NETGEAR BE9400 Insight Managed WiFi 7 Access Point User Manual
- July 1, 2024
- NETGEAR
Table of Contents
- BE9400 Insight Managed WiFi 7 Access Point
- Specifications:
- Product Information:
- Chapter 1: Introduction
- Chapter 2: Hardware Overview
- Chapter 3: Install the AP in Your Network and Access It for
- Chapter 4: Install the AP in an Insight Instant Mesh WiFi
- Chapter 5: Manage the Basic WiFi Features for a WiFi
- Chapter 6: Manage the Basic Radio Features
- Chapter 7: Set Up and Manage a Captive Portal
- Positioning the AP:
- Connecting to Your Network:
- Initial Configuration:
- Q: Can I use the device outdoors?
- Q: What is the operation restriction for 6 GHz devices?
BE9400 Insight Managed WiFi 7 Access Point
Specifications:
-
Model: BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access
Point (WBE710) -
Manufacturer: NETGEAR, Inc.
-
Address: 350 E. Plumeria Drive San Jose, CA 95134, USA
Product Information:
Chapter 1: Introduction
This section provides additional documentation on managing the
AP, information about the device user interface, and NETGEAR
Insight.
Chapter 2: Hardware Overview
This chapter covers unpacking the AP, understanding the top
panel LED, hardware interfaces, product label, and safety
instructions for indoor use.
Chapter 3: Install the AP in Your Network and Access It for
Initial Configuration
Learn how to position the AP for optimal performance, set up and
connect it to your network, and access it for initial
configuration.
Chapter 4: Install the AP in an Insight Instant Mesh WiFi
Network
Instructions on installing the AP in an Insight Instant Mesh
WiFi network.
Chapter 5: Manage the Basic WiFi Features for a WiFi
network
Guidelines on managing basic WiFi features for a WiFi
network.
Chapter 6: Manage the Basic Radio Features
Information on managing basic radio features.
Chapter 7: Set Up and Manage a Captive Portal
Instructions on setting up a click-through or external captive
portal for a WiFi network.
Product Usage Instructions:
Positioning the AP:
Place the AP in a central location for optimal coverage within
your network.
Connecting to Your Network:
- Connect the AP to your network using an Ethernet cable.
- Power on the AP and ensure it is receiving power.
Initial Configuration:
Access the AP using a web browser and configure initial settings
such as SSID, security settings, and passwords.
FAQ:
Q: Can I use the device outdoors?
A: No, the device is not intended for outdoor use. The PoE
source is for intra-building connections only.
Q: What is the operation restriction for 6 GHz devices?
A: 6 GHz devices should only be used indoors. Operation on oil
platforms, cars, trains, boats, and aircraft is prohibited except
for large aircraft flying above 10,000 feet.
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point
WBE710
June 2024 202-12703-01
NETGEAR, Inc. 350 E. Plumeria Drive San Jose, CA 95134, USA
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Support and Community
Visit netgear.com/support to get your questions answered and access the latest
downloads.
You can also check out our NETGEAR Community for helpful advice at
community.netgear.com.
Regulatory and Legal
Si ce produit est vendu au Canada, vous pouvez accéder à ce document en
français canadien à https://www.netgear.com/support/download/.
(If this product is sold in Canada, you can access this document in Canadian
French at https://www.netgear.com/support/download/.)
For regulatory compliance information including the EU Declaration of
Conformity, visit https://www.netgear.com/about/regulatory/.
See the regulatory compliance document before connecting the power supply.
For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-
policy.
By using this device, you are agreeing to NETGEAR’s Terms and Conditions at
https://www.netgear.com/about/terms-and-conditions. If you do not agree,
return the device to your place of purchase within your return period.
Do not use this device outdoors. The PoE source is intended for intra building
connection only.
Applicable to 6 GHz devices only: Only use the device indoors. The operation
of 6 GHz devices is prohibited on oil platforms, cars, trains, boats, and
aircraft, except that operation of this device is permitted in large aircraft
while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125
GHz band is prohibited for control of or communications with unmanned aircraft
systems.
Trademarks
© NETGEAR, Inc., NETGEAR, and the NETGEAR Logo are trademarks of NETGEAR, Inc.
Any non-NETGEAR trademarks are used for reference purposes only.
Revision History
Publication Part Number
202-12703-01
Publish Date June 2024
Comments First publication.
2
User Manual
Contents
Chapter 1 Introduction
Additional documentation……………………………………………………… 10 How to manage the
AP………………………………………………………….. 10 About the device user interface and NETGEAR
Insight…………… 11
Chapter 2 Hardware Overview
Unpack the AP……………………………………………………………………….. 13 Top panel
LED……………………………………………………………………….. 13 Hardware
interfaces……………………………………………………………….. 14 Product
label…………………………………………………………………………. 16 Safety instructions and warnings for an
indoor access point…… 16
Chapter 3 Install the AP in Your Network and Access It for Initial
Configuration
Position your AP for best performance…………………………………… 20 Set up and connect the
AP to your network……………………………. 21 Connect to the AP for initial
configuration……………………………… 23
Connect over the Internet using the NETGEAR Insight Cloud
Portal…………………………………………………………………………………. 23 Connect over WiFi using the NETGEAR
Insight app…………… 26 Connect over WiFi to the device UI for initial
configuration…. 28 Connect over the LAN to the device UI for initial
configuration……………………………………………………………………… 32 Configure the AP offline using a
directly connected computer ………………………………………………………………………………………….. 36 Log in to
the AP after initial setup…………………………………………… 40 What to do if you get a browser
security warning…………………… 40
Chapter 4 Install the AP in an Insight Instant Mesh WiFi Network
What are a root and a node?………………………………………………….. 44 What is an Insight Instant
Mesh WiFi network?……………………….. 45 Requirements for placing a node in an Insight
Instant Mesh WiFi network………………………………………………………………………………….. 46 Access the Cloud
Portal to set up or manage an Insight Instant Mesh WiFi
network………………………………………………………………………….. 46 Connect the AP as a node to a root
using the Cloud Portal…….. 47 Install the Insight app to manage an Insight
Instant Mesh WiFi network………………………………………………………………………………….. 49 Connect the AP
as a node to a root using the Insight app………. 50
3
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Chapter 5 Manage the Basic WiFi Features for a WiFi network
Set up an open or secure WiFi network………………………………….. 55 Display or change the
settings of a WiFi network…………………… 64 Remove a WiFi
network………………………………………………………….. 66 Hide or broadcast the SSID for a WiFi
network……………………….. 67 Change the VLAN ID for a WiFi network…………………………………. 68
Change the authentication and encryption for a WiFi network… 69 Enable or
disable PMF for a WiFi network………………………………. 73 Set up Multi PSK for a WiFi
network……………………………………….. 74 Disable or enable a WiFi network or set up a WiFi
activity schedule………………………………………………………………………………… 77 Enable or disable band
steering…………………………………………….. 78 Configure multi-link
operation……………………………………………….. 79
Chapter 6 Manage the Basic Radio Features
Manage the basic WiFi settings for the radios………………………… 83 Turn a radio on or
off……………………………………………………………… 86 Change the WiFi mode for a
radio…………………………………………. 87 Change the channel width for a radio……………………………………..
89 Change the guard interval for a radio…………………………………….. 91 Change the output
power for a radio…………………………………….. 92 Change the channel for a
radio……………………………………………… 93 Manage Quality of Service for a WiFi
radio…………………………….. 94
Chapter 7 Set Up and Manage a Captive Portal
Set up a click-through captive portal for a WiFi network…………. 97 Set up an
external captive portal for a WiFi network………………. 98
Chapter 8 Manage Access and Security
Manage user accounts…………………………………………………………. 103 Add a user
account………………………………………………………….. 103 Change the time-out period for a user
session…………………. 104 Change the settings for a user account…………………………….. 105
Remove a user account……………………………………………………. 106
Set up RADIUS servers…………………………………………………………. 107 Manage neighbor AP
detection…………………………………………… 109
Enable neighbor access point detection and move access points to the Known AP
List………………………………………………………… 109 Import an existing neighbor access point list
in the Known AP List…………………………………………………………………………………… 111 Manage global MAC
ACLs and traffic policies……………………… 112 Manage MAC ACLs for broadcast and
multicast traffic from the wired LAN………………………………………………………………………… 113
4
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Manually set up a MAC ACL for broadcast and multicast traffic from the wired
LAN……………………………………………………… 114 Import an existing MAC ACL for broadcast and
multicast traffic from the wired LAN……………………………………………………… 115 Block all
broadcast and multicast traffic from the wired
LAN……………………………………………………………………………… 117 Manage the Wireless Noise
Filter…………………………………….. 118 Enable or disable the Wireless Noise
Filter………………….. 118 Enable, disable, or change a traffic rule in the Wireless
Noise Filter……………………………………………………………………………. 119 Change the priority for a
traffic rule in the Wireless Noise Filter……………………………………………………………………………. 122
Manage the Global Traffic Filter……………………………………….. 123 Enable or disable the
Global Traffic Filter…………………….. 124 Add a traffic rule to the Global Traffic
Filter………………….. 125 Change a traffic rule in the Global Traffic Filter……………..
128 Change the priority for a traffic rule in the Global Traffic
Filter……………………………………………………………………………. 129 Remove a traffic rule from the Global
Traffic Filter……….. 130 Manage SSID-based MAC ACLs and traffic policies for
WiFi networks………………………………………………………………………………. 131 Manage MAC ACLs for WiFi
clients………………………………….. 131 Manually set up a MAC ACL for WiFi clients………………….
132 Import an existing MAC ACL for WiFi clients………………… 135 Manage MAC ACLs for
broadcast and multicast traffic from WiFi
clients………………………………………………………………………………. 137 Manually set up a MAC ACL for
broadcast and multicast traffic from WiFi clients………………………………………………………….. 138
Import an existing MAC ACL for broadcast and multicast traffic from WiFi
clients………………………………………………………….. 140 Manage MAC/IP Traffic Filter groups for
WiFi networks…… 142 Enable or disable a MAC/IP Traffic Filter group……………. 143
Add a traffic rule to a MAC/IP Traffic Filter group…………. 144 Change a traffic
rule in a MAC/IP Traffic Filter group……. 147 Change the priority for a traffic
rule in a MAC/IP Traffic Filter group…………………………………………………………………………… 148 Remove
a traffic rule from a MAC/IP Traffic Filter group.. 149 Enable L2
security………………………………………………………………… 149
Chapter 9 Manage the Local Area Network and IP Settings
Disable the DHCP client and set a fixed IP address………………. 152 Enable the DHCP
client………………………………………………………… 153 Set the 802.1Q VLAN and management
VLAN…………………….. 154 Set an existing domain name……………………………………………….. 155
5
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Enable or disable Spanning Tree Protocol……………………………. 156 Enable or disable the
network integrity check function………… 157 Enable or disable IGMP
snooping………………………………………… 158 Enable or disable the hardware assisted
datapath……………….. 159 Enable or disable Ethernet LLDP………………………………………….. 160
Enable or disable UPnP………………………………………………………… 161 Manage the multicast DNS
gateway…………………………………….. 162
Enable the multicast DNS gateway and add a policy………… 163 Change or remove a
multicast DNS policy……………………….. 164
Chapter 10 Manage and Maintain the AP
Change the management mode to NETGEAR Insight or Web-
browser……………………………………………………………………….. 167 Change the country or region of
operation………………………….. 168 Change the admin user account password……………………………
170 Change the system name…………………………………………………….. 171 Specify a custom NTP
server………………………………………………… 172 Set the time zone…………………………………………………………………. 173
Manage the syslog settings………………………………………………….. 173 Manage the firmware of the
AP……………………………………………. 175
Let the AP check for new firmware and update the firmware. 175 Manually
download firmware and update the AP…………….. 177 Revert to the backup
firmware…………………………………………. 178 Use an SFTP server to update the
AP……………………………….. 179 Manage the configuration file of the AP……………………………….. 181
Back up the AP configuration…………………………………………… 181 Restore the AP
configuration……………………………………………. 182 Use the Reset button to reboot the
AP…………………………………. 183 Reboot the AP from the device UI………………………………………… 184
Schedule the AP to reboot…………………………………………………… 185 Return the AP to its factory
default settings………………………….. 186 Use the Reset button to reset the
AP………………………………… 186 Use the device UI to reset the AP……………………………………… 187
Enable SNMP and manage the SNMP settings……………………… 188 Manage the
LED………………………………………………………………….. 189 Manage the Energy Efficiency
Mode……………………………………. 190
Chapter 11 Monitor the AP and the Network
Display the AP Internet, IP, and system settings……………………. 193 Display the WiFi
radio settings…………………………………………….. 196 Display unknown and known neighbor
access points…………… 198 Display statistics for MAC and IP-based traffic
policies…………. 199 Display client distribution, connected clients, and client
trends. 201
6
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Display traffic volume, fan information, statistics, and channel
utilization……………………………………………………………………………… 204 Display or download tracked
URLs………………………………………. 205 Display, save, download, or clear the
logs……………………………. 207 Display a WiFi bridge connection………………………………………… 208
Display alarms and notifications…………………………………………… 209
Chapter 12 Manage the Advanced WiFi Features for a WiFi network
Set NAT mode or Bridge mode for addressing and traffic……. 213 Enable or
disable client isolation for a WiFi network…………….. 214 Enable or disable URL
tracking for a WiFi network……………….. 216 Select a MAC ACL for WiFi clients in a
WiFi network…………….. 217 Set bandwidth rate limits for a WiFi network…………………………
219 Change the format of the DHCP offer messages in a WiFi
network……………………………………………………………………………….. 220 Select a MAC ACL for broadcast and
multicast traffic from WiFi clients in a WiFi network……………………………………………………….
