NETGEAR WG102-500 Reference Manual

San Jose, CA 95134 USA WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point Reference Manual

© 2009 by NETGEAR, Inc. All rights reserved. Technical Support Please refer to the support information card that shipped with your product. By registering your product at http://www.netgear.com/register, we can provide you with faster expert technical support and timely notices of product and software upgrades. NETGEAR, INC. Support Information Phone: 1-888-NETGEAR, for US & Canada only. For other countries, see your Support information card. E-mail: [email protected] North American NETGEAR website: http://www.netgear.com Trademarks NETGEAR, the NETGEAR logo, ProSafe, and Auto Uplink are trademarks or registered trademarks of NETGEAR, Inc. Microsoft, Windows, Windows NT and Vista are registered trademarks of Microsoft Corporation.Other brand and product names are registered trademarks or trademarks of their respective holders. Statement of Conditions In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to make changes to the products described in this document without notice. NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Product and Publication Details Model Number: WG102-500, WGAP150 Publication Date: February 2009 Product Family: Wireless Access Point Product Name: WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point Home or Business Product: Business Language: English Publication Part Number: 202-10477-01 Publication Version Number: 1.0

iii v1.0, February 2009 WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point Reference Manual About This Manual Conventions, Formats, and Scope .................................................................................... v How to Use This Manual .................................................................................................. vi How to Print This Manual ................................................................................................. vi Revision History ................................................................................................................vii Chapter 1 Introduction and Installation Introduction and Scope ...................................................................................................1-1 Product Features ............................................................................................................1-1 Package Contents ..........................................................................................................1-2 Wireless Access Point Overview ....................................................................................1-2 Installation ......................................................................................................................1-4 Installation Procedure ..............................................................................................1-4 Quick Start ................................................................................................................1-7 Recommendations for Placement of the Wireless Access Point .............................1-8 Chapter 2 Configuration System Settings ..............................................................................................................2-1 General Settings ......................................................................................................2-1 L2TP Tunnel Settings ...............................................................................................2-3 Security Settings ......................................................................................................2-4 Radius Server Settings ............................................................................................2-5 802.11 b/g Profile .....................................................................................................2-6 Advanced Settings ..........................................................................................................2-6 Wireless Settings .....................................................................................................2-7 Neighbor AP Discovery, Ethernet Settings, and Scheduled Tasks ..........................2-8 Wireless Networks Settings ............................................................................................2-9 Wireless Network Details .......................................................................................2-10 DHCP Server Parameters ...............................................................................2-12 DHCP Relay Parameters .................................................................................2-13 Static WEP Parameters ...................................................................................2-13 802.1x Parameters ..........................................................................................2-14 WPA Parameters .............................................................................................2-15

iv v1.0, February 2009 WDS Settings ...............................................................................................................2-17 Auto WDS Mode ....................................................................................................2-18 Manual WDS Mode ................................................................................................2-18 Chapter 3 Management SNMP Settings ...............................................................................................................3-1 SNMPv1 / SNMPv2 Communities ............................................................................3-2 SNMPv3 Users .........................................................................................................3-3 Web Admin Settings .......................................................................................................3-4 Change Web Access Settings ..................................................................................3-4 Change Admin Username or Change Admin Password ..........................................3-4 Disable Web Administration .....................................................................................3-4 Commands .....................................................................................................................3-5 Management Information ................................................................................................3-6 System Information ..................................................................................................3-6 Wireless Information ................................................................................................3-8 WDS Information ......................................................................................................3-9 Event Log .................................................................................................................3-9 Neighbor APs .........................................................................................................3-10 Per User VLAN tagging ................................................................................................3-10 Restoration of Factory Defaults ....................................................................................3-11 Chapter 4 Troubleshooting No lights are lit on the wireless access point ...........................................................4-1 The LAN light is not lit ..............................................................................................4-1 The Wi-Fi (WLAN activity) light is not lit during wireless activity ..............................4-1 You cannot configure the wireless access point from a browser .............................4-2 You cannot access the Internet or the LAN with a wireless-capable computer ......................................................................................4-2 Appendix A Specifications Technical Specifications ................................................................................................. A-1 Radius Server Setup ..................................................................................................... A-2 Appendix B Related Documents

About This Manual The NETGEAR® WG102-500, WGAP150 ProSafe® 802.11g Wireless Access Point Reference Manual describes how to install, configure and troubleshoot the WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point. The information in this manual is intended for readers with intermediate computer and Internet skills. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in the following paragraphs: • Typographical Conventions. This manual uses the following typographical conventions: • Formats. This manual uses the following formats to highlight special messages: Italic Emphasis, books, CDs, file and server names, extensions Bold User input, IP addresses, GUI screen text Fixed Command prompt, CLI text, code italic URL links Note: This format is used to highlight information of importance or special interest. Tip: This format is used to highlight a procedure that will save time or resources. Warning: Ignoring this type of note may result in a malfunction or damage to the equipment.

vi About This Manual v1.0, February 2009 • Scope. This manual is written for the wireless access point according to these specifications: For more information about network, Internet, firewall, and VPN technologies, see the links to the NETGEAR website in Appendix B, “Related Documents.” How to Use This Manual The HTML version of this manual includes the following: • Buttons, and , for browsing forward or backward through the manual one page at a time. • A button that displays the table of contents and a button that displays an index. Double-click a link in the table of contents or index to navigate directly to where the topic is described in the manual. • A button to access the full NETGEAR, Inc. online knowledge base for the product model. • Links to PDF versions of the full manual and individual chapters. How to Print This Manual To print this manual, you can choose one of the following options, according to your needs. • Printing a page from HTML. Each page in the HTML version of the manual is dedicated to a major topic. Select File > Print from the browser menu to print the page contents. Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. Product Version WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point Manual Publication Date February 2009 Note: Product updates are available on the NETGEAR, Inc. website at http://kbserver.netgear.com.

