680231

Draytek Vigor AP 902 Handleiding

284
Verklein
Vergroot
Pagina terug
1/284
Pagina verder
VigorAP 902 User’s Guide
i
VigorAP 902 User’s Guide
ii
V
V
i
i
g
g
o
o
r
r
A
A
P
P
9
9
0
0
2
2
8
8
0
0
2
2
.
.
1
1
1
1
a
a
c
c
A
A
c
c
c
c
e
e
s
s
s
s
P
P
o
o
i
i
n
n
t
t
U
U
s
s
e
e
r
r
’
’
s
s
G
G
u
u
i
i
d
d
e
e
Version: 2.3
Firmware Version: V1.2.5
Date: September 13, 2018
VigorAP 902 User’s Guide
iii
Intellectual Property Rights (IPR) Information
Copyrights
© All rights reserved. This publication contains information that is protected by copyright.
No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or
translated into any language without written permission from the copyright holders.
Trademarks
The following trademarks are used in this document:
Microsoft is a registered trademark of Microsoft Corp.
Windows, Windows 95, 98, Me, NT, 2000, XP, Vista, 7 and Explorer are trademarks of
Microsoft Corp.
Apple and Mac OS are registered trademarks of Apple Inc.
Other products may be trademarks or registered trademarks of their respective
manufacturers.
Safety Instructions and Approval
Safety
Instructions
Read the installation guide thoroughly before you set up the modem.
The modem is a complicated electronic unit that may be repaired only be authorized
and qualified personnel. Do not try to open or repair the modem yourself.
Do not place the modem in a damp or humid place, e.g. a bathroom.
The modem should be used in a sheltered area, within a temperature range of +5 to +40
Celsius.
Do not expose the modem to direct sunlight or other heat sources. The housing and
electronic components may be damaged by direct sunlight or heat sources.
Do not deploy the cable for LAN connection outdoor to prevent electronic shock
hazards.
Keep the package out of reach of children.
When you want to dispose of the modem, please follow local regulations on
conservation of the environment.
Warranty
We warrant to the original end user (purchaser) that the modem will be free from any defects
in workmanship or materials for a period of one (1) year from the date of purchase from the
dealer. Please keep your purchase receipt in a safe place as it serves as proof of date of
purchase. During the warranty period, and upon proof of purchase, should the product have
indications of failure due to faulty workmanship and/or materials, we will, at our discretion,
repair or replace the defective products or components, without charge for either parts or
labor, to whatever extent we deem necessary tore-store the product to proper operating
condition. Any replacement will consist of a new or re-manufactured functionally equivalent
product of equal value, and will be offered solely at our discretion. This warranty will not
apply if the product is modified, misused, tampered with, damaged by an act of God, or
subjected to abnormal working conditions. The warranty does not cover the bundled or
licensed software of other vendors. Defects which do not significantly affect the usability of
the product will not be covered by the warranty. We reserve the right to revise the manual
and online documentation and to make changes from time to time in the contents hereof
without obligation to notify any person of such revision or changes.
Be a Registered
Owner
Web registration is preferred. You can register your Vigor modem via
http://www.draytek.com.
Firmware & Tools
Updates
Due to the continuous evolution of DrayTek technology, all modems will be regularly
upgraded. Please consult the DrayTek web site for more information on newest firmware,
tools and documents.
http://www.draytek.com
VigorAP 902 User’s Guide
iv
VigorAP 902 User’s Guide
v
T
T
a
a
b
b
l
l
e
e
o
o
f
f
C
C
o
o
n
n
t
t
e
e
n
n
t
t
s
s
Introduction .................................................................................................1
1.1 Introduction ............................................................................................................................. 1
1.2 LED Indicators and Connectors.............................................................................................. 3
1.3 Hardware Installation .............................................................................................................. 5
1.3.1 Wired Connection for PC in LAN...................................................................................... 5
1.3.2 Wired Connection for Notebook in WLAN ........................................................................ 6
1.3.3 Wireless Connection......................................................................................................... 7
1.3.4 PoE Connection................................................................................................................ 8
Network Configuration................................................................................9
2.1 Windows 7 IP Address Setup..................................................................................................9
2.2 Windows 2000 IP Address Setup...........................................................................................11
2.3 Windows XP IP Address Setup............................................................................................. 12
2.4 Windows Vista IP Address Setup.......................................................................................... 13
2.5 Accessing to Web User Interface.......................................................................................... 14
2.6 Changing Password.............................................................................................................. 15
2.7 Quick Start Wizard ................................................................................................................ 16
2.7.1 Configuring Wireless Settings – General........................................................................ 16
2.7.2 Configuring 2.4GHz Wireless Settings Based on the Operation Mode.......................... 17
2.7.3 Configuring 5GHz Wireless Settings Based on the Operation Mode............................. 24
2.7.4 Finishing the Wireless Settings Wizard .......................................................................... 28
2.8 Online Status......................................................................................................................... 29
Advanced Configuration.................................................................................31
3.1 Operation Mode .................................................................................................................... 32
3.2 LAN ....................................................................................................................................... 33
3.2.1 General Setup................................................................................................................. 33
3.2.2 Port Control..................................................................................................................... 36
3.2.3 Web Portal...................................................................................................................... 37
3.3 Central AP Management.......................................................................................................40
3.3.1 General Setup................................................................................................................. 40
3.3.2 APM Log......................................................................................................................... 41
3.3.3 Function Support List...................................................................................................... 41
3.3.4 Overload Management................................................................................................... 42
3.3.5 Status of Settings............................................................................................................ 43
3.4 General Concepts for Wireless LAN (2.4GHz/5GHz)........................................................... 44
VigorAP 902 User’s Guide
vi
3.5 Wireless LAN (2.4GHz) Settings for AP Mode...................................................................... 46
3.5.1 General Setup................................................................................................................. 47
3.5.2 Security........................................................................................................................... 49
3.5.3 Access Control................................................................................................................ 52
3.5.4 WPS................................................................................................................................ 53
3.5.5 Advanced Setting............................................................................................................ 54
3.5.6 AP Discovery .................................................................................................................. 57
3.5.7 WMM Configuration........................................................................................................ 59
3.5.8 Bandwidth Management................................................................................................. 61
3.5.9 Airtime Fairness.............................................................................................................. 62
3.5.10 Station Control.............................................................................................................. 64
3.5.11 Roaming ....................................................................................................................... 65
3.5.12 Band Steering............................................................................................................... 67
3.5.13 Station List.................................................................................................................... 72
3.6 Wireless LAN (2.4GHz) Settings for Station-Infrastructure Mode......................................... 74
3.6.1 General Setup................................................................................................................. 74
3.6.2 Site Survey ..................................................................................................................... 79
3.6.3 Statistics.......................................................................................................................... 80
3.6.4 WPS (Wi-Fi Protected Setup)......................................................................................... 80
3.7 Wireless LAN Settings for AP Bridge-Point to Point/AP Bridge-Point to Multi-Point Mode .. 82
3.7.1 General Setup................................................................................................................. 82
3.7.2 Advanced Setting............................................................................................................ 84
3.7.3 AP Discovery .................................................................................................................. 86
3.7.4 WDS AP Status .............................................................................................................. 89
3.8 Wireless LAN (2.4GHz) Settings for AP Bridge-WDS Mode................................................. 90
3.8.1 General Setup................................................................................................................. 90
3.8.2 Security........................................................................................................................... 94
3.8.3 Access Control................................................................................................................ 97
3.8.4 WPS................................................................................................................................ 98
3.8.5 Advanced Setting............................................................................................................ 99
3.8.6 AP Discovery ................................................................................................................ 101
3.8.7 WDS AP Status ............................................................................................................ 103
3.8.8 WMM Configuration...................................................................................................... 104
3.8.9 Bandwidth Management............................................................................................... 106
3.8.10 Airtime Fairness.......................................................................................................... 107
3.8.11 Station Control............................................................................................................ 109
3.8.12 Roaming ..................................................................................................................... 110
3.8.13 Band Steering............................................................................................................. 112
3.8.14 Station List.................................................................................................................. 117
3.9 Wireless LAN (2.4GHz) Settings for Universal Repeater Mode ..........................................119
3.9.1 General Setup............................................................................................................... 120
3.9.2 Security......................................................................................................................... 122
3.9.3 Access Control.............................................................................................................. 125
3.9.4 WPS.............................................................................................................................. 126
3.9.5 Advanced Setting.......................................................................................................... 127
3.9.6 AP Discovery ................................................................................................................ 130
3.9.7 Universal Repeater....................................................................................................... 132
3.9.8 WMM Configuration...................................................................................................... 134
3.9.9 Bandwidth Management............................................................................................... 136
3.9.10 Airtime Fairness.......................................................................................................... 137
3.9.11 Station Control............................................................................................................ 139
3.9.12 Roaming ..................................................................................................................... 140
3.9.13 Band Steering............................................................................................................. 142
3.9.14 Station List.................................................................................................................. 147
3.10 Wireless LAN (5GHz) Settings for AP Mode..................................................................... 149
VigorAP 902 User’s Guide
vii
3.10.1 General Setup............................................................................................................. 149
3.10.2 Security....................................................................................................................... 151
3.10.3 Access Control............................................................................................................ 154
3.10.4 WPS............................................................................................................................ 155
3.10.5 Advanced Setting........................................................................................................ 156
3.10.6 AP Discovery .............................................................................................................. 158
3.10.7 WMM Configuration.................................................................................................... 160
3.10.8 Bandwidth Management............................................................................................. 161
3.10.9 Airtime Fairness.......................................................................................................... 162
3.10.10 Station Control.......................................................................................................... 164
3.10.11 Roaming ................................................................................................................... 165
3.10.12 Station List................................................................................................................ 167
3.11 Wireless LAN (5GHz) Settings for AP Bridge-WDS Mode................................................ 169
3.11.1 General Setup............................................................................................................. 169
3.11.2 Security....................................................................................................................... 173
3.11.3 Access Control............................................................................................................ 176
3.11.4 WPS............................................................................................................................ 177
3.11.5 Advanced Setting........................................................................................................ 178
3.11.6 AP Discovery .............................................................................................................. 179
3.11.7 WDS AP Status .......................................................................................................... 181
3.11.8 WMM Configuration.................................................................................................... 182
3.11.9 Bandwidth Management............................................................................................. 184
3.11.10 Airtime Fairness........................................................................................................ 185
3.11.11 Station Control.......................................................................................................... 187
3.11.12 Roaming ................................................................................................................... 188
3.11.13 Station List................................................................................................................ 190
3.12 Wireless LAN (5GHz) Settings for Universal Repeater Mode .......................................... 192
3.12.1 General Setup............................................................................................................. 192
3.12.2 Security....................................................................................................................... 195
3.12.3 Access Control............................................................................................................ 198
3.12.4 WPS............................................................................................................................ 199
3.12.5 Advanced Setting........................................................................................................ 200
3.12.6 AP Discovery .............................................................................................................. 201
3.12.7 Universal Repeater..................................................................................................... 204
3.12.8 WMM Configuration.................................................................................................... 206
3.12.9 Bandwidth Management............................................................................................. 208
3.12.10 Airtime Fairness........................................................................................................ 209
3.12.11 Station Control.......................................................................................................... 211
3.12.12 Roaming ................................................................................................................... 212
3.12.13 Station List................................................................................................................ 214
3.13 RADIUS Setting ................................................................................................................ 216
3.13.1 RADIUS Server........................................................................................................... 216
3.13.2 Certificate Management ............................................................................................. 218
3.14 Applications....................................................................................................................... 220
3.14.1 Schedule..................................................................................................................... 220
3.14.2 Apple iOS Keep Alive ................................................................................................. 222
3.14.3 Wi-Fi Auto On/Off ....................................................................................................... 223
3.14.4 Temperature Sensor................................................................................................... 223
3.15 Mobile Device Management ............................................................................................. 226
3.15.1 Detection..................................................................................................................... 226
3.15.2 Policies ....................................................................................................................... 227
3.15.3 Statistics ..................................................................................................................... 228
3.16 System Maintenance......................................................................................................... 228
3.16.1 System Status............................................................................................................. 229
VigorAP 902 User’s Guide
viii
3.16.2 TR-069........................................................................................................................ 230
3.16.3 Administrator Password.............................................................................................. 233
3.16.4 Configuration Backup ................................................................................................. 234
3.16.5 Syslog/Mail Alert......................................................................................................... 236
3.16.6 Time and Date ............................................................................................................ 237
3.16.7 SNMP.......................................................................................................................... 238
3.16.8 Management............................................................................................................... 239
3.16.9 Reboot System ........................................................................................................... 241
3.16.10 Firmware Upgrade.................................................................................................... 241
3.17 Diagnostics........................................................................................................................ 242
3.17.1 System Log................................................................................................................. 242
3.17.2 Speed Test ................................................................................................................. 242
3.17.3 Traffic Graph............................................................................................................... 243
3.17.4 Data Flow Monitor....................................................................................................... 243
3.17.5 WLAN (2.4GHz) Statistics .......................................................................................... 244
3.17.6 WLAN (5GHz) Statistics ............................................................................................. 245
3.17.7 Station Statistics ......................................................................................................... 246
3.17.8 Interference Monitor.................................................................................................... 248
3.17.9 Station Airtime ............................................................................................................ 249
3.17.10 Station Traffic Graph................................................................................................. 250
3.17.11 Station Link Speed.................................................................................................... 251
3.18 Support Area ..................................................................................................................... 251
Applications.............................................................................................253
4.1 How to set different segments for different SSIDs in VigorAP 902..................................... 253
4.2 How to use VigorAP in Universal Repeater Mode?............................................................ 257
Trouble Shooting.....................................................................................265
5.1 Checking If the Hardware Status Is OK or Not.................................................................... 265
5.2 Checking If the Network Connection Settings on Your Computer Is OK or Not ................. 266
5.3 Pinging the Modem from Your Computer............................................................................ 269
5.4 Backing to Factory Default Setting If Necessary ................................................................ 270
5.5 Contacting DrayTek............................................................................................................. 271
Index ...............................................................................................................................273
VigorAP 902 User’s Guide
1
I
I
n
n
t
t
r
r
o
o
d
d
u
u
c
c
t
t
i
i
o
o
n
n
N
N
o
o
t
t
e
e
:
:
T
T
h
h
i
i
s
s
i
i
s
s
a
a
g
g
e
e
n
n
e
e
r
r
i
i
c
c
I
I
n
n
t
t
e
e
r
r
n
n
a
a
t
t
i
i
o
o
n
n
a
a
l
l
v
v
e
e
r
r
s
s
i
i
o
o
n
n
o
o
f
f
t
t
h
h
e
e
u
u
s
s
e
e
r
r
g
g
u
u
i
i
d
d
e
e
.
.
S
S
p
p
e
e
c
c
i
i
f
f
i
i
c
c
a
a
t
t
i
i
o
o
n
n
,
,
c
c
o
o
m
m
p
p
a
a
t
t
i
i
b
b
i
i
l
l
i
i
t
t
y
y
a
a
n
n
d
d
f
f
e
e
a
a
t
t
u
u
r
r
e
e
s
s
v
v
a
a
r
r
y
y
b
b
y
y
r
r
e
e
g
g
i
i
o
o
n
n
.
.
F
F
o
o
r
r
s
s
p
p
e
e
c
c
i
i
f
f
i
i
c
c
u
u
s
s
e
e
r
r
g
g
u
u
i
i
d
d
e
e
s
s
s
s
u
u
i
i
t
t
a
a
b
b
l
l
e
e
f
f
o
o
r
r
y
y
o
o
u
u
r
r
r
r
e
e
g
g
i
i
o
o
n
n
o
o
r
r
p
p
r
r
o
o
d
d
u
u
c
c
t
t
,
,
p
p
l
l
e
e
a
a
s
s
e
e
c
c
o
o
n
n
t
t
a
a
c
c
t
t
l
l
o
o
c
c
a
a
l
l
d
d
i
i
s
s
t
t
r
r
i
i
b
b
u
u
t
t
o
o
r
r
.
.
1
1
.
.
1
1
I
I
n
n
t
t
r
r
o
o
d
d
u
u
c
c
t
t
i
i
o
o
n
n
Thank you for purchasing this VigorAP 902, the concurrent dual band wireless (2.4G/5G)
access point offering high-speed data transmission. With this high cost-efficiency VigorAP
902, computers and wireless devices which are compatible with 802.11n/802.11a can
connect to existing wired Ethernet network via this VigorAP 902, at the speed of 300Mbps.
Easy install procedures allows any computer users to setup a network environment in very
short time - within minutes, even inexperienced users. Just follow the instructions given in
this user manual, you can complete the setup procedure and release the power of this access
point all by yourself!
VigorAP 902 also is a Power over Ethernet Powered Device which adopts the technology of
PoE for offering power supply and transmitting data through the Ethernet cable.
VigorAP 902 User’s Guide
2
A
A
P
P
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The VigorAP 902 can operate in standalone mode for your office network or a classroom or
a waiting room of some transportation terminals (e.g. ferry terminal, bus station, train station)
or a clinic's waiting room ; connected to your LAN and offering you with wireless access. If
your network requires several VigorAP 902 units, to centrally manage and monitor them
individually as a group will be expected. DrayTek central wireless management (AP
Management) lets control, efficiency, monitoring and security of your company-wide
wireless access easier be managed. Inside the web user interface, we call “central wireless
management” as Central AP Management which supports mobility, client monitoring /
reporting and load-balancing to multiple APs. For central wireless management, you will
need a Vigor2860 or Vigor2925 series router; there is no per-node licensing or subscription
required. With the unified user interface of Vigor2860 Combo WAN series and Vigor2925
Triple WAN series, the multiple deployment of VigorAP 902 can be clear at the first sight.
For multiple wireless clients to apply the AP Load Balancing to the multiple APs, AP
management will manage wireless traffic with smooth flow and enhanced efficiency.
VigorAP 902 User’s Guide
3
1
1
.
.
2
2
L
L
E
E
D
D
I
I
n
n
d
d
i
i
c
c
a
a
t
t
o
o
r
r
s
s
a
a
n
n
d
d
C
C
o
o
n
n
n
n
e
e
c
c
t
t
o
o
r
r
s
s
Before you use the Vigor modem, please get acquainted with the LED indicators and
connectors first.
LED Status Explanation
Off The system is not ready or is failed. ACT
Blinking The system is ready and can work normally.
On A USB device is connected and active. USB
Blinking The data is transmitting.
On Wireless function is ready.
Off Wireless function is not ready.
2.4G
Blinking Data is transmitting (sending/receiving).
On Wireless function is ready.
Off Wireless function is not ready.
5G
Blinking Data is transmitting (sending/receiving).
On A normal connection (rate with 100M/1000M) is
through its corresponding port.
Off LAN is disconnected.
LAN A1 - A4
Blinking Data is transmitting (sending/receiving).
On A normal connection (rate with 100M/1000M) is
through its corresponding port.
Off LAN is disconnected.
LAN B
Blinking Data is transmitting (sending/receiving).
VigorAP 902 User’s Guide
4
Interface Description
0/1 Power switch.
PWR: Connecter for a power adapter.
LAN B Connecter for xDSL / Cable modem (Giga level)
or router.
LAN A4, A2,
A1
A3 (PoE)
Connecter for xDSL / Cable modem (Giga level) /
computer or router.
LAN A3 is used for PoE connection (for indoor
use).
WLAN
ON/OFF WPS
Wireless band will be switched /changed
according to the button pressed and released. For