222 Block all broadcast and multicast traffic for a WiFi network…… 224 Select
a MAC/IP Traffic Filter group for a WiFi network………… 225 Configure advanced
rate selection for a WiFi network…………. 226 Assign host names to WiFi clients
and manage the host name list………………………………………………………………………………………… 229
Chapter 13 Set up a WiFi Bridge in a Wireless Distribution System
WiFi base station, WiFi repeater, and WiFi bridge requirements. 233 Set up a
WiFi bridge between APs……………………………………….. 234
Chapter 14 Manage the Advanced Radio Features
Manage the advanced WiFi settings for the radios……………….. 238 Manage the
maximum number of clients for a radio…………….. 240 Manage the broadcast and
multicast settings for a radio……… 241 Manage load balancing for the
radios………………………………….. 243 Manage sticky clients…………………………………………………………… 245
Manage the ARP proxy…………………………………………………………. 247
Chapter 15 Diagnostics and Troubleshooting
Capture WiFi and Ethernet packets……………………………………… 249 Perform a ping
test………………………………………………………………. 251 Quick tips for WiFi
troubleshooting……………………………………… 252 Troubleshoot with the
LED…………………………………………………… 253
LED remains off……………………………………………………………….. 253 LED remains solid
amber…………………………………………………. 254 The AP functions as a PoE PD and the LED is
blinking green continuously…………………………………………………………………….. 255
7
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
LED is blinking amber slowly, continuously………………………. 255 LED does not light
blue in the NETGEAR Insight management mode………………………………………………………………………………..
256 LED does not stop blinking amber, green, and blue………… 257 The node and
root cannot connect………………………………………. 257 Troubleshoot WiFi connectivity for a
WiFi client…………………… 258 Troubleshoot Internet browsing…………………………………………… 259
You cannot log in to the AP over a LAN connection……………… 260 Changes are not
saved………………………………………………………… 261 You enter the wrong password and can no longer
log in to the AP………………………………………………………………………………………… 261 Troubleshoot your
network using the ping utility…………………. 261 Test the LAN path to your
AP…………………………………………… 262 Test the path from your computer to a remote device………
262 Appendix A Factory Default Settings and Technical Specifications Factory
default settings………………………………………………………… 265 Technical
specifications……………………………………………………….. 270
8
1
Introduction
This manual is for the NETGEAR BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7
Access Point Model WBE710. Model WBE710, in this manual referred to as the AP,
supports the Wi-Fi 7 standard with IEEE 802.11be, four (2+2) data streams, and
tri-band concurrent operation at 6 GHz, 5 GHz, and 2.4 GHz, allowing for a
combined throughput of about 9.4 Gbps (5765 Mbps at 6 GHz, 2882 Mbps at 5 GHz,
and 688 Mbps at 2.4 GHz). The AP can function as a Power over Ethernet plus
(PoE+, 802.3at) powered device (PD) in an existing network connected to a PoE+
switch. The AP also supports a power adapter for connection to a regular
switch or router. The PoE+ Ethernet port supports speeds of 100 Mbps, 1 Gbps,
and 2.5 Gbps. This chapter contains the following sections: · Additional
documentation · How to manage the AP · About the device user interface and
NETGEAR Insight
NOTE: For more information about the topics that are covered in this manual,
visit the support website at netgear.com/support/. NOTE: Firmware updates with
new features and bug fixes are made available from time to time at
netgear.com/support/download/. You can check for and download new firmware
manually. If the features or behavior of your product does not match what is
described in this manual, you might need to update the firmware. NOTE: In this
manual, WiFi network means the same as SSID (service set identifier or WiFi
network name) or VAP (virtual access point). That is, when we refer to a WiFi
network we mean an individual SSID or VAP.
9
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Additional documentation
The following documents are available at netgear.com/support/download/: ·
Installation guide · Pro WiFi Mount Installation Guide · Datasheet AP
management in NETGEAR Insight is described in the NETGEAR knowledge base. See
kb.netgear.com/000044338/.
How to manage the AP
For NETGEAR Insight Premium and Insight Pro subscribers, the AP supports the
NETGEAR Insight Cloud Portal and Insight app: · Insight Cloud Portal: Lets you
configure and manage the AP through the portal of
the Insight cloud-based management platform. · Insight app: Lets you configure
and manage the AP from your iOS or Android mobile
device and connects to the Insight cloud-based management platform. You can
also manage the AP with the device UI. Management through the Insight cloud-
based management platform and management through the device UI are mutually
exclusive. You can manage and monitor the AP using the following methods: ·
Insight-only management: You use only the Insight Cloud Portal or Insight app.
However, if you wish, at any time, you can change to the standalone management
method. · Standalone management: You use the AP as a standalone device in your
network and manage and monitor the AP using the device UI only. This is the
default management method, However, if you wish, at any time, you can change
to the Insight-only management method.
Introduction
10
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
About the device user interface and NETGEAR Insight
This user manual describes the device user interface (UI), which you use if
the AP functions as a standalone access point. For information about NETGEAR
Insight subscriptions, visit netgear.com/business/services/insight/ and
kb.netgear.com/000061848. This manual does not describe NETGEAR Insight
procedures, which are documented in the NETGEAR knowledge base. For knowledge
base articles about NETGEAR Insight, visit kb.netgear.com/000044338/. If you
install the AP as a NETGEAR Insight managed device, the settings for features
that you can manage through the Insight Cloud Portal and Insight app are
masked out in the device UI. However, using the device UI, you can still
manage the settings for certain features that might not yet be supported in
Insight.
Introduction
11
User Manual
2
Hardware Overview
The NETGEAR BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model
WBE710 is an indoor access point. The chapter contains the following sections:
· Unpack the AP · Top panel LED · Hardware interfaces · Product label · Safety
instructions and warnings for an indoor access point
12
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Unpack the AP
The package contains the following items: · WBE710 AP with the port cover
attached · Mount plate (the adjustable size is set at the “P1” position.) ·
Deep clip · Shallow clip · Installation guide
NOTE: Depending on the product ordered, the package might not include a power
adapter. You power up the AP by connecting it to a PoE+ switch. If you ordered
a package without a power adapter, you can still order a power adapter as an
option. For information about the multiple mounting options, see the Pro WiFi
Mount Installation Guide, which you can download by visiting
netgear.com/support/download/.
Top panel LED
The LED that provides the status of the AP is located at the edge of the top
panel of the AP.
Figure 1. Top panel with LED
Table 1. LED descriptions Color Normal behavior
Off
Description No power is supplied to the AP.
Solid amber, temporarily
The AP is starting or the Reset button was pressed.
Blinking amber
The AP is in the process of getting an IP address.
slowly, temporarily
Hardware Overview
13
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Table 1. LED descriptions (Continued)
Color
Description
Blinking amber fast, The AP is updating firmware or is being reset to factory default
temporarily
settings.
Solid blue
The AP started up, functions in Insight mode, and is connected to the Insight cloud-based management platform.
Solid green Blinking blue
The AP started up and functions either as a standalone access point or as an
Insight discovered access point that is not connected to the Insight cloud-
based management platform.
At least one WiFi client is connected to the AP. The speed of blinking depends
on the transmit and receive data rate of connected clients.
Blinking multicolor The AP is functioning as a node in an Insight Instant Mesh WiFi Network and the mesh setup is in progress.
Problem indication
Blinking green, continuously
The PoE power that the AP is receiving is not at the required PoE+ (802.3at) level.
Blinking amber
The AP did not receive an IP address from a DHCP server.
slowly, continuously
Solid amber, continuously
A boot error occurred or the AP is malfunctioning.
NOTE: For information about troubleshooting with the LED, see Troubleshoot
with the LED on page 253.
Hardware interfaces
The bottom panel of the AP has a LAN/PoE+ port, DC power connector for an
optional power adapter, and Reset button.
Hardware Overview
14
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Figure 2. Hardware interfaces
The bottom panel contains the following components, in the previous figure
shown from left to right:
· LAN/PoE+ port: You can use the LAN/PoE+ 2.5G RJ-45 LAN port to connect the
AP to a PoE+ (802.3at) switch, or if you use an optional power adapter, to a
non-PoE switch.
If connected to 2.5 Gbps equipment, the LAN/PoE+ port supports Ethernet speeds
up to 2.5 Gbps within your LAN. If your Internet connection, modem, router,
and switch support a speed of 2.5 Gbps, the AP’s Internet connection also
functions at 2.5 Gbps. Otherwise, the Internet connection functions at the
highest speed that your ISP connection, modem, router, and switch support.
For more information about the LAN/PoE+ port connection, see Set up and
connect the AP to your network on page 21.
· DC power connector: If you do not use a PoE+ switch to provide power to the
AP, connect an optional power adapter to the DC power connector.
· Reset button: You can use the Reset button to reboot the AP or to reset the
AP to its factory default settings:
Hardware Overview
15
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Reboot: To reboot the AP, press the Reset button for about two seconds until
the LED lights solid amber, and then immediately release the button. For more
information, see Use the Reset button to reboot the AP on page 183.
Reset: To reset the AP to its factory default setting, press the Reset button
until the LED start blinking amber, after which you can release the button.
For more information, see Use the Reset button to reset the AP on page 186. If
you hold the Reset button, the LED first lights solid amber, and then about 5
seconds later, starts blinking amber. If you release the button while the LED
lights solid amber, the AP reboots rather than resets. The LED must be
blinking amber.
Product label
The product label of the AP shows the QR code, serial number, MAC address,
setup WiFi network name (SSID), and network key (password) of the AP, as well
as the default IP address, default user name and default password to access
the device UI.
Figure 3. Product label
Safety instructions and warnings for an indoor access point
Use the following safety guidelines to ensure your own personal safety and to
help protect your system from potential damage. To reduce the risk of bodily
injury, electrical shock, fire, and damage to the equipment, observe the
following precautions:
Hardware Overview
16
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
·
This product is designed for indoor use only in a temperature-controlled and humidity-controlled environment. Note the following:
For more information about the environment in which this product must operate, see the environmental specifications in the appendix or the data sheet.
If you want to connect the product over an Ethernet cable to a device located outdoors, the outdoor device must be properly grounded and surge protected, and you must install an Ethernet surge protector inline between the indoor product and the outdoor device. Failure to do so can damage the product.
Before connecting the product to outdoor cables or wired outdoor devices, see https://kb.netgear.com/000057103 for additional safety and warranty information.
Failure to follow these guidelines can result in damage to your NETGEAR product, which might not be covered by NETGEAR’s warranty, to the extent permissible by applicable law.
· Do not service the product except as explained in your product documentation. Some devices should never be opened.
· If any of the following conditions occur, unplug the product from its power source, and then replace the part or contact your trained service provider:
Depending on your product, the power adapter, power adapter cable, power adapter plug, or PoE Ethernet cable is damaged.
An object fell into the product.
The product was exposed to water.
The product was dropped or damaged.
The product does not operate correctly when you follow the operating instructions.
· Keep the product away from radiators and heat sources. Also, do not block cooling vents.
· Do not spill food or liquids on your product components, and never operate the product in a wet environment. If the product gets wet, see the appropriate section in your troubleshooting guide, or contact your trained service provider.
· Do not push any objects into the openings of your product. Doing so can cause fire or electric shock by shorting out interior components.
· Use the product only with approved equipment.
· If applicable to your product, allow the product to cool before removing covers or touching internal components.
· Be sure that devices that are attached over Ethernet cables are electrically rated to operate with the power available in your location.
· Depending on your product, use only the supplied power adapter or an Ethernet cable that provides PoE.
