VigorAP 900 User’s Guide
i
Page 1: ...VigorAP 900 User s Guide i ...
Page 2: ...VigorAP 900 User s Guide ii ...
Page 3: ...P 900 User s Guide iii V Vi ig go or rA AP P 9 90 00 0 C Co on nc cu ur rr re en nt t D Du ua al l B Ba an nd d A AP P U Us se er r s s G Gu ui id de e Version 1 7 Firmware Version V1 1 8 1 Date July 25 2016 ...
Page 4: ...ion of the environment Warranty We warrant to the original end user purchaser that the modem will be free from any defects in workmanship or materials for a period of one 1 year from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indication...
Page 5: ...ns However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation betw...
Page 6: ...VigorAP 900 User s Guide vi ...
Page 7: ...2 5 Accessing to Web User Interface 14 2 6 Changing Password 15 2 7 Quick Start Wizard 16 2 7 1 Configuring 2 4GHz Wireless Settings General 16 2 7 2 Configuring 2 4GHz Wireless Settings based on the Operation Mode 18 2 7 3 Configuring 2 4GHz Security Settings 23 2 7 4 Configuring 5GHz Wireless Settings 25 2 7 5 Configuring 5GHz Security Settings 26 2 7 6 Finishing the Wireless Settings Wizard 28 ...
Page 8: ...de 75 3 7 1 General Setup 75 3 7 2 Security 80 3 7 3 Access Control 83 3 7 4 WPS 84 3 7 5 Advanced Setting 85 3 7 6 AP Discovery 85 3 7 7 WDS AP Status 87 3 7 8 WMM Configuration 87 3 7 9 Bandwidth Management 89 3 7 10 Airtime Fairness 90 3 7 11 Band Steering 92 3 7 12 Station Control 95 3 7 13 Roaming 97 3 7 14 Station List 99 3 8 Wireless LAN Settings for Universal Repeater Mode 101 3 8 1 Genera...
Page 9: ...164 3 10 13 Station List 166 3 11 RADIUS Setting 168 3 11 1 RADIUS Server 168 3 11 2 Certificate Management 169 3 12 Applications 170 3 12 1 Schedule 170 3 12 2 Apple iOS Keep Alive 172 3 12 3 Temperature Sensor 174 3 13 Mobile Device Management 176 3 13 1 Detection 176 3 13 2 Policy 177 3 13 3 Statistics 178 3 14 System Maintenance 179 3 14 1 System Status 179 3 14 2 TR 069 181 3 14 3 Administrat...
Page 10: ...o use VigorAP in Universal Repeater Mode 201 Trouble Shooting 209 5 1 Checking If the Hardware Status Is OK or Not 209 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 210 5 3 Pinging the Modem from Your Computer 213 5 4 Backing to Factory Default Setting If Necessary 214 5 5 Contacting DrayTek 215 ...
Page 11: ...1 1 1 I In nt tr ro od du uc ct ti io on n Thank you for purchasing this VigorAP 900 the concurrent dual band wireless 2 4G 5G access point offering high speed data transmission With this high cost efficiency VigorAP 900 computers and wireless devices which are compatible with 802 11n 802 11a can connect to existing wired Ethernet network via this VigorAP 900 at the speed of 300Mbps Easy install p...
Page 12: ...ency monitoring and security of your company wide wireless access easier be managed Inside the web user interface we call central wireless management as Central AP Management which supports mobility client monitoring reporting and load balancing to multiple APs For central wireless management you will need a Vigor2860 or Vigor2925 series router there is no per node licensing or subscription requir...
Page 13: ...inking The data is transmitting On Wireless function is ready Off Wireless function is not ready 2 4G Blinking Data is transmitting sending receiving On Wireless function is ready Off Wireless function is not ready 5G Blinking Data is transmitting sending receiving On A normal connection rate with 100M 1000M is through its corresponding port Off LAN is disconnected LAN A1 A4 Blinking Data is trans...
Page 14: ...for any wireless client connecting to it through WPS WPS Press the button for more than 6 seconds VigorAP 900 will disable the option of Enable AP Management under LAN General Setup and reset to the factory IP address 192 168 1 2 Note that the disabled AP Management must be enabled manually if enabled AP Management is required Restore the default settings Usage Turn on VigorAP 900 Press the button...
Page 15: ...nnect VigorAP 900 to ADSL modem router or switch hub in your network through the LAN A port of the access point by Ethernet cable 2 Connect a computer to other available LAN A port Make sure the subnet IP address of the PC is the same as VigorAP 900 management IP e g 192 168 1 X 3 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 4 Power ...
Page 16: ...e LAN A port of the access point by Ethernet cable 2 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router For the detailed information of LED status please refer...
Page 17: ...orAP 900 to ADSL modem or router via wireless network 2 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if VigorAP 900 is correctly connected to the ADSL modem router or switch hub For the detailed information of LED status ple...
Page 18: ... 1 Connect VigorAP 900 to a switch in your network through the LAN A1 PoE port of the access point by Ethernet cable 2 Connect a computer to VigorSwitch P2260 Make sure the subnet IP address of the PC is the same as VigorAP 900 management IP e g 192 168 1 X 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctl...
Page 19: ...puter to use dynamic IP address For the default IP address of this AP is set 192 168 1 2 we recommend you to use 192 168 1 X except 2 in the field of IP address on this section for your computer If the operating system of your computer is Windows 7 please go to section 2 1 Windows 2000 please go to section 2 2 Windows XP please go to section 2 3 Windows Vista please go to section 2 4 2 2 1 1 W Wi ...
