Home

DrayTek_UG-VigorAP

1. Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 11 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 78 Dr ay Tek 3 7 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has
2. The horizontal axis represents time the vertical axis represents the transmission rate in kbps 3 14 4 WLAN 2 4GHz Statistics Such page is used for debug by RD only Diagnostics gt gt WLAN 7 4GHz Statistics 4uUto Refresh Refresh Ts success 2171 Re success 30946 Ts retry count 44 Re with CRC 70299 Ts fail to Rew ACK after retry 4 Rx drop due to out of resource 0 RTS Success Rew CTS o Rx duplicate frame 3 RTS Fail Rey CTS o False CCA one second 0 TransmitCountFramoas 52 MulticastRecelvedFrameCount 0 TransmittedFragmentCount 2171 RealFcsErrCount 70299 TransmittedFramecount 2171 WEPUndecryptableCount 0 MulticastTransmittedFrameCount O MultipleRetryCount 0 TransmittedAMSbUCount o ACKF ailureCount 0 TransmittedQctetsInaAMsbu E RecevedsaMsoUCount 0 TransmittedAMPoUCount o ReceivedOctesInaMsbuUCount g TransmittedMPDUsInAMPDOUCount O MPDUInReceivedsamMPbUCount 0 TransmittedOctetsInAMPDUCount oO fAnyStaFortyIntolerant 0 SSID1 SSID Packets Received 1 Packets Received o Fackets Sent 1 Packets Sent o Bytes Received 155 Bytes Received o Byte Sent gg Byte Sent Error Packets Received 0 Error Packets Received o Drop Received Packets o Drop Received Packets o Dr ay Tek 173 VigorAP 900 User s Guide 3 14 5 WLAN 5GHz Statistics Such page is used for debug by RD only Diagnostics gt gt WLAN GHz Statistics 4uto Refresh Refresh Ta success 1066 Ra success 19646 Tx retry count o Re with CEC 5508 Ts fail
3. F TE 3 Te si re i P r S y 7 fi be A B a l aa N F a U A U e a O Y ITA y j al d oe F q n Pa i k a h a ri E i d i i 3 i F k j J e _ d T Seah Concurrent Dual Band AP WANS LAL Ses Your reliable networking solutions partner User s Guide V1 5 VigorAP 900 User s Guide ii Dray Te k VigorAP 900 Concurrent Dual Band AP User s Guide Version 1 5 Firmware Version V1 1 6 Date September 10 2015 Dray Tek iii VigorAP 900 User s Guide Intellectual Property Rights IPR Information Copyrights Trademarks All rights reserved This publication contains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written permission from the copyright holders The following trademarks are used in this document Microsoft is a registered trademark of Microsoft Corp Windows Windows 95 98 Me NT 2000 XP Vista 7 and Explorer are trademarks of Microsoft Corp Apple and Mac OS are registered trademarks of Apple Inc Other products may be trademarks or registered trademarks of their respective manufacturers Safety Instructions and Approval Safety Instructions Warranty Be a Registered Owner Firmware amp Tools Updates VigorAP 900 User s Guide Read the installation guide thoroughly before you set up
4. Tx Power The default setting is the maximum 100 Lowering down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 46 Dr ay Tek 3 5 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 2 4GHz gt gt Security Settings SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Mode Mixed WiPA WRAL IPSE w Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms TKIP AES TKIP AES key Renewal 3600 seconds Range 600 36000 seconds Default 3600 Interval seconds WEP Key 1 a Key 2 hes Key 3 7 keyg Sa 802 18 WEP Disable Enable a Available settings are explained as follows Item Description Mode There are several modes provided for you to choose I WPA PSh Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WP
5. Scan See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP Each item is explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs VigorAP 900 User s Guide 52 Dr ay Tek 3 5 6 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt gt WMM Configuration WMM Configuration Setto Factory Default WMM Capable OEnable Disable WMM Parameters of Access Point Aifsn CWMin CWMaz AckPolicy LI E LI LI WMM Parameters of Stat
6. 1 3 Hardware Installation to execute the hardware installation again And then try again 191 VigorAP 900 User s Guide 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings After trying the above section if the link is stilled failed please do the steps listed below to make sure the network connection settings is OK For Windows The example is based on Windows 7 Professional Edition As to the El examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Open All Programs gt gt Getting Started gt gt Control Panel Click Network and Sharing Center pa UTILS gt Java us Network and sharing Center Personalization E Recove ry 2 Inthe following window click Change adapter settings SE Network and Sharing Center G e us Control Panel All Control Panel Items Network and Sharing Center Control Panel Home View your basic network information and set up connecti Change adapter settings A jo ange advanced sharing WITH PRO SYR Metwork 28 settings This computer View your active networks be Network 28 Work network 3 Icons of network connection will be shown on the window Right click on Local Area Connection and click on Properties Local 4rea Connection Local Metwaork 28 ioe sabl Inteli PROS1O00 E
7. Note Please set default gateway no matter choose LAN A or LAN B Periodic Inform Settings Enable Interval Time second s STUN Settings O Enable Disable server Port Minimum Keep Alive Period Seconds Maximum Keep Alive Period second s Available settings are explained as follows Item Description ACS Settings URL Username Password Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to Auto Configuration Server user s manual for detailed information The setting for URL can be domain name or IP address CPE Settings Such information is useful for Auto Configuration Server ACS Enable Check the box to allow the CPE Client to connect with VigorAP 900 User s Guide 164 Dray Tek Auto Configuration Server On Choose the interface LAN A or LAN B for VigorAP 900 connecting to ACS server Port Sometimes port conflict might be occurred To solve such problem you might change port number for CPE DNS Server IP Address Such field is to specify the IP address if a URL is configured with a domain name Primary IP Address You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IP Address You can specify secondary DNS server IP address h
8. Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings Dray Tek 141 VigorAP 900 User s Guide 3 10 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 5GHz gt gt Access Control SSID 1 SSID SSID 3 SSID 4 SSID OrayTekSG L4AN 4 Policy MAC Address Filter Index MAC Address Client s MAC Address l Limit 64 entries Backup ACL Cfg Upload Fram File Available settings are explained as follows Item Policy MAC Address Filter Client
9. RX Bytes Displays the total number of received size at the LAN interface Dr ay Tek 29 VigorAP 900 User s Guide This page is left blank VigorAP 900 User s Guide 30 Dr ay Te k 3 Advanced Configuration This chapter will guide users to execute advanced full configuration As for other examples of application please refer to chapter 5 1 2 Open a web browser on your PC and type http 192 168 1 2 The window will ask for typing username and password Please type admin admin on Username Password for administration operation Now the Main Screen will appear Be aware that Admin mode will be displayed on the bottom left side Dray Tek Dray Tek Quick Start Wizard Online Status Operation Mode LAHN Central AP Management Wireless LAN AGHZ Wireless LAN SiGHz RADIUS Servar Applications System Maintenance Diagnostics FAQ Application Mote Product Registration All Rights Reserved Admin mode Universal Repeater Mode VigorAP 900 Syetem Status Model VWigor P 900 Device Hame 2 VigorAP So Firmware Version 27 1 6 Build Date Time 2 S900 Fri Awg 21 15 5249 CST AM5 System Uptinve Dd M1036 Operation Mode Universal Repeater system LAN A Memory Total 62208 kB MAC Address 00 10 AA 9E 28 38 Memory Left 33156 k IP Address 192 168 1 2 L Cached Memory 14464 kB 62206 kB IP Mask 255 255 255 0 MAC a
10. message here Display current selected SSID Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS Display encryption mode None WEP TKIP AES etc of VigorAP 900 Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS 51 VigorAP 900 User s Guide is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes 3 5 5 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt Access Point Discovery Access Point List BSSID RSSl Channel Encryption Authentication
11. By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 5GHz gt Security Settings SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTekSG LAN 4 Mode Missed W PAHWPAZ PSE w Set up RADIUS Server if 802 18 is enabled WPA WPA Algorithms OTEIP AES TKIP AES Pass Phrase Key Renewal Interval 3600 seconds WEP Key 1 y Key z _S a Key 3 y Key 4 eee 802 1 WEP Disable Enable i Available settings are explained as follows Item Description Mode There are several modes provided for you to choose IWPA2 PSK Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 802 1x Dr ay Tek 123 VigorAP 900 User s Guide WPA Algorithms Pass Phrase Key Renewal Interval PMK Cache Period Pre Authentication VigorAP 900 User s Guide Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutu
12. Cancel Give up the access control set up Backup Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Restore Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 9 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 5GHz gt WPS Wi Fi Protected Setup C Enable WPS Wi Fi Protected Setup Information WPS Configured Yes WPS SSID Draytek_5SG LANA WPS Auth Mode Mixed WRATtWPAS PSK WPS Encryp Type TEIP AES Device Configure Status Idle Note WPS can help your wireless client automatically connect ta the Access point WPS is Disabled WPS is Enabled Waiting for WPS requests from wireless clients Available settings are explained as follows Item Description Enable WPS Check this box to enable WPS setting WPS Configured Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900r Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Click Start PBC to invoke Push Button style WP
13. Encryption Mode TKIP for WPA AES for WPA2 Pre Shared Key PSK draytek2630 Type 8 63 ASCII character or 64 Hexadecimal digits leading by Ox for example cfgsOla2 or Ox6SSabed WEP Eri cryption Mode Pee er Rey 1 For 64 bit WEP key Typa 5 ASCII character or 10 Hexadecimal digits leading by Ox for example AB312 of 0x4142333132 For 128 bit WEP key Type 13 ASCII character or 26 Hexadecimal digits leading by Ox for example 123456789abc or Oxs03132333435 3637 38394914243 3 Lox Ccaneet 1 Choose the Mode 2 Give a Pre Shared Key Note The Mode and Pre shared Key will be needed when setting on AP800 and it s suggested to memorize them 3 Click OK Dr ay Tek 185 VigorAP 900 User s Guide Setting Operation Mode on AP900 Please go to Operation Mode and choose Universal Repeater Operation Mode Configuration Wireless LAN 2 4GHz AP AP 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them AP Bridge Point to Point AP 900 will connect to another AP 900 which uses the same mode and all wired Ethernet clients of both AP 900s will be connected together AP Bridge Point to Multi Point AP 900 will connect to up to four 4P 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together AP Bridge WDS AP 900 will connect to up to four AF 900s which uses the
14. Server Users Profile Username Type a new name for the user profile Password Type a new password for such new user profile Confirm Password Retype the password to confirm it Configure Add Make a new user profile with the name and password specified on the left boxes Cancel Clear current settings for user profile Delete Selected Delete the selected user profile s Delete All Delete all of the user profiles Authentication Client This internal RADIUS server of VigorAP 900 can be treated as the external RADIUS server for other users Specify the client IP and secret key to make the wireless client choosing VigorAP 900 as its external RADUIS server Client IP Type the IP address for the user to be authenticated by VigorAP 900 when the user tries to use VigorAP 900 as the external RADIUS server Secret Key Type the password for the user to be authenticated VigorAP 900 User s Guide 156 Dr ay Te k by VigorAP 900 while the user tries to use VigorAP 900 as the external RADIUS server Confirm Secrete Key Type the password again for confirmation Configure Add Make a new client with IP and secrete key specified on the left boxes Cancel Clear current settings for the client Delete Selected Delete the selected client s Delete All Delete all of the clients Backup Click it to store the settings RADIUS configuration on this page as a file Rest
15. s Guide Packet Packet Station A Station B It is similar to automatic Bandwidth Limit The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment Please note that Airtime Fairness of 2 4GHz and 5GHz are independent But stations of different SSIDs function together because they all use the same wireless channel IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Wireless LAN 56Hz gt gt Airtime Fairness C Enable Airtime Fairness Triggering Client Number 2 64 default 2 Available settings are explained as follows Item Description Enable Airtime Try to assign similar airtime to each wireless station by Fairness controlling TX traffic Airtime Fairness Click the link to display the following screen of airtime fairness note A 172 17 3 110 vireless ap_af_note asp Airtime Fairness Note Airtime is the time where a wireless station occupies the wirelees channel Airtime Fairness function tries to assign similar airtime to each station by controlling TX traffic IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless i performance
16. Administration Password Administrator Settings Account Confirm Password Note Authorization can contain only a z 4 2 0 9 e M AX i lt gt 7 Available settings are explained as follows Item Description Account Type the name for accessing into Web User Interface Password Type in new password in this filed Confirm Password Type the new password again for confirmation When you click OK the login window will appear Please use the new password to access into the web user interface again VigorAP 900 User s Guide 166 Dr ay Te k 3 13 4 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Configuration Backup Restoration Restoration Select a configuration file Click Restore to upload the file Click Backup to download current running configurations as a file 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file File Download i You are downloading the file config chg From 192 168 1 1 Would you like to open the file or save it to your computer Always ask before opening this type of file 3 In Save As dialog the default filename is config cfg You could give it another name by yourse
