NETGEAR WAX220 User manual

User Manual
Essentials WiFi 6 AX4200
Dual Band Multi-Gig Access Point
WAX220
NETGEAR, Inc.
350 E. Plumeria DriveNovember 2022
San Jose, CA 95134, USA202-12614-01

Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français
canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian French at
https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of Conformity, visit
https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the
device to your place of purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building connection
only.
Applicable to 6 GHz devices only: Only use the device indoors. The operation of 6 GHz
devices is prohibited on oil platforms, cars, trains, boats, and aircraft, except that
operation of this device is permitted in large aircraft while flying above 10,000 feet.
Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or
communications with unmanned aircraft systems.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
CommentsPublish DatePublication Part
Number
First publication.November 2022202-12614-01
2
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Contents
Chapter 1 Hardware Overview Model WAX220
Additional documentation...................................................................8
Unpack the AP.......................................................................................8
Top panel with LEDs.............................................................................8
Hardware interfaces...........................................................................10
Label.....................................................................................................12
Chapter 2 Installation and Initial Login
Set up the AP in your network...........................................................14
Set up the AP with a PoE+ network connection.........................14
Set up the AP with a non-PoE network connection...................15
Initial login process............................................................................16
Connect directly to the AP over WiFi and log in for the first
time..................................................................................................17
Connect to the AP over the LAN and log in for the first time....20
When to use aplogin.net and when to use the assigned IP
address................................................................................................23
Find the IP address of the AP............................................................24
Log in to the AP after you complete the initial login process.......25
Change the language........................................................................26
Join a user WiFi network on the AP.................................................26
Chapter 3 Manage the Wired Network Settings
Set a static IPv4 address.....................................................................29
Reenable the DHCP client of the AP................................................30
Use an existing management VLAN.................................................31
Chapter 4 Manage Basic WiFi Settings
User WiFi networks.............................................................................34
Set up or change a user WiFi network with WPA2 or WPA3
personal security............................................................................34
Set up or change an open user WiFi network............................36
Set up or change a user WiFi network with WPA2 or WPA3
enterprise security.........................................................................38
Set up or change a guest WiFi network......................................40
Management WiFi network...............................................................43
3

Change the password for the management WiFi network.......43
Disable the idle time-out for the management WiFi network...44
Disable the management WiFi network......................................45
Change the AP’s device name..........................................................46
Chapter 5 Manage Advanced WiFi Settings
Hide the name of a user WiFi network.............................................49
Isolate clients of a user WiFi network without exceptions.............50
Isolate clients of a user WiFi network and set exceptions.............51
Enable VLAN isolation for a user WiFi network and set a VLAN
ID...........................................................................................................53
Enable fast roaming...........................................................................54
Manage access to a user WiFi network based on a client’s MAC
address................................................................................................56
Manually block a WiFi client from a user WiFi network.................58
Remove a WiFi client from an access control list............................59
Set up a WiFi on/off schedule for a user WiFi network..................60
Change the DHCP server settings for guest WiFi networks..........62
Chapter 6 Manage the WiFi Radio Settings
Change the country and region of operation.................................66
Manage the channel high throughput mode.................................67
Manage the WiFi channels................................................................68
Manage the radio transmit power....................................................70
Change the minimum bit rate...........................................................71
Manage client limits...........................................................................72
Manage the multicast and unicast streams to WiFi clients............74
Manage the 802.11ax mode for the 2.4 GHz radio........................75
Enable band steering.........................................................................76
Chapter 7 Maintain the AP
Update the AP firmware....................................................................79
Check for new firmware and update the AP...............................79
Manage the firmware update settings........................................80
Manually update the AP firmware................................................81
Back up or restore the configuration file.........................................82
Back up the AP configuration settings........................................82
Restore the AP configuration settings.........................................83
Change the AP login password........................................................84
Manage the date and time settings.................................................86
Manage Universal Plug and Play......................................................87
Control the LEDs.................................................................................88
Restart the AP from the device UI.....................................................89
Schedule the AP to automatically restart.........................................90
4
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Reset the AP to factory default settings...........................................91
Chapter 8 Monitor the AP and its Network Connections
Display the AP device, memory, LAN, and WiFi status
information..........................................................................................95
Display the WiFi connections............................................................98
Display the CPU, user WiFi network, and LAN traffic loads........100
Scan for neighboring access points and WiFi routers.................102
Logs....................................................................................................103
View and manage the system log..............................................103
Set up a remote log server.........................................................105
Set up email alerts............................................................................106
Chapter 9 Perform Diagnostics and Troubleshooting
Send a ping.......................................................................................109
Send a traceroute request...............................................................110
Send a name server lookup request..............................................111
Perform a speed test for the connection to a WiFi client............112
Quick tips for WiFi troubleshooting...............................................113
Troubleshoot with the LEDs............................................................114
Power LED remains off................................................................115
2.4 GHz WLAN LED, 5 GHz WLAN LED, or both WLAN LEDs are
off...................................................................................................116
LAN LED is off in a setup with a power adapter......................116
Troubleshoot the WiFi connectivity...............................................116
A WiFi device cannot connect to the AP..................................117
You cannot connect to the management WiFi network.........118
Troubleshoot Internet browsing.....................................................119
You cannot log in to the AP over a LAN connection...................119
Changes are not saved in the device UI........................................120
Troubleshoot your network using the ping utility of your computer
or mobile device...............................................................................121
Test the LAN path from a Windows-based computer to the
AP...................................................................................................121
Test the path from a Windows-based computer to a remote
device............................................................................................122
Appendix A Factory Default Settings and Technical Specifications
Factory default settings...................................................................124
Technical specifications...................................................................126
Appendix B Mount the AP to a Wall or Ceiling
Mount the AP to a solid wall...........................................................129
Mount the AP to a T-bar..................................................................131
5
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Unmount the AP...............................................................................134
6
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

