NETGEAR ProSAFE WNDAP380R User manual

350 East Plumeria Drive
San Jose, CA 95134
USA
May 2013
202-11230-01
ProSAFE Dual Band Wireless-N
Access Point with RFID Support,
WNDAP380R
Reference Manual

2
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
Support
Thank you for selecting NETGEAR products.
After installing your device, locate the serial number on the label of your product and use it to register your product
at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support.
NETGEAR recommends registering your product through the NETGEAR website. For product updates and web
support, visit http://support.netgear.com.
Phone (US & Canada only): 1-888-NETGEAR.
Phone (Other Countries): Check the list of phone numbers at
http://support.netgear.com/general/contact/default.aspx.
Trademarks
NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of
NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change
without notice. © NETGEAR, Inc. All rights reserved.
Revision History
Publication
Part Number Publish Date Comments
202-11230-01 May 2013 First publication

3
Contents
Chapter 1 Introduction
About the ProSAFE Dual Band Wireless-N Access Point with RFID Support,
WNDAP380R . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
What Is in the Box? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Key Features and Standards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Supported Standards and Conventions . . . . . . . . . . . . . . . . . . . . . . . . . .8
Key Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
802.11b/g/n and 802.11a/n Standards–Based Wireless Networking. . .10
Autosensing Ethernet Connections with Auto Uplink . . . . . . . . . . . . . . .11
Hardware Description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Top Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Rear Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Bottom Panel with Product Label . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Chapter 2 Installation and Basic Configuration
What You Need Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Wireless Equipment Placement and Range Guidelines. . . . . . . . . . . . .15
Ethernet Cabling Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
LAN Configuration Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Hardware Requirements for Computers on Your LAN . . . . . . . . . . . . . .16
Requirements for Entering IP Addresses. . . . . . . . . . . . . . . . . . . . . . . .16
Install and Configure the Wireless Access Point . . . . . . . . . . . . . . . . . . . .16
Connect the Wireless Access Point to a Computer . . . . . . . . . . . . . . . .17
Log In to the Wireless Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . .18
Configure Basic General System Settings and Time Settings . . . . . . . .20
Configure the IP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Configure the Optional DHCP Server. . . . . . . . . . . . . . . . . . . . . . . . . . .23
Configure the Basic Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . .24
Test Basic Wireless Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Mount the Wireless Access Point. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Ceiling Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Wall Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
Desk Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Chapter 3 Wireless Configuration and Security
Before You Configure Wireless Security . . . . . . . . . . . . . . . . . . . . . . . . . .40
Wireless Data Security Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42

4
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
Security Profile Concepts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Write Down Your Wireless Network Settings . . . . . . . . . . . . . . . . . . . . .44
Configure and Enable Security Profiles . . . . . . . . . . . . . . . . . . . . . . . . .46
Configure RADIUS Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Restrict Wireless Access by MAC Address . . . . . . . . . . . . . . . . . . . . . . . .57
Schedule the Wireless Radios to Be Turned Off . . . . . . . . . . . . . . . . . . . .60
Configure Basic Wireless Quality of Service . . . . . . . . . . . . . . . . . . . . . . .60
Chapter 4 Management
Enable Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
SNMP Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Secure Shell and Telnet Management. . . . . . . . . . . . . . . . . . . . . . . . . .65
Upgrade the Wireless Access Point Software . . . . . . . . . . . . . . . . . . . . . .66
Web Browser Upgrade Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . .67
TFTP Server Upgrade Procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
Manage the Configuration File or Reset to Factory Defaults . . . . . . . . . . .69
Save the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69
Restore the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70
Restore the Wireless Access Point to the Factory Default Settings. . . .70
Reboot the Wireless Access Point without Restoring the
Default Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72
Change the Administrator Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
Enable the Syslog Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .73
Enable Rogue AP Detection and Monitor Access Points. . . . . . . . . . . . . .74
Enable and Configure Rogue AP Detection. . . . . . . . . . . . . . . . . . . . . .74
View and Save Access Point Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . .76
Chapter 5 Advanced Configuration
Configure Spanning Tree Protocol and 802.1Q VLANs. . . . . . . . . . . . . . .80
Configure Hotspot Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81
Configure Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . .82
Configure Advanced Quality of Service Settings . . . . . . . . . . . . . . . . . . . .85
Configure Wireless Bridging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88
Configure a Point-to-Point Wireless Network. . . . . . . . . . . . . . . . . . . . .88
Configure a Point-to-Multipoint Wireless Network . . . . . . . . . . . . . . . . .93
Configure the Wireless Access Point to Repeat the Wireless
Signal Using Point-to-Multipoint Bridge Mode . . . . . . . . . . . . . . . . . . . .98
Configure RFID Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
Enable the RFID Module and Configure the RFID Server . . . . . . . . . .103
Monitor the RFID Module, Server, and Traffic . . . . . . . . . . . . . . . . . . .104
Reboot or Reset the RFID Module. . . . . . . . . . . . . . . . . . . . . . . . . . . .106
Chapter 6 Monitoring
View System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
Monitor Wireless Clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

