender access point to resync with the root access point.
When the extender access point’s Power/Cloud LED lights solid blue, the extender
access point and root access point synced successfully.
If the extender access point and root access point did not sync, move the extender
access point closer to the root access point and try again. The extender access point
must be within the root access point’s WiFi coverage area to establish a good or fair
WiFi connection.
Troubleshoot WiFi connectivity for a WiFi
client device
If a WiFi client device cannot connect to the access point or the WiFi connectivity is not
normal, try to isolate the problem:
•Make sure that the WiFi settings in the WiFi client device and access point match
exactly.
The WiFi network name (SSID) and WiFi security settings of the access point and
WiFi device must match exactly. Make sure that the WiFi client device uses the correct
passphrase for the WiFi network.
For information about accessing the access point for initial configuration over a WiFi
connection, see Connect to the access point for initial configuration on page 22.
•Does the WiFi client device support the authentication and encryption that you
configured for the WiFi network?
For more information, see Change the authentication and encryption for a WiFi
network on page 65.
Note: If the access point’s WiFi authentication and encryption is set to WPA3 Personal
and the WiFi client device does support WPA3, make sure that the WiFi adapter
device driver is updated to the latest version on the WiFi client device.
•Does the WiFi client device find the WiFi network?
If not, check the WLAN LEDs. If a WLAN LED is off, the associated WiFi radio is
probably off, too. For more information about the WiFi radios, see Turn a radio on
or off on page 78.
•If you disabled the access point’s SSID broadcast for the WiFi network, the WiFi
network is hidden and does not display in the WiFi device’s network scanning list.
(By default, SSID broadcast is enabled.) For more information about the SSID
broadcast, see Hide or broadcast the SSID for a WiFi network on page 63.
User Manual232Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Tip: If you want to change the settings of a WiFi network on the access point, use a
wired LAN connection to avoid being disconnected when the new WiFi settings take
effect.
If the WiFi client device finds the WiFi network but the signal strength is weak, check
these conditions:
•Is the WiFi client device too far from the access point, or too close?
Place the WiFi client device near the access point, but at least 6 feet (1.8 meters)
away, and see whether the signal strength improves.
•Are objects between the WiFi client device and the access point blocking the WiFi
signal?
Troubleshoot Internet browsing
If a WiFi device is connected to the access point but unable to load any web pages from
the Internet, it might be for one of the following reasons:
•The WiFi device might not recognize any DNS server addresses.
If you manually entered a DNS address when you set up the access point (that is,
the access point uses static IP address settings), restart the WiFi device and verify
the DNS address.
•The WiFi device might not use the correct TCP/IP settings.
If the WiFi device obtains its information by DHCP, reboot the WiFi device and verify
the address of the switch or Internet modem to which the access point is connected.
For information about TCP/IP problems, see Troubleshoot your network using the
ping utility on page 235.
You cannot log in to the access point over a
LAN connection
If you are unable to log in to the access point from a computer on your LAN and use
the access point’s local browser UI, check the following:
•Make sure that the IP address of your computer is in the same subnet as the access
point.
If you disabled the access point’s DHCP client and configured a fixed (static) IP
address when you connected the access point to your network (see Disable the
DHCP client and specify a fixed IP address on page 124), change the IP address and
User Manual233Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
subnet mask on your computer to so that the IP addresses of your computer and
the access point are in the same IP subnet.
•If your access point’s IP address was changed (for example, the DHCP server in your
network issued an IP address to the access point) and you do not know the current
IP address, use an IP scanner application to detect the IP address.
Note: You can also use the NETGEAR Insight app to discover the IP address that is
assigned to the access point. For more information, see Connect over WiFi using
the NETGEAR Insight app on page 22.
•Make sure that Java, JavaScript, or ActiveX is enabled in your browser. If you are
using Internet Explorer, click the Refresh button to be sure that the Java applet is
loaded.
•Try quitting the browser and launching it again.
•Make sure that you are using the correct login information. The user name is admin
and the password is the one that you specified. The user name and password are
case-sensitive.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, enter the
Insight network password for that location. For more information, see Connect over
WiFi using the NETGEAR Insight app on page 22.
Changes are not saved
If you are logged in to the access point’s local browser UI and the access point does
not save the changes that you make on a page, do the following:
•When entering configuration settings, always click the Apply button before moving
to another page or tab or your changes are lost.
•Click the Refresh or Reload button in the web browser. It is possible that the changes
occurred but that the old settings remain in the web browser’s cache.