Hardware Overview
17
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
If your product uses a power adapter: If you were not provided with a power
adapter, contact your local NETGEAR
reseller. The power adapter must be rated for the product and for the voltage
and current
marked on the product electrical ratings label. · To help prevent electric
shock, plug any system and peripheral power cables into
properly grounded power outlets. · If applicable to your product, the
peripheral power cables are equipped with
three-prong plugs to help ensure proper grounding. Do not use adapter plugs or
remove the grounding prong from a cable. If you must use an extension cable,
use a three-wire cable with properly grounded plugs. · Observe extension cable
and power strip ratings. Make sure that the total ampere rating of all
products plugged into the extension cable or power strip does not exceed 80
percent of the ampere ratings limit for the extension cable or power strip. ·
To help protect your system from sudden, transient increases and decreases in
electrical power, use a surge suppressor, line conditioner, or uninterruptible
power supply (UPS). · Position system cables, power adapter cables, and PoE
Ethernet cables carefully. Route cables so that they cannot be stepped on or
tripped over. Be sure that nothing rests on any cables. · Do not modify power
adapters, power adapter cables, or plugs. Consult a licensed electrician or
your power company for site modifications. · Always follow your local and
national wiring rules.
Hardware Overview
18
User Manual
3
Install the AP in Your Network and Access It for Initial Configuration
This chapter describes how you can install and access the AP in your network.
The chapter contains the following sections: · Position your AP for best
performance · Set up and connect the AP to your network · Connect to the AP
for initial configuration · Log in to the AP after initial setup · What to do
if you get a browser security warning
CAUTION: This device must be professionally installed. It is the installer’s
responsibility to follow local country regulations, including operations
within legal frequency channels, output power, and DFS requirements. The
vendor, reseller, or distributor is not responsible for illegal wireless
operations. For more details, see the device’s terms and conditions. NOTE: In
this manual, WiFi network means the same as SSID (service set identifier or
WiFi network name) or VAP (virtual access point). That is, when we refer to a
WiFi network we mean an individual SSID or VAP.
19
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Position your AP for best performance
Before you install and mount your AP as described in the installation guide or
an appendix to this manual, consider how you can position the AP for best
performance.
WiFi clients that are within the AP WiFi range can connect to the WiFi
network. However, the WiFi range can vary significantly depending on the
physical placement of your AP. For example, the thickness, density, and number
of walls the WiFi signal passes through can limit the range.
Additionally, other WiFi devices in and around your office, home, yard, or
campus, might affect your AP’s signal. WiFi devices can be other access
points, routers, repeaters, WiFi range extenders, and any other devices that
emit WiFi signals to provide network access.
Tips for positioning your AP:
· Place your AP near the center of the area where the WiFi clients operate. A
line of sight between the AP and the WiFi clients is not required for good
performance.
· If you use a power adapter, make sure that the AP is within reach of an AC
power outlet.
· Place the AP in an elevated location, minimizing the number of walls and
ceilings between the AP and the WiFi clients.
· Place the AP away from electrical devices such as these: Ceiling fans Home
security systems Microwaves Computers Bases of cordless phones 2.4 GHz and 5.8
GHz cordless phones
· Place the AP away from large metal surfaces, large glass surfaces, insulated
walls, and items such as these:
Solid metal doors Aluminum studs Fish tanks Mirrors
Install the AP in Your Network
20
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Brick Concrete If you are using adjacent standalone APs, use non-overlapping
radio frequency channels to reduce interference. For more information, see
Change the channel for a radio on page 93.
Set up and connect the AP to your network
You can connect the AP to a Power over Ethernet plus (PoE+, 802.3at) switch in
your network. The switch must be connected to a network router that is
connected to the Internet. If you use a PoE+ connection, the AP does not
require a power adapter.
NOTE: Depending on the product ordered, the package might not include a power
adapter. You power up the AP by connecting it to a PoE+ switch. If you ordered
a package without a power adapter but do not want to use a PoE+ connection,
you can still order a power adapter as an option. If connected to 2.5 Gbps
equipment, the AP LAN/PoE+ port supports Ethernet speeds up to 2.5 Gbps within
your LAN. The following figure show a NETGEAR MS510TXUP switch, which supports
speeds of 2.5 Gbps and higher, as well as PoE+ and PoE++. If your Internet
connection, modem, router, and switch support a speed of 2.5 Gbps, the AP’s
Internet connection also functions at 2.5 Gbps. Otherwise, the Internet
connection functions at the highest speed that your ISP connection, modem,
router, and switch support.
Install the AP in Your Network
21
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
The following figure shows the AP connected to a PoE+ switch, which has a
redundant connection to a network router that is connected to the Internet.
2.5G
10G
Figure 4. Set up the AP with a PoE+connection to your network
To set up the AP with an Ethernet connection to your network: 1. Connect an
Ethernet cable to the LAN/PoE+ port on the AP. 2. Connect the other end of the
Ethernet cable to a port on a switch that is connected
to your network and to the Internet. If you use a PoE+ switch, the switch port
that is connected to the AP must be able to supply 30W PoE+ power. The AP
requires 802.3at (PoE+) input.
NOTE: For optimal functioning, make sure that you use an 802.3at (PoE+) switch
and not an 802.3af (PoE) switch. If the LED remains solid amber five minutes
after the AP started up, the AP might receive insufficient PoE power. For more
information, see The AP functions as a PoE PD and the LED is blinking green
continuously on page 255. While the AP is starting or in the process of
getting an IP address from a DHCP server (or router functioning as a DHCP
server) in your network, the LED blinks amber slowly. After about three
minutes, the LED turns solid blue or solid green and the AP is ready for you
to perform the initial configuration. For information about accessing the AP
for initial configuration, see Connect to the AP for initial configuration on
page 23.
Install the AP in Your Network
22
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Connect to the AP for initial configuration
After you set up the AP, you can use several methods to connect to it for
initial configuration. For remote management of the AP (and of multiple
devices and networks), you can use the NETGEAR Insight Cloud Portal on a
computer or tablet or the NETGEAR Insight app on an iOS or Android mobile
device. If you use the AP in a standalone configuration, you can use the
device UI on a computer or tablet. For more information, see About the device
user interface and NETGEAR Insight on page 11. For information about using the
Insight Cloud Portal or Insight app, see one of the following sections: ·
Connect over the Internet using the NETGEAR Insight Cloud Portal on page 23 ·
Connect over WiFi using the NETGEAR Insight app on page 26 For information
about using the device UI, see one of the following sections: · Connect over
WiFi to the device UI for initial configuration on page 28 · Connect over the
LAN to the device UI for initial configuration on page 32 · Configure the AP
offline using a directly connected computer on page 36
NOTE: If your network does not include a DHCP server (or a router that
functions as a DHCP server) and you do not perform the initial configuration
of the AP as described in one of these sections, you can connect only to the
AP and the AP can provide an IP address to only five clients. To prevent this
situation, make sure that you perform the initial configuration of the AP.
Connect over the Internet using the NETGEAR Insight Cloud Portal
The Insight Cloud Portal is available for Insight Premium or Insight Pro
subscribers. To use the NETGEAR Insight Cloud Portal to configure and manage
the AP, the AP must already be connected to the Internet. For more information
about the Insight Cloud Portal, visit the following pages:
Install the AP in Your Network
23
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· netgear.com/business/services/insight/ · kb.netgear.com/000061848 ·
kb.netgear.com/000044343 Your NETGEAR account is also your Insight account.
Your NETGEAR account credentials let you log in as an Insight Premium user, or
if you upgrade to an Insight Pro account, as an Insight Pro user. The
following figure shows the AP connected to a PoE+ switch, which has a
redundant connection to a network router that is connected to the Internet.
The WiFi clients have the NETGEAR Insight app installed or have access to the
Cloud Portal.
2.5G
10G
Figure 5. Set up the AP in a NETGEAR Insight configuration
To connect to the AP over the Internet through the Insight Cloud Portal: 1.
Make sure that the AP is connected to the Internet. 2. On a computer or
tablet, visit insight.netgear.com.
The NETGEAR Account Login page displays. 3. If you do not already have an
Insight account, you can create an account now.
For information about creating an Insight Premium account or upgrading to an
Insight Pro account, visit kb.netgear.com/000044343.
Install the AP in Your Network
24
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
4. Enter the email address and password for your NETGEAR account and click
the NETGEAR Sign In button.
5. Only if you are an Insight Pro user, select the organization to which you
want to add the AP.
6. Add a new network location where you want to add the AP, or select an
existing network location.
7. Click the + (Add Device) button.
NOTE: If you are an Insight Pro user, you can either add a single device or
you can add multiple Insight managed devices by uploading a device list as a
CSV file.
8. In the Add New Device pop-up page, enter the AP’s serial number and MAC
address, and then click Go.
The serial number and MAC address are on the AP label.
9. After Insight verifies that the AP is a valid product, you can optionally
change the device name of the AP, and then click Next.
When the AP is successfully added to the portal, a page displays a
confirmation that setup is in progress.
NOTE: If the AP is online but Insight does not detect the AP, the firewall at
the physical location where the AP is located might prevent communication with
the Insight cloud. In that situation, add port and DNS entries for outbound
access to the firewall. For more information, see kb.netgear.com/000062467.
The AP automatically updates to the latest Insight firmware and Insight
location configuration. This might take up to 10 minutes, during which time
the AP will restart.
The AP is now an Insight managed device that is connected to the Insight
cloud-based management platform. If the LED was solid green, it lights solid
blue.
You can use the Insight Cloud Portal or Insight app to configure and manage
the AP.
NOTE: If you add the AP to a NETGEAR Insight network location and manage the
AP through the Insight Cloud Portal or Insight app, the admin password for the
AP changes. That is, after you add the AP to an Insight network location, the
Insight network password for that location replaces the admin password. To
access the device UI, you must then enter the Insight network password and not
the admin password. If you later decide to remove the AP from the Insight
network location or change the management mode to Web-browser mode (see Change
the management mode to NETGEAR Insight or Web-browser on page 167), you must
continue to use the Insight network password to access the device UI until you
manually change the admin password on the AP.
Install the AP in Your Network
25
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Connect over WiFi using the NETGEAR Insight app
The NETGEAR Insight app is available for Insight Premium and Insight Pro
subscribers. You can install the NETGEAR Insight app on an iOS or Android
mobile device and set up the AP (and perform many other tasks as well). For
more information about the Insight app, visit the following pages: ·
netgear.com/business/services/insight/ · kb.netgear.com/000061848 ·
kb.netgear.com/000044343 Your NETGEAR account is also your Insight account.
Your NETGEAR account credentials let you log in as an Insight Premium user, or
if you upgrade to an Insight Pro account, as an Insight Pro user. The
following figure shows the AP connected to a PoE+ switch, which has a
redundant connection to a network router that is connected to the Internet.
The WiFi clients have the NETGEAR Insight app installed or have access to the
Cloud Portal.
2.5G
10G
Figure 6. Set up the AP in a NETGEAR Insight configuration
Install the AP in Your Network
26
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
To connect to the AP over WiFi using an iOS or Android mobile device: 1. On
your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2. On your mobile device, connect over WiFi to the AP’s setup WiFi network
using one of the following methods: · Scan the QR code: Scan the QR code on
the AP label on the bottom of the AP to connect to the setup WiFi network. ·
Connect manually: The setup WiFi network is on the AP label and is shown in
the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six hexadecimal
digits of the AP’s MAC address. The default password is sharedsecret.
3. Launch the Insight app.
4. If you do not already have an Insight account, you can create an account
now.
For information about creating an Insight Premium account or upgrading to an
Insight Pro account, visit kb.netgear.com/000044343. 5. Enter the email
address and password for your NETGEAR account and tap LOG IN. 6. Add a new
network location where you want to add the AP by tapping the Next button, and
then tapping OK.
You can also select an existing network location.
The device admin password that you entered for the new network location
replaces the existing admin password on all devices that you add to the
network location.
In most situations, Insight detects the AP automatically, which can take
several minutes.
7. To add the AP to your network location, do one of the following:
· If the AP is automatically detected and listed in the Insight Manageable
Devices section, tap the icon for the AP, and then tap the ADD DEVICE button.
· If the AP is not automatically detected, or you prefer to use another method
to add the AP, tap the + icon in the top bar, and do one of the following: Tap
the SCAN BARCODE OR QR CODE button, and then scan the AP’s code, which is on
the AP label. Tap the Enter Serial Number and MAC Address link, and then
manually enter the AP’s serial number and MAC address, which are on the AP
label.
8. If prompted, name the AP and tap the Next button.
Install the AP in Your Network
27
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
The AP automatically updates to the latest Insight firmware and Insight
location configuration. This might take up to 10 minutes, during which time
the AP will restart.
The AP is now an Insight-managed device that is connected to the Insight
cloud-based management platform. If the LED LED was solid green, it lights
solid blue.
You can use the Insight Cloud Portal or Insight app to configure and manage
the AP.