About This Manual vii v1.0, February 2009 • Printing from PDF. Your computer must have the free Adobe Acrobat reader installed in order to view and print PDF files. The Acrobat reader is available on the Adobe Web site at http://www.adobe.com. – Printing a PDF chapter. Use the PDF of This Chapter link at the top left corner of any page. • Click the PDF of This Chapter link at the top left corner of any page in the chapter you want to print. The PDF version of the chapter you were viewing opens in a browser window. • Click the print icon in the upper left of your browser window. – Printing a PDF version of the complete manual. Use the Complete PDF Manual link at the top left corner of any page. • Click the Complete PDF Manual link at the top left corner of any page in the manual. The PDF version of the complete manual opens in a browser window. • Click the print icon in the upper left corner of your browser window. Revision History Tip: If your printer supports printing two pages on a single sheet of paper, you can save paper and printer ink by selecting this feature. Part Number Version Number Date Description 202-10477-01 1.0 February 2009 Initial publication of this Reference Manual

viii About This Manual v1.0, February 2009

Introduction and Installation 1-1 v1.0, February 2009 Chapter 1 Introduction and Installation Introduction and Scope The WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point is a carrier-grade 802.11b/g Wi-Fi access point with a centralized management system. It is a powerful solution for building wireless networks for wireless Internet service, wholesalers and enterprises. Each wireless access point is loaded with essential features such as Multiple SSID (virtual AP with distinct ESSID and BSSID), VLAN, and a high-gain antenna. One wireless access point can masquerade up to 16 different access points. Each virtual access point can have its own security policy (such as WPA, WPA2, etc.) and authentication mechanism (such as 802.1x, open, captive portal, etc), to facilitate building your wholesale network much faster, easier and more cost-effective than ever before. A wireless access point comes with a high-power Wi-Fi transmitter which greatly enhances coverage and performance. This manual applies to the ProSafe 802.11g Wireless Access Point indoor model WG102-500, WGAP150. Product Features Key features of the WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point are: • Designed for wholesale wireless networks with multiple SSID and VLAN support • Independent security policies and encryption mechanisms per virtual AP • Centralized managed via web based Central Management System (CMS) • High-power output enhances coverage and lowers cost of ownership • WMM (Wi-Fi Multimedia) and QoS (Quality of Service) Support • WDS (Wireless Distribution System) Support • Captive Portal Support • Mesh Connector Bridging

1-2 Introduction and Installation v1.0, February 2009 Package Contents The following items are the contents of a WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point indoor package: • A WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point unit • Power adapter and cord • Straight-through category 5 Ethernet cable • Resource CD for the Reference Manual • Installation Guide • Support registration card Wireless Access Point Overview The following figure shows a top view of the WG102-500, WGAP150: Figure 1-1

Introduction and Installation 1-3 v1.0, February 2009 The following figure shows a rear panel view of the WG102-500, WGAP150: Viewed from left to right, the rear panel of the WG102-500, WGAP150 provides the following: 1. Antenna. An RP-SMA connector for connecting the antenna. 2. LAN Connector. A 10/100BaseT Ethernet connector, normally to be connected to a back haul network. 3. Reset Button. A reset button to be depressed with a pin. Depress and hold for at lease 5 seconds to restore factory defaults. (For more information, see “Restoration of Factory Defaults” on page 3-11.) 4. Power Connector. A connector for 5 VDC power input, to be connected with the supplied power adaptor. Viewed from left to right, the WG102-500, WGAP150 has these four status LEDs: Power, Status, Ethernet, and Wi-Fi (also referred to as WLAN light or Wireless activity light): Figure 1-2 Table 1-1. Rear Panel LEDs LED Description Power Off – Power off On (Green) – Power on Status Off – The unit is initializing. Green – The unit is ready. LAN Off – The Ethernet port is not connected. On – The Ethernet port is connected. Wi-Fi Off – Wireless is not ready. On – Wireless is ready.

1-4 Introduction and Installation v1.0, February 2009 Installation A wireless access point functions as a bridge between a wireless and a wired Ethernet interface. A typical setup is as follows: Installation Procedure Figure 1-3 Tip: Before mounting the wireless access point in a high location, first set up and test the wireless access point to verify wireless network connectivity. Also, see “Recommendations for Placement of the Wireless Access Point” on page 1-8.

Introduction and Installation 1-5 v1.0, February 2009 Install the wireless access point and configure LAN and wireless access: 1. Unpack the box and verify the contents. 2. Attach the antenna to the antenna port on the rear panel of the wireless access point. 3. Prepare a computer with an Ethernet adapter. If this computer is already part of your network, record its TCP/IP configuration settings. Configure the computer with a static IP address of 192.168.0.210 and 255.255.255.0 as the subnet mask. 4. Connect an Ethernet cable from the wireless access point to the computer (point A in Figure 1-4). Securely insert the other end of the cable into the wireless access point Ethernet port (point B in Figure 1-4). The port could auto sense if the cable is straight-through or cross-over. 5. Turn on your computer, connect the power adapter to the wireless access point, and verify the following: Power: The power light on the wireless access point should be steady green. If the power light is not lit, check the connections, and check if the power outlet is controlled by a wall switch that is turned off. Status: The status light on the wireless access point should be blinking red while the wireless access point starts up. When the startup process is complete, the status light should be steady green to indicate that the wireless access point is ready. Figure 1-4 Tip: The wireless access point supports Power Over Ethernet (PoE). If you have a switch that provides PoE, you will not need to use the power adapter to power the wireless access point. This can be especially convenient when the wireless access point is installed in a high location far away from a power outlet. A B