example,
2.4G (On) and 5G (On) – in default.
2.4G (Off) and 5G (On) – pressed and released
the button once.
2.4G (On) and 5G (Off) – pressed and released
the button twice.
2.4G (Off) and 5G (Off) – pressed and released
the button three times.
WPS - When WPS function is enabled by web
user interface, press this button for more than 2
seconds. The router will wait for any wireless
client connecting to it through WPS.
USB
Connecter for a USB device (for temperature
sensor).
Restore the default settings. Usage: Turn on
VigorAP 902. Press the button and keep for more
than 10 seconds. Then the device will restart with
the factory default configuration.
Note: For the sake of security, make the accessory kit away from children.
VigorAP 902 User’s Guide
5
1
1
.
.
3
3
H
H
a
a
r
r
d
d
w
w
a
a
r
r
e
e
I
I
n
n
s
s
t
t
a
a
l
l
l
l
a
a
t
t
i
i
o
o
n
n
This section will guide you to install the VigorAP 902 through hardware connection and
configure the device’s settings through web browser.
Before starting to configure VigorAP 902, you have to connect your devices correctly.
1
1
.
.
3
3
.
.
1
1
W
W
i
i
r
r
e
e
d
d
C
C
o
o
n
n
n
n
e
e
c
c
t
t
i
i
o
o
n
n
f
f
o
o
r
r
P
P
C
C
i
i
n
n
L
L
A
A
N
N
1. Connect VigorAP 902 to ADSL modem, router, or switch/hub in your network through
the LAN A port of the access point by Ethernet cable.
2. Connect a computer to other available LAN A port. Make sure the subnet IP address of
the PC is the same as VigorAP 902 management IP, e.g., 192.168.1.X.
3. Connect the A/C power adapter to the wall socket, and then connect it to the PWR
connector of the access point.
4. Power on VigorAP 902.
5. Check all LEDs on the front panel. ACT LED should blink and LAN LEDs should be
on if the access point is correctly connected to the ADSL modem or router.
(For the detailed information of LED status, please refer to section 1.2.)
VigorAP 902 User’s Guide
6
1
1
.
.
3
3
.
.
2
2
W
W
i
i
r
r
e
e
d
d
C
C
o
o
n
n
n
n
e
e
c
c
t
t
i
i
o
o
n
n
f
f
o
o
r
r
N
N
o
o
t
t
e
e
b
b
o
o
o
o
k
k
i
i
n
n
W
W
L
L
A
A
N
N
1. Connect VigorAP 902 to ADSL modem or router in your network through the LAN A
port of the access point by Ethernet cable.
2. Connect the A/C power adapter to the wall socket, and then connect it to the PWR
connector of the access point.
3. Power on VigorAP 902.
4. Check all LEDs on the front panel. ACT LED should be steadily on, LAN LEDs
should be on if the access point is correctly connected to the ADSL modem or router.
(For the detailed information of LED status, please refer to section 1.2.)
VigorAP 902 User’s Guide
7
1
1
.
.
3
3
.
.
3
3
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
C
C
o
o
n
n
n
n
e
e
c
c
t
t
i
i
o
o
n
n
VigorAP 902 can access Internet via an ADSL modem, router, or switch/hub in your
network through wireless connection.
1. Connect the A/C power adapter to the wall socket, and then connect it to the PWR
connector of the access point.
2. Power on VigorAP 902.
3. Check all LEDs on the front panel. ACT LED should be steadily on.
4. Connect VigorAP 902 to ADSL modem or router via wireless network.
(For the detailed information of LED status, please refer to section 1.2.)
VigorAP 902 User’s Guide
8
1
1
.
.
3
3
.
.
4
4
P
P
o
o
E
E
C
C
o
o
n
n
n
n
e
e
c
c
t
t
i
i
o
o
n
n
VigorAP 902 can gain the power from the connected switch, e.g., VigorSwitch P2260. PoE
(Power over Ethernet) can break the install limitation caused by the fixed power supply.
1. Connect VigorAP 902 to a switch in your network through the LAN A3 (PoE) port of
the access point by Ethernet cable.
2. Connect a computer to VigorSwitch P2260. Make sure the subnet IP address of the PC
is the same as VigorAP 902 management IP, e.g., 192.168.1.X.
3. Power on VigorAP 902.
4. Check all LEDs on the front panel. ACT LED should be steadily on, LAN LEDs
should be on if the access point is correctly connected to the ADSL modem, router or
switch/hub.
VigorAP 902 User’s Guide
9
N
N
e
e
t
t
w
w
o
o
r
r
k
k
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
After the network connection is built, the next step you should do is setup VigorAP 902 with
proper network parameters, so it can work properly in your network environment.
Before you can connect to the access point and start configuration procedures, your
computer must be able to get an IP address automatically (use dynamic IP address). If it’s set
to use static IP address, or you’re unsure, please follow the following instructions to
configure your computer to use dynamic IP address:
For the default IP address of this AP is set “192.168.1.2”, we recommend you to use
“192.168.1.X (except 2)” in the field of IP address on this section for your computer.
If the operating system of your computer is…
Windows 7 - please go to section 2.1
Windows 2000 - please go to section 2.2
Windows XP - please go to section 2.3
Windows Vista - please go to section 2.4
2
2
.
.
1
1
W
W
i
i
n
n
d
d
o
o
w
w
s
s
7
7
I
I
P
P
A
A
d
d
d
d
r
r
e
e
s
s
s
s
S
S
e
e
t
t
u
u
p
p
Click Start button (it should be located at lower-left corner of your computer), then click
Control Panel. Double-click Network and Internet, and the following window will appear.
Click Network and Sharing Center.
Next, click Change adapter settings and click Local Area Connection.
VigorAP 902 User’s Guide
10
Then, select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
Under the General tab, click Use the following IP address. Then input the following
settings in respective field and click OK when finish.
IP address: 192.168.1.9
Subnet Mask: 255.255.255.0
VigorAP 902 User’s Guide
11
2
2
.
.
2
2
W
W
i
i
n
n
d
d
o
o
w
w
s
s
2
2
0
0
0
0
0
0
I
I
P
P
A
A
d
d
d
d
r
r
e
e
s
s
s
s
S
S
e
e
t
t
u
u
p
p
Click Start button (it should be located at lower-left corner of your computer), then click
control panel. Double-click Network and Dial-up Connections icon, double click Local
Area Connection, and Local Area Connection Properties window will appear. Select
Internet Protocol (TCP/IP), then click Properties.
Select Use the following IP address, then input the following settings in respective field and
click OK when finish.
IP address: 192.168.1.9
Subnet Mask: 255.255.255.0
VigorAP 902 User’s Guide
12
2
2
.
.
3
3
W
W
i
i
n
n
d
d
o
o
w
w
s
s
X
X
P
P
I
I
P
P
A
A
d
d
d
d
r
r
e
e
s
s
s
s
S
S
e
e
t
t
u
u
p
p
Click Start button (it should be located at lower-left corner of your computer), then click
control panel. Double-click Network and Internet Connections icon, click Network
Connections, and then double-click Local Area Connection, Local Area Connection
Status window will appear, and then click Properties.
Select Use the following IP address, then input the following settings in respective field and
click OK when finish:
IP address: 192.168.1.9
Subnet Mask: 255.255.255.0.
VigorAP 902 User’s Guide
13
2
2
.
.
4
4
W
W
i
i
n
n
d
d
o
o
w
w
s
s
V
V
i
i
s
s
t
t
a
a
I
I
P
P
A
A
d
d
d
d
r
r
e
e
s
s
s
s
S
S
e
e
t
t
u
u
p
p
Click Start button (it should be located at lower-left corner of your computer), then click
control panel. Click View Network Status and Tasks, then click Manage Network
Connections. Right-click Local Area Netwrok, then select ‘Properties’. Local Area
Connection Properties window will appear, select Internet Protocol Version 4 (TCP /
IPv4), and then click Properties.
Select Use the following IP address, then input the following settings in respective field and
click OK when finish:
IP address: 192.168.1.9
Subnet Mask: 255.255.255.0.
VigorAP 902 User’s Guide
14
2
2
.
.
5
5
A
A
c
c
c
c
e
e
s
s
s
s
i
i
n
n
g
g
t
t
o
o
W
W
e
e
b
b
U
U
s
s
e
e
r
r
I
I
n
n
t
t
e
e
r
r
f
f
a
a
c
c
e
e
All functions and settings of this access point must be configured via web user interface.
Please start your web browser (e.g., Firefox).
1. Make sure your PC connects to the VigorAP 902 correctly.
2. Open a web browser on your PC and type http://192.168.1.2. A pop-up window will
open to ask for username and password. Pease type “admin/admin” on
Username/Password and click OK.
Note 1: You may either simply set up your computer to get IP dynamically from the
router or set up the IP address of the computer to be in the same subnet as the IP
address of VigorAP 902.
If there is no DHCP server on the network, then VigorAP 902 will have an IP
address of 192.168.1.2.
If there is DHCP available on the network, then VigorAP 902 will receive it’s
IP address via the DHCP server.
3. The Main Screen will pop up.
VigorAP 902 User’s Guide
15
Note: If you fail to access to the web configuration, please go to “Trouble
Shooting” for detecting and solving your problem. For using the device properly, it
is necessary for you to change the password of web configuration for security and
adjust primary basic settings.
2
2
.
.
6
6
C
C
h
h
a
a
n
n
g
g
i
i
n
n
g
g
P
P
a
a
s
s
s
s
w
w
o
o
r
r
d
d
1. Please change the password for the original security of the modem.
2. Go to System Maintenance page and choose Administration Password.
3. Enter the new login password on the field of Password. Then click OK to continue.
4. Now, the password has been changed. Next time, use the new password to access the
Web User Interface for this modem.
VigorAP 902 User’s Guide
16
2
2
.
.
7
7
Q
Q
u
u
i
i
c
c
k
k
S
S
t
t
a
a
r
r
t
t
W
W
i
i
z
z
a
a
r
r
d
d
Quick Start Wizard will guide you to configure 2.4G wireless setting, 5G wireless setting
and other corresponding settings for Vigor Access Point step by step.
2
2
.
.
7
7
.
.
1
1
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
i
i
n
n
g
g
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
–
–
G
G
e
e
n
n
e
e
r
r
a
a
l
l
This page displays general settings (enable/disable wireless LAN 2.4GHz/5GHz) for the
operation mode selected.
Available settings are explained as follows:
Item Description
Wireless LAN
(2.4GHz)
Check the box to enable WLAN 2.4GHz for VigorAP.
Operation Mode - There are four operation modes for wireless
connection. Settings for each mode are different.
Wireless LAN
(5GHz)
Check the box to enable WLAN 5GHz for VigorAP.
Operation Mode - There are three operation modes for wireless
connection. Settings for each mode are different.
After finishing this web page configuration, please click Next to continue.
VigorAP 902 User’s Guide
17
2
2
.
.
7
7
.
.
2
2
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
i
i
n
n
g
g
2
2
.
.
4
4
G
G
H
H
z
z
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
B
B
a
a
s
s
e
e
d
d
o
o
n
n
t
t
h
h
e
e
O
O
p
p
e
e
r
r
a
a
t
t
i
i
o
o
n
n
M
M
o
o
d
d
e
e
In this page, the advanced settings will vary according to the operation mode chosen on
2.7.1.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
When you choose AP as the operation mode for wireless LAN (2.4GHz), you will need to
configure the following page.
Available settings are explained as follows:
Item Description
Channel
Means the channel frequency of the wireless LAN. The default
channel is 6. You may switch channel if the selected channel is
under serious interference. If you have no idea of choosing the
frequency, please select AutoSelect to let system determine for
you.
Main SSID
Set a name for VigorAP 902 to be identified.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Enable Guest
Wireless
Check the box to enable the guest wireless setting.
Such feature is especially useful for free Wi-Fi service. For
VigorAP 902 User’s Guide
18
example, a coffee shop offers free Wi-Fi service for its guests
for one hour every day.
SSID – Set a name for VigorAP 902 which can be identified and
connected by wireless guest.
Security Key – Set 8~63 ASCII characters or 8~63 ASCII
characters which can be used for logging into VigorAP 902 by
wireless guest.
Enable Bandwidth Limit – Check the box to define the
maximum speed of the data uploading/downloading which will
be used for the guest connecting to Vigor device with the same
SSID.
Upload Limit – Scroll the radio button to choose the
value you want.
Download Limit –Scroll the radio button to choose
the value you want.
Enable Station Control – Check the box to set the duration for
the guest connecting /reconnecting to Vigor device.
Connection Time –Scroll the radio button to choose
the value you want.
Reconnection Time –Scroll the radio button to
choose the value you want.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
P
P
o
o
i
i
n
n
t
t
t
t
o
o
P
P
o
o
i
i
n
n
t
t
When you choose AP Bridge-Point to Point as the operation mode for wireless LAN
(2.4GHz), you will need to configure the following page.
Available settings are explained as follows:
Item Description
AP Discovery
Click this button to open the AP Discovery dialog. VigorAP 902
can scan all regulatory channels and find working APs in the
neighborhood.
VigorAP 902 User’s Guide
19
Phy Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same Phy Mode for
connecting with each other.
Security
Select WEP, TKIP or AES as the encryption algorithm.
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Peer MAC Address
Type the peer MAC address for the access point that VigorAP
902 connects to.
VigorAP 902 User’s Guide
20
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
W
W
D
D
S
S
When you choose AP Bridge-WDS as the operation mode for wireless LAN (2.4GHz), you
will need to configure the following page.
Available settings are explained as follows:
Item Description
AP Discovery
Click this button to open the AP Discovery dialog. VigorAP 902
can scan all regulatory channels and find working APs in the
neighborhood.
Phy Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same Phy Mode for
connecting with each other.
Security
Select WEP, TKIP or AES as the encryption algorithm. Type the
key number if required.
Peer MAC Address
Type the peer MAC address for the access point that VigorAP
902 connects to.
Main SSID
Set a name for VigorAP 902 to be identified.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
VigorAP 902 User’s Guide
21
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
When you choose Universal Repeater as the operation mode for wireless LAN (2.4GHz),
you will need to configure the following page.
Available settings are explained as follows:
Item Description
Universal Repeater Parameters
AP Discovery
Click this button to open the AP Discovery dialog. VigorAP 902
can scan all regulatory channels and find working APs in the
neighborhood.
SSID / MAC Address
(Optional)
SSID means the identification of the wireless LAN. After
choosing one of the AP from AP Discovery window and
clicking OK, the settings (SSID and MAC Address) related to
the selected AP will be displayed on these fields automatically.
Later, VigorAP 902 will be allowed to access Internet through
the selected AP, by using SSID displayed here.
Channel
Means the channel frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference.
Security Mode
There are several modes provided for you to choose. Each mode
will bring up different parameters (e.g., WEP keys, Pass Phrase)
for you to configure.
Encryption Type for
This option is available when Open/Shared is selected as
VigorAP 902 User’s Guide
22
Open/Shared
Security Mode.
Choose None to disable the WEP Encryption. Data sent to the
AP will not be encrypted. To enable WEP encryption for data
transmission, please choose WEP.
WEP Keys - Four keys can be entered here, but only one key
can be selected at a time. The format of WEP Key is restricted to
5 ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','.
Encryption Type for
WPA/PSK and
WPA2/PSK
This option is available when WPA/PSK or WPA2/PSK is
selected as Security Mode.
Select TKIP or AES as the algorithm for WPA.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Such feature is available for WPA/PSK or WPA2/PSK mode.
Use the same SSID
and Security Key as
above
In general, under the network environment, same SSID and
security key can be used for the host (wireless client) and the
repeater (VigorAP 902) in Universal Repeater mode. Check it to
use the same SSID and security key configured as above.
SSID - SSID can be any text numbers or various special
characters. For VigorAP 902 is set as “Repeater”, the purpose of
the device is to extend the Wi-Fi service. Therefore, the
characters set here will be regarded as “main SSID”. Other
wireless client can receive the wireless signal from VigorAP 902
by using the SSID configured here.
Security - Set 8~63 ASCII characters or 64 Hexadecimal digits
which can be used for logging into VigorAP 902 by other
wireless client.
Enable Guest
Wireless
Check the box to enable the guest wireless setting.
SSID – Set a name for VigorAP 902. Wireless guest is allowed
to access into Internet via VigorAP 902 with the SSID
configured here.
Security Key – Set 8~63 ASCII characters or 64 Hexadecimal
digits which can be used for logging into VigorAP 902 by
VigorAP 902 User’s Guide
23
wireless guest.
Enable Bandwidth Limit – Check the box to define the
maximum speed of the data uploading/downloading which will
be used for the guest connecting to Vigor device with the same
SSID.
Upload Limit –Scroll the radio button to choose the
value you want.
Download Limit –Scroll the radio button to choose
the value you want.
Enable Station Control – Check the box to set the duration for
the guest connecting /reconnecting to Vigor device.
Connection Time –Scroll the radio button to choose
the value you want.
Reconnection Time –Scroll the radio button to
choose the value you want.
After finishing this web page configuration, please click Next to continue.
VigorAP 902 User’s Guide
24
2
2
.
.
7
7
.
.
3
3
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
i
i
n
n
g
g
5
5
G
G
H
H
z
z
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
B
B
a
a
s
s
e
e
d
d
o
o
n
n
t
t
h
h
e
e
O
O
p
p
e
e
r
r
a
a
t
t
i
i
o
o
n
n
M
M
o
o
d
d
e
e
VigorAP 902 offers 5GHz wireless connection capability. You can setup 5GHz features in
Quick Start Wizard first. Once the USB 5GHz wireless dongle connects to VigorAP 902, it
can work immediately.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
After finished the configuration for wireless LAN (2.4GHz) and click Next, you will need to
configure the following page if you choose AP as the operation mode for wireless LAN
(5GHz).
Available settings are explained as follows:
Item Description
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 36. You may switch channel if the selected
channel is under serious interference.
Main SSID
Set a name for VigorAP 902 to be identified.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Enable Guest
Wireless
Check the box to enable the guest wireless setting.
SSID – Set a name for VigorAP 902 which can be identified and
connected by wireless guest.
Security – Set 8~63 ASCII characters or 8~63 ASCII characters
which can be used for logging into VigorAP 902 by wireless
guest.
Enable Bandwidth Limit –Check the box to define the
maximum speed of the data uploading/downloading which will
be used for the guest connecting to Vigor device with the same
VigorAP 902 User’s Guide
25
SSID.
Upload Limit –Scroll the radio button to choose the
value you want.
Download Limit –Scroll the radio button to choose
the value you want.
Enable Station Control – Check the box to set the duration for
the guest connecting /reconnecting to Vigor device.
Connection Time –Scroll the radio button to choose
the value you want.
Reconnection Time –Scroll the radio button to
choose the value you want.
After finishing this web page configuration, please click Next to continue.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
W
W
D
D
S
S
After finished the configuration for wireless LAN (2.4GHz) and click Next, you will need to
configure the following page if you choose AP Bridge-WDS as the operation mode for
wireless LAN (5GHz).
Available settings are explained as follows:
Item Description
AP Discovery
Click this button to open the AP Discovery dialog. VigorAP 902
can scan all regulatory channels and find working APs in the
neighborhood.
Phy Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same Phy Mode for
connecting with each other.
Security
Select WEP, TKIP or AES as the encryption algorithm. Type the
key number if required.
VigorAP 902 User’s Guide
26
Peer MAC Address
Type the peer MAC address for the access point that VigorAP
902 connects to.
Main SSID
Set a name for VigorAP 902 to be identified.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
After finishing this web page configuration, please click Next to continue.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
After finished the configuration for wireless LAN (2.4GHz) and click Next, you will need to
configure the following page if you choose Universal Repeater as the operation mode for
wireless LAN (5GHz).
Available settings are explained as follows:
Item Description
AP Discovery
Click this button to open the AP Discovery dialog. VigorAP 902
can scan all regulatory channels and find working APs in the
neighborhood.
SSID / MAC Address
(Optional)
SSID means the identification of the wireless LAN. After
choosing one of the AP from AP Discovery window and
clicking OK, the settings (SSID and MAC Address) related to
the selected AP will be displayed on these fields automatically.
Later, VigorAP 902 will be allowed to access Internet through
the selected AP, by using SSID displayed here.
VigorAP 902 User’s Guide
27
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 36. You may switch channel if the selected
channel is under serious interference.
Security Mode
There are several modes provided for you to choose. Each mode
will bring up different parameters (e.g., WEP keys, Pass Phrase)
for you to configure.
Encryption Type for
Open/Shared
This option is available when Open/Shared is selected as
Security Mode.
Choose None to disable the WEP Encryption. Data sent to the
AP will not be encrypted. To enable WEP encryption for data
transmission, please choose WEP.
WEP Keys - Four keys can be entered here, but only one key
can be selected at a time. The format of WEP Key is restricted to
5 ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','.
Encryption Type for
WPA/PSK and
WPA2/PSK
This option is available when WPA/PSK or WPA2/PSK is
selected as Security Mode.
Select TKIP or AES as the algorithm for WPA.
Security Key
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Such feature is available for WPA/PSK or WPA2/PSK mode.
Use the same SSID
and Security Key as
Above
In general, under the network environment, same SSID and
security key can be used for the host (wireless client) and the
repeater (VigorAP 902) in Universal Repeater mode. Check it to
use the same SSID and security key configured as above.
SSID - SSID can be any text numbers or various special
characters. For VigorAP 902 is set as “Repeater”, the purpose of
the device is to extend the Wi-Fi service. Therefore, the
characters set here will be regarded as “main SSID”. Other
VigorAP 902 User’s Guide
28
wireless client can receive the wireless signal from VigorAP902
by using the SSID configured here.
Security - Set 8~63 ASCII characters or 64 Hexadecimal digits
which can be used for logging into VigorAP 902 by other
wireless client.
Enable Guest
Wireless
Check the box to enable the guest wireless setting.
SSID – Set a name for VigorAP 902. Wireless guest is allowed
to access into Internet via VigorAP 902 with the SSID
configured here.
Security Key – Set 8~63 ASCII characters or 64 Hexadecimal
digits which can be used for logging into VigorAP 902 by
wireless guest.
Enable Bandwidth Limit – Check the box to define the
maximum speed of the data uploading/downloading which will
be used for the guest connecting to Vigor device with the same
SSID.
Upload Limit –Scroll the radio button to choose the
value you want.
Download Limit –Scroll the radio button to choose
the value you want.
Enable Station Control – Check the box to set the duration for
the guest connecting /reconnecting to Vigor device.
Connection Time –Scroll the radio button to choose
the value you want.
Reconnection Time –Scroll the radio button to
choose the value you want.
After finishing this web page configuration, please click Next to continue.
2
2
.
.
7
7
.
.
4
4
F
F
i
i
n
n
i
i
s
s
h
h
i
i
n
n
g
g
t
t
h
h
e
e
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
W
W
i
i
z
z
a
a
r
r
d
d
When you see this page, it means the wireless setting wizard is almost finished. Just click
Finish to save the settings and complete the setting procedure.
VigorAP 902 User’s Guide
29
2
2
.
.
8
8
O
O
n
n
l
l
i
i
n
n
e
e
S
S
t
t
a
a
t
t
u
u
s
s
The online status shows the LAN status, Station Link Status for such device.
Detailed explanation is shown below:
Item Description
IP Address
Displays the IP address of the LAN interface.
TX Packets
Displays the total transmitted packets at the LAN interface.
RX Packets
Displays the total number of received packets at the LAN
interface.
TX Bytes
Displays the total transmitted size at the LAN interface.
RX Bytes
Displays the total number of received size at the LAN interface.
VigorAP 902 User’s Guide
30
This page is left blank.
VigorAP 902 User’s Guide
31
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
This chapter will guide users to execute advanced (full) configuration. As for other examples
of application, please refer to chapter 5.
1. Open a web browser on your PC and type http://192.168.1.2. The window will ask for
typing username and password.
2. Please type “admin/admin” on Username/Password for administration operation.
Now, the Main Screen will appear. Be aware that “Admin mode” will be displayed on the
bottom left side.
VigorAP 902 User’s Guide
32
3
3
.
.
1
1
O
O
p
p
e
e
r
r
a
a
t
t
i
i
o
o
n
n
M
M
o
o
d
d
e
e
This page provides several available modes for you to choose for different conditions. Click
any one of them and click OK. The system will configure the required settings
automatically.
Available settings are explained as follows:
Item Description
Wireless LAN(2.4GHz)
AP
This mode allows wireless clients to connect to access point and
exchange data with the devices connected to the wired network.
Station-Infrastructure
Enable the Ethernet device such as TV and Game player
connected to the VigorAP 902 to an access point.
AP Bridge-Point to
Point
This mode can establish wireless connection with another
VigorAP 902 using the same mode, and link the wired network
which these two VigorAP 902s connected together. Only one
access point can be connected in this mode.
AP Bridge-Point to
Multi-Point
This mode can establish wireless connection with other VigorAP
902s using the same mode, and link the wired network which
these VigorAP 902s connected together. Up to 4 access points
can be connected in this mode.
VigorAP 902 User’s Guide
33
AP Bridge-WDS
This mode is similar to AP Bridge to Multi-Point, but access
point is not working in bridge-dedicated mode, and will be able
to accept wireless clients while the access point is working as a
wireless bridge.
Universal Repeater
This product can act as a wireless range extender that will help
you to extend the networking wirelessly. The access point can
act as Station and AP at the same time. It can use Station
function to connect to a Root AP and use AP function to service
all wireless clients within its coverage.
Wireless LAN(5GHz)
AP
This mode allows wireless clients to connect to access point and
exchange data with the devices connected to the wired network.
AP Bridge-WDS
This mode is similar to AP Bridge to Multi-Point, but access
point is not working in bridge-dedicated mode, and will be able
to accept wireless clients while the access point is working as a
wireless bridge.
Universal Repeater
This product can act as a wireless range extender that will help
you to extend the networking wirelessly. The access point can
act as Station and AP at the same time. It can use Station
function to connect to a Root AP and use AP function to service
all wireless clients within its coverage.
Note: The Wireless LAN settings will be changed according to the Operation Mode
selected here. For the detailed information, please refer to the section of Wireless LAN.
3
3
.
.
2
2
L
L
A
A
N
N
Local Area Network (LAN) is a group of subnets regulated and ruled by modem.
3
3
.
.
2
2
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
Click LAN to open the LAN settings page and choose General Setup.
Note: Such page will be changed according to the Operation Mode selected. The
following screen is obtained by choosing AP as the operation mode.
VigorAP 902 User’s Guide
34
Available settings are explained as follows:
Item Description
LAN-A IP Network
Configuration
Enable DHCP Client – When it is enabled, VigorAP 902 will
be treated as a client and can be managed / controlled by AP
Management server offered by Vigor router (e.g., Vigor2860).
IP Address – Type in private IP address for connecting to a local
private network (Default: 192.168.1.2).
Subnet Mask – Type in an address code that determines the size
of the network. (Default: 255.255.255.0/ 24)
Default Gateway – In general, it is not really necessary to
specify a gateway for VigorAP 902. However, if it is required,
simply type an IP address as the gateway for VigorAP 902. It
will be convenient for the access point to acquire more service
(e.g., accessing NTP server) from Vigor router.
Enable Management VLAN – VigorAP 902 supports tag-based
VLAN for wireless clients accessing Vigor device. Only the
clients with the specified VLAN ID can access into VigorAP
902.
VLAN ID – Type the number as VLAN ID tagged on the
transmitted packet. “0” means no VALN tag.
LAN-B IP Network
Configuration
IP Address – Type in private IP address for connecting to a local
private network (Default: 192.168.2.2).
Subnet Mask – Type in an address code that determines the size
of the network. (Default: 255.255.255.0/ 24)
Enable Management VLAN – VigorAP 902 supports tag-based
VLAN for wireless clients accessing Vigor device. Only the
clients with the specified VLAN ID can access into VigorAP
VigorAP 902 User’s Guide
35
902.
VLAN ID – Type the number as VLAN ID tagged on the
transmitted packet. “0” means no VALN tag.
DHCP Server
Configuration
DHCP stands for Dynamic Host Configuration Protocol. DHCP
server can automatically dispatch related IP settings to any local
user configured as a DHCP client.
Enable Server - Enable Server lets the modem assign IP address
to every host in the LAN.
Start IP Address - Enter a value of the IP address pool for
the DHCP server to start with when issuing IP addresses. If
the 1st IP address of your modem is 192.168.1.2, the
starting IP address must be 192.168.1.3 or greater, but
smaller than 192.168.1.254.
End IP Address - Enter a value of the IP address pool for
the DHCP server to end with when issuing IP addresses.
Subnet Mask - Type in an address code that determines
the size of the network. (Default: 255.255.255.0/ 24)
Default Gateway - Enter a value of the gateway IP address
for the DHCP server.
Lease Time - It allows you to set the leased time for the
specified PC.
Primary DNS Server - You must specify a DNS server IP
address here because your ISP should provide you with
usually more than one DNS Server. If your ISP does not
provide it, the modem will automatically apply default