NOTE: If you add the AP to a NETGEAR Insight network location and manage the
AP through the Insight Cloud Portal or Insight app, the admin password for the
AP changes. That is, the Insight network password for that location replaces
the admin password. To access the device UI, you must then enter the Insight
network password and not the admin password. If you later decide to remove the
AP from the Insight network location or change the management mode to Web-
browser mode (see Change the management mode to NETGEAR Insight or Web-browser
on page 167), you must continue to use the Insight network password to access
the device UI until you manually change the admin password on the AP.
Connect over WiFi to the device UI for initial configuration
This section describes how to connect to the AP for the first time over WiFi
using a WiFi-enabled computer or mobile device (without using the NETGEAR
Insight app) and complete the initial configuration. To connect over WiFi to
the device UI for initial configuration: 1. From your computer or mobile
device, connect over WiFi to the AP’s setup WiFi
network using one of the following methods: · Scan the QR code: Scan the QR
code on the AP label on the bottom of the AP
to connect to the setup WiFi network. · Connect manually: The setup WiFi
network is on the AP label and is shown in
the format NETGEARxxxxxx-SETUP, where xxxxxx is the last six hexadecimal
digits of the AP’s MAC address. The default password is sharedsecret. 2. On
the computer or mobile device, launch a web browser and, in the address bar,
type http://aplogin.net.
NOTE: You can use http://aplogin.net only during initial setup of the AP.
The login page displays. Your browser might display a security warning because
of the self-signed certificate on the AP, which is expected behavior. You can
proceed, or add an exception for
Install the AP in Your Network
28
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
the security warning. For more information, see What to do if you get a
browser security warning on page 40.
3. Type the AP user name and default password, and click the Login button.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
The Day Zero Easy Setup page displays.
4. Select the Web-browser radio button.
The Day Zero Easy Setup page adjusts to display multiple options.
NOTE: After you save the basic settings that are shown on the page, the Day
Zero Easy Setup page no longer displays when you log in. Instead, the login
page displays. After you log in, the Dashboard displays.
5. To let the AP check for the latest firmware, click the Check for Upgrade
button.
If new firmware is available for the AP, we recommend that you upgrade the
firmware. After the firmware upgrade completes, the AP restarts. When the AP
is ready, go back to Step 1 of this procedure.
6. Specify the settings that are described in the following table.
Setting Country/Region
Time Zone DHCP Client
AP Name
Description
From the menu, select the country and region in which the AP is operating.
Note: In some countries, the AP is sold with a preconfigured country or region
setting and you cannot change it.
Note: If you do not see your country or region listed in the menu, update the
AP’s firmware and check again. If you still do not see your country or region
listed, contact NETGEAR support.
Note: Make sure that the country is set to the location where the device is
operating. It might not be legal to operate the AP in a region other than the
regions listed in the menu. You are responsible for complying with the local,
regional, and national regulations that are set for channels, power levels,
and frequency ranges.
From the menu, select the time zone for the country and region in which the AP
is operating.
By default, the DHCP client of the AP allows the AP to receive an IP address
from a DHCP server (or router that functions as a DHCP server) in your
network.
To set up the AP with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway,
and IP address of the DNS server.
As an option, type a new name for the AP. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer
than 64 characters, and can contain hyphens but cannot start or end with a
hyphen.
By default, the AP name is Netgearxxxxxx, in which xxxxxx represents the last
six hexadecimal digits of the AP’s MAC address.
Install the AP in Your Network
29
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
(Continued)
Setting
Description
AP Login New Password
Type a new admin password. This is the password that you must use to log in to
the AP’s device UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least
one uppercase letter, one lowercase letter, and one number.
Save the password for future use.
Confirm New Password
Type exactly the same password that you typed in the AP Login New Password field.
SSID
You cannot use the setup SSID for regular operation. The setup SSID is for initial setup only. Type a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (“) and a backslash ().
7. From the Authentication menu, select one of the following authentication
types for the WiFi network, and, if applicable, set a new passphrase (network
key or WiFi password) for the WiFi network:
· Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box
displays.
Enhanced Open check box cleared: The WiFi network is a legacy open network
without any security. This is the default option for an open network. Clients
are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled.
Enhanced Open check box selected: The WiFi enhanced open feature is enabled.
This feature is based on opportunistic wireless encryption (OWE). The
encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory. If you select the Enhanced Open check box, the
Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open
enhanced feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
· WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA2. This option uses AES encryption. In the Passphrase field,
type a new
Install the AP in Your Network
30
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
passphrase for the WiFi network. The passphrase must be at least 8 characters
in length and can be a maximum of 63 characters in length.
· WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast
packets use TKIP. For unicast (that is, point-to-point) transmissions, WPA
clients use TKIP and WPA2 clients use AES. In the Passphrase field, type a new
passphrase for the WiFi network. The passphrase must be at least 8 characters
in length and can be a maximum of 63 characters in length.
· WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA3. This option uses SAE encryption. In the Passphrase field,
type a new passphrase for the WiFi network. The passphrase must be at least 8
characters in length and can be a maximum of 63 characters in length.
· WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to
connect to the SSID. This option uses AES and SAE encryption. WPA2 clients use
AES and WPA3 clients use SAE. In the Passphrase field, type a new passphrase
for the WiFi network. The passphrase must be at least 8 characters in length
and can be a maximum of 63 characters in length.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 69.
8. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new
WiFi network and password (passphrase).
If you specified a static IP address, save the IP address information because
you must type the IP address when you log in again.
You are disconnected from the AP. If you changed the default country, the AP
restarts.
9. Reconnect over WiFi to the AP’s WiFi network using the new SSID and
passphrase that you just defined on the Day Zero Easy Setup page.
10. Type the AP IP address in the browser address bar.
If you changed the IP address, type the IP address that you specified in Step
6.
Your browser might display a security warning because of the self-signed
certificate on the AP, which is expected behavior. You can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
The login page displays.
11. Type the AP user name and password, and click the Login button.
The user name is admin. The password is the one that you just defined on the
Day Zero Easy Setup page. The user name and password are case-sensitive.
Install the AP in Your Network
31
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
The Dashboard displays. You can now customize the AP settings for your network
environment.
Connect over the LAN to the device UI for initial configuration
The following procedure assumes that your network includes a DHCP server (or
router that functions as a DHCP server) and that the AP and your computer are
on the same LAN. By default, the AP functions as a DHCP client. To connect
over the LAN to the device UI for initial configuration:
1. To determine the IP address that the DHCP server assigned to the AP,
access the DHCP server or use an IP network scanner.
If you use a Windows-based computer, launch File Explorer (or Windows
Explorer), select Network from the Navigation pane, right-click the AP device
icon, and select Properties to display the IP address.
NOTE: You can also use the NETGEAR Insight app to discover the IP address that
is assigned to the AP. For more information, see Connect over WiFi using the
NETGEAR Insight app on page 26.
2. On the computer, launch a web browser and, in the address bar, type the IP
address that is assigned to the AP.
The login page displays.
Your browser might display a security warning because of the self-signed
certificate on the AP, which is expected behavior. You can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40. 3. Type the AP user name and
default password, and click the Login button. The user name is admin. The
default password is password. The user name and password are case-sensitive.
The Day Zero Easy Setup page displays. 4. Select the Web-browser radio button.
The Day Zero Easy Setup page adjusts to display multiple options.
NOTE: After you save the basic settings that are shown on the page, the Day
Zero Easy Setup page no longer displays when you log in. Instead, the login
page displays. After you log in, the Dashboard displays. 5. To let the AP
check for the latest firmware, click the Check for Upgrade button.
Install the AP in Your Network
32
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
If new firmware is available for the AP, we recommend that you upgrade the
firmware. After the firmware upgrade completes, the AP restarts. When the AP
is ready, depending on your situation, go back to Step 2 or Step 3 of this
procedure.
6. Specify the settings that are described in the following table.
Setting
Description
Country/Region
From the menu, select the country and region in which the AP is operating.
Note: In some countries, the AP is sold with a preconfigured country or region
setting and you cannot change it.
Note: If you do not see your country or region listed in the menu, update the
AP’s firmware and check again. If you still do not see your country or region
listed, contact NETGEAR support.
Note: Make sure that the country is set to the location where the device is
operating. It might not be legal to operate the AP in a region other than the
regions listed in the menu. You are responsible for complying with the local,
regional, and national regulations that are set for channels, power levels,
and frequency ranges.
Time Zone
From the menu, select the time zone for the country and region in which the AP is operating.
DHCP Client
By default, the DHCP client of the AP allows the AP to receive an IP address
from a DHCP server (or router that functions as a DHCP server) in your
network.
To set up the AP with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway,
and IP address of the DNS server.
AP Name
As an option, type a new name for the AP. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer
than 64 characters, and can contain hyphens but cannot start or end with a
hyphen.
By default, the AP name is Netgearxxxxxx, in which xxxxxx represents the last
six hexadecimal digits of the AP’s MAC address.
AP Login New Password
Type a new admin password. This is the password that you must use to log in to
the AP’s device UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least
one uppercase letter, one lowercase letter, and one number.
Save the password for future use.
Confirm New Password
Type exactly the same password that you typed in the AP Login New Password field.
SSID
You cannot use the setup SSID for regular operation. The setup SSID is for initial setup only. Type a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (“) and a backslash ().
7. From the Authentication menu, select one of the following authentication types for the WiFi network, and, if applicable, set a new passphrase (network key or WiFi password) for the WiFi network:
Install the AP in Your Network
33
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box
displays.
Enhanced Open check box cleared: The WiFi network is a legacy open network
without any security. This is the default option for an open network. Clients
are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled.
Enhanced Open check box selected: The WiFi enhanced open feature is enabled.
This feature is based on opportunistic wireless encryption (OWE). The
encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory. If you select the Enhanced Open check box, the
Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open
enhanced feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
· WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA2. This option uses AES encryption. In the Passphrase field,
type a new passphrase for the WiFi network. The passphrase must be at least 8
characters in length and can be a maximum of 63 characters in length.
· WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast
packets use TKIP. For unicast (that is, point-to-point) transmissions, WPA
clients use TKIP and WPA2 clients use AES. In the Passphrase field, type a new
passphrase for the WiFi network. The passphrase must be at least 8 characters
in length and can be a maximum of 63 characters in length.
· WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA3. This option uses SAE encryption. In the Passphrase field,
type a new passphrase for the WiFi network. The passphrase must be at least 8
characters in length and can be a maximum of 63 characters in length.
· WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to
connect to the SSID. This option uses AES and SAE encryption. WPA2 clients use
AES and WPA3 clients use SAE. In the Passphrase field, type a new
Install the AP in Your Network
34
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
passphrase for the WiFi network. The passphrase must be at least 8 characters
in length and can be a maximum of 63 characters in length.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 69.
8. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new
WiFi network and password (passphrase).
If you specified a static IP address, save the IP address information because
you must type the IP address when you log in again.
If you changed the default country, the AP restarts.
NOTE: Do not close the page!
After a short period, the Dashboard displays automatically. If the Dashboard
does not display, for example, because you assigned a static IP address, see
the next step.
You can now customize the AP settings for your network environment.
9. If the Dashboard does not display automatically, do the following:
a. Take one of the following actions:
· If you assigned a static IP address to the AP, type the IP address that you
specified in Step 6 in the address bar of the web browser.
· If you did not assign a static IP address, reenter the IP address that is
displayed in the address bar of the web browser. If that does not work, write
down the IP address, close the web browser, launch the web browser again, and
then type the IP address in the address bar of the web browser.
· If you did not assign a static IP address and you closed the page so that
you cannot see the IP address of the AP, use an IP scanner tool, use a network
discovery tool, or access the DHCP server to discover the IP address of the AP
in your network.
NOTE: You can also use the NETGEAR Insight app to discover the IP address that
is assigned to the AP. For more information, see Connect over WiFi using the
NETGEAR Insight app on page 26.
Then, launch a browser and type the IP address in the address bar.
Your browser might display a security warning because of the self-signed
certificate on the AP, which is expected behavior. You can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
The login page displays.
b. Type the AP user name and password, and click the Login button.
Install the AP in Your Network
35
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
The user name is admin. The password is the one that you just defined on the
Day Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard displays. You can now customize the AP settings for your network
environment.
Configure the AP offline using a directly connected computer
You can take the AP offline (that is, disconnect it from your network),
connect a computer through an Ethernet cable to the LAN port of the AP, and
connect to the AP over its default IP address so that you can configure it
offline. After you complete the configuration, you can bring the AP online.
NOTE: Because the AP is not connected to a PoE+ switch, you can use this
configuration method only if you have a power adapter for the AP.
To connect to the AP using a computer that is directly connected to the LAN
port of the AP:
1. Record the IP address and subnet mask of your computer so that you can
reinstate these IP address settings later.