17. DrayTek LAN B H B d sp ma o oD ma o Hide SSID Prevent SSID fram being scanned lenlato ARK Ihtieoloce ehant Potatiognc4 saith tho como COTA earnnnt orraze wirod Ore Same value for 2 4GHz Wireless LAN GHz gt gt General Setup and 5GHz General Setting IEEE 602 11 Enable Wireless LAN O Enable Limit Client 3 64 Default 64 Mode Mixed lla iin Enable 2 Subnet Simulate 2 APs Isolate VLAN ID IGMP Hide SSID R Sunet Member O Untagged Snooping o ei E 2 0 oO o O 3 Of E o c Lana m oO b m VigorAP 900 User s Guide Dray Tek 11 Open Wireless LAN 2 4GHz gt gt Security and Wireless LAN 5GHz gt gt Security Configure Security as 12345678 for both pages Click OK to save the settings Wireless LAN 7 4GHz gt gt Security Settings SSID 1 SSID SSID 3 SSID 4 SSID apy00 Bandsteering Mode Missed WRA IPAS IPSE ka Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms OTKIP aeS TKIP AES al Interval 3600 second s 600 360005 Default 36005 Pass Phrase Same value for 2 4GHz and SGHz Wireless LAN GHz gt gt Security Settings SSID 3 SSID 4 Dray TekSG LAN A Missed W PA HWPAZN PSE be Set up RADIUSNSerer if 902 1 is enabled WPA WEA Algorithms OTKIP OasaesS TKIP AES Pass Phrase Key Renewal Interval WEP 12 Now VigorAP 900 will let the wireless clients connect to less congested wir
18. Status Idle Note WPS can help your wireless client automatically connect ta the Access point WPS is Disabled WPS is Enabled Waiting for WPS requests from wireless clients Available settings are explained as follows Item Enable WPS WPS Configured WPS SSID WPS Auth Mode WPS Encrypt Type Configure via Push Button Configure via Client PinCode Dray Tek Description Check this box to enable WPS setting Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here Display current selected SSID Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS Display encryption mode None WEP TKIP AES etc of VigorAP 900 Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both ACT and 5G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button Both ACT and 5G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two 143 VigorAP 900 User s Guide minutes You need to setup WPS within two minutes 3 10 5
19. Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode After finishing this web page configuration please click Next to continue VigorAP 900 User s Guide 24 Dr ay Tek 2 7 4 Configuring 5GHz Wireless Settings VigorAP 900 offers SGHz wireless connection capability You can setup 5GHz features in Quick Start Wizard first Once the USB 5GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt gt Wireless LAN 5GHz Operation Mode AP AF 900 acts as a bridge between wireless devic
20. Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 i The performance bottleneck is wireless connection Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number After finishing this web page configuration please click OK to save the settings Note Airtime Fairness function and Bandwidth Limit function should be mutually exclusive So their webs have extra actions to ensure these two functions are not enabled simultaneously VigorAP 900 User s Guide 132 Dray Tek 3 9 9 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as hour and reconnection time can be set as 1 day Thus the guest can finish his job within one hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP Wireless LAN 5GHz gt gt Station Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTekSG LAn A Enable
21. This device will wait for any wireless client connecting to it through WPS WPS Press the button for more than 6 seconds VigorAP 900 will disable the option of Enable AP Management under LAN gt gt General Setup and reset to the factory IP address 192 168 1 2 Note that the disabled AP Management must be enabled manually if enabled AP Management is required aano yaou BW BR WB WR NAPALI Le OFL Factory Restore the default settings Usage Turn on VigorAP 900 Press the button and keep for more than 10 seconds Then the device will restart with the factory default configuration LAN B Connecter for xDSL Cable modem Giga level or router LAN A a Connecter for xDSL Cable modem Giga level computer or router 1 PWR Connecter for a power adapter i USB Connector for a printer H see eo 2s A oO oe a gr ee l Hu HO Wout UUU UU UU Luror VigorAP 900 User s Guide 4 Dr ay Tek ON OFF Power switch 1 3 Hardware Installation This section will guide you to install the VigorAP 900 through hardware connection and configure the device s settings through web browser Before starting to configure VigorAP 900 you have to connect your devices correctly 1 3 1 Wired Connection for PC in LAN 1 Connect VigorAP 900 to ADSL modem router or switch hub in your network through the LAN A port of the access point by Ethernet cable 2 Connect a comp
22. Weekly 5G Connected amp Not Connected Number Analysis Peak of Connected Station Number Time 2015 8 22 Sun 2015 9 3 Thu Number 0 Off peak of Connected Sation Number Time 2015 8 22 Sun 2015 9 3 Thu Number 0 Peak of Nearby Station Number Time 2015 9 2 WWed Number 1 E SG Not Connected Number E 5G Connected Number Off peak of Nearby Station Number Time 2015 8 22 Sun 2015 9 2 Wed Number 0 Time 2015 9 3 Thu Number 0 176 Dr ay Tek 3 15 Support Area When you click the menu item under Support Area you will be guided to visit www draytek com and open the corresponding pages directly FAQ Application Note Product Registration Dray Tek 177 VigorAP 900 User s Guide This page is left blank VigorAP 900 User s Guide 178 Dr ay Te k Applications 4 1 How to set different segments for different SSIDs in VigorAP 900 VigorAP 900 supports two network segments LAN A and LAN B for different SSIDs With such feature the user can dispatch SSIDs with different network segments for reaching the target of managing wireless network See the following figure Dual LAN LAN B 2 4G s 7 VigorSwitch ss x Mail Server 5 E FTP Server hn 3 D on SSID 1 i VigorSwitch par LANA lt a A IP Camera P2261 e Sa IP Phone 25 Music Movie In the above figure VigorAP 900 is used to control the wireless network connection It can separate the wireless traffic between accessing internal se
23. s MAC Address Add Delete Edit Cancel VigorAP 900 User s Guide Description Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter a Activate MAC address filter Blocked MAC address filter Display all MAC addresses that are edited before Manually enter the MAC address of wireless client Add a new MAC address into the list Delete the selected MAC address in the list Edit the selected MAC address in the list Give up the access control set up 142 Dr ay Tek Backup Restore Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 10 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 5GHz gt WPS Wi Fi Protected Setup C Enable WPS Wi Fi Protected Setup Information WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Device Configure es Draytek_5SG LANA Mixead WPATWPAZI PSK TEIPSAES
24. 2 4GHz gt Airtime Fairness C Enable Airtime Fairness Triggering Client Number 2 64 default 2 Available settings are explained as follows Item Description Enable Airtime Try to assign similar airtime to each wireless station by Fairness controlling TX traffic Airtime Fairness Click the link to display the following screen of airtime fairness note 172 17 3 110 vwireless ap_af_note asp Airtime Fairness Note Airtime is the time where a wireless station occupies the wirelees channel Airtime Fairness function tries to assign similar airtime to each station by controlling Tx traffic IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 86 Dr ay Te k Note Airtime Fairness function and Bandwidth Limit function should be mutually exclusive So their webs have extra actions to ensure these two functions are not enabled s
25. 3 After finishing this web page configuration please click OK to save the settings A new schedule profile has been created and displayed on the screen Applications gt Schedule Schedule Enable Schedule Schedule Configuration Index Setting Status i 2013 July 1 12 0 0 0 Routine Tue Fri Sun M Add 3 12 2 Apple iOS Keep Alive To keep the wireless connection via Wi Fi on 10S device in alive VigorAP 900 will send the UDP packets with 5353 port to the specific IP every five seconds Applications gt gt Apple iOS Keep Alive COl Enable Apple iOS Keep Alive Apple 10S Keep Alive Apple iOS Keep Alive can keep Wifi connection of iOS device by sending UDP port 5353 packets every 5 seconds Index Apple iOS Keep Alive IP Address Index Apple iOS Keep Alive IP Address Available settings are explained as follows Item Description Enable Apple iOS Keep Check to enable the function Alive Index Display the setting link Click the index link to open the configuration page for setting the IP address Apple iOS Keep Alive IP Display the IP address Address Dr ay Tek 159 VigorAP 900 User s Guide 3 12 3 Temperature Sensor A USB Thermometer is now available that complements your installed DrayTek AP installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating During summer in particular it
26. 697 me 64 bytes from 192 168 1 1 icmp_seg 4 ttl 255 time 0 716 ms 64 bytes from 192 165 171 temp segqes ttl 255 timesh 731 me from 192 160 1 1 temp seg 4 thl 255 tinesh 72 fie 197 1661 9 prifig statistics F packet troansiitted 5 packets recerved packet loss rourd trip win ava mas B 697 E 7425 8 755 M Vigorid draytek f 5 4 Backing to Factory Default Setting If Necessary Sometimes a wrong connection can be improved by returning to the default settings Try to reset the modem by software or hardware Q Warning After pressing factory default setting you will loose all settings you did before Make sure you have recorded all useful settings before you pressing The password of factory default is null Software Reset You can reset the modem to factory default via Web page Go to System Maintenance and choose Reboot System on the web page The following screen will appear Choose Using factory default configuration and click OK After few seconds the modem will return all the settings to the factory settings System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration Hardware Reset While the modem is running press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the modem will restart with the de
27. AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 5GHz gt gt Access Point Discovery Access Point List Select SSID BSSID RSSI Channel Encryption Authentication Scan Note During the scanning process about 5 seconds no station is allowed to connect with the AP AP s MAC Address Select as Universal Repeater AP s SSID Select Each item is explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box
28. ATER 144 3 10 6 Universal Repeater ccccccsssssccccceesseeeeecseeecececeausececsseaaececesseaseeeceseaeeeesessausessssaaass 145 3 10 7 WMM Configuration cccccccceseeccceeceseeeeeeeeeeeeceeeeeseceeeesaeeseseeeeeesssseaaseeeeeeesssaaaeseeeees 147 3 10 8 Bandwidth Management cccccccccssssececesecesseeeeeeeeseeeseueeeesegeeeesaeeeeseeeeenseneessaneees 149 3 10 9 Airtime TIMING SS sate scsi eatsenscionaneinsininnclacaactoseniocceeceastalseangeniahieapaeudeibeaeosciesenosutsceadinbesidiedaeeceencs 150 3 10 10 Statim GOMUOL sssaaa iaa a aaa a ndeur ton Diaa 152 SOTOA eere e AE E E E ES 153 SHEAS E A E E E E EE TA E EEA E 154 Oe FAAS AVET T A A TAN 156 il POD INC alll US a a E E A 157 SHM ES e Eo A EA EEE EA ee E E A 157 3 12 2 Apple IOS Keep Alive cccccccccesecccceeeceeeeeeeeeeeeseeeesseeeeeesseseeasueeeeesssaaaaseeeeeeesssaagaeess 159 3 12 3 Temperature Sens asinen ninenin ASEE EEEE NAE EAEE EEEE EENE 160 3 13 SyStEM MaINteNANCE cccccccccseeeseeceeeceeeeesseeceeeeessaeeeeeeeeeesseeeueeeeeeeesseeaseeeeeeeessaaageeeeeeees 162 CEEE SUS UNS oc casey E cucu na A E A AEE TET 162 SA L ER OO e E E E E seueeesseatecenonseeseoseg esse 164 3 13 39 Administ ator PaSS WOM an casteis anniina NE A E eA a EEEa einen iiaa 166 2134A OOF MO MR LUO MN AC UNO carene n a e aA Ea 167 eo OY SOG N AE eoe a R A E E AE E A 168 Sn oc UMO mA 1 ANC ea E E E E E E 169 Sal NNE N a a 170 O COOL VSTO errien EE E EEA E 171 3 13 9 F
29. Before you use the Vigor modem please get acquainted with the LED indicators and connectors first LAN B b LAN Ad LAN AZ un 5 MORA P b aF 2 aet VigorAP 900 cp eee il i m7 j Explanation ACT Off The system is not ready or is failed The system is ready and can work normally USB A USB device is connected and active The data is transmitting 2 4G Wireless function is ready Off Wireless function is not ready Data is transmitting sending receiving 5G Wireless function is ready Wireless function is not ready Data is transmitting sending receiving LAN AI A4 A normal connection rate with 100M 1000M is through its corresponding port LAN is disconnected Data is transmitting sending receiving LAN B A normal connection rate with 100M 1000M is through its corresponding port LAN is disconnected Data is transmitting sending receiving Dray Te k 3 VigorAP 900 User s Guide Interface Description WLAN ON Press the button and release it within 2 seconds When the wireless function is ready the 2 4G 5G blue LED on front panel will be on WLAN OFF Press the button and release it within 2 seconds to turn off the WLAN function When the wireless function is not ready 2 4G 5G blue LED on front panel will be off WLAN ON OFF WPS gt WPS When WPS function is enabled by web user interface press this button for more than 2 seconds
30. Click the link of RADIUS Server to access into the following page for more settings VigorAP 900 User s Guide 48 Dr ay Te k RADIUS Server Cluse internal RADIUS Server IP Address al Port ole Shared Secret DrayTek Session Timeout Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 11 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings Dr ay Tek 4