Page 20: ...Internet Protocol Version 4 TCP IPv4 and click Properties Under the General tab click Use the following IP address Then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 ...
Page 21: ...puter then click control panel Double click Network and Dial up Connections icon double click Local Area Connection and Local Area Connection Properties window will appear Select Internet Protocol TCP IP then click Properties Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 ...
Page 22: ...er then click control panel Double click Network and Internet Connections icon click Network Connections and then double click Local Area Connection Local Area Connection Status window will appear and then click Properties Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 ...
Page 23: ...anel Click View Network Status and Tasks then click Manage Network Connections Right click Local Area Netwrok then select Properties Local Area Connection Properties window will appear select Internet Protocol Version 4 TCP IPv4 and then click Properties Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet ...
Page 24: ...http 192 168 1 2 A pop up window will open to ask for username and password Pease type admin admin on Username Password and click OK Note 1 You may either simply set up your computer to get IP dynamically from the router or set up the IP address of the computer to be in the same subnet as the IP address of VigorAP 900 If there is no DHCP server on the network then VigorAP 900 will have an IP addre...
Page 25: ...ration for security and adjust primary basic settings 2 2 6 6 C Ch ha an ng gi in ng g P Pa as ss sw wo or rd d 1 Please change the password for the original security of the modem 2 Go to System Maintenance page and choose Administrator Password 3 Enter the new login password on the field of Password Then click OK to continue 4 Now the password has been changed Next time use the new password to ac...
Page 26: ...xplained as follows Item Description Operation Mode There are five operation modes for wireless connection Settings for each mode are different Wireless Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Main SSID Set a name for VigorAP 900 to be identified Enable 2 Sub...
Page 27: ...ce If you have no idea of choosing the frequency please select AutoSelect to let system determine for you Extension Channel With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Station List Click the Display button to open the Station List dialog It provides the knowledge of connecting wi...
Page 28: ... ng gs s f fo or r A AP P B Br ri id dg ge e P Po oi in nt t t to o P Po oi in nt t When you choose AP Bridge Point to Point you will need to configure the following page Available settings are explained as follows Item Description Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Security Select WEP TKIP or AES a...
Page 29: ...will need to configure the following page Available settings are explained as follows Item Description Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Security Select WEP TKIP or AES as the encryption algorithm Type the key number if required Peer MAC Address Type the peer MAC address for the access point that V...
Page 30: ...ettings are explained as follows Item Description Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Subnet Choose LAN A or LAN B for each SSID Security Select WEP TKIP or AES as the encryption algorithm Type the key number if required Peer MAC Address Type the peer MAC address for the access point that VigorAP 900...
Page 31: ...you to choose Each mode will bring up different parameters e g WEP keys Pass Phrase for you to configure Encryption Type for Open Shared This option is available when Open Shared is selected as Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP WEP Keys Four keys can be entered here but ...
Page 32: ... PSK This option is available when WPA PSK or WPA2 PSK is selected as Security Mode Select TKIP or AES as the algorithm for WPA Pass Phrase It is available when WPA PSK or WPA2 PSK is selected After finishing this web page configuration please click Next to continue ...
Page 33: ...in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the re...
Page 34: ...or Mixed WPA WPA2 PSK mode PMK Caching Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defi...
Page 35: ...connect to 11a only 11n only 5G Mixed 11a 11n stations simultaneously Simply choose Mixed 11a 11n mode Main SSID Set a name for VigorAP 900 to be identified Multiple SSID Set the SSIDs and specify subnet interface LAN A or LAN B for each SSID by click Multiple SSID Channel Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selected channel is...
Page 36: ...GHz wireless connection capability You can setup 5G features in Quick Start Wizard first Once the USB 5GHz wireless dongle connects to VigorAP 900 it can work immediately Available settings are explained as follows Item Description Mode There are several modes provided for you to choose Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be ent...
Page 37: ...vailable for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Internal WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performa...
Page 38: ... g t th he e W Wi ir re el le es ss s S Se et tt ti in ng gs s W Wi iz za ar rd d When you see this page it means the wireless setting wizard is almost finished Just click Finish to save the settings and complete the setting procedure 2 2 8 8 O On nl li in ne e S St ta at tu us s The online status shows the LAN status Station Link Status for such device Detailed explanation is shown below Item Des...
Page 39: ...VigorAP 900 User s Guide 29 interface TX Bytes Displays the total transmitted size at the LAN interface RX Bytes Displays the total number of received size at the LAN interface ...
Page 40: ...VigorAP 900 User s Guide 30 This page is left blank ...
Page 41: ...uration As for other examples of application please refer to chapter 5 1 Open a web browser on your PC and type http 192 168 1 2 The window will ask for typing username and password 2 Please type admin admin on Username Password for administration operation Now the Main Screen will appear Be aware that Admin mode will be displayed on the bottom left side ...
Page 42: ...t to Point This mode can establish wireless connection with another VigorAP 900 using the same mode and link the wired network which these two VigorAP 900s connected together Only one access point can be connected in this mode AP Bridge Point to Multi Point This mode can establish wireless connection with other VigorAP 900s using the same mode and link the wired network which these VigorAP 900s co...