1
Hardware Overview Model WAX220
This manual is for the NETGEAR Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access
Point Model WAX220.
In this manual, we refer to this indoor, standalone model as the AP.
The AP provides 802.11ax high-performance WiFi connectivity for a small office/home
office. It supports dual-band concurrent WiFi 6 operations at 2.4 GHz and 5 GHz with a
combined throughput of 4.2 Gbps (about 1200 Mbps at 2.4 GHz and 3000 Mbps at
5 GHz).
A single 2.5 Gbps Multi-Gig PoE+ LAN port lets you connect the AP to a PoE+ (802.3at)
switch. If you use a regular switch, the AP requires a power adapter, which is supplied
with a WAX220PA SKU. (If you purchased a WAX220 SKU without an included power
adapter, you can purchase one separately.)
The chapter contains the following sections:
• Additional documentation
• Unpack the AP
• Top panel with LEDs
• Hardware interfaces
• Label
Note: For more information about the topics that are covered in this manual, visit the
support website at netgear.com/support/.
Note: Firmware updates with new features and bug fixes are made available from time
to time at netgear.com/support/download/. Enter your model number to check for and
download new firmware manually. If the features or behavior of your product does not
match what is described in this manual, you might need to update the firmware.
Note: In this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name). That is, when we refer to a WiFi network we mean an individual
SSID.
7