DNS Server IP address: 194.109.6.66 to this field.
Secondary DNS Server - You can specify secondary DNS
server IP address here because your ISP often provides you
more than one DNS Server. If your ISP does not provide it,
the modem will automatically apply default secondary
DNS Server IP address: 194.98.0.1 to this field.
Relay Agent - Specify which subnet that DHCP server is located
the relay agent should redirect the DHCP request to.
DHCP Server IP Address for Relay Agent - It is available
when Enable Relay Agent is selected. Set the IP address of
the DHCP server you are going to use so the Relay Agent
can help to forward the DHCP request to the DHCP server.
Primary DNS Server - You must specify a DNS server IP
address here because your ISP should provide you with
usually more than one DNS Server. If your ISP does not
provide it, the modem will automatically apply default
DNS Server IP address: 194.109.6.66 to this field.
Secondary DNS Server - You can specify secondary DNS
server IP address here because your ISP often provides you
more than one DNS Server. If your ISP does not provide it,
the modem will automatically apply default secondary
DNS Server IP address: 194.98.0.1 to this field.
VigorAP 902 User’s Guide
36
Disable Server - Disable Server lets you manually or use other
DHCP server to assign IP address to every host in the LAN.
Primary DNS Server - You must specify a DNS server IP
address here because your ISP should provide you with
usually more than one DNS Server. If your ISP does not
provide it, the modem will automatically apply default
DNS Server IP address: 194.109.6.66 to this field.
Secondary DNS Server - You can specify secondary DNS
server IP address here because your ISP often provides you
more than one DNS Server. If your ISP does not provide it,
the modem will automatically apply default secondary
DNS Server IP address: 194.98.0.1 to this field.
Trust DHCP Server IP for WLAN –There is no right for
such VigorAP to assign IP address for wireless LAN user.
However, you can specify another valid DHCP server on
other VigorAP to make the wireless LAN client obtaining
the IP address from the designated DHCP server.
Specify a DHCP server in such field. All the IP addresses
of the devices on LAN of VigorAP will be assigned via
such specified server. It is used to avoid IP assignment
interference due to multiple DHCP servers in one LAN.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
2
2
.
.
2
2
P
P
o
o
r
r
t
t
C
C
o
o
n
n
t
t
r
r
o
o
l
l
To avoid wrong connection due to the insertion of unsuitable Ethernet cable, the function of
physical LAN ports can be disabled via web configuration.
Available settings are explained as follows:
Item Description
Enable Port Control
Check it to enable the port control. If it is enabled, you are
allowed to disable the function of physical LAN port by
checking the corresponding check box.
Disable Port
Choose and check the LAN port.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
37
3
3
.
.
2
2
.
.
3
3
W
W
e
e
b
b
P
P
o
o
r
r
t
t
a
a
l
l
This page allows you to configure a profile with specified URL for accessing into or display
a message when a wireless/LAN user connects to Internet through this router. No matter
what the purpose of the wireless/LAN client is, he/she will be forced into the URL
configured here while trying to access into the Internet or the desired web page through this
router. That is, a company which wants to have an advertisement for its products to users can
specify the URL in this page to reach its goal.
Each item is explained as follows:
Item Description
Index
Display the number link which allows you to configure the
profile.
Enable
Check the box to enable such profile.
Comments
Display the content (Disable, URL Redirect or Message) of the
profile.
Login Mode
Display the login mode that a client uses to access into Internet.
Interface
Display the applied interfaces of the profile.
Preview
Open a preview window according to the configured settings.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
38
To configure the profile, click any index number link to open the following page.
Available settings are explained as follows:
Item Description
Enable
Check the box to enable this function.
Comments
Enter a brief comment to explain such web portal profile.
Welcome message
Enter words or sentences here. The message will be displayed on
the screen for several seconds when the wireless users access
into the web page through the router.
Default – Click it to restore the default content.
Redirect Page
None - User can access into Internet directly.
URL Redirect - Any user who wants to access into Internet
through this router will be redirected to the URL specified here
first. It is a useful method for the purpose of advertisement. For
example, force the wireless user(s) in hotel to access into the
web page that the hotel wants the user(s) to visit.
Authentication
None – User can access into Internet directly without
authentication.
Button Click – When a client tries to access into Internet, a
welcome message page with a button named “Accept” will
appear on the screen first. The client must click that button
(Accept) and then he/she is allowed to access Internet.
Applied Interfaces
Check the box(es) representing different interfaces to be applied
by such profile.
LAN – If it is selected and Universal Repeater is specified
as connection mode for such AP, both LAN client and
WLAN client can access into Internet via web portal. Yet,
VigorAP 902 User’s Guide
39
if AP mode is selected, only wireless LAN client shall
access into Internet via web portal.
WLAN 2.4GHz/5GHz - The advantage is that each SSID
(1/2/3/4) for wireless network can be applied with different
web portal separately.
After finishing all the settings here, please click OK to save the configuration.
VigorAP 902 User’s Guide
40
3
3
.
.
3
3
C
C
e
e
n
n
t
t
r
r
a
a
l
l
A
A
P
P
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
Such menu allows you to configure VigorAP device to be managed by Vigor router.
3
3
.
.
3
3
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
Available settings are explained as follows:
Item Description
Enable AP
Management
Check the box to enable the function of AP Management
(APM).
Enable Auto
Provision
VigorAP 902 can be controlled under Central AP Management
in Vigor2860 series. When both Vigor2860 series and VigorAP
902 have such feature enabled, once VigorAP 902 is registered
to Vigor2860 series, the WLAN profile pre-configured on
Vigor2860 series will be applied to VigorAP 902 immediately.
Thus, it is not necessary to configure VigorAP 902 separately.
VigorAP 902 User’s Guide
41
3
3
.
.
3
3
.
.
2
2
A
A
P
P
M
M
L
L
o
o
g
g
This page will display log information related to wireless stations connected to VigorAP 902
and central AP management.
Such information also will be delivered to Vigor router (e.g., Vigor2860 or Vigor2925 series)
and be shown on Central AP Management>>Event Log of Vigor router.
3
3
.
.
3
3
.
.
3
3
F
F
u
u
n
n
c
c
t
t
i
i
o
o
n
n
S
S
u
u
p
p
p
p
o
o
r
r
t
t
L
L
i
i
s
s
t
t
Click the Client tab to list the AP management functions that the Access Points support
under different firmware versions.
Note: DrayTek central wireless management (AP Management) lets control, efficiency,
monitoring and security of your company-wide wireless access easier to be managed.
Inside the web user interface, we call “central wireless management” as Central AP
Management which supports mobility, client monitoring/reporting and load-balancing to
multiple APs. For central wireless management, you will need a Vigor2860 or Vigor2925
series router; there is no per-node licensing or subscription required. With the unified user
interface of Vigor2860 Combo WAN series and Vigor2925 Triple WAN series, the
multiple deployment of VigorAP 902 can be clear at the first sight. For multiple wireless
VigorAP 902 User’s Guide
42
clients, to apply the AP Load Balancing to the multiple APs will manage wireless traffic
with smooth flow and enhanced efficiency.
3
3
.
.
3
3
.
.
4
4
O
O
v
v
e
e
r
r
l
l
o
o
a
a
d
d
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
Load Balance can help to distribute the traffic for all of the access points (e.g., VigorAP 902)
registered to Vigor router. Thus, the bandwidth will not be occupied by certain access points.
However, traffic overload might be occurred if too many wireless stations connected to
VigorAP 902 for data incoming and outgoing. Therefore, “Force Overload Disassociation” is
required to terminate the network connection of the client’s station to release network traffic.
When the function of “Force Overload Disassociation” in web user interface of Vigor router
(e.g., Vigor2860 or Vigor2925 series) is enabled, wireless clients specified in black list of
such web page will be disassociated to solve the problem of traffic overload.
The following web page is used to configure white list and black list for wireless stations.
Available settings are explained as follows:
Item Description
White List/Black List
Display the information (such as index number, MAC address
and comment) for all of the members in White List/Black List.
Wireless stations listed in Black List will be forcefully
disconnected first when traffic overload occurs and “Force
Overload Disassociation” is enabled.
Client’s MAC
Address
Specify the MAC Address of the remote/local client.
Apply to
White List – MAC address listed inside Client’s MAC Address
will be categorized as one of members in White List.
Black List - MAC address listed inside Client’s MAC Address
will be categorized as one of members in Black List.
VigorAP 902 User’s Guide
43
Add
Add a new MAC address into the White List/Black List.
Delete
Delete the selected MAC address in the White List/Black List.
Edit
Edit the selected MAC address in the White List/Black List.
Cancel
Give up the configuration.
3
3
.
.
3
3
.
.
5
5
S
S
t
t
a
a
t
t
u
u
s
s
o
o
f
f
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
Load Balance can help to distribute the traffic for all of the access points (e.g., VigorAP 902s)
registered to Vigor 2860 or Vigor2925 series. This web page displays the settings related to
Load Balance for VigorAP 902. In which, By Station Number, By Traffic and Force
Overload Disassociation indicate settings configured in Vigor 2860 or Vigor2925 series.
“X” means the function is not enabled or VigorAP 902 has not registered to any Vigor router
yet.
Below shows a setting example for Load Balance settings configured in Vigor 2860 or
Vigor2925 series.
VigorAP 902 User’s Guide
44
3
3
.
.
4
4
G
G
e
e
n
n
e
e
r
r
a
a
l
l
C
C
o
o
n
n
c
c
e
e
p
p
t
t
s
s
f
f
o
o
r
r
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
/
/
5
5
G
G
H
H
z
z
)
)
VigorAP 902 is a highly integrated wireless local area network (WLAN) for 5 GHz 802.11ac
or 2.4/5 GHz 802.11n WLAN applications. It supports channel operations of 20/40 MHz at
2.4 GHz and 20/40/80 MHz at 5 GHz. VigorAP 902 can support data rates up to 867 MBps
in 802.11ac 80 MHz channels.
Note:
* The actual data throughput will vary according to the network conditions and
environmental factors, including volume of network traffic, network overhead and
building materials.
In an Infrastructure Mode of wireless network, VigorAP 902 plays a role as an Access Point
(AP) connecting to lots of wireless clients or Stations (STA). All the STAs will share the
same Internet connection via VigorAP 902. The General Setup will set up the information
of this wireless network, including its SSID as identification, located channel etc.
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
O
O
v
v
e
e
r
r
v
v
i
i
e
e
w
w
WEP (Wired Equivalent Privacy) is a legacy method to encrypt each frame transmitted via
radio using either a 64-bit or 128-bit key. Usually access point will preset a set of four keys
and it will communicate with each station using only one out of the four keys.
WPA (Wi-Fi Protected Access), the most dominating security mechanism in industry, is
separated into two categories: WPA-personal or called WPA Pre-Share Key (WPA/PSK),
and WPA-Enterprise or called WPA/802.1x.
In WPA-Personal, a pre-defined key is used for encryption during data transmission. WPA
applies Temporal Key Integrity Protocol (TKIP) for data encryption while WPA2 applies
AES. The WPA-Enterprise combines not only encryption but also authentication.
Since WEP has been proved vulnerable, you may consider using WPA for the most secure
connection. You should select the appropriate security mechanism according to your needs.
No matter which security suite you select, they all will enhance the over-the-air data
protection and /or privacy on your wireless network. The VigorAP 902 is very flexible and
can support multiple secure connections with both WEP and WPA at the same time.
W
W
P
P
S
S
I
I
n
n
t
t
r
r
o
o
d
d
u
u
c
c
t
t
i
i
o
o
n
n
WPS (Wi-Fi Protected Setup) provides easy procedure to make network connection
between wireless station and wireless access point (VigorAP 902) with the encryption of
WPA and WPA2.
VigorAP 902 User’s Guide
45
It is the simplest way to build connection between wireless network clients and VigorAP 902.
Users do not need to select any encryption mode and type any long encryption passphrase to
setup a wireless client every time. He/she only needs to press a button on wireless client, and
WPS will connect for client and VigorAP 902 automatically.
Note: Such function is available for the wireless station with WPS supported.
There are two methods to do network connection through WPS between AP and Stations:
pressing the Start PBC button or using PIN Code.
On the side of VigorAP 902 series which served as an AP, press WPS button once on the
front panel of VigorAP 902 or click Start PBC on web configuration interface. On the side
of a station with network card installed, press Start PBC button of network card.
If you want to use PIN code, you have to know the PIN code specified in wireless client.
Then provide the PIN code of the wireless client you wish to connect to the VigorAP 902.
VigorAP 902 User’s Guide
46
3
3
.
.
5
5
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
M
M
o
o
d
d
e
e
When you choose AP as the operation mode, the Wireless LAN menu items will include
General Setup, Security, Access Control, WPS, Advanced Setting, AP Discovery, WMM
Configuration, Bandwidth Management, Airtime Fairness, Station Control, Roaming, Band
Steering and Station List.
Note: The Wireless LAN
(2.4GHz) settings will be changed according to the
Operation Mode selected in section 3.1.
VigorAP 902 User’s Guide
47
3
3
.
.
5
5
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure the
SSID and the wireless channel. Please refer to the following figure for more information.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through Vigor device. The
number you can set is from 3 to 64.
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can connect to 11b only, 11g only,
11n only, Mixed (11b+11g), Mixed (11g+11n) and Mixed
(11b+11g+11n) stations simultaneously. Simply choose Mixed
(11b+11g+11n) mode.
Channel
Means the channel of frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference. If you have no idea of choosing the frequency,
VigorAP 902 User’s Guide
48
please select AutoSelect to let system determine for you.
Extension Channel
With 802.11n, there is one option to double the bandwidth per
channel. The available extension channel options will be varied
according to the Channel selected above. Configure the
extension channel you want.
Enable 2 Subnet
(Simulate 2 APs)
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in
the same domain. You could only connect one router (no
matter connecting to LAN-A or LAN-B) in this environment.
Hide SSID
Check it to prevent from wireless sniffing and make it harder
for unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to
set four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. Default settings
are DrayTek-LAN-A and DrayTek-LAN-B. When Enable 2
Subnet is enabled, you can specify subnet interface (LAN-A
or LAN-B) for each SSID by using the drop down menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could
only communicate with LAN-A.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not access for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is
from 1 to 4095. The VLAN ID is 0 by default, it means
disabling the VLAN function for the SSID.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
49
3
3
.
.
5
5
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
station and the RADIUS server in performing mutual
VigorAP 902 User’s Guide
50
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
Enable - Enable the WEP Encryption.
VigorAP 902 User’s Guide
51
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
52
3
3
.
.
5
5
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
VigorAP 902 User’s Guide
53
Backup
Click it to store the settings (MAC addresses on MAC Address
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
5
5
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902. Only
WPA2/PSK and WPA/PSK support WPS.
WPS Encryp Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
VigorAP 902 User’s Guide
54
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
3
3
.
.
5
5
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the device will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz– the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
40 MHz- the device will use 40MHz for data transmission and
receiving between the AP and the stations.
Packet-OVERDRIVE
This feature can enhance the performance in data transmission
about 40%* more (by checking Tx Burst). It is active only
when both sides of Access Point and Station (in wireless
client) invoke this function at the same time. That is, the
wireless client must support this feature and invoke the
function, too.
Note: Vigor N61 wireless adapter supports this function.
Therefore, you can use and install it into your PC for matching
with Packet-OVERDRIVE (refer to the following picture of
Vigor N61 wireless utility window, choose Enable for
TxBURST on the tab of Option).
VigorAP 902 User’s Guide
55
Antenna
VigorAP can be attached with two antennas to have good data
transmission via wireless connection. However, if you have
only one antenna attached, please choose 1T1R.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
VigorAP 902 User’s Guide
56
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
MAC Clone
Click Enable and manually enter the MAC address of the
device with SSID 1. The MAC address of other SSIDs will
change based on this MAC address.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
57
3
3
.
.
5
5
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Please click Scan to
discover all the connected APs.
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
used.
VigorAP 902 User’s Guide
58
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Statistics
It displays the statistics for the channels used by APs.
VigorAP 902 User’s Guide
59
3
3
.
.
5
5
.
.
7
7
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
must be greater.
VigorAP 902 User’s Guide
60
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
61
3
3
.
.
5
5
.
.
8
8
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to Vigor device with
the same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to Vigor device with
the same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
62
3
3
.
.
5
5
.
.
9
9
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
VigorAP 902 User’s Guide
63
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
64
Note: Airtime Fairness function and Bandwidth Limit function should be mutually
exclusive. So their webs have extra actions to ensure these two functions are not enabled
simultaneously.
3
3
.
.
5
5
.
.
1
1
0
0
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the
wireless client connecting /reconnecting to Vigor device.
Or, type the duration manually when you choose User
defined.
Display All Station
All the wireless stations connecting to Vigor router by using
VigorAP 902 User’s Guide
65
Control List
such SSID will be listed on Station Control List.
After finishing all the settings here, please click OK to save the configuration.
3
3
.
.
5
5
.
.
1
1
1
1
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
VigorAP 902 User’s Guide
66
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
wireless station can connect to the adjacent AP (with better
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
67
3
3
.
.
5
5
.
.
1
1
2
2
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
Band Steering detects if the wireless clients are capable of 5GHz operation, and steers them
to that frequency. It helps to leave 2.4GHz band available for legacy clients, and improves
users experience by reducing channel utilization.
If dual-band is detected, the AP will let the wireless client connect to less congested wireless
LAN, such as 5GHz to prevent from network congestion.
Note: To make Band Steering work successfully, SSID and security on 2.4GHz also
MUST be broadcasted on 5GHz.
VigorAP 902 User’s Guide
68
Open Wireless LAN (2.4GHz)>>Band Steering to get the following web page:
Available settings are explained as follows:
Item Description
Enable Band Steering
If it is enabled, VigorAP will detect if the wireless client is
capable of dual-band or not within the time limit.
Check Time…. – If the wireless station does not have the
capability of 5GHz network connection, the system shall
wait and check for several seconds (15 seconds, in default)
to make the 2.4GHz network connection. Specify the time
limit for VigorAP to detect the wireless client.
5GHz Minimum RSSI – The wireless station has the
capability of 5GHz network connection, yet the signal
performance might not be satisfied. Therefore, when the
signal strength is below the value set here while the
wireless station connecting to VigorAP 902, VigorAP will
allow the client to connect to 2.4GHz network.
After finishing this web page configuration, please click OK to save the settings.
Below shows how Band Steering works.
VigorAP 902 User’s Guide
69
VigorAP 902 User’s Guide
70
H
H
o
o
w
w
t
t
o
o
U
U
s
s
e
e
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
?
?
1. Open Wireless LAN(2.4GHz)>>Band Steering.
2. Check the box of Enable Band Steering and use the default value (15) for check time
setting.
3. Click OK to save the settings.
4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>>
General Setup. Configure SSID as ap902-BandSteering for both pages. Click OK to
save the settings.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
71
5. Open Wireless LAN (2.4GHz)>>Security and Wireless LAN (5GHz)>>Security.
Configure Security as 12345678 for both pages. Click OK to save the settings.
6. Now, VigorAP 902 will let the wireless clients connect to less congested wireless LAN,
such as 5GHz to prevent from network congestion.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
72
3
3
.
.
5
5
.
.
1
1
3
3
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code. Each tab (general, advanced, control, neighbor) will display different status
information (including MAC address, Vendor, SSID, Auth, Encrypt, Tx/Rx Rate, Hostname,
RSSI, Link Speed, BW, PSM, WMM, PHMd, MCS, Connection Time, Reconnection Time,
Approx. Distance, Visit Time, and so on).
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
VigorAP 902 User’s Guide
73
Add
Click this button to add current typed MAC address into
Access Control.
Advanced
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
74
3
3
.
.
6
6
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
S
S
t
t
a
a
t
t
i
i
o
o
n
n
-
-
I
I
n
n
f
f
r
r
a
a
s
s
t
t
r
r
u
u
c
c
t
t
u
u
r
r
e
e
M
M
o
o
d
d
e
e
When you choose Station-Infrastructure as the operation mode, the Wireless LAN menu
items will include General Setup, Site Survey, Statistics and WPS.
3
3
.
.
6
6
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure the
wireless profile and choose proper mode. Please refer to the following figure for more
information.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Mode
At present, VigorAP 902 can connect to 11 b only, 11 g only,
11 n only, Mixed (11b+11g), Mixed (11b+11g+11n) and
Mixed (11g+11n) stations simultaneously. Simply choose
Mixed (11b+11g+11n) mode.
VigorAP 902 User’s Guide
75
Add
Click this button to add new wireless profiles.
Delete
Click this button to delete the selected wireless profile.
Edit
Click this button to modify the existing wireless profile.
Connect
Click this button to connect the wireless station to AP with the
selected profile.
Packet-OVERDRIVE
This feature can enhance the performance in data transmission
about 40%* more (by checking Tx Burst). It is active only
when both sides of Access Point and Station (in wireless
client) invoke this function at the same time. That is, the
wireless client must support this feature and invoke the
function, too.
Note: Vigor N61 wireless adapter supports this function.
Therefore, you can use and install it into your PC for matching
with Packet-OVERDRIVE (refer to the following picture of
Vigor N61 wireless utility window, choose Enable for
TxBURST on the tab of Option).
Mac Clone
Check this box and manually enter the MAC address for
Station mode driver.
After finishing this web page configuration, please click OK to save the settings.
A
A
d
d
d
d
a
a
N
N
e
e
w
w
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
P
P
r
r
o
o
f
f
i
i
l
l
e
e
To add a new wireless profile for the stations, click Add. The following dialog box will
appear.
VigorAP 902 User’s Guide
76
Available settings are explained as follows:
Item Description
Profile Name
Type a name for the new profile.
SSID
Type the name for such access point that can be used for
connection by the stations.
Network Type
Infrastructure - In this mode, you can connect the access
point to Ethernet device such as TV and Game player to enable
the Ethernet device as a wireless station and join to a wireless
network through an access point or AP router.
802.11 Ad Hoc – An ad-hoc network is a network where
wireless stations can communicate with peer to peer (P2P).
Power Saving Mode
Choose the power saving mode for such device.
CAM – Choose this item if it is not necessary to perform
VigorAP 902 User’s Guide
77
power saving job.
Power Saving Mode – Choose this item to get into the power
saving status when there is no data passing through the access
point.
RTS Threshold
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
Fragment Threshold
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
Security Mode
802.11 standard defines two mechanisms for authentication of
wireless LAN clients: Open Authentication and Shared Key
Authentication.
Choose one of the security modes from the drop down list. If
you choose OPEN or SHARED, you have to type WEP
information.
OPEN – Open authentication is basically null authentication
algorithm, which means that there is no verification of the user.
SHARED – It works similar to Open authentication with only
one major difference. If you choose OPEN with WEP
encryption key, the WEP keys is used to encrypt and decrypt
the data but not for authentication. In Shared key
authentication, WEP encryption will be used for
authentication.
If you choose WPA-Personal or WPA2-Personal, the
corresponding WPA settings will be listed as follows. You
have to choose the WPA algorithms and type the pass phrase
for such security mode.
WPA Algorithms – Choose Temporal Key Integrity Protocol
(TKIP) or AES for data encryption.
Pass Phrase – Please type 8 to 63 alphanumerical characters
here.
VigorAP 902 User’s Guide
78
WEP
WEP Key Length - WEP (Wired Equivalent Privacy) is a
common encryption mode. It is safe enough for home and
personal use. However, if you need higher level of security,
please consider using WPA encryption (see next section).
Some wireless clients do not support WPA, but support WEP.
Therefore WEP is still a good choice for you if you have such
kind of client in your network environment.
WEP Key Entry Method - There are two types of WEP key
length: 64-bit and 128-bit. Using 128-bit is safer than 64-bit,
but it will reduce some data transfer performance.
There are two types of key method: ASCII and Hex. When you
select a key format, the number of characters of key will be
displayed. For example, if you select 64-bit as key length, and
Hex as key format, you’ll see the message at the right of Key
Format is ‘Hex (10 characters) which means the length of
WEP key is 10 characters.
WEP Keys (Key 1 – Key 4) - Four keys can be entered here,
but only one key can be selected at a time. The format of WEP
Key is restricted to 5 ASCII characters or 10 hexadecimal
values in 64-bit encryption level, or restricted to 13 ASCII
characters or 26 hexadecimal values in 128-bit encryption
level. The allowed content is the ASCII characters from 33(!)
to 126(~) except '#' and ','. Such feature is available for WEP
mode.
Default Key – Choose one of the key settings.
Below shows an example for a wireless profile created.
VigorAP 902 User’s Guide
79
3
3
.
.
6
6
.
.
2
2
S
S
i
i
t
t
e
e
S
S
u
u
r
r
v
v
e
e
y
y
The page will list the access points nearby as VigorAP 902 is set to Station mode. You can
select one of the access points to associate.
Available settings are explained as follows:
Item Description
SSID
Display the SSID name of the access point.
BSSID
Display the BSSID (MAC Address) of the access point.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Receive Signal Strength Indication.
Channel
Display the channel number of the access point.
Encryption
Display the encryption setting of the access points. If you have
selected the access point with security setting, you have to go
to 2-7 Wireless Security to set the same security with the
access point you want to associate.
Authentication
Display the authentication type of the access point.
Scan
Search the stations connected to such access point.
Connect
Connect to the wireless AP that you choose.
Add Profile
The system will add a profile automatically for you to connect
with the wireless AP that you choose.
VigorAP 902 User’s Guide
80
3
3
.
.
6
6
.
.
3
3
S
S
t
t
a
a
t
t
i
i
s
s
t
t
i
i
c
c
s
s
This page displays the statistics for data transmission and receiving between the access point
and the stations.
Click Reset Counters if required.
3
3
.
.
6
6
.
.
4
4
W
W
P
P
S
S
(
(
W
W
i
i
-
-
F
F
i
i
P
P
r
r
o
o
t
t
e
e
c
c
t
t
e
e
d
d
S
S
e
e
t
t
u
u
p
p
)
)
Wi-Fi Protected Setup (WPS) is the simplest way to build connection between wireless
network clients and the access point. You don’t have to select encryption mode and input a
long encryption passphrase every time when you need to setup a wireless client. You only
have to press a button on wireless client and the access point, and the WPS will do the setup
for you.
VigorAP 902 supports two types of WPS: Push-Button Configuration (PBC), and PIN code.
If you want to use PBC, you have to switch VigorAP 902 to WPS mode and push a specific
button on the wireless client to start WPS mode. You can push Reset/WPS button of this