5
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
View the Activity Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Traffic Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114
Chapter 7 Troubleshooting
Basic Functioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117
Verify the Correct Sequence of Events at Startup . . . . . . . . . . . . . . . .117
No LEDs Are Lit on the Wireless Access Point . . . . . . . . . . . . . . . . . .117
The Active LED or the LAN LED Is Not Lit . . . . . . . . . . . . . . . . . . . . . .118
The WLAN LED Is Not Light. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
You Cannot Access the Internet or the LAN from a
Wireless-Capable Computer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118
You Cannot Configure the Wireless Access Point from a Browser . . . . .119
When You Enter a URL or IP Address a Time-Out Error Occurs. . . . . . .120
Troubleshoot a TCP/IP Network Using the Ping Utility. . . . . . . . . . . . . . .120
Test the LAN Path to Your Wireless Access Point. . . . . . . . . . . . . . . .120
Test the Path from Your Computer to a Remote Device . . . . . . . . . . .121
Problems with Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
Troubleshoot the RFID Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
Appendix A Supplemental Information
Technical Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125
Factory Default Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .127
Appendix B Command-Line Reference
Index

6
1
1. Introduction
This chapter introduces the NETGEAR® ProSAFE® Dual Band Wireless-N Access Point with
RFID Support, WNDAP380R, and describes some of the key features. The chapter includes the
following sections:
•About the ProSAFE Dual Band Wireless-N Access Point with RFID Support,
WNDAP380R
•What Is in the Box?
•System Requirements
•Key Features and Standards
•Hardware Description
Note: For more information about the topics covered in this manual, visit
the support website at http://support.netgear.com.
Note: Firmware updates with new features and bug fixes are made
available from time to time at downloadcenter.netgear.com. Some
products can regularly check the site and download new firmware,
or you can check for and download new firmware manually. If the
features or behavior of your product do not match what is described
in this guide, you might need to update your firmware.