You enter the wrong password and can no
longer log in to the access point
If you enter the wrong admin password three or more times, access to the access point’s
local browser UI is blocked for a period. For example, if you enter the wrong password
three times, access to the access point might be blocked for five minutes.
User Manual234Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
The blockage period depends on the number of failed login attempts. During the
blockage period, any attempts to log in to the access point are ignored, even if you
enter the correct password. You must wait until the blockage is lifted, and then you get
a single opportunity to enter the correct password. If you enter the wrong password
again, the blockage period is extended as described in the following table.
Table 2. Login blockage periods
Blockage period in
minutes
Number of failed
attempts
53
104
205
406
And so onAnd so on
In addition, the following rules apply to the number of failed login attempts:
•If the number of failed login attempts is smaller than the number of allowed retry
attempts, the counter for failed login attempts is reset after 30 minutes. For example,
if you enter the wrong password twice but enter the correct password at the third
login attempt, the two failed login attempts are erased from memory after 30 minutes.
•If the number of failed login attempts is larger than the number of allowed retry
attempts, the counter for failed login attempts is reset after 24 hours. For example,
if you enter the wrong password five times but enter the correct password at the
sixth login attempt, the five failed login attempts are erased from memory after 24
hours.
•The last access attempt determines whether the counter for failed login attempts is
increased.
•If you restart the access point, the counter for failed login attempts is reset.
Troubleshoot your network using the ping
utility
Most network devices and routers contain a ping utility that sends an echo request
packet to the designated device. The device then responds with an echo reply. You can
easily troubleshoot a network using the ping utility in your computer or workstation.
User Manual235Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Test the LAN path to your access point
You can ping the access point from your computer to verify that the LAN path to your
access point is set up correctly.
To ping the access point from a Windows-based computer:
1. From the Windows taskbar, click the Start button and find and select Run.
2. In the field provided, enter ping followed by the IP address of the access point, as
in this example:
ping 192.168.0.100
3. Click the OK button.
A message such as the following one displays:
Pinging <IP address> with 32 bytes of data
If the path is working, you see this message:
Reply from < IP address >: bytes=32 time=NN ms TTL=xxx
If the path is not working, you see this message:
Request timed out
If the path is not functioning correctly, one of the following problems might be occurring:
•Wrong physical connections
Check that the appropriate LEDs are on for your network devices. If your access
point and computer are connected to a separate Ethernet switch, make sure that
the link LEDs are lit for the switch ports that are connected to your computer and
access point.
•Wrong network configuration
Verify that the IP addresses for your computer and the access point are correct and
that the addresses are in the same subnet.
Test the path from your computer to a remote device
After you verify that the LAN path works correctly, test the path from your computer to
a remote device.
To test the path from your computer to a remote device:
1. From the Windows taskbar, click the Start button and find and select Run.
2. In the field provided, enter ping -n 10 IP address.
IP address is the IP address of a remote device such as a remote DNS server.
User Manual236Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
If the path is functioning correctly, replies as described in Test the LAN path to your
access point on page 236 display. If you do not receive replies, do the following:
•Check to see that your computer lists the IP address of the router to which the access
point is connected as the default router. If the IP configuration of your computer is
assigned by DHCP, this information is not visible in your computer’s Network Control
Panel.
•Check to see that the network address of your computer (the portion of the IP address
specified by the netmask) is different from the network address of the remote device.
User Manual237Diagnostics and
Troubleshooting
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Factory default settings
You can reset the access point to the factory default settings, which are shown in the
following table.
For more information about resetting the access point to its factory settings, see Return
the access point to its factory default settings on page 160.
Table 3. Factory default settings
Default Setting>Feature
Management and login settings
NETGEAR Insight (Cloud/Remote)
Note: To access the local browser UI, you must select Web-browser (Local) as the
management mode.
Management mode
192.168.0.100, if not connected to a network.
Note: If connected to a network, the access point receives an IP address from a DHCP
server or router in the network.
User login URL
admin, nonconfigurableUser name
password, case-sensitive, configurable
Note: The first time that you log in to the local browser UI, you must change the AP
login password. If you previously added the access point to a NETGEAR Insight
network location and managed the access point through the Insight app or Insight
Cloud portal, enter the Insight network password for that location. For more
information, see Connect over WiFi using the NETGEAR Insight app on page 22.
