Table of Contents
- Contents
- 1. Introduction
- 2. Hardware Overview Model WAX202
- 3. Hardware Overview Model WAX206
- 4. Installation and Initial Login
- What WiFi setup do you want?
- About AP mode and router mode
- Setup with an Ethernet wall outlet
- Connect the AP to a routing device and log in for the first time
- Connect the AP to a modem and log in for the first time
- How the operation mode affects how you can reach the local browser UI
- Find the IP address of the AP when you cannot use routerlogin.net
- Log in to the AP after you complete the initial log-in process
- Change the language
- Connect a wired or WiFi device to the AP’s network after installation
- Routing features enabled in router mode
- Dismiss a browser security warning
- 5. Manually Set Up Internet Settings [Router Mode]
- 6. Basic WiFi and Radio Features
- Set up or change an open or secure WiFi network
- Set up WPA and WPA2 Enterprise WiFi security with a RADIUS server
- Enable or disable a WiFi network
- Broadcast or hide the SSID for a WiFi network
- Manage client isolation for clients of the Wireless 2 or Wireless 3 network
- Manage access to LAN ports and the local browser UI
- Manage SSID isolation for all WiFi networks
- Enable or disable a WiFi radio
- 7. Firewall Security and Access Rules
- 8. Network Settings
- 9. Maintain and Monitor
- Update the firmware
- Back up or restore the settings
- Change the local device password
- Change the password recovery questions for the local device password
- Recover local browser UI access after login failures
- Factory default settings
- Time and Network Time Protocol server
- Logs
- Status and statistics
- Display information about the Internet port, AP, and WiFi settings [router mode]
- Display information about the LAN port, AP, and WiFi settings [AP mode]
- Check the Internet connection status
- Display the Internet port statistics
- Display the devices currently on the AP network and change device information
- Change the operation mode to AP mode or router mode
- Disable LED blinking or turn off LEDs
- 10. Advanced WiFi and Radio Features
- Change the region of operation
- Manage 802.11ax and enable or disable OFDMA for a radio
- Enable or disable smart connect for the AP
- Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio
- Change the channel for a radio
- Change the WiFi throughput mode for a radio
- Change the CTS/RTS threshold and preamble mode for a radio
- Change the transmission output power for a radio
- Add a WiFi schedule for a radio
- Enable or disable MU-MIMO
- Enable or disable explicit beamforming
- Enable or disable PMF
- 11. Diagnostics and Troubleshooting
- Reboot the AP from the local browser UI
- Quick tips for troubleshooting
- Standard LED behavior when the AP is powered on
- Troubleshoot with the LEDs
- You cannot log in to the AP
- You cannot access the Internet [router mode]
- Troubleshoot your Internet connection [router mode]
- Troubleshoot the WiFi connectivity
- Changes are not saved
- Troubleshoot your network using the ping utility of your computer or mobile device
- A. Factory Default Settings and Technical Specifications
NETGEAR WiFi 6 AX3200 Dual Band Access Point (WAX206) User Manual
Displayed below is the user manual for WiFi 6 AX3200 Dual Band Access Point (WAX206) by NETGEAR which is a product in the Wireless Access Points category. This manual has pages.
Related Manuals
User Manual
WiFi 6 AX1800/AX3200 Dual Band
Wireless Access Point
Models
WAX202
WAX206
NETGEAR, Inc.
350 E. Plumeria DriveJuly 2021
San Jose, CA 95134, USA202-12234-01
Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
CommentsPublish DatePublication Part
Number
We added model WAX206.July 2021202-12234-01
First publication.July 2021202-12211-01
2
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Contents
Chapter 1 Introduction
Additional documentation...................................................................9
Unique features for each model.........................................................9
Position the AP......................................................................................9
Safety instructions and warnings for an indoor access point........11
Chapter 2 Hardware Overview Model WAX202
Front panel with LEDs........................................................................14
Back panel...........................................................................................16
AP label................................................................................................17
Chapter 3 Hardware Overview Model WAX206
Front panel with LEDs........................................................................19
Back panel...........................................................................................21
AP label................................................................................................22
Chapter 4 Installation and Initial Login
What WiFi setup do you want?.........................................................24
About AP mode and router mode...................................................24
Setup with an Ethernet wall outlet....................................................25
Connect the AP to a routing device and log in for the first time...26
Connect the AP to a modem and log in for the first time..............30
How the operation mode affects how you can reach the local
browser UI...........................................................................................33
Find the IP address of the AP when you cannot use
routerlogin.net....................................................................................34
Log in to the AP after you complete the initial log-in process......36
Change the language........................................................................37
Connect a wired or WiFi device to the AP’s network after
installation...........................................................................................37
Join a WiFi network on the AP.....................................................38
Connect to the AP through an Ethernet cable...........................39
Routing features enabled in router mode.......................................39
Dismiss a browser security warning.................................................39
3
Chapter 5 Manually Set Up Internet Settings [Router Mode]
Use the Setup Wizard [router mode]...............................................42
Manually set up the AP Internet connection [router mode]..........43
Specify a dynamic or fixed WAN IP address Internet connection
without a login [router mode]......................................................43
Specify a PPPoE Internet connection that uses a login [router
mode]..............................................................................................45
Chapter 6 Basic WiFi and Radio Features
Set up or change an open or secure WiFi network........................49
Set up WPA and WPA2 Enterprise WiFi security with a RADIUS
server....................................................................................................53
Enable or disable a WiFi network.....................................................55
Broadcast or hide the SSID for a WiFi network...............................56
Manage client isolation for clients of the Wireless 2 or Wireless 3
network................................................................................................57
Manage access to LAN ports and the local browser UI.................58
Manage SSID isolation for all WiFi networks...................................60
Enable or disable a WiFi radio..........................................................61
Chapter 7 Firewall Security and Access Rules
Firewall WAN settings [router mode]..............................................64
Enable or disable responses to a ping from the Internet [router
mode]..............................................................................................64
Enable or disable IGMP proxying [router mode].......................65
Set up a default DMZ server [router mode]................................66
Manage NAT filtering [router mode]...........................................67
Network access control lists..............................................................68
Enable and manage network access control..............................68
Add, remove, or change a device on the allowed list...............70
Add, remove, or change a device on the blocked list..............71
Chapter 8 Network Settings
LAN IP address settings [router mode]............................................75
Change the LAN IP address and subnet settings [router
mode]..............................................................................................75
Manage the DHCP server address pool [router mode]............76
Disable the DHCP server [router mode].....................................78
Manage the Router Information Protocol settings [router
mode]..............................................................................................78
Change the AP network device name.............................................80
Reserved LAN IP addresses [router mode].....................................81
Reserve a LAN IP address [router mode]....................................81
4
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change a reserved LAN IP address entry [router mode]..........82
Remove a reserved LAN IP address entry [router mode].........83
Change the MTU size [router mode]................................................83
Chapter 9 Maintain and Monitor
Update the firmware..........................................................................87
Let the AP check for new firmware and update the firmware...87
Manually check for new firmware and update the firmware....88
Enable the AP to automatically update the firmware................90
Back up or restore the settings.........................................................91
Back up the AP settings.................................................................91
Restore the AP settings.................................................................92
Change the local device password..................................................93
Change the password recovery questions for the local device
password.............................................................................................94
Recover local browser UI access after login failures......................95
Factory default settings......................................................................96
Use the Reset button to return the AP to factory defaults........97
Use the local browser UI to return the AP to factory defaults...97
Time and Network Time Protocol server.........................................98
Manually set the time zone and adjust the daylight saving
time..................................................................................................99
Change the Network Time Protocol server..............................100
Logs....................................................................................................101
Display or clear the logs.............................................................101
Specify which activities the AP logs...........................................102
Status and statistics..........................................................................103
Display information about the Internet port, AP, and WiFi settings
[router mode]...............................................................................103
Display information about the LAN port, AP, and WiFi settings
[AP mode].....................................................................................105
Check the Internet connection status........................................108
Display the Internet port statistics.............................................110
Display the devices currently on the AP network and change
device information.......................................................................111
Change the operation mode to AP mode or router mode.........113
Disable LED blinking or turn off LEDs............................................115
Chapter 10 Advanced WiFi and Radio Features
Change the region of operation.....................................................118
Manage 802.11ax and enable or disable OFDMA for a radio....119
Enable or disable smart connect for the AP.................................120
Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio.122
Change the channel for a radio......................................................123
5
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the WiFi throughput mode for a radio............................124
Change the WiFi throughput mode on model WAX202.......124
Change the WiFi throughput mode on model WAX206.......126
Change the CTS/RTS threshold and preamble mode for a radio.128
Change the transmission output power for a radio.....................129
Add a WiFi schedule for a radio.....................................................131
Enable or disable MU-MIMO..........................................................133
Enable or disable explicit beamforming.......................................134
Enable or disable PMF.....................................................................135
Chapter 11 Diagnostics and Troubleshooting
Reboot the AP from the local browser UI......................................138
Quick tips for troubleshooting.......................................................139
Restart your AP network if the AP is in router mode...............139
Restart your AP if it is operating in AP mode...........................139
Check the Ethernet cable connections.....................................139
Check the WiFi settings of your computer or mobile device..140
Check the DHCP network settings of your computer or mobile
device............................................................................................140
Standard LED behavior when the AP is powered on...................141
Troubleshoot with the LEDs............................................................141
Power LED is off...........................................................................141
Power LED does not turn green.................................................142
WAN (Internet) LED remains off [router mode].......................142
WAN (Internet) LED remains off [AP mode].............................143
One or both WLAN LEDs are off................................................143
A LAN LED is off while a device is connected..........................143
You cannot log in to the AP............................................................144
You cannot log in to the AP [router mode]..............................144
You cannot log in to the AP [AP mode]....................................145
You cannot access the Internet [router mode].............................147
Check the Internet WAN IP address [router mode]................147
Check or manually start the PPPoE connection [router mode].149
Troubleshoot your Internet connection [router mode]...............150
Troubleshoot the WiFi connectivity...............................................150
Changes are not saved....................................................................152
Troubleshoot your network using the ping utility of your computer
or mobile device...............................................................................152
Test the LAN path from a Windows-based computer to the
AP...................................................................................................152
Test the path from a Windows-based computer to a remote
device [router mode]...................................................................153
6
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Appendix A Factory Default Settings and Technical Specifications
Factory default settings...................................................................156
Technical specifications model WAX202......................................158
Technical specifications model WAX206......................................160
7
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
1
Introduction
This manual is for the following NETGEAR WiFi 6 Dual Band Wireless Access Point
models:
•WAX202: WiFi 6 AX1800 Dual Band Wireless Access Point
•WAX206: WiFi 6 AX3200 Dual Band Wireless Access Point
Models WAX202 and WAX206, in this manual referred to as the AP, support 802.11ax
high performance WiFi connectivity and dual-band concurrent operation at 2.4 GHz
and 5 GHz. The AP is designed to function standalone in a small office network or home
network.
You can use the AP in its default router mode with its router features enabled, directly
connected to the Internet, for example through a modem. You can also use the AP in
access point (AP) mode, connected to a device that provides routing functions in your
network. In AP mode, the routing features of the AP are not required so they are masked
out in the AP’s local browser interface (UI).
The chapter contains the following sections:
• Additional documentation
• Unique features for each model
• Position the AP
• Safety instructions and warnings for an indoor access point
Note: For more information about the topics that are covered in this manual, visit the
support website at netgear.com/support/.
Note: Firmware updates with new features and bug fixes are made available from time
to time at netgear.com/support/download/. You can check for and download new
firmware manually. If the features or behavior of your product does not match what is
described in this manual, you might need to update the firmware.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name). That is, when we refer to a WiFi network we mean an individual
SSID.
8
Additional documentation
The following documents are available at netgear.com/support/download/:
•Installation guide
•Data sheet
Unique features for each model
The following table shows the main differences between model WAX202 and model
WAX206:
Table 1. Model WAX202 and model WAX206 main differences
Model WAX206Model WAX202Feature
2.5 Gbps1 GbpsWAN (Internet) port speed
43Number of Gigabit LAN ports
3200 Mbps total:
800 Mbps at 2.4 GHz
2400 Mbps at 5 GHz.
1800 Mbps total:
600 Mbps at 2.4 GHz
1200 Mbps at 5 GHz
Approximate combined
throughput
12864Maximum number of supported
WiFi clients
6040Maximum number of concurrent
devices
Position the AP
Consider how you want to position the AP. Place it where you want to add WiFi,
positioned so the WiFi range of the AP provides an optimal coverage area for your WiFi
devices.
The WiFi range or coverage area can vary significantly depending on the physical
placement of your AP. For example, the thickness and number of walls that the WiFi
signal passes through can limit the range.
Additionally, other WiFi access points in and around your office or home might affect
your AP’s signal. WiFi access points can be routers, repeaters, WiFi range extenders,
and any other devices that emit WiFi signals.
User Manual9Introduction
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Tips for positioning your AP:
•Place your AP so that you can connect it with an Ethernet cable to your router, modem,
or Ethernet outlet and within reach of an AC power outlet.
•Place the AP near the center of the area where your computers and other devices
operate, and within a line of sight to your WiFi devices.
•Place the AP in an elevated location, minimizing the number of walls and ceilings
between the AP and your WiFi client devices.
•Place the AP away from electrical devices like these:
-Ceiling fans
- Home security systems
- Microwaves
- Computers
-Base of a cordless phone
- 2.4 GHz and 5.8 GHz cordless phones
•Place the AP away from large metal surfaces, large glass surfaces, insulated walls,
and items such as these:
- Solid metal door
- Aluminum studs
- Fish tanks
- Mirrors
- Brick
- Concrete
If other access points are nearby, consider using different radio frequency channels to
reduce interference (see Change the channel for a radio on page 123).
User Manual10Introduction
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Safety instructions and warnings for an
indoor access point
Use the following safety guidelines to ensure your own personal safety and to help
protect your system from potential damage.
To reduce the risk of bodily injury, electrical shock, fire, and damage to the equipment,
observe the following precautions:
•This product is designed for indoor use only in a temperature-controlled and
humidity-controlled environment. Note the following:
-For more information about the environment in which this product must operate,
see the environmental specifications in the appendix or the data sheet.
-If you want to connect the product over an Ethernet cable to a device located
outdoors, the outdoor device must be properly grounded and surge protected,
and you must install an Ethernet surge protector inline between the indoor
product and the outdoor device. Failure to do so can damage the product.
-Before connecting the product to outdoor cables or wired outdoor devices, see
https://kb.netgear.com/000057103 for additional safety and warranty information.
Failure to follow these guidelines can result in damage to your NETGEAR product,
which might not be covered by NETGEAR’s warranty, to the extent permissible by
applicable law.
•Do not service the product except as explained in your product documentation.
Some devices should never be opened.
•If any of the following conditions occur, unplug the product from its power source,
and then replace the part or contact your trained service provider:
- Depending on your product, the power adapter, power adapter cable, power
adapter plug, or PoE Ethernet cable is damaged.
-An object fell into the product.
- The product was exposed to water.
- The product was dropped or damaged.
-The product does not operate correctly when you follow the operating
instructions.
•Keep the product away from radiators and heat sources. Also, do not block cooling
vents.
User Manual11Introduction
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Do not spill food or liquids on your product components, and never operate the
product in a wet environment. If the product gets wet, see the appropriate section
in your troubleshooting guide, or contact your trained service provider.
•Do not push any objects into the openings of your product. Doing so can cause fire
or electric shock by shorting out interior components.
•Use the product only with approved equipment.
•If applicable to your product, allow the product to cool before removing covers or
touching internal components.
•Be sure that devices that are attached over Ethernet cables are electrically rated to
operate with the power available in your location.
•Depending on your product, use only the supplied power adapter or an Ethernet
cable that provides PoE.
If your product uses a power adapter:
-If you were not provided with a power adapter, contact your local NETGEAR
reseller.
-The power adapter must be rated for the product and for the voltage and current
marked on the product electrical ratings label.
•To help prevent electric shock, plug any system and peripheral power cables into
properly grounded power outlets.
•If applicable to your product, the peripheral power cables are equipped with
three-prong plugs to help ensure proper grounding. Do not use adapter plugs or
remove the grounding prong from a cable. If you must use an extension cable, use
a three-wire cable with properly grounded plugs.
•Observe extension cable and power strip ratings. Make sure that the total ampere
rating of all products plugged into the extension cable or power strip does not
exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
•To help protect your system from sudden, transient increases and decreases in
electrical power, use a surge suppressor, line conditioner, or uninterruptible power
supply (UPS).
•Position system cables, power adapter cables, and PoE Ethernet cables carefully.
Route cables so that they cannot be stepped on or tripped over. Be sure that nothing
rests on any cables.
•Do not modify power adapters, power adapter cables, or plugs. Consult a licensed
electrician or your power company for site modifications.
•Always follow your local and national wiring rules.
User Manual12Introduction
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
2
Hardware Overview Model WAX202
The NETGEAR WiFi 6 AX1800 Dual Band Access Point Model WAX202 is an indoor,
standalone AP that supports a combined throughput of 1.8 Gbps (600 Mbps at 2.4 GHz
and 1200 Mbps at 5 GHz).
The Gigabit WAN port lets you connect the AP to a modem, gateway, router, or Ethernet
outlet for Internet connectivity.
Use the three Gigabit LAN ports to connect network devices through an Ethernet cable
directly to the AP.
The chapter contains the following sections:
• Front panel with LEDs
• Back panel
• AP label
Note: In this chapter, we refer to the access point as the AP.
13
Front panel with LEDs
The seven status LEDs are located on the front panel of the AP. From top to bottom,
the front panel contains the Power LED, Internet LED, LAN LEDs 1–3, 2.4 GHz WLAN
LED, and 5 GHz WLAN LED.
Figure 1. Front panel with LEDs, model WAX202
Table 2. LED descriptions, model WAX202
DescriptionLED
Solid green: The AP is ready.
Blinking amber: The AP is starting, the firmware is being updated, or the AP was reset
to factory default settings.
Off: Power is not supplied to the AP.
Power
Solid green: An Internet connection is established.
Off: No Internet connection exists, for example, because no cable is inserted in the
WAN port.
Internet
User Manual14Hardware Overview Model
WAX202
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 2. LED descriptions, model WAX202 (Continued)
DescriptionLED
Solid green: The LAN port functions at 1 Gbps speed and is connected to a device that
is turned on.
Blinking green: The LAN port is sending or receiving traffic at 1 Gbps speed.
Solid amber: The LAN port functions at 10 or 100 Mbps speed and is connected to a
device that is turned on.
Blinking amber: The LAN port is sending or receiving traffic at 10 or 100 Mbps speed.
Off: The LAN port is not connected to a device or the device to which the LAN port is
connected is not turned on.
LAN 1–3
Solid green: The 2.4 GHz radio is operating without clients.
Solid blue: The 2.4 GHz radio is operating with clients but is not transmitting or receiving
data.
Blinking blue: The 2.4 GHz radio is operating with clients and is transmitting or receiving
data.
Off: The 2.4 GHz radio is off. For more information, see One or both WLAN LEDs are
off on page 143.
2.4 GHz WLAN
Solid green: The 5 GHz radio is operating without clients.
Solid blue: The 5 GHz radio is operating with clients but is not transmitting or receiving
data.
Blinking blue: The 5 GHz radio is operating with clients and is transmitting or receiving
data.
Off: The 5 GHz radio is off. For more information, see One or both WLAN LEDs are off
on page 143.
5 GHz WLAN
User Manual15Hardware Overview Model
WAX202
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Back panel
The back panel of the AP provides Gigabit Ethernet ports, a Reset button, and a DC
power connector.
Figure 2. Back panel, model WAX202
Viewed from top to bottom, the back panel of model WAX202 contains the following
components:
•Reset button. Press the Reset button to reset the AP to factory default settings. For
more information, see Use the Reset button to return the AP to factory defaults on
page 97.
•WAN port. One Gigabit (1 Gbps) Ethernet port with a yellow label that functions as
a WAN (Internet) port to connect the AP to a modem, a router, or an Ethernet wall
outlet that provides Internet service:
-Connect to a modem: Connect the WAN port directly to a broadband, cable,
or DSL device that is a modem. The modem must provide an Internet connection
to the AP. For more information about this setup, in which the AP must function
User Manual16Hardware Overview Model
WAX202
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
in its default router mode, see Connect the AP to a modem and log in for the first
time on page 30.
-Connect to a router: Connect the WAN port directly to a broadband, cable, or
DSL device that is a router (for example, the device also provides WiFi), to another
router in your network, or to a switch or hub that is connected to the router. For
more information about this setup, in which the AP must function in AP mode,
see Connect the AP to a routing device and log in for the first time on page 26.
-Connect to an Ethernet wall outlet with Internet service: Connect the WAN
port directly to your Ethernet wall outlet. If you want to set up a WiFi 6 hotspot
on an existing network, see Connect the AP to a routing device and log in for the
first time on page 26. If you want to set up a private WiFi 6 network, see Connect
the AP to a modem and log in for the first time on page 30.
•LAN ports 1 through 3: Three Gigabit Ethernet RJ-45 LAN ports numbered LAN 1
through LAN 3 to connect the AP to Ethernet devices such as a computer, printer,
and switch.
•DC power connector: Connect the power adapter that came in the product package
to the DC power connector.
AP label
The AP label on the bottom panel of the AP shows the default login information, default
WiFi network name (SSID), default WiFi passphrase, serial number and MAC address
of the AP, and other information.
Figure 3. AP label, model WAX202
User Manual17Hardware Overview Model
WAX202
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
3
Hardware Overview Model WAX206
The NETGEAR WiFi 6 AX3200 Dual Band Access Point Model WAX206 is an indoor,
standalone AP that supports a combined throughput of 3.2 Gbps (800 Mbps at 2.4 GHz
and 2400 Mbps at 5 GHz).
The 2.5 Gbps WAN port lets you connect the AP to a modem, gateway, router, or
Ethernet outlet for Internet connectivity.