Page 43: ... that will help you to extend the networking wirelessly The access point can act as Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to service all wireless clients within its coverage Note The Wireless LAN settings will be changed according to the Operation Mode selected here For the detailed information please refer to the section of Wireles...
Page 44: ...required simply type an IP address as the gateway for VigorAP 900 It will be convenient for the access point to acquire more service e g accessing NTP server from Vigor router Enable Management VLAN VigorAP 900 supports tag based VLAN for wireless clients accessing Vigor device Only the clients with the specified VLAN ID can access into VigorAP 900 VLAN ID Type the number as VLAN ID tagged on the ...
Page 45: ...f the gateway IP address for the DHCP server Lease Time It allows you to set the leased time for the specified PC Primary DNS Address You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary DNS Address ...
Page 46: ...ss here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary DNS Address You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the modem will automatical...
Page 47: ...er Central AP Management in Vigor2860 series When both Vigor2860 series and VigorAP 900 have such feature enabled once VigorAP 900 is registered to Vigor2860 series the WLAN profile pre configured on Vigor2860 series will be applied to VigorAP 900 immediately Thus it is not necessary to configure VigorAP 900 separately 3 3 3 3 2 2 A AP PM M L Lo og g This page will display log information related ...
Page 48: ... balancing to multiple APs For central wireless management you will need a Vigor2860 or Vigor2925 series router there is no per node licensing or subscription required With the unified user interface of Vigor2860 Combo WAN series and Vigor2925 Triple WAN series the multiple deployment of VigorAP 900 can be clear at the first sight For multiple wireless clients to apply the AP Load Balancing to the...
Page 49: ...em Description White List Black List Display the information such as index number MAC address and comment for all of the members in White List Black List Wireless stations listed in Black List will be forcefully disconnected first when traffic overload occurs and Force Overload Disassociation is enabled Client s MAC Address Specify the MAC Address of the remote local client Apply to White List MAC...
Page 50: ...AN N 2 2 4 4G GH Hz z 5 5G GH Hz z The VigorAP 900 is equipped with a wireless LAN interface compliant with the standard IEEE 802 11n draft 2 protocol To boost its performance further the VigorAP 900 is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to ...
Page 51: ...ecurity suite you select they all will enhance the over the air data protection and or privacy on your wireless network The VigorAP 900 is very flexible and can support multiple secure connections with both WEP and WPA at the same time W WP PS S I In nt tr ro od du uc ct ti io on n WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless ac...
Page 52: ... with network card installed press Start PBC button of network card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the VigorAP 900 ...
Page 53: ... choose AP as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control Note The Wireless LAN settings will be changed according to the Operation Mode selected in section 3 1 ...
Page 54: ... settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through Vigor device The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g...
Page 55: ...k LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Subnet Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Isolate Member Check this box to make the wireless clients stations with the same SSID not access for each oth...
Page 56: ...If you choose 11g Only 11b Only 11n Only or Mixed 11b 11g such feature will be available for you to set data transmission rate Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support...
Page 57: ... Lowering down the value may degrade range and throughput of wireless Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page...
Page 58: ... provided for you to choose Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this fie...
Page 59: ... 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to gre...
Page 60: ... internal server of VigorAP 900 IPAddress Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeou...
Page 61: ...settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into Vig...
Page 62: ...P 900 is properly configured you can see Yes message here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS...
Page 63: ... radio Do not modify default value if you don t know what it is default value is 2347 Country Code VigorAP broadcasts country codes by following the 802 11d standard However some wireless stations will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to ensu...
Page 64: ... is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics ...
Page 65: ... WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin CWMax CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CWMax value must be greater than CWMin o...
Page 66: ...specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page config...
Page 67: ... Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to Vigor device with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor device with the same...
Page 68: ...802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occup...
Page 69: ...s and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign similar airtime to each wireless station by controlling TX traffic Airtime Fairness Click the link to display the...
Page 70: ... 10 0 B Ba an nd d S St te ee er ri in ng g Band Steering detects if the wireless clients are capable of 5GHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent f...
Page 71: ... is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds 15 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wireless client After finishing this web...
Page 72: ...d Steering 2 Check the box of Enable Band Steering and use the default value 15 for check time setting 3 Click OK to save the settings 4 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Same value for 2 4GHz and 5GHz ...
Page 73: ... Wireless LAN 5GHz Security Configure Security as 12345678 for both pages Click OK to save the settings 6 Now VigorAP 900 will let the wireless clients connect to less congested wireless LAN such as 5GHz to prevent from network congestion Same value for 2 4GHz and 5GHz ...
Page 74: ... hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Reconnection Time Use the drop down list to ch...
Page 75: ...reless station to assist it to connect another Wireless AP to get better signal Minimum Basic Rate Check the box to use the drop down list to specify a basic rate Mbps When the link rate of the wireless station is below such value VigorAP 900 will terminate the network connection for that wireless station Disable RSSI Requirement If it is selected VigorAP will not terminate the network connection ...
Page 76: ...uthenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 11i specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X...
Page 77: ...cation that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Control Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict th...
Page 78: ... t M Mo od de e When you choose AP Bridge Point to Point or Point to Multi Point Mode as the operation mode the Wireless LAN menu items will include General Setup AP Discovery WDS AP Status Airtime Fairness Roaming Status and Station Control AP Bridge Point to Point allows VigorAP 900 to connect to another VigorAP 900 which uses the same mode All wired Ethernet clients of both VigorAP 900s will be...