31. Connection Time 1 hour T Reconnection Time 1 day T Display All Station Control List Note Once the feature is enabled the connection time quota will apply to each wireless client identified by MAC address OK Cancel Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Use the drop down list to choose the duration for the Reconnection Time wireless client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined 1440 min i User defined 30 min 1 hour 2 hours 4 hours ip days Display All Station All the wireless stations connecting to Vigor router by using Control List such SSID will be listed on Station Control List After finishing all the settings here please click OK to save the configuration Dr ay Tek 133 VigorAP 900 User s Guide 3 9 10 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authenticatio
32. Mask Default Gateway Lease Time Poimary ONS Server Secondary ONS Server 3 haak Cancel 1 Enter the IP Address and Subnet Mask Note The IP address of AP900 can t be the same as it of Vigor2830n 2 Disable the DHCP Server 3 Click OK Configuring Settings for Universal Repeater Mode on AP900 1 Please go to Wireless LAN gt gt Access Point Discovery and click Scan Wireless LAN 2 4GHz gt Access Point Discovery Access Point List Select SSID BSSID RSSI Channel Encryption Authentication Scan See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP AP s MAC Address aP sSSID sd Select as Universal Repeater 5E Dr ay Tek 187 VigorAP 900 User s Guide 2 Choose the SSID of Vigor2830n which is Draytek 2830 in this example and click OK Wireless LAN gt gt Access Point Discovery Access Point List Select SSID BSSID RSS Channel Encryption Authentication 00 50 7f 38 61 2 100 1 AES WPA PSE isolate2 00 50 7f 38 61 2d 100 1 AES WPA2 PSK isolates 00 50 7Ff 38 61 2 e 100 1 AES WRAP SK j 6 l Ji 1 w_ 700 00 50 7f f6 0e 50 100 8 TRIP AES Mixed WPA WPA2 PSK FAE 282222 00 50 7f 77 d0 e8 100 4 AES WPA2 PSK Piet 00 50 7Ff c9 1e 25 100 11 TKIP AES Mixed WPA WPAZ PSE DrayTek 00 50 7f 66 66 64 gp 1 MONE Sean see Channel Statistics Note During the scanning process about 5 sec
33. Server Cluse internal RADIUS Server IP Address Port Shared Secret Session Timeout Available settings are explained as follows Dray Tek Item Use internal RADIUS Server IP Address Port Shared Secret Description There is a RADIUS server built in VigorAP 900 which is used to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 11 RADIUS Server to configure settings for internal server of VigorAP 900 Enter the IP address of external RADIUS server The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both 125 VigorAP 900 User s Guide sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings 3 9 3 Access Control For additional security of wireless access the Access Control facility allows you
34. T FAEN il aa si Gara MAC Address 00 10 4A 9E 26 38 Channel il ini IP Addrass 192 168 2 2 IP Mask 255 255 255 0 Driver Vergeon 2 7 1 5 Wireless LAN 5GHz Universal Repeater 4G MAC Address z OO 1D AA 96 28 38 MAC Address 06 10 4A 9E 28 38 SSID OrayTekSG LAN 4 Seip f Channel 36 Channel 11 Driver Version 2 7 1 5 31 VigorAP 900 User s Guide 3 1 Operation Mode This page provides several available modes for you to choose for different conditions Click any one of them and click OK The system will configure the required settings automatically Operation Mode Configuration Wireless LAN 2 4GHz AP AFP 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them AP Bridge Point to Point AF 900 will connect to another AP 900 which uses the same mode and all wired Ethernet clients of both AP 900s will be connected together AP Bridge Point to Mutti Point AP 900 will connect to up to four AP 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together AP Bridge WDS AF 900 will connect to up to four AP 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together This mode is still able to accept wireless clients Universal Repeater AF 900 can act as a wireless repeater it can be Station a
35. above this button AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can Select as Universal Repeater VigorAP 900 User s Guide specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP In Universal Repeater mode WAN would work as station mode and the wireless AP can be selected as a universal repeater Choose one of the wireless APs from the Scan list M4 Dray Tek 3 10 6 Universal Repeater The access point can act as a wireless repeater it can be Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to serve all wireless stations within its coverage Note While using Universal Repeater mode the access point will demodulate the received signal Please check if this signal is noise for the operating network then have the signal modulated and amplified again The output power of this mode is the same as that of WDS and normal AP mode Wireless LAN 5GHz gt gt Universal Repeater Universal Repeater Parameters SSID MAC Address Optional Channel 5180MHz Channel 36 v Security Mode Encryption Type WEP Keys key 1 O Key 2 Key 3 Key 4 Note If Channel is modified the Channel setting of 4P would also be changed Universal Repeater IP Configuration Connection Type DHCP we Rou
36. based on this MAC address Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 243 MHz Channel 6 AutoSelect 2412MHz Channel 1 2417 MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 2432MHz Channel 5 2437MHz Channel 6 2442MHz Channel T 244 7MHz Channel 3 2452MHz Channel 9 2457MHz Channel 10 2462MHz Channel 11 24G7MHz Channel 12 2472MHz Channel 13 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Choose LAN A or LAN B for each SSID Select Disabled WEP TKIP or AES as the encryption algorithm Four peer MAC addresses are allowed to be entered in this page at one time This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the
37. been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Policy MAC Address Filter Indes MAC Address Clent s MAC Address l l Limit 256 entries Backup ACL Cfg Upload From File Available settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter ve Disable Activate MAC address filter Blocked MAC address filter MAC Address Filter Display all MAC addresses that are edited before Client s MAC Manually enter the MAC address of wireless client Address Add Add a new MAC address into the list Delete Delete the selected MAC address in the list Edit Edit the selected MAC address in the list Cancel Give up the access control set up Dr ay Tek 79 VigorAP 900 User s Guide Backup Restore Click it to store the settings MAC addresses on
38. critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic sent from access points to clients than the other way around This is essential for ensuring predictable performance and quality of service as well as allowing 802 11n and legacy clients to coexist on the same network Without airtime fairness offices using mixed mode networks risk having legacy clients slow down the entire network or letting the fastest client s crowd out other users With airtime fairness every client at a given quality of service level has equal access to the network s airtime The wireless channel can be accessed by only one wireless station at the same time The principle behind the IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occupy too much airtime whereas the fast stations 11n become much slower Take the following figure as an example both Station A 11g and Station B 1 1n transmit data packets thr
39. double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Station List Click the Display button to open the Station List dialog It provides the knowledge of connecting wireless clients now along with its status code AP Discovery Click this button to open the AP Discovery dialog VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood This option is not available when AP is selected as the Operation Mode After finishing this web page configuration please click Next to continue Dr ay Tek 17 VigorAP 900 User s Guide 2 7 2 Configuring 2 4GHz Wireless Settings based on the Operation Mode In this page the advanced settings will vary according to the operation mode chosen on 2721 Advanced Settings for AP Bridge Point to Point When you choose AP Bridge Point to Point you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Note Enter the configuration of APs which AP 900 want to connect Phy Mode HTMIx Security QO Disabled WEP TKIP AES Peer MAC Address PL EE ee Available settings are explained as follows Item Description Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Security Select WEP TKIP or AES as the encryption algorithm Type the key number if required Peer MAC Add
40. first Once the USB 2 4GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt gt Wireless Security 27 4GH SSID 1 SSID 2 SSID 3 SSID 4 S510 DrayTek Lan 4 Wireless Security Settings Mode WPA Algorithms OTKIP OAES TKIP AES Key Renewal Interval seconds PME Cache Period minutes Pre 4uthentication Disable Enable Wireless 4GHz2 Security 2 4GHz Wireless SGHz Security SGHz Available settings are explained as follows Item Description Mode There are several modes provided for you to choose WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manual
41. following DNS PAA addresses Preferred DNS server Alternate DNS server C4 Dr ay Te k 13 VigorAP 900 User s Guide 2 5 Accessing to Web User Interface All functions and settings of this access point must be configured via web user interface Please start your web browser e g Firefox 1 Make sure your PC connects to the VigorAP 900 correctly Q Notice You may either simply set up your computer to get IP dynamically from the modem or set up the IP address of the computer to be the same subnet as the default IP address of VigorAP 900 192 168 1 2 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and type http 192 168 1 2 A pop up window will open to ask for username and password Pease type admin admin on Username Password and click OK Lonnect to 192 168 1 3 User name E admin Password k A C Remember mi password 3 The Main Screen will pop up Dray Tek VigorAP 900 System Status Quick Start Wizard Model 1 Vigor P 900 Online Status i Device Hame gt Vigora PaO l Firmware Version 1 14 6 Operation Mode T Build Date Time 2 S300 Fri Aug 21 15 52 49 CST A015 System Uptinne 2 Dd 418i Central AP Management Operation Mode Universal Repeater Wireless LAN PAGHI Wireless LAN GiGHz RADIUS Server System LAMN A Applications Memory Total 62208 kB MAC Address 00 10 AA GE 28 38 Syste
42. information related to wireless stations connected to VigorAP 900 and central AP management Such information also will be delivered to Vigor router e g Vigor2860 or Vigor2925 series and be shown on Central AP Management gt gt Event Log of Vigor router Central AP Management gt gt APM Log APM Log Information Clear Refresh Line wrap ld 17 42 35 kernel 20 02 at ia5 67 22 had associated successfully ld 17 42 35 kernel 20 04 af a5 6v2 had disassociated 3 3 3 Function Support List Click the Client tab to list the AP management functions that the Access Points support under different firmware versions Central AP Management gt Function Support List Client Model Name Function Name AP 900 Register DHCP Static IP i 2 4GHz StGH2 AP Mode Repeater Woda oooO O Sd o o e a a woenen OOOO SSC Sr r ee A a Traffic Graph Oan unao AD Mata rtin n Dr ay Tek 37 VigorAP 900 User s Guide Note DrayTek central wireless management AP Management lets control efficiency monitoring and security of your company wide wireless access easier to be managed Inside the web user interface we call central wireless management as Central AP Management which supports mobility client monitoring reporting and load balancing to multiple APs For central wireless management you will need a Vigor2860 or Vigor2925 series router there is no per node licensing or subscription required With the unif
43. is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and This option is available when WPA PSK or WPA2 PSK is selected as Security Mode Select TKIP or AES as the algorithm for WPA TKIP SES Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Choose DHCP or Static IP as the connection mode DHCP The wireless station will be assigned with an IP from VigorAP Static IP The wireless station shall specify a static IP for connecting to Internet via VigorAP DHCP E Static IP DHCP Type a name for the router as identification Simply use the default name This setting is available when Static IP is selected as Connection Type Type an IP address with the same network segment of the LAN IP setting of the router Such IP shall be different with any IP address in LAN This setting is available when Static IP is selected as 107 VigorAP 900 User s Guide Connection Type Type the subnet mask setting which shall be the same as the one configured in LAN for the router Default Gateway This setting is available when Static IP is selected as Connection Type Type the gateway setting which shall be the same as the default gateway conf
44. name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for wired PC in LAN Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box to enable IGMP Snooping Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change based on this MAC address 97 VigorAP 900 User s Guide Channel Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under
45. points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN 7 4GHz gt gt Roaming Enable Fast Roaming PMK Caching Cache Period 10 minutets 10 600 Default 103 Pre Authentication Note This function is only supported when WPA2 802 1 Is selected as the security mode Please open Wireless LAN 2 4GHz2 gt Security to check the security configuration DK Cancel Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings Dr ay Tek 63 VigorAP 900 User s G
46. serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 243 MHz Channel 6 AutoSelect 2412MHz Channel 1 241 MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 132MHz Channel 5 243 7MHz Channel 6 2442MHz Channel 7 244 MHz Channel 8 2452MHz Channel 9 245 MHz Channel 10 2462MHz Channel 11 246 MHz Channel 12 Extension Channel With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want Rate If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option Yigor N61 802 11n Wireless USB Adapter Utility General Setting Advance Setting Auto laun
47. set the maximum number of wireless stations which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode VigorAP 900 User s Guide 96 Dr ay Te k Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate LAN Isolate Member VLAN ID IGMP Snooping Mac Clone Dray Tek Mixed 1ib iig iin lib Only iig Only iin Only Misediiib iigi Misediiig iin Mixed alela 1h i Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage Set a