IMPORTANT: The AP can provide an Internet connection with a speed of up to 2.4 Gbps
to high-speed clients on the 5 GHz radio. To achieve this Internet speed, the AP’s
2.5 Gbps WAN port must be connected to a 2.5 Gbps modem, gateway, router, or
Ethernet outlet that supports 2.5 Gbps Internet service, using a Cat5E or higher-rated
Ethernet cable.
Use the four Gigabit LAN ports to connect network devices through an Ethernet cable
directly to the AP.
The chapter contains the following sections:
• Front panel with LEDs
• Back panel
• AP label
Note: In this chapter, we refer to the access point as the AP.
18
Front panel with LEDs
The seven status LEDs are located on the front panel of the AP. From top to bottom,
the front panel contains the Power LED, Internet LED, LAN LEDs 1–4, 2.4 GHz WLAN
LED, and 5 GHz WLAN LED.
Figure 4. Front panel with LEDs, model WAX206
Table 3. LED descriptions, model WAX206
DescriptionLED
Solid green: The AP is ready.
Blinking amber: The AP is starting, the firmware is being updated, or the AP was reset
to factory default settings.
Off: Power is not supplied to the AP.
Power
Solid green: An Internet connection is established.
Off: No Internet connection exists, for example, because no cable is inserted in the
WAN port.
Internet
User Manual19Hardware Overview Model
WAX206
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 3. LED descriptions, model WAX206 (Continued)
DescriptionLED
Solid green: The LAN port functions at 1 Gbps speed and is connected to a device that
is turned on.
Blinking green: The LAN port is sending or receiving traffic at 1 Gbps speed.
Solid amber: The LAN port functions at 10 or 100 Mbps speed and is connected to a
device that is turned on.
Blinking amber: The LAN port is sending or receiving traffic at 10 or 100 Mbps speed.
Off: The LAN port is not connected to a device or the device to which the LAN port is
connected is not turned on.
LAN 1–4
Solid green: The 2.4 GHz radio is operating without clients.
Solid blue: The 2.4 GHz radio is operating with clients but is not transmitting or receiving
data.
Blinking blue: The 2.4 GHz radio is operating with clients and is transmitting or receiving
data.
Off: The 2.4 GHz radio is off. For more information, see One or both WLAN LEDs are
off on page 143.
2.4 GHz WLAN
Solid green: The 5 GHz radio is operating without clients.
Solid blue: The 5 GHz radio is operating with clients but is not transmitting or receiving
data.
Blinking blue: The 5 GHz radio is operating with clients and is transmitting or receiving
data.
Off: The 5 GHz radio is off. For more information, see One or both WLAN LEDs are off
on page 143.
5 GHz WLAN
User Manual20Hardware Overview Model
WAX206
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Back panel
The back panel of the AP provides Gigabit Ethernet ports, a Reset button, and a DC
power connector.
Figure 5. Back panel, model WAX206
Viewed from top to bottom, the back panel of model WAX206 contains the following
components:
•Reset button. Press the Reset button to reset the AP to factory default settings. For
more information, see Use the Reset button to return the AP to factory defaults on
page 97.
•WAN port. One 2.5 Gbps Ethernet port with a yellow label that functions as a WAN
(Internet) port to connect the AP to a modem, a router, or an Ethernet wall outlet
that provides Internet service:
-Connect to a modem: Connect the WAN port directly to a broadband, cable,
or DSL device that is a modem. The modem must provide an Internet connection
to the AP. For more information about this setup, in which the AP must function
User Manual21Hardware Overview Model
WAX206
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
in its default router mode, see Connect the AP to a modem and log in for the first
time on page 30.
-Connect to a router: Connect the WAN port directly to a broadband, cable, or
DSL device that is a router (for example, the device also provides WiFi), to another
router in your network, or to a switch or hub that is connected to the router. For
more information about this setup, in which the AP must function in AP mode,
see Connect the AP to a routing device and log in for the first time on page 26.
-Connect to an Ethernet wall outlet with Internet service: Connect the WAN
port directly to your Ethernet wall outlet. If you want to set up a WiFi 6 hotspot
on an existing network, see Connect the AP to a routing device and log in for the
first time on page 26. If you want to set up a private WiFi 6 network, see Connect
the AP to a modem and log in for the first time on page 30.
•LAN ports 1 through 4: Four Gigabit (1 Gbps) Ethernet RJ-45 LAN ports numbered
LAN 1 through LAN 4 to connect the AP to Ethernet devices such as a computer,
printer, and switch.
•DC power connector: Connect the power adapter that came in the product package
to the DC power connector.
AP label
The AP label on the bottom panel of the AP shows the default login information, default
WiFi network name (SSID), default WiFi passphrase, serial number and MAC address
of the AP, and other information.
Figure 6. AP label, model, model WAX206
User Manual22Hardware Overview Model
WAX206
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
4
Installation and Initial Login
This chapter describes how you can install and access the AP in your network and log
in to the local browser user interface (UI).
Depending on how you want to set up the AP in your environment, you can change the
operation mode to AP mode or keep the AP in its default router mode. The AP setup
options and their associated operation modes are also described in this chapter.
The chapter contains the following sections:
• What WiFi setup do you want?
• About AP mode and router mode
• Setup with an Ethernet wall outlet
• Connect the AP to a routing device and log in for the first time
• Connect the AP to a modem and log in for the first time
• How the operation mode affects how you can reach the local browser UI
• Find the IP address of the AP when you cannot use routerlogin.net
• Log in to the AP after you complete the initial log-in process
• Change the language
• Connect a wired or WiFi device to the AP’s network after installation
• Routing features enabled in router mode
• Dismiss a browser security warning
Note: In this chapter, we refer to the access point as the AP.
23
What WiFi setup do you want?
Use the following table to determine the type of WiFi setup that you want and the section
that you must follow for your setup.
Table 4. What WiFi setup do you want?
Follow sectionOperation modeWhat you wantWhat you have
Connect the AP to a routing
device and log in for the
first time on page 26
AP modeAdd WiFi 6 to your home
or office
Broadband, cable, or DSL
device with WiFi (router)
Connect the AP to a
modem and log in for the
first time on page 30
Router modeAdd WiFi 6 and a wired
network to your home or
office.
Broadband, cable, or DSL
device without WiFi
(modem only)
Connect the AP to a routing
device and log in for the
first time on page 26
AP modeSet up a WiFi 6 hotspot on
an existing network.
Ethernet wall outlet with
Internet service
Connect the AP to a
modem and log in for the
first time on page 30
Router modeSet up a private WiFi 6
network.
Note: By default, the operation mode is router mode. If you want to use AP mode, you
can change the operation mode when you log in for the first time, as described in
Connect the AP to a modem and log in for the first time on page 30.
For more information about AP mode and router mode, see About AP mode and router
mode on page 24.
About AP mode and router mode
The AP is designed primarily to function as an access point, but can operate as a
lightweight router behind another router to create an independent network segment.
Your network and the WiFi setup that you want determine the operation mode that you
must use for the AP. By default, the operation mode is router mode for easier initial
login.
Depending on your setup (see What WiFi setup do you want? on page 24), you can
either change the operation mode to AP mode during the initial login procedure or
keep the operation mode as router mode.
User Manual24Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
These are the differences between the operation modes:
•AP mode: The AP functions as a WiFi 6 access point and can support LAN clients
through its LAN ports. The AP receives its IP address settings from a routing device
in your network. The AP passes on the IP address settings from the routing device
to its clients so that Internet access is provided.
If you want to use AP mode, during the initial log-in process, change the operation
mode from router mode to AP mode, as described in Connect the AP to a routing
device and log in for the first time on page 26. If you already completed the initial
log-in process, see Change the operation mode to AP mode or router mode on
page 113.
Note: In AP mode, the AP does not require routing features, so they are masked
out in the local browser UI. For example, routing features such as NAT filtering and
the DHCP server are disabled so that they do not interfere with the routing device
in your network. For more information about the features that are enabled in router
mode but not required in AP mode, see Routing features enabled in router mode
on page 39.
•Router mode: The AP functions as both a lightweight router and WiFi 6 access point,
and can support LAN clients through its LAN ports. Because the AP is connected to
your modem, the AP receives its IP address settings from your Internet service
provider (ISP). The AP delivers IP address settings to its clients so that Internet access
is provided.
If you want to use router mode, follow the initial log-in process as described in
Connect the AP to a modem and log in for the first time on page 30.
Setup with an Ethernet wall outlet
If you have an Ethernet wall outlet that provides an Internet connection, you can connect
the WAN port to the wall outlet and follow one of these procedures:
•Set up a WiFi 6 hotspot on an existing network: Follow the procedure that is
described in Connect the AP to a routing device and log in for the first time on page
26 because the AP must operate in AP mode.
•Set up a private WiFi 6 network: Follow the procedure that is described in Connect
the AP to a modem and log in for the first time on page 30 because the AP must
operate in router mode.
User Manual25Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Connect the AP to a routing device and log
in for the first time
Use this procedure for the setups that are described in the following table:
Table 5. WiFi setups behind a routing device with the AP functioning in AP mode
What you wantWhat you have
Add WiFi 6 to your home or officeBroadband, cable, or DSL device with WiFi (router)
Add WiFi 6 to your home or officeGateway or regular router in your network
Set up a WiFi 6 hotspot on an existing network.Ethernet wall outlet with Internet service
You can also connect the AP to a switch or hub that is connected to one of the devices
described in the previous table.
It is not common, but if your network includes an independent DHCP server, connect
the AP to a switch or hub that is connected to the DHCP server.
Figure 7. Connect the AP to a broadband, cable, or DSL router
Figure 8. Connect the AP to an Ethernet wall outlet with Internet service
User Manual26Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
IMPORTANT: Model WAX206 can provide an Internet connection with a speed of up
to 2.4 Gbps to high-speed clients on the 5 GHz radio. To achieve this Internet speed,
the AP’s 2.5 Gbps WAN port must be connected to a 2.5 Gbps gateway, router, or
Ethernet outlet that supports 2.5 Gbps Internet service, using a Cat5E or higher-rated
Ethernet cable.
In the following procedure, we refer to the broadband, cable, or DSL router, the gateway
or regular router, or the Ethernet wall outlet as the routing device.
To connect the AP to a routing device and log in to the local browser UI for the first
time:
1. Connect an Ethernet cable to the yellow Internet port on the AP.
2. Connect the other end of the cable to a LAN port on your routing device.
3. Power on the AP.
The Power LED blinks amber.
4. Wait about two minutes for the startup process to complete.
The startup process is complete when the following happens:
•The Power LED turns solid green.
•The 2.4 GHz WLAN and 5 GHz WLAN LEDs light solid green.
5. Log in to the AP by using one of the following methods:
•Connect over WiFi: On a WiFi-enabled computer or mobile device, find and
connect to the AP’s WiFi network (SSID).
The default SSID and WiFi password (network key) are printed on the AP label.
•Connect over Ethernet directly to the AP: Using an Ethernet cable, connect
the LAN port on your computer directly to one of the LANs port on the AP.
6. Launch a web browser and enter http://www.routerlogin.net in the address field.
The Setup Wizard starts.
Note the following:
•If the Setup Wizard does not start and your browser displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 39.
•If the Setup Wizard still does not start, see You cannot log in to the AP [router
mode] on page 144.
7. Follow the prompts.
User Manual27Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Note the following:
•Internet connection: If the AP does not connect to the Internet, check the
connection between the AP and your routing device.
•New admin password: During the Setup Wizard process, you must set a new
admin password (the local device password) and specify answers to two security
questions (you can choose the questions).
•New WiFi network name (SSID) and WiFi password: During the Setup Wizard
process, you can set a new WiFi network name (SSID) and WiFi password for the
Wireless 1 network. This SSID and WiFi password replace the default SSID and
WiFi password that are printed on the AP label.
•Firmware update: During the Setup Wizard process, you can update the firmware
(if new firmware is available).
At the end of the Setup Wizard process, the AP restarts. Do not close the browser
page. Your WiFi-enabled computer or mobile device might be disconnected.
8. If your WiFi connection was terminated, reconnect to the AP.
If you set a new WiFi network name (SSID) and WiFi password during the Setup
Wizard process, use your new SSID and WiFi password to reconnect.
9. Log in to the local browser UI again by entering your new local device password.
This is the password that you specified during the Setup Wizard process.
The BASIC Home page displays.
You now must change the operation mode to AP mode.
10. Select ADVANCED > Advanced Setup > Router / AP Mode.
The Router / AP Mode page displays.
11. Select the AP Mode radio button.
We recommend that you leave the Get dynamically from existing access
point/router button selected to let the AP get an IP address dynamically from the
routing device in your network.
12. Click the Apply button, and in the pop-up window that displays, click the OK button.
Your settings are saved and the AP is reconfigured in AP mode, and is assigned a
new IP address by your routing device. In AP mode, the routing functions of the AP
are masked out in the local browser UI.
If you are connected over WiFi, your connection might be terminated.
13. If you were connected over WiFi and your connection was terminated, reconnect to
the AP.
User Manual28Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
14. Close and then reopen your browser, and enter http://www.routerlogin.net in the
address field.
The login window displays again.
If the login window does not display and your browser displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 39.
If you experience connectivity problems, see You cannot log in to the AP [AP mode]
on page 145.
15. Enter your local device password.
The BASIC Home page displays.
16. Find the new IP address of the AP in the local browser UI by doing the following:
a. Select ADVANCED > ADVANCED Home.
The ADVANCED Home page of the AP displays. The LAN Port pane shows the
IP address that is now assigned to the AP.
b. Save the LAN IP address of the AP for later use.
You must use this IP address if you plan to connect to the same network as the
AP but not directly to the AP network. For example, use this IP address if you
connect over the LAN to the AP.
If you are directly connected to the AP over a WiFi connection or Ethernet
connection to one of the LAN ports, you still can use http://www.routerlogin.net.
17. If you are using the AP in a country other than the U.S. or Canada (where the region
is set and you cannot change it), set the country or region where you are using the
AP by doing the following:
a. Select Advanced > Advanced Setup > Wireless Settings.
b. From the Region menu, select the country or region where you are using the AP.
Note: Make sure that the country is set to the location where the device is
operating. You are responsible for complying with the local, regional, and national
regulations for channels, power levels, and frequency ranges.
c. Click the Apply button.
Your settings are saved and the AP is configured for the new country or region.
Do not close the browser page. If you are connected over WiFi, your connection
might be terminated.
d. If you want to continue to configure the AP, reconnect to the AP (if you were
connected over WiFi and your connection was terminated) and log back in to
the local browser UI by entering your local device password.
The BASIC Home page displays.
User Manual29Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The Home page displays various panes that let you see the status of your AP at
a glance. You can now configure and monitor the AP.
Connect the AP to a modem and log in for
the first time
Use this procedure for the setups that are described in the following table:
Table 6. WiFi setups behind a modem with the AP functioning in router mode
What you wantWhat you have
Add WiFi 6 and a wired network to your home or office.Broadband, cable, or DSL device without WiFi (modem
only)
Set up a private WiFi 6 network.Ethernet wall outlet with Internet service
Figure 9. Connect the AP to your modem
Figure 10. Connect the AP to an Ethernet wall outlet with Internet service
User Manual30Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
When you set up the AP and connect it to your modem, the following applies, depending
on the type of WAN connection your modem uses:
•Dynamic DHCP: If the type of WAN connection is dynamic DHCP, the AP
automatically receives an IP address from your Internet service provider (ISP) and
you do not need to provide any IP address information. This type of WAN connection
is the most common.
•PPPoE or static IP address: If the type of WAN connection is PPPoE or your Internet
connection requires a static IP address, you must follow the prompts during the
setup process and provide the required information for the Internet connection.
Tip: If you are not sure which type of WAN connection your Internet service uses, contact
your ISP before you start the following procedure.
IMPORTANT: Model WAX206 can provide an Internet connection with a speed of up
to 2.4 Gbps to high-speed clients on the 5 GHz radio. To achieve this Internet speed,
the AP’s 2.5 Gbps WAN port must be connected to a 2.5 Gbps modem or Ethernet
outlet that supports 2.5 Gbps Internet service, using a Cat5E or higher-rated Ethernet
cable.
To connect the AP to a modem and log in to the local browser UI for the first time:
1. Unplug your modem’s power, leaving the modem connected to the wall jack for
your Internet service.
2. If the modem uses a battery backup, remove the battery.
3. Connect the Ethernet cable to the yellow WAN port on the AP.
4. Connect the other end of the cable to a LAN port on your modem.
5. If the modem uses a battery backup, put the battery back in.
6. Plug in and turn on the modem.
7. Power on the AP.
The Power LED blinks amber.
8. Wait about two minutes for the startup process to complete.
The startup process is complete when the following happens:
•The Power LED turns solid green.
•The 2.4 GHz WLAN and 5 GHz WLAN LEDs light solid green.
9. Log in to the AP by using one of the following methods:
•Connect over WiFi: On a WiFi-enabled computer or mobile device, find and
connect to the AP’s WiFi network (SSID).
User Manual31Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The default SSID and WiFi password (network key) are printed on the AP label.
•Connect over Ethernet directly to the AP: Using an Ethernet cable, connect
the LAN port on your computer directly to any of the LANs port on the AP.
10. Launch a web browser and enter http://www.routerlogin.net in the address field.
The Setup Wizard starts.
Note the following:
•If the Setup Wizard does not start and your browser displays a security warning,
dismiss the warning. For more information, see Dismiss a browser security warning
on page 39.
•If the Setup Wizard still does not start, see You cannot log in to the AP [router
mode] on page 144.
11. Follow the prompts.
Note the following:
•WAN and Internet connection: If the WAN connection is PPPoE or your Internet
connection requires a static IP address provide the required information when
you are prompted to do so during the Setup Wizard process.
If the AP does not connect to the Internet, see one of the following sections:
- Check the Internet WAN IP address [router mode] on page 147
- Check or manually start the PPPoE connection [router mode] on page 149
- Troubleshoot your Internet connection [router mode] on page 150
•New admin password: During the Setup Wizard process, you must specify a
new admin password (the local device password) and specify answers to two
security questions (you can choose the questions).
•New WiFi network name (SSID) and WiFi password: During the Setup Wizard
process, you can set a new WiFi network name (SSID) and WiFi password for the
Wireless 1 network. This SSID and WiFi password replace the default SSID and
WiFi password that are printed on the AP label.
•Firmware update: During the Setup Wizard process, you can update the firmware
(if new firmware is available).
At the end of the Setup Wizard process, the AP restarts. Do not close the browser
page. Your WiFi-enabled computer or mobile device might be disconnected.
12. If your WiFi connection was terminated, reconnect to the AP.
If you set a new WiFi network name (SSID) and WiFi password during the Setup
Wizard process, use your new SSID and WiFi password to reconnect.
User Manual32Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
13. Log in again to the local browser UI by entering your new local device password.
This is the password that you specified during the Setup Wizard process.
The BASIC Home page displays.
The Home page displays various panes that let you see the status of your AP at a
glance. You can now configure and monitor the AP.
14. If you are using the AP in a country other than the U.S. or Canada (where the region
is set and you cannot change it), set the country or region where you are using the
AP by doing the following:
a. Select Advanced > Advanced Setup > Wireless Settings.
b. From the Region menu, select the country or region where you are using the AP.
Note: Make sure that the country is set to the location where the device is
operating. You are responsible for complying with the local, regional, and national
regulations for channels, power levels, and frequency ranges.
c. Click the Apply button.
Your settings are saved and the AP is configured for the new country or region.
If you are connected over WiFi, your connection might be terminated.
d. If you want to continue to configure the AP, reconnect to the AP (if you were
connected over WiFi and your connection was terminated) and log back in to
the local browser UI by entering your local device password.
How the operation mode affects how you
can reach the local browser UI
The operation mode affects how you can reach the AP local browser UI:
•Router mode: Enter http://www.routerlogin.net in the address field of your
browser.
In router mode, you always connect directly to the AP.
•AP mode: The method to reach the local browser UI depends on how you connect
to the AP:
-Directly connected: Enter http://www.routerlogin.net in the address field of
your browser.
One exception exists: If you assigned a static IP address to the AP, you must use
that IP address to reach the local browser UI.
User Manual33Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
-Connected over your network: In the address field of your browser, enter the
IP address that your existing router or DHCP server assigned to the AP. For more
information, see Find the IP address of the AP when you cannot use routerlogin.net
on page 34.
Find the IP address of the AP when you
cannot use routerlogin.net
Under the following circumstances, when the AP is operating in AP mode, you cannot
use http://www.routerlogin.net (or http://www.routerlogin.com) to log in to the
AP:
•Your computer or mobile device is not directly connected to the AP network even
it is on the same network as the AP.
•Your computer or mobile device is directly connected to the AP, but the AP is using
a static IP address.
Note: If the AP can reach its DNS server only over the Internet (for example, the IP
address of the DNS server is 8.8.8.8), you cannot use http://www.routerlogin.net.
However, if the DNS server is the IP address of the router to which the AP connects
but the router’s Internet connection is down, you can use
http://www.routerlogin.net because the AP can still reach the router.
•Your network includes another NETGEAR device that is also accessible by using
http://www.routerlogin.net. In such a situation, if you use
http://www.routerlogin.net, you might log in to the AP or you might log in to the
other NETGEAR device, depending on your network situation.
In these situations, use the IP address that was assigned to the AP by your router during
the setup process (see Connect the AP to a routing device and log in for the first time
on page 26) to log in to the local browser UI of the AP.
User Manual34Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If you do not know the IP address that was assigned to the AP, use one of the following
options to find the IP address of the AP:
•Only if the AP is connected to the Internet, do one of the following:
-Option 1. Temporarily connect directly and log in: Temporarily connect a
computer directly either through an Ethernet cable or over WiFi or a mobile
device over WiFi to the AP and do the following:
1. Launch a web browser and enter http://www.routerlogin.net in the address
field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more
information, see Dismiss a browser security warning on page 39.
2. Enter the AP local device password.
The local device password is the one that you specified. The local device
password is case-sensitive.
