Netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point User Manual

Content

NETGEAR WAX628 Insight Managed WiFi 6 AX5400 Access Point: Complete Manual

Introduction

The netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point is a dual-band wireless access point designed to provide fast, reliable WiFi for small businesses, professional offices, retail locations, classrooms, and larger homes. It combines WiFi 6 performance with cloud-based NETGEAR Insight management, making it possible to configure, monitor, and maintain wireless networks from a mobile app or web browser.

The access point supports a combined theoretical wireless speed of up to 5.4 Gbps, with a 4x4 5 GHz radio and a 2x2 2.4 GHz radio. Its 2.5GbE Ethernet port helps reduce wired-network bottlenecks, while Power over Ethernet Plus simplifies installation by carrying power and data through one cable. A second 1GbE port provides an additional wired connection option.

WiFi 6 features such as OFDMA, improved multi-device efficiency, and support for wider 160 MHz channels help the WAX628 handle busy networks with many smartphones, laptops, cameras, smart-home devices, and business endpoints. WPA3 security and multiple SSIDs support guest access, staff networks, IoT segmentation, and other practical deployments.

This model is best suited to users who need centrally managed WiFi, multi-gigabit uplink support, and more control than a typical consumer router provides. It can operate through NETGEAR Insight cloud management or in standalone mode.

NETGEAR WAX628 Specifications and Technical Details

Wireless standard: WiFi 6, based on IEEE 802.11ax.
WiFi class: AX5400.
5 GHz radio: 4x4 MIMO with 20, 40, 80, and 160 MHz channel widths.
2.4 GHz radio: 2x2 MIMO with 20 and 40 MHz channel widths.
Theoretical throughput: Up to 4.8 Gbps on 5 GHz and 600 Mbps on 2.4 GHz.
Ethernet connectivity: One 2.5GbE PoE+ port and one 1GbE port.
Power: 802.3at PoE+ support; a compatible power adapter may also be used where applicable.
Security: WPA2 and WPA3 wireless security options, with support for separate wireless networks.
Management: NETGEAR Insight cloud management or standalone configuration.
Dimensions: Approximately 241.15 x 239.6 x 51.38 mm.
Weight: Approximately 819 g.
Antenna gain: Approximately 2.9 dBi on 5 GHz and 2.4 dBi on 2.4 GHz.
Installation: Suitable for wall or ceiling mounting with the supplied mounting hardware.

Actual wireless speeds depend on client hardware, channel conditions, interference, network configuration, Ethernet capacity, and distance from the access point. The AX5400 rating represents combined theoretical radio throughput rather than a guaranteed internet speed.

Detailed Description of the NETGEAR WAX628

The netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point connects to a router, firewall, or network switch through Ethernet and provides wireless access to compatible devices. In a PoE+ installation, the LAN 1/PoE+ port receives both network data and electrical power from an 802.3at-compatible switch or injector. This reduces cable clutter and simplifies ceiling or wall installation.

The 5 GHz radio is designed for high-throughput devices such as laptops, tablets, video-conferencing systems, and modern smartphones. The 2.4 GHz radio offers better range and compatibility for older equipment and many IoT devices. Administrators can create separate SSIDs for employees, guests, cameras, smart devices, or point-of-sale equipment.

Its enclosure is intended for permanent indoor network installation and can be mounted in a central location to improve coverage. For day-to-day use, most configuration tasks are performed through Insight or the standalone management interface rather than physical controls. Inspect the Ethernet cable and status LEDs during routine checks. Disconnect power before cleaning, then wipe the enclosure with a soft, dry cloth. Do not spray liquid into the vents or ports.

How to Set Up the NETGEAR WAX628

Choose a central indoor location away from large metal objects, microwave ovens, thick concrete, and sources of radio interference.
Attach the mounting bracket if installing the access point on a wall or ceiling. Use suitable anchors for the mounting surface.
Connect an Ethernet cable to the LAN 1/PoE+ port.
Connect the other end to an 802.3at PoE+ switch or compatible PoE+ injector. Alternatively, use an approved power adapter if the installation does not use PoE+.
Connect the network equipment to a router or firewall with active internet access and DHCP service.
Allow the access point time to boot. Watch the Power/Cloud LED for its operating status.
For cloud management, install the NETGEAR Insight app or open the Insight web portal, sign in, and add the access point using its identification details.
Create a management password, configure one or more SSIDs, select appropriate WPA2 or WPA3 security, and set strong wireless passwords.
Use separate guest and internal networks when visitors or untrusted IoT devices require access.
Test both bands from several locations and confirm that internet access, roaming, and wired connectivity work as expected.

Use shielded or properly rated Ethernet cabling for multi-gigabit connections. Do not install the device near water, block its ventilation openings, or use a damaged power cable. If the access point does not start, verify the PoE switch supplies 802.3at power rather than standard non-PoE Ethernet.

NETGEAR WAX628 Troubleshooting Guide

The access point does not power on

Check both ends of the Ethernet cable and confirm that it is connected to the LAN 1/PoE+ port. Verify that the switch or injector supports 802.3at PoE+. Test another cable or PoE port if available. When using an adapter, confirm that it is firmly connected and appropriate for the device.

The Power/Cloud LED remains amber

Allow several minutes for startup to complete, then power-cycle the access point. If the condition continues, check the Ethernet connection and network availability. A factory reset may be necessary if normal startup does not resume, but resetting erases the current configuration.

The access point does not receive an IP address

Confirm that the router or DHCP server is operating and that the access point is connected to the correct network segment. Review VLAN and switch-port settings, then restart the access point. A fixed management address may be required on networks without DHCP.