2. Temporarily change the IP address on your computer to 192.168.0.210 with
255.255.255.0 as the subnet mask.
(You can actually use any IP address in the 192.168.0.2192.168.0.254 range,
with the exception of IP address 192.168.0.100, which is the default IP
address of the AP.)
For more information about changing the IP address on your computer, see the
help or documentation for your computer.
3. Use an Ethernet cable to connect your computer to the LAN port on the AP.
4. On the computer, launch a web browser and type 192.168.0.100 in the
address bar.
The login page displays.
Your browser might display a security warning because of the self-signed
certificate on the AP, which is expected behavior. You can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
5. Type the AP user name and default password, and click the Login button.
The user name is admin. The default password is password. The user name and
password are case-sensitive.
The Day Zero Easy Setup page displays.
Install the AP in Your Network
36
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
6. Select the Web-browser radio button. The Day Zero Easy Setup page adjusts to display multiple options.
NOTE: After you save the basic settings that are shown on the page, the Day
Zero Easy Setup page no longer displays when you log in. Instead, a login
window displays. After you log in, the Dashboard displays.
7. To let the AP check for the latest firmware, click the Check for Upgrade
button.
If new firmware is available for the AP, we recommend that you upgrade the
firmware. After the firmware upgrade completes, the AP restarts. When the AP
is ready, depending on your situation, go back to Step 4 or Step 5 of this
procedure.
8. Specify the settings that are described in the following table.
Setting Country/Region
Time Zone DHCP Client
AP Name AP Login New Password
Description
From the menu, select the country and region in which the AP is operating.
Note: In some countries, the AP is sold with a preconfigured country or region
setting and you cannot change it.
Note: If you do not see your country or region listed in the menu, update the
AP’s firmware and check again. If you still do not see your country or region
listed, contact NETGEAR support.
Note: Make sure that the country is set to the location where the device is
operating. It might not be legal to operate the AP in a region other than the
regions listed in the menu. You are responsible for complying with the local,
regional, and national regulations that are set for channels, power levels,
and frequency ranges.
From the menu, select the time zone for the country and region in which the AP
is operating.
By default, the DHCP client of the AP allows the AP to receive an IP address
from a DHCP server (or router that functions as a DHCP server) in your
network.
To set up the AP with a static (fixed) IP address, do the following:
a. Select the Disable radio button.
Additional fields display.
b. Specify the IP address, IP subnet mask, IP address of the default gateway,
and IP address of the DNS server.
As an option, type a new name for the AP. The name must contain alphanumeric
characters, must contain at least one alphabetical character, cannot be longer
than 64 characters, and can contain hyphens but cannot start or end with a
hyphen.
By default, the AP name is Netgearxxxxxx, in which xxxxxx represents the last
six hexadecimal digits of the AP’s MAC address.
Type a new admin password. This is the password that you must use to log in to
the AP’s device UI. (It is not the password that you use for WiFi access.)
The password must be 8 to 63 characters in length and must contain at least
one uppercase letter, one lowercase letter, and one number.
Save the password for future use.
Install the AP in Your Network
37
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
(Continued)
Setting
Description
Confirm New Password
Type exactly the same password that you typed in the AP Login New Password field.
SSID
You cannot use the setup SSID for regular operation. The setup SSID is for initial setup only. Type a new name with a maximum of 32 characters. You can use a combination of alphanumeric and special characters, except for quotation marks (“) and a backslash ().
9. From the Authentication menu, select one of the following authentication
types for the WiFi network, and, if applicable, set a new passphrase (network
key or WiFi password) for the WiFi network:
· Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box
displays.
Enhanced Open check box cleared: The WiFi network is a legacy open network
without any security. This is the default option for an open network. Clients
are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled.
Enhanced Open check box selected: The WiFi enhanced open feature is enabled.
This feature is based on opportunistic wireless encryption (OWE). The
encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory. If you select the Enhanced Open check box, the
Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
and clients that do not. For clients that do not support the WiFi open
enhanced feature, traffic is not encrypted.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
· WPA2 Personal: This option allows only WiFi clients that support WPA2 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA2. This option uses AES encryption. In the Passphrase field,
type a new passphrase for the WiFi network. The passphrase must be at least 8
characters in length and can be a maximum of 63 characters in length.
· WPA2/WPA Personal: This option allows both WPA and WPA2 WiFi clients to
connect to the SSID. This option uses TKIP and AES encryption. Broadcast
packets use TKIP. For unicast (that is, point-to-point) transmissions, WPA
clients use TKIP and WPA2 clients use AES. In the Passphrase field, type a new
passphrase for
Install the AP in Your Network
38
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
the WiFi network. The passphrase must be at least 8 characters in length and
can be a maximum of 63 characters in length.
· WPA3 Personal: This option allows only WiFi clients that support WPA3 to
connect to the SSID. Select this option if all WiFi clients are capable of
supporting WPA3. This option uses SAE encryption. In the Passphrase field,
type a new passphrase for the WiFi network. The passphrase must be at least 8
characters in length and can be a maximum of 63 characters in length.
· WPA3/WPA2 Personal: This option allows both WPA2 and WPA3 WiFi clients to
connect to the SSID. This option uses AES and SAE encryption. WPA2 clients use
AES and WPA3 clients use SAE. In the Passphrase field, type a new passphrase
for the WiFi network. The passphrase must be at least 8 characters in length
and can be a maximum of 63 characters in length.
Note: After you complete the setup process, you can set up WPA2 Enterprise or
WPA3 Enterprise security with RADIUS servers. For more information, see Change
the authentication and encryption for a WiFi network on page 69.
10. Click the Apply button.
Your settings are saved. A pop-up window displays the IP address and the new
WiFi network and password (passphrase).
If you specified a static IP address, save the IP address information because
you must type the IP address when you log in again.
You are disconnected from the AP. If you changed the default country, the AP
restarts.
11. After a few minutes, if the login window does not display automatically,
type 192.168.0.100 in the address bar of your browser.
If you changed the IP address, type the IP address that you saved in Step 8.
Your browser might display a security warning because of the self-signed
certificate on the AP, which is expected behavior. You can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
The login page displays.
12. Type the AP user name and password, and click the Login button.
The user name is admin. The password is the one that you just defined on the
Day Zero Easy Setup page. The user name and password are case-sensitive.
The Dashboard displays. You can now customize the AP settings for your network
environment.
13. After you complete the setup process, or both the setup and customization
process, you can change the computer back to its original IP address settings.
Install the AP in Your Network
39
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Log in to the AP after initial setup
After initial setup, the AP is ready for use and you can change the settings
and monitor the traffic. To log in to the AP’s device UI: 1. Launch a web
browser from a computer that is connected to the same network as
the AP or directly to the AP through an Ethernet cable or WiFi connection. 2.
In the browser address bar, type the IP address that is assigned to the AP.
The login page displays. If your browser displays a security warning, you can
proceed, or add an exception for the security warning. For more information,
see What to do if you get a browser security warning on page 40. 3. Type the
AP user name and password, and click the Login button. The user name is admin.
The password is the one that you specified. The user name and password are
case-sensitive. If you previously added the AP to a NETGEAR Insight network
location and managed the AP through the Insight Cloud Portal or Insight app,
enter the Insight network password for that location. For more information,
see Connect over WiFi using the NETGEAR Insight app on page 26. The Dashboard
displays. The Dashboard displays various panes that let you see the status of
your AP at a glance. For more information about the Dashboard and its various
panes, see Monitor the AP and the Network on page 192.
What to do if you get a browser security warning
When you enter the IP address that is assigned to the AP in the address field
of your browser, a security warning might display because of the self-signed
certificate on the device. This is expected behavior. You can proceed, or add
an exception for the security warning. To proceed with a security warning or
add an exception for a security warning:
Install the AP in Your Network
40
and Access It for Initial
Configuration
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Google Chrome: Click the ADVANCED link. Then, click the Proceed to x.x.x.x
(unsafe) link, in which x.x.x.x represents the domain name or IP address of
the device.
· Apple Safari: Click the Show Details button. Then, click the visit this
website link. If a warning pop-up window displays, click the Visit Website
button. If another pop-up window displays to let you confirm changes to your
certificate trust settings, enter your Mac user name and password and click
the Update Setting button.
· Mozilla Firefox: Click the ADVANCED button. Then, click the Add Exception
button. In the pop-up window that displays, click the Confirm Security
Exception button.
· Microsoft Edge: Select Details > Go on to the webpage. · Microsoft Internet
Explorer: Click the Continue to this website (not
recommended) link.
Install the AP in Your Network
41
and Access It for Initial
Configuration
User Manual
4
Install the AP in an Insight Instant Mesh WiFi Network
In addition to functioning as a regular standalone access point, the AP can
function in an Insight Instant Mesh WiFi network as either a root AP (which we
refer to as a root) or a node AP (which we refer to as a node). This chapter
describes how you can use the NETGEAR Insight Cloud Portal or Insight app to
connect the AP to a root so that you can let the AP function as a node in an
Insight Instant Mesh WiFi network. The NETGEAR Insight Cloud Portal and
Insight app are available for Insight Premium and Insight Pro subscribers.
NOTE: To set up a node in a NETGEAR Insight Instant Mesh WiFi network with a
connection to a root, you must use either the NETGEAR Insight Cloud Portal or
Insight app. You cannot use the device UI to set up a mesh WiFi connection to
a root. For information about how you can manage and monitor the node with the
Insight Cloud Portal and Insight app, visit netgear.com/insight. The Insight
Cloud Portal and Insight app have embedded help and are documented in multiple
knowledge base articles that you can access by visiting netgear.com/support.
The chapter contains the following sections: · What are a root and a node? ·
What is an Insight Instant Mesh WiFi network? · Requirements for placing a
node in an Insight Instant Mesh WiFi network · Access the Cloud Portal to set
up or manage an Insight Instant Mesh WiFi network · Connect the AP as a node
to a root using the Cloud Portal · Install the Insight app to manage an
Insight Instant Mesh WiFi network · Connect the AP as a node to a root using
the Insight app
42
NOTE: In this manual, WiFi network means the same as SSID (service set
identifier or WiFi network name) or VAP (virtual access point). That is, when
we refer to a WiFi network we mean an individual SSID or VAP.
43
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
What are a root and a node?
The AP can function in an Insight Instant Mesh WiFi network as a root or node:
· Root: A mesh-capable AP that you set up with a wired connection to your
network
to create a gateway to one or more mesh-capable APs that function as nodes. On
the root, use the Ethernet port for the connection to your network. A root can
service multiple nodes simultaneously. · Node: A mesh-capable AP with a WiFi
backhaul connection to a root that provides Internet connectivity. The node is
not connected to your network over a wired connection but over a WiFi
connection.
1 2
3
3 4
5 Figure 7. Mesh network with a node and a wired root
Number or Icon and Description 1 A root that is connected over Ethernet to a
network switch. 2 A node that is connected over a 6 GHz backhaul WiFi
connection to the root. 3 Either a computer or a tablet with access to the
Insight Cloud Portal or a mobile phone with the Insight app
The Insight Cloud Portal or Insight app lets you configure and manage the node
in the Insight Instant Mesh WiFi network.
4 A network switch. 5 A network router that is connected to the Internet.
Install the AP in an Insight Instant
44
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
(Continued) Number or Icon and Description
Broadcast in the 2.4 GHz radio band.
Broadcast in the 5 GHz radio band.
Broadcast in the 6 GHz radio band.
What is an Insight Instant Mesh WiFi network?
A mesh WiFi network consists of at least one mesh-capable root and one or more
nodes that connect to the root over WiFi (see What are a root and a node? on
page 44). The root is connected over Ethernet to a router or Internet gateway
and provides Internet access to its nodes. The root and nodes work together to
cover a potentially large area with WiFi network, which is the mesh network.
A mesh network can be a good solution if you want to bring WiFi to the
following environments:
· Nearby rooms where cabling is not available (in line of sight and in range
of the current WiFi reception)
· Neighboring office buildings (in line of sight and in range of the current
WiFi reception)
· Any environment in which you cannot run cables
In the mesh WiFi network, the node connects to the root over a WiFi connection
and broadcasts (extends) the WiFi network to the WiFi clients:
· Backhaul connection: The WiFi connection between the root and the node is
referred to as the backhaul connection.
· Fronthaul connection: The WiFi connection between the node and its WiFi
clients is referred to as the fronthaul connection.
In a NETGEAR Insight Instant Mesh WiFi network, you must use the Insight Cloud
Portal or Insight app to set up the mesh WiFi connection between the root and
the node. That is, you cannot do so through the device UI of either the root
or the node. In a network with multiple roots, NETGEAR Insight automatically
connects the node to the root with the strongest WiFi signal.