The BASIC Home page displays.
3. Select ADVANCED.
The ADVANCED Home page displays
4. In the LAN Port pane, click the CONNECTION STATUS button.
The IP Address field displays the IP address that is assigned to the AP.
-Option 2. Temporarily connect directly and ping the AP: Temporarily connect
a computer or mobile device directly through an Ethernet cable or over WiFi to
the AP and send a ping to www.routerlogin.net.
How to send a ping depends on your computer or mobile device.
On your computer or mobile device, the field with the ping results displays the
IP address that is assigned to the AP.
•Regardless of whether the AP is connected to the Internet, do one of the following:
-Option 1. Access your modem or existing router: Access the DHCP server
information of your modem or existing router to see the devices that are
connected to it, including the AP. The IP address that is assigned to the AP is
listed.
-Option 2. Use an IP scanner: Use an IP scanner application (they are available
free of charge on the Internet) in the network of your existing router. The IP
scanner results include the IP address that is assigned to the AP.
If you made a direct connection to the AP, you can now terminate that connection.
Connect your computer or mobile device to the same network as the AP, and use the
discovered IP address to log in to the AP.
User Manual35Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Log in to the AP after you complete the initial
log-in process
After you complete the initial log-in process, the AP is ready for use and you can change
the settings and monitor the traffic.
To log in to the AP’s local browser UI after you complete the initial log-in process:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
The Device Status page displays various panes that let you see the status of your AP at
a glance. You can now configure and monitor the AP.
User Manual36Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the language
By default, the language of the local browser UI is set as Auto. You can change the
language.
To change the language:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. In the upper right corner, select a language from the menu.
The page refreshes with the language that you selected.
Connect a wired or WiFi device to the AP’s
network after installation
After you install the AP in your network (see Connect the AP to a routing device and log
in for the first time on page 26 or Connect the AP to a modem and log in for the first
time on page 30), you can connect devices to the AP’s LAN through Ethernet cables or
to the AP’s WiFi network over a WiFi connection.
User Manual37Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If the device that you are trying to connect is set up to use a static IP address, change
the settings of your device so that it uses Dynamic Host Configuration Protocol (DHCP)
and can receive an IP address through or from the AP.
Note: Connecting to the AP’s network is not the same as connecting to the local browser
UI to view or manage the AP’s settings. For information about logging in to the AP local
browser UI, see Log in to the AP after you complete the initial log-in process on page
36.
Join a WiFi network on the AP
You can manually add a WiFi device such as a WiFi-enabled computer, tablet, or
smartphone to a WiFi network of the AP.
On the WiFi device that you want to connect to the AP, use the software application
that manages your WiFi connections.
Note: By default, the AP’s Wireless 1 network is enabled but the Wireless 2 and Wireless
3 networks are disabled.
To connect a device to a WiFi network on the AP:
1. Make sure that the AP is receiving power (its Power LED is solid green) and is
connected to the Internet (the Internet LED is solid green), and that the 2.4 GHz and
5 GHz WLAN LEDs are solid green).
2. On the WiFi device, open the software application that manages your WiFi
connections.
This application scans for all WiFi networks in your area.
3. Look for one of the AP’s WiFi networks and select it.
For the Wireless 1 network, if you set a new SSID during the initial log-in process,
use that SSID. If you did not set a new SSID, use the default SSID that is printed on
the AP label.
4. Enter the WiFi password for WiFi access.
For the Wireless 1 network, if you set a new WiFi password (network key) during the
initial log-in process, use that WiFi password. If you did not set a new WiFi password,
use the default WiFi password that is printed on the AP label.
5. Click the Connect button.
The device connects to the WiFi network of the AP.
User Manual38Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Connect to the AP through an Ethernet cable
You can connect a computer or other LAN device such as a switch to the AP using an
Ethernet cable and join the AP’s local area network (LAN).
To connect a computer or LAN device to the AP with an Ethernet cable:
1. Make sure that the AP is receiving power and is connected to the Internet (both its
Power LED and Internet LED are solid green).
2. Connect an Ethernet cable to an Ethernet port on the computer or LAN device.
3. Connect the other end of the Ethernet cable to one of the LAN ports on the AP.
You can use any of the LAN ports on the AP.
Note: You can also connect the computer to a switch or hub that is connected to
one of the LAN ports on the AP.
The AP LAN LED for the port to which you attached the device lights solid green.
Your computer or LAN device connects to the local area network (LAN).
Routing features enabled in router mode
The AP can function in router mode (its default operation mode) or in AP mode.
When the AP is in router mode, the following routing features are enabled in the local
browser UI:
•Internet settings, including an IP address issued through dynamic DHCP (the default
setting), an IP address issued through PPPoE, or a manually specified static IP address.
•WAN settings, including routing services such as NAT.
•LAN settings, including a DHCP server.
Note: In AP mode, these features are not required because they can be provided by
the routing device to which the AP connects. Therefore, in AP mode, these features are
masked out in the local browser UI.
Dismiss a browser security warning
When you enter http://www.routerlogin.net or http://www.routerlogin.com in the
address field of your browser, a security warning can display. This is normal. You can
just dismiss the security warning.
User Manual39Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To dismiss a browser security warning:
•Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of the device.
•Apple Safari: Click the Show Details button. Then, click the visit this website link.
If a warning pop-up window displays, click the Visit Website button. If another
pop-up window displays to let you confirm changes to your certificate trust settings,
enter your Mac user name and password and click the Update Setting button.
•Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception button.
In the pop-up window that displays, click the Confirm Security Exception button.
•Microsoft Edge: Select Details > Go on to the webpage.
•Microsoft Internet Explorer: Click the Continue to this website (not
recommended) link.
User Manual40Installation and Initial Login
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5
Manually Set Up Internet Settings
[Router Mode]
This chapter describes how you can manually set up the Internet connection for your
AP in router mode (the default operation mode).
Note: In AP mode, the Internet settings that are described in this chapter are not
required because they can be provided by the routing device to which the AP connects.
Therefore, in AP mode, these Internet settings are masked out in the local browser UI.
Usually, the quickest way to set up the Internet connection is to allow the Setup Wizard
to detect the Internet connection when you go through the initial log-in process. After
initial setup, you can use the Setup Wizard at any time. If you prefer to specify the Internet
setup yourself, you can enter the WAN IP address settings instead of using the Setup
Wizard.
This chapter contains the following sections:
• Use the Setup Wizard [router mode]
• Manually set up the AP Internet connection [router mode]
Note: In this chapter, we refer to the access point as the AP.
41
Use the Setup Wizard [router mode]
In most situations, you do not need use the Setup Wizard in the local browser UI. In
some situations, you might want to use the Setup Wizard to redetect your Internet
settings.
After the initial setup and login procedure (see Installation and Initial Login on page
23), if AP is in router mode, you can use the Setup Wizard to redetect your Internet
settings. Using the Setup Wizard in the local browser UI is much easier than resetting
your AP to factory default settings and going through the initial login procedure.
Note: The Setup Wizard is not required if the AP is operating in AP mode and is
therefore masked out in the local browser UI.
The Setup Wizard detects your Internet setting through the AP’s network connection
to your modem, gateway, or Ethernet outlet with Internet connection. The Setup Wizard
detects the WAN IP address assigned by your Internet service provider (ISP), and
automatically adjusts the settings for your AP to access the Internet.
To use the Setup Wizard:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup Wizard.
The Setup Wizard page displays.
5. Select the Yes radio button.
6. Click the Next button.
The Setup Wizard searches your Internet connection for servers and protocols to
determine your Internet configuration. When the AP connects to the Internet, you
are prompted to change the local device password (also referred to as the admin
password).
User Manual42Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Manually set up the AP Internet connection
[router mode]
If the AP is in router mode, you can view or change the AP’s Internet connection settings.
Note: The information in the following sections is not required if the AP is operating
in AP mode. In AP mode, the Internet settings can be provided by the routing device
to which the AP connects. Therefore, in AP mode, these Internet settings are masked
out in the local browser UI.
Specify a dynamic or fixed WAN IP address Internet
connection without a login [router mode]
Usually, the quickest way to set up a dynamic or fixed Internet connection is to allow
the Setup Wizard to detect the Internet connection when you go through the initial
log-in process as described in Connect the AP to a modem and log in for the first time
on page 30 or, after initial setup, in Use the Setup Wizard [router mode] on page 42.
After you install the AP and it is in router mode, you can manually specify the dynamic
or fixed Internet connection or change it. (These dynamic and fixed IP settings are not
required if the AP is operating in AP mode.)
For this procedure, use the settings that your Internet service provider (ISP) gave you.
If you are not sure, contact your ISP.
To specify or view the settings for a WAN Internet connection that uses a dynamic
or fixed IP address and that does not require a login:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Internet.
User Manual43Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The Internet Setup page displays.
5. Select the No radio button.
This is the default setting.
6. If your Internet connection requires an account name (sometimes referred to as a
host name), enter it in the Account Name field.
The account name is the same as the device name, which, by default, is the model
number of your AP.
7. If your Internet connection requires a domain name, enter it in the Domain Name
(if Required) field.
For the other sections on this page, the default settings usually work, but you can
change them.
8. Select an Internet IP Address radio button:
• Get Dynamically: Your ISP uses DHCP to automatically assign an IP address and
related settings to the AP.
• Use Static IP Address: Enter the static IP address, IP subnet mask, and gateway
IP address that your ISP assigned to the AP. The gateway is the ISP router to which
the AP connects.
9. Select a Domain Name Server (DNS) Address radio button:
•Get Automatically from ISP: Your ISP uses DHCP to assign DNS servers to the
AP.
•Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If IP addresses
for a second and a third DNS server are available, enter them also.
10. Specify which MAC address to use for the Internet connection.
A MAC address is a unique 12-digit hexadecimal number that identifies each network
device. A device’s MAC address always stays the same. It does not change the way
an IP address can.
•Use Default Address: Use the default AP MAC address that displays on the
Dashboard page and is on the AP label.
•Use Computer MAC Address: The AP captures and uses the MAC address of
the computer that you are now using to change the settings. Sometimes an ISP
allows the MAC address of a particular computer only.
• Use This MAC Address: Enter a MAC address that must be used. Sometimes an
ISP allows the MAC address of a particular computer only.
User Manual44Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
11. If your ISP gave you a vendor class identifier (VCI) string, enter it in the Vendor Class
Identifier String (option 60) field.
If your ISP did not give you a VCI string, leave this field blank.
12. If your ISP gave you a client identifier (client ID) string, enter it in the Client Identifier
String (option 61) field.
If your ISP did not give you a client ID string, leave this field blank.
13. Click the Apply button.
Your settings are saved.
14. Click the Test button to test your Internet connection.
If the NETGEAR website does not display within one minute, see one of the following
sections:
•Check the Internet WAN IP address [router mode] on page 147
•Troubleshoot your Internet connection [router mode] on page 150
Specify a PPPoE Internet connection that uses a login [router
mode]
Usually, the quickest way to set up a PPPoE Internet connection is to allow the Setup
Wizard to detect the Internet connection when you go through the initial log-in process
as described in Connect the AP to a modem and log in for the first time on page 30 or,
after initial setup, in Use the Setup Wizard [router mode] on page 42.
After you install the AP and it is in router mode, you can manually specify the PPPoE
Internet connection or change it. (These PPPoE settings are not required if the AP is
operating in AP mode.)
For this procedure, use the settings that your Internet service provider (ISP) gave you.
If you are not sure, contact your ISP.
To specify or view the settings for an ISP Internet connection that uses PPPoE and
that requires a login:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
User Manual45Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Internet.
The Internet Setup page displays.
5. Select the Yes radio button.
The settings on the page change.
6. From the Internet Service Provider menu, select PPPoE as the encapsulation
method.
7. In the Login field, enter the login name that your ISP gave you.
This login name is often an email address.
8. In the Password field, enter the password that you use to log in to your Internet
service.
9. If your ISP requires a service name, type it in the Service Name (if Required) field.
10. From the Connection Mode menu, select Always On,Dial on Demand,orManually
Connect.
11. If you select Dial on Demand from the Connection Mode menu, in the Idle Timeout
field, enter the number of minutes until the Internet login times out
This is how long the AP keeps the Internet connection active when no one on the
network is using the Internet connection. A value of 0 (zero) means never log out.
The default is 5 minutes.
12. Select an Internet IP Address radio button:
• Get Dynamically: Your ISP uses DHCP to automatically assign an IP address and
related settings to the AP.
• Use Static IP Address: Enter the static IP address, IP subnet mask, and gateway
IP address that your ISP assigned to the AP. The gateway is the ISP router to which
the AP connects.
13. Select a Domain Name Server (DNS) Address radio button:
•Get Automatically from ISP: Your ISP uses DHCP to assign DNS servers to the
AP.
•Use These DNS Servers: If you know that your ISP requires specific servers, select
this option. Enter the IP address of your ISP’s primary DNS server. If a secondary
DNS server address is available, enter it also.
14. Specify which MAC address to use for the Internet connection.
User Manual46Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
A MAC address is a unique 12-digit hexadecimal number that identifies each network
device. A device’s MAC address always stays the same. It does not change the way
an IP address can.
•Use Default Address: Use the default AP MAC address that displays on the
Dashboard page and is on the AP label.
•Use Computer MAC Address: The AP captures and uses the MAC address of
the computer that you are now using to change the settings. Sometimes an ISP
allows the MAC address of a particular computer only.
• Use This MAC Address: Enter a MAC address that must be used. Sometimes an
ISP allows the MAC address of a particular computer only.
15. Click the Apply button.
Your settings are saved.
16. Click the Test button to test your Internet connection.
If the NETGEAR website does not display within one minute, see one of the following
sections:
•Check or manually start the PPPoE connection [router mode] on page 149
•Troubleshoot your Internet connection [router mode] on page 150
User Manual47Manually Set Up Internet
Settings [Router Mode]
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6
Basic WiFi and Radio Features
This chapter describes how you can manage the basic WiFi and radio settings of the
AP. For information about the advanced WiFi and radio settings, see Advanced WiFi
and Radio Features on page 117.
Tip: If you want to change the WiFi network settings, use a wired connection to avoid
being disconnected when the new WiFi settings take effect.
The chapter includes the following sections:
• Set up or change an open or secure WiFi network
• Set up WPA and WPA2 Enterprise WiFi security with a RADIUS server
• Enable or disable a WiFi network
• Broadcast or hide the SSID for a WiFi network
• Manage client isolation for clients of the Wireless 2 or Wireless 3 network
• Manage access to LAN ports and the local browser UI
• Manage SSID isolation for all WiFi networks
• Enable or disable a WiFi radio
Note: In this chapter, we refer to the access point as the AP.
48
Set up or change an open or secure WiFi
network
The AP has three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By default, the
Wireless 1 network is enabled and the other two WiFi networks are disabled. The default
security is WPA2-Personal [AES].
Table 7. WiFi networks
Default WiFi passwordDefault SSIDDefault statusWiFi network
Unique, see label.Unique, see label.EnabledWireless 1
Unique, see label (same
password as Wireless 1).
NETGEARXXXXXX-2DisabledWireless 2
Unique, see label (same
password as Wireless 1).
NETGEARXXXXXX-3DisabledWireless 3
In the previous table, XXXXXX represents the last six digits of the MAC address of the
AP. (A MAC address is a unique 12-digit hexadecimal number that identifies each
network device.) The default SSID and WiFi password (network key) for the Wireless 1
network are printed on the AP label. During the initial login, you are prompted to change
the default SSID and WiFi password for the Wireless 1 network.
Note: If you change the WiFi password for the Wireless 1 network, the default WiFi
password for the Wireless 2 network and Wireless 3 network does not change and is
still the password that is printed on the AP label.
For each WiFi network, the AP simultaneously supports the 2.4 GHz band for
802.11b/g/n/ax devices and the 5 GHz band for 802.11a/n/ac/ax devices. For the 2.4 GHz
band, the default WiFi throughput mode is 600 Mbps. For the 5 GHz band, it is
1200 Mbps. You can change (lower) the WiFi throughput mode (see Change the WiFi
throughput mode on model WAX202 on page 124).
You can view or change the WiFi settings and WiFi security for the Wireless 1 network,
and you can enable and set up the Wireless 2 and Wireless 3 networks.
Note: For security, we recommend that you do change the names of the default SSIDs
and the default WiFi passwords.
User Manual49Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To set up or change an open or secure WiFi network:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
For information about SSID isolation, see Manage SSID isolation for all WiFi networks
on page 60.
5. Select the WiFi network (Wireless 1,Wireless 2,orWireless 3).
6. To enable the selected WiFi network, select the Enable radio button.
By default this radio button is selected for the Wireless 1 network but the Disable
radio button is selected for the Wireless 2 and Wireless 3 networks.
7. To change the name of the SSID, in the Name (SSID) field, enter a 32-character
(maximum), case-sensitive name.
The SSID (service set identifier) is the WiFi network name. If you did not change the
SSID, the default SSID displays, in which XXXXXX represents the last six digits of the
MAC address of the AP:
•Wireless 1: If you did not change the default SSID, the SSID is the default SSID
that is printed on the AP label.
•Wireless 2: NETGEARXXXXXX-2
•Wireless 3: NETGEARXXXXXX-3
User Manual50Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
8. To set up or change the AP WiFi security for the selected WiFi network, select the
type of security from the Security Options menu, and configure the settings as
described in the following table.
DescriptionSetting
An open WiFi network does not provide any security. Any WiFi device can join the
network. We recommend that you do not use an open WiFi network but configure
WiFi security. However, an open network might be appropriate for a WiFi hotspot.
None
This option, which is the same as WPA2-PSK, is the default setting and uses AES
encryption. This type of security enables only WiFi devices that support WPA2 or
WPA3 to join the WiFi network.
WPA2 provides a secure connection but some legacy WiFi devices do not detect
WPA2 and support only WPA. If your network includes such older devices, select
WPA-Personal [TKIP] + WPA2-Personal [AES] authentication.
In the Password (Network Key) field, enter a phrase of 8 to 63 characters or 64
hexadecimal digits. To join the WiFi network, a user must enter this password. To
view the password in clear text, click the eye icon.
WPA2 Personal
[AES]
This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that
support either WPA, WPA2, or WPA3 to join the WiFi network. This option uses AES
and TKIP encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and limits
the speed of WiFi devices to 54 Mbps.
In the Password (Network Key) field, enter a phrase of 8 to 63 characters or 64
hexadecimal digits. To join the WiFi network, a user must enter this password. To
view the password in clear text, click the eye icon.
WPA-Personal
[TKIP] +
WPA2-Personal
[AES]
This enterprise-level security uses RADIUS for centralized Authentication,
Authorization, and Accounting (AAA) management. For more information, see Set
up WPA and WPA2 Enterprise WiFi security with a RADIUS server on page 53).
WPA/WPA2
Enterprise
This option, which is the same as WPA3, is the most secure personal authentication
option. WPA3 uses SAE encryption and enables only WiFi devices that support WPA3
to join the WiFi network.
WPA3 provides a secure connection but some legacy WiFi devices do not detect
WPA3 and support only WPA2. If your network also includes WPA2 devices, select
WPA2 Personal [AES] authentication.
In the Password (Network Key) field, enter a phrase of 8 to 63 characters. To join
the WiFi network, a user must enter this password. To view the password in clear text,
click the eye icon.
WPA3- Personal
9. To change the radio band or additional security for the selected WiFi network,
configure the settings that are described in the following table.
User Manual51Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
DescriptionSetting
Select a radio button for a single band (2.4 GHz or 5 GHz) or keep the default
selection, which is the Both radio button, to enable the WiFi network to broadcast
on both radio bands.
Band
By default, the AP broadcasts its SSID so that WiFi clients can detect the WiFi name
(SSID) in their scanned network lists. To turn off the SSID broadcast, clear the Enable
SSID Broadcast check box. Turning off the SSID broadcast provides additional WiFi
security, but users must know the SSID to be able to join the WiFi network.
Enable SSID Broadcast
For the Wireless 1 network, client isolation is disabled and you cannot change it.
For the Wireless 2 and Wireless 3 networks, by default, client isolation is enabled,
and the Enable radio button is selected. To allow communication between WiFi
clients that are associated with the same SSID or different SSIDs on the AP, select the
Disable radio button.
Client isolation
For the Wireless 1 network, access to wired ports and the local browser UI is enabled
and you cannot change it.
For the Wireless 2 and Wireless 3 networks, by default, the Disable radio button is
selected to prevent WiFi clients from reaching devices that are connected to the
wired ports (LAN ports) of the AP and from accessing the local browser UI. To allow
communication between WiFi clients and devices that are connected to the wired
ports and access to the local browser UI, select the Enable radio button.
Allow access to wired
ports and Router GUI
10. Click the Apply button.
Your settings are saved.
If you connected over WiFi to the network and you changed the SSID, you are
disconnected from the network.
11. Make sure that you can reconnect over WiFi to the network with its new settings.
If you cannot connect over WiFi, check the following:
•Are you using the correct network name (SSID) and password?
•If your computer or device is trying to connect to your network with its old settings
(before you changed the settings), update the WiFi network selection in your
WiFi-enabled computer or mobile device to match the current settings for your
network.
•If your computer or device is connected to another WiFi network in your area,
disconnect it from that WiFi network and connect it to the WiFi network that the
AP provides. Some WiFi devices automatically connect to the first open network
without WiFi security that they discover.
User Manual52Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Does your computer or device display as an attached device? (See Display the
devices currently on the AP network and change device information on page 111.)
If it does, it is connected to the network.
Set up WPA and WPA2 Enterprise WiFi
security with a RADIUS server
Enterprise security requires that your AP can connect to a Remote Authentication Dial
In User Service (RADIUS) server. RADIUS is an enterprise-level method for centralized
authentication, authorization, and accounting (AAA) management.
RADIUS security is generally used in a company setting rather than in a small office or
home office.
To enable the AP to provide WPA and WPA2 enterprise WiFi security, the WiFi network
must be able to reach a RADIUS server.