1-6 Introduction and Installation v1.0, February 2009 LAN: The LAN light on the wireless access point should be blinking green. If it is not, make sure that the Ethernet cable is securely attached at both ends. Wi-Fi: The Wi-Fi light on the wireless access point should be blinking green when the wireless LAN (WLAN) is ready. 6. Configure the wireless access point Ethernet port for LAN access. • Connect to the wireless access point by opening your browser and entering http://192.168.0.229 in the address field. • When prompted, enter admin for the user name and password for the password, both in lower case letters. When you are logged in, the following main menu screen displays to facilitate further configuration of the wireless access point. (For details about the system information settings, see “System Information” on page 3-6.) Figure 1-5

Introduction and Installation 1-7 v1.0, February 2009 7. Using a computer with an 802.11g or 802.11b wireless adapter, verify connectivity by using a browser such as Internet Explorer or Mozilla Firefox to connect to the Internet, or check for file and printer access on your network. In order to connect to the Internet, your network must include a router that provides Internet access. Now that you have finished the setup steps, you are ready to place the wireless access point in its permanent position and to deploy the wireless access point in your network. (See “Recommendations for Placement of the Wireless Access Point” on page 1-8.) If needed, you can now reconfigure the computer you prepared in step 3 and used in step 6 back to its original TCP/IP settings. Quick Start By default, an access point is preset with SSID: NETGEAR_XXXX, where XXXX is the last 4 hex digits of the LAN MAC Address of the unit. The default access point bridges the Wi-Fi interface to the Ethernet port, with both encryption and VLAN tagging disabled. To access the backbone network connected via the Ethernet port of the unit, establish a session at the Wi-Fi interface with a Wi-Fi client. After establishing a Wi-Fi client session, information about the established Wi-Fi session appears at the Web Administration Interface of the wireless access point, under the section Information-> Wireless. Figure 1-6

1-8 Introduction and Installation v1.0, February 2009 Clicking on the link labeled Details causes the following screen to be displayed: Recommendations for Placement of the Wireless Access Point The following are recommendations for the placement of the wireless access point and the positioning of its antenna: • The best location for the wireless access point is elevated, such as wall mounted or on the top of a cubicle, at the center of your wireless coverage area, and within line of sight of all the mobile devices. • Vertical positioning of the antenna provides best side-to-side coverage. Horizontal positioning provides best top-to-bottom coverage. Figure 1-7

Configuration 2-1 v1.0, February 2009 Chapter 2 Configuration System Settings General Settings Upon selecting System under the Configure section from the navigation bar on the left of the main menu, the following screen is displayed to show the configuration options: Figure 2-1

2-2 Configuration v1.0, February 2009 Table 2-1 shows the general access point settings. Table 2-1. General Access Point Settings Field Descriptions AP Name A user-specified name for the access point. This value can be retrieved via SNMP. Location A user-specified name for the location of the access point. This value can be retrieved via SNMP. AP Mode This pulldown menu allows you to select the access point to run as a bridge or a router. When the access point runs as a router, the Management VLAN ID is ignored and the LAN settings appears for proper network setup. Domain Name The domain name can be set for wireless clients to have a readable name for both web management and captive portal redirection URLs. Server IP The unique IP address for the wireless access point to communicate on the Ethernet segment. This IP address is distinct from the admin IP address 192.168.0.3 on the Ethernet segment. There are two check boxes: • From DHCP. The IP address of the wireless access point is acquired from a DHCP server on the Ethernet segment. • Keep Default IP. The default IP address is available on the system along with the Server IP setting. Subnet Mask The subnet mask of the wireless access point. Default Gateway. The default gateway of the wireless access point. DNS Server The DNS server address to be used by the wireless access point for resolving host names. Management VLAN ID The VLAN from which management sessions are allowed. The establishment of management sessions is restricted to only the specified VLAN ID. If Management VLAN ID is set to zero, no VLAN restriction is applied. The default value of this setting is zero, which means no tagging is enabled (instead of tagged with zero). Timezone This pulldown menu allows you to select the time region for the wireless access point. NTP Server The Network Time Protocol (NTP) Server host name to be used for synchronizing the system clock of the wireless access point. The default value of this setting is pool.ntp.org. STP Select the STP check box to enable the Spanning Tree Protocol (STP) to prevent path redundancy. When the STP check box is selected, two more options are provided: Bridge Priority and Ethernet Path Cost. Bridge Priority The priority for root switch election. Ethernet Path Cost The best path from the switch to the root switch.

Configuration 2-3 v1.0, February 2009 L2TP Tunnel Settings Table 2-2 shows the general access point settings. Figure 2-2 Table 2-2. L2TP Tunnel Settings Field Descriptions L2TP Tunnel Select this check box to start the tunnel establishment from the access point to the server for centralized traffic management. L2TP Server Address The L2TP server IP address for the access point to connect to. L2TP/PPP Username The PPP username for tunnel authentication purpose. L2TP/PPP Password The PPP password for tunnel authentication purpose. Tunnel IP Address The unique IP address for the wireless access point to communicate over the tunnel. If you select the From DHCP check box, the IP address of the wireless access point is then acquired from a DHCP server over the tunnel. Tunnel Subnet Mask The subnet mask of the wireless access point over the tunnel. Tunnel Management VLAN The VLAN from which management sessions are allowed over the tunnel. The establishment of management sessions is restricted only to the specified VLAN ID. If the Management VLAN ID is set to zero, no VLAN restriction is applied. The default value of this setting is zero, which means that no tagging is enabled (instead of tagged with zero).