Page 79: ... more information Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Channel Means the channel of frequency of the wireless LAN The default channel...
Page 80: ...onnecting with each other Security Select WEP TKIP or AES as the encryption algorithm Type the key number if required Peer Mac Address Type the peer MAC address for the access point that VigorAP 900 connects to Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless c...
Page 81: ... Lowering down the value may degrade range and throughput of wireless Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page...
Page 82: ... if you don t know what it is default value is 2346 RTS Threshold Minimize the collision unit is bytes between hidden stations to improve wireless performance Set the RTS threshold of wireless radio Do not modify default value if you don t know what it is default value is 2347 Country Code VigorAP broadcasts country codes by following the 802 11d standard However some wireless stations will detect...
Page 83: ...ddress of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discove...
Page 84: ...74 3 3 6 6 4 4 W WD DS S A AP P S St ta at tu us s VigorAP 900 can display the status such as MAC address physical mode power save and bandwidth for the working AP connected with WDS Click Refresh to get the newest information ...
Page 85: ...nu items will include General Setup Security Access Control WPS AP Discovery WDS AP Status WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control 3 3 7 7 1 1 G Ge en ne er ra al l S Se et tu up p By clicking the General Setup a new web page will appear so that you could configure security Tx Burst and choose proper mode Please refer to the following...
Page 86: ...r s Guide 76 Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations ...
Page 87: ...ity the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage SSID Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the dr...
Page 88: ...onfigure the extension channel you want Rate If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Subnet Choose LAN A or LAN B for each SSID Security Select Disabled WEP TKIP or AES as the encryption algor...
Page 89: ...he maximum 100 Lowering down the value may degrade range and throughput of wireless Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing...
Page 90: ...e Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically ...
Page 91: ...e is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower pe...
Page 92: ... internal server of VigorAP 900 IPAddress Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeou...
Page 93: ...settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into Vig...
Page 94: ...re WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900r Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both...
Page 95: ...ry Code VigorAP broadcasts country codes by following the 802 11d standard However some wireless stations will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to ensure successful network connection will be necessary for some clients 3 3 7 7 6 6 A AP P D Di...
Page 96: ...P Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied...
Page 97: ...ority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the t...
Page 98: ...anging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response reques...
Page 99: ...pload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSID...
Page 100: ...E802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occu...
Page 101: ...s and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign similar airtime to each wireless station by controlling TX traffic Airtime Fairness Click the link to display the...
Page 102: ... 11 1 B Ba an nd d S St te ee er ri in ng g Band Steering detects if the wireless clients are capable of 5GHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent f...
Page 103: ... is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds 15 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wireless client After finishing this web...
Page 104: ...d Steering 8 Check the box of Enable Band Steering and use the default value 15 for check time setting 9 Click OK to save the settings 10 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Same value for 2 4GHz and 5GHz ...
Page 105: ...y the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as 1 hour and reconnection time can be set as 1 day T...
Page 106: ...nction Connection Time Reconnection Time Use the drop down list to choose the duration for the wireless client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined Display All Station Control List All the wireless stations connecting to Vigor router by using such SSID will be listed on Station Control List After finishing all the settings here please c...
Page 107: ...reless station to assist it to connect another Wireless AP to get better signal Minimum Basic Rate Check the box to use the drop down list to specify a basic rate Mbps When the link rate of the wireless station is below such value VigorAP 900 will terminate the network connection for that wireless station Disable RSSI Requirement If it is selected VigorAP will not terminate the network connection ...
Page 108: ...uthenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 11i specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X...
Page 109: ...uthentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Control Client s MAC Address For additional security of wireless access the Access Control facility allows you to rest...
Page 110: ...VigorAP 900 User s Guide 100 Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations ...
Page 111: ... rs sa al l R Re ep pe ea at te er r M Mo od de e When you choose Universal Repeater as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery Universal Repeater WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control ...
Page 112: ...ble settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 1...
Page 113: ...u can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Subnet Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Isolate LAN Check this box to make the wireless clients stations with the same SSID not accessing for wired PC in LAN Isolate Member Check this box to make the wireless c...
Page 114: ...nt Rate If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this ...
Page 115: ... Lowering down the value may degrade range and throughput of wireless Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page...
Page 116: ... provided for you to choose Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this fie...
Page 117: ... 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to gre...
Page 118: ... internal server of VigorAP 900 IPAddress Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeou...
Page 119: ...settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into Vig...
Page 120: ...ere WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both...
Page 121: ...ry Code VigorAP broadcasts country codes by following the 802 11d standard However some wireless stations will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to ensure successful network connection will be necessary for some clients 3 3 8 8 6 6 A AP P D Di...
Page 122: ...uthentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can spe...
Page 123: ... output power of this mode is the same as that of WDS and normal AP mode Available settings are explained as follows Item Description SSID Set the name of access point that VigorAP 900 wants to connect to MAC Address Optional Type the MAC address of access point that VigorAP 900 wants to connect to Channel Means the channel of frequency of the wireless LAN The default channel is 11 You may switch ...
Page 124: ...SK and WPA2 PSK This option is available when WPA PSK or WPA2 PSK is selected as Security Mode Select TKIP or AES as the algorithm for WPA Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Connection Type Choose DHCP or Static IP as the connection mode DHCP The wireless station will be assigned with an IP from VigorAP Static IP ...
Page 125: ...y data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time ...