To configure WPA and WPA2 enterprise security:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
User Manual53Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5. Select the WiFi network (Wireless 1,Wireless 2,orWireless 3).
6. From the Security Options menu, select the WPA/WPA2 Enterprise radio button.
The WPA and WPA2 Enterprise settings display.
7. From the WPA Mode menu, select the enterprise mode:
•WPA2 [AES]: WPA2 provides a secure connection for WPA2 and WPA3 devices
but some older WiFi devices do not detect WPA2 and support only WPA. If your
WiFi network includes such older devices, select WPA [TKIP] + WPA2 [AES]
security.
•WPA [TKIP] +WPA2 [AES]: This type of security enables WiFi devices that support
either WPA, WPA2, or WPA3 to join the WiFi network. This is the default mode.
8. In the RADIUS Server IP Address field, enter the IPv4 address of the RADIUS server
to which the WiFi network can connect.
9. In the RADIUS Server Port field, enter the number of the port on the AP that is used
to access the RADIUS server for authentication.
The default port number is 1812.
10. In the RADIUS Server Shared Secret field, enter the RADIUS password that is used
between the AP and the RADIUS server during authentication of a WiFi client.
To view the RADIUS password in clear text, click the eye icon.
11. Click the Apply button.
Your settings are saved.
12. Make sure that you can reconnect over WiFi to the network with its new security
settings.
If you cannot connect over WiFi, check the following:
•Are you using the correct network name (SSID) and password?
•If your computer or device is trying to connect to your network with its old settings
(before you changed the settings), update the WiFi network selection in your
WiFi-enabled computer or mobile device to match the current settings for your
network.
•If your computer or device is connected to another WiFi network in your area,
disconnect it from that WiFi network and connect it to the WiFi network that the
AP provides. Some WiFi devices automatically connect to the first open network
without WiFi security that they discover.
•Does your computer or device display as an attached device? (See Display the
devices currently on the AP network and change device information on page 111.)
If it does, it is connected to the network.
User Manual54Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Enable or disable a WiFi network
The AP comes with its Wireless 1 network enabled and its Wireless 2 and Wireless 3
networks disabled. You can enable or disable each of these WiFi networks.
Note: You can set up a schedule to turn the AP’s WiFi radios (2.4 GHz, 5 GHz, or both)
on and off. See Add a WiFi schedule for a radio on page 131. For information about
turning off the radios entirely, see Enable or disable a WiFi radio on page 61.
To disable or enable a WiFi network:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
5. Select the WiFi network (Wireless 1,Wireless 2,orWireless 3).
6. Select a Wireless Network radio button:
•Enable: Enables the WiFi network. By default, the Wireless 2 and Wireless 3
networks are disabled, but you can enable them.
•Disable: Disables the WiFi network. By default, the Wireless 1 network is enabled,
but you can disable it.
User Manual55Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
7. Click the Apply button.
Your settings are saved.
Broadcast or hide the SSID for a WiFi
network
By default, a WiFi network (SSID) broadcasts its network name (also referred to as the
SSID) so that WiFi clients can display the SSID in their scanned network lists. For
additional security, you can turn off the SSID broadcast and hide the SSID. Then, anyone
who wants to join this WiFi network must type the SSID instead of selecting it from a list
on a computer or mobile device.
To broadcast or hide the network name for a WiFi network:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
5. Select the WiFi network (Wireless 1,Wireless 2,orWireless 3).
6. Broadcast or hide the SSID:
•Broadcast the SSID: Select the Enable SSID Broadcast check box.
User Manual56Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Hide the SSID: Clear the Enable SSID Broadcast check box.
7. Click the Apply button.
Your settings are saved.
Manage client isolation for clients of the
Wireless 2 or Wireless 3 network
Client isolation is disabled for the Wireless 1 network so that clients on that network can
communicate with each other. You cannot change this setting for the Wireless 1 network.
For the Wireless 2 and Wireless 3 networks, client isolation is also disabled by default,
but you can enable it as an added security measure. If enabled, none of the WiFi clients
on the same WiFi network can communicate with each other. However, these WiFi
clients can still communicate with each other over the Internet.
To manage client isolation for the Wireless 2 or Wireless 3 network:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
5. Select the WiFi network (Wireless 2 or Wireless 3).
User Manual57Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6. Select a Client Isolation radio button:
•Enable: All WiFi clients are isolated. WiFi clients that are connected to the same
WiFi network are prevented from communicating with each other.
(Communication over the Internet remains possible.)
•Disable: WiFi clients that are connected to the same WiFi network are allowed
to communicate with each other.
7. Click the Apply button.
Your settings are saved.
Manage access to LAN ports and the local
browser UI
For the Wireless 2 and Wireless 3 networks, you can enable or disable WiFi client access
to devices connected to the AP LAN ports and to the local browser UI to manage the
AP. For example, if you connect a printer to LAN port 2 and a server to LAN port 3, you
can enable or disable access to the printer and server from the WiFi clients connected
to the Wireless 2 and Wireless 3 networks.
Access to LAN ports depends on the WiFi network that the clients are connected to and
whether you enabled access:
•Wireless 1: WiFi clients that are connected to the Wireless 1 network can access
devices that are connected to the LAN ports of the AP. For the Wireless 1 network,
you cannot disable this access. Clients of the Wireless 1 network also can access the
local browser UI.
•Wireless 2 or Wireless 3: You can enable or disable access to the LAN ports and
local browser UI for either or both of these WiFi networks. By default, such access is
disabled. (If devices that are connected to the LAN ports are set up for communication
over the Internet, WiFi clients of the Wireless 2 or Wireless 3 network might still be
able to reach these devices.)
User Manual58Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To enable or disable LAN port and local browser UI access for the Wireless 2 or
Wireless 3 network:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
5. Select the Wireless 2 or Wireless 3 button.
The settings for the Wireless 2 or Wireless 3 network display.
6. Scroll down to Allow access to wired ports and Router GUI and select a radio button:
•Enable: WiFi clients on the selected network can access devices connected to
the LAN ports and can access the local browser UI.
•Disable: WiFi clients on the selected network cannot access devices connected
to the LAN ports or the local browser UI. (If devices that are connected to the
LAN ports are set up for communication over the Internet, WiFi clients might still
be able to reach these devices.)
7. Click the Apply button.
Your settings are saved.
User Manual59Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Manage SSID isolation for all WiFi networks
SSID isolation means that WiFi clients associated with different WiFi networks on the
AP cannot communicate with each other. For example, a client connected to the Wireless
1 network cannot communicate with a client connected to the Wireless 2 network. The
WiFi clients can still communicate with each other over the Internet. SSID isolation is
the default setting for the AP and provides an added security measure. You can disable
SSID isolation.
To manage SSID isolation for all WiFi networks:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select BASIC > Wireless.
The Wireless Network page displays.
5. Select an SSID Isolation radio button:
•Enable: WiFi clients that are connected to different SSIDs cannot communicate
with each other. This is the default setting. (Communication over the Internet is
possible.)
•Disable: WiFi clients that are connected to different SSIDs can communicate with
each other.
6. Click the Apply button.
User Manual60Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Your settings are saved.
Enable or disable a WiFi radio
The AP has internal WiFi radios that broadcast signals in the 2.4 GHz and 5 GHz bands.
By default, they are on so that you can connect over WiFi to the AP. When both WiFi
radios are off, you can still use an Ethernet cable for a LAN connection to the AP.
You can also turn a WiFi radio on and off based on a schedule (see Add a WiFi schedule
for a radio on page 131).
IMPORTANT: If you enabled the smart connect feature, you can only enable or disable
both radios simultaneously. That means that you cannot enable or disable each radio
individually.
To enable or disable a WiFi radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
User Manual61Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5. Do one of the following:
•2.4 GHz radio: To change the settings for the 2.4 GHz radio, scroll down to the
Advanced Wireless Settings (2.4 GHz b/g/n/ax) section.
•5 GHz radio: To change the settings for the 5 GHz radio, scroll down to the
Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section.
Note: If the smart connect feature is enabled (by default, it is not), the page presents
a single option in the Advanced Wireless Settings (2.4 GHz b/g/n/ax & 5 GHz
802.11a/n/ac/ax) section. In that situation, enabling or disabling applies to both
radios simultaneously. If the smart connect feature is disabled, you can enable or
disable each radio individually.
6. Turn off or turn on the radio:
•Turn off the radio: Clear the Enable Wireless Router Radio check box.
•Turn on the radio: Select the Enable Wireless Router Radio check box.
7. Click the Apply button.
Your settings are saved.
If you turn off a radio, the associated 2.4 GHz or 5 GHz WLAN LED turns off.
User Manual62Basic WiFi and Radio Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
7
Firewall Security and Access Rules
The AP comes with a built-in firewall that helps to protect your network from unwanted
intrusions from the Internet and lets you control access to the Internet. You can also set
up access rules for wired and WiFi devices. Such rules determine if a device can access
or is blocked from accessing the AP network.
This chapter includes the following sections:
• Firewall WAN settings [router mode]
• Network access control lists
Note: In this chapter, we refer to the access point as the AP.
63
Firewall WAN settings [router mode]
If the AP is in router mode, the basic firewall settings let you manage these settings:
•Port scan protection
•Denial of service (DoS) protection
•Whether the AP can respond to a ping from the Internet (WAN) port
•DMZ server
•IGMP proxying
•NAT filtering
•Application-level gateway (ALG) for the Session Initiation Protocol (SIP)
For information about the MTU size, which is another basic firewall setting, see Change
the MTU size [router mode] on page 83.
Note: The information in the following sections is not required if the AP is operating
in AP mode. In AP mode, the firewall WAN settings can be provided by the routing
device to which the AP connects. Therefore, in AP mode, the firewall WAN settings are
masked out in the local browser UI.
Enable or disable responses to a ping from the Internet
[router mode]
You can enable the AP to respond to a ping to its WAN (Internet) port. This feature
allows your AP to be discovered. Enable this feature only as a diagnostic tool or for a
specific reason.
To change the default WAN security settings:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
User Manual64Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5. Enable or disable the AP from responding to a ping on its Internet (WAN) port:
•Enable: Select the Respond to Ping on Internet Port check box.
•Disable: Clear the Respond to Ping on Internet Port check box.
By default, the check box is cleared and the AP does not respond to a ping on
its WAN (Internet) ports.
6. Click the Apply button.
Your settings are saved.
Enable or disable IGMP proxying [router mode]
IGMP proxying allows a computer or mobile device on the AP network to receive
multicast traffic from the Internet. If you do not need this feature, leave it disabled, which
is the default setting.
To enable IGMP proxying:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5. Enable or disable the AP to serve as an IGMP proxy device:
•Enable: Clear the Disable IGMP Proxying check box.
•Disable: Select the Disable IGMP Proxying check box.
By default, the check box is selected and IGMP proxying is disabled.
6. Click the Apply button.
User Manual65Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Your settings are saved.
Set up a default DMZ server [router mode]
A default DMZ server is helpful when you are using some Internet services and
videoconferencing applications that are incompatible with Network Address Translation
(NAT). The AP is programmed to recognize some of these applications and to work
correctly with them, but other applications might not function well. In some cases, one
local computer can run the application correctly if the IP address for that computer is
entered as the default DMZ server.
WARNING: DMZ servers pose a security risk. A computer designated as the default
DMZ server loses much of the protection of the firewall and is exposed to exploits from
the Internet. If compromised, the DMZ server computer can be used to attack other
computers on your network.
To set up a default DMZ server:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5. Select the Default DMZ Server check box.
6. Enter the LAN IP address of the computer that must function as the DMZ server.
7. Click the Apply button.
Your settings are saved.
User Manual66Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Manage NAT filtering [router mode]
Network Address Translation (NAT) determines how the AP processes inbound traffic.
Secured NAT protects computers on the LAN from attacks from the Internet but might
prevent some Internet services, point-to-point applications, or multimedia applications
from working. Open NAT provides a much less secured firewall but allows almost all
Internet applications to work. Secured NAT is the default setting.
To change the default NAT filtering settings:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5. Select a NAT Filtering radio button:
•Secured: Provides a secured firewall to protect the computers on the LAN from
attacks from the Internet but might prevent some Internet services, point-to-point
applications, or multimedia applications from functioning. By default, the Secured
radio button is selected.
•Open: Provides a much less secured firewall but allows almost all Internet
applications to function.
6. Click the Apply button.
Your settings are saved.
User Manual67Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Network access control lists
You can use access control to block or allow device access to your network. An access
control list (ACL) functions with the MAC addresses of wired and WiFi devices that can
either access your entire network or are blocked from accessing your entire network.
The AP can detect the MAC addresses of devices that are connected to the network
and list the MAC addresses of devices that were connected to the network.
Each network device has a MAC address, which is a unique 12-character physical address,
containing the hexadecimal characters 0–9, a–f, or A–F (uppercase or lowercase) only,
and separated by colons (for example, 00:09:AB:CD:EF:01). Typically, the MAC address
is on the label of a device. If you cannot see the label, you can display the MAC address
using the network configuration utilities of the computer. You might also find the MAC
addresses of devices that are connected to the AP on the Access Control page of the
local browser UI (see Enable and manage network access control on page 68).
Enable and manage network access control
When you enable access control, you select whether new devices are allowed to access
the AP network or are blocked. By default, currently connected devices are allowed to
access the network, but you can block these devices. You can also view information
about connected devices.
To set up network access control and view information about connected devices:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
User Manual68Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control.
The Access Control page displays.
5. Select the Turn on Access Control check box.
You must select this check box before you can specify an access rule and use the
Allow all new devices to connect and Block all new devices from connecting
buttons. When the Turn on Access Control check box is cleared, all devices are
allowed to connect, even if a device is in the list of blocked devices.
6. Click the Apply button.
Your settings are saved.
7. Select an access rule for new devices that are not currently connected:
• Allow all new devices to connect: A new device can access your network. You
do not need to enter the MAC address. We recommend that you leave this radio
button selected.
•Block all new devices from connecting: Before a new device can access your
network, you must enter its MAC address in the allowed list. For more information,
see Network access control lists on page 68.
The access rule does not affect previously blocked or allowed devices. It applies
only to devices joining your network in the future after you apply these settings.
8. To manage future access for currently connected devices, do the following:
•Allow your current device: If you blocked all new devices, you can allow the
device that you are currently using to continue to access the network. Select the
check box next to your device in the table, and click the Allow button.
•Allow or block a device: To change the allow or block settings for a device that
is currently connected, select the check box next to the device in the table, and
click either the Allow button or the Block button.
•Change the device name that is displayed: To change the displayed name for
a device that is currently connected, do the following, and click either the Allow
button or the Block button.
a. Select the check box next to the device in the table.
b. Click the Edit button.
The Edit Allowed Device or Edit Blocked Device page displays.
c. In the Device Name field, change the name.
d. Click the Apply button.
The Access Control page displays again.
User Manual69Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
9. Click the Apply button.
Your settings are saved.
10. To refresh the information in the table with currently connected devices, click the
Refresh button.
The table shows the status of the device (allowed or blocked from future sessions),
device name, IP address, MAC address, and type of connection to the AP.
Add, remove, or change a device on the allowed list
If you set up an access list that blocks all new devices from accessing your network (see
Enable and manage network access control on page 68), you must set up an allowed
list that defines which WiFi and wired devices are allowed to access your entire network.
You do so by adding the MAC addresses of these devices to the allowed list. You can
also change or remove a device from the allowed list.
To add, remove, or change a device on the allowed list:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control.
The Access Control page displays.
User Manual70Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5. If the table with allowed devices does not display, click the View list of allowed
devices not currently connected to the network link.
A table displays the detected device name, MAC address, and connection type of
the devices that are not connected but allowed to access the network.
6. To add a device to the allowed list, do the following:
a. Click the Add button.
The Add Allowed Device page displays.
b. Enter the MAC address and device name for the device that you want to allow.
c. Click the Apply button.
The device is added to the allowed list. The Access Control page displays again.
7. To remove a device from the allowed list, do the following:
a. Select the check box for the device.
b. Click the Remove from the list button.
The device is removed from the allowed list.
8. To change the MAC address or name for a device on the allowed list, do the
following:
a. Select the check box for the device.
b. Click the Edit button.
The Edited Allowed Device page displays.
c. Change the MAC address, device name, or both.
d. Click the Apply button.
The Access Control page displays again.
9. Click the Apply button.
Your settings are saved.
Add, remove, or change a device on the blocked list
If you set up an access list that allows all new devices to access your network (see Enable
and manage network access control on page 68) but you want to block some devices,
you must set up a blocked list that defines which WiFi and wired devices are blocked
User Manual71Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
from accessing your network. You do so by adding the MAC addresses of these devices
to the blocked list. You can also change or remove a device from the blocked list.
To add, remove, or change a device on the blocked list:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Security > Access Control.
The Access Control page displays.
5. Click the View list of blocked devices not currently connected to the network
link.
A table displays the detected device name, MAC address, and connection type of
the devices that are not connected and are blocked from accessing the network.
6. To add a device to the blocked list, do the following:
a. Click the Add button.
The Add Blocked Device page displays.
b. Enter the MAC address and device name for the device that you want to block.
c. Click the Apply button.
The device is added to the blocked list. The Access Control page displays again.
User Manual72Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
7. To remove a device from the blocked list, do the following:
a. Select the check box for the device.
b. Click the Remove from the list button.
The device is removed from the blocked list.
8. To change the MAC address or name for a device on the blocked list, do the
following:
a. Select the check box for the device.
b. Click the Edit button.
The Edited Blocked Device page displays.
c. Change the MAC address, device name, or both.
d. Click the Apply button.
The Access Control page displays again.
9. Click the Apply button.
Your settings are saved.
User Manual73Firewall Security and Access
Rules
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
8
Network Settings
This chapter describes how you can manage various LAN and WAN network settings
of the AP.
The chapter includes the following sections:
• LAN IP address settings [router mode]
• Change the AP network device name
• Reserved LAN IP addresses [router mode]
• Change the MTU size [router mode]
Note: In this chapter, we refer to the access point as the AP.
74
LAN IP address settings [router mode]
If the AP is in router mode, the LAN subnet defines the LAN IP address settings for the
AP, including the IP address at which you can access the AP over the local browser UI,
the DHCP IP address settings, and the Router Information Protocol (RIP) settings.
Note: The information in the following sections is not required if the AP is operating
in AP mode. In AP mode, the LAN IP settings can be provided by the routing device to
which the AP connects. Therefore, in AP mode, the LAN IP settings are masked out in
the local browser UI.
Change the LAN IP address and subnet settings [router
mode]
If the AP is in router mode, it uses private IP addresses on the LAN side and functions
as a DHCP server. The AP’s LAN IP configuration is as follows:
•LAN IP address: 192.168.1.1 (if the AP is in router mode, this is the same as
www.routerlogin.net or www.routerlogin.com)
•Subnet mask: 255.255.255.0
These addresses are part of the designated private address range for use in private
networks and are suitable for most applications. The IP address and subnet mask identify
which addresses are local to a specific device and which must be reached through a
gateway or router. If you need a specific IP subnet that one or more devices on the
network use, or if competing subnets use the same IP scheme, you can change the LAN
IP address settings.
Note: If you change the default LAN IP address settings, the IP address range for the
default DHCP server also changes (see Manage the DHCP server address pool [router
mode] on page 76).
To change the LAN IP address and subnet settings:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
User Manual75Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. In the IP Address fields, enter the new LAN IP address.
The LAN IP address at which you can access the local browser UI of the AP also
changes, but the domain names routerlogin.net and routerlogin.com are adjusted
to the new LAN IP address.
6. In the IP Subnet Mask fields, enter the new LAN subnet mask.
The LAN IP subnet mask at which you can access the local browser UI of the AP also
changes.
7. Click the Apply button.
Your settings are saved.
If you changed the LAN IP address settings of the LAN subnet, you might be
disconnected from the local browser UI. If you are disconnected, reconnect by closing
your browser, relaunching it, and logging in to the AP at its new LAN IP address, or
use http://www.routerlogin.net or http://www.routerlogin.com.
Manage the DHCP server address pool [router mode]
If the AP is in router mode, it functions as a Dynamic Host Configuration Protocol (DHCP)
server. The AP assigns IP, DNS server, and default gateway addresses to all computers
and mobile devices that are connected to its LAN subnet.
These addresses are part of the same IP address subnet as the AP’s LAN IP address. By
default, the DHCP address pool for the LAN subnet is 192.168.1.2 through 192.168.1.254.
The AP delivers the following parameters to any LAN device that requests DHCP:
•An IP address from the range that you define
•Subnet mask
•Gateway IP address
•DNS server IP address
User Manual76Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To change the DHCP pool of IP addresses that the AP assigns:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. Make sure that the Use Router as DHCP Server check box is selected.
This check box is selected by default.
6. Specify the range of IP addresses that the router assigns for the LAN subnet:
•In the Starting IP Address field, enter the lowest number in the range.
This IP address must be in the same LAN subnet.
•In the Ending IP Address field, enter the number at the end of the range of IP
addresses.
This IP address must be in the same LAN subnet.
7. To change the DHCP lease time, from the DHCP Lease Time menu, select a period
from 1 hour to 24 hours.
By default, the period is 24 hours. When the lease time expires, the DHCP server
releases the IP address, and a DHCP client must reconnect to get a new (or the same)
IP address from the DHCP server.
8. Click the Apply button.
Your settings are saved.
User Manual77Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Disable the DHCP server [router mode]
If the AP is in router mode, you can use another device on your network as the DHCP
server or specify the network settings of all your computers.
Note: If you disable the DHCP server and do not specify another DHCP server or no
other DHCP server is available on your network, you must set your computer IP addresses
manually so that they can reach the AP.
To disable the DHCP server:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. Clear the Use Router as DHCP Server check box.
6. Click the Apply button.
Your settings are saved.
Manage the Router Information Protocol settings [router
mode]
If the AP is in router mode, Router Information Protocol (RIP) lets the AP exchange
routing information with other routers. By default, RIP is enabled in both directions (in
and out) without a particular RIP version.