Install the AP in an Insight Instant
45
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Although the node broadcasts the same WiFi network or networks as the root,
you can also set up a WiFi network on the node, which then can be broadcast by
the root and other nodes in the mesh network.
The AP can broadcast on the 2.4 GHz band, the 5 GHz band, and the 6 GHz band
(the preferred band for the backhaul connection on the AP). Depending on the
WiFi capability of the WiFi client, any band can provide the fronthaul
connection.
Requirements for placing a node in an Insight Instant Mesh WiFi network
The following are the requirements for placing a node in an Insight Instant
Mesh WiFi network:
· The existing WiFi network must include at least one mesh-capable access
point that runs the latest firmware version. On the root, use one Ethernet
port for the connection to your network.
· The node must be in factory default state. If you previously used the node
in your network, reset the AP to factory default settings.
· The node must be within range of the WiFi signal of a root so that it can
sync with the root. During setup, for a reliable WiFi connection, place the
node less than 25 feet (7.5 m), in a line of sight with minimal obstacles from
the closest root.
· You must use the NETGEAR Insight Cloud Portal or Insight app to install the
node in the existing WiFi network.
For information about the NETGEAR access point models that can function either
as a root or as a node, visit kb.netgear.com/000065847.
Access the Cloud Portal to set up or manage an Insight Instant Mesh WiFi
network
The NETGEAR Insight Cloud Portal is available for Insight Premium and Insight Pro subscribers.
Install the AP in an Insight Instant
46
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
After you install the AP in an Insight Instant Mesh WiFi network, you can use
the Insight Cloud Portal to set up a mesh WiFi connection and configure,
manage, and monitor the AP. For more information about the NETGEAR Insight
Cloud Portal, visit the following pages: ·
netgear.com/business/services/insight · kb.netgear.com/000061848 ·
kb.netgear.com/000044338 To connect to the AP over the Internet through the
Insight Cloud Portal: 1. On a computer or tablet, visit insight.netgear.com.
The NETGEAR Account Login page displays. 2. If you do not already have an
Insight account, you can create an account now.
For information about creating an Insight Premium account or upgrading to an
Insight Pro account, visit kb.netgear.com/000044343. 3. Enter the email
address and password for your NETGEAR account and click the NETGEAR Sign In
button. You can now set up the AP mesh WiFi connection. For more information,
see kb.netgear.com/000061304.
Connect the AP as a node to a root using the Cloud Portal
The NETGEAR Insight Cloud Portal is available for Insight Premium and Insight
Pro subscribers.
You can use the Insight Cloud Portal to connect the AP as a node to a root.
The root must be set up with a wired connection to a router or Internet
gateway so that the root can provide Internet connectivity to the node.
For more information about the Insight Cloud Portal and the configuration and
management options that are available through the Insight Cloud Portal, visit
netgear.com/insight. The Insight Cloud Portal has embedded help and is
documented in multiple knowledge base articles that you can access by visiting
netgear.com/support.
The node can use any band to establish the backhaul connection to the root and
the fronthaul connection to WiFi clients. However, after the backhaul
connection is established, if both the root and the node can support the 6 GHz
band, the node automatically switches to the 6 GHz band as the preferred band
for its backhaul connection. Using the Insight Cloud Portal, you can change
the backhaul settings.
Install the AP in an Insight Instant
47
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
To use the Insight Cloud Portal to connect the node to a root in an existing
WiFi network: 1. Make sure that the mesh mode for the Insight network location
is set to Auto.
For more information, visit kb.netgear.com/000064932. 2. Make sure that the
mesh mode for the root is set to Auto.
For more information, visit kb.netgear.com/000064931. 3. Make sure that node
is in factory default state.
If you previously used the AP in your network, reset the AP to factory default
settings. 4. For a reliable WiFi connection, place the node less than 25 feet
(7.5 m), in a line of
sight with minimal obstacles from the closest root. 5. Connect the node to a
power source.
The LED of the node lights amber and then lights green.
NOTE: To prevent a network loop, connect the node to a PoE++ switch that is
not connected to the same network as the root or to the Internet. You can also
use an optional power adapter. 6. Access the Insight Cloud Portal by visiting
insight.netgear.com, enter your NETGEAR email address and password, and click
the NETGEAR Sign In button. 7. Only if you are an Insight Pro user, select the
organization to which you want to add the node. 8. Select the location to
which you want to add the node. 9. Click the + (Add Device) button. 10. In the
Add New Device pop-up page, enter the node’s serial number and MAC address,
and then click Go. Insight detects the node automatically. This process might
take a few minutes. The node attempts to detect and connect to the root that
provides the strongest WiFi signal in the Insight Instant Mesh WiFi network.
NOTE: The initial connection and configuration process might take up to 10
minutes. The node might restart during the configuration process. 11. Wait for
the node to go through the initial connection and configuration process and
for the LED to stop blinking amber, green, and blue and to light solid blue.
NOTE: The initial connection and configuration process might take up to 10
minutes. The node might restart during the configuration process. The LED
lights as follows during the initial connection and configuration process:
Install the AP in an Insight Instant
48
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Blinking green: The node is attempting to detect a root. · Solid green: The
node is making its first connection with the root that provides
the strongest WiFi signal. · Blinking amber slowly: The node is contacting the
network router or DHCP
server to receive an IP address. If the LED does not stop blinking amber, see
LED is blinking amber slowly, continuously on page 255. · Blinking amber,
green, and blue: The node is being configured as a managed device in the
Insight Instant Mesh WiFi network. If the LED does not stop blinking amber,
green, and blue, see LED does not stop blinking amber, green, and blue on page
257. When the configuration is complete, the LED lights as follows: · Solid
blue: The configuration is complete and the node is ready for operation. The
node functions in the Insight Instant Mesh WiFi network and is connected to
the Insight cloud. The node is automatically configured to broadcast (extend)
the root’s WiFi network. If you are experiencing difficulty connecting the
node with a root, see The node and root cannot connect on page 257. For
information about accessing, managing, and monitoring the node with the
NETGEAR Insight Cloud Portal and Insight app, visit netgear.com/insight. The
Insight Cloud Portal and Insight app have embedded help and are documented in
multiple knowledge base articles that you can access by visiting
netgear.com/support.
Install the Insight app to manage an Insight Instant Mesh WiFi network
The NETGEAR Insight app is available for Insight Premium and Insight Pro
subscribers. Before you can add the AP to an Insight Instant Mesh WiFi network
using the NETGEAR Insight app, you must install the app on an iOS or Android
mobile device. For more information about the NETGEAR Insight app, visit the
following pages: · netgear.com/business/services/insight ·
kb.netgear.com/000061848 · kb.netgear.com/000044338
Install the AP in an Insight Instant
49
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
To install the Insight app to manage an Insight Instant Mesh WiFi network: 1.
On your mobile device, go to the app store, search for NETGEAR Insight, and
download the Insight app.
2. Launch the Insight app. 3. If you do not already have an Insight account,
you can create an account now.
For information about creating an Insight Premium account or upgrading to an
Insight Pro account, visit kb.netgear.com/000044343. 4. Enter the email
address and password for your NETGEAR account and tap LOG IN. You can now set
up the AP mesh WiFi connection (see Connect the AP as a node to a root using
the Insight app on page 50).
Connect the AP as a node to a root using the Insight app
You can use the NETGEAR Insight app to connect the AP as a node to a root. The
root must be set up with a wired connection to a router or Internet gateway so
that the root can provide Internet connectivity to the node.
For more information about the Insight app and the configuration and
management options that are available through the Insight app, visit
netgear.com/insight. The Insight app has embedded help and is documented in
multiple knowledge base articles that you can access by visiting
netgear.com/support.
The node can use any band to establish the backhaul connection to the root and
the fronthaul connection to WiFi clients. However, after the backhaul
connection is established, if both the root and the node can support the 6 GHz
band, the node automatically switches to the 6 GHz band as the preferred band
for its backhaul connection. Using the Insight Cloud Portal, you can change
the backhaul settings.
To use the NETGEAR Insight app to connect the node to a root in an existing
WiFi network:
1. Make sure that the mesh mode for the Insight network location is set to
Auto.
For more information, visit kb.netgear.com/000064932.
Install the AP in an Insight Instant
50
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
You cannot use the Insight app to change the mesh mode for the Insight network
location. You must use the Cloud Portal. For all other steps in this
procedure, you can use the Insight app. 2. Make sure that the mesh mode for
the root is set to Auto. For more information, visit kb.netgear.com/000064929.
3. Make sure that node is in factory default state. If you previously used the
AP in your network, reset the AP to factory default settings. 4. For a
reliable WiFi connection, place the node less than 25 feet (7.5 m), in a line
of sight with minimal obstacles from the closest root. 5. Connect the node to
a power source. The LED of the node lights amber and then lights green.
NOTE: To prevent a network loop, connect the node to a PoE++ switch that is
not connected to the same network as the root or to the Internet. You can also
use an optional power adapter. 6. Connect your mobile device to the existing
WiFi network that includes one or more roots. 7. Launch the Insight app and
sign in to your account. 8. Select the Insight network location with the root.
In most situations, the Insight app detects the node automatically. This
process might take a few minutes. 9. Do one of the following to add the node
to the Insight network location: · Automatically detected: If the node is
automatically detected and listed in the Insight Manageable Devices section,
tap the icon for the node, and then tap the ADD DEVICE button. · Not
automatically detected: If the node is not automatically detected, do the
following: a. Tap the + icon in the top bar. b. Do one of the following:
Tap the SCAN BARCODE OR QR CODE button, and then scan the node’s code.
Tap the Enter Serial Number and MAC address link, and then manually enter the
node’s serial number and MAC address.
c. If prompted, name the node and tap the Next button. The node attempts to
detect and connect to the root that provides the strongest WiFi signal in the
Insight Instant Mesh WiFi network.
Install the AP in an Insight Instant
51
Mesh WiFi Network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
NOTE: The initial connection and configuration process might take up to 10
minutes. The node might restart during the configuration process. 10. Wait for
the node to go through the initial connection and configuration process and
for the LED to stop blinking amber, green, and blue and to light solid blue.
NOTE: The initial connection and configuration process might take up to 10
minutes. The node might restart during the configuration process. The LED
lights as follows during the initial connection and configuration process: ·
Blinking green: The node is attempting to detect a root. · Solid green: The
node is making its first connection with the root that provides the strongest
WiFi signal. · Blinking amber slowly: The node is contacting the network
router or DHCP server to receive an IP address. If the LED does not stop
blinking amber, see LED is blinking amber slowly, continuously on page 255. ·
Blinking amber, green, and blue: The node is being configured as a managed
device in the Insight Instant Mesh WiFi network. If the LED does not stop
blinking amber, green, and blue, see LED does not stop blinking amber, green,
and blue on page 257. When the configuration is complete, the LED lights as
follows: · Solid blue: The configuration is complete and the node is ready for
operation. The node functions in the Insight Instant Mesh WiFi network and is
connected to the Insight cloud. The node is automatically configured to
broadcast (extend) the root’s WiFi network. If you are experiencing difficulty
connecting the node with a root, see The node and root cannot connect on page
257. For information about accessing, managing, and monitoring the node with
the NETGEAR Insight Cloud Portal and Insight app, visit netgear.com/insight.
The Insight Cloud Portal and Insight app have embedded help and are documented
in multiple knowledge base articles that you can access by visiting
netgear.com/support.
Install the AP in an Insight Instant
52
Mesh WiFi Network
User Manual
5
Manage the Basic WiFi Features for a WiFi network
The AP can support eight WiFi networks, each with its own unique WiFi
settings, including WiFi security. This chapter describes how you can manage
the basic WiFi features for a WiFi network. For information about the advanced
WiFi features for a WiFi network, see Manage the Advanced WiFi Features for a
WiFi network on page 211. The chapter includes the following sections: · Set
up an open or secure WiFi network · Display or change the settings of a WiFi
network · Remove a WiFi network · Hide or broadcast the SSID for a WiFi
network · Change the VLAN ID for a WiFi network · Change the authentication
and encryption for a WiFi network · Enable or disable PMF for a WiFi network ·
Set up Multi PSK for a WiFi network · Disable or enable a WiFi network or set
up a WiFi activity schedule · Enable or disable band steering · Configure
multi-link operation
NOTE: If you want to change the settings of a WiFi network on the AP, use a
wired connection to avoid being disconnected when the new WiFi settings take
effect.
53
NOTE: In this manual, WiFi network means the same as SSID (service set
identifier or WiFi network name) or VAP (virtual access point). That is, when
we refer to a WiFi network we mean an individual SSID or VAP.