2-4 Configuration v1.0, February 2009 Security Settings Table 2-3 shows the security settings. Figure 2-3 Table 2-3. Security Settings Field Descriptions Layer 2 Communication Layer 2 is in reference to the second layer in the ISO (Open System Interconnect) model. Select this check box to allow clients on the same VLAN to communicate with each other directly. (Windows network resources browsing will be possible.) By default, Layer 2 Communication is enabled. Deselect this check box to prevent clients on the same VLAN, SSID or subnet from communicating directly with each other via Layer 2 protocols. In this case, traffic is passed on to upper communication layers. 802.1X Version These radio buttons allow selection between v1 and v2 of the 802.1x EAPOL: • v1. Both v1 and v2 clients can associate with the access point. • v2. Only v2 clients can associate with the access point. Most modern wireless clients support v2. In the event that there are stations that do not support v2, select the option v1. By default, the value of the setting is v2. Management from Wireless Clients With you select this check box, the Web Administration Interface is accessible from the Wi-Fi segment of wireless access point. By default, it is enabled. Syslog to Remote Server With you select this check box, logs are sent to an external Syslog server. By default, this option is disabled. Syslog Server Address / Port When you select Syslog to Remote Server check box (see above), you can enter the Syslog server IP address in this field and the port number in the Port field. By default, the port number is 514.

Configuration 2-5 v1.0, February 2009 Radius Server Settings Table 2-4 shows the Radius server settings. Figure 2-4 Table 2-4. Radius Server Settings Field Descriptions Primary Host The main Radius server for authentication and accounting. Secret The secret for accessing the Primary Host. Authentication Port The UDP port number for the authentication port of the Primary Host. Accounting Port The UDP port number for the accounting port of the Primary Host. Secondary Host The backup Radius server for authentication and accounting in the event that the Primary Host is unavailable. Secret The secret for accessing the Secondary Host. Authentication Port The UDP port number for the authentication port of the Secondary Host. Accounting Port The UDP port number for the accounting port of the Secondary Host. Maximum Retransmission The maximum number of retries for Radius authentication. Radius Request Interval The time interval in seconds between each Radius request attempt. Note that the request time interval is doubled fir every retransmission.

2-6 Configuration v1.0, February 2009 802.11 b/g Profile Table 2-5 shows the 802.11b/g profile settings. Advanced Settings The advanced settings provides more options to fine-tune the parameters on the system to achieve the optimal performance. Figure 2-5 Table 2-5. 802.11b/g Profile Settings Field Descriptions Radio Policy This pulldown menu allows you to make one of the following selections: • 802.11b/g. Also referred to as Mixed Mode. The wireless access point accepts both 802.11b and 802.11g client association requests. • 802.11b Only. The wireless access point accepts 802.11b client association requests only. • 802.11g Only. The wireless access point accepts 802.11g client association requests only. Country This pulldown menu allows you to specify the country/region. RF Channel This pulldown menu allows you to specify the 802.11 channel. The available options for 802.11b or 802.11g are from 1 to 11, and from 1 to 13 for the country setting of Default (US) and Europe, respectively. Tx Output Power This pulldown menu allows you to specify the transmission power. The available options are from 27 dBm to 18 dBm. By default, the Tx Output Power is 20 dBm. Note: Please make sure that you comply with the regulatory requirements for total RF output power in your country. Antenna Selection This menu selection applies only to outdoor antennas and is not applicable to the WG102-500, WGAP150.

Configuration 2-7 v1.0, February 2009 Wireless Settings Table 2-6 shows the 802.11b/g profile settings. Figure 2-6 Table 2-6. 802.11b/g Profile Settings Field Descriptions Beacon Rate This pulldown menu allows you to specify the beacon in different transmit bit rates: • 1Mbps. • 2Mbps. • 5.5Mbps. • 6Mbps. • 11Mbps. Beacon Interval This pulldown menu allows you to specify the time between each beacon transmission. DTIM Period The frequency for the beacon to include a Delivery Traffic Indication Message (DTIM) in milliseconds. RTS Threshold The minimum packet size for the unit to send an RTS using the RTS/CTS handshake. Setting to zero disables this feature. Slot Time The period before transmission occurs

2-8 Configuration v1.0, February 2009 Neighbor AP Discovery, Ethernet Settings, and Scheduled Tasks Table 2-7 shows the neighbor AP discovery, Ethernet, and scheduled task settings. ACK Timeout The period allowed for reception of an acknowledgement packet before retransmission occurs. CTS Timeout The period allowed for a CTS response in the RTS/CTS handshake. Figure 2-7 Table 2-7. Neighbor AP DIscovery, Ethernet, and Schedules Task Settings Field Descriptions Neighbor AP Discovery Neighbor AP Discovery Select this check box to enable the Neighbor AP Discovery feature. Scanning Interval The frequency with which the wireless access point accesses other channels to discover neighboring APs. Scanning Time The period during which the wireless access point scans another channel to discover neighboring APs. Table 2-6. 802.11b/g Profile Settings (continued) Field Descriptions

Configuration 2-9 v1.0, February 2009 Wireless Networks Settings When you select Wireless Networks under the Configure section on the navigation bar on the left, the general wireless network settings are displayed, which are shown in Table 2-8. Ethernet Settings Speed Select the Ethernet speed from the pulldown menu. Scheduled Tasks Reboot Based on the set schedule, the system reboots automatically. Auto Channel Selection Based on the set schedule, and when no clients are associated with the wireless access point, the system performs auto channel selection to avoid congested channels. Table 2-8. General Wireless Network Settings Field Descriptions WLAN SSID The SSID of the virtual Access Point. Default VLAN ID This setting specifies the VLAN ID to be tagged on all outgoing packets generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment, through the wireless access point to Ethernet segment via the LAN port). If 802.1x is enabled, a per-user VLAN ID can be specified in the authentication reply from the Radius server. If this is set, the value specified via Default VLAN ID will be overridden. Admin Status The status of the virtual AP: enabled or disabled. Security Policies The configured wireless authentication and encryption methods. BSSID The detailed BSSIDs Table 2-7. Neighbor AP DIscovery, Ethernet, and Schedules Task Settings (continued) Field Descriptions