VigorAP 902, or click PBC Start button in the web configuration interface to do this; if you
want to use PIN code, you have to provide the PIN code of the wireless client you wish to
connect to this access point and then switch the wireless client to WPS mode.
Note: WPS function of VigorAP 902 will not work for those wireless AP/clients do not
support WPS.
To use WPS function to set encrypted connection between VigorAP 902 and WPS-enabled
wireless AP, please open Wireless LAN >>WPS. The following information will be
displayed:
VigorAP 902 User’s Guide
81
Available settings are explained as follows:
Item Description
SSID
Display the SSID name of the access point.
BSSID
Display the BSSID (MAC Address) of the access point.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Receive Signal Strength Indication.
Ch. (Channel)
Display the channel number of the access point.
Auth.
(Authentication)
Display the authentication type of the access point.
Encrypt (Encryption)
Display the encryption setting of the access points. If you have
selected the access point with security setting, you have to go
to 2-7 Wireless Security to set the same security with the
access point you want to associate.
Ver. (Version)
Display the version of WPS.
Status
Display the status of WPS access point.
Refresh
Click this button to refresh the AP site survey.
Start PBC
Click Start PBC to make a WPS connection within 2 minutes.
Start PIN
When using PinCode method, it is required to enter PIN Code
(Personal Identification Number Code, 8-digit numbers) into
Registrar. When the wireless station is Enrollee, the users can
use Renew PIN to re-generate a new PIN code.
Renew PIN
Click this button to re-generate a new PIN code.
Note: When you’re using PBC type WPS setup, you must press PBC button (hardware or
software) of wireless client within 2 minutes. If you didn’t press PBC button of wireless
client within this time period, please press PBC button (hardware or software) of this
access point again.
VigorAP 902 User’s Guide
82
3
3
.
.
7
7
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
P
P
o
o
i
i
n
n
t
t
t
t
o
o
P
P
o
o
i
i
n
n
t
t
/
/
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
P
P
o
o
i
i
n
n
t
t
t
t
o
o
M
M
u
u
l
l
t
t
i
i
-
-
P
P
o
o
i
i
n
n
t
t
M
M
o
o
d
d
e
e
When you choose AP Bridge-Point to Point or Point-to Multi-Point Mode as the operation
mode, the Wireless LAN menu items will include General Setup, Advanced Setting, AP
Discovery, and WDS AP Status.
AP Bridge-Point to Point allows VigorAP 902 to connect to another VigorAP 902 which
uses the same mode. All wired Ethernet clients of both VigorAP 902s will be connected
together.
Point-to Multi-Point Mode allows AP 902 to connect up to four AP 902s which uses the
same mode. All wired Ethernet clients of every VigorAP 902 will be connected together.
3
3
.
.
7
7
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure
security, Tx Burst and choose proper mode. Please refer to the following figure for more
information.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Mode
At present, VigorAP 902 can connect to 11b only, 11g only,
11n only, Mixed (11b+11g), Mixed (11g+11n) and Mixed
(11b+11g+11n) stations simultaneously. Simply choose
Mixed (11b+11g+11n) mode.
VigorAP 902 User’s Guide
83
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 11. You may switch channel if the selected
channel is under serious interference. If you have no idea of
choosing the frequency, please select AutoSelect to let
system determine for you.
Extension Channel
With 802.11n, there is one option to double the bandwidth per
channel. The available extension channel options will be
varied according to the Channel selected above.
Rate
If you choose 11g Only, 11b Only or 11n Only, such feature
will be available for you to set data transmission rate.
PHY Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same PHY Mode for
connecting with each other.
Security
Select WEP, TKIP or AES as the encryption algorithm. Type
the key number if required.
Peer MAC Address
Type the peer MAC address for the access point that VigorAP
902 connects to.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
84
3
3
.
.
7
7
.
.
2
2
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz - AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz - AP will scan for nearby wireless AP, and
then use 20MHz if the number of AP is more than 10, or use
40MHz if it's not.
40 MHz - AP will use 40MHz for data transmission and
receiving between the AP and the stations.
Packet-OVERDRIVE
This feature can enhance the performance in data transmission
about 40%* more (by checking Tx Burst). It is active only
when both sides of Access Point and Station (in wireless
client) invoke this function at the same time. That is, the
wireless client must support this feature and invoke the
function, too.
Note: Vigor N61 wireless adapter supports this function.
Therefore, you can use and install it into your PC for matching
with Packet-OVERDRIVE (refer to the following picture of
Vigor N61 wireless utility window, choose Enable for
TxBURST on the tab of Option).
VigorAP 902 User’s Guide
85
Antenna
VigorAP can be attached with two antennas to have good data
transmission via wireless connection. However, if you have
only one antenna attached, please choose 1T1R.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
Disabling IGMP snooping will make multicast traffic treated in
VigorAP 902 User’s Guide
86
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
MAC Clone
Click Enable and manually enter the MAC address of the
device with SSID 1. The MAC address of other SSIDs will
change based on this MAC address.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
7
7
.
.
3
3
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to VigorAP 902.
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP
which is in the same channel of VigorAP 902 can be found. Please click Scan to discover all
the connected APs.
VigorAP 902 User’s Guide
87
Available settings are explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Statistics
It displays the statistics for the channels used by APs.
AP’s MAC Address
If you want the found AP applying the WDS settings, please
VigorAP 902 User’s Guide
88
type in the AP’s MAC address.
AP’s SSID
To specify an AP to be applied with WDS settings, you can
specify MAC address or SSID for the AP. Here is the place that
you can type the SSID of the AP.
Add
Type the MAC address of the AP. Click Add. Later, the MAC
address of the AP will be added and be shown on WDS settings
page.
VigorAP 902 User’s Guide
89
3
3
.
.
7
7
.
.
4
4
W
W
D
D
S
S
A
A
P
P
S
S
t
t
a
a
t
t
u
u
s
s
VigorAP 902 can display the status such as MAC address, physical mode, power save and
bandwidth for the working AP connected with WDS. Click Refresh to get the newest
information.
VigorAP 902 User’s Guide
90
3
3
.
.
8
8
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
W
W
D
D
S
S
M
M
o
o
d
d
e
e
When you choose AP Bridge-WDS as the operation mode, the Wireless LAN menu items
will include General Setup, Security, Access Control, WPS, Advanced Setting, AP
Discovery, WDS AP Status, WMM Configuration, Bandwidth Management, Airtime
Fairness, Station Control, Roaming, Band Steering and Station List.
3
3
.
.
8
8
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure
security, Tx Burst and choose proper mode. Please refer to the following figure for more
information.
VigorAP 902 User’s Guide
91
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through VigorAP. The number
you can set is from 3 to 64.
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can connect to 11b only, 11g only,
11n only, Mixed (11b+11g), Mixed (11g+11n) and Mixed
(11b+11g+11n) stations simultaneously. Simply choose Mixed
(11b+11g+11n) mode.
VigorAP 902 User’s Guide
92
Channel
Means the channel of frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference. If you have no idea of choosing the frequency,
please select AutoSelect to let system determine for you.
Extension Channel
With 802.11n, there is one option to double the bandwidth per
channel. The available extension channel options will be varied
according to the Channel selected above. Configure the
extension channel you want.
Enable 2 Subnet
(Simulate 2 APs)
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in
the same domain. You could only connect one router (no
matter connecting to LAN-A or LAN-B) in this environment.
Enable
Check the box to enable the SSID configuration.
Hide SSID
Check it to prevent from wireless sniffing and make it harder
for unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to
set four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. Default settings
are DrayTek-LAN-A and DrayTek-LAN-B. When Enable 2
Subnet is enabled, you can specify subnet interface (LAN-A
or LAN-B) for each SSID by using the drop down menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could
only communicate with LAN-A.
Isolate LAN
Check this box to make the wireless clients (stations) with the
same SSID not accessing for wired PC in LAN.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not accessing for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is
VigorAP 902 User’s Guide
93
from 3 to 4095. The VLAN ID is 0 by default, it means
disabling the VLAN function for the SSID.
Rate
If you choose 11g Only, 11b Only or 11n Only, such feature
will be available for you to set data transmission rate.
PHY Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same PHY Mode for
connecting with each other.
Subnet
Choose LAN-A or LAN-B for each SSID.
Security
Select Disabled, WEP, TKIP or AES as the encryption
algorithm.
Peer MAC Address
Four peer MAC addresses are allowed to be entered in this
page at one time.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
94
3
3
.
.
8
8
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
station and the RADIUS server in performing mutual
VigorAP 902 User’s Guide
95
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Either 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
Enable - Enable the WEP Encryption.
VigorAP 902 User’s Guide
96
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
97
3
3
.
.
8
8
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
VigorAP 902 User’s Guide
98
Backup
Click it to store the settings (MAC addresses on MAC Address
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
8
8
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902r.
Only WPA2/PSK and WPA/PSK support WPS.
WPS Encryp Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
VigorAP 902 User’s Guide
99
3
3
.
.
8
8
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz– the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
40 MHz- the AP will use 40MHz for data transmission and
receiving between the AP and the stations.
Packet-OVERDRIVE
This feature can enhance the performance in data transmission
about 40%* more (by checking Tx Burst). It is active only
when both sides of Access Point and Station (in wireless
client) invoke this function at the same time. That is, the
wireless client must support this feature and invoke the
function, too.
Note: Vigor N61 wireless adapter supports this function.
Therefore, you can use and install it into your PC for matching
with Packet-OVERDRIVE (refer to the following picture of
Vigor N61 wireless utility window, choose Enable for
TxBURST on the tab of Option).
VigorAP 902 User’s Guide
100
Antenna
VigorAP can be attached with two antennas to have good data
transmission via wireless connection. However, if you have
only one antenna attached, please choose 1T1R.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
VigorAP 902 User’s Guide
101
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
MAC Clone
Click Enable and manually enter the MAC address of the
device with SSID 1. The MAC address of other SSIDs will
change based on this MAC address.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
8
8
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP
which is in the same channel of VigorAP 902 can be found. Please click Scan to discover all
the connected APs.
VigorAP 902 User’s Guide
102
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Statistics
It displays the statistics for the channels used by APs.
AP’s MAC Address
If you want the found AP applying the WDS settings, please
VigorAP 902 User’s Guide
103
type in the AP’s MAC address.
AP’s SSID
To specify an AP to be applied with WDS settings, you can
specify MAC address or SSID for the AP. Here is the place
that you can type the SSID of the AP.
Add
Click Repeater for the specified AP. Next, click Add. Later,
the MAC address of the AP will be added and be shown on
WDS settings page.
3
3
.
.
8
8
.
.
7
7
W
W
D
D
S
S
A
A
P
P
S
S
t
t
a
a
t
t
u
u
s
s
VigorAP 902 can display the status such as MAC address, physical mode, power save and
bandwidth for the working AP connected with WDS. Click Refresh to get the newest
information.
VigorAP 902 User’s Guide
104
3
3
.
.
8
8
.
.
8
8
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
VigorAP 902 User’s Guide
105
must be greater.
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
106
3
3
.
.
8
8
.
.
9
9
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
107
3
3
.
.
8
8
.
.
1
1
0
0
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
VigorAP 902 User’s Guide
108
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
109
Note: Airtime Fairness function and Bandwidth Limit function should be mutually
exclusive. So their webs have extra actions to ensure these two functions are not enabled
simultaneously.
3
3
.
.
8
8
.
.
1
1
1
1
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the wireless
client connecting /reconnecting to Vigor router. Or, type the
duration manually when you choose User defined.
Display All Station
Control List
All the wireless stations connecting to Vigor router by using
such SSID will be listed on Station Control List.
VigorAP 902 User’s Guide
110
After finishing all the settings here, please click OK to save the configuration.
3
3
.
.
8
8
.
.
1
1
2
2
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
VigorAP 902 User’s Guide
111
wireless station can connect to the adjacent AP (with better
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1x
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
112
3
3
.
.
8
8
.
.
1
1
3
3
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
Band Steering detects if the wireless clients are capable of 5GHz operation, and steers them
to that frequency. It helps to leave 2.4GHz band available for legacy clients, and improves
users experience by reducing channel utilization.
If dual-band is detected, the AP will let the wireless client connect to less congested wireless
LAN, such as 5GHz to prevent from network congestion.
Note: To make Band Steering work successfully, SSID and security on 2.4GHz also
MUST be broadcasted on 5GHz.
VigorAP 902 User’s Guide
113
Open Wireless LAN (2.4GHz)>>Band Steering to get the following web page:
Available settings are explained as follows:
Item Description
Enable Band Steering
If it is enabled, VigorAP will detect if the wireless client is
capable of dual-band or not within the time limit.
Check Time…. – If the wireless station does not have the
capability of 5GHz network connection, the system shall
wait and check for several seconds (15 seconds, in default)
to make the 2.4GHz network connection. Specify the time
limit for VigorAP to detect the wireless client.
5GHz Minimum RSSI – The wireless station has the
capability of 5GHz network connection, yet the signal
performance might not be satisfied. Therefore, when the
signal strength is below the value set here while the
wireless station connecting to VigorAP 902, VigorAP will
allow the client to connect to 2.4GHz network.
After finishing this web page configuration, please click OK to save the settings.
Below shows how Band Steering works.
VigorAP 902 User’s Guide
114
VigorAP 902 User’s Guide
115
H
H
o
o
w
w
t
t
o
o
U
U
s
s
e
e
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
?
?
1. Open Wireless LAN(2.4GHz)>>Band Steering.
2. Check the box of Enable Band Steering and use the default value (15) for check time
setting.
3. Click OK to save the settings.
4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>>
General Setup. Configure SSID as ap902-BandSteering for both pages. Click OK to
save the settings.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
116
5. Open Wireless LAN (2.4GHz)>>Security and Wireless LAN (5GHz)>>Security.
Configure Security as 12345678 for both pages. Click OK to save the settings.
6. Now, VigorAP 902 will let the wireless clients connect to less congested wireless LAN,
such as 5GHz to prevent from network congestion.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
117
3
3
.
.
8
8
.
.
1
1
4
4
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code.
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
Add
Click this button to add current typed MAC address into Access
Control.
VigorAP 902 User’s Guide
118
Advanced
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
119
3
3
.
.
9
9
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
M
M
o
o
d
d
e
e
When you choose Universal Repeater as the operation mode, the Wireless LAN menu items
will include General Setup, Security, Access Control, WPS, Advanced Setting, AP
Discovery, Universal Repeater, WMM Configuration, Bandwidth Management, Airtime
Fairness, Station Control, Roaming, Band Steering and Station List.
VigorAP 902 User’s Guide
120
3
3
.
.
9
9
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure the
SSID and the wireless channel.
Please refer to the following figure for more information.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through VigorAP. The number
you can set is from 3 to 64.
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can connect to 11b only, 11g only,
11n only, Mixed (11b+11g), Mixed (11g+11n) and Mixed
(11b+11g+11n) stations simultaneously. Simply choose Mixed
(11b+11g+11n) mode.
VigorAP 902 User’s Guide
121
Channel
Means the channel of frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference. If you have no idea of choosing the frequency,
please select AutoSelect to let system determine for you.
Rate
If you choose 11g Only or 11b Only, such feature will be
available for you to set data transmission rate.
Extension Channel
With 802.11n, there is one option to double the bandwidth per
channel. The available extension channel options will be varied
according to the Channel selected above. Configure the
extension channel you want.
Enable 2 Subnet
(Simulate 2 APs)
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in
the same domain. You could only connect one router (no
matter connecting to LAN-A or LAN-B) in this environment.
Hide SSID
Check it to prevent from wireless sniffing and make it harder
for unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to
set four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. Default settings
are DrayTek-LAN-A and DrayTek-LAN-B. When Enable 2
Subnet is enabled, you can specify subnet interface (LAN-A
or LAN-B) for each SSID by using the drop down menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could
only communicate with LAN-A.
Isolate LAN
Check this box to make the wireless clients (stations) with the
same SSID not accessing for wired PC in LAN.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not accessing for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is
from 3 to 4095. The VLAN ID is 0 by default, it means
disabling the VLAN function for the SSID.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
122
3
3
.
.
9
9
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
station and the RADIUS server in performing mutual
VigorAP 902 User’s Guide
123
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
Enable - Enable the WEP Encryption.
VigorAP 902 User’s Guide
124
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
125
3
3
.
.
9
9
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
VigorAP 902 User’s Guide
126
Backup
Click it to store the settings (MAC addresses on MAC Address
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
9
9
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902. Only
WPA2/PSK and WPA/PSK support WPS.
WPS Encryp Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
VigorAP 902 User’s Guide
127
3
3
.
.
9
9
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz– the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
40 MHz- the AP will use 40MHz for data transmission and
receiving between the AP and the stations.
Packet-OVERDRIVE
This feature can enhance the performance in data transmission
about 40%* more (by checking Tx Burst). It is active only
when both sides of Access Point and Station (in wireless
client) invoke this function at the same time. That is, the
wireless client must support this feature and invoke the
function, too.
Note: Vigor N61 wireless adapter supports this function.
Therefore, you can use and install it into your PC for matching
with Packet-OVERDRIVE (refer to the following picture of
Vigor N61 wireless utility window, choose Enable for
TxBURST on the tab of Option).
VigorAP 902 User’s Guide
128
Antenna
VigorAP can be attached with two antennas to have good data
transmission via wireless connection. However, if you have
only one antenna attached, please choose 1T1R.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
VigorAP 902 User’s Guide
129
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
MAC Clone
Click Enable and manually enter the MAC address of the
device with SSID 1. The MAC address of other SSIDs will
change based on this MAC address.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
130
3
3
.
.
9
9
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP
which is in the same channel of VigorAP 902 can be found. Please click Scan to discover all
the connected APs.
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
VigorAP 902 User’s Guide
131
used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Interference
Access into Diagnostics>>Interference Monitor for viewing
interference status for channel(s).
AP’s MAC Address
If you want the found AP applying the WDS settings, please
type in the AP’s MAC address.
AP’s SSID
To specify an AP to be applied with WDS settings, you can
specify MAC address or SSID for the AP. Here is the place
that you can type the SSID of the AP.
Select as Universal
Repeater
In Universal Repeater mode, WAN would work as station
mode and the wireless AP can be selected as a universal
repeater. Choose one of the wireless APs from the Scan list.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
132
3
3
.
.
9
9
.
.
7
7
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
The access point can act as a wireless repeater; it can be Station and AP at the same time. It
can use Station function to connect to a Root AP and use AP function to serve all wireless
stations within its coverage.
Note: While using Universal Repeater mode, the access point will demodulate the
received signal. Please check if this signal is noise for the operating network, then have
the signal modulated and amplified again. The output power of this mode is the same as
that of WDS and normal AP mode.
Available settings are explained as follows:
Item Description
Universal Repeater Parameters
SSID
Set the name of access point that VigorAP 902 wants to
connect to.
MAC Address
(Optional)
Type the MAC address of access point that VigorAP 902 wants
to connect to.
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 11. You may switch channel if the selected
channel is under serious interference. If you have no idea of
choosing the frequency, please select AutoSelect to let system
determine for you.
Security Mode
There are several modes provided for you to choose. Each
mode will bring up different parameters (e.g., WEP keys, Pass
Phrase) for you to configure.
VigorAP 902 User’s Guide
133
Encryption Type for
Open/Shared
This option is available when Open/Shared is selected as
Security Mode.
Choose None to disable the WEP Encryption. Data sent to the
AP will not be encrypted. To enable WEP encryption for data
transmission, please choose WEP.
WEP Keys - Four keys can be entered here, but only one key
can be selected at a time. The format of WEP Key is restricted
to 5 ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','.
Encryption Type for
WPA/PSK and
WPA2/PSK
This option is available when WPA/PSK or WPA2/PSK is
selected as Security Mode.
Select TKIP or AES as the algorithm for WPA.
Pass Phrase
Either 8~63 ASCII characters, such as 012345678 (or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde...").
Universal Repeater IP Configuration
Connection Type
Choose DHCP or Static IP as the connection mode.
DHCP – The wireless station will be assigned with an IP from
VigorAP.
Static IP – The wireless station shall specify a static IP for
connecting to Internet via VigorAP.
Device Name
This setting is available when DHCP is selected as
Connection Type.
Type a name for the router as identification. Simply use the
default name.
IP Address
This setting is available when Static IP is selected as
Connection Type.
Type an IP address with the same network segment of the LAN
VigorAP 902 User’s Guide
134
IP setting of the router. Such IP shall be different with any IP
address in LAN.
Subnet Mask
This setting is available when Static IP is selected as
Connection Type.
Type the subnet mask setting which shall be the same as the
one configured in LAN for the router.
Default Gateway
This setting is available when Static IP is selected as
Connection Type.
Type the gateway setting which shall be the same as the default
gateway configured in LAN for the router.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
9
9
.
.
8
8
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
VigorAP 902 User’s Guide
135
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
must be greater.
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
136
3
3
.
.
9
9
.
.
9
9
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
137
3
3
.
.
9
9
.
.
1
1
0
0
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
VigorAP 902 User’s Guide
138
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
139
Note: Airtime Fairness function and Bandwidth Limit function should be mutually
exclusive. So their webs have extra actions to ensure these two functions are not enabled
simultaneously.
3
3
.
.
9
9
.
.
1
1
1
1
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the wireless
client connecting /reconnecting to Vigor router. Or, type the
duration manually when you choose User defined.
Display All Station
Control List
All the wireless stations connecting to Vigor router by using
such SSID will be listed on Station Control List.
VigorAP 902 User’s Guide
140
After finishing all the settings here, please click OK to save the configuration.
3
3
.
.
9
9
.
.
1
1
2
2
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
wireless station can connect to the adjacent AP (with better
VigorAP 902 User’s Guide
141
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
142
3
3
.
.
9
9
.
.
1
1
3
3
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
Band Steering detects if the wireless clients are capable of 5GHz operation, and steers them
to that frequency. It helps to leave 2.4GHz band available for legacy clients, and improves
users experience by reducing channel utilization.
If dual-band is detected, the AP will let the wireless client connect to less congested wireless
LAN, such as 5GHz to prevent from network congestion.
Note: To make Band Steering work successfully, SSID and security on 2.4GHz also
MUST be broadcasted on 5GHz.
VigorAP 902 User’s Guide
143
Open Wireless LAN (2.4GHz)>>Band Steering to get the following web page:
Available settings are explained as follows:
Item Description
Enable Band Steering
If it is enabled, VigorAP will detect if the wireless client is
capable of dual-band or not within the time limit.
Check Time…. – If the wireless station does not have the
capability of 5GHz network connection, the system shall
wait and check for several seconds (15 seconds, in default)
to make the 2.4GHz network connection. Specify the time
limit for VigorAP to detect the wireless client.
5GHz Minimum RSSI - The wireless station has the
capability of 5GHz network connection, yet the signal
performance might not be satisfied. Therefore, when the
signal strength is below the value set here while the
wireless station connecting to VigorAP 902, VigorAP will
allow the client to connect to 2.4GHz network.
After finishing this web page configuration, please click OK to save the settings.
Below shows how Band Steering works.
VigorAP 902 User’s Guide
144
VigorAP 902 User’s Guide
145
H
H
o
o
w
w
t
t
o
o
U
U
s
s
e
e
B
B
a
a
n
n
d
d
S
S
t
t
e
e
e
e
r
r
i
i
n
n
g
g
?
?
1. Open Wireless LAN(2.4GHz)>>Band Steering.
2. Check the box of Enable Band Steering and use the default value (15) for check time
setting.
3. Click OK to save the settings.
4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>>
General Setup. Configure SSID as ap902-BandSteering for both pages. Click OK to
save the settings.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
146
5. Open Wireless LAN (2.4GHz)>>Security and Wireless LAN (5GHz)>>Security.
Configure Security as 12345678 for both pages. Click OK to save the settings.
6. Now, VigorAP 902 will let the wireless clients connect to less congested wireless LAN,
such as 5GHz to prevent from network congestion.
Same value
for 2.4GHz
and 5GHz
VigorAP 902 User’s Guide
147
3
3
.
.
9
9
.
.
1
1
4
4
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code. Each tab (general, advanced, control, neighbor) will display different status
information (including MAC address, Vendor, SSID, Auth, Encrypt, Tx/Rx Rate, Hostname,
RSSI, Link Speed, BW, PSM, WMM, PHMd, MCS, Connection Time, Reconnection Time,
Approx. Distance, Visit Time, and so on).
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
VigorAP 902 User’s Guide
148
Add
Click this button to add current typed MAC address into
Access Control.
Advanced
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
149
3
3
.
.
1
1
0
0
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
5
5
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
M
M
o
o
d
d
e
e
The AP mode allows wireless clients to connect to access point and exchange data with the
devices connected to the wired network.
3
3
.
.
1
1
0
0
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure the
general settings for wireless connection such as specifying SSID, selecting the wireless
channel, isolate LAN connection and so on.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through VigorAP. The number you
can set is from 3 to 64.
VigorAP 902 User’s Guide
150
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can be connected by 11a only, 11n
only (5G), Mixed (11a+11n) and Mixed (11a+11n+ac) stations
simultaneously. Simply choose Mixed (11a+11n+ac) mode.
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 36. You may switch channel if the selected
channel is under serious interference.