54
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Set up an open or secure WiFi network
The AP provides one setup SSID that is enabled by default and that broadcasts
on the 2.4 GHz band, 5 GHz band, and 6 GHz band. This is the SSID that you
renamed and for which you set a new passphrase when you initially connected to
the AP. We also refer to this SSID as the default WiFi network, and it is
displayed as SSID1 in the device UI. You can add more SSIDs: The AP can
support a total of eight SSIDs.
The AP can simultaneously support the 2.4 GHz band for 802.11b/g/n/ax/be WiFi
devices, the 5 GHz band for 802.11a/na/ac/ax/be WiFi devices, and the 6 GHz
band for 802.11ax/be devices.
SSID stands for service set identifier, which is the WiFi network name. When
you create a new SSID, you are defining the settings for a new WiFi network,
also referred to as virtual access point (VAP). That means that the AP
supports up to eight WiFi networks or VAPs.
If you plan to use WPA2 Enterprise security or WPA3 Enterprise security for
your WiFi network, first set up RADIUS servers (see Set up RADIUS servers on
page 107). Note that WPA2 Enterprise security and WPA3 Enterprise security are
not compatible with a multicast DNS (mDNS) gateway (see Manage the multicast
DNS gateway on page 162).
To set up a WiFi network:
1. Launch a web browser from a computer that is connected to the same network
as the AP or directly to the AP through an Ethernet cable or WiFi connection.
2. In the browser address bar, type the IP address that is assigned to the
AP.
The login page displays.
If your browser displays a security warning, you can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
3. Type the AP user name and password, and click the Login button.
The user name is admin. The password is the one that you specified. The user
name and password are case-sensitive.
If you previously added the AP to a NETGEAR Insight network location and
managed the AP through the Insight Cloud Portal or Insight app, enter the
Insight network password for that location. For more information, see Connect
over WiFi using the NETGEAR Insight app on page 26.
The Dashboard displays.
4. Select Management > Configuration > Wireless > Basic > WLAN Settings.
Manage the Basic WiFi Features
55
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
The page that displays lets you select and add an SSID.
5. Click the + button to the left of Add SSID.
A pop-up page displays the settings for the SSID.
6. Specify the WiFi network name (SSID), select whether the SSID is
broadcast, and specify the VLAN ID as described in the following table.
Setting
Description
Wireless Network Name (SSID)
The SSID is the WiFi network name of the VAP. Enter a name for the SSID with a
maximum of 32 characters. You can use a combination of alphanumeric and
special characters, except for quotation marks (“) and a backslash ().
For a WiFi device to be able to connect to the VAP, the SSID on the WiFi
device must match the SSID of the VAP.
Broadcast SSID
By default, the VAP broadcasts its SSID so that WiFi clients can detect the
SSID in their scanned network lists. To turn off the SSID broadcast, select
the No radio button.
Turning off the SSID broadcast provides additional WiFi security, but users
must know the SSID to be able to join the VAP.
VLAN ID
You can enter the VLAN ID that must be associated with the VAP. By default,
the VLAN ID is 1. The VLAN must be between 1 and 4094.
This VLAN ID is not the same as the 802.1Q VLAN ID that is used for the wired
network (see Set the 802.1Q VLAN and management VLAN on page 154).
7. Specify the WiFi security by selecting an option from the Authentication
menu and, if applicable, by specifying a passphrase in the Passphrase field or
selecting an option from the Encryption menu:
· Open: A legacy open WiFi network does not provide any security. Any WiFi
device can join the network. We recommend that you do not use a legacy open
WiFi network but configure WiFi security. However, a legacy open network might
be appropriate for a WiFi hotspot.
If you select Open from the Authentication menu, the Enhanced Open check box
displays.
Enhanced Open check box cleared: The WiFi network is a legacy open network
without any security. This is the default option for an open network. Clients
are not authenticated, traffic is not encrypted, and 802.11w (PMF) is
automatically disabled (see Step 8).
Enhanced Open check box selected: The WiFi enhanced open feature is enabled.
This feature is based on opportunistic wireless encryption (OWE). The
encryption is set to CCM mode protocol (CCMP) and 802.11w (PMF) is
automatically set to mandatory (see Step 8). If you select the Enhanced Open
check box, the Allow Devices to Connect with Open check box displays.
If you select the Allow Devices to Connect with Open check box, the WiFi
network can accept both clients that support the WiFi enhanced open feature
Manage the Basic WiFi Features
56
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
and clients that do not. For clients that do not support the WiFi open
enhanced feature, traffic is not encrypted.
In this case, the SSID name can have a maximum length of 28 characters. Also,
you can configure a maximum of two WiFi networks with OWE security and the
option to allow both clients that support the WiFi enhanced open feature and
clients that do not.
If you clear the Allow Devices to Connect with Open check box, the WiFi
network can only accept clients that support the WiFi enhanced open feature.
· WPA2 Personal: This option is not available if the 6 GHz band is enabled.
This option, which is the same as WPA2-PSK, uses AES encryption. This type of
security enables only WiFi devices that support WPA2 to join the VAP.
WPA2 provides a secure connection but some legacy WiFi devices do not detect
WPA2 and support only WPA. If your network includes such older devices, select
WPA2/WPA Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the
VAP, a user must enter this passphrase. To display the passphrase in clear
text, click the eye icon.
· WPA2/WPA Personal: This option is not available if the 6 GHz band is
enabled.
This option, which is the same as WPA2-PSK/WPA-PSK, enables WiFi devices that
support either WPA2 or WPA to join the VAP. This option uses AES and TKIP
encryption.
WPA-PSK (which uses TKIP) is less secure than WPA2-PSK (which uses AES) and
limits the speed of WiFi devices to 54 Mbps.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the
VAP, a user must enter this passphrase. To display the passphrase in clear
text, click the eye icon.
· WPA2 Enterprise: This option is not available if the 6 GHz band is enabled.
This enterprise-level security uses RADIUS for centralized Authentication,
Authorization, and Accounting (AAA) management. For WPA2 Enterprise security
to function, you must set up RADIUS servers (see Set up RADIUS servers on page
107).
WPA2 Enterprise security and a captive portal are mutually exclusive.
From the Encryption menu, select the data encryption mode:
TKIP + AES. This type of data encryption enables WiFi devices that support
either WPA or WPA2 to join the AP’s WiFi network. This is the default mode.
AES. This type of data encryption provides a secure connection but some older
WiFi devices do not detect WPA2 and support only WPA. Therefore, if your
network includes such older devices, select TKIP + AES encryption.
Manage the Basic WiFi Features
57
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
When you select WPA2 Enterprise authentication, the Dynamic VLAN radio buttons
display:
Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
A dynamic VLAN is mutually exclusive with a captive portal, NAT mode, wireless
client isolation, a multicast DNS (mDNS) gateway, and multi-link operation
(MLO).
· WPA3 Personal: This option is the most secure personal authentication
option. WPA3 uses SAE encryption and enables only WiFi devices that support
WPA3 to join the VAP. If you select this option, 802.11w (PMF) is
automatically set to mandatory (see Step 8).
WPA3 provides a secure connection but some legacy WiFi devices do not detect
WPA3 and support only WPA2. If your network also includes WPA2 devices, select
WPA3/WPA2 Personal authentication.
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the
VAP, a user must enter this passphrase. To display the passphrase in clear
text, click the eye icon.
· WPA3/WPA2 Personal: This option, which is the same as WPA3/WPA2-PSK, is the
default setting. It enables WiFi devices that support either WPA3 or WPA2 to
join the VAP. This option uses SAE and AES encryption.
WPA2-PSK (which uses AES) is less secure than WPA3 (which uses SAE).
In the Passphrase field, enter a phrase of 8 to 63 characters. To join the
VAP, a user must enter this passphrase. To display the passphrase in clear
text, click the eye icon.
· WPA3 Enterprise: This enterprise-level security uses RADIUS for centralized
Authentication, Authorization, and Accounting (AAA) management. For WPA3
Enterprise security to function, you must set up RADIUS servers (see Set up
RADIUS servers on page 107). If you select this option, 802.11w (PMF) is
automatically set to mandatory (see Step 8).
WPA3 Enterprise security and a captive portal are mutually exclusive.
When you select WPA3 Enterprise security, the encryption is automatically set
to GCMP256, which is a 256-bit encryption protocol.
When you select WPA3 Enterprise authentication, the Dynamic VLAN radio buttons
display:
Manage the Basic WiFi Features
58
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Enable: The RADIUS server can assign a VLAN ID to clients. If the RADIUS
server does not do so, the clients are automatically assigned the VLAN ID that
you configured for the SSID.
Disable: The clients are assigned the VLAN ID that you configured for the
SSID. This is the default setting.
A dynamic VLAN is mutually exclusive with a captive portal, NAT mode, wireless
client isolation, a multicast DNS (mDNS) gateway, and multi-link operation
(MLO). 8. Optionally, enable 802.11w Protected Management Frames (PMF).
Protected Management Frames (PMF), according to the 802.11w standard, is a
security feature that protects unicast and multicast management frames from
being intercepted and changed for malicious purposes. The type of
authentication that you select determines if this feature is mandatory,
optional, or disabled. You can also set it manually. · Mandatory: This option
requires devices to use PMF. Devices that do not support PMF cannot connect to
the WiFi network. If you select Enhanced Open authentication, WPA3 Personal
authentication, or WPA3 Enterprise authentication, the radio button for PMF is
set to Mandatory, and you cannot change it. · Optional: This option lets the
AP automatically activate PMF based on whether devices can support PMF. If you
select WPA3/WPA2 Personal authentication, the radio button for PMF is set to
Optional, but you can change it. · Disable: This option disables PMF. If you
select Open, WPA2 Personal, WPA2/WPA Personal, or WPA2 Enterprise
authentication, the radio button for PMF is set to Disabled, but you can
change it (except for Open authentication). 9. Optionally, enable Multi Pre-
Shared Key (PSK), which lets you segregate the WiFi network into different
VLANs, each accessible with a unique passphrase. Multi PSK is supported only
if the WiFi security is WPA2 Personal or WPA2/WPA Personal. In a way, Multi
PSK lets you create different sub WiFi networks on the WiFi network that you
are setting up. Although you can also configure this feature while you set up
a WiFi network, this feature is more complex and therefore described
separately. For more information, see Set up Multi PSK for a WiFi network on
page 74. 10. Optionally, disable the WiFi broadcast or set up a WiFi activity
schedule by selecting one of the following radio buttons:
Manage the Basic WiFi Features
59
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Always ON: When you set up an SSID, you are creating a new VAP. By default,
the new VAP is enabled and the Always ON radio button is selected.
· Always OFF: Select this radio button to set up the SSID but temporarily
disable the VAP.
· Custom: Select this radio button to set up a broadcast schedule. An icon
displays to the right of the radio button. Do the following:
a. Click the icon next to the radio button.
A pop-up window displays.
b. Either select a predefined time from the Preset menu or select custom time
blocks by clicking the time blocks.
A blue color for a time block indicates that the VAP will be enabled (on). A
gray color for a time block indicates that the VAP will be disabled (off).
c. Click the Done button.
The pop-up window closes.
For each SSID, you can create a single custom schedule. In that schedule, for
each day from 12:00 a.m. to the next day 12:00 a.m., you specify the time or
times that the VAP is disabled. You can schedule a maximum of three events for
a single day.
11. Optionally, select one or two radio bands only by clearing one or more
check boxes.
Clear one or more check boxes (2.4 GHz, 5 GHz, or 6 GHz) or keep the default
selection. By default, the 2.4 GHz and 5 GHz check boxes are selected but the
6 GHz check box is cleared, which means that the AP broadcast the SSID on the
2.4 GHz and 5 GHz bands.
NOTE: If you enable the 6 GHz band, only WiFi clients that support WiFi 6
capabilities can connect to the 6 GHz band, as well as to the 2.4 GHz or 5 GHz
band. WiFi clients that do not support WiFi 6 capabilities can connect to the
2.4 GHz or 5 GHz band.
12. Optionally, enable band steering with 802.11k radio resource management
(RRM) and 802.11v WiFi network management.
By default, band steering with 802.11k RRM and 802.11v WiFi network management
is disabled for the VAP.
To enable band steering with 802.11k RRM and 802.11v WiFi network management,
select the Enable radio button. Doing so allows the AP, under certain channel
conditions, to steer WiFi devices to the 2.4 GHz, 5 GHz, or 6 GHz band of the
VAP. These WiFi devices must be dual-band or tri-band capable. Compared to the
2.4 GHz band, generally more channels and bandwidth are available in the 5 GHz
band, and even more in the 6 GHz band, causing less interference and allowing
for a better user experience.
Manage the Basic WiFi Features
60
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
802.11k RRM and 802.11v WiFi network management affect the network in the
following ways:
· 802.11k RRM: This feature lets the AP and 802.11k-aware clients dynamically
measure the available radio resources. In an 802.11k-enabled network, APs and
clients can send neighbor reports, beacon reports, and link measurement
reports to each other, allowing 802.11k-aware clients to automatically select
the best AP for initial connection or for roaming.