Page 126: ... restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the pe...
Page 127: ...Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSI...
Page 128: ...EE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occ...
Page 129: ...s and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign similar airtime to each wireless station by controlling TX traffic Airtime Fairness Click the link to display the...
Page 130: ... 11 1 B Ba an nd d S St te ee er ri in ng g Band Steering detects if the wireless clients are capable of 5GHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent f...
Page 131: ... is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of 5GHz network connection the system shall wait and check for several seconds 15 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wireless client After finishing this web...
Page 132: ...d Steering 14 Check the box of Enable Band Steering and use the default value 15 for check time setting 15 Click OK to save the settings 16 Open Wireless LAN 2 4GHz General Setup and Wireless LAN 5GHz General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Same value for 2 4GHz and 5GHz ...
Page 133: ...fy the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as 1 hour and reconnection time can be set as 1 day ...
Page 134: ...nction Connection Time Reconnection Time Use the drop down list to choose the duration for the wireless client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined Display All Station Control List All the wireless stations connecting to Vigor router by using such SSID will be listed on Station Control List After finishing all the settings here please c...
Page 135: ...reless station to assist it to connect another Wireless AP to get better signal Minimum Basic Rate Check the box to use the drop down list to specify a basic rate Mbps When the link rate of the wireless station is below such value VigorAP 900 will terminate the network connection for that wireless station Disable RSSI Requirement If it is selected VigorAP will not terminate the network connection ...
Page 136: ...uthenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 11i specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X...
Page 137: ...uthentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Control Client s MAC Address For additional security of wireless access the Access Control facility allows you to rest...
Page 138: ...VigorAP 900 User s Guide 128 Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations ...
Page 139: ...3 3 9 9 1 1 G Ge en ne er ra al l S Se et tu up p By clicking the General Setup a new web page will appear so that you could configure the general settings for wireless connection such as specifying SSID selecting the wireless channel isolate LAN connection and so on Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Li...
Page 140: ...or different usage SSID Set a name for VigorAP 900 to be identified Default settings are Draytek_5G LANA and Draytek_5G LANB When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Subnet Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Isolate Mem...
Page 141: ...according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings 3 3 9 9 2 2 S Se ec cu ur ri it ty y This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking t...
Page 142: ...1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPAAlgorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characte...
Page 143: ...tion Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings Available settings are explained as follows Item Description Use internal RADIUS Server There is a RADIUS server built in VigorAP 900 which is used to authenticate the wireless client connec...
Page 144: ...eless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Available settings are explained as follows Item Description Policy Select to enable any one of the followin...
Page 145: ...ge configuration please click OK to save the settings 3 3 9 9 4 4 W WP PS S Open Wireless LAN WPS to configure the corresponding settings Available settings are explained as follows Item Description Enable WPS Check this box to enable WPS setting WPS Configured Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see ...
Page 146: ...ireless radio Do not modify default value if you don t know what it is default value is 2346 RTS Threshold Minimize the collision unit is bytes between hidden stations to improve wireless performance Set the RTS threshold of wireless radio Do not modify default value if you don t know what it is default value is 2347 Country Code VigorAP broadcasts country codes by following the 802 11d standard H...
Page 147: ... for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button 3 3 9 9 7 7 W WM MM M C Co on nf fi ig gu ur ra at ti io on n WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tab...
Page 148: ... AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to ...
Page 149: ... to save the settings 3 3 9 9 9 9 A Ai ir rt ti im me e F Fa ai ir rn ne es ss s Airtime fairness is essential in wireless networks that must support critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic...
Page 150: ...other words Station B fast rate is obstructed by Station A slow rate To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fair airtime and it s s...
Page 151: ...lusive So their webs have extra actions to ensure these two functions are not enabled simultaneously 3 3 9 9 1 10 0 S St ta at ti io on n C Co on nt tr ro ol l Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free ...
Page 152: ... connecting to Vigor router by using such SSID will be listed on Station Control List After finishing all the settings here please click OK to save the configuration 3 3 9 9 1 11 1 R Ro oa am mi in ng g The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can i...
Page 153: ...ceived signal strength indicator to decide to terminate the network connection of wireless station When the signal strength is below the value dBm set here VigorAP 900 will terminate the network connection for that wireless station Minimum RSSI When the signal strength of the wireless station is below the value dBm set here and adjacent AP must be DrayTek AP and support such feature too with highe...
Page 154: ...rocedure defined in IEEE 802 11i specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings ...
Page 155: ...he authentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Control Client s MAC Address For additional security of wireless access the Access Control facility allows you to ...
Page 156: ...VigorAP 900 User s Guide 146 Control Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations ...
Page 157: ... Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11a only 11n only and Mixed 11a 11n Enable 2 Subnet Simulate 2 APs ...
Page 158: ...tations with the same SSID not accessing for each other VLAN ID Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling th...
Page 159: ...es provided for you to choose Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this f...
Page 160: ... 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to gre...
Page 161: ... internal server of VigorAP 900 IPAddress Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeou...
Page 162: ...e settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into V...
Page 163: ...e here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS WPS Encrypt Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Button Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes ...
Page 164: ...ry Code VigorAP broadcasts country codes by following the 802 11d standard However some wireless stations will detect scan the country code to prevent conflict occurred If conflict is detected wireless station will be warned and is unable to make network connection Therefore changing the country code to ensure successful network connection will be necessary for some clients 3 3 1 10 0 6 6 A AP P D...