48. speed of the data uploading which will be used for the wireless stations connecting to Vigor device with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor device with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically After finishing this web page configuration please click OK to save the settings Dr ay Tek 55 VigorAP 900 User s Guide 3 5 8 Airtime Fairness Airtime fairness is essential in wireless networks that must support critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic sent from access points to clients than the other way around This is essential for ensuring predictable performance and quality of service as well as allowing 802 11n and legacy clients to coexist on the same network Without airtime fairness offices using mixed mode networks risk having legacy clients slow down the entire network or letting the fastest client s crowd out other users
49. the ASCII characters from 33 to 126 except and This option is available when WPA PSK or WPA2 PSK is selected as Security Mode Select TKIP or AES as the algorithm for WPA TKIP SES Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Choose DHCP or Static IP as the connection mode DHCP The wireless station will be assigned with an IP from Static IP The wireless station shall specify a static IP for connecting to Internet via VigorAP DHCP FF Static IP T This setting is available when DHCP is selected as Connection Type Type a name for the VigorAP as identification Simply use the default name This setting is available when Static IP is selected as Connection Type Type an IP address with the same network segment of the LAN IP setting of VigorAP Such IP shall be different with any IP address in LAN 146 Dr ay Tek Subnet Mask Default Gateway This setting is available when Static IP is selected as Connection Type Type the subnet mask setting which shall be the same as the one configured in LAN for VigorAP This setting is available when Static IP is selected as Connection Type Type the gateway setting which shall be the same as the default gateway configured in LAN for VigorAP After finishing this web page configuration please click OK to save the settings 3 10 7 WMM Configuration WM
50. the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device may accept any interference received including interference that may cause undesired operation The antenna transmitter should be kept at least 20 cm away from human body Please visit http www draytek com for more information You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment FCC RF Radiation Exposure Statement 1 This Transmitter must not be co located or operating in conjunction with any other antenna or transmitter 2 This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body Dr ay Te k v VigorAP 900 User s Guide VigorAP 900 User s Guide vi Dray Te k Table of Contents Introduction casa csercuseceessecnseensncestensevecerecereuten ceiver ein minieneesienasecrennenre 1 1 1 TENE O CHIC WGI gs osecseccses2pcesenetenensetesauseieensspcaoneasepessdapete E EANES EAEE 1 1 2 LED Indicators ANd CONNECHOSS 2 00 cccceeecccceeeceaeeseeeeeeeeeceaeeeseeeeeeeseuaeeseeeeeessaaasseeeeeeessseaaaeess 3 AoA ell GIS Ue UIO lose arnedeceesasteceuasaateccasae neces vaeceessuantgsessehcneszaesdeuest ensue arash neatbe
51. the PWR connector of the access point 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if VigorAP 900 is correctly connected to the ADSL modem router or switch hub For the detailed information of LED status please refer to section 1 2 Internet A N He NY A ANN Ai TE TELET 1 hale Ai VigorAP 900 User s Guide Dray Tek 7 1 3 4 POE Connection VigorAP 900 can gain the power from the connected switch e g VigorSwitch P2260 PoE Power over Ethernet can break the install limitation caused by the fixed power supply 1 Connect VigorAP 900 to a switch in your network through the LAN A1 PoE port of the access point by Ethernet cable 2 Connect a computer to VigorSwitch P2260 Make sure the subnet IP address of the PC is the same as VigorAP 900 management IP e g 192 168 1 X 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctly connected to the ADSL modem router or switch hub Internet VigorAP 900 User s Guide 8 Dr ay Te k Network Configuration After the network connection is built the next step you should do is setup VigorAP 900 with proper network parameters so it can work properly in your network environment Before you can connect to the access point and start configuration procedures your computer mus
52. the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access 16 Dr ay Tek authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0
53. the modem The modem is a complicated electronic unit that may be repaired only be authorized and qualified personnel Do not try to open or repair the modem yourself Do not place the modem in a damp or humid place e g a bathroom The modem should be used in a sheltered area within a temperature range of 5 to 40 Celsius Do not expose the modem to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards Keep the package out of reach of children When you want to dispose of the modem please follow local regulations on conservation of the environment We warrant to the original end user purchaser that the modem will be free from any defects in workmanship or materials for a period of one 1 year from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials we will at our discretion repair or replace the defective products or components without charge for either parts or labor to whatever extent we deem necessary tore store the product to proper operating condition Any replacement will consist of a new or re manufactured functionally equ
54. the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings Dr ay Te k 75 VigorAP 900 User s Guide 3 7 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 2 4GHz gt Security Settings SSID 1 SSID 2 SSID Mode SSID 3 SSID 4 DrayTek Lah 4 Mixed Vy PAS WRASSE w Set up RADIUS Server if 802 1 is enabled WPA WEA Algorithms Pass Phrase TKIP OAES G TKIB AES Key Renewal Interval 3600 seconds WEP key 1 Key 2 Key a Key 4 502 18 WEP Sa Disable Enable a Available settings are explained as follows Item Mode VigorAP 900 User s Guide Description There are several modes provided for you to choose IWPA2 PSK Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and
55. to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 5GHz gt gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 SSID OrayTekSG L4AN 4 Policy MAC Address Filter Index MAC Address Client s MAC Address Limit 64 entries Backup ACL Cfg Upload From File Available settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter ka Activate MAC address filter Blocked MAC address filter MAC Address Filter Display all MAC addresses that are edited before VigorAP 900 User s Guide 126 Dr ay Te k Client s MAC Manually enter the MAC address of wireless client Address Add Add a new MAC address into the list Delete Delete the selected MAC address in the list Edit Edit the selected MAC address in the list
56. various special characters Type the MAC address for the access point There are several modes provided for you to choose Each mode will bring up different parameters e g WEP keys Pass Phrase for you to configure WPAIPSK Y Shared Wt i PSE WIPAS PSE This option is available when Open Shared is selected as Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP Mone WEP WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and 21 VigorAP 900 User s Guide Encryption Type for This option is available when WPA PSK or WPA2 PSK is WPA PSK and selected as Security Mode WPA2 PSK Select TKIP or AES as the algorithm for WPA TKIP kad AES Pass Phrase It is available when WPA PSK or WPA2 PSK is selected After finishing this web page configuration please click Next to continue VigorAP 900 User s Guide 22 Dr ay Tek 2 7 3 Configuring 2 4GHz Security Settings VigorAP 900 offers 2 4GHz wireless connection capability You can setup 2 4GHz features in Quick Start Wizard
57. your homepage Manage browser add ons Delete browsing history and cookies Next click Change adapter settings and click Local Area Connection G er uE Control Panel Network and Internet Network and Sharing Center Control Panel Home poocce eee eeeeee View your basic network information and set up connections o aa View your actiwe networks Unidentified network Accesstype Noln P Public network Connections ji Local Dray Tek 9 2 g Change adapter settings f A ae x k eit a irs ko nmr CARRIE PC Unidentified network Internet This computer Connect or disconnect ternet access Area Connection VigorAP 900 User s Guide Then select Internet Protocol Version 4 TCP IPv4 and click Properties EP Realtek RTL8139 810x Family Fast Ethemet NIC This connection uses the following items pha Client for Microsoft Networks a Higos Packet Scheduler 3 File and Printer Sharing for Microsoft Networks Jobee fifemet Protocol Version 6 TCP POG W b aala Version 4 TCPYIPw4 mE 2700 Driver w a B eeeat ae Uninstall 2 o aano ooo Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Under the General tab click Use the following IP address Then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Ma
58. 0 This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt gt Access Point Discovery Scan See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP SEs vss foo AP s MAC Address Add to WDS Settings Available settings are explained as follows Dray Tek Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be Channel Statistics Shown on the box above this button It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP Add Ty
59. 1 1n transmit data packets through VigorAP 900 Although they have equal probability to access the wireless channel Station B 1 1n gets only a little airtime and waits too much because Station A 11g spends longer time to send one packet In other words Station B fast rate is obstructed by Station A slow rate a Packet Packet Packet Station B To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fair airtime and it s speed is not limited by Station A slow rate Dray Tek 111 VigorAP 900 User s Guide m Packet Packet Station A i Station B It is similar to automatic Bandwidth Limit The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment Please note that Airtime Fairness of 2 4GHz and 5GHz are independent But stations of different SSIDs function together because they all use the same wireless channel IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Wir
60. 2 247 2MHz Channel 13 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option 67 VigorAP 900 User s Guide Vigor N61 802 11n Wireless USB Adapter Utility x General Setting Advance Setting Auto launch when Windows start up C Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 234
61. 5GHZ ccccccccssesceeeeesseceeeeeeeseeeeseeeeeeeeeeeas 40 3 5 Wireless LAN Settings for AP Mode cc ccscscccceessseeeeceeesecececeeeseeeeesseeeeessuaaseeessesageeeeseaas 42 SAWEE E 2 feo 0 ener ne mene ET oe E ene E A ones 43 e S CUNY sc e E E E 47 TOS ACESS OOTO a E E E A E 50 SOANE e E E eastaenacact 51 ro AE DIS COVEI ee eE E aE 52 3 5 6 WMM Configuration ts 25222052 oicenesteaveds ivsetendetindandsseaacidedsconsaendsierdeneetesdsude taxsededeociiadetatosienzesd 53 3 5 7 Bandwidth Manageme nt cccsssccccsseeeeeeeseeeceeeeeeeaeseeeeeaeeeeseaeceessageeessegeeeseeeeeetseeeeeeas 55 SSG PMC FNC SS osre ne naera NEA Ea aN ARTER 56 i Band SIEEN ssrdsn ae a Ei en a a aie 58 OV taion CONTO susieina aia a a a a aaa E ae EEEE ETE 62 So RON eaer A S RE E EA 63 SPAA EE g A BMS E E A A E A mde E E E E E E 64 3 6 Wireless LAN Settings for AP Bridge Point to Point AP Bridge Point to Multi Point Mode 65 3 6 1 General SEUD aen i a E A a E a REE EAE 66 LAF DISCOV SFY eee a diet inicechiaptadenpatatweens 69 OND AP IS a asee aiswade wee dasa echosen eee ae been ansduoseectecn E 70 3 7 Wireless LAN Settings for AP Bridge WDS Mode ccccccsseeeeeeeeeeeeeeeseeeeeeeeeeaeaseeeeeeesaaas 71 Fl E CUD rare tte motes E E E EEEE E E A E E EE 71 e U r E N E EE 76 eT ACCESS ONIN O aeaa E EEE E E 79 KANPE aee E E E E E E 80 Sif O AP DISCOVOI Y s rosss seon g eian E S eTEN ESERE EEEE ENESEST 81 3 7 6 WDS AP StalUS secciv
62. 5GHz gt gt Security Configure Security as 12345678 for both pages Click OK to save the settings Wireless LAN 7 4GHz gt gt Security Settings SSID 1 SSID SSID 3 SSID 4 SSID apy00 Bandsteering Mode Missed WRA IPAS IPSE ka Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms OTKIP aeS TKIP AES Pass Phrase 3600 second s 600 360005 Default 36005 Same value for 2 4GHz and 5GHz Wireless LAN GHz gt gt Security Settings SSID 3 SSID 4 Dray TekSG LAN A Missed W PA HWPAZN PSE be Set up RADIUSNSerer if 902 1 is enabled WPA WPA Algorithms TKIP aes TKIP AES second s 600 36000 Default 3600 Pass Phrase Key Renewal Interval WEP 6 Now VigorAP 900 will let the wireless clients connect to less congested wireless LAN such as 5GHz to prevent from network congestion Dr ay Tek 61 VigorAP 900 User s Guide 3 5 10 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as hour and reconnection time can be set as 1 day Thus the guest can finish his job within one hour and will not occupy the
63. 7 C Set mini status always on top Frequency 802 11b gn 24GH v C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel F v C Group Roaming kis Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O adhoc network only C Automatically connect to non preferred networks Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lowering down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 68 Dr ay Te k 3 6 2 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to VigorAP 90
64. 9 VigorAP 900 User s Guide 3 5 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Policy MAC Address Filter Indes MAC Address Clent s MAC Address l l Limit 256 entries Backup ACL Cfg Upload From File Available settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter ve Disable Activate MAC address filter Blocked MAC address filter MAC Address Filter Display all MAC addresses that are edited before Client s MAC Manually enter the MAC address of wireless client Address Add Add a new MAC address into the li