AP login password
WiFi network settings for initial setup and WiFi login
The SSID for initial setup is NETGEARxxxxxx-SETUP, where xxxxxx is the last six
hexadecimal digits of the access point’s MAC address.
Note: The first time that you log in to the local browser UI, you must change the SSID.
If you previously added the access point to a NETGEAR Insight network location and
managed the access point through the Insight app or Insight Cloud portal, this
requirement might not apply.
Initial SSID name
WPA2 Personal (which is WPA2-PSK)
WiFi password (network key): sharedsecret
Note: The first time that you log in to the local browser UI, you must change the WiFi
password. If you previously added the access point to a NETGEAR Insight network
location and managed the access point through the Insight app or Insight Cloud
portal, this requirement might not apply.
Initial WiFi security
Automatically selected (Auto) for all radios.
Note: The available and supported channels depend on the country and region that
you select for the access point.
RF channels
General system settings
AP modeOperating mode
User Manual239Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 3. Factory default settings (Continued)
Default Setting>Feature
Enabled so that the access point receives an IP address from a DHCP server or router
in the network.
DHCP client
EnabledNTP client
DisabledSpanning Tree Protocol
DisabledNetwork integrity check
DisabledIGMP snooping
Untagged VLAN with VLAN ID 1802.1Q VLAN
VLAN ID 1Management VLAN
DisabledSyslog
EnabledEthernet LLDP
EnabledUPnP
All enabledLEDs
WLAN settings for an individual WiFi network (SSID or VAP)
EnabledBroadcast SSID
1VLAN ID (for WiFi clients)
WPA2 Personal (which is WPA2-PSK)
The nonconfigurable data encryption for WPA2 Personal is AES
Network authentication
Disabled802.11w (PMF)
Always onBroadcast schedule
All enabledRadio bands
Disabled
Automatic band steering includes automatic 802.11k RRM and automatic 802.11v
WiFi network management.
Band steering
DisabledWiFi client isolation
DisabledURL tracking
EnabledDHCP offer broadcast to
unicast
NoneCaptive portal
None assignedMAC ACL
NoneRate limit
User Manual240Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 3. Factory default settings (Continued)
Default Setting>Feature
Fixed multicast rate: Auto
Rate control: Disabled
Advanced rate selection
Basic radio settings that apply to all WiFi networks (SSIDs or VAPs)
2.4 GHz radio: Enabled
5 GHz L radio: Enabled
5 GHz H radio: Enabled
Radio broadcast
2.4 GHz radio: 11ax mode, which also supports 11b, 11bg, and 11na
5 GHz L radio: 11ax mode, which also support 11a, 11na, and 11ac
5 GHz H radio: 11ax mode, which also support 11a, 11na, and 11ac
WiFi mode
2.4 GHz radio: 20 MHz
5 GHz L radio: 40 MHz
5 GHz H radio: 40 MHz
Channel width
2.4 GHz radio: Long-800 ns
5 GHz L radio: Long-800 ns
5 GHz H radio: Long-800 ns
Guard interval
2.4 GHz radio: Maximum (100%)
5 GHz L radio: Maximum (100%)
5 GHz H radio: Maximum (100%)
Output power
2.4 GHz radio: Auto
5 GHz L radio: Auto
5 GHz H radio: Auto
Channel
2.4 GHz radio: Enabled
5 GHz L radio: Enabled
5 GHz H radio: Enabled
Wi-Fi Multimedia (WMM)
2.4 GHz radio: Enabled
5 GHz L radio: Enabled
5 GHz H radio: Enabled
WMM Powersave
Advanced radio settings that apply to all WiFi networks (SSIDs or VAPs)