2-10 Configuration v1.0, February 2009 Wireless Network Details To modify the settings for a virtual AP, click the Edit on the right of the desired WLAN SSID. Table 2-9 shows the wireless network details. Table 2-9. Wireless Network Details Field Descriptions Enable Select Yes to enable the virtual AP, or No to disable the virtual AP. By default, the virtual AP is enabled. WLAN SSID The SSID of the virtual AP to be scanned by Wi-Fi clients. The value is not case- sensitive. By default, the value is NETGEAR_XXXX, where the substring XXXX in the SSID is replaced by the last four hex digits of the LAN MAC address of the unit. Default VLAN ID The VLAN ID to be tagged on all outgoing packets generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment, through the wireless access point to Ethernet segment via the LAN port). If 802.1x is enabled and a per-user VLAN ID is specified in the authentication reply from the Radius server, then the value specified via Default VLAN ID will be overridden. The default value of this setting is 0. That means VLAN tagging is disabled (instead of tagged with zero). Broadcast SSID This setting specifies whether or not the ESSID of the virtual AP can be scanned by Wi-Fi clients. Note that the BSSID (i.e. the MAC address of the virtual AP) cannot be hidden from the scan. To associate with the virtual AP, clients must specify the correct ESSID upon association. Broadcast SSID is enabled by default. Multicast Filter The filtering of multicast network traffic to the wireless SSID. Multicast Rate The transmit rate for sending multicast network traffic. Data Rate Select one of the following two options: • Fixed. Forces all data packets to be transmitted into the selected transmit rate. • Auto. Automatically selects the best transmit rate with a condition to use the selected transmit rate as the minimum auto transmit rate. Default Quality of Service The 802.1p QoS value to be marked on all outgoing packets that are generated from the virtual AP (i.e. packets that travel from the Wi-Fi segment, through the wireless access point to Ethernet segment via the LAN port). If per-user or per-domain QoS value is specified, the Default Quality of Service value will be overridden. Possible values are Gold, Silver and Bronze.

Configuration 2-11 v1.0, February 2009 DHCP Server Type Select one of the following options: • None. DHCP requests are passed to the Ethernet segment, and are not processed by the wireless access point. • Relay. The wireless access point forwards DHCP requests to a specified DHCP server. This option prevents broadcast messages from being propagated on the Ethernet segment. Upon selecting this option, you are prompted to enter the DHCP server’s IP address. • Server. The wireless access point allocates and offers IP addresses locally. To enter the DHCP server parameters, see “DHCP Server Parameters” on page 2-12. Security Policy Select one of the following wireless authentication and encryption methods: • None. This selection disables encryption. • Static WEP. See “Static WEP Parameters” on page 2-13. • 802.1x. See “802.1x Parameters” on page 2-14. • WPA. See “WPA Parameters” on page 2-15. Maximum Associated Clients Limits the number of associations that are allowed to the SSID; a settings of zero is treated as unlimited associations. Access Control Allows access control trough MAC address filtering. Select one of the following options: • None. • Deny all except listed. • Accept all except listed. For more information, see “Access Control” on page 2-15. Alternative Radius Server Setting An alternative Radius settings for the SSID. When enabled, this setting overrides the Radius settings that are specified in the Radius Server Settings screen (see “Radius Server Settings” on page 2-5). Captive Portal Enables the captive portal capability on the access point to perform URL redirection with different authentication. For details on the other options, see “Captive Portal Settings” on page 2-16. Bandwidth Management Enables the settings to control upstream and downstream limits. Wireless Network Filter Enables the wireless access point to filter network traffic based on user-defined rules. Users can select MAC addresses, IP addresses, and protocols to create matching rules for either drop or accept policies. WMM Enables Wi-Fi Multimedia (WMM), also known as Wireless Multimedia Extensions (WME) on the wireless access point. Mesh Connector Bridging Enables the transparent bridging functionality to achieve true layer 2 transparency. Table 2-9. Wireless Network Details (continued) Field Descriptions

2-12 Configuration v1.0, February 2009 DHCP Server Parameters For the “DHCP Server Type” setting (see Table 2-9 on page 2-10), when you select Server, the DHCP Server Parameters screen displays. Table 2-10 shows the DHCP server settings. Figure 2-8 Table 2-10. DHCP Server Settings Field Descriptions IP Start Range The first address in the range of IP addresses to be assigned to DHCP clients. IP Stop Range The last address in the range of IP addresses to be assigned to DHCP clients. Subnet Mask The subnet mask to be used by DHCP clients. Broadcast Address The broadcast address to be used by DHCP clients. Gateway The default routing gateway to be used by DHCP clients. DNS 1 The IP address of the primary DNS server to be offered to DHCP clients. DNS 2 The IP address of the secondary DNS server to be offered to DHCP clients. DNS 3 The IP address of the tertiary DNS server to be offered to DHCP clients. Domain The domain name of the Wi-Fi segment. Lease Time The length of time throughout which an IP address of a DHCP client remains valid. Upon expiration of the lease time, the assigned IP address is no longer valid and renewal of the IP address assignment is required.