Page 165: ...anned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can specify MAC address or SSID for the AP He...
Page 166: ...mode is the same as that of WDS and normal AP mode Available settings are explained as follows Item Description SSID Set the name of access point that VigorAP 900 wants to connect to MAC Address Optional Type the MAC address of access point that VigorAP 900 wants to connect to Channel Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selecte...
Page 167: ...s selected as Security Mode Select TKIP or AES as the algorithm for WPA Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by 0x such as 0x321253abcde Connection Type Choose DHCP or Static IP as the connection mode DHCP The wireless station will be assigned with an IP from Static IP The wireless station shall specify a static IP for connecting to Internet v...
Page 168: ... data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time d...
Page 169: ... restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the pe...
Page 170: ... Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SS...
Page 171: ...EEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and oc...
Page 172: ...s and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Available settings are explained as follows Item Description Enable Airtime Fairness Try to assign similar airtime to each wireless station by controlling TX traffic Airtime Fairness Click the link to display the...
Page 173: ...ne hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Reconnection Time Use the drop down list to ...
Page 174: ...wireless station to assist it to connect another Wireless AP to get better signal Minimum Basic Rate Check the box to use the drop down list to specify a basic rate Mbps When the link rate of the wireless station is below such value VigorAP 900 will terminate the network connection for that wireless station Disable RSSI Requirement If it is selected VigorAP will not terminate the network connectio...
Page 175: ...uthenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 11i specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X...
Page 176: ...tication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Control Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict ...
Page 177: ...VigorAP 900 User s Guide 167 Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations ...
Page 178: ... Description Enable RADIUS Server Check it to enable the internal RADIUS server Authentication Type Let the user to choose the authentication method for RADIUS server Radius EAP Type There are two types PEAP and EAP TLS offered for selection If EAP TLS is selected a certificate must be installed or must be ensured to be trusted Users Profile Username Type a new name for the user profile Password T...
Page 179: ... on this page as a file Restore Click it to restore the settings RADIUS configuration from an existed file After finishing this web page configuration please click OK to save the settings 3 3 1 11 1 2 2 C Ce er rt ti if fi ic ca at te e M Ma an na ag ge em me en nt t When the local client and remote client are required to make certificate authentication e g IPsec X 509 for data passing through SSL...
Page 180: ...ecified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance Time and Date menu press Inquire Time button to set the VigorAP s clock to current time of your PC The clock will reset once if yo...
Page 181: ...ailable when Enable Schedule is checked It allows to add a new schedule profile You can set up to 15 schedules To add a schedule 1 Check the box of Enable Schedule 2 Click the Add button to open the following web page Available settings are explained as follows Item Description Enable Check to enable such schedule profile Start Date Specify the starting date of the schedule Start Time Specify the ...
Page 182: ...ule will be applied Once The schedule will be applied just once Routine Specify which days in one week should perform the schedule Weekday Choose and check the day to perform the schedule It is available when Routine is selected as Acts 3 After finishing this web page configuration please click OK to save the settings A new schedule profile has been created and displayed on the screen 3 3 1 12 2 2...
Page 183: ... Description Enable Apple iOS Keep Alive Check to enable the function Index Display the setting link Click the index link to open the configuration page for setting the IP address Apple iOS Keep Alive IP Address Display the IP address ...
Page 184: ...ly monitor the temperature of its environment When a pre determined threshold is reached you will be alerted via Syslog T Te em mp pe er ra at tu ur re e S Se en ns so or r S Se et tt ti in ng gs s Available settings are explained as follows Item Description Display Settings Calibration Offset Type a value used for correcting the temperature error Temperature Unit Choose the display unit of the te...
Page 185: ...VigorAP 900 User s Guide 175 T Te em mp pe er ra at tu ur re e S Se en ns so or r G Gr ra ap ph h Below shows an example of temperature graph ...
Page 186: ...ile Device Management 3 3 1 13 3 1 1 D De et te ec ct ti io on n Such page displays mobile device s detected by VigorAP Detected device s with Policy Pass can access into the wireless LAN offered by VigorAP Detected device s with Policy Block are not allowed to access into Internet via VigorAP s WLAN Once you check uncheck the box of Enable Mobile Device Management and click OK VigorAP will reboot...
Page 187: ...e Connections All of mobile devices will be blocked and not allowed to access into Internet via VigorAP Block PC Connections All of network connections based on PC MAC or Linux platform will be blocked and terminated Block Unknown Connections Only the unknown network connections unable to be recognized by Vigor router will be blocked and terminated After finished the policy selection click OK Vigo...
Page 188: ...78 3 3 1 13 3 3 3 S St ta at ti is st ti ic cs s The number of detected devices and the number of device s passed blocked according to the policy specified in Mobile Device Management Policy can be illustrated as doughnut chart ...
Page 189: ...te em m S St ta at tu us s The System Status provides basic network settings of Vigor modem It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation Each item is explained as follows Item Description Model Device Name Display the model name of the modem Firmware Version Display the firmware version ...
Page 190: ... your system LAN A LAN B MAC Address Display the MAC address of the LAN Interface IP Address Display the IP address of the LAN interface IP Mask Display the subnet mask address of the LAN interface Wireless LAN 2 4GHz 5GHz MAC Address Display the MAC address of the WAN Interface SSID Display the SSID of the device Channel Display the channel that the station used for connecting with such device ...