2.4 GHz radio: 200 default (also the maximum number)
5 GHz L radio: 200 default (also the maximum number)
5 GHz H radio: 200 default (also the maximum number)
Number of WiFi clients
2.4 GHz radio: Enabled at 2346
5 GHz L radio: Enabled at 2346
5 GHz H radio: Enabled at 2346
RTS threshold
2.4 GHz radio: 100 millisec.
5 GHz L radio: 100 millisec.
5 GHz H radio: 100 millisec.
Beacon interval
2.4 GHz radio: Disabled (applies in 11ng WiFi mode only)
5 GHz L radio: Nonconfigurable
5 GHz H radio: Nonconfigurable
802.11n 256 QAM
User Manual241Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 3. Factory default settings (Continued)
Default Setting>Feature
2.4 GHz radio: Enabled
5 GHz L radio: Enabled
5 GHz H radio: Enabled
MU-MIMO
2.4 GHz radio: 2
5 GHz L radio: 2
5 GHz H radio: 2
DTIM interval
2.4 GHz radio: Enabled with a limit of 50 pps
5 GHz L radio: Enabled with a limit of 50 pps
5 GHz H radio: Enabled with a limit of 50 pps
Broadcast and multicast
rate limiting
2.4 GHz radio: Not applicable
5 GHz L radio: Disabled
5 GHz H radio: Disabled
802.11h
DisabledLoad balancing between
radios
DisabledForce sticky clients to
disassociate
DisabledARP proxy
EnabledBroadcast enhancements
None configuredWireless bridge
General security
DisabledURL filtering
None configuredRADIUS servers
2.4 GHz radio: Disabled
5 GHz L radio: Disabled
5 GHz H radio: Disabled
Neighbor AP detection
Eight default ACLs but none configured with MAC addressesMAC ACLs
Remote management
DisabledSNMP
User Manual242Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Technical specifications
The following table shows the technical specifications.
Table 4. Technical specifications
DescriptionFeature
2.4 GHz radio: 802.11ax, 802.11ng, 801.11bg, and 802.11b
5 GHz L radio: 802.11ax, 802.11ac, 802.11na, and 802.11a
5 GHz H radio: 802.11ax, 802.11ac, 802.11na, and 802.11a
The access point supports 2.4 GHz, 5 GHz low band, and 5 GHz high band concurrent
operation.
WiFi modes
About 6000 Mbps simultaneous throughput (1200 Mbps in the 2.4 GHz band,
2400 Mbps in the 5 GHz low band, and 2400 Mbps in the 5 GHz high band).
Note: Throughput can vary. Network conditions and environmental factors, including
volume of network traffic, building materials and construction, and network overhead,
affect the data throughput rate.
Maximum theoretical
throughput
2.4 GHz radio: 200
5 GHz L radio: 200
5 GHz H radio: 200
The access point can support a maximum of 600 clients with all radios enabled.
Maximum number of
supported clients
WPA3 Personal, WPA3 Enterprise, WPA3/WPA2 Personal, WPA2 Personal, WPA2
Enterprise, WPA2/WPA Personal, Open Enhanced, and Open
802.11 security
IEEE 802.11ax (WiFi 6)
WiFi Multimedia Prioritization (WMM)
Wireless distribution system (WDS)
WiFi standards
12 (4+4+4) streams:
2.4 GHz radio: 4 streams
5 GHz L radio: 4 streams
5 GHz H radio: 4 streams
WiFi streams
2.4 GHz band:
•US and Canada: 2.412–2.462 GHz
•Europe: 2.412–2.472 GHz
5 GHz low band:
•US and Canada: 5.18–5.24 GHz
•Europe: 5.18–5.24 GHz and DFS 5.25–5.35 GHz
5 GHz high band:
•US and Canada: 5.745–5.825 GHz
•Europe: DFS 5.50–5.70 GHz
Operating frequency
ranges
User Manual243Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Table 4. Technical specifications (Continued)
DescriptionFeature
If you do not use a power adapter, the LAN/PoE++ port requires 802.3bt (PoE++)
power but might also function with 802.3at (PoE+) power. We recommend that you
use 802.3bt (PoE++) power. For more information, see The access point functions
as a PoE PD and the Power/Cloud LED remains solid amber on page 228.
Note: PoE might be considered a network environment 0 per IEC TR 62101, and
thus the interconnected ITE circuits might be considered safety extra low voltage
(SELV).
Power over Ethernet
30.1WPoE consumption
12 VDC, 3.5A
The plug is localized to the country of sale.
Note: For model WAX630PA, a power adapter is included. For model WAX630, a
power adapter is not included but can be ordered as an option.
Power adapter
One RJ-45 LAN 1/PoE++ Ethernet port that supports 2.5 Gbps, 1 Gbps, 100 Mbps,
and 10 Mbps. The port also supports Auto Uplink (Auto MDI-X).
One RJ-45 LAN 2 Ethernet port that supports 1 Gbps, 100 Mbps, and 10 Mbps. The
port also supports Auto Uplink (Auto MDI-X).
Note: Without a power adapter, the LAN 1/PoE++ port requires 802.3bt (PoE++)
power but might also function with 802.3at (PoE+) power. We recommend that you
use 802.3bt (PoE++) power. For more information, see The access point functions
as a PoE PD and the Power/Cloud LED remains solid amber on page 228.