65. 900 with SSID 2 can get the IP address assigned by LAN A 192 168 1 0 24 for using the video audio uploading and downloading services VigorAP 900 User s Guide 182 Dray Tek 4 2 How to use VigorAP in Universal Repeater Mode In your wireless network environment if you want to 1 install APs without Ethernet cable 2 extent the wireless coverage 3 solve the compatibility problems of WDS 4 get a better Wi Fi performance It is suggested to use Universal Repeater Mode on AP900 with a distinguishable SSID to extent the wireless signal from Vigor router e g Vigor2830n e PT O SD Universal iiias Repeater Vigor router Wireless TLL Wa mh Hh Internet LAN IP 192 168 1 1 LAN IP 192 168 1 2 Enable DHCP Server SSID DrayTek XXX SSID DrayTek XXX X Channel 6 Channel 6 Security Mode Mixed WPA WPA2 Security Mode Mixed WPA WPA2 Setting LAN on Vigor2830n In this example we use single LAN with 192 168 1 x 24 segment and the DHCP server is enabled 1 Please go to LAN gt gt General Setup gt gt Details Page for LAN 1 LAN gt gt General Setup General Setup IP Address Index 192 168 1 1 Details Page LAN 1 LAN 2 192 168 2 1 LAN 3 192 168 3 1 F 192 168 4 1 192 168 0 1 Details Page LAM 4 IP Routed Subnet 2 Setup LAN lI LAN gt gt General Setup LAN 1 Ethernet TCP IP and DHCP Setup LAN 1 IPv6 Setup DHCP Server Configuration Network Configuration Fo
66. 985 26061 Microsoft Corp D Documents and Settings faetping 192 168 1 2 Pinging 192 168 1 2 with 32 bytes of data Reply from 192 168 1 2 bhytes 32 time ims TTL 255 Reply from 192 168 1 2 bhytes 32 time ims TTL 255 Reply from 192 168 1 2 bytes 32 time lt ims TTL 255 Reply from 192 168 1 2 bhytes 32 timet ims TTL 255 Ping statistics for 192 168 1 2 Packets Sent 4 Received 4 Lost B CH loss Approximate round trip times in milli seconds Minimum Bms Maximum Ams Average Ams D Documents and Settings fae gt _ Type ping 192 168 1 2 and press Enter If the link is OK the line of Reply from 192 168 1 2 bytes 32 time lt Ims TTL 255 will appear If the line does not appear please check the IP address setting of your computer For Mac Os Terminal 1 2 a 4 Dray Tek Double click on the current used Mac Os on the desktop Open the Application folder and get into Utilities Double click Terminal The Terminal window will appear Type ping 192 168 1 2 and press Enter If the link is OK the line of 64 bytes from 192 168 1 2 icmp_seq 0 ttl 255 time xxxx ms will appear 195 VigorAP 900 User s Guide AHA Terminal bash 8Ouz4 Last login Sat Jan 3 B2i24s18 on typi Welcome to Barwin Vigorif draytekt ping 192 165 1 1 PING 192 468 1 1 192 168 1 1 56 data bytes 64 bytes from 192 165 1 1 iemposeqeh ttl 255 tine s8 755 MS 64 bytes from 192 160 1 1 icmp seg 1 ttl 255 timesB
67. A Channel 36 Driver Version 2 7 1 5 Each item is explained as follows Item Description Model Device Name Display the model name of the modem Firmware Version Display the firmware version of the modem Build Date Time Display the date and time of the current firmware build System Uptime Display the period that such device connects to Internet Operation Mode Display the operation mode that the device used VigorAP 900 User s Guide 162 Dray Tek Dray Tek System Memory total Memory left LAN A LAN B MAC Address IP Address IP Mask Display the total memory of your system Display the remaining memory of your system Display the MAC address of the LAN Interface Display the IP address of the LAN interface Display the subnet mask address of the LAN interface Wireless LAN 2 4GHz 5GHz MAC Address SSID Channel Display the MAC address of the WAN Interface Display the SSID of the device Display the channel that the station used for connecting with such device 163 VigorAP 900 User s Guide 3 13 2 TR 069 This device supports TR 069 standard It is very convenient for an administrator to manage a TR 069 device Vigor router AP and etc through VigorACS SI Auto Configuration Server System Maintenance gt gt TR 069 Settings ACS Settings IRL Username Password CPE Settings LAN A Port Username Password DNS Server IP Address Primary IP Address Secondary IP Address
68. A WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual Dr ay Tek 47 VigorAP 900 User s Guide authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP
69. AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode
70. DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Subnet Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Isolate LAN Check this box to make the wireless clients stations with the same SSID not accessing for wired PC in LAN Isolate Member Check this box to make the wireless clients stations with the same SSID not accessing for each other VLAN ID Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Dr ay Tek 73 VigorAP 900 User s Guide IGMP Snooping Mac Clone Channel Extension Channel Rate Phy Mode Subnet Security Peer Mac Address Packet OVERDRIVE VigorAP 900 User s Guide Check this box to enable this function Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change
71. E E EE 118 AON A E E E E E E E EE 119 3 9 Wireless LAN 5GHz Settings for AP MOde ccccceeeeeeeeeeeeeeeeeeeeeeeeeeeaaaaaaaaneeeeeeeeeeeeees 121 See PUIG e eE E E E E E E A E E E ee eee 121 SS CCO a ee A E eee ee 123 PISAC ESE CONTO onra E E ee ee eee 126 TIAN R e E sone eae aueicoden oases agndog sete eeece pee eeessaeose cee 127 i eA DISCOV GLY otanerovnsrcvejanencestrinassosntnacuaunncatatatusyuteagcdasatetsstesosasueetuorancennvenh a 128 329 6 VIM CO MIIQUI AON punct eerste rsg tate niin eia sts edness lace eae eai eat adcastdla dace 129 3 9 7 Bandwidth Manageme nt cccccsccccssseccceesecccseseeeceeseecesececsageeecsageeeeseuseeensaeeessageees 130 3 9 8 Airtime Fairness sateen sar cess cen stato cance ences stone ee Seacescvsene a sesd See acehs aan svete sone eecesahceee stuns 131 VigorAP 900 User s Guide Vili Dray Te k 3 9 9 Station Control is ccustenaccusiedcrcareerenttsanilensinoaieedateansteutdnianenttamedieatynous al srlausuleus iceman tedeutmmatsaoualenselien 133 SITRON aee E E E E E E E E EE 134 SIT aon EAST eeen e EREE E E E E R 135 3 10 Wireless LAN 5GHz Settings for Universal Repeater Mode cccsccceeeeeeeeeeeeeeeees 137 AOL GEET E e E A E uses 137 SaO e E E A E A A E E E T E A T 138 NO BAC CSS SON Ol ag ccep ates tsstasaicarte cae secpasseienestecanssasacadodeseoscsadavaeduseata lt adedaseeyeauseasaenestenncaeess 142 Ae e AEE E ESEE ENEE AEE E EE E E 143 Dc OPO DECON Y erae e a Nr
72. FE E 2 PIa 2B 2 Enter the SSID key Dray Tek Wireless Network _onnection Ix The network Draytek AF600 requires a network key also called a WEF key or WFA keyii A Network key helps prevent unknown intruders from connecting to this network Type the key and then click Connect Network Key Ae eae z Display Key 189 VigorAP 900 User s Guide 3 Confirm the IP address has been acquired Automatically connect to available WLAN per below order Neberork Name SSID information Draytek APSO0 Profile Name Diayvtek AF300 SSID Draytek APSOO Network T ype Infrastructure Authentication Type Open Encryption Type WEP SSID Draytek AP900 BSSID 00 50 7F 5B 4E 48 Channet 6 Signal Strength 100 Encryption Type WEP F 192 166 1 12 4 Confirm connection by ping t CAIN DO WS pyrte m3 2c md cxe C Documents and Settings allen ping 192 168 1 1 Pinging 192 168 1 1 with 32 bytes of data Reply from 192 168 1 1 hytes 32 time 3ne TTL 254 Reply From 172 168 1 1 bytes 32 timelines TIL 254 Reply from 192 168 1 1 bytes 32 tine 180s TTL 254 Reply From 172 168 1 1 hytes 32 time 19m2 TITL 254 Ping statistics For 192 168 1 1 Packets Sent 4 Received 4 Lost B Be loss Approximate round trip times in milli seconds Ain Lm tna Fax LAA ifm Hverage lines i Wocuments and settings allensping 8 4 8 8 Pinging 8 5 8 with J32 bytes of data R
73. Ix 1 Subnet LAN A 4 Security 3 Subnet Security Disabled WEP OTKIP O AES Disabled WEP TKIP O AES KEY Peer MAC Address Key Peer MAC Address ee a LL Le Ld Subnet Security 4 Subnet Security Disabled WEP OTKIP OAES Disabled WEP OTKIP AES Key Peer MAC Address PL EL PE so Key Peer MAC Address Available settings are explained as follows Item Phy Mode Subnet Security Peer MAC Address VigorAP 900 User s Guide Description Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Choose LAN A or LAN B for each SSID Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to T Dray Tek Advanced Settings for AP Bridge Universal Repeater When you choose AP Bridge Universal Repeater you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Please input the SSID you want to connect to Universal Repeater Parameters SSID MAC Address Optional Security Mode Encryption Type Pass Phrase Aes m Available settings are explained as follows Dray Tek Item SSID MAC Address Optional Security Mode Encryption Type for Open Shared Description Means the identification of the wireless LAN SSID can be any text numbers or
74. M 1s an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 5GHz gt gt WMM Configuration WMM Configuration WME Capable SPSO Capable WMM Parameters of Access Point CWhMin AckPolicy Aifsn WMM Parameters of Station Setto Factory Default Enable ODisable OEnable Disable Available settings are explained as follows Item WMM Capable Aifsn CWMin CW Max Dray Tek Description To apply WMM parameters for wireless data transmission please click the Enable radio button It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CW Max value must be greater than CWMiun or equals to CWMin value Both values will influence 147 VigorAP 900 User s Guide the time delay for WMM access
75. MAC Address Filter table on this page as a file Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 7 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt gt WPS Wi Fi Protected Setup Enable WPS Wi Fi Protected Setup Information WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Device Configure Configure via Client PinCode Status Not used Yes DrayTek LAM A Mired WPAtWPAS PSK TKIP AES Note WPS can help your wireless client automatically connect to the Access paint WPS is Disabled WPS is Enabled Walting for WPS requests from wireless clients Available settings are explained as follows Item Enable WPS WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Configure via Push Button Configure via Client PinCode VigorAP 900 User s Guide Description Check this box to enable WPS setting Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here Display current selected SSID Display current authentication mode of the VigorAP 900r Only WPA2 PSK and WPA PSK support WPS Display encryption mode None WEP TKIP AES etc of VigorAP 900 Click Start PBC to invoke Push B
76. P 900 User s Guide 58 Open Wireless LAN 2 4GHz gt gt Band Steering to get the following web page Wireless LAN 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability 30 second s 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security OK Cancel Available settings are explained as follows Item Description Enable Band Steering If it is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of SGHz network connection the system shall wait and check for several seconds 30 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wireless client After finishing this web page configuration please click OK to save the settings Below shows how Band Steering works AP Receives probe 24G only request 246 56 Checks SSID RSSI value for A ae 2 4G gt 56 30dbm SSI value for 46 lt 56 30 dbm Mo or Client 5G capability overtime Check Time U BU sec AP replies probe AP replies probe request on 5 request an 24 Dr ay Tek 59 VigorAP 900 User s Guide How to Use Band Steering 1 Open Wireless LAN 2 4GHz gt gt Band Steering 2 Check the box of Enable Band Steering and use the default value 30 for check t
77. PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1 X Pre Authentication Disable Disable IEEE 802 1 X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 27 VigorAP 900 User s Guide 128 bit encryption level The allowed content is the ASCII character
78. Physical Mode Power Save Bandwidth 1 00 50 fr Cor fo 0C CERK OFF 20M 3 7 7 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt gt WMM Configuration WMM Configuration Setto Factory Default WMM Capable OQ Enable Disable WMM Parameters of Access Point Aifsn CWhMin CWMaz AckPolicy LI d LI d WMM Parameters of Station Aifsn Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CW Min CW Max CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from VigorAP 900 User s Guide 82 Dr ay Tek 1 to 15 Be aware that CW Max value must be greater t
79. Ps which AP900 want to connect Phy Mode HTMIX 1 Security 3 Security Disabled WEP Disabled WEP Rey i Key Peer Mac Address Peer Mac Address 2 Security 4 Security Disabled WEP Disabled WEP Rey i Rey Peer Mac Address Peer Mac Address Packet OVERDRIVE Ts Burst Note 1 Tx Burst only supports 11g mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna TeR Y Ts Power 100 T Channel Width Auto 20 40 MHZ 20 MHZ OE Cancel Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Mode At present VigorAP 900 can connect to 11b only 11g only lIn only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixed 11ib 11g 1lin iib Only 1ig Only Lin Only i Mised iib iigi Misediiig iin Mixed 1ib 11g 11n VigorAP 900 User s Guide 66 Dr ay Tek Channel Extension Channel Rate Phy Mode Security Peer Mac Address Packet OVERDRIVE Dray Tek Means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 2462MHz Channel 11 AutoSelect 2462MH Channel 11 S46 7MH2 Channel 1
80. S setup Dr ay Tek 127 VigorAP 900 User s Guide Button Configure via Client PinCode 3 9 5 AP Discovery procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both ACT and 5G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button Both ACT and 5G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Please click Scan to discover all the connected APs Wireless LAN 5G gt Access Point Discovery Access Point List SSID BSSID Scan Note During the scanning process about 5 seconds no station is allowed to connect with the AP Each item 1s explained as follows Item SSID BSSID RSSI Channel Encryption Authentication Scan VigorAP 900 User s Guide Descr
81. SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number After finishing this web page configuration please click OK to save the settings Dr ay Te k 57 VigorAP 900 User s Guide Note Airtime Fairness function and Bandwidth Limit function should be mutually exclusive So their webs have extra actions to ensure these two functions are not enabled simultaneously 3 5 9 Band Steering Band Steering detects if the wireless clients are capable of SGHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization i ea Disable Band Steering J aa Tran in SS SS Ba a If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent from network congestion i T ee I rr My a Wana i in Enable Band Steering F i F Dray Tek VigorA