Page 191: ...CS Settings URL Username Password Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to Auto Configuration Server user s manual for detailed information The setting for URL can be domain name or IP address CPE Settings Such information is useful for Auto Configuration Server ACS Enable Check the box to allow the CPE client to connect with Auto Conf...
Page 192: ...riodic Inform Settings The default setting is Enable Please set interval time or schedule time for the AP to send notification to VigorACS server Or click Disable to close the mechanism of notification Interval Time Type the value for the interval time setting The unit is second STUN Settings The default is Disable If you click Enable please type the relational settings listed below Server Address...
Page 193: ...ype the name for accessing into Web User Interface Password Type in new password in this filed Confirm Password Type the new password again for confirmation Password Strength The system will display the password strength represented with the word of weak medium or strong of the password specified above When you click OK the login window will appear Please use the new password to access into the we...
Page 194: ...w the steps below to backup your configuration 1 Go to System Maintenance Configuration Backup The following windows will be popped up as shown below 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file 3 In Save As dialog the default filename is config cfg You could give it another name by yourself ...
Page 195: ...e es st to or re e C Co on nf fi ig gu ur ra at ti io on n 1 Go to System Maintenance Configuration Backup The following windows will be popped up as shown below 2 Click Browse button to choose the correct configuration file for uploading to the modem 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 3 3 1 14 4 5 5 S Sy...
Page 196: ...Password Type the password for authentication Use TLS Check this box to encrypt alert mail However if the SMTP server specified here does not support TLS protocol the alert mail with encrypted data will not be received by the receiver Enable E mail Alert Check the box to send alert message to the e mail box while the router detecting the item s you specify here 3 3 1 14 4 6 6 T Ti im me e a an nd ...
Page 197: ...PV3 services The SNMPv3 is more secure than SNMP through the encryption method support AES and DES and authentication method support MD5 and SHA for the management needs Available parameters are explained as follows Item Description Enable SNMP Agent Check it to enable this function Enable SNMPV3 Agent Check it to enable this function USM User USM means user based security mode Type a username whi...
Page 198: ...p Stop people manually disabling the wireless if they do not have the right of administration to access to the device Enable Choose it to enable the hardware button function Disable Choose it to disable the hardware button function LED Setup The LEDs blink always since VigorAP 900 is powered on Some people might not like that Therefore the function of LED is allowed to be disabled to make people f...
Page 199: ... to reboot your modem for ensuring normal operation and preventing unexpected errors of the modem in the future 3 3 1 14 4 1 10 0 F Fi ir rm mw wa ar re e U Up pg gr ra ad de e Before upgrading your modem firmware you need to install the Modem Tools The Firmware Upgrade Utility is included in the tools The following web page will guide you to upgrade firmware by using an example Note that this exa...
Page 200: ... way to view or diagnose the status of your VigorAP 900 3 3 1 15 5 1 1 S Sy ys st te em m L Lo og g At present only System Log is offered 3 3 1 15 5 2 2 S Sp pe ee ed d T Te es st t Click the Start button on the page to test the speed Such feature can help you to find the best installation place for Vigor AP ...
Page 201: ...managed Access Points LAN A or LAN B daily or weekly for viewing data transmission chart Click Refresh to renew the graph at any time The horizontal axis represents time the vertical axis represents the transmission rate in kbps 3 3 1 15 5 4 4 W WL LA AN N 2 2 4 4G GH Hz z S St ta at ti is st ti ic cs s Such page is used for debug by RD only ...
Page 202: ...VigorAP 900 User s Guide 192 3 3 1 15 5 5 5 W WL LA AN N 5 5G GH Hz z S St ta at ti is st ti ic cs s Such page is used for debug by RD only ...
Page 203: ...St ta at ti is st ti ic cs s Such page is used for debug or for the user to observe network traffic and network quality Available settings are explained as follows Item Description Show Chart Choose one of the items to display the statistics chart for wireless stations ...
Page 204: ... VigorAP 900 Visiting Time Choose it to have the statistics of the wireless stations which is visiting VigorAP 900 Daily Connected Number Analysis Daily Visiting Number Analysis Click this button to get analysis pie chart for daily connected wireless stations daily visiting wireless station Weekly Connected Number Analysis Weekly Visiting Number Analysis Click this button to get analysis pie chart...
Page 205: ...orAP 900 User s Guide 195 3 3 1 16 6 S Su up pp po or rt t A Ar re ea a When you click the menu item under Support Area you will be guided to visit www draytek com and open the corresponding pages directly ...
Page 206: ...VigorAP 900 User s Guide 196 This page is left blank ...
Page 207: ...ts for reaching the target of managing wireless network See the following figure In the above figure VigorAP 900 is used to control the wireless network connection It can separate the wireless traffic between accessing internal server and the usage of video Wireless station connecting to VigorAP 900 with SSID 2 can get the IP address with the network segment of 192 168 1 0 24 LAN A wireless statio...
Page 208: ...In the page of Operation Mode click AP mode for 2 4GHz Wireless and 5GHz Wireless 2 Open Wireless LAN 2 4GHz General Setup and then Wireless LAN 5GHz General Setup Choose the subnet LAN B for SSID 1 and choose LAN A for SSID 2 Specify the wireless channel Then click OK to save the configuration ...