Hardware interfaces
10.49 x 10.56 x 2.18 in
(266.6 x 268.3 x 55.5 mm)
Dimensions (W x D x H)
2.10 lb (956 g)Weight
32º to 104ºF (0° to 40°C)Operating temperature
10 to 90% maximum relative humidity, noncondensingOperating humidity
–4° to 158°F (–20º to 70ºC)Storage temperature
5 to 95% maximum relative humidity, noncondensingStorage humidity
FCC Part 15 Report (EMI) SubPart B
CE EMC Report, EN 55032/24/35 Report
EN 301 489-1/-17 EMC Report
EMI certification
FCC Grant, FCC Authorization
FCC Spectrum Report, Part 15, SubPart C (15.247)
FCC Spectrum Report, Part 15, SubPart E (15.407)
FCC Standard Absorption Rate Report (SAR or MPE), FCC Part 2 SpJ
Regulatory compliance US
EN 300 328, Radio Spectrum Report
EN 301 893 Radio Spectrum Report
EN 301 893 DFS Report
EN RF Exposure (SAR or MPE), EN 50385 (for AP router), EN 50566 (Body SAR)
Regulatory compliance
Europe
IEC 60950-1 CB Certificate and Test Report, CB IEC60950 / EN60950
CE LVD Report, EN60950 Report
EC 278/2009, External Power Supply
Safety and energy
compliance
User Manual244Factory Default Settings and
Technical Specifications
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
B
Mount the Access Point to a Wall or
Ceiling
You can mount the access point to a solid surface (a wall or a ceiling), or to a ceiling
with a 15/16 in. (23.8 mm) T-bar, or you can install the access point freestanding on a
flat surface.
We recommend that you use a flat Ethernet cable so that the cable fits in the narrow
space between the access point and the surface on which it is mounted or placed.
Before you mount the access point, first set up and test the access point to verify WiFi
network connectivity.
Note: If you are mounting the access point on a hard ceiling, use the wall-mounting
instructions.
This appendix includes the following sections:
• Mounting parts
• Mount the access point on a wall
• Mount the access point to a T-bar
• Unmount the access point
245
Mounting parts
The package includes the following mounting parts:
Figure 10. Mounting plate
Figure 11. Metal bracket with T-bar, lock screw, and 4 short screws
Figure 12. 3 tall screws and anchors for wall mounting
User Manual246Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Mount the access point on a wall
To mount the access point on a wall:
1. Place the mounting plate on the wall.
2. Mark the wall where the mounting holes are.
3. Use the wall anchors and screws to attach the mounting plate to the wall.
4. Connect an Ethernet cable (if you use a PoE++ switch) or both a power adapter and
an Ethernet cable to the access point before you attach the access point to the
mounting plate.
The access point sits flat on the wall when it is mounted.
5. Attach the access point to the mounting plate.
User Manual247Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
6. Twist the access point clockwise to lock it onto the mounting plate.
Mount the access point to a T-bar
To mount the access point to a T-bar:
1. Slide the T-bar partially into the metal bracket.
2. Attach the metal bracket to the ceiling bar.
3. Push the T-bar over the ceiling bar.
4. Use the lock screw to lock the metal bracket into place.
User Manual248Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
5. Use the four short screws to attach the mounting plate to the T-bar.
6. Connect an Ethernet cable (if you use a PoE++ switch) or both a power adapter and
an Ethernet cable to the access point before you attach the access point to the
mounting plate.
The access point sits flat on the ceiling surface when it is mounted.
7. Hold the access point upside down and attach it to the mounting plate.
User Manual249Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
8. Turn the access point clockwise until it locks in the mounting plate.
User Manual250Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
Unmount the access point
IMPORTANT: Make sure you hold the access point so that it does not drop when you
release it from the mounting plate.
To unmount the access point:
1. Find the locking latch by placing your thumb on the center of the LEDs and your
finger on the other side of the access point, directly opposite the thumb.
2. Press and hold the latch down to release the lock and keep the lock open.
3. Turn the access point counterclockwise until the access point releases from the
mounting plate.
User Manual251Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630
4. Remove the access point from the mounting plate.
The mounting plate remains attached to the ceiling or the wall.
User Manual252Mount the Access Point to a Wall
or Ceiling
Insight Managed WiFi 6 AX6000 Tri-band Multi-Gig Access Point Model WAX630