To manage the RIP settings:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
User Manual78Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. From the RIP Direction menu, select the RIP direction:
•Both: The AP broadcasts its routing table periodically and incorporates information
that it receives. This is the default setting.
•In Only: The AP incorporates the RIP information that it receives but does not
broadcast its routing table.
•Out Only: The AP broadcasts its routing table periodically but does not incorporate
the RIP information that it receives.
6. From the RIP Version menu, select the RIP version:
•Disabled: The RIP version is disabled. This is the default setting.
•RIP-1: This format is universally supported. It is adequate for most networks, unless
you are using an unusual network setup.
•RIP-2B: This format carries more information than RIP-1, sends the routing data
in RIP-2 format, and uses subnet broadcasting.
•RIP-2M: This format carries more information than RIP-1, sends the routing data
in RIP-2 format, and uses multicasting.
7. Click the Apply button.
Your settings are saved.
User Manual79Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the AP network device name
The default network device name of the AP is the model number of the AP.
This device name displays in, for example, a file manager when you browse your network.
To change the AP network device name:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > Device Name.
The Device Name page displays.
5. Type a new name in the Device Name field.
You can type up to 15 alphanumeric characters.
6. Click the Apply button.
Your settings are saved.
User Manual80Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Reserved LAN IP addresses [router mode]
If the AP is in router mode, you can specify a reserved IP address for a device on the
LAN subnet. Each time such a device accesses the AP’s DHCP server, the device receives
the same IP address.
Note: The information in the following sections is not required if the AP is operating
in AP mode. In AP mode, reserved LAN IP addresses can be provided by the routing
device to which the AP connects. Therefore, in AP mode, the reserved LAN IP address
settings are masked out in the local browser UI.
Reserve a LAN IP address [router mode]
You can assign a reserved IP address for a device such as a computer or server that
requires permanent IP settings.
To reserve an IP address:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. Below the Address Reservation table, click the Add button.
The Address Reservation page displays.
6. Either select the radio button for an attached device that displays in the table or
specify the reserved IP address settings in the following fields:
• IP Address: Enter the IP address to assign to the computer or device.
Enter an IP address in the AP’s LAN subnet, such as 192.168.1.x.
•MAC Address: Enter the MAC address of the computer or device.
•Device Name: Enter the name of the computer or device.
User Manual81Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
7. Click the Add button.
The reserved address is entered into the Address Reservation table on the LAN
Setup page.
The reserved address is not assigned until the next time the computer or device
contacts the AP’s DHCP server. Reboot the computer or device, or access its IP
configuration and force a DHCP release and renew.
Change a reserved LAN IP address entry [router mode]
If the AP is in router mode, you can change an existing reserved LAN IP address entry.
To change a reserved LAN IP address entry:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. In the Address Reservation table, select the radio button for the reserved address.
6. Click the Edit button.
The Address Reservation page displays.
7. Change the settings.
8. Click the Apply button.
Your settings are saved.
User Manual82Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Remove a reserved LAN IP address entry [router mode]
If the AP is in router mode, you can remove a reserved LAN IP address entry that you
no longer need.
To remove a reserved LAN IP address entry:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > LAN Setup.
The LAN Setup page displays.
5. In the Address Reservation table, select the radio button for the reserved address.
6. Click the Delete button.
The IP address entry is removed.
Change the MTU size [router mode]
If the AP is in router mode, you can change the maximum transmission unit (MTU).
The MTU is the largest data packet a network device transmits. When one network
device communicates across the Internet with another, the data packets travel through
many devices along the way. If a device in the data path uses a lower MTU setting than
the other devices, the data packets must be split or “fragmented” to accommodate the
device with the smallest MTU.
User Manual83Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The best MTU setting for router equipment is often the default value. In some situations,
changing the value fixes one problem but causes another. Leave the MTU of the AP
unchanged unless one of these situations occurs:
•You experience problems connecting to your ISP or other Internet service, and the
technical support of the ISP recommends changing the MTU setting. These
web-based applications might require an MTU change:
-A secure website that does not open, or displays only part of a web page
- Yahoo email
- MSN portal
•You use VPN and experience severe performance problems.
•You used a program to optimize MTU for performance reasons and now you are
experiencing connectivity or performance problems.
Note: An incorrect MTU setting can cause Internet communication problems. For
example, you might not be able to access certain websites, frames within websites,
secure login pages, or FTP or POP servers.
To change the MTU size:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Setup > WAN Setup.
The WAN Setup page displays.
5. In the MTU Size field, enter a value from 616 to 1500.
The default size is 1500 bytes.
6. Click the Apply button.
Your settings are saved.
User Manual84Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If you suspect an MTU problem, a common solution is to change the MTU to 1400. If
you are willing to experiment, you can gradually reduce the MTU from the maximum
value of 1500 until the problem goes away. The following table describes common MTU
sizes and applications.
Table 8. Common MTU sizes
ApplicationMTU
The largest Ethernet packet size. This setting is typical for connections that do not use
PPPoE or VPN and is the default value for NETGEAR routers, adapters, and switches.
1500
Used in PPPoE environments.1492
Maximum size to use for pinging. (Larger packets are fragmented.)1472
Used in some DHCP environments.1468
User Manual85Network Settings
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
9
Maintain and Monitor
This chapter describes how you can maintain the AP by changing the password for local
login and by managing the firmware, configuration file, and logs. The chapter also
describes how you can monitor the AP and its network traffic.
The chapter includes the following sections:
• Update the firmware
• Back up or restore the settings
• Change the local device password
• Change the password recovery questions for the local device password
• Recover local browser UI access after login failures
• Factory default settings
• Time and Network Time Protocol server
• Logs
• Status and statistics
• Change the operation mode to AP mode or router mode
• Disable LED blinking or turn off LEDs
Note: In this chapter, we refer to the access point as the AP.
86
Update the firmware
From time to time, or as needed, NETGEAR makes new firmware (software) available.
You can log in to the AP and let the AP check if new firmware is available, or you can
manually upload a specific firmware version to your AP.
Depending on how you are connected to the AP, we recommend the following firmware
update methods:
•WiFi connection from a computer or mobile device: If you are connected over
WiFi to the AP, we recommend that you let the AP check the Internet to see if new
firmware is available. See Let the AP check for new firmware and update the firmware
on page 87.
If you let the AP check for new firmware and new firmware is available, it is
downloaded directly to the AP.
Note: If you want to load a particular firmware version (but not necessarily the latest
firmware version), you must manually update the firmware (see below). In that
situation, we recommend that you use a wired connection to the AP.
•Wired connection from a computer: If you are connected over an Ethernet cable
to a LAN port on the AP or over a LAN connection to the same network as the AP,
we recommend that you manually update the firmware. See Manually check for new
firmware and update the firmware on page 88.
With the manual update mode, if new firmware is available, or you want to load a
particular firmware version (but not necessarily the latest firmware version), you must
download it to your computer and then upload it to your AP.
Let the AP check for new firmware and update the firmware
You can let the AP check the Internet to see if new firmware is available. If it is, you can
update the firmware.
To let the AP check for new firmware and update the firmware:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
User Manual87Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Firmware Update.
The Firmware Update page displays.
5. Click the Check button.
The AP finds new firmware information if any is available and displays a message
asking if you want to download and install it.
6. Click the Yes button.
The AP locates and downloads the firmware and begins the update.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the update.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the AP. Wait until the AP finishes restarting and the Power LED turns solid green.
A progress bar might show the progress of the firmware update process. The firmware
update process takes several minutes. When the update is complete, your AP restarts.
Read the new firmware release notes to find out if you must reconfigure the AP after
updating.
7. To verify that the AP runs the new firmware version, log back in to the AP.
The firmware version is stated in the Firmware Version field at the top right of the
BASIC Home page.
Manually check for new firmware and update the firmware
To download new firmware and update the AP:
1. Visit netgear.com/support/download/ and locate the support page for the router.
2. If available, download the new firmware to your computer or mobile device.
User Manual88Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
3. Read the new firmware release notes to determine whether you must reconfigure
the router after updating.
4. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
5. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
6. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
7. Select ADVANCED > Administration > Firmware Update.
The Firmware Update page displays.
8. Locate and select the firmware file on your computer or mobile device:
a. Click the Browse button.
b. Navigate to and select the firmware file.
The file ends in .img.
9. Click the Upload button.
A warning pop-up window displays.
10. Click the OK button.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the upload.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the AP. Wait until the AP finishes restarting and the Power LED turns solid green.
A progress bar might show the progress of the firmware upload process. The firmware
upload process takes several minutes. When the upload is complete, your AP restarts.
User Manual89Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
11. To verify that the AP runs the new firmware version, log back in to the AP.
The firmware version is stated in the Firmware Version field at the top right of the
BASIC Home page.
Enable the AP to automatically update the firmware
You can let the AP check for new firmware and automatically update the firmware if new
firmware is available.
To let the AP check for new firmware and automatically update the firmware:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Firmware Update.
The Firmware Update page displays.
5. In the Router Auto Firmware Update section, select the Enable radio button.
By default, the Disable radio button is selected.
6. Click the Apply button.
Your settings are saved.
User Manual90Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Back up or restore the settings
The configuration settings of the AP are stored within the AP in a configuration file. You
can back up (save) this file to your computer or restore it.
Back up the AP settings
You can save a copy of the current configuration settings.
To back up the AP’s configuration file:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Backup Settings.
The Backup Settings page displays.
5. Click the Back Up button.
6. Choose a location to store the file on your computer.
The backup file ends in .cfg.
7. Follow the directions of your browser to save the file.
User Manual91Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Restore the AP settings
If you backed up the configuration file, you can restore the configuration settings from
this file.
To restore configuration settings that you backed up:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Backup Settings.
The Backup Settings page displays.
5. Click the Browse button and navigate to and select the saved configuration file.
The backup file ends in .cfg.
6. Click the Restore button.
A warning pop-up window displays.
7. Click the OK button.
The configuration is uploaded to the AP. When the restoration is complete, the AP
reboots. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the
restoration. For example, do not close the browser, click a link, or load a new page.
Do not turn off the AP. Wait until the AP finishes restarting and the Power LED turns
solid green.
User Manual92Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the local device password
During the initial log-in process, when you followed the prompts of the Setup Wizard,
you specified the local device password (also referred to as the admin password). This
is the password that you use to log in to the local browser UI of the AP with the user
name admin. You can change this password again.
We recommend that your password meets the following conditions:
•Contains 8 to 32 characters
•Contains no more than two identical characters in a row
In addition, we recommend that your password meets at least three of the following
four conditions:
•At least one uppercase character
•At least one lowercase character
•At least one number
•At least one special character, such as the following characters:
@#$%^&*()!
To change the password for the user name admin for login to the local browser UI
of the AP:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
User Manual93Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The BASIC Home page displays.
4. Select ADVANCED > Administration > Set Password.
The Set Password page displays.
5. Enter the current password.
6. Enter the new password twice.
For information about password recovery, see Change the password recovery
questions for the local device password on page 94.
7. Click the Apply button.
Your settings are saved.
Change the password recovery questions
for the local device password
During the initial log-in process, when you followed the prompts of the Setup Wizard,
you set up recovery for the local device password (also referred to as the admin
password). This is the password that you use to log in locally to the AP with the user
name admin.
If you forget this password, you can recover access to the local browser UI by resetting
the password and specifying a new password. The recovery process is supported in the
Chrome, Safari, Firefox, and Internet Explorer browsers.
You can change the password recovery questions.
To change the password recovery questions:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
User Manual94Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Set Password.
The Set Password page displays.
5. Make sure that the Enable Password Reset check box is selected.
This check box is selected by default.
6. Select two security questions and provide answers to them.
7. Click the Apply button.
Your settings are saved.
Recover local browser UI access after login
failures
When you use the Setup Wizard for the initial log-in process, you customize the local
device password and set up password recovery. If three local login failures occur, you
can try to recover access to the local browser UI and set a new password. This recovery
process is supported in the Chrome, Safari, Internet Explorer, and Firefox browsers.
To recover access and set a new local device password:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
User Manual95Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter your local device password.
If you enter an incorrect password three times, you are prompted to enter the serial
number of the AP.
The serial number is on the AP label.
4. Enter the serial number of the AP.
5. Click the Continue button.
The page that displays prompts you for the answers to your security questions.
6. Enter the saved answers to your security questions.
7. Click the Continue button.
The Access Point/Router Password Reset page displays.
8. Enter a new password and confirm it.
9. Select two security questions and provide answers to them.
10. Click the Next button.
The page that displays confirms that you successfully reset the admin password.
11. Click the Login Again button.
A login window displays.
12. With your new password, log in to the AP.
Factory default settings
Under some circumstances (for example, if you lost track of the changes that you made
to the AP settings or you move the AP to a different network), you might want to erase
the configuration and reset the AP to factory default settings.
If the AP is operating in AP mode and you do not know the current IP address of the
AP, first try to use an IP scanner application to detect the IP address. (IP scanner
applications are available on the Internet free of charge.) If you still cannot find the
current IP address of the AP, reset the AP to factory default settings.
Note: If the AP is in router mode, you can always access the AP by using
http://www.routerlogin.net or http://www.routerlogin.com (both of which are the same
as http://192.168.1.1).
User Manual96Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To reset the AP to factory default settings, you can use either the dual-function Reset
button on the back of the AP or the Erase function in the local browser UI. However, if
you cannot find the IP address or lost the password to access the AP and cannot recover
it, you must use the Reset button.
After you reset the AP to factory default settings, the AP is in router mode, the login URL
is http://www.routerlogin.net, and the DHCP server is enabled. For a list of factory default
settings, see Technical specifications model WAX202 on page 158.
Use the Reset button to return the AP to factory defaults
The Reset button on the back panel of the AP lets you return the AP to factory default
settings.
After you return the AP to factory default settings, you must go through the initial login
process again (see Connect the AP to a modem and log in for the first time on page 30
or Connect the AP to a routing device and log in for the first time on page 26).
CAUTION: The following process erases all settings that you configured in the AP.
To reset the AP to factory default settings using the Reset button:
1. On the back of the AP, locate the recessed Reset button.
For more information, see Back panel on page 16.
2. Insert a device such as a straightened paper clip into the opening.
3. Press the Reset button for 10 seconds or until the Power LED starts blinking amber.
When the Power LED starts blinking amber, the configuration is reset to factory
default settings. When the reset is complete, the AP reboots. This process takes
about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset.
For example, if you are connected to the AP’s local browser UI, do not close the
browser, click a link, or load a new page. Do not turn off the AP. Wait until the AP
finishes restarting and the Power LED turns solid green.
Use the local browser UI to return the AP to factory defaults
You can use the local browser UI to return the AP to factory default settings.
After you return the AP to factory default settings, you must go through the initial log-in
process again (see Connect the AP to a modem and log in for the first time on page 30
or Connect the AP to a routing device and log in for the first time on page 26).
CAUTION: The following process erases all settings that you configured in the AP.
User Manual97Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To erase the settings:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Backup Settings.
The Backup Settings page displays.
5. Click the Erase button.
A warning page displays.
6. Click the Yes button.
The configuration is reset to factory default settings. When the reset is complete,
the AP reboots. This process takes about two minutes.
WARNING: To avoid the risk of corrupting the firmware, do not interrupt the reset.
For example, do not close the browser, click a link, or load a new page. Do not turn
off the AP. Wait until the AP finishes restarting and the Power LED turns solid green.
Time and Network Time Protocol server
By default, the AP receives its time settings from a NETGEAR Network Time Protocol
(NTP) server. You can change to another NTP server or set the time zone and daylight
saving time manually.
User Manual98Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Manually set the time zone and adjust the daylight saving
time
The AP might detect the time zone automatically or you might need to adjust the time
zone and daylight saving time settings. When the AP synchronizes its clock with a Network
Time Protocol (NTP) server, the AP detects the date and time. If the AP does not detect
the correct date and time, you might need to manually set the time zone and adjust the
daylight saving time setting.
To manually set the time zone and adjust the daylight saving time setting:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > NTP Settings.
The NTP Settings page displays.
5. From the Time Zone menu, select the time zone for the area in which the AP operates.
6. If the AP is in an area that observes daylight saving time, select the Automatically
adjust for daylight saving times check box.
7. Click the Apply button.
Your settings are saved.
When the AP connects over the Internet to an NTP server, the date and time that
display on the page are adjusted according to your settings.
User Manual99Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the Network Time Protocol server
By default, the AP uses the NETGEAR NTP server to synchronize the network time. You
can change the Network Time Protocol (NTP) server to your preferred NTP server.
To change the NTP server to your preferred NTP server:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > NTP Settings.
The NTP Settings page displays. The page also displays the current date and time.
By default, the Use default NETGEAR NTP server radio button is selected.
5. Select the Set your preferred NTP server radio button.
6. Enter the NTP server domain name or IP address in the Primary NTP server field.
7. Click the Apply button.
Your settings are saved.
When the AP connects over the Internet to the new NTP server, the date and time
that display on the page might be adjusted.
User Manual100Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Logs
The logs are a detailed record of many activities that occur on the AP. You can manage
which activities are logged.
Display or clear the logs
The logs displays information about the operation and networks of the AP.
To display or clear the logs:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Logs.
The Logs page displays.
5. To refresh the log entries onscreen, click the Refresh button.
6. To clear the log entries, click the Clear Log button.
User Manual101Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Specify which activities the AP logs
You can specify which activities the AP logs. These activities display in the log.
To manage which activities are logged:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Administration > Logs.
The Logs page displays.
5. Select the check boxes that correspond to the activities that you want to be logged.
By default, the following check boxes are selected:
•Connections to the Web-based interface of this Router
(A log entry is created when someone makes a connection to the local browser
UI of the AP).
•Router operation (startup, get time, etc)
•Known DoS attacks and Port Scans
•Wireless access
(A log entry is created when someone connects to a WiFi network on the AP.)
•Turn off wireless signal by schedule
(A log entry is created when a radio is turned on or off because of a WiFi schedule.)
User Manual102Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6. Clear the check boxes that correspond to the activities that you do not want to be
logged.
7. Click the Apply button.
Your settings are saved.
Status and statistics
You can view information about the AP and its ports and the status of the Internet
connection and WiFi network. In addition, you can view traffic statistics for the various
ports.
Display information about the Internet port, AP, and WiFi
settings [router mode]
If the AP is in router mode, you can display information about the AP, the IP addresses,
and the WiFi settings for each radio.
To display information about the AP and the IP and WiFi settings if the AP is in
router mode:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
The color in the heading of each of the panes uses the following coding:
•Green circle: The settings are fine and no problems exist. For a WiFi network, a
green circle displays if the network is enabled and secured.
•Red circle: Settings are disabled, a problem exists, or the connection is down.
For a WiFi network, a red circle displays if the network is disabled.
User Manual103Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The following tables describe the fields in the panes on the Advanced Home page.
DescriptionField
Router Information
The AP hardware version, which is the model number.Hardware Version
The AP firmware version. If you update the firmware, the version changes (see
Update the firmware on page 87).
Firmware Version
The AP language version for the local browser UI.GUI Language Version
The operation mode is Router. For more information about the changing the
operation mode, see Change the operation mode to AP mode or router mode on
page 113.
Operation Mode
The usage load on the CPUsCPU Load
The RAM memory that is being used and the available memory.Memory Usage (Used/Total)
The time elapsed since the AP was last restarted.System Uptime
LAN Port (This is a subsection in the Router Information pane)
The single MAC address that applies to all four AP LAN ports combined.MAC Address
The IP address that applies to all four AP LAN ports. For more information, see
Change the LAN IP address and subnet settings [router mode] on page 75.
IP Address
If the AP is in router mode, this field displays if the DHCP server of the AP is enabled
(the default setting in router mode) or disabled (see Disable the DHCP server
[router mode] on page 78).
DHCP Server
The IP subnet mask that applies to all four AP LAN ports. For more information,
see Change the LAN IP address and subnet settings [router mode] on page 75.
IP Subnet Mask
The DHCP lease time. For more information, see Manage the DHCP server address
pool [router mode] on page 76.
DHCP Lease Time
DescriptionField
Internet Port
To change these settings, see, Use the Setup Wizard [router mode] on page 42 or Manually set up the AP Internet
connection [router mode] on page 43.
The MAC address that applies to the AP WAN (Internet) port.MAC Address
User Manual104Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
(Continued)
DescriptionField
The WAN IP address that the AP receives from your ISP (through your modem) or
the WAN IP address that you manually configured.
IP Address
The type of Internet connection that the AP uses, which can be DHCP (the default
setting), Static IP, or PPPoE.
Connection
The IP subnet mask that the AP uses.IP Subnet Mask
The IP address of the Domain Name System (DNS) server that the AP uses.Domain Name Server
This field shows Internet Port and the speed of the connection.WAN Preference
DescriptionField
Wireless Settings (2.4 GHz) or Wireless Settings (5.0 GHz )
To change these settings, see Basic WiFi and Radio Features on page 48 and Advanced WiFi and Radio Features
on page 117.
The name of the SSID (see Set up or change an open or secure WiFi network on
page 49).
Name
The country and region in which the AP is being used (see Change the region of
operation on page 118).
Region
The channel that the radio uses (see Change the channel for a radio on page 123).Channel
The WiFi throughput mode that the radio uses (see Change the WiFi throughput
mode on model WAX202 on page 124).
Mode
Displays if the WiFi network is enabled (see Set up or change an open or secure
WiFi network on page 49 or Enable or disable a WiFi network on page 55).
Wireless AP
Displays if the WiFi network broadcasts its SSID (see Broadcast or hide the SSID
for a WiFi network on page 56).
Broadcast Name
Display information about the LAN port, AP, and WiFi
settings [AP mode]
If the AP is operating in AP mode, you can display information about the LAN IP
addresses, AP, and the WiFi settings for each radio.
User Manual105Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To display information about the AP and the IP and WiFi settings if the AP is
operating in AP mode:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
The color in the heading of each of the panes uses the following coding:
•Green circle: The settings are fine and no problems exist. For a WiFi network, a
green circle displays if the network is enabled and secured.