Configuration 2-13 v1.0, February 2009 DHCP Relay Parameters For the “DHCP Server Type” setting (see Table 2-9 on page 2-10), when you select Relay, the DHCP Relay Parameters screen displays. The DHCP Server IP field specifies the IP address of the DHCP server Static WEP Parameters For the “Security Policy” setting (see Table 2-9 on page 2-10), when you select Static WEP, the Static WEP Parameters screen displays. The configuration of the static WEP settings enables pre-shared WEP key encryption. Authentication is not supported by this method. The security level of this method is not very strong.Table 2-11 shows the DHCP server settings. Figure 2-9 Figure 2-10 Table 2-11. Static WEP Settings Field Descriptions Key Size This pulldown menu allows you to make one of the following selections: • 40 bits (64-bit WEP). • 104 bits (128-bit WEP). Key Format This pulldown menu allows you to make one of the following selections: • ASCII. • HEX.

2-14 Configuration v1.0, February 2009 802.1x Parameters For the “Security Policy” setting (see Table 2-9 on page 2-10), when you select 802.1x, the 802.1x Parameters screen displays. The configuration of 802.1x parameters enables Radius-based 802.1x authentication with a dynamic WEP key. Table 2-12 shows the 802.1x settings. Encryption Key Enter an encryption key value: • For ASCII format, a key length of either 5 or 13 characters. • For HEX format, a key length of either 10 or 26 characters. Shared Key Authentication Select this check box to enable shared key authentication. Open authentication is the default authentication. Figure 2-11 Table 2-12. 802.1x Settings Field Descriptions Key Size This pulldown menu allows you to make one of the following selections: • 40 bits (64-bit WEP). • 104 bits (128-bit WEP). Re-keying Period The length of time throughout which the broadcast key remains valid. Upon expiration of the re-keying period, the broadcast key is no longer valid and renewal of the broadcast key is required. The default is 14400 seconds (i.e. 4 hours). A value of 0 disables re-keying. Table 2-11. Static WEP Settings (continued) Field Descriptions

Configuration 2-15 v1.0, February 2009 WPA Parameters For the “Security Policy” setting (see Table 2-9 on page 2-10), when you select WPA, the WPA Parameters screen displays. The configuration of WPA parameters enables WPA-TKIP or WPA-AES:CCMP. To enable WPA and WPA-PSK, configure WPA-TKIP. To enable WPA2 and WPA2-PSK, configure WPA-AES:CCMP. When WPA or WPA2 is configured, Radius-based 802.1x authentication with TKIP encryption method is enabled. With this configuration, the Pre-Shared Key check box should be disabled.The security level of this method is very strong. When WPA-PSK or WPA2-PSK is configured, a pre-shared key, or Passphrase, is used for data encryption and authentication. With this configuration, the Pre-Shared Key check box should be enabled. The key (passphrase) length must be between 8 and 63 characters, inclusive. The security level of this method is also very strong. Access Control For the “Access Control” setting (see Table 2-9 on page 2-10), the Access Control screen allows you to control access through MAC address filtering. Figure 2-12 Figure 2-13

2-16 Configuration v1.0, February 2009 Captive Portal Settings For the “Captive Portal” setting (see Table 2-9 on page 2-10), the Captive Portal screen allows you to redirect URLs and configure authentication. Table 2-13 shows the Captive Portal settings. Figure 2-14 Table 2-13. Captive Portal Settings Field Descriptions Redirect URL The URL to be used to redirect the users. You can select HTTP or HTTPS. Authentication URL The URL to perform user authentication. You can select HTTP or HTTPS. Access Timeout The allowed access time. When access times out, users are redirected to the Redirect URL. Pass-through IPs The IPs that users can go to without redirection control. Authorized MAC Addresses The list of MAC addresses for which the authentication and redirection are bypassed. This option is particularly useful when devices do not have browser capability, such as wireless VoIP phones.

Configuration 2-17 v1.0, February 2009 WDS Settings Wireless distributed system (WDS) provides a way to link APs together when wired cabling is not preferable. WDS also extends the wireless coverage of the wireless network for the wireless clients. There are two options available: Auto and Manual. Authentication Method The method to perform user authentication. This pulldown menu allows you to make one of the following selections: • No Authentication. • Plain Key Authentication. • Shared Key Authentication. • RADIUS Authentication. Authentication Key The authentication key for regular and shared key authentication. Figure 2-15 Table 2-13. Captive Portal Settings (continued) Field Descriptions

2-18 Configuration v1.0, February 2009 Auto WDS Mode Table 2-14 shows the auto WDS mode settings. Manual WDS Mode Table 2-15 shows the manual WDS mode settings. Table 2-14. Auto WDS Mode Settings Field Descriptions Node Type This pulldown menu allows you to make one of the following selections: • Auto Detect. The wireless access point checks the connectivity to the default gateway via wired Ethernet to determine the node type. If there is connectivity to the default gateway, the wireless access point states its node type as gateway. Otherwise, the wireless access point states its node type as node. • Wired. The wireless access point must be wired to provide public network access to other wireless nodes. • Wireless. The wireless access point searches wirlessly for the best gateway or node in order to gain public network access. AES passphase The encryption passphase for AES encryption to secure the data between APs. Figure 2-16 Table 2-15. Manual WDS Mode Settings Field Descriptions Enable Select the Yes radio button to enable manual WDS. MAC Address The MAC address of the other AP to form a WDS link with. Security Policy For information about configuring Static WEP, see “Static WEP Parameters” on page 2-13.

Management 3-1 v1.0, February 2009 Chapter 3 Management SNMP Settings Upon selecting SNMP Server Settings from the navigation bar on the left side of the main menu, the following screen is displayed to enable the configuration of SNMP server settings: Table 3-1 shows the SNMP settings. Figure 3-1 Table 3-1. SNMP Settings Field Descriptions Server Name The name that identifies the SNMP server. The default name is Netgear. SNMPv1 Select the Enable check box to enable support for of SNMP version 1. SNMPv2 Select the Enable check box to enable support for of SNMP version 2. SNMPv3 Select the Enable check box to enable support for of SNMP version 3. SNMP Trap Select the Enable check box to enable SNMP traps.