Enable 2 Subnet
(Simulate 2 APs)
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in the
same domain. You could only connect one router (no matter
connecting to LAN-A or LAN-B) in this environment.
Hide SSID
Check it to prevent from wireless sniffing and make it harder for
unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to set
four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. Default settings are
Draytek_5G-LANA and Draytek_5G-LANB. When Enable 2
Subnet is enabled, you can specify subnet interface (LAN-A or
LAN-B) for each SSID by using the drop down menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could only
communicate with LAN-A.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not accessing for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is from
1 to 4095. The VLAN ID is 0 by default, it means disabling the
VLAN function for the SSID.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
151
3
3
.
.
1
1
0
0
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
station and the RADIUS server in performing mutual
VigorAP 902 User’s Guide
152
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
PMK Cache Period
Set the expire time of WPA2 PMK (Pairwise master key)
cache. PMK Cache manages the list from the BSSIDs in the
associated SSID with which it has pre-authenticated. Such
feature is available for WPA2/802.1 mode.
Pre-Authentication
Enables a station to authenticate to multiple APs for roaming
securer and faster. With the pre-authentication procedure
defined in IEEE 802.11i specification, the
pre-four-way-handshake can reduce handoff delay perceivable
by a mobile node. It makes roaming faster and more secure.
(Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
VigorAP 902 User’s Guide
153
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
Enable - Enable the WEP Encryption.
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
154
3
3
.
.
1
1
0
0
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
Backup
Click it to store the settings (MAC addresses on MAC Address
VigorAP 902 User’s Guide
155
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
0
0
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902. Only
WPA2/PSK and WPA/PSK support WPS.
WPS Encryp Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 5G WLAN
LEDs on VigorAP 902 will blink quickly when WPS is in
progress. It will return to normal condition after two minutes.
(You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 5G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
VigorAP 902 User’s Guide
156
3
3
.
.
1
1
0
0
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz– the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
Auto 20/40/80 MHz– the AP will use 20MHz or 40MHz or
80MHz for data transmission and receiving according to the
station capability. Such channel can increase the performance
for data transmission.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
value if you don’t know what it is, default value is 2347.
VigorAP 902 User’s Guide
157
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
158
3
3
.
.
1
1
0
0
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Please click Scan to
discover all the connected APs.
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
VigorAP 902 User’s Guide
159
shown on the box above this button
Channel Interference
Access into Diagnostics>>Interference Monitor for viewing
interference status for channel(s).
VigorAP 902 User’s Guide
160
3
3
.
.
1
1
0
0
.
.
7
7
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
must be greater.
VigorAP 902 User’s Guide
161
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
0
0
.
.
8
8
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
VigorAP 902 User’s Guide
162
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
0
0
.
.
9
9
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
After finishing this web page configuration, please click OK to save the settings.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
VigorAP 902 User’s Guide
163
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
VigorAP 902 User’s Guide
164
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
Note: Airtime Fairness function and Bandwidth Limit function should be mutually
exclusive. So their webs have extra actions to ensure these two functions are not enabled
simultaneously.
3
3
.
.
1
1
0
0
.
.
1
1
0
0
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the
wireless client connecting /reconnecting to Vigor router. Or,
type the duration manually when you choose User defined.
VigorAP 902 User’s Guide
165
Display All Station
Control List
All the wireless stations connecting to Vigor router by using
such SSID will be listed on Station Control List.
After finishing all the settings here, please click OK to save the configuration.
3
3
.
.
1
1
0
0
.
.
1
1
1
1
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
VigorAP 902 User’s Guide
166
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
wireless station can connect to the adjacent AP (with better
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
167
3
3
.
.
1
1
0
0
.
.
1
1
2
2
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code. Each tab (general, advanced, control, neighbor) will display different status
information (including MAC address, Vendor, SSID, Auth, Encrypt, Tx/Rx Rate, Hostname,
RSSI, Link Speed, BW, PSM, WMM, PHMd, MCS, Connection Time, Reconnection Time,
Approx. Distance, Visit Time, and so on).
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
Add
Click this button to add current typed MAC address into
Access Control.
Advanced
VigorAP 902 User’s Guide
168
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
169
3
3
.
.
1
1
1
1
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
5
5
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
A
A
P
P
B
B
r
r
i
i
d
d
g
g
e
e
-
-
W
W
D
D
S
S
M
M
o
o
d
d
e
e
When you choose AP Bridge-WDS as the operation mode, the Wireless LAN menu items
will include General Setup, Security, Access Control, WPS, Advanced Setting, AP
Discovery, WDS AP Status, WMM Configuration, Bandwidth Management, Airtime
Fairness, Station Control, Roaming, Band Steering and Station List.
3
3
.
.
1
1
1
1
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure
security, Tx Burst and choose proper mode. Please refer to the following figure for more
information.
VigorAP 902 User’s Guide
170
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through VigorAP. The number
you can set is from 3 to 64.
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can connect to 11a only, 11n only
(5G), Mixed (11a+11n) and Mixed (11a+11n+11ac) stations
simultaneously. Simply choose Mixed (11a+11n+11a) mode.
VigorAP 902 User’s Guide
171
Channel
Means the channel of frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference. If you have no idea of choosing the frequency,
please select AutoSelect to let system determine for you.
Enable 2 Subnet
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in
the same domain. You could only connect one router (no
matter connecting to LAN-A or LAN-B) in this environment.
Enable
Check the box to enable the SSID configuration.
Hide SSID
Check it to prevent from wireless sniffing and make it harder
for unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to
set four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. Default settings
are DrayTek5G-LAN-A and DrayTek5G-LAN-B. When
Enable 2 Subnet is enabled, you can specify subnet interface
(LAN-A or LAN-B) for each SSID by using the drop down
menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could
only communicate with LAN-A.
Isolate LAN
Check this box to make the wireless clients (stations) with the
same SSID not accessing for wired PC in LAN.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not accessing for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is
from 3 to 4095. The VLAN ID is 0 by default, it means
disabling the VLAN function for the SSID.
PHY Mode
Data will be transmitted via HTMIX mode.
Each access point should be setup to the same Phy Mode for
VigorAP 902 User’s Guide
172
connecting with each other.
Security
Select WEP, TKIP or AES as the encryption algorithm.
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde...").
Peer MAC Address
Type the peer MAC address for the access point that VigorAP
902 connects to.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
173
3
3
.
.
1
1
1
1
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
station and the RADIUS server in performing mutual
VigorAP 902 User’s Guide
174
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Either 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
Enable - Enable the WEP Encryption.
VigorAP 902 User’s Guide
175
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
176
3
3
.
.
1
1
1
1
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
Backup
Click it to store the settings (MAC addresses on MAC Address
VigorAP 902 User’s Guide
177
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
1
1
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902r.
Only WPA2/PSK and WPA/PSK support WPS.
WPS Encryp Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 2.4G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
VigorAP 902 User’s Guide
178
3
3
.
.
1
1
1
1
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz– the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
Auto 20/40/80 MHz– the AP will use 20MHz or 40MHz or
80MHz for data transmission and receiving according to the
station capability. Such channel can increase the performance
for data transmission.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
VigorAP 902 User’s Guide
179
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
1
1
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP
which is in the same channel of VigorAP 902 can be found. Please click Scan to discover all
the connected APs.
VigorAP 902 User’s Guide
180
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Interference
Access into Diagnostics>>Interference Monitor for viewing
interference status for channel(s).
VigorAP 902 User’s Guide
181
3
3
.
.
1
1
1
1
.
.
7
7
W
W
D
D
S
S
A
A
P
P
S
S
t
t
a
a
t
t
u
u
s
s
VigorAP 902 can display the status such as MAC address, physical mode, power save and
bandwidth for the working AP connected with WDS. Click Refresh to get the newest
information.
VigorAP 902 User’s Guide
182
3
3
.
.
1
1
1
1
.
.
8
8
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
must be greater.
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
VigorAP 902 User’s Guide
183
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
184
3
3
.
.
1
1
1
1
.
.
9
9
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
185
3
3
.
.
1
1
1
1
.
.
1
1
0
0
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
VigorAP 902 User’s Guide
186
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
187
Note: Airtime Fairness function and Bandwidth Limit function should be mutually
exclusive. So their webs have extra actions to ensure these two functions are not enabled
simultaneously.
3
3
.
.
1
1
1
1
.
.
1
1
1
1
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the wireless
client connecting /reconnecting to Vigor router. Or, type the
duration manually when you choose User defined.
Display All Station
Control List
All the wireless stations connecting to Vigor router by using
such SSID will be listed on Station Control List.
VigorAP 902 User’s Guide
188
After finishing all the settings here, please click OK to save the configuration.
3
3
.
.
1
1
1
1
.
.
1
1
2
2
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
VigorAP 902 User’s Guide
189
wireless station can connect to the adjacent AP (with better
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
190
3
3
.
.
1
1
1
1
.
.
1
1
3
3
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code.
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
Add
Click this button to add current typed MAC address into Access
Control.
Advanced
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
VigorAP 902 User’s Guide
191
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
192
3
3
.
.
1
1
2
2
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
(
(
5
5
G
G
H
H
z
z
)
)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
M
M
o
o
d
d
e
e
3
3
.
.
1
1
2
2
.
.
1
1
G
G
e
e
n
n
e
e
r
r
a
a
l
l
S
S
e
e
t
t
u
u
p
p
By clicking the General Setup, a new web page will appear so that you could configure the
SSID and the wireless channel.
Please refer to the following figure for more information.
Available settings are explained as follows:
Item Description
Enable Wireless LAN
Check the box to enable wireless function.
Enable Client Limit
Check the box to set the maximum number of wireless stations
which try to connect Internet through VigorAP. The number
VigorAP 902 User’s Guide
193
you can set is from 3 to 64.
Enable Client Limit
per SSID
Define the maximum number of wireless stations per SSID
which try to connect to Internet through Vigor device. The
number you can set is from 3 to 64.
Mode
At present, VigorAP 902 can connect to 11a only, 11n only,
Mixed (11a+11n) and Mixed (11a+11n+11ac).
Channel
Means the channel of frequency of the wireless LAN. You may
switch channel if the selected channel is under serious
interference. If you have no idea of choosing the frequency,
please select AutoSelect to let system determine for you.
Enable 2 Subnet
(Simulate 2 APs)
Check the box to enable the function for two independent
subnets. Once you enable this function, LAN-A and LAN-B
would be independent. Next, you can connect one router in
LAN-A, and another router in LAN-B. Such mechanism can
make you feeling that you have two independent AP/subnet
functions in one VigorAP 902.
If you disable this function, LAN-A and LAN-B ports are in
the same domain. You could only connect one router (no
matter connecting to LAN-A or LAN-B) in this environment.
Hide SSID
Check it to prevent from wireless sniffing and make it harder
for unauthorized clients or STAs to join your wireless LAN.
Depending on the wireless utility, the user may only see the
information except SSID or just cannot see any thing about
VigorAP 902 while site surveying. The system allows you to
set four sets of SSID for different usage.
SSID
Set a name for VigorAP 902 to be identified. When Enable 2
Subnet is enabled, you can specify subnet interface (LAN-A
or LAN-B) for each SSID by using the drop down menu.
Subnet
Choose LAN-A or LAN-B for each SSID. If you choose
LAN-A, the wireless clients connecting to this SSID could
only communicate with LAN-A.
Isolate LAN
Check this box to make the wireless clients (stations) with the
same SSID not accessing for wired PC in LAN.
Isolate Member
Check this box to make the wireless clients (stations) with the
same SSID not accessing for each other.
VLAN ID
Type the value for such SSID. Packets transferred from such
SSID to LAN will be tagged with the number.
If your network uses VLANs, you can assign the SSID to a
VLAN on your network. Client devices that associate using the
SSID are grouped into this VLAN. The VLAN ID range is
from 3 to 4095. The VLAN ID is 0 by default, it means
VigorAP 902 User’s Guide
194
disabling the VLAN function for the SSID.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
195
3
3
.
.
1
1
2
2
.
.
2
2
S
S
e
e
c
c
u
u
r
r
i
i
t
t
y
y
This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively.
After configuring the correct settings, please click OK to save and invoke it.
By clicking the Security Settings, a new web page will appear so that you could configure
the settings.
Available settings are explained as follows:
Item Description
Mode
There are several modes provided for you to choose.
Disable - The encryption mechanism is turned off.
WEP - Accepts only WEP clients and the encryption key
should be entered in WEP Key.
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK -
Accepts only WPA clients and the encryption key should be
entered in PSK. The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WEP/802.1x - The built-in RADIUS client feature enables
VigorAP 902 to assist the remote dial-in user or a wireless
VigorAP 902 User’s Guide
196
station and the RADIUS server in performing mutual
authentication. It enables centralized remote access
authentication for network management.
The WPA encrypts each frame transmitted from the radio
using the key, which either PSK (Pre-Shared Key) entered
manually in this field below or automatically negotiated via
802.1x authentication. Select WPA, WPA2 or Auto as WPA
mode.
WPA/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA2/802.1x - The WPA encrypts each frame transmitted
from the radio using the key, which either PSK (Pre-Shared
Key) entered manually in this field below or automatically
negotiated via 802.1x authentication.
WPA Algorithms
Select TKIP, AES or TKIP/AES as the algorithm for WPA.
Such feature is available for WPA2/802.1x, WPA/802.1x,
WPA/PSK or WPA2/PSK or Mixed (WPA+WPA2)/PSK
mode.
Pass Phrase
Type 8~63 ASCII characters, such as 012345678..(or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde..."). Such feature is available for WPA/PSK
or WPA2/PSK or Mixed (WPA+WPA2)/PSK mode.
Key Renewal Interval
WPA uses shared key for authentication to the network.
However, normal network operations use a different
encryption key that is randomly generated. This randomly
generated key that is periodically replaced. Enter the renewal
security time (seconds) in the column. Smaller interval leads to
greater security but lower performance. Default is 3600
seconds. Set 0 to disable re-key. Such feature is available for
WPA2/802.1,WPA/802.1x, WPA/PSK or WPA2/PSK or
Mixed (WPA+WPA2)/PSK mode.
EAPOL Key Retry
EAPOL means Extensible Authentication Protocol over LAN.
Enable - The default setting is "Enable". It can make sure that
the key will be installed and used once in order to prevent key
reinstallation attack.
Key 1 – Key 4
Four keys can be entered here, but only one key can be
selected at a time. The format of WEP Key is restricted to 5
ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','. Such feature is available for WEP mode.
802.1x WEP
Disable - Disable the WEP Encryption. Data sent to the AP
will not be encrypted.
VigorAP 902 User’s Guide
197
Enable - Enable the WEP Encryption.
Such feature is available for WEP/802.1x mode.
Click the link of RADIUS Server to access into the following page for more settings.
Available settings are explained as follows:
Item Description
Use internal RADIUS
Server
There is a RADIUS server built in VigorAP 902 which is used
to authenticate the wireless client connecting to the access
point. Check this box to use the internal RADIUS server for
wireless security.
Besides, if you want to use the external RADIUS server for
authentication, do not check this box.
Please refer to the section, 3.13 RADIUS Server to configure
settings for internal server of VigorAP 902.
IP Address
Enter the IP address of external RADIUS server.
Port
The UDP port number that the external RADIUS server is
using. The default value is 1812, based on RFC 2138.
Shared Secret
The external RADIUS server and client share a secret that is
used to authenticate the messages sent between them. Both
sides must be configured to use the same shared secret.
Session Timeout
Set the maximum time of service provided before
re-authentication. Set to zero to perform another authentication
immediately after the first authentication has successfully
completed. (The unit is second.)
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
198
3
3
.
.
1
1
2
2
.
.
3
3
A
A
c
c
c
c
e
e
s
s
s
s
C
C
o
o
n
n
t
t
r
r
o
o
l
l
For additional security of wireless access, the Access Control facility allows you to restrict
the network access right by controlling the wireless LAN MAC address of client. Only the
valid MAC address that has been configured can access the wireless LAN interface. By
clicking the Access Control, a new web page will appear, as depicted below, so that you
could edit the clients' MAC addresses to control their access rights (deny or allow).
Available settings are explained as follows:
Item Description
Policy
Select to enable any one of the following policy or disable the
policy. Choose Activate MAC address filter to type in the
MAC addresses for other clients in the network manually.
Choose Blocked MAC address filter, so that all of the devices
with the MAC addresses listed on the MAC Address Filter
table will be blocked and cannot access into VigorAP 902.
MAC Address Filter
Display all MAC addresses that are edited before.
Client’s MAC
Address
Manually enter the MAC address of wireless client.
Add
Add a new MAC address into the list.
Delete
Delete the selected MAC address in the list.
Edit
Edit the selected MAC address in the list.
Cancel
Give up the access control set up.
VigorAP 902 User’s Guide
199
Backup
Click it to store the settings (MAC addresses on MAC Address
Filter table) on this page as a file.
Restore
Click it to restore the settings (MAC addresses on MAC
Address Filter table) from an existed file.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
2
2
.
.
4
4
W
W
P
P
S
S
Open Wireless LAN>>WPS to configure the corresponding settings.
Available settings are explained as follows:
Item Description
Enable WPS
Check this box to enable WPS setting.
WPS Configured
Display related system information for WPS. If the wireless
security (encryption) function of VigorAP 902 is properly
configured, you can see ‘Yes’ message here.
WPS SSID
Display current selected SSID.
WPS Auth Mode
Display current authentication mode of the VigorAP 902. Only
WPA2/PSK and WPA/PSK support WPS.
WPS Encrypt Type
Display encryption mode (None, WEP, TKIP, AES, etc.) of
VigorAP 902.
Configure via Push
Button
Click Start PBC to invoke Push-Button style WPS setup
procedure. VigorAP 902 will wait for WPS requests from
wireless clients about two minutes. Both ACT and 5G WLAN
LEDs on VigorAP 902 will blink quickly when WPS is in
progress. It will return to normal condition after two minutes.
(You need to setup WPS within two minutes)
Configure via Client
PinCode
Type the PIN code specified in wireless client you wish to
connect, and click Start PIN button. Both ACT and 5G
WLAN LEDs on VigorAP 902 will blink quickly when WPS
is in progress. It will return to normal condition after two
minutes. (You need to setup WPS within two minutes).
VigorAP 902 User’s Guide
200
3
3
.
.
1
1
2
2
.
.
5
5
A
A
d
d
v
v
a
a
n
n
c
c
e
e
d
d
S
S
e
e
t
t
t
t
i
i
n
n
g
g
This page is to determine which algorithm will be selected for wireless transmission rate.
Available settings are explained as follows:
Item Description
Channel Width
20 MHz- the AP will use 20MHz for data transmission and
receiving between the AP and the stations.
Auto 20/40 MHz–the AP will scan for nearby wireless AP,
and then use 20MHz if the number of AP is more than 10, or
use 40MHz if it's not.
Auto 20/40/80 MHz– the AP will use 20MHz or 40MHz or
80MHz for data transmission and receiving according to the
station capability. Such channel can increase the performance
for data transmission.
Tx Power
The default setting is the maximum (100%). Lowering down
the value may degrade range and throughput of wireless.
Rate Adaptation
Algorithm
Wireless transmission rate is adapted dynamically. Usually,
performance of “new” algorithm is better than “old”.
Fragment Length
Set the Fragment threshold of wireless radio. Do not modify
default value if you don’t know what it is, default value is
2346.
RTS Threshold
Minimize the collision (unit is bytes) between hidden stations
to improve wireless performance.
Set the RTS threshold of wireless radio. Do not modify default
VigorAP 902 User’s Guide
201
value if you don’t know what it is, default value is 2347.
Country Code
VigorAP broadcasts country codes by following the 802.11d
standard. However, some wireless stations will detect / scan
the country code to prevent conflict occurred. If conflict is
detected, wireless station will be warned and is unable to make
network connection. Therefore, changing the country code to
ensure successful network connection will be necessary for
some clients.
Auto Channel
Filtered Out List
The selected wireless channels will be discarded if AutoSelect
is selected as Channel selection mode in Wireless
LAN>>General Setup.
IGMP Snooping
Check Enable to enable IGMP Snooping. Multicast traffic will
be forwarded to ports that have members of that group.
Disabling IGMP snooping will make multicast traffic treated in
the same manner as broadcast traffic.
Isolate 2.4GHz and
5GHz bands
The default setting is “Enable”. It means that the wireless
client using 2.4GHz band is unable to connect to the wireless
client with 5GHz band, and vice versa.
For WLAN 2.4GHz and 5GHz set with the same SSID name:
No matter such function is enabled or disabled, clients
using WLAN 2.4GHz and 5GHz can communicate for
each other if Isolate Member (in Wireless
LAN>>General Setup) is NOT enabled for such SSID.
Yet, if the function of Isolate Member (in Wireless
LAN>>General Setup) is enabled for such SSID, clients
using WLAN 2.4GHz and 5GHz will be unable to
communicate with each other.
Isolate members with
IP
The default setting is “Disable”.
If it is enabled, VigorAP will isolate different wireless clients
according to their IP address(es).
3
3
.
.
1
1
2
2
.
.
6
6
A
A
P
P
D
D
i
i
s
s
c
c
o
o
v
v
e
e
r
r
y
y
VigorAP 902 can scan all regulatory channels and find working APs in the neighborhood.
Based on the scanning result, users will know which channel is clean for usage. Also, it can
be used to facilitate finding an AP for a WDS link. Notice that during the scanning process
(about 5 seconds), no client is allowed to connect to Vigor.
This page is used to scan the existence of the APs on the wireless LAN. Yet, only the AP
which is in the same channel of VigorAP 902 can be found. Please click Scan to discover all
the connected APs.
VigorAP 902 User’s Guide
202
Each item is explained as follows:
Item Description
Enable AP Monitor
Mode
This function can help to get and keep the records of APs
detected by such device after clicking Scan.
In general, only the available AP will be detected by Vigor
device. Once the AP is unavailable, it will be deleted from the
Access Point List immediately. However, if such function is
enabled, the system will keep the record of the AP (once
detected by Vigor device) until it is available for Vigor device
again.
SSID
Display the SSID of the AP scanned by VigorAP 902.
BSSID
Display the MAC address of the AP scanned by VigorAP 902.
RSSI
Display the signal strength of the access point. RSSI is the
abbreviation of Received Signal Strength Indication.
Channel
Display the wireless channel used for the AP that is scanned by
VigorAP 902.
Encryption
Display the encryption mode for the scanned AP.
Authentication
Display the authentication type that the scanned AP applied.
Mode
Display the wireless connection mode that the scanned AP
used.
Ch. Width
Display the channel width that the scanned AP used.
Scan
It is used to discover all the connected AP. The results will be
shown on the box above this button
Channel Interference
Access into Diagnostics>>Interference Monitor for viewing
VigorAP 902 User’s Guide
203
interference status for channel(s).
AP’s MAC Address
If you want the found AP applying the WDS settings, please
type in the AP’s MAC address.
AP’s SSID
To specify an AP to be applied with WDS settings, you can
specify MAC address or SSID for the AP. Here is the place
that you can type the SSID of the AP.
Select as Universal
Repeater
In Universal Repeater mode, WAN would work as station
mode and the wireless AP can be selected as a universal
repeater. Choose one of the wireless APs from the Scan list.
VigorAP 902 User’s Guide
204
3
3
.
.
1
1
2
2
.
.
7
7
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
The access point can act as a wireless repeater; it can be Station and AP at the same time. It
can use Station function to connect to a Root AP and use AP function to serve all wireless
stations within its coverage.
Note: While using Universal Repeater mode, the access point will demodulate the
received signal. Please check if this signal is noise for the operating network, then have
the signal modulated and amplified again. The output power of this mode is the same as
that of WDS and normal AP mode.
Available settings are explained as follows:
Item Description
SSID
Set the name of access point that VigorAP 902 wants to
connect to.
MAC Address
(Optional)
Type the MAC address of access point that VigorAP 902 wants
to connect to.
Channel
Means the channel of frequency of the wireless LAN. The
default channel is 36. You may switch channel if the selected
channel is under serious interference. If you have no idea of
choosing the frequency, please select AutoSelect to let system
determine for you.
Security Mode
There are several modes provided for you to choose. Each
mode will bring up different parameters (e.g., WEP keys, Pass
Phrase) for you to configure.
VigorAP 902 User’s Guide
205
Encryption Type for
Open/Shared
This option is available when Open/Shared is selected as
Security Mode.
Choose None to disable the WEP Encryption. Data sent to the
AP will not be encrypted. To enable WEP encryption for data
transmission, please choose WEP.
WEP Keys - Four keys can be entered here, but only one key
can be selected at a time. The format of WEP Key is restricted
to 5 ASCII characters or 10 hexadecimal values in 64-bit
encryption level, or restricted to 13 ASCII characters or 26
hexadecimal values in 128-bit encryption level. The allowed
content is the ASCII characters from 33(!) to 126(~) except '#'
and ','.
Encryption Type for
WPA/PSK and
WPA2/PSK
This option is available when WPA/PSK or WPA2/PSK is
selected as Security Mode.
Select TKIP or AES as the algorithm for WPA.
Pass Phrase
Type 8~63 ASCII characters, such as 012345678 (or 64
Hexadecimal digits leading by 0x, such as
"0x321253abcde...").
Connection Type
Choose DHCP or Static IP as the connection mode.
DHCP – The wireless station will be assigned with an IP from.
Static IP – The wireless station shall specify a static IP for
connecting to Internet via VigorAP.
Router Name
This setting is available when DHCP is selected as
Connection Type.
Type a name for the VigorAP as identification. Simply use the
default name.
IP Address
This setting is available when Static IP is selected as
Connection Type.
Type an IP address with the same network segment of the LAN
IP setting of VigorAP. Such IP shall be different with any IP
address in LAN.
VigorAP 902 User’s Guide
206
Subnet Mask
This setting is available when Static IP is selected as
Connection Type.
Type the subnet mask setting which shall be the same as the
one configured in LAN for VigorAP.
Default Gateway
This setting is available when Static IP is selected as
Connection Type.
Type the gateway setting which shall be the same as the default
gateway configured in LAN for VigorAP.
After finishing this web page configuration, please click OK to save the settings.
3
3
.
.
1
1
2
2
.
.
8
8
W
W
M
M
M
M
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