Page 209: ...less LAN 5GHz Security Settings Set the encryption method and set the password for SSID 1 and SSID 2 respectively 4 Open LAN General Setup to configure the settings for enabling DHCP server on LAN A LAN B If there is a DHCP server configured in the same network segment skip this step ...
Page 210: ...ing to VigorAP 900 with SSID 1 can get the IP address assigned by LAN B 192 168 2 0 24 for accessing the internal server The wireless equipment connecting to VigorAP 900 with SSID 2 can get the IP address assigned by LAN A 192 168 1 0 24 for using the video audio uploading and downloading services ...
Page 211: ...e It is suggested to use Universal Repeater Mode on AP900 with a distinguishable SSID to extent the wireless signal from Vigor router e g Vigor2830n LAN IP 192 168 1 1 Enable DHCP Server SSID DrayTek XXX Channel 6 Security Mode Mixed WPA WPA2 LAN IP 192 168 1 2 SSID DrayTek XXX X Channel 6 Security Mode Mixed WPA WPA2 S Se et tt ti in ng g L LA AN N o on n V Vi ig go or r2 28 83 30 0n n In this ex...
Page 212: ... 2 Enable the DHCP Server 3 Set the DHCP IP range 4 Click OK 3 Go to Online Status Physical Connection to check if WAN is connected S Se et tt ti in ng g W Wi ir re el le es ss s L LA AN N o on n V Vi ig go or r2 28 83 30 0n n 1 Please go to Wireless LAN General Setup ...
Page 213: ... SSID 4 Choose a channel Note To avoid signal interference it s suggested to do a Scan in Wireless LAN AP Discovery and choose an unoccupied or not so crowded channel 5 Click OK 2 Setting the Security Please go to Wireless LAN Security 1 Choose the Mode 2 Give a Pre Shared Key Note The Mode and Pre shared Key will be needed when setting on AP900 and it s suggested to memorize them 3 Click OK ...
Page 214: ...r S Se et tt ti in ng g L LA AN N o on n A AP P9 90 00 0 Here we need to set AP900 using only one network segment which is correspondent to the one used by Vigor2830n Also the DHCP Server should be disabled so users will be assigned IP addresses by Vigor2830n 1 Please go to Wireless LAN General Setup and remove the tick on Enable 2 Subnet Please click OK to save setting ...
Page 215: ...address of AP900 can t be the same as it of Vigor2830n 2 Disable the DHCP Server 3 Click OK C Co on nf fi ig gu ur ri in ng g S Se et tt ti in ng gs s f fo or r U Un ni iv ve er rs sa al l R Re ep pe ea at te er r M Mo od de e o on n A AP P9 90 00 0 1 Please go to Wireless LAN Access Point Discovery and click Scan ...
Page 216: ... 3 A window will pop up Please enter the security information of Vigor2830n in it and click OK 4 Confirm the Universal Repeater connection is up We can launch the Command Prompt cmd exe on a wireless client of AP900 to ping Vigor2830 to confirm the Universal Repeater connection has been established successfully ...
Page 217: ...eneral Setup Make SSID and Channel settings the same as configured for Vigor2830n 2 Please go to Wireless LAN Security Settings Make SSID and Channel settings the same as configured for Vigor2830n U Us si in ng g t th he e W Wi ir re el le es ss s S Se er rv vi ic ce e o of f A AP P9 90 00 0 1 Choose the SSID of AP900 2 Enter the SSID key ...
Page 218: ...VigorAP 900 User s Guide 208 3 Confirm the IP address has been acquired 4 Confirm connection by ping 1 Test the connection to Vigor2830n 2 Test the connection to Internet ...
Page 219: ...actory default setting if necessary If all above stages are done and the modem still cannot run normally it is the time for you to contact your dealer for advanced help 5 5 1 1 C Ch he ec ck ki in ng g I If f t th he e H Ha ar rd dw wa ar re e S St ta at tu us s I Is s O OK K o or r N No ot t Follow the steps below to verify the hardware status 1 Check the power line and cable connections Refer to...
Page 220: ...lled failed please do the steps listed below to make sure the network connection settings is OK F Fo or r W Wi in nd do ow ws s The example is based on Windows 7 Professional Edition As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Open All Programs Getting Started Control Panel Click Network and Sharing Center 2 In the fol...
Page 221: ...igorAP 900 User s Guide 211 4 Select Internet Protocol Version 4 TCP IP and then click Properties 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK ...
Page 222: ...e 212 F Fo or r M Ma ac c O Os s 1 Double click on the current used Mac Os on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure IPv4 ...
Page 223: ...orrectly F Fo or r W Wi in nd do ow ws s 1 Open the Command Prompt window from Start menu Run 2 Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear 3 Type ping 192 168 1 2 and press Enter If the link is OK the line of Reply from 192 168 1 2 bytes 32 time 1ms TTL 255 will appear 4 If the line does not appear please check the IP address setting of...
Page 224: ...you pressing The password of factory default is null S So of ft tw wa ar re e R Re es se et t You can reset the modem to factory default via Web page Go to System Maintenance and choose Reboot System on the web page The following screen will appear Choose Using factory default configuration and click OK After few seconds the modem will return all the settings to the factory settings H Ha ar rd dw ...
Page 225: ...for the modem again to fit your personal request 5 5 5 5 C Co on nt ta ac ct ti in ng g D Dr ra ay yT Te ek k If the modem still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel free to send e mail to support draytek com ...