Introduction
7
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
About the ProSAFE Dual Band Wireless-N Access
Point with RFID Support, WNDAP380R
The ProSAFE Dual Band Wireless-N Access Point with RFID Support, WNDAP380R, going
forward in this manual referred to as the wireless access point, is a powerful building block of
a wireless LAN infrastructure. It provides concurrent 2.4 GHz 802.11b/g/n and
5 GHz 802.11a/n connectivity between wired Ethernet networks and radio-equipped wireless
notebook systems, desktop systems, print servers, and other devices. Support for two
transmit radio chains and two receive radio chains, also referred to as 2x2 multiple input,
multiple output (MIMO), can increase wireless throughput considerably.
The wireless access point provides wireless connectivity to multiple wireless network devices
within a fixed range or area of coverage, including multiple radio-frequency identification
(RFID) tags and devices. Typically, an individual in-building wireless access point provides a
maximum connectivity area with about a 500-foot radius. The wireless access point can
support a maximum of 128 clients (64 for the 2.4 GHz radio and 64 for the 5 GHz radio) in a
range of several hundred feet. The throughput is shared between all clients. To meet the
required coverage, throughput, and quality of your wireless network, install a sufficient
number of wireless access points.
The wireless access point acts as a bridge between the wired LAN and wireless clients.
Connecting multiple wireless access points through a wired Ethernet backbone can further
increase the wireless network coverage. As a mobile computing device moves out of the
range of one wireless access point, it moves into the range of another. As a result, wireless
clients can freely roam from one wireless access point to another and still maintain a
seamless connection to the network.
The autosensing capability of the wireless access point allows packet transmission at up to
300 Mbps, or at reduced speeds to compensate for distance or electromagnetic interference.
What Is in the Box?
The product package contains the following items:
•ProSAFE Dual Band Wireless-N Access Point with RFID Support, WNDAP380R
•Straight through Category 5 Ethernet cable
•Power adapter and cord (12V, 1A)
•Wall-mount kit
•Installation guide
If any parts are missing or damaged, contact your reseller or customer support in your area.
Visit the NETGEAR website at http://support.netgear.com/general/contact/default.aspx for
the telephone number of customer support in your area. Keep the installation guide, along
with the original packing materials. If you need to return the wireless access point for repair,
use the packing materials to repack the wireless access point.

Introduction
8
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
System Requirements
Before installing the wireless access point, make sure that your system meets these
requirements:
•A 10/100/1000 Mbps local area network device such as a hub or switch.
•The Category 5 UTP straight-through Ethernet cable with RJ-45 connector included in the
package, or one like it.
•A 100–120V, 50–60 Hz AC power source.
•A computer with the TCP/IP protocol installed and a web browser for configuration, such
as Microsoft Internet Explorer 8.0 or later, or Mozilla Firefox 18.0 or later.
•If you use radio-frequency identification (RFID) tags and devices, a computer that
functions as an RFID server.
Key Features and Standards
This section includes the following subsections:
•Supported Standards and Conventions
•Key Features
•802.11b/g/n and 802.11a/n Standards–Based Wireless Networking
•Autosensing Ethernet Connections with Auto Uplink
The wireless access point is easy to use and provides solid wireless and networking support.
It also offers a wide range of security options.
Supported Standards and Conventions
The wireless access point supports the following standards and conventions:
•Standards compliance.The wireless access point complies with the IEEE 802.11a/b/g
standards for wireless LANs and is Wi-Fi certified for 802.11n standard.
•WPA and WPA2. The wireless access point provides WPA and WPA2 enterprise-class
strong security with RADIUS and certificate authentication as well as dynamic encryption
key generation. The WPA-PSK and WPA2-PSK pre-shared key authentication does not
have the overhead of RADIUS servers but provides the strong security of WPA.
•Multiple BSSIDs. The wireless access point supports multiple BSSIDs. When a wireless
access point is connected to a wired network and a set of wireless clients, it is called a
basic service set (BSS). The basic service set identifier (BSSID) is a unique identifier
attached to the header of packets sent over a WLAN that differentiates one WLAN from
another when a mobile device tries to connect to the network.
The multiple BSSID feature allows you to configure up to 16 SSIDs (8 per radio) on your
wireless access point and assign different configuration settings to each SSID.All the