82. Temperature Sensor Graph Settings Temperature Sensor Graph Current Temperature 25 44 C Maximum 24 hours a2 45 C Minimum 24 hours 25 C Average Temperature aru 161 Display time interval 1 v min s Refresh VigorAP 900 User s Guide 3 13 System Maintenance For the system setup there are several items that you have to know the way of configuration Status TR 069 Administrator Password Configuration Backup Reboot System Firmware Upgrade Below shows the menu items for System Maintenance 3 13 1 System Status The System Status provides basic network settings of Vigor modem It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation System Status Model VigarAP 900 Device Name Vigor 4P900 Firmware Version 1 1 6RC5a Build Date Time 5300 Fri Aug 21 15 52 49 CST 2015 System Uptime Od 00 71 53 Operation Mode AP Memory Total 62208 kB MAC Address 00 10 44 96 2B 38 Memory Left 33744 kB IP Address 192 168 1 2 Cached Memory 14436 kB 62208 kB IF Mask 255 255 255 0 Wireless LAN 2 4GHz MAC Address 00 10 44 9E 26 38 MAC Address 00 10 44 9E 2B 38 SSID DrayTek LaNn amp IP Address 197 168 2 2 IP Mask 255 255 255 0 Channel 11 Driver version 2 7 1 5 Wireless LAN 5GHz MAC Address 00 10 44 96 26 34 SSID DrayTekSG LAN
83. Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Check this box to have the bandwidth limit determined by the 130 Dr ay Tek system automatically After finishing this web page configuration please click OK to save the settings 3 9 8 Airtime Fairness Airtime fairness is essential in wireless networks that must support critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic sent from access points to clients than the other way around This is essential for ensuring predictable performance and quality of service as well as allowing 802 11n and legacy clients to coexist on the same network Without airtime fairness offices using mixed mode networks risk having legacy clients slow down the entire network or letting the fastest client s crowd out other users With airtime fairness every client at a given quality of service level has equal access to the network s airtime After finishing this web page configuration please click OK to s
84. Vigor 2860 or Vigor2925 series Central AP Management gt Status of Settings By Station Number Max WLANC2 4GH2 Station Number Max WLAN SGH2 Station Number x E ee ee Oooo o oe O Upload Limit Download Limit none none Force Overload Disassociation re Force Overload Disassaciation By ee ee ee Rogue AP Detection a X means the function is not enabled or VigorAP 900 has not registered to any Vigor router yet Below shows a setting example for Load Balance settings configured in Vigor 2860 or Vigor2925 series Central AP Management gt gt Load Balance Enable Mode By Station Number t Overload Detected By Maximum Station Number Wireless LAN 2 4GHz 64 3 Wireless LAN 5GHz2 64 By Traffic Upload Limit 256K v bps Default unit K Download Limit 512K v bps Default unit K Force Overload Disassociation None Note The maximum station number of Wireless LAN 2 4GH2 will be applied to both Wireless LAN 2 4GHz and Wireless LAN SGHz if the firmware version of 4P900 is less than or equal to 1 1 4 1 Dr ay Tek 39 VigorAP 900 User s Guide 3 4 General Concepts for Wireless LAN 2 4GHz 5GHz The VigorAP 900 is equipped with a wireless LAN interface compliant with the standard IEEE 802 11n draft 2 protocol To boost its performance further the VigorAP 900 is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy s
85. With airtime fairness every client at a given quality of service level has equal access to the network s airtime The wireless channel can be accessed by only one wireless station at the same time The principle behind the IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occupy too much airtime whereas the fast stations 11n become much slower Take the following figure as an example both Station A 11g and Station B 1 1n transmit data packets through VigorAP 900 Although they have equal probability to access the wireless channel Station B 1 1n gets only a little airtime and waits too much because Station A 11g spends longer time to send one packet In other words Station B fast rate is obstructed by Station A slow rate a Packet Packet Packet Station B To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fai
86. Y 0 1 2 DrayTek L4N B LAN B F 0 3 LAM A 0 4 0 LAN A Y Hide SSID Prevent SSID from being scanned Isolate LAN Wireless clients stations with the same SSID cannot access wired PCs on LAM Isolate Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 Channel 2462MHz2 Channel 11 Extension Channel 2442MHz Channel 7 T Hote Enter the configuration of APs which AP900 want to connect Remote AP should always set LAN A MAC address to connect APSOO WDS Phy Mode HTMIX 1 Subnet L4N 4 Security 3 Subnet L4N 4 Security Disabled WEP TEIP Disabled WEP TEIP AES key i key i Peer Mac Address Peer Mac Address 2 Subnet L4N 4 Security 4 Subnet L4N 4 Security Disabled WEP TEIP Disabled WEP TEIP AES Rey Key Peer Mac Address Peer Mac Address Packet OVERDRIVE Ts Burst Note 1 7x Burst only supports lig mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna 22k F Ts Power 100 F Channel Width Auto 20 40 MHZ 20 MHZ OK Cancel Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Chec
87. able Enable WEP Key 1 Hex Key 2 Hex Key 3 al Hex Key 4 Hex 802 1 WEP Disable Enable 4 Open LAN gt General Setup to configure the settings for enabling DHCP server on LAN A LAN B If there is a DHCP server configured in the same network segment skip this step LAN gt gt General Setup Ethernet TCP IP and DHCP Setup LAN A IP Network Configuration DHCP Server Configuration VigorAP Management Enable Server Disable Server Enable Client O Relay Agent Specii an aeRlee Start IP Address 192 169 1 10 IP Address 192 168 1 2 End IP Address 192 168 1 100 Subnet Mask 295 295 225 0 Subnet Mask 299 209 2 99 0 Default Gateway 192 168 1 2 L Enable Management VLAN eae ye sistas Address for Relay Agent Primary DNS Server 168 95 1 1 Secondary ONS Server 168 95 192 1 LAN B IP Network Configuration DHCP Server Configuration IP Address 192 168 2 2 Enable Server Disable Server Subnet Mask 255 255 255 0 O Relay Agent Start IP Address 192 168 2 10 C Enable Management WYLAN End IP Address VLAN ID b subnet mask Default Gateway Lease Time DHCP Server IP o Address for Relay Agent Primary DNS Server masecondary DNS Server J Dray Tek 181 VigorAP 900 User s Guide 5 After finishing the above settings the wireless equipment connecting to VigorAP 900 with SSID 1 can get the IP address assigned by LAN B 192 168 2 0 24 for accessing the internal server The wireless equipment connecting to VigorAP
88. al authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seco
89. annels and find working APs in the neighborhood This option is not available when Universal Repeater is selected as the Operation Mode After finishing this web page configuration please click Next to continue 2 7 5 Configuring 5GHz Security Settings VigorAP 900 offers SGHz wireless connection capability You can setup 5G features in Quick Start Wizard first Once the USB 5GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt gt Wireless Security 5GH SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek56 LAN A Wireless Security Settings Mode Mixed WPAN PAZ IPSE ka WPA Algorithms OTKIF AES TKIP AES Key Renewal Interval 3600 seconds PME Cache Period minutes Pre 4uthentication Disable Enable Wirelesst2 4GHz2 4 Securitvle 4GHz WirelesslSGHz2 Securitv SGHz Available settings are explained as follows Item Mode VigorAP 900 User s Guide Description There are several modes provided for you to choose Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field belo
90. ard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 54 Dr ay Te k 3 5 7 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Per Station Bandwidth Limit Enable Upload Limit Download Limit Auto amp djustment Note L Download Traffic going to any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum
91. at associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box to enable this function Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change based on this MAC address 44 Dray Tek Dray Tek Channel Extension Channel Rate Packet OVERDRIVE Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 243 MHz Channel 6 AutoSelect 2412MHz Channel 1 241 MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 132MHz Channel 5 243 7MHz Channel 6 2442MHz Channel 7 244 MHz Channel 8 2452MHz Channel 9 245 MHz Channel 10 2462MHz Channel 11 246 MHz Channel 12 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want If you choose 11g Only 11b Only 11n Only or Mixed 11b 11g such feature will be ava
92. ave the settings The wireless channel can be accessed by only one wireless station at the same time The principle behind the IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occupy too much airtime whereas the fast stations 11n become much slower Take the following figure as an example both Station A 11g and Station B 1 1n transmit data packets through VigorAP 900 Although they have equal probability to access the wireless channel Station B 11n gets only a little airtime and waits too much because Station A 11g spends longer time to send one packet In other words Station B fast rate is obstructed by Station A slow rate Packet Packet Packet Station B To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fair airtime and it s speed is not limited by Station A slow rate Dray Te k 131 VigorAP 900 User
93. cess the Web User Interface for this modem Connect to 197 168 1 1 Login to the Router Web Configurator Liser name f Password Remember my password Cancel Dr ay Te k 15 VigorAP 900 User s Guide 2 7 Quick Start Wizard Quick Start Wizard will guide you to configure 2 4G wireless setting 5G wireless setting and other corresponding settings for Vigor Access Point step by step 2 7 1 Configuring 2 4GHz Wireless Settings General This page displays general settings for the operation mode selected Quick Start Wizard gt gt Wireless LAH 7 4GHz Operation Mode AF w 4P 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them Wireless Mode Misediiib iig iin Main SSID Enable 2 Subnet Simulate 2 APs Channel 2462MHz Channel 11 Extension Channel 2442MHz Channel 7 Station List Wireless 4GHz 1 Security 2 4GHz Wireless SGHz2 Security SGHz Available settings are explained as follows Item Description Operation Mode There are five operation modes for wireless connection Settings for each mode are different SP Bridge DS ka AP AF Bridge Foint ta Point AF Bridge Point to Multi Point SP Bridge DS Universal Repeater Wireless Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n
94. ch when Windows start up C Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 2347 C Set mini status always on top Frequency 902 11b gn 2 4GH v C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel Group Roaming ead Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only adhoc network only C Automatically connect to non preferred networks VigorAP 900 User s Guide 98 Dr ay Te k Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lowering down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the device will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings Dr ay Tek 99 VigorAP 900 User s Guide 3 8 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After confi
95. connect to a Root AP and use AP function to service all wireless clients within its coverage Wireless LAN 5GHz AP This mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network Universal Repeater This product can act as a wireless range extender that will help you to extend the networking wirelessly The access point can act as Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to service all wireless clients within its coverage Note The Wireless LAN settings will be changed according to the Operation Mode selected here For the detailed information please refer to the section of Wireless LAN 3 2 LAN Local Area Network LAN is a group of subnets regulated and ruled by modem 3 2 1 General Setup Click LAN to open the LAN settings page and choose General Setup Note Such page will be changed according to the Operation Mode selected The following screen is obtained by choosing AP as the operation mode Dr ay Tek 33 VigorAP 900 User s Guide LAN gt General Setup Ethernet TCP IP and DHCP Setup LAN 4 IP Network Configuration Enable DHCP Client IP Address 192 168 1 2 Subnet Mask 255 255 255 Default Gateway C Enable Management VLAN o FC VLAN ID LAH B IP Network Configuration C Enable DHCP Client IP Address 192 168 2 2 Subnet Mask 255 255 255 0 C Enable Mana
96. ding to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy on your wireless network The VigorAP 900 is very flexible and can support multiple secure connections with both WEP and WPA at the same time WPS Introduction WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point VigorAP 900 with the encryption of WPA and WPA2 AP Router Connection Wireless via WPS Client h 2 O lt m set SSID and Encryption WPA WPA2 Wireless Card Installed VigorAP 900 User s Guide 40 Dr ay Te k It is the simplest way to build connection between wireless network clients and VigorAP 900 Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and VigorAP 900 automatically Note Such function is available for the wireless station with WPS supported There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using PIN Code On the side of VigorAP 900 series which served as an AP press WPS button once on the front panel of VigorAP 900 or click Start PBC on web configuration interface On the side of a station with network card installed press Start PBC button of networ
97. e Mixed iia iin lia Only Lin Only 5G Mixed 11la 11in Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage Set a name for VigorAP 900 to be identified Default settings are Draytek_SG LANA and Draytek_SG LANB When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagg
98. e 192 168 1 3 or greater but smaller than 192 168 1 254 End IP Address Enter a value of the IP address pool for the DHCP server to end with when issuing IP addresses Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 Default Gateway Enter a value of the gateway IP address for the DHCP server Lease Time It allows you to set the leased time for the specified PC DHCP Server IP Address for Relay Agent It is available when Enable Relay Agent is selected Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server Primary IP Address You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IP Address You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the modem will automatically apply default secondary DNS Server IP address 194 98 0 1 to this field After finishing this web page configuration please click OK to save the settings Dr ay Tek 35 VigorAP 900 User s Guide 3 2 2 Port Control To avoid wrong connection due to the insertion of unsuitable Ethernet cable the function of physical LAN por
99. e associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 118 Dr ay Te k 3 8 13 Station List Station List provides the knowledge Station List of connecting wireless clients now along with its status code General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the Station Wireless LAN 2 4GHz gt gt Station List Station List Index Mac Address Add to Access Control Client s MAC Address General Advanced Control Neighbor Tx Rate Ru Rate Ebps Kops Hostname Encrypt Refresh Add Available settings are explained as follows Item MAC Address Hostname SSID Auth Encrypt Tx Rate Rx Rate Refresh Add to Access Control Add Advanced Description Display the MAC Address for the connecting client Display the host name of the connecting client Display the SSID that the wireless cl
100. e is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings Dray Tek 101 VigorAP 900 User s Guide RADIUS Server Cluse internal RADIUS Server IP Address al Port olz Shared Secret DrayTek Session Timeout Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 11 RADIUS Server to configure settings for internal server of Vigo
101. e is no bother to directly get into the Web user interface of the AP or borrow debug equipments System Maintenance gt gt Syslog Mail Alert Setup Syslog Access Setup Enable Server IP Address Destination Port Log Level Mail Alert Setup Enable SMTP Server Mail To Mail From User Name Password Enable E Mail Alert User Login Available settings are explained as follows VigorAP 900 User s Guide 168 Dr ay Te k Item Syslog Access Setup Mail Alert Setup 3 13 6 Time and Date Description Enable Check Enable to activate function of Syslog Server IP Address The IP address of the Syslog server Destination Port Assign a port for the Syslog protocol The default setting is 514 Log Level Specify which level of the severity of the event will be recorded by Syslog Check Enable to activate function of mail alert SMTP Server The IP address of the SMTP server Mail To Assign a mail address for sending mails out Mail From Assign a path for receiving the mail from outside User Name Type the user name for authentication Password Type the password for authentication User Login VigorAP will send an e mail out when a user accesses into the user interface by using web or telnet It allows you to specify where the time of VigorAP should be inquired from System Maintenance gt gt Time and Date Time Information Current System Time Time Setting O Use Browser Time U
102. ection Wireless LAN 5GHz gt gt Airtime Fairness Enable Airtime Fairness Triggering Cllent Number 2 64 default 2 Available settings are explained as follows Item Description Enable Airtime Try to assign similar airtime to each wireless station by Fairness controlling TX traffic Airtime Fairness Click the link to display the following screen of airtime fairness note 4 172 17 3 110 wireless ap_af_note asp Airtime Fairness Note Airtime is the time where a wireless station occupies the wirelees channel Airtime Fairness function tries to assign similar airtime to each station by controlling Tx traffic IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number Triggering Client Number Airtime Fairness function 1s applied only when active station number achieves this number After finishing this web page configuration please click OK to save the settings Dray Tek 151 VigorAP 900 User s Guide 3 10 10 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is no
103. ed in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings Dr ay Tek 153 VigorAP 900 User s Guide 3 10 12 Station List Station List provides the knowledge of connecting wireless clients now along with its status code General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the Station Wireless LAN GHz gt Station List Station List Index Mic Address Add to Access Control Client s MAC Address General Advanced Control Neighbor Tx Rate Ru Rate Kbps Kops Hostname Encrypt Refresh Add Available settings are explained as follows Item MAC Address Hostname SSID Auth Encrypt Tx Rate Rx Rate Refresh Add to Access Control Add Advanced Description Display the MAC Address for the connecting client Display the host name of the connecting client Display the SSID that the wireless client connects to Display the authentication that the wireless client uses for connection with such AP Display the encryption mode used by the wireless client Display the transmission receiving rate for packets Click this button to refresh the status of stat
104. ed with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box to enable IGMP Snooping of the selected SSID Multicast traffic will be forwarded to ports that have members of that group Disabling IGMP snooping will make multicast traffic treated in the same manner as broadcast traffic Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selected channel is under serious interference 12 Dray Tek Extension Channel With 802 1 1n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Channel Width 20 MHZ the AP will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the AP will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings 3 9 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it
105. edule profiles that have the action Force Down are apphed to the WLAN all other actions are ignored SSID Enable Hide SSID 1 O DrayTek 2830 3 o z O 3 O 4 Isolate Member Isolate VEN E Isolate Member Wireless clients stations with the same SSID cannot access for each other lalate VPNisolate wireless with remote dial in and LAN to LAN VPN Channel Channel 6 2437MHz A Long Preamble O Long Preamble necessary for some old 602 11 b devices only lower performance Packet OVERDRIVE C Tx Burst Note The same technology must also be supported in clients to boost WLAN performance Rate Control Enable Upload Download SSID 1 o kbps SSID 2 a kbps SSID 3 E kbps SSID 4 E i kbps Note range 100 50 000 kbps VigorAP 900 User s Guide 184 kbps kbps kbps kbps Dray Tek 1 Please tick Enable Wireless LAN 2 Choose the Mode Note To utilize the Universal Repeater Mode on AP900 it s required not to choose 11a mode here on 2830n 3 Name a SSID 4 Choose a channel Note To avoid signal interference it s suggested to do a Scan in Wireless LAN gt gt AP Discovery and choose an unoccupied or not so crowded channel 5 Click OK 2 Setting the Security Please go to Wireless LAN gt gt Security Wireless LAN gt gt Security Settings SSID 1 SSID 2 SSID 3 SSID 4 Mode Mixed WPA WPA2 PSK Set up RADIUS Server if 02 1x 15 enabled WPA
106. een select Using DHCP from the drop down list of Configure IPv4 aa Network amp g Show All Displays Sound Network Startup Disk Location Automatic san He Show Built in Ethernet kA PPPoE AppleTalk Proxies Ethernet Configure Pv4 l Using DHCP Ke IP Address 192 168 1 10 Renew DHCP Lease Subnet Mask 255 255 255 0 DHCP Client ID If required Router 192 168 1 1 DNS Servers Optional Search Domains Optional IPv6 Address fe80 0000 0000 0000 020a 95ff fe8d 72e4 Configure IPv6 rr Click the lock to prevent further changes Assist me Apply Now VigorAP 900 User s Guide 194 Dr ay Te k 5 3 Pinging the Modem from Your Computer The default gateway IP address of the modem is 192 168 1 2 For some reason you might need to use ping command to check the link status of the modem The most important thing is that the computer will receive a reply from 192 168 1 2 If not please check the IP address of your computer We suggest you setting the network connection as get IP automatically Please refer to the section 5 2 Please follow the steps below to ping the modem correctly For Windows L Ds 4 Open the Command Prompt window from Start menu gt Run Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear ce Command Prompt Microsoft Windows HP Yersion 5 1 2608 CC Copyright 1
107. el RtmpChipUpskepromHook eep typese int Type 4 Od 00 00 23 kernel NVM is FLASH mode Od 00 00 23 Kernel Rx DESC agezaco00 size 4096 Od 00 00 23 kernel WirelessRoaming en 0 Od 00 00 23 kernel WirelessRoaming rate_en 0 Od 00 00 23 kernel WirelessRoaming rate_5g_en 0 Od 00 00 23 kernel WirelessRoaming rate 0 Od 00 00 23 kernel WirelessRoaming rate_S5g 0 Od 00 00 23 kernel STA CTL Od 00 00 23 Kernel default ApCli fSbCapable 0 0 Od 00 00 23 Kernel 1 TotalallowedStaNum 64 Od 00 00 23 kernel KeylStr is Invalid key lengthiO or Typeilj Od 00 00 23 kernel KeylStr is Invalid key lengthiO or Typed 3 14 2 Speed Test Click the Start button on the page to test the speed Such feature can help you to find the best installation place for Vigor AP Diagnostics gt gt Speed Test Speed Test Welcome to Yigor4P900 Speed Test This test allows you to find out the best place for Vigor4P900 You can execute the speed test at different places of the building and select the best location for it The performance test result is only for your reference VigorAP 900 User s Guide 172 Dr ay Te k 3 14 3 Traffic Graph Click Traffic Graph to open the web page Choose one of the managed Access Points LAN A or LAN B daily or weekly for viewing data transmission chart Click Refresh to renew the graph at any time Diagnostics gt gt Traffic Graph Show Chart Daily Refresh LAN amp pLAN B
108. eless LAN such as 5GHz to prevent from network congestion 3 7 11 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as 1 hour and reconnection time can be set as 1 day Thus the guest can finish his job within one hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP VigorAP 900 User s Guide 90 Dr ay Te k Wireless LAH 2 4GHz gt Station Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Enable F Connection Time Reconnection Time Display All Station Control List Note Once the feature is enabled the connection time quota will apply to each wireless client identified by MAC address Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Use the drop down list to choose the duration for the wireless Reconnection Time client connecting reconnecting to Vigor router Or type the duration manually when
109. eless LAN 2 4GHz gt gt Airtime Fairness C Enable Airtime Fairness Triggering Client Number 2 64 default 2 Available settings are explained as follows Item Description Enable Airtime Try to assign similar airtime to each wireless station by Fairness controlling TX traffic Airtime Fairness Click the link to display the following screen of airtime fairness note A 172 17 3 110 wireless ap_af_note asp Airtime Fairness Note Airtime is the time where a wireless station occupies the wirelees channel Airtime Fairness function tries to assign similar airtime to each station by controlling Tx traffic IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number Triggering Client Number Airtime Fairness function is applied only when active station number achieves this number After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 112 Dr ay Te k Note Airtime Fairness function and Bandwidth Limit function should be mutually exclusive So their webs have extra actions to ensure these two functions are not enab
110. eless client After finishing this web page configuration please click OK to save the settings Below shows how Band Steering works AP Receives probe 24G only request 246 56 Checks SSID RSSI value for A ae 2 4G gt 56 30dbm SSI value for 46 lt 56 30 dbm Mo or Client 5G capability overtime Check Time U BU sec AP replies probe AP replies probe request on 5 request an 24 VigorAP 900 User s Guide 114 Dr ay Te k How to Use Band Steering 13 Open Wireless LAN 2 4GHz gt gt Band Steering 14 Check the box of Enable Band Steering and use the default value 30 for check time setting Wireless LAN 2 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability secondis 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security 15 Click OK to save the settings 16 Open Wireless LAN 2 4GHz gt gt General Setup and Wireless LAN 5GHz gt gt General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Wireless LAN 4GHz gt gt General Setup General Setting IEEE 807 11 Enable Wireless LAN C Enable Limit Client 3 64 Default 64 Mode Mixed 11b 11g 1in Enable 2 Subnet Simulate 2 APs SSID Subnet solate Isolate VLAN ID IGMP age clone SSID LAN Member 0 Untagged Snooping 1 O ap9300 BandSteg LAN A Y O a
111. eless clients accessing Vigor device Only the clients with the specified VLAN ID can access into VigorAP 900 VLAN ID Type the number as VLAN ID tagged on the transmitted packet 0 means no VALN tag IP Address Type in private IP address for connecting to a local 34 Dr ay Tek Configuration private network Default 192 168 2 2 Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 Enable Management VLAN VigorAP 900 supports tag based VLAN for wireless clients accessing Vigor device Only the clients with the specified VLAN ID can access into VigorAP 900 VLAN ID Type the number as VLAN ID tagged on the transmitted packet 0 means no VALN tag DHCP Server DHCP stands for Dynamic Host Configuration Protocol DHCP Configuration server can automatically dispatch related IP settings to any local user configured as a DHCP client Enable Server Disable Server Enable Server lets the modem assign IP address to every host in the LAN Disable Server lets you manually or use other DHCP server to assign IP address to every host in the LAN Relay Agent Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to Start IP Address Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses If the Ist IP address of your modem is 192 168 1 2 the starting IP address must b