WMM is an abbreviation of Wi-Fi Multimedia. It defines the priority levels for four access
categories derived from 802.1d (prioritization tabs). The categories are designed with
specific types of traffic, voice, video, best effort and low priority data. There are four
accessing categories - AC_BE , AC_BK, AC_VI and AC_VO for WMM.
Available settings are explained as follows:
Item Description
WMM Capable
To apply WMM parameters for wireless data transmission,
please click the Enable radio button.
APSD Capable
APSD (automatic power-save delivery) is an enhancement over
the power-save mechanisms supported by Wi-Fi networks. It
allows devices to take more time in sleeping state and consume
less power to improve the performance by minimizing
transmission latency.
The default setting is Disable.
Aifsn
It controls how long the client waits for each data transmission.
Please specify the value ranging from 1 to 15. Such parameter
will influence the time delay for WMM accessing categories.
For the service of voice or video image, please set small value
for AC_VI and AC_VO categories For the service of e-mail or
VigorAP 902 User’s Guide
207
web browsing, please set large value for AC_BE and AC_BK
categories.
CWMin/CWMax
CWMin means contention Window-Min and CWMax means
contention Window-Max. Please specify the value ranging from
1 to 15. Be aware that CWMax value must be greater than
CWMin or equals to CWMin value. Both values will influence
the time delay for WMM accessing categories. The difference
between AC_VI and AC_VO categories must be smaller;
however, the difference between AC_BE and AC_BK categories
must be greater.
Txop
It means transmission opportunity. For WMM categories of
AC_VI and AC_VO that need higher priorities in data
transmission, please set greater value for them to get highest
transmission opportunity. Specify the value ranging from 0 to
65535.
ACM
It is an abbreviation of Admission control Mandatory. It can
restrict stations from using specific category class if it is
checked.
Note: VigorAP 902 provides standard WMM configuration in
the web page. If you want to modify the parameters, please refer
to the Wi-Fi WMM standard specification.
AckPolicy
“Uncheck” (default value) the box means the AP will answer the
response request while transmitting WMM packets through
wireless connection. It can assure that the peer must receive the
WMM packets.
“Check” the box means the AP will not answer any response
request for the transmitting packets. It will have better
performance with lower reliability.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
208
3
3
.
.
1
1
2
2
.
.
9
9
B
B
a
a
n
n
d
d
w
w
i
i
d
d
t
t
h
h
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
The downstream or upstream from FTP, HTTP or some P2P applications will occupy large
of bandwidth and affect the applications for other programs. Please use Bandwidth
Management to make the bandwidth usage more efficient.
Available settings are explained as follows:
Item Description
SSID
Display the specific SSID name.
Enable
Check this box to enable the bandwidth management for clients.
Upload Limit
Define the maximum speed of the data uploading which will be
used for the wireless stations connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Download Limit
Define the maximum speed of the data downloading which will
be used for the wireless station connecting to VigorAP with the
same SSID.
Use the drop down list to choose the rate. If you choose User
defined, you have to specify the rate manually.
Auto Adjustment
Check this box to have the bandwidth limit determined by the
system automatically.
Total Upload Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data uploading.
Total Download
Limit
When Auto Adjustment is checked, the value defined here will
be treated as the total bandwidth shared by all of the wireless
stations with the same SSID for data downloading.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
209
3
3
.
.
1
1
2
2
.
.
1
1
0
0
A
A
i
i
r
r
t
t
i
i
m
m
e
e
F
F
a
a
i
i
r
r
n
n
e
e
s
s
s
s
Airtime fairness is essential in wireless networks that must support critical enterprise
applications.
Most of the applications are either symmetric or require more downlink than uplink capacity;
telephony and email send the same amount of data in each direction, while video streaming
and web surfing involve more traffic sent from access points to clients than the other way
around. This is essential for ensuring predictable performance and quality-of-service, as well
as allowing 802.11n and legacy clients to coexist on the same network. Without airtime
fairness, offices using mixed mode networks risk having legacy clients slow down the entire
network or letting the fastest client(s) crowd out other users.
With airtime fairness, every client at a given quality-of-service level has equal access to the
network's airtime.
The wireless channel can be accessed by only one wireless station at the same time.
The principle behind the IEEE802.11 channel access mechanisms is that each station has
equal probability to access the channel. When wireless stations have similar data rate, this
principle leads to a fair result. In this case, stations get similar channel access time which is
called airtime.
However, when stations have various data rate (e.g., 11g, 11n), the result is not fair. The
slow stations (11g) work in their slow data rate and occupy too much airtime, whereas the
fast stations (11n) become much slower.
Take the following figure as an example, both Station A(11g) and Station B(11n) transmit
data packets through VigorAP 902. Although they have equal probability to access the
wireless channel, Station B(11n) gets only a little airtime and waits too much because Station
A(11g) spends longer time to send one packet. In other words, Station B(fast rate) is
obstructed by Station A(slow rate).
To improve this problem, Airtime Fairness is added for VigorAP 902. Airtime Fairness
function tries to assign similar airtime to each station (A/B) by controlling TX traffic. In the
following figure, Station B(11n) has higher probability to send data packets than Station
A(11g). By this way, Station B(fast rate) gets fair airtime and it's speed is not limited by
Station A(slow rate).
VigorAP 902 User’s Guide
210
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station
depends on instant active station number and airtime assignment. Please note that Airtime
Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function
together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS,
this function can reduce the bad influence of slow wireless devices and improve the overall
wireless performance.
Suitable environment:
(1) Many wireless stations.
(2) All stations mainly use download traffic.
(3) The performance bottleneck is wireless connection.
Available settings are explained as follows:
Item Description
Enable Airtime
Fairness
Try to assign similar airtime to each wireless station by
controlling TX traffic.
Airtime Fairness – Click the link to display the following
screen of airtime fairness note.
Triggering Client Number –Airtime Fairness function is
applied only when active station number achieves this number.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
211
3
3
.
.
1
1
2
2
.
.
1
1
1
1
S
S
t
t
a
a
t
t
i
i
o
o
n
n
C
C
o
o
n
n
t
t
r
r
o
o
l
l
Station Control is used to specify the duration for the wireless client to connect and
reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP
until it shuts down.
Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers
free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set
as “1 hour” and reconnection time can be set as “1 day”. Thus, the guest can finish his job
within one hour and will not occupy the wireless network for a long time.
Note: Up to 300 Wireless Station records are supported by VigorAP.
Available settings are explained as follows:
Item Description
SSID
Display the SSID that the wireless station will use it to
connect with Vigor router.
Enable
Check the box to enable the station control function.
Connection Time /
Reconnection Time
Use the drop down list to choose the duration for the
wireless client connecting /reconnecting to Vigor router. Or,
type the duration manually when you choose User defined.
Display All Station
Control List
All the wireless stations connecting to Vigor router by using
such SSID will be listed on Station Control List.
After finishing all the settings here, please click OK to save the configuration.
VigorAP 902 User’s Guide
212
3
3
.
.
1
1
2
2
.
.
1
1
2
2
R
R
o
o
a
a
m
m
i
i
n
n
g
g
The network signal for a single wireless access point might be limited by its coverage range.
Therefore, if you want to expand the wireless network in a large exhibition with a quick
method, you can install multiple access points with enabling the Roaming feature for each
AP to reach the purpose of expanding wireless signals seamlessly.
These access points connecting for each other shall be verified by pre-authentication. This
page allows you to enable the roaming feature and the pre-authentication.
Available settings are explained as follows:
Item Description
AP-assisted Client
Roaming Parameters
When the link rate of wireless station is too low or the signal
received by the wireless station is too worse, VigorAP 902 will
automatically detect (based on the link rate and RSSI
requirement) and cut off the network connection for that wireless
station to assist it to connect another Wireless AP to get better
signal.
Minimum Basic Rate – Check the box to use the drop down list
to specify a basic rate (Mbps). When the link rate of the wireless
station is below such value, VigorAP 902 will terminate the
network connection for that wireless station.
Disable RSSI Requirement - If it is selected, VigorAP will not
terminate the network connection based on RSSI.
Strictly Minimum RSSI - VigorAP uses RSSI (received signal
strength indicator) to decide to terminate the network connection
of wireless station. When the signal strength is below the value
(dBm) set here, VigorAP 902 will terminate the network
connection for that wireless station.
Minimum RSSI - When the signal strength of the wireless
station is below the value (dBm) set here and adjacent AP (must
be DrayTek AP and support such feature too) with higher signal
strength value (defined in the field of With Adjacent AP RSSI
over) is detected by VigorAP 902, VigorAP 902 will terminate
the network connection for that wireless station. Later, the
wireless station can connect to the adjacent AP (with better
VigorAP 902 User’s Guide
213
RSSI).
With Adjacent AP RSSI over – Specify a value as a
threshold.
Fast Roaming
(WPA2/802.1x)
Enable – Check the box to enable fast roaming configuration.
PMK Cache Period - Set the expire time of WPA2 PMK
(Pairwise master key) cache. PMK Cache manages the list from
the BSSIDs in the associated SSID with which it has
pre-authenticated. Such feature is available for WPA2/802.1
mode.
Pre-Authentication - Enables a station to authenticate to
multiple APs for roaming securer and faster. With the
pre-authentication procedure defined in IEEE 802.11i
specification, the pre-four-way-handshake can reduce handoff
delay perceivable by a mobile node. It makes roaming faster and
more secure. (Only valid in WPA2)
Enable - Enable IEEE 802.1X Pre-Authentication.
Disable - Disable IEEE 802.1X Pre-Authentication.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
214
3
3
.
.
1
1
2
2
.
.
1
1
3
3
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
s
s
t
t
Station List provides the knowledge of connecting wireless clients now along with its status
code. Each tab (general, advanced, control, neighbor) will display different status
information (including MAC address, Vendor, SSID, Auth, Encrypt, Tx/Rx Rate, Hostname,
RSSI, Link Speed, BW, PSM, WMM, PHMd, MCS, Connection Time, Reconnection Time,
Approx. Distance, Visit Time, and so on).
General
Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the
station.
Available settings are explained as follows:
Item Description
MAC Address
Display the MAC Address for the connecting client.
Hostname
Display the host name of the connecting client.
SSID
Display the SSID that the wireless client connects to.
Auth
Display the authentication that the wireless client uses for
connection with such AP.
Encrypt
Display the encryption mode used by the wireless client.
Tx Rate/Rx Rate
Display the transmission /receiving rate for packets.
Refresh
Click this button to refresh the status of station list.
Add to Access
Control
Client’s MAC Address - For additional security of wireless
access, the Access Control facility allows you to restrict the
network access right by controlling the wireless LAN MAC
address of client. Only the valid MAC address that has been
configured can access the wireless LAN interface.
Add
Click this button to add current typed MAC address into
Access Control.
VigorAP 902 User’s Guide
215
Advanced
Display more information (e.g., AID, PSM, WMM, RSSI PhMd, BW, MCS, Rate) for the
station.
Control
Display connection and reconnection time of the wireless stations.
Neighbor
Display more information for the neighboring wireless stations.
VigorAP 902 User’s Guide
216
3
3
.
.
1
1
3
3
R
R
A
A
D
D
I
I
U
U
S
S
S
S
e
e
t
t
t
t
i
i
n
n
g
g
3
3
.
.
1
1
3
3
.
.
1
1
R
R
A
A
D
D
I
I
U
U
S
S
S
S
e
e
r
r
v
v
e
e
r
r
VigorAP 902 offers a built-in RADIUS server to authenticate the wireless client that tries to
connect to VigorAP 902. The AP can accept the wireless connection authentication
requested by wireless clients.
Available settings are explained as follows:
Item Description
Enable RADIUS
Server
Check it to enable the internal RADIUS server.
Authentication Type
Let the user to choose the authentication method for RADIUS
server.
Radius EAP Type – There are two types, PEAP and EAP TLS,
offered for selection. If EAP TLS is selected, a certificate must
be installed or must be ensured to be trusted.
Users Profile
Username – Type a new name for the user profile.
Password – Type a new password for such new user profile.
VigorAP 902 User’s Guide
217
Confirm Password – Retype the password to confirm it.
Configure
Add – Make a new user profile with the name and
password specified on the left boxes.
Cancel – Clear current settings for user profile.
Delete Selected – Delete the selected user profile (s).
Delete All – Delete all of the user profiles.
Authentication Client
This internal RADIUS server of VigorAP 902 can be treated as
the external RADIUS server for other users. Specify the client IP
and secret key to make the wireless client choosing VigorAP
902 as its external RADUIS server.
Client IP – Type the IP address for the user to be authenticated
by VigorAP 902 when the user tries to use VigorAP 902 as the
external RADIUS server.
Secret Key – Type the password for the user to be authenticated
by VigorAP 902 while the user tries to use VigorAP 902 as the
external RADIUS server.
Confirm Secrete Key – Type the password again for
confirmation.
Configure
Add – Make a new client with IP and secrete key
specified on the left boxes.
Cancel – Clear current settings for the client.
Delete Selected – Delete the selected client(s).
Delete All – Delete all of the clients.
Backup
Click it to store the settings (RADIUS configuration) on this
page as a file.
Restore
Click it to restore the settings (RADIUS configuration) from an
existed file.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
218
3
3
.
.
1
1
3
3
.
.
2
2
C
C
e
e
r
r
t
t
i
i
f
f
i
i
c
c
a
a
t
t
e
e
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
When the local client and remote server are required to make certificate authentication (e.g.,
Radius EAP-TLS authentication) for wireless connection and avoiding the attack of MITM,
a trusted root certificate authority (Root CA) will be used to authenticate the digital
certificates offered by both ends.
However, the procedure of applying digital certificate from a trusted root certificate authority
is complicated and time-consuming. Therefore, Vigor AP offers a mechanism which allows
you to generate root CA to save time and provide convenience for general user. Later, such
root CA generated by DrayTek server can perform the issuing of local certificate.
Root CA can be deleted but not edited. If you want to modify the settings for a Root CA,
please delete the one and create another one by clicking Create Root CA.
Click Create Root CA to open the following page. Type or choose all the information that
the window request such as subject name, key type, key size and so on.
Available settings are explained as follows:
Item Description
Subject Name
Type the required information for creating a root CA.
Country (C) – Type the country code (two characters) in this
box.
State (S)/ Location (L)/ Organization (O)/ Organization Unit
(OU) /Common Name (CN) - Type the name or information for
the root CA with length less than 32 characters.
Email (E) – Type the email address for the root CA with length
VigorAP 902 User’s Guide
219
less than 32 characters.
Key Type
At present, only RSA (an encryption algorithm) is supported by
such device.
Key Size
To determine the size of a key to be authenticated, use the drop
down list to specify the one you need.
Apply to Web
HTTPS
VigorAP needs a certificate to access into Internet via Web
HTTPS.
Check this box to use the user-defined root CA certificate which
will substitute for the original certificate applied by web HTTPS.
Note: “Common Name” must be configured with rotuer’s WAN IP or domain name.
After finishing this web page configuration, please click OK to save the settings. A new root
CA will be generated.
VigorAP 902 User’s Guide
220
3
3
.
.
1
1
4
4
A
A
p
p
p
p
l
l
i
i
c
c
a
a
t
t
i
i
o
o
n
n
s
s
Below shows the menu items for Applications.
3
3
.
.
1
1
4
4
.
.
1
1
S
S
c
c
h
h
e
e
d
d
u
u
l
l
e
e
The VigorAP has a built-in clock which can update itself manually or automatically by
means of Network Time Protocols (NTP). As a result, you can not only schedule the AP to
dialup to the Internet at a specified time, but also restrict Internet access to certain hours so
that users can connect to the Internet only during certain hours, say, business hours. The
schedule is also applicable to other functions.
You have to set your time before set schedule. In System Maintenance>> Time and Date
menu, press Inquire Time button to set the VigorAP’s clock to current time of your PC. The
clock will reset once if you power down or reset the AP. There is another way to set up time.
You can inquiry an NTP server (a time server) on the Internet to synchronize the AP’s clock.
This method can only be applied when the WAN connection has been built up.
Available settings are explained as follows:
Item Description
Schedule
Enable Schedule - Check it to enable the function of schedule
configuration.
Schedule
Configuration
Index – Display the sort number of the schedule profile.
Setting – Display the summary of the schedule profile.
Action – Display the action adopted by the schedule profile.
Status – Display if the profile is enabled (V) or not (X).
Add – Such button is available when Enable Schedule is
checked. It allows to add a new schedule profile.
Delete – Check the index box of the schedule profile and click
such button to remove the profile.
You can set up to 15 schedules. To add a schedule:
1. Check the box of Enable Schedule.
VigorAP 902 User’s Guide
221
2. Click the Add button to open the following web page.
Available settings are explained as follows:
Item Description
Enable
Check to enable such schedule profile.
Start Date
Specify the starting date of the schedule.
Start Time
Specify the starting time of the schedule.
Duration Time
Specify the duration (or period) for the schedule.
End Time
Specify the ending time of the schedule.
Action
Specify which action should apply the schedule.
WiFi(2.4GHz)/
WiFi(5GHz)
When Wi-Fi UP or Wi-Fi DOWN is selected as Action, you
can check the Radio or SSID 2~4 boxes (2.4GHz and 5GHz
respectively) to setup the network based on the schedule
profile.
Note: When Radio is selected, SSID2, SSID3 and SSID4 are
not available for choosing, vice versa.
Acts
Specify how often the schedule will be applied.
Once -The schedule will be applied just once
Routine -Specify which days in one week should perform the
schedule.
Weekday
Choose and check the day to perform the schedule. It is
available when Routine is selected as Acts.
VigorAP 902 User’s Guide
222
3. After finishing this web page configuration, please click OK to save the settings. A
new schedule profile has been created and displayed on the screen.
3
3
.
.
1
1
4
4
.
.
2
2
A
A
p
p
p
p
l
l
e
e
i
i
O
O
S
S
K
K
e
e
e
e
p
p
A
A
l
l
i
i
v
v
e
e
To keep the wireless connection (via Wi-Fi) on iOS device in alive, VigorAP 902 will send
the UDP packets with 5353 port to the specific IP every five seconds.
Available settings are explained as follows:
Item Description
Enable Apple iOS Keep
Alive
Check to enable the function.
Index
Display the setting link. Click the index link to open the
configuration page for setting the IP address.
Apple iOS Keep Alive IP
Address
Display the IP address.
VigorAP 902 User’s Guide
223
3
3
.
.
1
1
4
4
.
.
3
3
W
W
i
i
-
-
F
F
i
i
A
A
u
u
t
t
o
o
O
O
n
n
/
/
O
O
f
f
f
f
When VigorAP is able or unable to ping the specified host, the Wi-Fi function will be turned
on or off automatically. The purpose of such function is to avoid wireless station roaming to
an AP which is unable to access Internet.
Available settings are explained as follows:
Item Description
Enable Auto Switch
On/Off Wi-Fi
Check the box to enable such function.
Ping Host
Type an IP address (e.g., 8.8.8.8) or a domain name (e.g.,
google.com) for testing if the access point is stable or not.
3
3
.
.
1
1
4
4
.
.
4
4
T
T
e
e
m
m
p
p
e
e
r
r
a
a
t
t
u
u
r
r
e
e
S
S
e
e
n
n
s
s
o
o
r
r
A USB Thermometer is now available that complements your installed DrayTek AP
installations that will help you monitor the server or data communications room environment
and notify you if the server room or data communications room is overheating.
During summer in particular, it is important to ensure that your server or data
communications equipment are not overheating due to cooling system failures.
The inclusion of a USB thermometer in compatible VigorAP will continuously monitor the
temperature of its environment. When a pre-determined threshold is reached you will be
alerted via Syslog.
VigorAP 902 User’s Guide
224
T
T
e
e
m
m
p
p
e
e
r
r
a
a
t
t
u
u
r
r
e
e
S
S
e
e
n
n
s
s
o
o
r
r
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
Available settings are explained as follows:
Item Description
Display Settings
Temperature Calibration Offset- Type a value used for
correcting the temperature error.
Temperature Unit - Choose the display unit of the
temperature. There are two types for you to choose.
Alarm Settings
Enable Syslog Alarm - The temperature log containing
the alarm message will be recorded on Syslog if it is
enabled.
Mail Alert - The temperature log containing the alarm
message will be sent by mail.
Temperature High Alarm/ Temperature Low Alarm -
Type the upper limit and lower limit for the system to
send out temperature alert.
VigorAP 902 User’s Guide
225
T
T
e
e
m
m
p
p
e
e
r
r
a
a
t
t
u
u
r
r
e
e
S
S
e
e
n
n
s
s
o
o
r
r
G
G
r
r
a
a
p
p
h
h
Below shows an example of temperature graph:
VigorAP 902 User’s Guide
226
3
3
.
.
1
1
5
5
M
M
o
o
b
b
i
i
l
l
e
e
D
D
e
e
v
v
i
i
c
c
e
e
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
Such feature can control / manage the mobile devices accessing the wireless network of
VigorAP. VigorAP offers wireless LAN service for mobile device(s), PC users, MAC users
or other users according to the policy selected.
Below shows the menu items for Mobile Device Management.
3
3
.
.
1
1
5
5
.
.
1
1
D
D
e
e
t
t
e
e
c
c
t
t
i
i
o
o
n
n
Such page displays mobile device(s) detected by VigorAP Detected device(s) with Policy –
Pass can access into the wireless LAN offered by VigorAP. Detected device(s) with Policy –
Block are not allowed to access into Internet via VigorAP’s WLAN.
Once you check/uncheck the box of Enable Mobile Device Management and click OK,
VigorAP will reboot automatically to activate MDM.
At present, OS (for mobile device) categories supported by VigorAP include:
Windows
Linux
iOS
Andorid
WindowsPhone
BlackBerry
Symbian.
VigorAP 902 User’s Guide
227
3
3
.
.
1
1
5
5
.
.
2
2
P
P
o
o
l
l
i
i
c
c
i
i
e
e
s
s
Such page determines which devices (mobile, PC, MAC or others) allowed to make network
connections via VigorAP or blocked by VigorAP.
Each item is explained as follows:
Item Description
Block Mobile
Connections
All of mobile devices will be blocked and not allowed to access
into Internet via VigorAP.
Block PC
Connections
All of network connections based on PC, MAC or Linux
platform will be blocked and terminated.
Block Unknown
Connections
Only the unknown network connections (unable to be
recognized by Vigor router) will be blocked and terminated.
WiFi(2.4GHz)
Specify the SSID(s) to apply such policy.
WiFi(5GHz)
Specify the SSID(s) to apply such policy.
After finished the policy selection, click OK. VigorAP will reboot to activate the new policy
automatically.
VigorAP 902 User’s Guide
228
3
3
.
.
1
1
5
5
.
.
3
3
S
S
t
t
a
a
t
t
i
i
s
s
t
t
i
i
c
c
s
s
The number of detected devices and the number of device(s) passed/blocked according to the
policy specified in Mobile Device Management>>Policy can be illustrated as doughnut
chart.
3
3
.
.
1
1
6
6
S
S
y
y
s
s
t
t
e
e
m
m
M
M
a
a
i
i
n
n
t
t
e
e
n
n
a
a
n
n
c
c
e
e
For the system setup, there are several items that you have to know the way of configuration:
Status, TR-069, Administrator Password, Configuration Backup, Syslog/Mail Alert, Time
and Date, SNMP, Management, Reboot System, and Firmware Upgrade.
Below shows the menu items for System Maintenance.
VigorAP 902 User’s Guide
229
3
3
.
.
1
1
6
6
.
.
1
1
S
S
y
y
s
s
t
t
e
e
m
m
S
S
t
t
a
a
t
t
u
u
s
s
The System Status provides basic network settings of Vigor modem. It includes LAN and
WAN interface information. Also, you could get the current running firmware version or
firmware related information from this presentation.
Each item is explained as follows:
Item Description
Model /Device Name
Display the model name of the modem.
Firmware Version
Display the firmware version of the modem.
Build Date/Time
Display the date and time of the current firmware build.
System Uptime
Display the period that such device connects to Internet.
Operation Mode
Display the operation mode that the device used.
System
Memory total
Display the total memory of your system.
Memory left
Display the remaining memory of your system.
LAN-A/LAN-B
MAC Address
Display the MAC address of the LAN Interface.
IP Address
Display the IP address of the LAN interface.
IP Mask
Display the subnet mask address of the LAN interface.
Wireless LAN (2.4GHz/5GHz)
MAC Address
Display the MAC address of the WAN Interface.
SSID
Display the SSID of the device.
VigorAP 902 User’s Guide
230
Channel
Display the channel that the station used for connecting with
such device.
3
3
.
.
1
1
6
6
.
.
2
2
T
T
R
R
-
-
0
0
6
6
9
9
This device supports TR-069 standard. It is very convenient for an administrator to manage a
TR-069 device (Vigor router, AP and etc.) through VigorACS (
Auto Configuration
Server).
Available settings are explained as follows:
Item Description
ACS Settings
URL/Username/Password – Such data must be typed according
to the ACS (Auto Configuration Server) you want to link. Please
refer to Auto Configuration Server user’s manual for detailed
information.
Wizard – Click it to enter the IP address of VigorACS server,
port number and the handler.
Test With Inform – Click it to send a message based on the
event code selection to test if such CPE is able to communicate
VigorAP 902 User’s Guide
231
with VigorACS SI server.
Event Code – Use the drop down menu to specify an event to
perform the test.
Last Inform Response Time – Display the time that VigorACS
server made a response while receiving Inform message from
CPE last time.
CPE Settings
Such information is useful for Auto Configuration Server (ACS).
Enable– Check the box to allow the CPE Client to connect with
Auto Configuration Server.
SSL(HTTPS) Mode - Check the box to allow the CPE client to
connect with ACS through SSL.
On – Choose the interface (LAN-A or LAN-B) for VigorAP 902
connecting to ACS server.
Port – Sometimes, port conflict might be occurred. To solve
such problem, you might change port number for CPE.
Username/Password – Type the username and password that
VigorACS can use to access into such CPE.
DNS Server IP Address – Such field is to specify the IP
address if a URL is configured with a domain name.
Primary IP Address –You must specify a DNS server IP
address here because your ISP should provide you with
usually more than one DNS Server. If your ISP does not
provide it, the modem will automatically apply default
DNS Server IP address: 194.109.6.66 to this field.
Secondary IP Address –You can specify secondary DNS
server IP address here because your ISP often provides you
more than one DNS Server. If your ISP does not provide it,
the modem will automatically apply default secondary
DNS Server IP address: 194.98.0.1 to this field.
Periodic Inform
Settings
The default setting is Enable. Please set interval time or
schedule time for the AP to send notification to VigorACS
server. Or click Disable to close the mechanism of notification.
Interval Time – Type the value for the interval time setting. The
unit is “second”.
STUN Settings
The default is Disable. If you click Enable, please type the
relational settings listed below:
Server Address – Type the IP address of the STUN server.
Server Port – Type the port number of the STUN server.
Minimum Keep Alive Period – If STUN is enabled, the CPE
must send binding request to the server for the purpose of
maintaining the binding in the Gateway. Please type a number as
the minimum period. The default setting is “60 seconds”.
Maximum Keep Alive Period – If STUN is enabled, the CPE
must send binding request to the server for the purpose of
maintaining the binding in the Gateway. Please type a number as
the maximum period. A value of “-1” indicates that no
VigorAP 902 User’s Guide
232
maximum period is specified.
After finishing this web page configuration, please click OK to save the settings.
VigorAP 902 User’s Guide
233
3
3
.
.
1
1
6
6
.
.
3
3
A
A
d
d
m
m
i
i
n
n
i
i
s
s
t
t
r
r
a
a
t
t
o
o
r
r
P
P
a
a
s
s
s
s
w
w
o
o
r
r
d
d
This page allows you to set new password for accessing into web user interface of VigorAP.
Available settings are explained as follows:
Item Description
Account
Type the name for accessing into Web User Interface.
Password
Type in new password in this filed.
Confirm Password
Type the new password again for confirmation.
Password Strength
The system will display the password strength (represented with
the word of weak, medium or strong) of the password specified
above.
When you click OK, the login window will appear. Please use the new password to access