3-2 Management v1.0, February 2009 SNMPv1 / SNMPv2 Communities By adding SNMPv1/v2 Communities, access rights can be controlled. Table 3-2 shows the SNMP community settings. Figure 3-2 Table 3-2. SNMPv1 and SNMPv2 Community Settings Field Descriptions Community Name This represents the password for receiving or setting SNMP values. IP Address The IP address from which the SNMP server can be accessed. IP Mask The IP mask from which the SNMP server can be accessed. Access Mode This pulldown menu allows you to select either Read Only or Read & Write to this community. Status Select the Enable radio button to enable this community.

Management 3-3 v1.0, February 2009 SNMPv3 Users By adding SNMPv3 users, access rights can be controlled. Table 3-3 shows the SNMPv3 user settings. Figure 3-3 Table 3-3. SNMPv3 User Settings Field Descriptions SNMPv3 User Name The user ID for the user who is allowed to access the SNMP agent. Authentication Protocol The protocol for authenticating the user. This pulldown menu allows you to make one of the following selections: • None. • HMAC-MD5. • HMAC-SHA. Authentication Password This option is shown only when you select HMAC-MD5 or HMAC-SHA as the authentication protocol. Only users who provide a correct password are granted the right to access the SNMP agent. Privacy Protocol The encryption method to be used in SNMPv3 communication. This pulldown menu allows you to select either None or CBC-DES. Privacy Password This option is shown only when you select CBC-DES as the privacy protocol. The privacy password is the key for decrypting the encrypted data. Access Mode This pulldown menu allows you to select either Read Only or Read & Write to this user. Status Select the Enable radio button to enable this user.

3-4 Management v1.0, February 2009 Web Admin Settings Upon selecting Web Admin Settings from the navigation bar on the left side of the main menu, the following screen is displayed to enable to configuration of the management interface settings: Change Web Access Settings Select Change Web Access Settings to configure the TCP port number of the secure web server. By default, the TCP port number is 443. Change Admin Username or Change Admin Password Select Change Admin Username or Change Admin Password to configure the administrator user name or password for entering the Web Admin interface. To change to the user name, enter the new user name into the Username input field. To change to the password, enter the same new password into the New Password and New Password (Retype) input fields. Disable Web Administration Select Disable Web Administration to disable access to the Web Admin interface. After being disabled, the Web Admin interface can be re-enabled using SNMP. Figure 3-4

Management 3-5 v1.0, February 2009 Commands Upon selecting Commands from the navigation bar on the left side of the main menu, the Commands screen is displayed: Table 3-4 shows the commands. Figure 3-5 Table 3-4. Commands Field Descriptions Save Current Configuration to Flash Changes made are not saved to the flash memory; as a result, the current configuration will be lost after a reboot. Select this radio button to make the current configuration persistent across reboots. Download Active Configuration Select this radio button to download the active configuration for backup purposes. Upload Configuration Select this radio button to upload the configuration from a back-up configuration file. The configuration changes become effective only after you have selected the Activate Changes radio button (see below). Upgrade Firmware Select this radio button to upload a firmware file for upgrading the wireless access point’s software. A reboot is required after upgrading the firmware.

3-6 Management v1.0, February 2009 Management Information System Information Activate Changes Select this radio button to activate saved changes. Note that the activation of changes does not save the current configuration to the flash memory. Download Debug Information File Select this radio button to download debugging information from the wireless access point. In the event of technical issues, to facilitate prompt resolution by technical support from NETGEAR, please send a debug file with the support request. Restore Factory Default Select this radio button to restore the configuration to factory default settings. Reboot AP Select this radio button to reboot the wireless access point. Figure 3-6 Table 3-4. Commands (continued) Field Descriptions

Management 3-7 v1.0, February 2009 Table 3-5 shows the system information settings. Table 3-5. System Information Settings Field Descriptions General System Information AP Name The name of the system entered in the configuration. Location The location entered in the configuration. Domain Name The domain name used for this system. Network IP Address The current IP address used on the system. Network Subnet Mask The current subnet mask used on the system. Software Versions The current firmware version running on the system. Serial Number The serial number of the device. Up Time The time since the system has booted up. System Time The time of day in respect to the time zone selected. Time Zone The time zone the system is using. Mac Address The LAN MAC address of the system. L2TP Tunnel Information Status The status of the L2TP service. Tunnel IP Address The IP address that is acquired in the established tunnel. Tunnel Netmask The subnet mask that is acquired in the established tunnel. Firmware/Flash Information Firmware Version The firmware version loaded into the flash partitions. Flash Status The firmware status on the flash partitions. Boot from The flash partition from which the system boots up. Firmware Upgrade Target The flash partition that is used for a firmware upgrade.

3-8 Management v1.0, February 2009 Wireless Information Table 3-6 shows the wireless information. Table 3-6. Wireless Information Field Descriptions General Wireless Information Name The system name. Number of WLANs The number of added SSIDs. Current Clients The number of associated clients. Current Channel The 802.11 channel the system is using. Connected Clients Information Manufacturer The manufacturer based on the MAC prefix. MAC address The client MAC address. WLAN SSID The SSID that the client is associated with. VID The VLAN ID used on the SSID. Type The radio mode of the client. Authentication The client authentication. Status The association status and the associated duration. Detail The link to the detailed screen of each client.