•Red circle: Settings are disabled, a problem exists, or the connection is down.
For a WiFi network, a red circle displays if the network is disabled.
The following tables describe the fields in the panes on the Advanced Home page.
DescriptionField
Router Information
The AP hardware version, which is the model number WAX204.Hardware Version
The AP firmware version. If you update the firmware, the version changes (see
Update the firmware on page 87).
Firmware Version
The AP language version for the local browser UI.GUI Language Version
User Manual106Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
(Continued)
DescriptionField
The operation mode is AP. For more information about the changing the operation
mode, see Change the operation mode to AP mode or router mode on page 113.
Operation Mode
The usage load on the CPUsCPU Load
The RAM memory that is being used and the available memory.Memory Usage (Used/Total)
The time elapsed since the AP was last restarted.System Uptime
DescriptionField
LAN Port
You cannot change these settings when the AP operates in AP mode.
The MAC address that applies to the AP WAN (Internet) port.MAC Address
Displays if the DHCP client of the AP is enabled.DHCP
The LAN IP address that the AP receives from an existing router in your network
or the static (fixed) IP address that you manually configured.
IP Address
The IP subnet mask that the AP uses.IP Subnet Mask
The IP address of the gateway to which the AP connects to the Internet.Gateway IP Address
The IP address of the Domain Name System (DNS) server that the AP uses.Domain Name Server
DescriptionField
Wireless Settings (2.4 GHz) or Wireless Settings (5.0 GHz )
To change these settings, see Basic WiFi and Radio Features on page 48 and Advanced WiFi and Radio Features
on page 117.
The name of the SSID (see Set up or change an open or secure WiFi network on
page 49).
Name
The country and region in which the AP is being used (see Change the region of
operation on page 118).
Region
The channel that the radio uses (see Change the channel for a radio on page 123).Channel
The WiFi throughput mode that the radio uses (see Change the WiFi throughput
mode on model WAX202 on page 124).
Mode
User Manual107Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
(Continued)
DescriptionField
Displays if the WiFi network is enabled (see Set up or change an open or secure
WiFi network on page 49 or Enable or disable a WiFi network on page 55).
Wireless AP
Displays if the WiFi network broadcasts its SSID (see Broadcast or hide the SSID
for a WiFi network on page 56).
Broadcast Name
Check the Internet connection status
To check the Internet connection status:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
5. In the Internet Port pane (in router mode) or in the LAN Port pane (in AP mode), click
the CONNECTION STATUS button.
The Connection Status pop-up window displays.
The information that displays depends on whether the AP is in router mode (the
default operation mode) or AP mode and on the type of Internet connection.
User Manual108Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
When the AP receives an IP address dynamically (which is the most common type
of connection), the following information displays:
•IP Address: The IP address that is assigned to the AP.
In AP mode, the IP address is a LAN IP address. In router mode, the IP address
is a WAN IP address.
•Subnet Mask: The subnet mask that is assigned to the AP.
•Default Gateway: The IP address for the default gateway that the AP
communicates with.
In AP mode, the IP address is a LAN IP address. In router mode, the IP address
is a WAN IP address.
•DHCP Server: The IP address for the Dynamic Host Configuration Protocol server
that provides the TCP/IP configuration to the AP.
In AP mode, the IP address is a LAN IP address. In router mode, the IP address
is a WAN IP address.
•DNS Server: The IP address of the Domain Name Service server that provides
translation of network names to IP addresses.
In AP mode, the IP address is a LAN IP address. In router mode, the IP address
is a WAN IP address.
•Lease Obtained: The date and time when the DHCP IP address lease was
obtained.
•Lease Expires: The date and time that the DHCP IP address lease expires.
6. When the AP receives an IP address dynamically, you can perform the following
actions:
•Release the IP address: Click the Release button to terminate the DHCP IP
address, that is, terminate the Internet connection.
•Renew the IP address: Click the Renew button to renew the DHCP IP address,
that is, renew the Internet connection.
User Manual109Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Display the Internet port statistics
To display the Internet port statistics:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
5. In the Internet Port pane (in router mode) or in the LAN Port pane (in AP mode), click
the Show Statistics button.
A pop-up window displays, showing the following information:
•System Up Time: The time elapsed since the AP was last restarted.
•Port: The statistics for the WAN (Internet) port, LAN (Ethernet) ports, and WLANs.
For each port, the window displays the following information:
-Status: The link status of the port.
-TxPkts: The number of packets transmitted on this port since reset or manual
clear.
-RxPkts: The number of packets received on this port since reset or manual
clear.
-Collisions: The number of collisions on this port since reset or manual clear.
User Manual110Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
-Tx B/s: The current transmission (outbound) bandwidth used on the WAN
and LAN ports.
-Rx B/s: The current reception (inbound) bandwidth used on the WAN and
LAN ports.
-Up Time: The time elapsed since this port acquired the link.
6. To manage the polling, do one of the following:
•To change the polling frequency, which is the interval at which the statistics are
updated in this window, enter a time in seconds in the Poll Interval field and
click the Set Interval button.
•To stop the polling, click the Stop button.
Display the devices currently on the AP network and change
device information
You can display the active wired and WiFi devices in the AP network. If you do not
recognize a WiFi device, it might be an intruder.
If the AP is in router mode, you can also display the VPN devices in the AP network.
To display the attached wired, WiFi, and VPN devices or to change device
information:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
User Manual111Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The BASIC Home page displays.
4. Select BASIC > Attached Devices.
The Attached Devices page displays:
•Wired devices are connected to the AP with Ethernet cables. WiFi devices are
connected to the AP through the WiFi network, in either the 2.4 GHz band or the
5 GHz band. VPN devices are connected over a VPN tunnel to the AP.
•If you enabled access control (see Enable and manage network access control
on page 68), the page displays the access control status of the device in the
network.
The following tables describe the fields on the Attached Devices page.
DescriptionField
If access control is enabled (see Enable and manage network access control on page
68), the access control status of the device in the network (Allowed or Blocked).
Status
For WiFi devices, the connection type information shows the radio (2.4 GHz or 5 GHz)
and WiFi network (Wireless 1, Wireless 2, or Wireless 3) to which the device is
connected.
For LAN devices, the connection type is always Wired.
Connection Type
The device name, if detected. This field also displays the device model, if detected,
and device type icon. This information is for display only.
You can change the information that displays (see Step 5).
Device Name,
including device
model and device type
icon
The IP address that is assigned to the device when it joined the AP network. This
address can change when a device is disconnected and rejoins the network.
IP Address
The MAC address of the device.MAC Address
5. To change the information that displays for a device or the QoS priority, do the
following:
a. Select the check box for the device for which you want to change the information
or priority.
b. Click the Edit button.
The Edit Device page displays.
c. In the Device Model field, specify a model.
d. In the Device Name field, specify a name.
e. From the Device Type menu, select a type.
The device type displays as a device icon on the Attached Devices page.
User Manual112Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
f. Click the Apply button.
Your settings are saved. The Attached Devices page displays again.
6. To refresh the information onscreen, click the Refresh button.
The information onscreen is updated.
Change the operation mode to AP mode or
router mode
By default, the AP’s operation mode is router mode. However, if a device in your network
already provides routing functions and you do not need the AP’s routing functions, you
can change the operation mode to AP mode. For more information about the operation
mode that is associated with each network setup, see What WiFi setup do you want?
on page 24.
You can use the AP in either operation mode:
•AP mode: The AP functions as a WiFi 6 access point and can support LAN clients
through its LAN ports. The AP receives its IP address settings from a routing device
in your network. The AP passes on the IP address settings from the routing device
to its clients so that Internet access is provided.
Note: In AP mode, the AP does not require routing features, so they are masked
out in the local browser UI. For example, routing features such as NAT filtering and
the DHCP server are disabled so that they do not interfere with the routing device
in your network. For more information about the features that are enabled in router
mode but not required in AP mode, see Routing features enabled in router mode
on page 39.
•Router mode: The AP functions as both a lightweight router and WiFi 6 access point,
and can support LAN clients through its LAN ports. Because the AP is connected to
your modem, the AP receives its IP address settings from your Internet service
provider (ISP). The AP delivers IP address settings to its clients so that Internet access
is provided.
User Manual113Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To change the operation mode:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Router / AP Mode.
The Router / AP Mode page displays.
5. Specify the operation mode by doing one of the following:
•Router mode: Select the Router Mode radio button.
The page adjusts to provide information and the following options:
-To manually change the Internet settings before you change the operation
mode, click the Internet Setup button. For more information, see Manually
set up the AP Internet connection [router mode] on page 43.
-To change the WiFi settings before you change the operation mode, click the
Wireless Setup button. For more information, see Set up or change an open
or secure WiFi network on page 49.
•AP mode: Select the AP Mode radio button.
The page adjusts to provide information and the following options:
-Although you can configure a fixed IP address, we recommend that you leave
the Get dynamically from existing access point/router button selected to
let the AP get an IP address dynamically from the existing router in your
network.
User Manual114Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
To configure a static IP address, click the Use fixed IP Address (not
recommend) button, and in the fields that display below the Learn more
button, change the IP address information.
-To change the device name before you change the operation mode, click the
Edit button.
-To change the WiFi settings before you change the operation mode, click the
Wireless Setup button. For more information, see Set up or change an open
or secure WiFi network on page 49.
6. Click the Apply button.
Your settings are saved and the AP is reconfigured in the new operation mode.
Disable LED blinking or turn off LEDs
The LEDs on the front panel of the AP indicate activities and behavior. By default, the
Internet LED, LAN LED, and WLAN LEDs blink when the AP detects data traffic. You can
disable LED blinking for data traffic, or turn off all LEDs except the Power LED.
To disable LED blinking or turn off the LEDs:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
User Manual115Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
4. Select ADVANCED > Advanced Setup > LED Control Settings.
The LED Control Settings page displays.
By default, the first radio button is selected, which allows standard LED behavior.
For more information about LEDs, see Front panel with LEDs on page 14.
5. Select a radio button:
•Disable blinking on Internet LED, LAN LED, Wireless LED when data traffic
is detected
•Turn off all LEDs except Power LED
6. Click the Apply button.
Your settings are saved.
User Manual116Maintain and Monitor
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
10
Advanced WiFi and Radio Features
This chapter describes how you can manage the advanced WiFi and radio features of
the AP. For information about the basic WiFi and radio settings, see Basic WiFi and
Radio Features on page 48.
Tip: If you want to change the settings of the AP’s WiFi network, use a wired connection
to avoid being disconnected when the new WiFi settings take effect.
The chapter includes the following sections:
• Change the region of operation
• Manage 802.11ax and enable or disable OFDMA for a radio
• Enable or disable smart connect for the AP
• Enable or disable 20/40 MHz coexistence for the 2.4 GHz radio
• Change the channel for a radio
• Change the WiFi throughput mode for a radio
• Change the CTS/RTS threshold and preamble mode for a radio
• Change the transmission output power for a radio
• Add a WiFi schedule for a radio
• Enable or disable MU-MIMO
• Enable or disable explicit beamforming
• Enable or disable PMF
Note: In this chapter, we refer to the access point as the AP.
117
Change the region of operation
You can change the region of operation, which is region in which you operate the AP.
For some countries such as North America, you cannot change the region because it is
preset.
Note: Make sure the country is set to the location where the device is operating. You
are responsible for complying within the local, regional, and national regulations set
for channels, power levels, and frequency ranges.
WARNING: It might not be legal to operate the AP in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
To change the region of operation:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. From the Region menu, select the region in which the AP must operate.
6. Click the Apply button.
Your settings are saved. The AP restarts with the settings for the new region.
User Manual118Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Manage 802.11ax and enable or disable
OFDMA for a radio
If 802.11ax (11AX) WiFi is enabled (which it is by default), you can enable Orthogonal
Frequency-Division Multiple-Access (OFDMA) for each radio band independently. By
default, OFDMA is disabled on both radio bands, even when 11AX WiFi is enabled.
OFDMA allows data transmission signals to be split into smaller signals. The AP sends
these small signals directly to individual devices in your network. Because multiple
devices can be served in the same transmission window, the AP does not need to wait
for WiFi access for every packet. This method of communication increases network
speed and efficiency.
Note the following about OFDMA:
•Enable OFDMA if your network includes many Internet of things (IoT) devices.
•After you enable OFDMA, if you notice that some of your devices do not function
as expected, disable OFDMA to see if the devices function fine.
•If your network includes many older devices, you might want to keep OFDMA
disabled.
We recommend that you keep 11AX enabled.
To manage 11AX for both radios and enable or disable OFDMA for an individual
radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
User Manual119Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Select or clear the Enable 11AX check box.
Selecting this check box enables 11AX for both radio bands. If you disable 11AX,
you cannot enable OFDMA for either radio band.
6. If 11AX is enabled, select or clear the Enable OFDMA in 2.4GHz check box.
Selecting this check box enables OFDMA in the 2.4 GHz radio band.
7. If 11AX is enabled, select or clear the Enable OFDMA in 5GHz check box.
Selecting this check box enables OFDMA in the 5 GHz radio band.
8. Click the Apply button.
Your settings are saved. The radio or radios restart and WiFi clients might need to
reconnect.
Enable or disable smart connect for the AP
Smart connect automatically selects the fastest WiFi band for a WiFi client device that
is connected to the AP. By default, smart connect is disabled. (During initial login, or
when you ran the Setup Wizard, you might have enabled smart connect.)
When smart connect is enabled, it applies to all WiFi networks on the AP. For each
individual WiFi network, the 2.4 GHz and 5 GHz bands use the same WiFi network name
(SSID) and network key (WiFi password). That means that when you connect to a WiFi
network on the AP, you see only one SSID, which connects to both bands of the WiFi
network.
Note: If smart connect is enabled and the SSID and passwords for the 2.4 GHz and
5 GHz bands do not match, the WiFi settings for 2.4 GHz band overwrite the WiFi settings
for the 5 GHz band.
If the smart connect feature is enabled, in addition to the SSID and network key, the
following WiFi settings apply to both radios simultaneously, which means that you cannot
configure these settings for each radio individually:
•Enabling or disabling the WiFi radios
User Manual120Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Changing the CTS/RTS threshold and preamble mode for the radios
•Changing the transmission output power for the radios
•Adding a WiFi schedule for the radios
To enable or disable smart connect:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Select or clear the Enable smart connect check box.
Selecting this check box enables smart connect and clearing this check box disables
smart connect.
By default, smart connect is disabled (unless you enabled it during initial login) and
the check box is cleared.
6. Click the Apply button.
Your settings are saved. The radios restart and WiFi clients might need to reconnect.
User Manual121Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Enable or disable 20/40 MHz coexistence
for the 2.4 GHz radio
20/40 coexistence allows a 20 MHz and 40 MHz channel width to be supported
simultaneously. By default, 20/40 MHz coexistence is enabled on the 2.4 GHz radio to
prevent interference between WiFi networks in your environment at the expense of the
WiFi speed. If no other WiFi networks are present in your environment, you can disable
20/40 MHz coexistence to increase the WiFi speed on the 2.4 GHz radio to the maximum
supported speed for the WiFi mode.
20/40 MHz coexistence does not apply to the 5 GHz radio.
To enable or disable 20/40 MHz coexistence for the 2.4 GHz radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Select or clear the Enable 20/40 MHz co-existence 2.4 GHz check box.
Selecting this check box enables 20/40 MHz coexistence and clearing this check
box enables 20/40 MHz coexistence.
By default, 20/40 MHz coexistence is enabled and the check box is selected.
User Manual122Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6. Click the Apply button.
Your settings are saved. The 2.4 GHz radio restarts and WiFi clients might need to
reconnect.
Change the channel for a radio
The available WiFi channels and frequencies depend on the region or country and the
radio. For the 2.4 GHz radio, the default is Auto, which means that the radio automatically
selects the most suitable channel. When you select a particular channel, the channel
selection becomes static, which means that the AP uses only that channel until you
change the channel setting again. For the 5 GHz radio, the default channel depends on
the region.
Note: You do not need to change the WiFi channel unless you experience interference
(which is indicated by lost connections).
Note: If you use multiple WiFi access points in your network, or your AP is close to
another one, reduce interference by selecting different channels for adjacent access
points. We recommend a channel spacing of four channels between adjacent access
points (for example, for 2.4 GHz radios, use channels 1 and 5, or 6 and 10).
To change the channel for a radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
User Manual123Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. From the 2.4 GHz Channel or 5 GHz Channel menu, select a channel.
For the 2.4 GHz radio, the default is Auto, which means that the radio automatically
selects the most suitable channel. When you select a particular channel, the channel
selection becomes static. For the 5 GHz radio, the default channel depends on the
region.
6. Click the Apply button.
Your settings are saved. The radio or radios restart and WiFi clients might need to
reconnect.
Change the WiFi throughput mode for a
radio
By default, all types of WiFi clients can access a WiFi network on the AP. The AP supports
WiFi throughput modes 802.11ax, 802.11ac, 802.11a, 802.11n, 802.11g, and 802.11b.
You can change the WiFi throughput mode for a radio to better suit your WiFi
environment. However, in doing so, you might limit the speed that some WiFi clients
are capable of.
Change the WiFi throughput mode on model WAX202
To change the WiFi throughput mode for a radio on model WAX202:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
User Manual124Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. From the Mode menu for a radio, select the WiFi throughput mode:
•2.4 GHz mode: Select one of the following WiFi throughput modes for the
2.4 GHz radio:
-Up to 54 Mbps (11g): Legacy mode. This mode allows 802.11ax, 802.11n,
802.11g, 802.11b, devices to join the network but limits 802.11ax and 802.11n
devices to functioning at up to 54 Mbps.
-Up to 286 Mbps (11ax, HT20, 1024-QAM): Neighbor-friendly mode for
reduced interference with neighboring WiFi networks. This mode allows
802.11ax, 802.11n, 802.11g, and 802.11b devices to join the network but
limits 802.11ax and 802.11n devices to functioning at up to 286 Mbps.
This mode supports a 20 MHz–wide channel and 1024 quadrature amplitude
modulation (QAM).
-Up to 573 Mbps (11ax, HT40, 1024-QAM): Performance mode. This mode
allows 802.11ax, 802.11n, 802.11g, and 802.11b devices to join the network
and allows 802.11ax devices to function at up to 573 Mbps. This mode is the
default mode.
This mode supports a 40 MHz–wide channel and 1024 QAM.
•5 GHz mode: Select one of the following WiFi throughput modes for the 5 GHz
radio:
-Up to 286 Mbps (11ax, HT20, 1024-QAM): Legacy mode. This mode allows
802.11ax, 802.11ac, 802.11n, and 802.11a devices to join the network but
limits 802.11ax, 802.11ac, and 802.11n devices to functioning at up to
286 Mbps.
This mode supports a 20 MHz–wide channel and 1024 QAM.
-Up to 573 Mbps (11ax, HT40, 1024-QAM): Neighbor-friendly mode for
reduced interference with neighboring WiFi networks. This mode allows
802.11ax, 802.11ac, 802.11n, and 802.11a devices to join the network but
limits 802.11ax and 802.11ac devices to functioning at up to 573 Mbps.
This mode supports a 40 MHz–wide channel and 1024 QAM.
User Manual125Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
-Up to 1200 Mbps (80 MHz) (11ax, HT80, 1024-QAM): Performance mode.
This mode allows 802.11ax, 802.11ac, 802.11n, and 802.11a devices to join
the network and allows 802.11ax and 802.11ac devices to function at up to
1200 Mbps. This mode is the default mode.
This mode supports a 80 MHz–wide channel and 1024 QAM.
6. Click the Apply button.
Your settings are saved. The radio or radios restart and WiFi clients might need to
reconnect.
Change the WiFi throughput mode on model WAX206
To change the WiFi throughput mode for a radio on model WAX206:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
User Manual126Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5. From the Mode menu for a radio, select the WiFi throughput mode:
•2.4 GHz mode: Select one of the following WiFi throughput modes for the
2.4 GHz radio:
-Up to 54 Mbps (11g): Legacy mode. This mode allows 802.11ax, 802.11n,
802.11g, 802.11b, devices to join the network but limits 802.11ax and 802.11n
devices to functioning at up to 54 Mbps.
-Up to 346 Mbps (11ax, HT20, 256-QAM): Neighbor-friendly mode for
reduced interference with neighboring WiFi networks. This mode allows
802.11ax, 802.11n, 802.11g, and 802.11b devices to join the network but
limits 802.11ax devices to functioning at up to 346 Mbps.
This mode supports a 20 MHz–wide channel and 256 quadrature amplitude
modulation (QAM).
-Up to 800 Mbps (11ax, HT40, 256-QAM): Performance mode. This mode
allows 802.11ax, 802.11n, 802.11g, and 802.11b devices to join the network
and allows 802.11ax devices to function at up to 800 Mbps. This mode is the
default mode.
This mode supports a 40 MHz–wide channel and 256 QAM.
•5 GHz mode: Select one of the following WiFi throughput modes for the 5 GHz
radio:
-Up to 573 Mbps (11ax, HT20, 1024-QAM): Legacy mode. This mode allows
802.11ax, 802.11ac, 802.11n, and 802.11a devices to join the network but
limits 802.11ax and 802.11ac devices to functioning at up to 573 Mbps.
This mode supports a 20 MHz–wide channel and 1024 QAM.
-Up to 1147 Mbps (11ax, HT40, 1024-QAM): Neighbor-friendly mode for
reduced interference with neighboring WiFi networks. This mode allows
802.11ax, 802.11ac, 802.11n, and 802.11a devices to join the network but
limits 802.11ax devices to functioning at up to 1147 Mbps.
This mode supports a 40 MHz–wide channel and 1024 QAM.
-Up to 2400 Mbps (80 MHz) (11ax, HT80, 1024-QAM): Performance mode.
This mode allows 802.11ax, 802.11ac, 802.11n, and 802.11a devices to join
the network and allows 802.11ax and 802.11ac devices to function at up to
2400 Mbps. This mode is the default mode.
This mode supports a 80 MHz–wide channel and 1024 QAM.