into the web user interface again.
VigorAP 902 User’s Guide
234
3
3
.
.
1
1
6
6
.
.
4
4
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
B
B
a
a
c
c
k
k
u
u
p
p
B
B
a
a
c
c
k
k
u
u
p
p
t
t
h
h
e
e
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
Follow the steps below to backup your configuration.
1. Go to System Maintenance >> Configuration Backup. The following windows will
be popped-up, as shown below.
2. Click Backup button to get into the following dialog. Click Save button to open
another dialog for saving configuration as a file.
3. In Save As dialog, the default filename is config.cfg. You could give it another name
by yourself.
VigorAP 902 User’s Guide
235
4. Click Save button, the configuration will download automatically to your computer as a
file named config.cfg.
The above example is using Windows platform for demonstrating examples. The Mac or
Linux platform will appear different windows, but the backup function is still available.
Note: Backup for Certification must be done independently. The Configuration Backup
does not include information of Certificate.
R
R
e
e
s
s
t
t
o
o
r
r
e
e
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
a
a
t
t
i
i
o
o
n
n
1. Go to System Maintenance >> Configuration Backup. The following windows will
be popped-up, as shown below.
2. Click Browse button to choose the correct configuration file for uploading to the
VigorAP 902 User’s Guide
236
modem.
3. Click Restore button and wait for few seconds, the following picture will tell you that
the restoration procedure is successful.
3
3
.
.
1
1
6
6
.
.
5
5
S
S
y
y
s
s
l
l
o
o
g
g
/
/
M
M
a
a
i
i
l
l
A
A
l
l
e
e
r
r
t
t
SysLog function is provided for users to monitor AP. There is no bother to directly get into
the Web user interface of the AP or borrow debug equipments.
Available settings are explained as follows:
Item Description
Syslog Access Setup
Enable - Check Enable to activate function of Syslog.
Server IP Address -The IP address of the Syslog server.
Destination Port -Assign a port for the Syslog protocol. The
default setting is 514.
Log Level - Specify which level of the severity of the event will
be recorded by Syslog.
Mail Alert Setup
Check Enable to activate function of mail alert.
SMTP Server - The IP address of the SMTP server.
Mail To - Assign a mail address for sending mails out.
Mail From - Assign a path for receiving the mail from outside.
User Name - Type the user name for authentication.
Password - Type the password for authentication.
Use TLS – Check this box to encrypt alert mail. However, if the
SMTP server specified here does not support TLS protocol, the
alert mail with encrypted data will not be received by the
receiver.
Enable E-Mail Alert - VigorAP will send an e-mail out when a
user accesses into the user interface by using web or telnet.
VigorAP 902 User’s Guide
237
3
3
.
.
1
1
6
6
.
.
6
6
T
T
i
i
m
m
e
e
a
a
n
n
d
d
D
D
a
a
t
t
e
e
It allows you to specify where the time of VigorAP should be inquired from.
Available parameters are explained as follows:
Item Description
Current System Time
Click Inquire Time to get the current time.
Use Browser Time
Select this option to use the browser time from the remote
administrator PC host as router’s system time.
Use NTP Client
Select to inquire time information from Time Server on the
Internet using assigned protocol.
Time Zone
Select a time protocol.
NTP Server
Type the IP address of the time server.
Use Default – Click it to choose the default NTP server.
Daylight Saving
Check the box to enable the daylight saving. Such feature is
available for certain area.
NTP synchronization
Select a time interval for updating from the NTP server.
Click OK to save these settings.
VigorAP 902 User’s Guide
238
3
3
.
.
1
1
6
6
.
.
7
7
S
S
N
N
M
M
P
P
This page allows you to configure settings for SNMP and SNMPV3 services.
The SNMPv3 is more secure than SNMP through the authentication method (support e.g.,
MD5) for the management needs.
Available settings are explained as follows:
Item Description
Enable SNMP Agent
Check it to enable this function.
Enable SNMPV3 Agent
Check it to enable this function.
USM User
USM means user-based security mode.
Type a username which will be used for authentication. The
maximum length of the text is limited to 23 characters.
Auth Algorithm
Choose one of the encryption methods listed below as the
authentication algorithm.
Auth Password
Type a password for authentication. The maximum length
of the text is limited to 23 characters.
Click OK to save these settings.
VigorAP 902 User’s Guide
239
3
3
.
.
1
1
6
6
.
.
8
8
M
M
a
a
n
n
a
a
g
g
e
e
m
m
e
e
n
n
t
t
This page allows you to specify the port number for HTTP and HTTPS server.
Available parameters are explained as follows:
Item Description
Device Name
Name - The default setting is VigorAP 902. Change the
name if required.
Management Port Setup
HTTP port/HTTPS port -Specify user-defined port
numbers for the HTTP and HTTPS servers.
Wi-Fi Hardware Button
Setup
Stop people manually disabling the wireless if they do not
have the right of administration to access to the device.
Enable – Choose it to enable the hardware button function.
Disable – Choose it to disable the hardware button function.
Telnet Server
Enable – The administrator / user can access into the
command line interface of VigorAP remotely for configuring
settings.
Disable – The administrator / user is unable to access into the
command line interface of VigorAP remotely for configuring
settings.
LED Setup
The color of LED (on or flashing) can be switched on or off
to meet your favor.
Enable – The LED will flash to indicate VigorAP is ready
and able to work normally.
Disable –The LEDs blink always since VigorAP is powered
on. Some people might not like that. Therefore the function
of LED is allowed to be disabled to make people feeling
VigorAP 902 User’s Guide
240
comfortable and undisturbed. When Disable is chosen, all the
LEDs on VigorAP will light off immediately after clicking
OK.
VigorAP 902 User’s Guide
241
3
3
.
.
1
1
6
6
.
.
9
9
R
R
e
e
b
b
o
o
o
o
t
t
S
S
y
y
s
s
t
t
e
e
m
m
The web user interface may be used to restart your modem. Click Reboot System from
System Maintenance to open the following page.
If you want to reboot the modem using the current configuration, check Using current
configuration and click OK. To reset the modem settings to default values, check Using
factory default configuration and click OK. The modem will take 5 seconds to reboot the
system.
Note: When the system pops up Reboot System web page after you configure web settings,
please click OK to reboot your modem for ensuring normal operation and preventing
unexpected errors of the modem in the future.
3
3
.
.
1
1
6
6
.
.
1
1
0
0
F
F
i
i
r
r
m
m
w
w
a
a
r
r
e
e
U
U
p
p
g
g
r
r
a
a
d
d
e
e
Before upgrading your modem firmware, you need to install the Modem Tools. The
Firmware Upgrade Utility is included in the tools. The following web page will guide you
to upgrade firmware by using an example. Note that this example is running over Windows
OS (Operating System).
Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site
is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
Click System Maintenance>> Firmware Upgrade to launch the Firmware Upgrade Utility.
Click Browse to locate the newest firmware from your hard disk and click Upgrade.
VigorAP 902 User’s Guide
242
3
3
.
.
1
1
7
7
D
D
i
i
a
a
g
g
n
n
o
o
s
s
t
t
i
i
c
c
s
s
Diagnostic Tools provide a useful way to view or diagnose the status of your VigorAP 902.
3
3
.
.
1
1
7
7
.
.
1
1
S
S
y
y
s
s
t
t
e
e
m
m
L
L
o
o
g
g
At present, only System Log is offered.
3
3
.
.
1
1
7
7
.
.
2
2
S
S
p
p
e
e
e
e
d
d
T
T
e
e
s
s
t
t
Click the Start button on the page to test the speed. Such feature can help you to find the
best installation place for Vigor AP.
VigorAP 902 User’s Guide
243
3
3
.
.
1
1
7
7
.
.
3
3
T
T
r
r
a
a
f
f
f
f
i
i
c
c
G
G
r
r
a
a
p
p
h
h
Click Traffic Graph to open the web page. Choose one of the managed Access Points,
LAN-A or LAN-B, daily or weekly for viewing data transmission chart. Click Refresh to
renew the graph at any time.
The horizontal axis represents time; the vertical axis represents the transmission rate (in
kbps).
3
3
.
.
1
1
7
7
.
.
4
4
D
D
a
a
t
t
a
a
F
F
l
l
o
o
w
w
M
M
o
o
n
n
i
i
t
t
o
o
r
r
This page displays general information for the client connecting to VigorAP 902..
Available parameters are explained as follows:
Item Description
Auto-refresh
After checking this box, Vigor system will refresh such page
periodically.
Refresh
Click this link to refresh this page immediately.
Index
Display the number of the data flow.
MAC Address
Display the MAC address of the monitored device.
VigorAP 902 User’s Guide
244
Station
Display the IP address/host name of the wireless client.
TX rate (kbps)
Display the transmission speed of the monitored device.
RX rate (kbps)
Display the receiving speed of the monitored device.
2.4G/5G
Display what wireless band (2.4G or 5G) used by the
wireless client.
Action
DeAuth – Deauthenticate a wireless station.
3
3
.
.
1
1
7
7
.
.
5
5
W
W
L
L
A
A
N
N
(
(
2
2
.
.
4
4
G
G
H
H
z
z
)
)
S
S
t
t
a
a
t
t
i
i
s
s
t
t
i
i
c
c
s
s
Such page is used for debug by RD only.
VigorAP 902 User’s Guide
245
3
3
.
.
1
1
7
7
.
.
6
6
W
W
L
L
A
A
N
N
(
(
5
5
G
G
H
H
z
z
)
)
S
S
t
t
a
a
t
t
i
i
s
s
t
t
i
i
c
c
s
s
Such page is used for debug by RD only.
VigorAP 902 User’s Guide
246
3
3
.
.
1
1
7
7
.
.
7
7
S
S
t
t
a
a
t
t
i
i
o
o
n
n
S
S
t
t
a
a
t
t
i
i
s
s
t
t
i
i
c
c
s
s
Such page is used for debug or for the user to observe network traffic and network quality.
Available parameters are explained as follows:
Item Description
Show Chart
Choose one of the items to display the statistics chart for
wireless stations.
Nearby & Connected Number – Choose it to have the
statistics of the wireless stations which is nearby and
VigorAP 902 User’s Guide
247
connected to VigorAP 902.
Visiting & Passing Number – Choose it to have the
statistics of the wireless stations which is visiting and passing
to VigorAP 902.
Visiting Time - Choose it to have the statistics of the
wireless stations which is visiting VigorAP 902.
Daily Connected
Number Analysis /
Daily Visiting Number
Analysis
Click this button to get analysis pie chart for daily connected
wireless stations / daily visiting wireless station.
Weekly Connected
Number Analysis /
Weekly Visiting Number
Analysis
Click this button to get analysis pie chart for weekly
connected wireless stations / weekly visiting wireless station.
VigorAP 902 User’s Guide
248
3
3
.
.
1
1
7
7
.
.
8
8
I
I
n
n
t
t
e
e
r
r
f
f
e
e
r
r
e
e
n
n
c
c
e
e
M
M
o
o
n
n
i
i
t
t
o
o
r
r
As an interference detector, VigorAP can detect all of the environmental interference factors
for certain channel used or for all of the wireless channels.
C
C
u
u
r
r
r
r
e
e
n
n
t
t
C
C
h
h
a
a
n
n
n
n
e
e
l
l
The analysis page with information about wireless band, channel, transmission power,
bandwidth, wireless mode, and country code chosen will be displayed on this page
completely based on the wireless band (2.4G or 5G) selected. Also, channel status can be
seen easily from this page.
VigorAP 902 User’s Guide
249
A
A
l
l
l
l
C
C
h
h
a
a
n
n
n
n
e
e
l
l
s
s
This page displays the utilization and energy result for all channels based on 2.4G/5G. Click
Refresh to get the newly update interference situation.
3
3
.
.
1
1
7
7
.
.
9
9
S
S
t
t
a
a
t
t
i
i
o
o
n
n
A
A
i
i
r
r
t
t
i
i
m
m
e
e
This page displays the operation status for 2.4GHz/5GHz wireless stations within 30
minutes.
VigorAP 902 User’s Guide
250
3
3
.
.
1
1
7
7
.
.
1
1
0
0
S
S
t
t
a
a
t
t
i
i
o
o
n
n
T
T
r
r
a
a
f
f
f
f
i
i
c
c
G
G
r
r
a
a
p
p
h
h
This page displays the data traffic (receiving/transmitting) status for 2.4GHz/5GHz wireless
stations within 30 minutes with a run chart.
VigorAP 902 User’s Guide
251
3
3
.
.
1
1
7
7
.
.
1
1
1
1
S
S
t
t
a
a
t
t
i
i
o
o
n
n
L
L
i
i
n
n
k
k
S
S
p
p
e
e
e
e
d
d
This page displays the link rate status for 2.4GHz/5GHz wireless stations within one hour
with a run chart.
3
3
.
.
1
1
8
8
S
S
u
u
p
p
p
p
o
o
r
r
t
t
A
A
r
r
e
e
a
a
When you click the menu item under Support Area, you will be guided to visit
www.draytek.com and open the corresponding pages directly.
VigorAP 902 User’s Guide
252
This page is left blank.
VigorAP 902 User’s Guide
253
A
A
p
p
p
p
l
l
i
i
c
c
a
a
t
t
i
i
o
o
n
n
s
s
4
4
.
.
1
1
H
H
o
o
w
w
t
t
o
o
s
s
e
e
t
t
d
d
i
i
f
f
f
f
e
e
r
r
e
e
n
n
t
t
s
s
e
e
g
g
m
m
e
e
n
n
t
t
s
s
f
f
o
o
r
r
d
d
i
i
f
f
f
f
e
e
r
r
e
e
n
n
t
t
S
S
S
S
I
I
D
D
s
s
i
i
n
n
V
V
i
i
g
g
o
o
r
r
A
A
P
P
9
9
0
0
2
2
VigorAP 902 supports two network segments, LAN-A and LAN-B for different SSIDs. With
such feature, the user can dispatch SSIDs with different network segments for reaching the
target of managing wireless network. See the following figure.
In the above figure, VigorAP 902 is used to control the wireless network connection. It can
separate the wireless traffic between accessing internal server and the usage of video.
Wireless station connecting to VigorAP 902 with SSID 2 can get the IP address with the
network segment of 192.168.1.0/24 (LAN-A); wireless station connecting to VigorAP 902
with SSID 1 can get the IP address with the same network segment of 192.168.2.0/24
(LAN-B).
LAN-B : 192.168.2.0/24 for internal server
LAN-A : 192.168.1.0/24 for music, video traffic
VigorAP 902 User’s Guide
254
Below shows you how to configure the web page for VigorAP 902:
1. In the page of Operation Mode, click AP mode for 2.4GHz Wireless and 5GHz
Wireless.
2. Open Wireless LAN(2.4GHz) >> General Setup and then Wireless LAN(5GHz) >>
General Setup. Choose the subnet LAN-B for SSID 1 and choose LAN-A for SSID 2.
Specify the wireless channel. Then, click OK to save the configuration.
VigorAP 902 User’s Guide
255
3. Open Wireless LAN(2.4GHz) >> Security Settings and Wireless LAN(5GHz) >>
Security Settings. Set the encryption method and set the password for SSID 1 and
SSID 2 respectively.
4. Open LAN>General Setup to configure the settings for enabling DHCP server on
LAN-A/LAN-B. If there is a DHCP server configured in the same network segment,
skip this step.
VigorAP 902 User’s Guide
256
5. After finishing the above settings, the wireless equipment connecting to VigorAP 902
with SSID 1 can get the IP address assigned by LAN-B 192.168.2.0/24 for accessing
the internal server. The wireless equipment connecting to VigorAP 902 with SSID 2
can get the IP address assigned by LAN-A 192.168.1.0/24 for using the video/audio
uploading and downloading services.
VigorAP 902 User’s Guide
257
4
4
.
.
2
2
H
H
o
o
w
w
t
t
o
o
u
u
s
s
e
e
V
V
i
i
g
g
o
o
r
r
A
A
P
P
i
i
n
n
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
M
M
o
o
d
d
e
e
?
?
In your wireless network environment, if you want to:
1) install APs without Ethernet cable
2) extent the wireless coverage
3) solve the compatibility problems of WDS
4) get a better Wi-Fi performance
It is suggested to use Universal Repeater Mode on AP902 with a distinguishable SSID to
extent the wireless signal from Vigor router (e.g., Vigor2830n).
LAN IP: 192.168.1.1
Enable DHCP Server
SSID: DrayTek XXX
Channel: 6
Security Mode: Mixed (WPA/WPA2)
LAN IP: 192.168.1.2
SSID: DrayTek XXX X
Channel: 6
Security Mode: Mixed (WPA/WPA2)
S
S
e
e
t
t
t
t
i
i
n
n
g
g
L
L
A
A
N
N
o
o
n
n
V
V
i
i
g
g
o
o
r
r
2
2
8
8
3
3
0
0
n
n
In this example we use single LAN with 192.168.1.x/24 segment, and the DHCP server is
enabled.
1. Please go to LAN >> General Setup >> Details Page for LAN 1.
2. Set up LAN 1.
VigorAP 902 User’s Guide
258
(1) Enter the IP address and Subnet Mask.
(2) Enable the DHCP Server.
(3) Set the DHCP IP range.
(4) Click OK.
3. Go to Online Status >> Physical Connection to check if WAN is connected.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
o
o
n
n
V
V
i
i
g
g
o
o
r
r
2
2
8
8
3
3
0
0
n
n
1. Please go to Wireless LAN >> General Setup.
VigorAP 902 User’s Guide
259
(1) Please tick Enable Wireless LAN.
(2) Choose the Mode.
Note: To utilize the Universal Repeater Mode on VigorAP 902, it’s required not
to choose 11a mode here on Vigor2830n.
(3) Name a SSID.
(4) Choose a channel.
Note: To avoid signal interference, it’s suggested to do a Scan in Wireless
LAN >> AP Discovery, and choose an unoccupied or not-so-crowded channel.
(5) Click OK.
2. Setting the Security. Please go to Wireless LAN >> Security.
(1) Choose the Mode.
(2) Give a Pre-Shared Key.
Note: The Mode and Pre-shared Key will be needed when setting on VigorAP
902, and it’s suggested to memorize them.
(3) Click OK.
VigorAP 902 User’s Guide
260
S
S
e
e
t
t
t
t
i
i
n
n
g
g
O
O
p
p
e
e
r
r
a
a
t
t
i
i
o
o
n
n
M
M
o
o
d
d
e
e
o
o
n
n
A
A
P
P
9
9
0
0
2
2
Please go to Operation Mode, and choose Universal Repeater.
S
S
e
e
t
t
t
t
i
i
n
n
g
g
L
L
A
A
N
N
o
o
n
n
A
A
P
P
9
9
0
0
2
2
Here we need to set AP902 using only one network segment, which is correspondent to the
one used by Vigor2830n. Also the DHCP Server should be disabled, so users will be
assigned IP addresses by Vigor2830n.
1. Please go to Wireless LAN >> General Setup, and remove the tick on “Enable 2
Subnet”. Please click OK to save setting.
VigorAP 902 User’s Guide
261
2. Please go to LAN >> General Setup.
(1) Enter the IP Address and Subnet Mask.
Note: The IP address of AP902 can’t be the same as it of Vigor2830n.
(2) Disable the DHCP Server.
(3) Click OK.
C
C
o
o
n
n
f
f
i
i
g
g
u
u
r
r
i
i
n
n
g
g
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
f
f
o
o
r
r
U
U
n
n
i
i
v
v
e
e
r
r
s
s
a
a
l
l
R
R
e
e
p
p
e
e
a
a
t
t
e
e
r
r
M
M
o
o
d
d
e
e
o
o
n
n
A
A
P
P
9
9
0
0
2
2
1. Please go to Wireless LAN >> Access Point Discovery, and click Scan.
VigorAP 902 User’s Guide
262
2. Choose the SSID of Vigor2830n (which is “Draytek-2830” in this example), and click
OK.
3. A window will pop up. Please enter the security information of Vigor2830n in it, and
click OK.
4. Confirm the Universal Repeater connection is up.
We can launch the Command Prompt (cmd.exe) on a wireless client of AP902 to ping
Vigor2830 to confirm the Universal Repeater connection has been established successfully.
VigorAP 902 User’s Guide
263
S
S
e
e
t
t
t
t
i
i
n
n
g
g
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
L
L
A
A
N
N
o
o
n
n
A
A
P
P
9
9
0
0
2
2
1. Please go to Wireless LAN >> General Setup. Make SSID and Channel settings the
same as configured for Vigor2830n.
2. Please go to Wireless LAN >> Security Settings. Make SSID and Channel settings the
same as configured for Vigor2830n.
U
U
s
s
i
i
n
n
g
g
t
t
h
h
e
e
W
W
i
i
r
r
e
e
l
l
e
e
s
s
s
s
S
S
e
e
r
r
v
v
i
i
c
c
e
e
o
o
f
f
A
A
P
P
9
9
0
0
2
2
1. Choose the SSID of AP902.
2. Enter the SSID key.
VigorAP 902 User’s Guide
264
3. Confirm the IP address has been acquired.
4. Confirm connection by ping.
(1) Test the connection to Vigor2830n.
(2) Test the connection to Internet.
VigorAP 902 User’s Guide
265
T
T
r
r
o
o
u
u
b
b
l
l
e
e
S
S
h
h
o
o
o
o
t
t
i
i
n
n
g
g
This section will guide you to solve abnormal situations if you cannot access into the Internet
after installing the modem and finishing the web configuration. Please follow sections below
to check your basic installation status stage by stage.
Checking if the hardware status is OK or not.
Checking if the network connection settings on your computer are OK or not.
Pinging the modem from your computer.
Backing to factory default setting if necessary.
If all above stages are done and the modem still cannot run normally, it is the time for you to
contact your dealer for advanced help.
5
5
.
.
1
1
C
C
h
h
e
e
c
c
k
k
i
i
n
n
g
g
I
I
f
f
t
t
h
h
e
e
H
H
a
a
r
r
d
d
w
w
a
a
r
r
e
e
S
S
t
t
a
a
t
t
u
u
s
s
I
I
s
s
O
O
K
K
o
o
r
r
N
N
o
o
t
t
Follow the steps below to verify the hardware status.
1. Check the power line and cable connections.
Refer to “1.3 Hardware Installation” for details.
2. Power on the modem. Make sure the POWER LED, ACT LED and LAN LED are
bright.
3. If not, it means that there is something wrong with the hardware status. Simply back to
“1.3 Hardware Installation” to execute the hardware installation again. And then, try
again.
VigorAP 902 User’s Guide
266
5
5
.
.
2
2
C
C
h
h
e
e
c
c
k
k
i
i
n
n
g
g
I
I
f
f
t
t
h
h
e
e
N
N
e
e
t
t
w
w
o
o
r
r
k
k
C
C
o
o
n
n
n
n
e
e
c
c
t
t
i
i
o
o
n
n
S
S
e
e
t
t
t
t
i
i
n
n
g
g
s
s
o
o
n
n
Y
Y
o
o
u
u
r
r
C
C
o
o
m
m
p
p
u
u
t
t
e
e
r
r
I
I
s
s
O
O
K
K
o
o
r
r
N
N
o
o
t
t
Sometimes the link failure occurs due to the wrong network connection settings. After trying
the above section, if the link is stilled failed, please do the steps listed below to make sure
the network connection settings is OK.
F
F
o
o
r
r
W
W
i
i
n
n
d
d
o
o
w
w
s
s
The example is based on Windows 7 (Professional Edition). As to the
examples for other operation systems, please refer to the similar steps or find
support notes in www.draytek.com.
1. Open All Programs>>Getting Started>>Control Panel. Click Network and
Sharing Center.
2. In the following window, click Change adapter settings.
3. Icons of network connection will be shown on the window. Right-click on Local Area
Connection and click on Properties.
VigorAP 902 User’s Guide
267
4. Select Internet Protocol Version 4 (TCP/IP) and then click Properties.
5. Select Obtain an IP address automatically and Obtain DNS server address
automatically. Finally, click OK.
VigorAP 902 User’s Guide
268
F
F
o
o
r
r
M
M
a
a
c
c
O
O
s
s
1. Double click on the current used Mac Os on the desktop.
2. Open the Application folder and get into Network.
3. On the Network screen, select Using DHCP from the drop down list of Configure
IPv4.
VigorAP 902 User’s Guide
269
5
5
.
.
3
3
P
P
i
i
n
n
g
g
i
i
n
n
g
g
t
t
h
h
e
e
M
M
o
o
d
d
e
e
m
m
f
f
r
r
o
o
m
m
Y
Y
o
o
u
u
r
r
C
C
o
o
m
m
p
p
u
u
t
t
e
e
r
r
The default gateway IP address of the modem is 192.168.1.2. For some reason, you might
need to use “ping” command to check the link status of the modem. The most important
thing is that the computer will receive a reply from 192.168.1.2. If not, please check the
IP address of your computer. We suggest you setting the network connection as get IP
automatically. (Please refer to the section 5.2)
Please follow the steps below to ping the modem correctly.
F
F
o
o
r
r
W
W
i
i
n
n
d
d
o
o
w
w
s
s
1. Open the Command Prompt window (from Start menu> Run).
2. Type command (for Windows 95/98/ME) or cmd (for Windows NT/2000/XP/Vista/7).
The DOS command dialog will appear.
3. Type ping 192.168.1.2 and press [Enter]. If the link is OK, the line of “Reply from
192.168.1.2:bytes=32 time<1ms TTL=255” will appear.
4. If the line does not appear, please check the IP address setting of your computer.
F
F
o
o
r
r
M
M
a
a
c
c
O
O
s
s
(
(
T
T
e
e
r
r
m
m
i
i
n
n
a
a
l
l
)
)
1. Double click on the current used Mac Os on the desktop.
2. Open the Application folder and get into Utilities.
3. Double click Terminal. The Terminal window will appear.
4. Type ping 192.168.1.2 and press [Enter]. If the link is OK, the line of “64 bytes from
192.168.1.2: icmp_seq=0 ttl=255 time=xxxx ms” will appear.
VigorAP 902 User’s Guide
270
5
5
.
.
4
4
B
B
a
a
c
c
k
k
i
i
n
n
g
g
t
t
o
o
F
F
a
a
c
c
t
t
o
o
r
r
y
y
D
D
e
e
f
f
a
a
u
u
l
l
t
t
S
S
e
e
t
t
t
t
i
i
n
n
g
g
I
I
f
f
N
N
e
e
c
c
e
e
s
s
s
s
a
a
r
r
y
y
Sometimes, a wrong connection can be improved by returning to the default settings. Try to
reset the modem by software or hardware.
Warning: After pressing factory default setting, you will loose all settings you did
before. Make sure you have recorded all useful settings before you pressing. The
password of factory default is null.
S
S
o
o
f
f
t
t
w
w
a
a
r
r
e
e
R
R
e
e
s
s
e
e
t
t
You can reset the modem to factory default via Web page.
Go to System Maintenance and choose Reboot System on the web page. The following
screen will appear. Choose Using factory default configuration and click OK. After few
seconds, the modem will return all the settings to the factory settings.
H
H
a
a
r
r
d
d
w
w
a
a
r
r
e
e
R
R
e
e
s
s
e
e
t
t
While the modem is running, press the Factory Reset button and hold for more than 5
seconds. When you see the ACT LED blinks rapidly, please release the button. Then, the
modem will restart with the default configuration.
VigorAP 902 User’s Guide
271
After restore the factory default setting, you can configure the settings for the modem again
to fit your personal request.
5
5
.
.
5
5
C
C
o
o
n
n
t
t
a
a
c
c
t
t
i
i
n
n
g
g
D
D
r
r
a
a
y
y
T
T
e
e
k
k
If the modem still cannot work correctly after trying many efforts, please contact your dealer
for further help right away. For any questions, please feel free to send e-mail to
support@draytek.com.
VigorAP 902 User’s Guide
272
This page is left blank.
VigorAP 902 User’s Guide
273
I
I
n
n
d
d
e
e
x
x
８
802.11 Ad Hoc, 74
802.11n, 47
802.1x, 49
Ａ
Access Control, 51, 94, 121, 149, 169, 190
Action, 211
Activate MAC address filter, 94, 169
Administrator Password, 222
Advanced Configuration, 31
Advanced Setting, 53, 82, 96, 123, 151, 171, 192
AES, 22
Airtime Fairness, 60, 103, 132, 157, 177, 200
Antenna, 54, 83, 97, 124
AP, 32
AP Bridge-Point to Multi-Point, 32
AP Bridge-Point to Multi-Point Mode, 80
AP Bridge-Point to Point, 18, 32, 80
AP Bridge-WDS, 20, 25, 33
AP Bridge-WDS Mode, 87, 164
AP Discovery, 18, 26, 55, 84, 98, 125, 153, 172, 193
AP Management, 2, 39
AP Mode, 45, 144
AP Monitor Mode, 55, 84, 98, 125, 153, 172, 193
AP Operation Mode, 17, 24
APM Log, 40
Apple iOS Keep Alive, 212
Applications, 210, 242
Auth Mode, 52, 95, 170
Authentication Client, 208
Authentication Type, 207
Auto Adjustment, 59, 102, 131, 156, 176, 199
Auto Channel Filtered Out List, 54, 83, 97, 152, 172
Auto Provision, 39
AutoSelect, 17, 89, 127, 165, 185, 195
Ｂ
Backup, 208
Backup the Configuration, 223
Band Steering, 65, 108, 137
Bandwidth Limit, 17
Bandwidth Management, 59, 102, 131, 156, 176, 199
Black List, 41
Blocked MAC address filter, 94, 169
Browser Time, 226
Ｃ
CAM, 74
Central AP Management, 39
Certificate Management, 208
Changing Password, 15
Channel, 17, 21, 46, 81, 89, 116, 127, 145, 165, 185,
195
Channel Width, 53, 82, 96, 123, 151, 171, 192
Client IP, 208
Client PinCode, 52, 95, 170
Client’s MAC Address, 41, 205
Configuration Backup, 223
Connection Time, 62, 134, 159, 202
Connection Type, 128, 196
Country Code, 54, 83, 97, 124, 151, 171, 192
Ｄ
Data Flow Monitor, 232
Daylight Saving, 226
Default Gateway, 129, 197
Detection, 216
Device Name, 128
DHCP Client, 34
DHCP server, 14
Diagnostics, 231
Download Limit, 59, 102, 131, 156, 176, 199
Ｅ
EAP Type, 207
VigorAP 902 User’s Guide
274
Encryp Type, 52, 95, 170
End Time, 211
Extension Channel, 47, 81, 89, 117
Ｆ
Factory Default Setting, 259
Fast Roaming, 64, 107, 136, 161, 181, 204
Firmware Upgrade, 230
Force Overload Disassociation, 41
Fragment Length, 54, 83, 97, 124, 151, 171, 192
Fragment Threshold, 75
Function Support List, 40
Ｇ
Gateway, 34
General Setup, LAN, 33
Guest Wireless, 17
Ｈ
Hardware Installation, 5
Hardware Reset, 259
Hide SSID, 47, 89, 117, 145, 165, 185
HTMIX, 81
HTTP port, 228
HTTPS, 209
HTTPS port, 228
Ｉ
Infrastructure, 74
Interference Monitor, 237
IP Address, 34, 128, 196
Isolate LAN, 89, 117
Isolate Member, 47, 89, 117, 145, 165, 185
Ｋ
Keep Alive Period, 221
Key Renewal Interval, 49, 92, 119, 147, 167, 188
Key Size, 209
Key Type, 209
Ｌ
LAN, 33
LAN A, 3
LAN B, 3
LAN port, 36
Lease Time, 35
LED Indicators and Connectors, 3
LED Setup, 228
Limit Client, 46, 88, 116, 144, 164, 184
Limit Client per SSID, 46, 88, 116, 145, 165, 185
Load Balance, 41
Ｍ
MAC Address, 195
MAC Address Filter, 51
Mac Clone, 73
MAC Clone, 54, 83, 97, 117
Main Screen, 14, 31
Main SSID, 17
Management, 228
Management VLAN, 34
Mobile Device Management, 216
Mode, 46, 48, 72, 80, 88, 91, 116, 118, 145, 165, 166,
185, 187
Ｎ
Network Type, 74
NTP, 210
NTP Client, 226
NTP Server, 226
NTP synchronization, 226
Ｏ
Once, 211
Online Status, 29
OPEN, 75
Open/Shared, 21, 27, 128, 196
Operation Mode, 16, 32
Overload Management, 41
Ｐ
Packet-OVERDRIVE, 53, 73, 82, 96, 123
Pass Phrase, 49, 75, 92, 119, 128, 147, 167, 188, 196
Password, 15
Password Strength, 222
PBC Start, 78
Periodic Inform Settings, 221
Phy Mode, 20, 25
VigorAP 902 User’s Guide
275
PHY Mode, 81, 90
PIN Code, 44
PMK Cache Period, 64, 107, 147, 161, 181, 204
PoE Connection, 8
Policy, 51, 94, 121, 149, 169, 217
Port, 50, 148
Port Control, 36, 37
Power Saving Mode, 74
Pre-Authentication, 64, 107, 147, 161, 181, 204
Primary DNS Server, 35
Primary IP Address, 221
PSK, 43
Push Button, 52, 95, 170
Ｑ
Quick Start Wizard, 16
Ｒ
RADIUS Server, 49, 93, 120, 148, 168, 189, 207
RADIUS Setting, 207
Rate, 81, 90, 117
Rate Adaptation Algorithm, 54, 83, 97, 124, 151, 171,
192
Reboot System, 230
Reconnection Time, 62, 134, 159, 202
Relay Agent, 35
Renew PIN, 79
Restore, 52, 208
Restore Configuration, 224
Roaming, 63, 106, 135, 160, 180, 203
Router Name, 196
Routine, 211
RSSI, 63, 106, 135, 160, 180, 203
RTS Threshold, 54, 75, 83, 97, 124, 151, 171, 192
Ｓ
Scan, 77, 85
Schedule, 210
Secondary DNS Server, 35
Secondary IP Address, 221
Secret Key, 208
Security, 48, 81, 91, 118, 146, 166, 187
Security Key, 17
Security Mode, 75, 127, 195
Security Overview, 43
Security Settings, 48
Session Timeout, 50, 93, 120, 148, 168, 189
SHARED, 75
Shared Secret, 50, 93, 120, 148, 168, 189
Show Chart, 235
Simulate 2 APs, 47, 89, 117, 145, 185
Site Survey, 77
Software Reset, 259
Speed Test, 231
SSID, 89, 145, 165, 185
SSL(HTTPS), 221
Start Date, 211
Start PBC, 44, 79, 95, 122, 150, 170, 191
Start PIN, 79, 95, 122, 150, 170, 191
Start Time, 211
Station Airtime, 238
Station Control, 17, 62, 105, 134, 159, 179, 202
Station Link Speed, 240
Station List, 70, 113, 142, 162, 182, 205
Station Statistics, 235
Station Traffic Graph, 239
Station-Infrastructure, 32
Station-Infrastructure Mode, 72
Statistics, 78, 218
Status of Settings, 42
STUN, 221
Subject Name, 209
Subnet, 47, 89, 117, 145, 185
Subnet Mask, 34, 129, 197
Support Area, 240
Syslog/Mail Alert, 225
System Log, 231
System Maintenance, 218
System Status, 219
Ｔ
Telnet Server, 228
Temperature Calibration Offset, 214
Temperature High Alarm, 214
Temperature Low Alarm, 214
Temperature Sensor, 213
Temperature Sensor Graph, 215
VigorAP 902 User’s Guide
276
Time and Date, 226
Time Zone, 226
TKIP, 22, 43
Total Download Limit, 59, 102, 131, 157, 176, 199
Total Upload Limit, 59, 102, 131, 157, 176, 199
TR-069, 220
Traffic Graph, 232
traffic overload, 41
Triggering Client Number, 61, 104, 178
Trouble Shooting, 254
Trust DHCP Server, 35
Tx Power, 54, 83, 97, 124, 151, 171, 192
Ｕ
Universal Repeater, 21, 26, 33, 127, 195
Universal Repeater Mode, 115, 184
Upload Limit, 59, 102, 131, 156, 176, 199
Users Profile, 207
Ｖ
VLAN ID, 34, 47, 89, 117, 145, 165, 185
Ｗ
WDS AP Status, 86, 99
WEP, 21, 76
WEP (Wired Equivalent Privacy), 43
White List, 41
Wi-Fi DOWN, 211
Wi-Fi Hardware Button, 228
Wi-Fi UP, 211
Wired Connection, 5, 6
Wireless Connection, 7
Wireless LAN (2.4GHz/5GHz), 43
Wireless LAN(2.4GHz), 32
Wireless LAN(5GHz), 33
WLAN (2.4GHz) Statistics, 233
WLAN (5GHz) Statistics, 234
WMM Configuration, 57, 100, 129, 155, 174, 197
WPA (Wi-Fi Protected Access), 43
WPA Algorithms, 49, 75, 92, 119, 147, 167, 188
WPS, 52, 78, 95, 122, 150, 170, 191
WPS (Wi-Fi Protected Setup), 43
… 284