· 802.11v WiFi network management: This feature lets the AP steer its WiFi
clients to the 2.4 GHz, 5 GHz, or 6 GHz band, based on the AP’s channel load.
The AP sets the received signal strength indicator (RSSI) threshold
automatically. (That is, you cannot configure the RSSI threshold manually.)
13. Optionally, enable multi-link operation (MLO).
Aggregating the AP’s radios is referred to as multi-link operation (MLO),
which is a key feature of Wi-Fi 7. Devices that communicate using MLO are
called multi link devices (MLDs).
For MLO to function, enable at least two radios and configure the WiFi mode as
11be for each radio. . MLO improves throughput, latency, and reliability. For
more information, see Configure multi-link operation on page 79.
Under Multi-Link Operation, select one of the following radio buttons:
· Enable: MLO is enabled. The radios on which 11be is enabled are aggregated
to function as if they were a single link.
· Disable: MLO is disabled. The radios on which 11be is enabled function
independently. This is the default setting.
14. To set the addressing and traffic mode, configure client isolation,
configure URL tracking, configure a captive portal, select a MAC ACL for WiFi
clients, configure bandwidth rate limits, or do all of this, scroll down and
click the > Advanced tab.
The pop-up page expands.
15. Optionally, set the NAT mode or Bridge mode for addressing and traffic.
By default, the addressing and traffic mode of the AP is Bridge mode, which
means that WiFi clients receive IP addresses from a DHCP server (or a router
that functions as a DHCP server) in your network. This is usually the same
DHCP server that assigns an IP address to the AP itself.
You can also set NAT mode, which enables the AP’s DHCP server for WiFi
clients. The AP’s DHCP server assigns an IP address in a different range from
the IP address of the AP itself. NAT mode and Multi PSK (see Step 9) are
mutually incompatible.
From the Addressing and Traffic menu, select the addressing and traffic mode:
Manage the Basic WiFi Features
61
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Bridge: The WiFi clients receive their IP addresses from the DHCP server in
the same network as the AP. This is the default mode.
· NAT: WiFi clients receive their IP addresses from a private DHCP address
pool on the AP. If you select this mode, by default, the WLAN network address
is 172.31.0.0. This means that WiFi clients are assigned an IP address in the
range from 172.31.0.2 to 172.31.3.254. The IP address of the default DNS
server for the WLAN is 8.8.8.8. To change the default range for the DHCP
address pool, the default DNS server, or the lease time, do the following:
a. In the Network Address field, type a network address that is different from
the network address for the AP. For example, if the AP’s IP address is in the
range from 192.168.0.1 to 192.168.0.254 (a common IP address range), type a
network address that is different from 192.168.0.0.
b. From the Subnet Mask menu, select one of the preconfigured subnet mask
schemes.
c. In the DNS field, enter the IP address for the DNS server that you want to
use. This IP address must be different from the WLAN network address that you
set in the previous step.
d. In the Lease Time field, type the period in minutes that the address lease
is valid for a WiFi client. The range is from 5 minutes to 43200 minutes. The
default is 1440 minutes (24 hours). After the lease expires, the WiFi client
must reconnect.
NAT mode is mutually exclusive with a dynamic VLAN (DVLAN), Multi PSK (see
Step 9), a multicast DNS (mDNS) gateway, and a management VLAN other than VLAN
- 16. Optionally, configure WiFi client isolation.
By default, client isolation is disabled for the VAP, and the Disable radio button is selected.
To block communication between WiFi clients that are associated with the same SSID or different SSIDs on the AP, select the Enable radio button.
When you select the Enable radio button, the Allow access to devices listed below check box displays. You can then select and add static IP addresses or domains (that resolve to static IP addresses) of network devices that are exempt from isolation so that clients are allowed to reach them. For more information, see Enable or disable client isolation for a WiFi network on page -
WiFi client isolation is mutually exclusive with a MAC/IP Traffic Filter group (see Step 22), a dynamic VLAN (DVLAN), Multi PSK (see Step 9), and a multicast DNS (mDNS) gateway. You also cannot enable WiFi client isolation if you disallow broadcast and multicast traffic (see Step 21) or allow it only from a group of specific devices (see Step 22).
17. Optionally, enable URL tracking.
Manage the Basic WiFi Features
62
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
By default, URL tracking is disabled, and the Disable radio button is
selected. To enable URL tracking for all URLs that are requested by WiFi
clients that are connected to the SSID, select the Enable radio button. For
information about how to display the tracked URLs per SSID or per WiFi client,
see Display or download tracked URLs on page 205. 18. To configure a captive
portal, a MAC ACL for WiFi clients, or bandwidth rate limits, see the
information in the following sections: · Set Up and Manage a Captive Portal on
page 96 · Manage MAC ACLs for WiFi clients on page 131 and Select a MAC ACL
for WiFi
clients in a WiFi network on page 217 · Set bandwidth rate limits for a WiFi
network on page 219 Although you can also configure these features while you
set up a WiFi network, these features are more complex and therefore described
separately. 19. To change the DHCP Offer message settings, allow or disallow
broadcast and multicast traffic, select a MAC ACL for broadcast and multicast
traffic from WiFi clients, select a MAC/IP Traffic Filter group, or do all of
this, scroll down and click the >Traffic Policy tab. The pop-up page expands.
20. Optionally, change the DHCP Offer message settings. When a device tries to
associate with the WiFi network and negotiates an IP address, the AP converts
the broadcast DHCP offer message that it receives from the DHCP server to a
unicast message, and forwards it to the device. This is the default option
(that is, the Enable radio button is selected). To disable this option so that
the AP does not convert the broadcast DHCP offer messages to unicast messages,
select the Disable radio button. The DHCP Offer message settings are not
available and do not display on the page if you enable multi-link operation
(MLO, see Step 13). 21. To disallow broadcast and multicast traffic in the
WiFi network, clear the Allow Broadcast/Multicast Traffic check box. By
default, broadcast and multicast traffic is allowed. 22. To select a MAC ACL
for broadcast and multicast traffic from WiFi clients or select a MAC/IP
Traffic Filter group, see the information in the following sections: · Manage
MAC ACLs for broadcast and multicast traffic from WiFi clients on page
137 and Select a MAC ACL for broadcast and multicast traffic from WiFi clients
in a WiFi network on page 222 · Manage MAC/IP Traffic Filter groups for WiFi
networks on page 142 and Select a MAC/IP Traffic Filter group for a WiFi
network on page 225
Manage the Basic WiFi Features
63
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
Although you can also configure these features while you set up a WiFi
network, these features are more complex and therefore described separately.
23. To configure advance rate selection for the 2.4 GHz band and 5 GHz band,
scroll down and click the >Advanced Rate Selection tab.
For more information, see Configure advanced rate selection for a WiFi network
on page 226.
Although you can also configure this feature while you set up a WiFi network,
the feature is more complex and therefore described separately. 24. Click the
Apply button.
Your settings are saved.
25. Make sure that you can connect to the new WiFi network.
If you cannot connect to the new WiFi network, check the following:
· If your WiFi-enabled computer or mobile device is already connected to
another WiFi network in your area, disconnect it from that WiFi network and
connect it to the correct WiFi network. Some WiFi devices automatically
connect to the first open network without WiFi security that they discover.
· If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the
WiFi network selection in your WiFi-enabled computer or mobile device to match
the current settings for your network.
· Does your WiFi device display as a connected client? (See Display client
distribution, connected clients, and client trends on page 201.) If it does,
it is connected to the network.
· Are you using the correct WiFi network name (SSID) and password?
· If the WiFi authentication and encryption is set to WPA3 Personal, make sure
that the WiFi adapter device driver is updated to the latest version on your
WiFi-enabled computer or mobile device.
Display or change the settings of a WiFi network
You can display or change the settings of the default WiFi network (SSID or
VAP) or any custom WiFi network. The default WiFi network is the SSID that you
renamed and for which you set a new passphrase when you initially connected to
the AP. This SSID is displayed as SSID1 in the device UI.
Manage the Basic WiFi Features
64
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
To display or change the settings of a WiFi network:
1. Launch a web browser from a computer that is connected to the same network
as the AP or directly to the AP through an Ethernet cable or WiFi connection.
2. In the browser address bar, type the IP address that is assigned to the
AP.
The login page displays.
If your browser displays a security warning, you can proceed, or add an
exception for the security warning. For more information, see What to do if
you get a browser security warning on page 40.
3. Type the AP user name and password, and click the Login button.
The user name is admin. The password is the one that you specified. The user
name and password are case-sensitive.
If you previously added the AP to a NETGEAR Insight network location and
managed the AP through the Insight Cloud Portal or Insight app, enter the
Insight network password for that location. For more information, see Connect
over WiFi using the NETGEAR Insight app on page 26.
The Dashboard displays.
4. Select Management > Configuration > Wireless > Basic > WLAN Settings.
The page that displays lets you select an SSID.
5. Click the > button to the left of the SSID.
The settings for the selected SSID display.
6. Change the settings of the WiFi network as needed.
For detailed descriptions of the settings, see Set up an open or secure WiFi
network on page 55.
7. If you made changes, click the Apply button.
Your settings are saved.
8. If you made changes, make sure that you can reconnect over WiFi to the
network with its new settings.
If you cannot connect over WiFi, check the following:
· If your WiFi-enabled computer or mobile device is already connected to
another WiFi network in your area, disconnect it from that WiFi network and
connect it to the correct WiFi network. Some WiFi devices automatically
connect to the first open network without WiFi security that they discover.
· If your WiFi-enabled computer or mobile device is trying to connect to your
network with its old settings (before you changed the settings), update the
WiFi network selection in your WiFi-enabled computer or mobile device to match
the current settings for your network.
Manage the Basic WiFi Features
65
for a WiFi network
User Manual
BE9400 Tri-Band PoE 2.5G Insight Managed WiFi 7 Access Point Model WBE710
· Does your WiFi device display as a connected client? (See Display client
distribution, connected clients, and client trends on page 201.) If it does,
it is connected to the network.
· Are you using the correct WiFi network name (SSID) and password?
Remove a WiFi network
You can remove a custom WiFi network (SSID or VAP) that you no longer need.
You cannot remove the default WiFi network. The default WiFi network is the
SSID that you renamed and for which you set a new passphrase when you
initially connected to the AP. This SSID is displayed as SSID1 in the device
UI. To remov
References
- Access Point Login
- English - NETGEAR Communities
- Insight Cloud Portal
- Knowledge base landing page for Insight Managed Wireless Access Points - NETGEAR Support
- Knowledge base landing page for Insight Managed Wireless Access Points - NETGEAR Support
- How do I create an Insight account? - NETGEAR Support
- How do I set up an Insight Instant Mesh network? - NETGEAR Support
- How do I use NETGEAR's one year of Insight included subscription? - NETGEAR Support
- Which domains and ports should I open on my firewall for my Insight Managed devices? - NETGEAR Support
- How do I change an access point's mesh mode using the Insight app? - NETGEAR Support
- How do I change an access point's mesh mode using the Insight Cloud Portal? - NETGEAR Support
- How do I change my Insight network location's mesh mode using the Insight Cloud Portal? - NETGEAR Support
- Which access points support Insight Mesh WiFi? - NETGEAR Support
- NETGEAR Support | NETGEAR
- NETGEAR Support | NETGEAR
- Download Center | Downloads and Documentation | NETGEAR
- Insight Management Solution | NETGEAR Support
- NETGEAR Support | NETGEAR
- English - NETGEAR Communities
- Insight Cloud Portal
- Knowledge base landing page for Insight Managed Wireless Access Points - NETGEAR Support
- How do I create an Insight account? - NETGEAR Support
- Do I need to use a surge protector with my NETGEAR Business device? - NETGEAR Support
- How do I set up an Insight Instant Mesh network? - NETGEAR Support
- How do I use NETGEAR's one year of Insight included subscription? - NETGEAR Support
- Which domains and ports should I open on my firewall for my Insight Managed devices? - NETGEAR Support
- How do I change an access point's mesh mode using the Insight app? - NETGEAR Support
- How do I change an access point's mesh mode using the Insight Cloud Portal? - NETGEAR Support
- How do I change my Insight network location's mesh mode using the Insight Cloud Portal? - NETGEAR Support
- Which access points support Insight Mesh WiFi? - NETGEAR Support
- NETGEAR Terms and Conditions | NETGEAR
- NETGEAR Terms and Conditions | NETGEAR
- NETGEAR Support | NETGEAR
- Download Center | Downloads and Documentation | NETGEAR
- Insight Management Solution | NETGEAR Support