6. Click the Apply button.
Your settings are saved. The radio or radios restart and WiFi clients might need to
reconnect.
User Manual127Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Change the CTS/RTS threshold and
preamble mode for a radio
For most WiFi networks, the CTS/RTS threshold and preamble mode work fine and we
recommend that you do not change the settings. (In general, these settings are intended
for WiFi testing.)
CAUTION: Do not change these settings unless directed by NETGEAR support or
unless you are sure what the consequences are. Incorrect settings might disable the
WiFi function of a radio unexpectedly.
IMPORTANT: If the smart connect feature is enabled, the CTS/RTS threshold and
preamble mode apply to both radios. That means that you cannot change the CTS/RTS
threshold and preamble mode for each radio individually.
To change the CTS/RTS threshold and preamble mode for a radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
User Manual128Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
5. Do one of the following:
•2.4 GHz radio: To change the settings for the 2.4 GHz radio, scroll down to the
Advanced Wireless Settings (2.4 GHz/b/g/n/ax) section.
•5 GHz radio: To change the settings for the 5 GHz radio, scroll down to the
Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section.
Note: If the smart connect feature is enabled (which it is by default), the page
presents a single option only in the Advanced Wireless Settings (2.4 GHz/b/g/n/ax
& 5 GHz 802.11a/n/ac/ax) section. In that situation, any change in the CTS/RTS
threshold or preamble mode applies to both radios simultaneously. If the smart
connect feature is disabled, you can change the CTS/RTS threshold and preamble
mode for each radio individually.
6. In the CTS/RTS threshold (1-2347) field, enter a value from 1 to 2437.
The default value is 2347.
7. Form the Preamble Mode menu, select the preamble mode:
•Automatic: The automatic option (which is the default option) lets the AP process
both long and short preambles.
•Long Preamble: A long transmit preamble might provide a more reliable
connection or a slightly longer range.
•Short Preamble: A short transmit preamble might give better performance.
CAUTION: Incorrect settings might disable the WiFi function for the selected radio
unexpectedly.
8. Click the Apply button.
Your settings are saved.
Change the transmission output power for
a radio
By default, the transmission output power of the AP is set at the maximum. If two or
more APs are operating in the same area and on the same channel, interference can
occur. In such a situation, you might want to decrease the transmission output power
for one or both radios. Make sure that you comply with the regulatory requirements for
total radio frequency (RF) output power in your country.
User Manual129Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
IMPORTANT: If the smart connect feature is enabled (which it is by default), any change
in the transmission output power applies to both radios. That means that you cannot
change the transmission output power for each radio individually.
To change the transmission output power for a radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Do one of the following:
•2.4 GHz radio: To change the settings for the 2.4 GHz radio, scroll down to the
Advanced Wireless Settings (2.4 GHz/b/g/n/ax) section.
•5 GHz radio: To change the settings for the 5 GHz radio, scroll down to the
Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section.
Note: If the smart connect feature is enabled, the page presents a single option in
the Advanced Wireless Settings (2.4 GHz/b/g/n/ax & 5 GHz 802.11a/n/ac/ax) section.
In that situation, any change in the transmission output power applies to both radios
simultaneously. If the smart connect feature is disabled, you can change the
transmission output power for each radio individually.
6. From the Transmit Power Control menu , select 100%,75%,50%,or25%.
User Manual130Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The default setting is 100%.
7. Click the Apply button.
Your settings are saved. The radio restarts and WiFi clients might need to reconnect.
Add a WiFi schedule for a radio
You can use this feature to turn off the WiFi signal from a radio at times when you do
not need a WiFi connection. For example, you might turn it off at night, for the weekend,
or for a holiday. You can add multiple schedules but only a single schedule can be active
for each radio.
Note: You can add a WiFi schedule only if the AP is connected to the Internet and
synchronizes its internal clock with a time server on the Internet. For more information
about whether the AP synchronizes its clock, see Time and Network Time Protocol server
on page 98.
IMPORTANT: If the smart connect feature is enabled (by default, it is not, unless you
enabled it during initial login), you can add a WiFi schedule that applies to both radios.
That means that you cannot add a WiFi schedule for each radio individually.
To add a WiFi schedule for a radio:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
User Manual131Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays. The lower part of the page is called the
Advanced Wireless Settings page. (As you scroll down on the page, the page name
changes.)
5. Do one of the following:
•2.4 GHz radio: To change the settings for the 2.4 GHz radio, scroll down to the
Advanced Wireless Settings (2.4 GHz b/g/n/ax) section.
•5 GHz radio: To change the settings for the 5 GHz radio, scroll down to the
Advanced Wireless Settings (5 GHz 802.11a/n/ac/ax) section.
Note: If the smart connect feature is enabled (by default, it is not, unless you enabled
it during initial login), the page presents a single option in the Advanced Wireless
Settings (2.4 GHz b/g/n/ax & 5 GHz 802.11a/n/ac/ax) section. In that situation, setting
up or changing a WiFi schedule applies to both radios simultaneously. If the smart
connect feature is disabled, you can set up or change a WiFi schedule for each radio
individually.
6. Click the Add a new period button.
The settings display for specifying when you want to turn off the WiFi signal.
7. Select times from the Start and End menus to set up a period to turn off the WiFi
signal for the selected radio and specify the recurrence pattern by selecting a radio
button and check boxes.
The start time and end time cannot be identical, even if they fall on different days.
For example, if you start the schedule at 12:00 midnight, you cannot end it on another
day at 12:00 midnight but you can end it at 11:30 p.m. or 12:30 a.m.
8. Click the Apply button.
Your settings are saved, the Advanced Wireless Settings page displays again, and
the new schedule shows in the table for the selected radio.
9. To enable a schedule immediately, do the following above the table,
a. In the table, select the radio button for the schedule.
The radio button for the schedule also lets you select the schedule if you want
to change (edit) or delete it.
b. Select the Turn off wireless signal by schedule check box.
10. Click the Apply button.
User Manual132Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Your settings are saved and the schedule becomes active. The WiFi signal is turned
off according to the schedule that you added.
Enable or disable MU-MIMO
Multiuser multiple input, multiple output (MU-MIMO) improves performance when
multiple MU-MIMO-capable WiFi clients transfer data at the same time. WiFi clients
must support MU-MIMO. This feature is enabled by default, but you can disable it.
Note: When MU-MIMO is enabled, Tx beamforming is automatically enabled and you
cannot disable it.
To enable or disable MU-MIMO:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Scroll down the bottom of the page.
6. Select or clear the Enable MU-MIMO check box.
Selecting this check box enables MU-MIMO. By default, MU-MIMO is enabled.
User Manual133Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
7. Click the Apply button.
Your settings are saved. The radios restart and WiFi clients might need to reconnect.
Enable or disable explicit beamforming
Explicit beamforming (which is the same as Tx beamforming) lets the AP actively track
WiFi clients and direct power to the AP antenna closest to the client.
With this technique, the AP uses information about the WiFi communication link with
clients to improve signal transmission to the clients. Explicit beamforming provides
better reception, range, and throughput while minimizing interference.
Explicit beamforming functions whether or not the client supports beamforming.
Note: When MU-MIMO is enabled, explicit beamforming is automatically enabled and
you cannot disable it.
To enable or disable explicit beamforming when MU-MIMO is disabled:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
The Wireless Settings page displays.
5. Scroll down the bottom of the page.
User Manual134Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6. Select or clear the Enable Tx Beamforming check box.
Selecting this check box enables explicit beamforming. (Tx beamforming is another
term for explicit beamforming.)
By default, MU-MIMO is enabled, and therefore explicit beamforming is also enabled.
If MU-MIMO is disabled, explicit beamforming is automatically enabled, but you can
disable it.
7. Click the Apply button.
Your settings are saved. The radios restart and WiFi clients might need to reconnect.
Enable or disable PMF
Protected Management Frames (PMF), according to the 802.11w standard, is a security
feature that protects unicast and multicast management frames from being intercepted
and changed for malicious purposes. PMF, which is enabled by default, requires devices
on the AP WiFi networks to support PMF. However, you can disable PMF, for example,
if your network includes many legacy WiFi clients that do not support PMF.
To enable or disable PMF:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED > Advanced Setup > Wireless Settings.
User Manual135Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The Wireless Settings page displays.
5. Scroll down the bottom of the page.
6. Select or clear the Disable PMF check box.
Selecting this check box disables PMF. By default, PMF is enabled and the check
box is cleared.
7. Click the Apply button.
Your settings are saved. The radios restart and WiFi clients might need to reconnect.
User Manual136Advanced WiFi and Radio
Features
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
11
Diagnostics and Troubleshooting
This chapter provides information to help you diagnose and solve problems you might
experience with the AP. If you do not find the solution here, visit the NETGEAR support
site at netgear.com/support for more product and contact information.
The chapter contains the following sections:
• Reboot the AP from the local browser UI
• Quick tips for troubleshooting
• Standard LED behavior when the AP is powered on
• Troubleshoot with the LEDs
• You cannot log in to the AP
• You cannot access the Internet [router mode]
• Troubleshoot your Internet connection [router mode]
• Troubleshoot the WiFi connectivity
• Changes are not saved
• Troubleshoot your network using the ping utility of your computer or mobile device
Note: In this chapter, we refer to the access point as the AP.
137
Reboot the AP from the local browser UI
You or NETGEAR technical support can reboot the AP from its local browser UI, either
locally or remotely, for example, if the AP seems to be unstable or is not operating
normally.
To reboot the AP from the local browser UI:
1. Connect your computer or mobile device to the AP in one of the following ways
•Connect directly to the AP’s WiFi network or LAN. (Applies to the AP in either
operation mode.)
•Connect to the same network that the AP is connected to. (Applies only if the AP
is operating in AP mode.)
2. Launch a web browser and enter http://www.routerlogin.net in the address field.
Instead, if you are connected to same network as the AP, enter the LAN IP address
that is assigned to the AP. For information about finding the IP address, see Find the
IP address of the AP when you cannot use routerlogin.net on page 34.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
5. In the Router Information pane, click the REBOOT button.
A pop-up warning window displays.
6. Click the Yes button.
The AP restarts.
User Manual138Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Quick tips for troubleshooting
Many common problems can be resolved by following our tips for troubleshooting.
Restart your AP network if the AP is in router mode
If the AP is in router mode and you must restart your network, follow this sequence:
1. Disconnect the AP from your broadband, cable, or DSL device, or from your Ethernet
outlet.
2. If your device is a modem, turn off and unplug the modem.
3. Turn off the AP.
4. If your device is a modem, plug in the modem and turn it on. Wait two minutes.
5. Reconnect the AP to your broadband, cable, or DSL device, or to your Ethernet
outlet.
6. Turn on the AP and wait two minutes.
Restart your AP if it is operating in AP mode
If the AP is operating in AP mode and you must restart it, follow this sequence:
1. Turn off the AP.
2. Turn on the AP and wait two minutes.
Check the Ethernet cable connections
Make sure that the Ethernet cables are connected correctly and securely plugged in:
•If the AP is operating in router mode (the default operation mode), make sure that
you connect the yellow WAN (Internet) port on the AP through an Ethernet cable to
a LAN port on your broadband, cable, or DSL device (a modem), or to your Ethernet
wall outlet.
•If the AP is operating in AP mode, make sure that you connect the yellow WAN
(Internet) port on the AP through an Ethernet cable to a LAN port on your broadband,
cable, or DSL device (a router), to your wall Ethernet outlet, to another existing router
in your network, or to a switch or hub that is located between the AP and the router.
•For any computer or device that you connect directly through an Ethernet cable to
the AP, make sure that you connect the Ethernet cable from the computer or device
to one of the LANs port on the AP.
User Manual139Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Check the WiFi settings of your computer or mobile device
If you connect over WiFi to the AP, make sure that the WiFi settings on your computer
or mobile device and the AP match exactly. If you did not change the SSID for the
Wireless 1 network, the AP’s default SSID is printed on the AP label. If you did not change
the passphrase (also referred to as network key or WiFi password), the unique default
passphrase is also printed on the AP label. The default security is WPA2-Personal [AES].
Note: If you set up an access control list on the AP, you must add each computer or
mobile device to the access control list (see Enable and manage network access control
on page 68).
The AP provides three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By default,
the Wireless 1 network is enabled and the other two WiFi networks are disabled. If the
Wireless 2 and Wireless 3 networks are enabled and you did not change the default
settings, you can access these networks as follows:
•Wireless 2: The default SSID is NETGEARXXXXXX-2, in which XXXXXX represents
the last six characters of the AP’s MAC address, and the default password is the
default password for the Wireless 1 network, as printed on the AP label.
•Wireless 3: The default SSID is NETGEARXXXXXX-3, in which XXXXXX represents
the last six characters of the AP’s MAC address, and the default password is the
default password for the Wireless 1 network, as printed on the AP label.
Check the DHCP network settings of your computer or
mobile device
Make sure that the network settings of the computer or mobile device with which you
want to connect to the AP are correct:
•Router mode: If the AP is operating in router mode (the default operation mode),
make sure that the IP address of your computer or mobile device is on the same
subnet as the LAN subnet of the AP. If you are using the default addressing scheme,
your device’s address is in the range of 192.168.1.2 to 192.168.1.254.
•AP mode: If the AP is operating in AP mode, the LAN subnet to which your computer
or device connects depends on the type of connection to the AP:
-Directly connected: If you are directly connected over WiFi or an Ethernet cable
to the AP network, make sure that the IP address of your computer or mobile
device is on the same subnet as the LAN subnet of the AP. If you are using the
default addressing scheme, your device’s address is in the range of 192.168.1.2
to 192.168.1.254.
-Connected to the same network but not directly connected: If you are not
directly connected to the AP, make sure that the IP address of your computer or
User Manual140Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
mobile device is on the same subnet as the LAN subnet of the existing network
router to which the AP is connected.
Most computers and mobile devices function as DHCP clients. If your computer or
mobile device does not, enable its DHCP client so that is can obtain an IP address
automatically using DHCP.
Standard LED behavior when the AP is
powered on
After you turn on power to the AP, verify that the following sequence of events occurs:
1. When power is first applied, verify that the Power LED is blinking amber.
2. After about two minutes, verify the following:
•The Power LED is solid green.
•The Internet LED is solid green.
•The 2.4 GHz WLAN LED is solid green, solid blue, or blinking blue.
•The 5 GHz WLAN LED is solid green, solid blue, or blinking blue.
•If a LAN device is connected to one of the LAN ports of the AP, the LAN LED is
solid or blinking green, or solid or blinking amber, depending on the speed of
the connection.
You can use the LEDs on the front panel of the AP for troubleshooting (see
Troubleshoot with the LEDs on page 141)
Troubleshoot with the LEDs
You can troubleshoot by checking the LEDs.
Power LED is off
This could occur for a number of reasons. Check the following:
•Make sure that the power adapter is securely connected to your AP and securely
connected to a working power outlet.
•Make sure that you are using the power adapter that NETGEAR supplied for this
product.
User Manual141Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Power LED does not turn green
When you turn on the AP, the Power LED blinks amber for about two minutes, after
which it lights solid green.
When the AP is upgrading firmware, the Power LED blinks amber temporarily and finally
lights solid green.
If the LED stays blinking amber five minutes after startup, or blinks amber at any other
time (not including a firmware upgrade), this indicates a problem with the AP. In that
situation, do the following:
•Restart the AP to see if it recovers. If the problem occurs again, try one more time.
•If the AP does not recover, press and hold the Reset button on the back to return
the AP to its factory default settings. For more information, see Use the Reset button
to return the AP to factory defaults on page 97. If the problem occurs again, try one
more time.
If the error persists, a hardware problem might be the cause. Contact NETGEAR technical
support at netgear.com/support/.
WAN (Internet) LED remains off [router mode]
If the AP is in its default router mode and the WAN (Internet) LED remains off, the AP
did not get an Internet connection. Check the following:
•Make sure that the Ethernet cable connection is secure at the yellow WAN port (not
at a LAN port) of the AP and at an Ethernet port on the broadband, cable, or DSL
device (a modem) or at your Ethernet wall outlet.
•Make sure that power is turned on to the connected broadband, cable, or DSL device.
When you connect the AP’s WAN port to a broadband, cable, or DSL device, use
the cable that was supplied with the device. This cable can be a standard
straight-through Ethernet cable or an Ethernet crossover cable.
•If the type of WAN connection of your broadband, cable, or DSL device is PPPoE or
requires a static IP address, make sure that you configured the Internet settings
correctly.
For more information, see Specify a PPPoE Internet connection that uses a login
[router mode] on page 45 or Specify a dynamic or fixed WAN IP address Internet
connection without a login [router mode] on page 43.
•Make sure that you completed the initial log-in process. For more information, see
Connect the AP to a modem and log in for the first time on page 30 or, if you are
connected to the local browser UI, see Use the Setup Wizard [router mode] on page
42.
User Manual142Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Make sure that your Internet service provider (ISP) is not experiencing an Internet
outage.
WAN (Internet) LED remains off [AP mode]
If the AP is operating in AP mode and the WAN (Internet) LED remains off, the AP did
not get an Internet connection. Check the following:
•Make sure that the Ethernet cable connection is secure at the yellow WAN port (not
a LAN port) of the AP and at an Ethernet port on your broadband, cable, or DSL
device (a router), another network router, a switch or hub that is connected to the
router, or your Ethernet wall outlet. In AP mode, do not connect the cable directly
to a device that functions as a modem.
•Make sure that power is turned on to the connected broadband, cable, or DSL device
or other network router and that the device is connected to the Internet.
When you connect the AP’s WAN port to your broadband, cable, or DSL device or
other network router, use a standard straight-through Ethernet cable or an Ethernet
crossover cable.
•Make sure that you completed the initial log-in process. For more information, see
Connect the AP to a routing device and log in for the first time on page 26.
•If the broadband, cable, or DSL device (a router) or other network router to which
the AP is connected does not function as a DHCP server (this is very unusual), make
sure that another DHCP server in the network is active. The AP functions as a DHCP
client and must receive an IP address from a network router or a DHCP server.
•Make sure that your Internet service provider (ISP) is not experiencing an Internet
outage.
One or both WLAN LEDs are off
If the 2.4 GHz WLAN LED, the 5 GHz WLAN LED, or both WLAN LEDs remains off, check
to see if the radios on the AP are disabled (see Enable or disable a WiFi radio on page
61). By default, both radios are enabled and the WLAN LEDs light solid green without
clients, solid blue with clients, and blinking blue while processing client ttraffic.
Also, check to see if a WiFi schedule turned off one or off both radios (see Add a WiFi
schedule for a radio on page 131).
A LAN LED is off while a device is connected
If a LAN LED remains off while a powered-on device is connected, check these items:
•Make sure that the Ethernet cable connectors are securely plugged in at the AP and
the network device.
User Manual143Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Make sure that the connected network device is actually turned on.
•Make sure that you are using the correct Ethernet cable. Use a standard Category
5 Ethernet patch cable. If the network device incorporates Auto Uplink™ (MDI/MDIX)
ports, you can use either a crossover cable or a normal patch cable.
You cannot log in to the AP
If you are unable to log in to the AP’s local browser UI from a computer or mobile device,
troubleshooting depends on whether the AP is in the default router mode or AP mode.
You cannot log in to the AP [router mode]
If the AP is in router mode and you are unable to log in to its local browser UI from a
computer or mobile device on the AP network, check the following:
•Make sure that the yellow WAN port on the AP is connected to the Internet through
your broadband, cable, or DSL device (a modem) or your Ethernet wall outlet. The
WAN (Internet) LED must light solid green or blinking green.
•Make sure that the computer or mobile device that you are using is connected to
the AP.
•Check the Ethernet or WiFi connection between your computer or mobile device
and the AP:
-Connect over Ethernet directly to the AP: If you connect the LAN port on your
computer directly to the AP, check the Ethernet cable between the computer
and the LAN port on the AP. (Do not connect your computer to the yellow WAN
port on the AP.)
-Connect over WiFi: If you are using a WiFi-enabled computer or mobile device,
check the WiFi connection between the computer or device and the AP. If you
did not change the SSID and WiFi password for the Wireless 1 network, the default
SSID and WiFi password are printed on the AP label.
•Make sure that you are using the correct login information.
Use the user name admin and your customized local device password, also referred
to as the admin password. When you used the Setup Wizard for the initial log-in
process on the AP, you customized the local device password. The user name and
password are case-sensitive. Make sure that Caps Lock is off when you enter this
information.
•Make sure that you log in using http://www.routerlogin.net (which, in router mode,
is the same as http://www.routerlogin.com and http://192.168.1.1).
User Manual144Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Make sure that the IP address of your computer or mobile device is on the same
subnet as the LAN subnet of the AP. If you are using the default addressing scheme,
your device’s address is in the range of 192.168.1.2 to 192.168.1.254. Most computers
and mobile devices function as DHCP clients. If your computer or mobile device
does not, enable its DHCP client so that is can obtain an IP address automatically
using DHCP.
Note: Some versions of Windows and Mac OS generate and assign an IP address
if a device cannot reach a DHCP server. These autogenerated addresses are in the
range of 169.254.x.x. If your IP address is in this range, check the connection from
the device to the AP and reboot your device.
•Try quitting the browser and launching it again.
•Clear your browsing data.
•Make sure that Java, JavaScript, or ActiveX is enabled in your browser. If you are
using Internet Explorer, click the Refresh button to be sure that the Java applet is
loaded.
You cannot log in to the AP [AP mode]
If the AP is operating in AP mode and you are unable to log in to its local browser UI
from a computer or mobile device, check the following:
•Make sure that the yellow WAN port on the AP is connected to the Internet through
your broadband, cable, or DSL device (a router), another network router, a switch
or hub that is connected to the router, or your Ethernet wall outlet. The WAN (Internet)
LED must light solid green or blinking green.
•Make sure that the computer or mobile device that you are using is connected to
the AP or the same network as the AP.
•Check the Ethernet or WiFi connection between your computer or mobile device
and the AP:
-Connect over Ethernet directly to the AP: If you connect the LAN port on your
computer directly to the AP, check the Ethernet cable between the computer
and the LAN port on the AP. (Do not connect your computer to the yellow WAN
port on the AP.)