Hulp nodig? Stel uw vraag in het forum

Spelregels

Misbruik melden

Gebruikershandleiding.com neemt misbruik van zijn services uitermate serieus. U kunt hieronder aangeven waarom deze vraag ongepast is. Wij controleren de vraag en zonodig wordt deze verwijderd.

Product:

Bijvoorbeeld antisemitische inhoud, racistische inhoud, of materiaal dat gewelddadige fysieke handelingen tot gevolg kan hebben.

Bijvoorbeeld een creditcardnummer, een persoonlijk identificatienummer, of een geheim adres. E-mailadressen en volledige namen worden niet als privégegevens beschouwd.

Spelregels forum

Om tot zinvolle vragen te komen hanteren wij de volgende spelregels:

Belangrijk! Als er een antwoord wordt gegeven op uw vraag, dan is het voor de gever van het antwoord nuttig om te weten als u er wel (of niet) mee geholpen bent! Wij vragen u dus ook te reageren op een antwoord.

Belangrijk! Antwoorden worden ook per e-mail naar abonnees gestuurd. Laat uw emailadres achter op deze site, zodat u op de hoogte blijft. U krijgt dan ook andere vragen en antwoorden te zien.

Abonneren

Abonneer u voor het ontvangen van emails voor uw Draytek Vigor AP 902 bij:


U ontvangt een email met instructies om u voor één of beide opties in te schrijven.


Ontvang uw handleiding per email

Vul uw emailadres in en ontvang de handleiding van Draytek Vigor AP 902 in de taal/talen: Engels als bijlage per email.

De handleiding is 4,02 mb groot.

 

U ontvangt de handleiding per email binnen enkele minuten. Als u geen email heeft ontvangen, dan heeft u waarschijnlijk een verkeerd emailadres ingevuld of is uw mailbox te vol. Daarnaast kan het zijn dat uw internetprovider een maximum heeft aan de grootte per email. Omdat hier een handleiding wordt meegestuurd, kan het voorkomen dat de email groter is dan toegestaan bij uw provider.

Stel vragen via chat aan uw handleiding

Stel uw vraag over deze PDF

Uw handleiding is per email verstuurd. Controleer uw email

Als u niet binnen een kwartier uw email met handleiding ontvangen heeft, kan het zijn dat u een verkeerd emailadres heeft ingevuld of dat uw emailprovider een maximum grootte per email heeft ingesteld die kleiner is dan de grootte van de handleiding.

Er is een email naar u verstuurd om uw inschrijving definitief te maken.

Controleer uw email en volg de aanwijzingen op om uw inschrijving definitief te maken

U heeft geen emailadres opgegeven

Als u de handleiding per email wilt ontvangen, vul dan een geldig emailadres in.

Uw vraag is op deze pagina toegevoegd

Wilt u een email ontvangen bij een antwoord en/of nieuwe vragen? Vul dan hier uw emailadres in.



Info