Additional documentation
The following documents are available at netgear.com/support/download/:
•Installation guides
•Data sheets
Unpack the AP
The package contains the following items:
•WAX220 AP
•Mounting plate with screw holes for mounting to a wall or ceiling with a 15/16 in.
(24 mm) T-bar
•Metal bracket with T-bar lock, lock screw, and 4 short screws
Use these parts to mount the AP to celing with a T-bar.
•2 Phillips head screws and anchors for mounting
Use these parts to mount the AP to a wall.
•Installation guide
Note: You power up the AP by connecting it to a PoE+ switch. Depending on the
product ordered, the package might also include a power adapter. If you ordered a
package without a power adapter, you can still order a power adapter as an option.
For information about the mounting options, see Mount the AP to a Wall or Ceiling on
page 128.
Top panel with LEDs
The LEDs that provide the status of the AP are located on the top panel of the AP.
User Manual8Hardware Overview Model
WAX220
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Figure 1. Top panel with LEDs
Table 1. LED descriptions
DescriptionLED Icon
Solid amber: The AP is starting. If the LED remains solid amber, the PoE power is not
at the required 802.3at (PoE+) level.
Power LED
Blinking amber: The firmware is being updated, or the AP cannot detect a DHCP server.
Solid green: The AP is powered on and ready.
Off: No power is supplied to the AP.
Solid green: The LAN/PoE+ port detects a 2.5 Gbps link with a powered-on device.LAN LED
Blinking green: The LAN/PoE+ port is processing traffic at 2.5 Gbps speed.
Solid amber: The LAN/PoE+ port detects a 1 Gbps or 100 Mbps link with a powered-on
device.
Blinking amber: The LAN/PoE+ port is processing traffic at 1 Gbps or 100 Mbps speed.
Off: Either no powered-on Ethernet device is connected to the LAN/PoE+ port, or, if a
powered-on Ethernet device is connected, no Ethernet link is detected.
User Manual9Hardware Overview Model
WAX220
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Table 1. LED descriptions (Continued)
DescriptionLED Icon
Solid green: The 2.4 GHz radio is operating without clients.2.4 GHz
WLAN LED
Solid blue: The 2.4 GHz radio is operating with clients.
Blinking blue: The 2.4 GHz radio is transmitting or receiving data.
Off: The 2.4 GHz WiFi radio is off.
Solid green: The 5 GHz radio is operating without clients.5 GHz
WLAN LED
Solid blue: The 5 GHz radio is operating with clients.
Blinking blue: The 5 GHz radio is transmitting or receiving data.
Off: The 5 GHz WiFi radio is off.
Note: For information about troubleshooting with the LEDs, see Troubleshoot with the
LEDs on page 114.
Hardware interfaces
The bottom panel of the AP has a LAN/PoE+ port, Reset button, and DC power connector
for an optional power adapter.
User Manual10Hardware Overview Model
WAX220
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Figure 2. Hardware interfaces
The bottom panel contains the following components:
•DC power connector. If you do not use a Power over Ethernet plus (PoE+) switch
to provide power to the AP, connect the power adapter to the DC power connector.
•Reset button. You can use the Reset button to restart the AP or to reset the AP to
its factory default settings. To restart the AP, press the Reset button for two seconds.
Pressing the Reset button for at least 11 seconds resets the AP to factory default
settings.
•LAN/PoE+ port. Connect the LAN/PoE+ Gigabit Ethernet RJ-45 port to a PoE+
switch, or if you use a power adapter, to a non-PoE switch (that is, a common switch).
The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps.
Note: If you do not use a power adapter, use a PoE+ (803.2.at) switch. If you use a
PoE (803.2.af) switch, the AP does not receive sufficient power for normal operation.
User Manual11Hardware Overview Model
WAX220
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Label
The AP label shows the serial number, MAC address, default WiFi network name (SSID)
for the management WiFi network, and network key (WiFi password) for the management
WiFi network.
The management WiFi network provides access to the device user interface (UI) only.
That is, the WiFi network is not intended for general WiFi clients access. (The user WiFi
networks are intended for general WiFi clients access.)
Figure 3. Label
User Manual12Hardware Overview Model
WAX220
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

2
Installation and Initial Login
This chapter describes how you can install and access the AP in your network and go
through the initial login process.
Note: When you log in to the AP, you connect to its device UI.
The chapter contains the following sections:
• Set up the AP in your network
• Initial login process
• When to use aplogin.net and when to use the assigned IP address
• Find the IP address of the AP
• Log in to the AP after you complete the initial login process
• Change the language
• Join a user WiFi network on the AP
13

Set up the AP in your network
The AP is intended to function as a WiFi AP in your existing network.
The following sections describe how you can set up the AP in your network:
• Set up the AP with a PoE+ network connection
• Set up the AP with a non-PoE network connection
To set up your AP, follow the procedure in one of these sections.
Set up the AP with a PoE+ network connection
You can connect the AP to a Power over Ethernet plus (PoE+) switch in your network.
The switch must be capable of providing PoE+ (802.3at) power and must be connected
to a network router that is connected to the Internet. If you use a PoE+ connection, the
AP does not require a power adapter.
Figure 4. Set up the AP with a PoE+ connection to your network
Note: The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps. The previous
figure shows a NETGEAR MS510TXPP switch, which supports speeds of 2.5 Gbps.
However, if your Internet connection, modem, or switch supports a maximum speed of
1 Gbps (which is a common speed), the AP LAN connection functions at 1 Gbps.
To set up the AP with a PoE+ connection to your network:
1. Connect an Ethernet cable to the LAN/PoE+ port on the AP.
2. Connect the other end of the Ethernet cable to a switch that is connected to your
network and to the Internet.
Connect the cable to a PoE+ port on a PoE+ (802.3at) switch. Do not use a PoE
(803.2.af) switch because the provided power is insufficient.
User Manual14Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