-Connect over WiFi: If you are using a WiFi-enabled computer or mobile device,
check the WiFi connection between the computer or device and the AP. If you
did not change the SSID and WiFi password for the Wireless 1 network, the default
SSID and WiFi password are printed on the AP label.
Make sure that you are using the Wireless 1 network. By default, the Wireless 2
and Wireless 3 networks do not allow access to the local browser UI. For more
User Manual145Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
information, see Manage access to LAN ports and the local browser UI on page
58.)
Note: Connect over Ethernet to the same network: After you completed the initial
login-process, if you connect your computer to the same network as the AP, check
the Ethernet cable between your computer and the LAN port on either the network
router or the switch or hub.
•Make sure that you are using the correct login information.
Use the user name admin and your customized local device password, also referred
to as the admin password. When you used the Setup Wizard for the initial log-in
process on the AP, you customized the local device password. The user name and
password are case-sensitive. Make sure that Caps Lock is off when you enter this
information.
•If the AP’s IP address was changed and you cannot log in using
http://www.routerlogin.net but you do not know the current IP address, see Find
the IP address of the AP when you cannot use routerlogin.net on page 34.
•Make sure that the IP address of your computer or mobile device is on the correct
LAN subnet. Most computers and mobile devices function as DHCP clients. If your
computer or mobile device does not, enable its DHCP client so that is can obtain an
IP address automatically using DHCP. The LAN subnet to which your computer or
device connects depends on the type of connection to the AP:
-Directly connected: If you are directly connected over WiFi or an Ethernet cable
to the AP network, make sure that the IP address of your computer or mobile
device is on the same subnet as the LAN subnet of the AP. If you are using the
default addressing scheme, your device’s address is in the range of 192.168.1.2
to 192.168.1.254.
-Connected to the same network but not directly connected: If you are not
directly connected to the AP, make sure that the IP address of your computer or
mobile device is on the same subnet as the LAN subnet of the existing network
router to which the AP is connected.
Note: Some versions of Windows and Mac OS generate and assign an IP address
if a device cannot reach a DHCP server. These autogenerated addresses are in the
range of 169.254.x.x. If your IP address is in this range, check the connection from
the device to the AP and reboot your device.
•Try quitting the browser and launching it again.
User Manual146Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•Clear your browsing data.
•Make sure that Java, JavaScript, or ActiveX is enabled in your browser. If you are
using Internet Explorer, click the Refresh button to be sure that the Java applet is
loaded.
You cannot access the Internet [router mode]
If the AP is in router mode (the default operating mode) and you can log in to the AP’s
local browser UI but cannot get an Internet connection, check if the AP can obtain an
IP address from your Internet service provider (ISP).
Check the Internet WAN IP address [router mode]
If the AP is in router mode, unless your ISP provides a fixed IP address, the AP requests
an IP address from your ISP. You can determine whether the request was successful.
To check the Internet WAN IP address:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
5. In the Internet Port pane, click the CONNECTION STATUS button.
The Connection Status pop-up window displays.
Note: The information that displays depends on the type of Internet connection. If
the Internet connection is PPPoE, other information might display than if the Internet
connection is an IP address that the ISP assigns dynamically (the most common
situation).
User Manual147Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
6. Check to see that a valid IP address is shown in the IP address field.
If 0.0.0.0 is shown, the AP did not obtain an IP address from your ISP.
If the AP cannot obtain an IP address from the ISP, you might need to force your modem
to recognize the AP by restarting your network. For more information, see Restart your
AP network if the AP is in router mode on page 139.
If the AP is still unable to obtain an IP address from the ISP, the problem might be one
of the following:
•Your ISP might require a login program. Ask your ISP whether they require PPP over
Ethernet (PPPoE) or some other type of login.
•If your ISP requires a login, the login name and password might be set incorrectly.
•Your ISP might check for your computer’s host name. Assign the computer host
name of your ISP account as the account name (see Manually set up the AP Internet
connection [router mode] on page 43).
•If your ISP allows only one Ethernet MAC address to connect to Internet and checks
for your registered computer’s MAC address, do one of the following:
-Inform your ISP that you bought a new network device and ask them to use the
AP’s MAC address.
-Configure the AP to clone your registered computer’s MAC address.
If the AP obtained an IP address, but your computer or mobile device does not load
any web pages from the Internet, it might be for one or more of the following reasons:
•Your computer or mobile device might not recognize any DNS server addresses.
A DNS server is a host on the Internet that translates Internet names (such as www
addresses) to numeric IP addresses. Typically, your ISP provides the addresses of
one or two DNS servers for your use. If you entered a DNS address during the AP’s
configuration, reboot your computer or mobile device, and verify the DNS address.
You can configure your computer or mobile device manually with DNS addresses,
as explained in your operating system documentation.
•The AP might not be configured as the TCP/IP gateway on your computer ore mobile
device.
If your computer or mobile device obtains its information from the AP by DHCP,
reboot the computer or mobile device and verify the gateway address.
•You might be running login software that is no longer needed.
If your ISP provided a program to log you in to the Internet, you might no longer
need to run that software after installing your AP.
User Manual148Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Check or manually start the PPPoE connection [router
mode]
If the AP is in router mode and your ISP uses a PPPoE connection, you can check or
manually start the PPPoE connection.
To check or manually start the PPPoE connection:
1. Launch a web browser from a computer or mobile device that is connected to a WiFi
network or LAN port on the AP.
2. Enter http://www.routerlogin.net in the address field.
A login window displays.
If your browser displays a security warning, dismiss the warning. For more information,
see Dismiss a browser security warning on page 39.
3. Enter the AP local device password.
The local device password is the one that you specified. The local device password
is case-sensitive.
The BASIC Home page displays.
4. Select ADVANCED.
The ADVANCED Home page displays.
5. In the Internet Port pane, click the CONNECTION STATUS button.
The Connection Status pop-up window displays.
6. Check the information to see if your PPPoE connection is up and working.
If the AP is not connected, click the Connect button.
The AP continues to attempt to connect indefinitely.
7. If you cannot connect after several minutes, the AP might be set up with an incorrect
PPPoE login name, password, or service name, or your ISP might be experiencing
a provisioning problem.
Note: Unless you connect manually, the AP does not authenticate using PPPoE until
data is transmitted to the network.
User Manual149Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Troubleshoot your Internet connection
[router mode]
If the AP is in router mode and can obtain an IP address, but your computer or mobile
device is unable to load any web pages from the Internet, check the following:
•If you can log in to the AP’s local browser UI but you cannot get an Internet
connection, check if the AP can obtain an IP address from your ISP (see You cannot
access the Internet [router mode] on page 147).
•Your computer or mobile device might not recognize any DNS server addresses. A
DNS server is a host on the Internet that translates Internet names (such as www
addresses) to numeric IP addresses.
Typically, your ISP provides the addresses of one or two DNS servers for your use.
If you entered a DNS address during the AP’s configuration, restart your computer
or mobile device.
(Alternatively, you can configure your computer or mobile device manually with a
DNS address, as explained in the documentation for your computer or mobile device.)
•The AP might not be configured as the default gateway on your computer or mobile
device.
Reboot the computer or mobile device and verify that the AP address is listed by
your computer or mobile device as the default gateway address.
•You might be running login software that is no longer needed. If your ISP provided
a program to log you in to the Internet, you might no longer need to run that software
after installing the AP.
Troubleshoot the WiFi connectivity
If you are experiencing trouble connecting over WiFi to the AP, try to isolate the problem:
•Make sure that the WiFi settings in your WiFi device and AP match exactly.
For a device that is connected over WiFi, the WiFi network name (SSID) and WiFi
security settings of the AP and WiFi device must match exactly. If you did not change
the SSID for the Wireless 1 network, the AP’s default SSID is printed on the AP label.
If you did not change the passphrase (also referred to as network key or WiFi
password), the unique default passphrase is also printed on the AP label.
Note: If you set up an access control list on the AP, you must add each computer
or mobile device to the access control list (see Enable and manage network access
control on page 68).
User Manual150Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
The AP provides three WiFi networks (Wireless 1, Wireless 2, and Wireless 3). By
default, the Wireless 1 network is enabled and the other two WiFi networks are
disabled. If the Wireless 2 and Wireless 3 networks are enabled and you did not
change the default settings, you can access these networks as follows:
-Wireless 2: The default SSID is NETGEARXXXXXX-2, in which XXXXXX represents
the last six characters of the AP’s MAC address, and the default password is the
default password for the Wireless 1 network, as printed on the AP label.
-Wireless 3: The default SSID is NETGEARXXXXXX-3, in which XXXXXX represents
the last six characters of the AP’s MAC address, and the default password is the
default password for the Wireless 1 network, as printed on the AP label.
Note: To access the local browser UI of the AP, make sure that you are using the
Wireless 1 network. By default, the Wireless 2 and Wireless 3 networks do not allow
access to the local browser UI. For more information, see Manage access to LAN
ports and the local browser UI on page 58.
•Does the WiFi device that you are using find your WiFi network?
If not, check the WLAN LEDs on the AP. If a WLAN LED is off, the associated WiFi
radio is probably off too. For more information about the WiFi radios, see Enable or
disable a WiFi radio on page 61.
•If you disabled the AP’s SSID broadcast, your WiFi network is hidden and does not
display in your WiFi client’s scanning list. (By default, SSID broadcast is enabled.)
For more information, see Broadcast or hide the SSID for a WiFi network on page
56.
•Does your WiFi device support the security that you are using for your WiFi network?
For information about changing the WiFi security, see Set up or change an open or
secure WiFi network on page 49.
Tip: If you want to change the WiFi settings of the AP’s network, use a wired
connection to avoid being disconnected when the new WiFi settings take effect.
If your WiFi device finds your network but the signal strength is weak, check these
conditions:
•Is your AP too far from your WiFi device or too close? Place your WiFi device near
the AP but at least 6 feet (1.8 meters) away and see whether the signal strength
improves.
•Are objects between the AP and your WiFi device blocking the WiFi signal? For more
information, see Position the AP on page 9.
User Manual151Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Changes are not saved
If the AP does not save the changes that you make through the local browser UI, do the
following:
•When entering configuration settings, always click the Apply button before moving
to another page or tab, or your changes are lost.
•If the page in the local browser UI displays a Refresh button, click it. It is possible
that the changes occurred, but the old settings might be in the web browser’s cache.
Troubleshoot your network using the ping
utility of your computer or mobile device
Most network devices and routers contain a ping utility that can send an echo request
packet to a device that you select. The device then responds with an echo reply. You
can troubleshoot a network using the ping utility in your computer or mobile device
Test the LAN path from a Windows-based computer to the
AP
You can ping the AP from a Windows-based computer to verify that the path to your
AP is set up correctly. You can use a WiFi or wired connection to the AP, which can be
in router mode or AP mode.
To ping the AP from a Windows-based computer:
1. From the Windows toolbar, click the Start button and select Run.
2. In the field provided, type ping followed by the IP address of the AP, as in this
example:
ping www.routerlogin.net
3. Click the OK button.
You see a message like this one:
Pinging <IP address > with 32 bytes of data
If the path is working, you see this message:
Reply from < IP address >: bytes=32 time=NN ms TTL=xxx
If the path is not working, you see this message:
Request timed out
User Manual152Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
If the path is not functioning correctly, check to see if the following is correct:
•Correct LAN subnet?
Verify that the IP addresses and LAN subnet for the AP and your computer are correct.
For more information, see Check the DHCP network settings of your computer or
mobile device on page 140.
•Correct physical connections?
If you are using a wired connection to the AP, make sure that the Ethernet port on
your computer is connected to a LAN port on the AP.
If the AP and computer are connected through a switch or hub, make sure that the
link LEDs are lit for the switch ports that are connected to the AP and computer.
•Correct software?
If you are using a wired connection to the AP, verify that the Ethernet card driver
software and TCP/IP software are both installed and configured on your computer.
Test the path from a Windows-based computer to a remote
device [router mode]
For this task, the AP must be in router mode.
To test the path from a Windows-based computer that is connected to the AP to a
remote device:
1. From the Windows toolbar, click the Start button and select Run.
2. In the Windows Run window, type
ping -n 10 <IP address>
in which <IP address> is the IP address of a remote device such as your ISP DNS
server.
If the path is functioning correctly, messages display that are similar to those shown
in Test the LAN path from a Windows-based computer to the AP on page 152.
3. If you do not receive replies, check the following:
•The AP is listed as the default gateway for your computer. If DHCP assigns the IP
configuration of your computers, this information is not visible in your computer
Network Control Panel. Verify that the IP address of the AP is listed as the default
gateway.
•The network address of your computer (the portion of the IP address specified
by the subnet mask) is different from the network address of the remote device.
•Your modem is connected and functioning.
User Manual153Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
•If your ISP assigned a host name to your registered computer, use that host name
as the account name (see Manually set up the AP Internet connection [router
mode] on page 43).
•Your ISP might be rejecting the Ethernet MAC addresses of all but one of your
computers.
Many broadband ISPs restrict access by allowing traffic only from the MAC address
of your modem. Some ISPs additionally restrict access to the MAC address of a
single computer connected to that modem. If your ISP does this, configure your
router to “clone” or “spoof” the MAC address from the authorized computer.
User Manual154Diagnostics and
Troubleshooting
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Factory default settings
You can reset the AP to the factory default settings, which are shown in the following
table.
For more information about resetting the AP to its factory settings, see Factory default
settings on page 96.
Table 9. WAX202 AP and WAX206 AP factory default settings
Default SettingFeature
Login to the local browser UI
http://www.routerlogin.net or http://www.routerlogin.com (both of which are the
same as http://192.168.1.1)
If the AP is operating in AP mode and does not get an IP address from a DHCP
server in your network, the IP address is 192.168.1.1.
Login URL
admin (case-sensitive, nonconfigurable)Local login user name
password
However, for normal use, you do not need to enter this default password anywhere.
When you log in for the first time, you must specify a unique local device password.
Local device password
Operation modes
Enabled by default.Router mode
Disabled by default.AP mode
DHCP settings
Enabled as a WAN client in router mode. (LAN client in AP mode.)DHCP client
Enabled in router mode. (Disabled in AP mode.)DHCP server
WiFi networks and radios
Enabled for Wireless 1 network
Disabled for Wireless 2 and Wireless 3 networks
WiFi communication
Wireless 1 default network: A unique name that is printed on the AP label
Wireless 2 optional network: NETGEARXXXXXX-2
Wireless 3 optional network: NETGEARXXXXXX-3
For the Wireless 2 and Wireless 3 default SSIDs, XXXXXX represents the last six
digits of the MAC address of the AP:
SSID names
WPA2 Personal [AES]
The default WiFi passphrase is a unique passphrase that is printed on the AP label.
Security for the default
Wireless 1 network
WPA2 Personal [AES]
The default WiFi passphrase is the same default passphrase of the Wireless 1
network. This passphrase is printed on the AP label.
Security for the optional
Wireless 2 and Wireless 3
networks
User Manual156Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 9. WAX202 AP and WAX206 AP factory default settings (Continued)
Default SettingFeature
North America: United States
Europe: Europe
Other continents: Varies by region
Country/region
2.4 GHz: Auto. The available channels depend on the region.
5 GHz: The default channel and available channels depend on the region.
Channel
Up to 600 Mbps at 2.4 GHz
Up to 1200 Mbps at 5 GHz
Throughput can vary. Network conditions and environmental factors, including
volume of network traffic, building materials and construction, and network overhead,
affect the data throughput rate.
WiFi throughput mode
model WAX202
Up to 800 Mbps at 2.4 GHz
Up to 2400 Mbps at 5 GHz
Throughput can vary. Network conditions and environmental factors, including
volume of network traffic, building materials and construction, and network overhead,
affect the data throughput rate.
WiFi throughput mode
model WAX206
Enabled (applies to each single network)SSID broadcast
Disabled for the Wireless 1 network
Enabled for the Wireless 2 and Wireless 3 networks
Client isolation
Enabled for the Wireless 1 network
Disabled for the Wireless 2 and Wireless 3 networks
Access to wired ports
Enabled (applies to all networks together)SSID isolation
2347CTS/RTS threshold
Long PreamblePreamble mode
100%Radio transmission power
Enabled802.11ax (11AX)
DisabledODMFA
DisabledSmart connect
Enabled (applies to the 2.4 GHz radio only)20/40 MHz coexistence
EnabledMU-MIMO
EnabledTx beamforming
Enabled (configurable for the 5 GHz radio only; not configurable for the 2.4 GHz
radio)
PMF
Security
DisabledAccess control
User Manual157Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 9. WAX202 AP and WAX206 AP factory default settings (Continued)
Default SettingFeature
Enabled in router modePort Scan and DoS
Protection
Disabled in router modeRespond to Ping on Internet
Port
None (applies to router mode)DMZ server
Disabled (applies to router mode)IGMP proxying
Secured (applies to router mode)NAT filtering
Technical specifications model WAX202
The following table shows the technical specifications for model WAX202. For more
information, see the product data sheet, which you can download by visiting
netgear.com/support/download/.
Table 10. WAX202 AP specifications
DescriptionFeature
12V, 1.5A (18W)
The plug is localized to the country of sale.
Power consumption 17W maximum
Power adapter
6.7 x 2.5 x 9.5 in. (170 x 63 x 242 mm)Dimensions (L x W x H)
1.1 lb (497 g)Weight
32ºF to 104ºF (0°C to 40°C)Operating temperature
10 to 90% maximum relative humidity, noncondensingOperating humidity
–4°F to 158°F (–20ºC to 70ºC)Storage temperature
5 to 95% maximum relative humidity, noncondensingStorage humidity
One 10/100/1000BASE-T Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X)WAN (Internet)
Three 10/100/1000BASE-T Ethernet (RJ-45) ports with Auto Uplink (Auto MDI-X)LAN
User Manual158Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 10. WAX202 AP specifications (Continued)
DescriptionFeature
IEEE 802.11ax
IEEE 802.11ac
IEEE 802.11n 2.0
IEEE 802.11g
IEEE 802.11b
IEEE 802.11a
WiFi standards
2.4 GHz and 5 GHz, concurrent operationRadio bands
Up to 600 Mbps at 2.4 GHz
Up to 1200 Mbps at 5 GHz
Throughput can vary. Network conditions and environmental factors, including
volume of network traffic, building materials and construction, and network overhead,
affect the data throughput rate.
Maximum theoretical WiFi
throughput
The AP can support a maximum of 64 WiFi clients:
In a WiFi network, the actual number of clients might be limited by the amount of
WiFi traffic that is generated by each client.
Maximum number of
supported clients
The AP can support a maximum of 40 concurrent devices.Maximum number of
concurrent devices
US: 2.412–2.462 GHz
Europe: 2.412–2.472 GHz
Australia: 2.412–2.472 GHz
Operating frequency range
2.4 GHz band
US: 5.180–5.240 + 5.745–5.825 GHz
Europe: 5.180–5.700 GHz
Australia: 5.180–5.320 + 5.500–5.825 GHz
Operating frequency range
5 GHz band
WPA2 Personal [AES]
WPA-Personal [TKIP] + WPA2-Personal [AES]
WPA/WPA2 Enterprise
WPA3- Personal
802.11 security
CB IEC60950-1
CE LVD EN62368-1
Safety certification
User Manual159Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Technical specifications model WAX206
The following table shows the technical specifications for model WAX206. For more
information, see the product data sheet, which you can download by visiting
netgear.com/support/download/.
Table 11. WAX206 AP specifications
DescriptionFeature
12V, 2.5A (30W)
The plug is localized to the country of sale.
Power consumption 20W maximum
Power adapter
6.7 x 2.5 x 9.5 in. (170 x 63 x 242 mm)Dimensions (L x W x H)
1.1 lb (497 g)Weight
32ºF to 104ºF (0°C to 40°C)Operating temperature
10 to 90% maximum relative humidity, noncondensingOperating humidity
–4°F to 158°F (–20ºC to 70ºC)Storage temperature
5 to 95% maximum relative humidity, noncondensingStorage humidity
One 2.5GBASE-T Ethernet (RJ-45) port with Auto Uplink (Auto MDI-X)WAN (Internet)
Four 10/100/1000BASE-T Ethernet (RJ-45) ports with Auto Uplink (Auto MDI-X)LAN
IEEE 802.11ax
IEEE 802.11ac
IEEE 802.11n 2.0
IEEE 802.11g
IEEE 802.11b
IEEE 802.11a
WiFi standards
2.4 GHz and 5 GHz, concurrent operationRadio bands
Up to 800 Mbps at 2.4 GHz
Up to 2400 Mbps at 5 GHz
Throughput can vary. Network conditions and environmental factors, including
volume of network traffic, building materials and construction, and network overhead,
affect the data throughput rate.
Maximum theoretical WiFi
throughput
The AP can support a maximum of 128 WiFi clients:
In a WiFi network, the actual number of clients might be limited by the amount of
WiFi traffic that is generated by each client.
Maximum number of
supported WiFi clients
The AP can support a maximum of 60 concurrent devices.Maximum number of
concurrent devices
User Manual160Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206
Table 11. WAX206 AP specifications (Continued)
DescriptionFeature
US: 2.412–2.462 GHz
Europe: 2.412–2.472 GHz
Australia: 2.412–2.472 GHz
Operating frequency range
2.4 GHz band
US: 5.180–5.240 + 5.745–5.825 GHz
Europe: 5.180–5.700 GHz
Australia: 5.180–5.320 + 5.500–5.825 GHz
Operating frequency range
5 GHz band
WPA2 Personal [AES]
WPA-Personal [TKIP] + WPA2-Personal [AES]
WPA/WPA2 Enterprise
WPA3- Personal
802.11 security
CB IEC60950-1
CE LVD EN62368-1
Safety certification
User Manual161Factory Default Settings and
Technical Specifications
WiFi 6 AX1800/AX3200 Dual Band Wireless Access Points, WAX202 and WAX206