Introduction
9
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
configured SSIDs are active, and the network devices can connect to the wireless access
point by using any of these SSIDs.
•DHCP server and client.The DHCP server of the wireless access point can provide a
dynamic IP address to wireless clients. The wireless access point can also act as a client
and obtain an IP address from a DHCP server on the LAN.
•SNMP.The wireless access point supports Simple Network Management Protocol
(SNMP) for Management Information Base (MIB) management.
•STP. The wireless access point supports Spanning Tree Protocol (STP).
•802.1Q VLAN.A network of computers can behave as if they are connected to the same
network even though they might actually be physically on different segments of a LAN.
Virtual LANs (VLANs) are configured through software rather than hardware, which
makes them very flexible. VLANs are very useful for user and host management,
bandwidth allocation, and resource optimization.
Key Features
The wireless access point provides solid functionality, including the following features:
•Dual band. The wireless access point can operate concurrently in the 2.4 GHz and
5 GHz bands.
•Multiple operating modes:
-Wireless access point. The wireless access point operates as a standard
802.11b/g/n and 802.11a/n access point for clients.
-Point-to-point bridge. The wireless access point communicates with another access
point that functions in bridge mode. You can use this mode with or without client
association.
-Point-to-multipoint bridge. The wireless access point is the master for a group of
access points that function in bridge mode, that send all traffic to the master, and that
do not communicate directly with each other. You can use this mode with or without
client association.
-Repeating the wireless signal. The wireless access point does not function as an
access point for clients but functions only in point-to-multipoint bridge mode to repeat
the wireless signal and send all traffic to a remote access point.
•WMM. Wi-Fi Multimedia (WMM) is a subset of the 802.11e standard. WMM allows
wireless traffic to have a range of priorities, depending on the kind of data.
Time-dependent information, like video or audio, has a higher priority than normal traffic.
For WMM to function correctly, wireless clients also need to support WMM.
•QoS. Quality of Service (QoS) support lets you configure parameters that affect traffic
flowing from the wireless access point to the client station and traffic flowing from the
client station to the wireless access point.
•Hotspot support. You can allow all HTTP (TCP, port 80) requests to be captured and
redirected to the URL you specify.
•Rogue AP detection.RogueAP filtering ensures that unknown APs are not given
access to any part of the secured wireless and wired LAN.

Introduction
10
ProSAFE Dual Band Wireless-NAccess Point with RFID Support, WNDAP380R
•Access control.MAC address filtering can ensure that only trusted wireless clients can
use the wireless access point to gain access to the wireless and wired LAN.
•Security profiles.When using multiple BSSIDs, you can configure unique security
settings (encryption, SSID, and so on) for each BSSID.
•Hidden mode. The SSID is not broadcast, assuring that only clients configured with the
correct SSID can connect.
•Telnet and SSH command-line Interface. Using an application such as PuTTY, you can
access the wireless access point over a Telnet or Secure Shell (SSH) connection and use
the command-line interface (CLI) to configure the wireless access point.
•Upgradeable firmware. Firmware is stored in flash memory. You can upgrade it easily,
using only your web browser, and you can upgrade it remotely. You can also use the
command-line interface.
•Configuration backup. Configuration settings can be backed up to a file and restored.
•Secure and economical operation. Adjustable power output allows more secure or
economical operation.
•PoE support. Using Power over Ethernet (PoE), any 802.3af-compliant midspan or
end-span sources can supply power to the wireless access point over the Ethernet port.
The wireless access point can receive all required power on one Ethernet port from a
single PoE source.
•Autosensing Ethernet connection with Auto Uplink™ interface. Connects to
10/100/1000 Mbps IEEE 802.3 Ethernet networks.
•LED indicators. Power/Test, Active, LAN, and WLAN for each radio mode are easily
identified.
•VLAN security profiles. Each security profile is automatically allocated a VLAN ID when
the security profile is modified.
802.11b/g/n and 802.11a/n Standards–Based Wireless
Networking
The wireless access point provides a bridge between wired Ethernet LANs and 802.11b/g/n-
and 802.11a/n-compatible wireless LAN networks. It provides connectivity between wired
Ethernet networks and radio-equipped wireless notebook systems, desktop systems, print
servers, RFID tags, and other devices.
In addition, the wireless access point supports the following wireless features:
•Aggregation support
•Reduced InterFrame spacing support
•2 x 2 multiple input, multiple output (MIMO) support
•Distributed coordinated function (CSMA/CA, back-off procedure, ACK procedure,
retransmission of unacknowledged frames)
•RTS/CTS handshake
•Beacon generation