Management 3-9 v1.0, February 2009 WDS Information Table 3-7 shows the WDS information. Event Log Upon selecting Event Log from the navigation bar on the left side of the main menu, the system log is displayed. The system log is intended to provide information to aid troubleshooting in the event of operational issues. Table 3-7. WDS Information Field Descriptions Auto WDS Status Bssid The wireless MAC address of the Auto WDS node. Parent The parent node of the wireless node. Channel The channel of the existing Bssid. Level The hop level of the wireless node. State The state of the node: wired or wireless.

3-10 Management v1.0, February 2009 Neighbor APs Table 3-8 shows the neighbor APs information. Per User VLAN tagging The wireless access point supports VLAN tagging on per-client-session basis when 802.1x authentication is configured. The VLAN ID can be passed on from the Radius server. Table 3-8. Neighbor APs Information Field Descriptions Manufacturer The manufacturer based on the MAC prefix. SSID The ESSID of the scanned access point. Ch The channel of the scanned access point. RSSI The signal strength of the access point. Security The encryption type of the access point. BSSID The wireless MAC address of the access point. Last Seen The time stamp of the access point scanned. Status The state of the neighbor AP: up or down.

Management 3-11 v1.0, February 2009 The VLAN ID to be set on a client session is passed on from the Radius server in a vendor attribute in the Access-Accept response called Tunnel-Private-Group-ID. When the Tunnel-Private-Group-ID attribute is present, the default VLAN ID setting will be overwritten with the value of the attribute. Restoration of Factory Defaults The following procedure restores the settings of the wireless access point to factory defaults: 1. Power on the unit, and wait for 1 minute until the Status LED turns green. 2. Press and hold the reset button on the rear panel (see Figure 3-8) for at least 5 seconds, then release the reset button. 3. The Status LED will blink, and then the unit will automatically reboot. 4. Wait for 1 minute or until the Status LED turns green, upon which the settings of the wireless access point will have been restored to the factory defaults. By default, the unit will acquire an IP address from a DHCP server. Figure 3-7 Figure 3-8

3-12 Management v1.0, February 2009

Troubleshooting 4-1 v1.0, February 2009 Chapter 4 Troubleshooting Here are some tips for correcting simple problems you may have. No lights are lit on the wireless access point The wireless access point has no power: • Make sure the power cord is connected to the access point and plugged in to a working power outlet or power strip. • Make sure you are using the correct NETGEAR power adapter supplied with your access point. The LAN light is not lit There is a hardware connection problem: • Make sure the cable connectors are securely plugged in at the access point and the network device (hub, switch, or router). • Make sure the connected device is turned on. The Wi-Fi (WLAN activity) light is not lit during wireless activity The wireless access point’s antennas are not working: • If the Wi-Fi light remains off while the wireless access point is transmitting or receiving data, disconnect the Ethernet cable from PoE switch and then plug it in again. • Make sure the antennas are tightly connected to the wireless access point. • Contact NETGEAR if the Wi-Fi light remains off while the wireless access point is transmitting or receiving data.

4-2 Troubleshooting v1.0, February 2009 You cannot configure the wireless access point from a browser Check these items: • The wireless access point is properly installed, LAN connections are OK, and the unit is powered on. Check that the LAN port LED is green to verify that the Ethernet connection is OK. • If your computer uses a fixed (static) IP address, ensure that it is using an IP address in the range of the wireless access point. The wireless access point default IP address is 192.168.0.229 and the default subnet mask is 255.255.255.0. The wireless access point default setting is for a static IP address. • If the network where you are connecting it is using DHCP, configure it accordingly. You cannot access the Internet or the LAN with a wireless-capable computer There is a configuration problem. Check these items: • You may not have restarted the computer with the wireless adapter to have TCP/IP changes take effect. Restart the computer. • The computer with the wireless adapter may not have the correct TCP/IP settings to communicate with the network. Restart the computer and check that TCP/IP is set up properly for that network. The usual setting for Windows on the Network Properties is “Obtain an IP address automatically.” • The wireless access point’s default values may not work with your network. Check the wireless access point default configuration against the configuration of other devices in your network.

Appendix A Specifications Technical Specifications This appendix provides technical specifications for the WG102-500, WGAP150 ProSafe 802.11g Wireless Access Point. Power Specifications Power Over Ethernet (PoE) 802.3af Power Adapter 12V 1.5A Power Consumption ~12W Transmit Power 500mW Physical Specifications Dimensions (length x width x height) 147mm x 115mm x 40mm 5.79” x 4.53” x 1.58” Weight 420 gr. 0.93 lb. Environmental Specifications Operating temperature 0°C to 55°C 32°F to 131°F Operating humidity 15 to 90%

A-2 Specifications v1.0, February 2009 Radius Server Setup The wireless access point has been tested to be functional with Radiator version 3.9, using the EAP-TTLS protocol. For the wireless access point, configure the authentication protocol of the virtual access point to be WPA-AES:CCMP. For more information, see “WPA Parameters” on page 2-15. Figure A-1

Appendix B Related Documents This appendix provides links to reference documents you can use to gain a more complete understanding of the technologies used in your NETGEAR product. Document Link Windows XP and Vista Wireless Configuration Utilities http://documentation.netgear.com/reference/enu/winzerocfg/index.htm Internet Networking and TCP/IP Addressing http://documentation.netgear.com/reference/enu/tcpip/index.htm Wireless Communications http://documentation.netgear.com/reference/enu/wireless/index.htm Preparing a Computer for Network Access http://documentation.netgear.com/reference/enu/wsdhcp/index.htm Virtual Private Networking (VPN) http://documentation.netgear.com/reference/enu/vpn/index.htm Glossary http://documentation.netgear.com/reference/enu/glossary/index.htm

B-2 Related Documents v1.0, February 2009