Clients cannot connect to WiFi

Confirm the SSID is enabled, recheck the wireless password, and verify that the client supports the selected WPA2 or WPA3 mode. Move the client closer to the access point and test both frequency bands. Excessive interference may require a different channel or channel width.

Performance is lower than expected

Check whether the uplink is negotiating at 2.5Gbps, confirm that the client supports WiFi 6, and test close to the access point. Walls, neighboring networks, older clients, and internet-service limits can reduce throughput.

Keep firmware current through the NETGEAR Insight interface or the official NETGEAR support portal. For unresolved hardware, firmware, or account issues, consult the WAX628 documentation and contact NETGEAR Support through the support section of the official NETGEAR website. Have the model, serial number, firmware version, LED behavior, and network topology available.

NETGEAR WAX628 Pros and Cons

Pros

High wireless capacity: The AX5400 design combines a 4x4 5 GHz radio with a 2x2 2.4 GHz radio for busy networks and demanding clients.
Multi-gigabit uplink: The 2.5GbE PoE+ port is faster than the 1GbE uplink found on many conventional wireless access points.
Flexible administration: Insight cloud management supports remote monitoring and centralized configuration, while standalone mode suits users who prefer local control.
Business-oriented segmentation: Multiple SSIDs and WPA3 support help separate guest, staff, and IoT traffic.
Simple installation: PoE+ allows one Ethernet cable to carry power and data to a wall- or ceiling-mounted access point.

Cons

Requires suitable infrastructure: Full benefit from the 2.5GbE port requires compatible cabling, switching, and network equipment.
Advanced configuration takes planning: VLANs, multiple SSIDs, roaming, and enterprise security settings may be excessive for a basic home network.
Theoretical speeds are not guaranteed: Real-world performance varies with client capability, interference, distance, and channel utilization.
Cloud features may not suit every administrator: Users seeking a completely local, controller-free experience may prefer a simpler standalone access point.

The netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point is a strong fit for small and medium-sized businesses, integrators, and advanced home users who need WiFi 6 capacity, PoE+, multi-gigabit networking, and centralized management. A basic consumer router may be more appropriate for a small apartment or a network with only a few low-demand devices.

PDF

Faqs

How do I set up the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point for the first time?

Connect the WAX628 LAN 1/PoE+ port to an 802.3at PoE+ switch, or use a compatible power adapter and regular network switch. Wait for the access point to start, then connect a phone or tablet to the setup SSID shown on the product label. Open the NETGEAR Insight app, sign in, create or select a network location, and add the WAX628. Follow the app prompts to configure the wireless network name, password, security, and management settings.

What power and network equipment does the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point require?

The WAX628 requires an 802.3at PoE+ connection when powered through Ethernet. Connect the cable to LAN 1/PoE+, which supports up to 2.5 Gbps. If a PoE+ switch is unavailable, use a compatible power adapter with a standard network switch. Check that the Ethernet cable, switch port, and network uplink support the desired speed. A basic non-PoE switch alone cannot power the access point.

Can the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point work with older WiFi devices?

Yes. The WAX628 supports WiFi 6 devices while remaining compatible with earlier WiFi generations, including WiFi 5 equipment. Older phones, laptops, printers, and smart-home products can connect using their supported wireless standard. For reliable compatibility, use WPA2 when legacy devices cannot connect with WPA3, and place older 2.4 GHz devices on an appropriate SSID if needed. Keep client drivers and operating systems updated for the best connection experience.

Why is my netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point not powering on?

First, verify that the Ethernet cable is connected to LAN 1/PoE+ rather than the secondary LAN port. Confirm that the switch provides 802.3at PoE+ and that PoE is enabled on the port. Test another cable and switch port, and check whether the switch reports a power budget problem. If using an adapter, confirm it is firmly connected and compatible. After correcting the power source, disconnect it briefly, reconnect it, and allow at least a minute for startup.

How can I improve WiFi performance on the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point?

Install the WAX628 in a central, elevated location away from metal objects, thick walls, appliances, and other radio sources. Use the 2.5 Gbps PoE+ port and a suitable uplink so the wired network does not limit throughput. Enable 5 GHz for high-speed nearby devices and reserve 2.4 GHz for longer-range or smart-home clients. Avoid overlapping channels with neighboring access points, update client drivers, and use 160 MHz channels only where interference is limited.

What is the second Ethernet port on the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point used for?

The WAX628 has a 2.5 Gbps PoE+ Ethernet port and a second 1 Gbps Ethernet port. The primary port carries network traffic and power when connected to a PoE+ switch. The secondary port can support a link aggregation configuration when the network infrastructure and configuration are compatible. It is not a replacement for the PoE+ connection when the access point needs Ethernet power. Configure aggregation only after confirming support on the connected switch.

How do I troubleshoot clients that cannot connect to the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point?

Confirm that the SSID is visible and that the client is within useful range. Recheck the wireless password, security mode, VLAN assignment, DHCP service, and any access-control rules in Insight or the network gateway. Restart the client and forget the saved network before reconnecting. If only older devices fail, test WPA2 compatibility and the 2.4 GHz band. Also verify that the access point has a valid uplink and that its firmware and client wireless drivers are current.

How should I maintain and update the netgear WAX628 Insight Managed WiFi 6 AX5400 Access Point?

Inspect the WAX628 periodically for dust, blocked ventilation, loose mounting, and damaged cables. Clean the exterior with a dry or lightly damp soft cloth; do not spray liquid into the unit. Review Insight alerts, connected clients, PoE status, and unusual traffic patterns. Install firmware updates through the supported NETGEAR management method after checking release notes and configuration backups. Schedule updates during low-use periods, and document SSIDs, VLANs, and security settings before making changes.