3. Check to see that the LEDs light.
DescriptionLED
The Power LED lights blinking amber.Power LED
The LAN LED lights solid green or solid amber, depending on the speed of
the link.
LAN LED
The 2.4 GHz WLAN LED lights solid green.2.4 GHz WLAN
LED
The 5 GHz WLAN LED lights solid green.5 GHz WLAN
LED
You can now access the AP for initial configuration (see Initial login process on page
16).
Set up the AP with a non-PoE network connection
You can connect the AP to a regular switch, that is, a non–Power over Ethernet (PoE)
switch in your network. The switch must be connected to a network router that is
connected to the Internet. If you use a regular switch, the AP requires a power adapter,
which is supplied for model WAX220PA. (For model WAX220, a power adapter is an
option that you can purchase.)
Figure 5. Set up the AP with a non-PoE connection to your network
User Manual15Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Note: The LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps. The previous
figure shows a NETGEAR MS510TXPP switch, which supports speeds of 2.5 Gbps.
However, if your Internet connection, modem, or switch supports a maximum speed of
1 Gbps (which is a common speed), the AP LAN connection functions at 1 Gbps.
To set up the AP with a non-PoE connection to your network:
1. Connect an Ethernet cable to the LAN/PoE+ port on the AP.
2. Connect the other end of the Ethernet cable to a switch that is connected to your
network and to the Internet.
3. Connect the power adapter to the AP and plug it into an electrical outlet.
4. Check to see that the LEDs light.
DescriptionLED
The Power LED lights blinking amber.Power LED
The LAN LED lights solid green or solid amber, depending on the speed of
the link.
LAN LED
The 2.4 GHz WLAN LED lights solid green.2.4 GHz WLAN
LED
The 5 GHz WLAN LED lights solid green.5 GHz WLAN
LED
You can now access the AP for initial configuration (see Initial login process on page
16).
Initial login process
During the initial login process, the AP presents its Welcome page. You must define
the AP login password for the AP’s device UI, set up the first user WiFi network, and
select the country or region in which you are using the AP (see the warnings below).
After you complete the initial-login process, if you want to log in to the device UI, the
AP no longer presents its Welcome page but a regular login page that lets enter your
AP login password.
User Manual16Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

For more information about the initial login process, see one of the following sections:
•Connect directly to the AP over WiFi and log in for the first time on page 17
•Connect to the AP over the LAN and log in for the first time on page 20
WARNING: Make sure that the country is set to the location where the device is
operating. You are responsible for complying with the local, regional, and national
regulations that are set for channels, power levels, and frequency ranges.
WARNING: It might not be legal to operate the AP in a region other than the regions
listed in the menu. If your country or region is not listed, check with your local government
agency.
Connect directly to the AP over WiFi and log in for the first
time
This section describes how to connect to the AP management WiFi network for the first
time and complete the initial configuration. When you power up your AP, the
management WiFi network becomes active. We recommend that you use a WiFi-enabled
computer or tablet to connect to the management WiFi network for setup.
Note: For security reasons, the management WiFi network turns off when inactive for
15 minutes. If this happens during setup, press the Reset button for 2 seconds to restart
the AP.
The AP supports two types of WiFi networks (SSIDs):
•Management WiFi network: The special purpose WiFi network that you use to
access the AP’s device UI to configure and manage the AP. You can use the QR code
or WiFi network information on the AP label to connect to the management WiFi
network. To protect your WiFi network security, the management WiFi network does
not let you connect to the Internet.
•User WiFi network: The WiFi network that provides general network access to
authenticated users. During set up, you must configure the first user WiFi network.
After you complete the initial setup process, you can configure up to three additional
WiFi networks (see User WiFi networks on page 34).
User Manual17Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

Figure 6. Connect directly to the AP over WiFi
The previous figure shows the AP connected to a switch, which is connected to a router
and the Internet. WiFi devices are directly connected to the AP.
To connect directly to the AP over WiFi and log in to the device UI for the first time:
1. Connect your computer or tablet to the AP’s management WiFi network (SSID) using
one of the following methods:
•Scan the QR code: Scan the QR code on the label to connect to the management
WiFi network.
•Connect manually: The default name of the management WiFi network is printed
on the AP’s label. The default network key (password) for WiFi access is also on
the AP label.
The management WiFi network name uses the format
“WAX220XXXXXX-CONFIG-ONLY,” in which XXXXXX represents the last six
characters of the MAC address of the AP’s LAN interface.
If you cannot get a WiFi connection to the AP, see You cannot connect to the
management WiFi network on page 118.
2. Launch a web browser and enter https://www.aplogin.net in the address field.
The Welcome page for the setup process displays.
If the Welcome page does not display but instead a security warning or a NETGEAR
page displays:
•Security warning: Your browser might display a security warning because of
the self-signed certificate on the AP, which is expected behavior. You can proceed,
or add an exception for the security warning. For more information, see
kb.netgear.com/000062980.
User Manual18Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

•NETGEAR page: If your browser redirects to a www.netgear.com page, your
computer or tablet is not connected to the AP’s management WiFi network, and
you must repeat the previous step.
3. Click the Next button.
The page that displays lets you set a new password for the device UI and the first
user WiFi network.
4. Configure the following settings:
a. In the AP Login New Password field, set a unique password for access to the
device UI, and confirm the password in the Confirm AP Login New Password
field.
Your password must meet the following conditions:
•Contains 8 to 32 characters
•At least one uppercase character
•At least one lowercase character
•At least one number
•At least one special character, such as the following characters:
@#$%^&*()!
b. In the Wireless Network (SSID) field, set a WiFi network name for the first user
WiFi network.
This SSID does not replace the management WiFi network
(WAX220XXXXXX-CONFIG-ONLY), which you can continue to use to log in over
a WiFi connection to the device UI of the AP.
c. In the Network Key (Password) field, set a WiFi password for the first user WiFi
network.
This WiFi password must be a minimum of 8 characters and can be a maximum
of 63 characters.
This WiFi password does not replace the WiFi password for the management
WiFi network, which you can continue to use to log in over a WiFi connection to
the device UI of the AP.
d. From the Country/Region menu, select the country where you are using the AP.
In some countries, the AP is sold with a preconfigured country or region setting
and you cannot change it.
e. Select the check box to accept NETGEAR’s terms and conditions and acknowledge
that you read the privacy notice.
f. Click the Apply button.
Your settings are saved. A summary page displays and the AP restarts.
User Manual19Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220

5. Wait one minute until the AP completes its restart.
6. If you were disconnected because the AP restarted, log back in to the management
WiFi network.
The summary page displays again.
7. Click the Done button.
You are done. The AP is connected to the network and ready to use. You can now
connect a computer or mobile device to the user WiFi network that you just set up,
using the WiFi password that you just defined.
8. (Optional) To continue to configure the AP for your network and environment, do
the following:
a. Log in again.
If you are still connected to the management WiFi network but the login page
does not display, in the address field of your web browser, enter
https://www.aplogin.net.
If your browser display a security warning, proceed, or add an exception for the
security warning. For more information, see kb.netgear.com/000062980.
b. In the AP Login Password field, enter your new password for the device UI, and
click the LOGIN button.
The Dashboard page displays.
You can now configure the AP.
Connect to the AP over the LAN and log in for the first time
The following procedure assumes that your network includes a DHCP server (or router
that functions as a DHCP server) and that the AP and your computer are on the same
LAN. By default, the AP functions as a DHCP client and receives an IP address from a
DHCP server.
User Manual20Installation and Initial Login
Essentials WiFi 6 AX4200 Dual Band Multi-Gig Access Point Model WAX220