112. eless networks that must support critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic sent from access points to clients than the other way around This is essential for ensuring predictable performance and quality of service as well as allowing 802 11n and legacy clients to coexist on the same network Without airtime fairness offices using mixed mode networks risk having legacy clients slow down the entire network or letting the fastest client s crowd out other users With airtime fairness every client at a given quality of service level has equal access to the network s airtime The wireless channel can be accessed by only one wireless station at the same time The principle behind the IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occupy too much airtime whereas the fast stations 11n become much slower Take the following figure as an example both Station A 11g and Station B
113. eply Fron B 4 8 2 8 bytes 3J2 tine 1n8 Reply From 8 8 8 bytes 32 time 58nc 8 Keply From 8 8 8 8 hytes d2 tine 67nms 8 Reply from 8 8 8 bytes 32 tine 47nz Ping statistics For 8 8 8 8 Packets Sent 4 Hece lved 4 Lost Hee Approximate round trip times in milli seconds Minimum Tins Aax unm Hims Average bima 1 Test the connection to Vigor2830n 2 Test the connection to Internet VigorAP 900 User s Guide 190 Dr ay Te k Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the modem and finishing the web configuration Please follow sections below to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the modem from your computer Backing to factory default setting if necessary If all above stages are done and the modem still cannot run normally it is the time for you to contact your dealer for advanced help 5 1 Checking If the Hardware Status Is OK or Not Follow the steps below to verify the hardware status P Dray Tek Check the power line and cable connections Refer to 1 3 Hardware Installation for details Power on the modem Make sure the POWER LED ACT LED and LAN LED are bright If not it means that there is something wrong with the hardware status Simply back to
114. ere because your ISP often provides you more than one DNS Server If your ISP does not provide it the modem will automatically apply default secondary DNS Server IP address 194 98 0 1 to this field Periodic Inform The default setting is Enable Please set interval time or Settings schedule time for the AP to send notification to VigorACS server Or click Disable to close the mechanism of notification Interval Time Type the value for the interval time setting The unit is second STUN Settings The default is Disable If you click Enable please type the relational settings listed below Server Address Type the IP address of the STUN server Server Port Type the port number of the STUN server Minimum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the maximum period A value of 1 indicates that no maximum period is specified After finishing this web page configuration please click OK to save the settings Dr ay Tek 165 VigorAP 900 User s Guide 3 13 3 Administrator Password This page allows you to set new password System Maintenance gt
115. es and wired Ethernet network and exchanges data between them Wireless Mode Main SSID Channel Extension Channel Station List Wireless 46H Security 2 4GHz Wireless SGHz2 Security SGHz2 4 Available settings are explained as follows Item Description Operation Mode There are two operation modes for wireless connection Settings for each mode are different AP EJ Uniwersal Repeater Wireless Mode At present VigorAP 900 can connect to 11a only 11n only SG Mixed 11a 11n stations simultaneously Simply choose Mixed 11a 11n mode Lin only SGi ad Lin onlyiSG Mixed 11la 1in Main SSID Set a name for VigorAP 900 to be identified Multiple SSID Set the SSIDs and specify subnet interface LAN A or LAN B for each SSID by click Multiple SSID Channel Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selected channel is under serious interference Extension Channel With 802 1 1n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Station List Click the Display button to open the Station List dialog It provides the knowledge of connecting wireless clients now Dr ay Te k 25 VigorAP 900 User s Guide along with its status code AP Discovery Click this button to open the AP Discovery dialog VigorAP 900 can scan all regulatory ch
116. ess client After finishing this web page configuration please click OK to save the settings Below shows how Band Steering works AP Receives probe 24G only request 246 56 Checks SSID RSSI value for A ae 2 4G gt 56 30dbm SSI value for 46 lt 56 30 dbm Mo or Client 5G capability overtime Check Time U BU sec AP replies probe AP replies probe request on 5 request an 24 VigorAP 900 User s Guide 88 Dr ay Tek How to Use Band Steering 7 Open Wireless LAN 2 4GHz gt gt Band Steering 8 Check the box of Enable Band Steering and use the default value 30 for check time setting Wireless LAN 2 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability secondis 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security 9 Click OK to save the settings 10 Open Wireless LAN 2 4GHz gt gt General Setup and Wireless LAN 5GHz gt gt General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Wireless LAN 4GHz gt gt General Setup General Setting IEEE 807 11 Enable Wireless LAN C Enable Limit Client 3 64 Default 64 Mode Mixed 11b 11g 1in Enable 2 Subnet Simulate 2 APs SSID Subnet solate Isolate VLAN ID IGMP age clone SSID LAN Member 0 Untagged Snooping 1 O ap9300 BandSteg LAN A Y O apoo
117. fault configuration VigorAP 900 User s Guide 196 Dr ay Te k gt ysey amp Aope SdW JONO NVM sae DUPDDOUCUCUVY After restore the factory default setting you can configure the settings for the modem again to fit your personal request 5 5 Contacting DrayTek If the modem still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel free to send e mail to support draytek com VigorAP 900 User s Guide Dray Tek 197
118. figure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN 2 4GHz gt gt General Setup General Setting IEEE 802 11 Enable Wireless LAN Enable Limit Client 64 3 64 Default 64 Mode Mixed 1l1b 11g iini Enable 2 Subnet Simulate 2 APs Hide Isolate Isolate VLAN ID IGMP SSID aa SOENG LAN Member 0 UntaggediSnooping MAE Cie 1 DrayTek L4h amp LAN A o 2 DrayTek LAN B LAN B 0 3 LAN A Y o 4 LAN A Y 0 Hide SSID Prevent SSID from being scanned Isolate LAN Wireless clients statians with the same SSID cannot access wired PCs on LAN Isolate Member Wireless clients statians with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 Channel 2462MHz Channel 11 Extension Channel 2442MHz Channel 7 T Packet OVERDRIVE Ts Burst Note 1 Ts Burst only supports 11g mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna eleR T Tx Power 100 F Channel Width Auto 20 40 MHZ 20 MHZ OK Cancel Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to
119. g the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mi
120. gement WLAN VLAN ID eoo DHCP Server Configuration OQEnable Server Disable Server OrRelay Agent Start IP Address End IF Address Subnet Mask Default Gateway Lease Time s6400 efile at sad a Address for Relay Agent Primary DNS Server Secondary DNS Server ssid DHCP Server Configuration QEnable Server Disable Server OrRelay Agent Start IP Address End IP Address Subnet Mask Default Gateway DHCP Server IP iE Address for Relay Agent Primary ONS Server fe Secondary ONS Server sid Lease Time Available settings are explained as follows Item LAN A IP Network Configuration LAN B IP Network VigorAP 900 User s Guide Description Enable DHCP Client When it is enabled VigorAP 900 will be treated as a client and can be managed controlled by AP Management server offered by Vigor router e g Vigor2860 IP Address Type in private IP address for connecting to a local private network Default 192 168 1 2 Subnet Mask Type in an address code that determines the size of the network Default 255 255 255 0 24 Default Gateway In general it is not really necessary to specify a gateway for VigorAP 900 However if it is required simply type an IP address as the gateway for VigorAP 900 It will be convenient for the access point to acquire more service e g accessing NTP server from Vigor router Enable Management VLAN VigorAP 900 supports tag based VLAN for wir
121. guring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 2 4GHz gt gt Security Settings SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek Lan 4 Mode Mixed VWiPA WIP AS PSE w Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms OTKIF AES TKIPAKES Key Renewal Interval 3600 seconds WEP Key 1 Key 2 f Key 3 Key 4 S o02 14 WEF Disable Enable i Available settings are explained as follows Item Description Mode There are several modes provided for you to choose WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual VigorAP 900 User s Guide 100 Dr ay Te k authentication It enables centralized remote access authentication for network manage
122. han CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings Dr ay Tek 83 VigorAP 900 User s Guide 3 7 8 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other p
123. i elif Local 4rea Conner Diagnose Vig oe o Network cable un scar SE aT TAP Win32 Adapt Bridge Connections AN Create Shortcut EP Rename g Froperties VigorAP 900 User s Guide 192 Dray Tek 4 Select Internet Protocol Version 4 TCP IP and then click Properties Local Area Connection Properties A Networking Sharing Connect using E Intel R PRO 7000 MT Network Connection This connection uses the following tema JE Client for Microsoft Networks ia Privacyware Filter Driver w tos Packet Scheduler E ial File and Printer Sharing for Microsoft Networks rik n a Link Layer Topology Discovery Responder rt aan m 5 Select Obtain an IP address automatically and Obtain DNS server address automatically Finally click OK Internet Protocol Version 4 TCP 1Pv4 Properties 21x General Alternate Configuration You can get IF settings assigned automatically iF your network supports this capability Otherwise you need to ask your network administrator For the appropriate IP settings f Obtain an IP address automatically Ose Che Ponowing IF address f Obtain DNS server address automatically Use the Following DNS server addresses ig 2 Advanced cous Dr ay Tek 193 VigorAP 900 User s Guide For Mac Os 1 Double click on the current used Mac Os on the desktop 2 Open the Application folder and get into Network 3 On the Network scr
124. ied user interface of Vigor2860 Combo WAN series and Vigor2925 Triple WAN series the multiple deployment of VigorAP 900 can be clear at the first sight For multiple wireless clients to apply the AP Load Balancing to the multiple APs will manage wireless traffic with smooth flow and enhanced efficiency 3 3 4 Overload Management Load Balance can help to distribute the traffic for all of the access points e g VigorAP 900 registered to Vigor router Thus the bandwidth will not be occupied by certain access points However traffic overload might be occurred if too many wireless stations connected to VigorAP 900 for data incoming and outgoing Therefore Force Overload Disassociation is required to terminate the network connection of the client s station to release network traffic When the function of Force Overload Disassociation in web user interface of Vigor router e g Vigor2860 or Vigor2925 series is enabled wireless clients specified in black list of such web page will be disassociated to solve the problem of traffic overload The following web page is used to configure white list and black list for wireless stations Central AP Management gt gt Overload Management Overload Management MAC Address Filter of Force Overload Disassociation Index MAC Address Comment White List Black List Client s MAC Address Apply to White List Comment Add Delete Edit Cancel Note When force ove
125. ient connects to Display the authentication that the wireless client uses for connection with such AP Display the encryption mode used by the wireless client Display the transmission receiving rate for packets Click this button to refresh the status of station list Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Click this button to add current typed MAC address into Access Control Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the Station Dray Tek 119 VigorAP 900 User s Guide Control Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations VigorAP 900 User s Guide 120 Dr ay Te k 3 9 Wireless LAN 5GHz Settings for AP Mode The AP mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network Wireless LAN GHz 3 9 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the general settings for wireless connection such as specifying SSID selecting the wireless channel isolate LAN connection and so on Wireless LAN GHz gt gt General Se
126. igured in LAN for the router After finishing this web page configuration please click OK to save the settings 3 8 7 WMM Configuration WMM 1s an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt gt WMM Configuration WMM Configuration Setto Factory Default WMM Capable Enable Disable WMM Parameters of Access Point Aifsn CWMin AckPolicy d LI d LI WMM Parameters of Station Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin CW Max CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CW Max value must be greater than CW Min or equals to CWMin val
127. ilable for you to set data transmission rate This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option igor N61 802 11n Wireless USB Adapter Utility General Setting Advance Setting Auto launch when Windows start up Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 2347 C Set mini status always on top Frequency 902 1 Ibigin 2 4GH ws C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel C Group Roaming walls Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O adhoc network only C Automatically connect to non preferred networks 45 VigorAP 900 User s Guide Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR
128. ime setting Wireless LAN 2 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability secondis 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security Click OK to save the settings 4 Open Wireless LAN 2 4GHz gt gt General Setup and Wireless LAN S5GHz gt gt General Setup Configure SSID as ap900 BandSteering for both pages Click OK to save the settings Wireless LAN 4GHz gt gt General Setup General Setting IEEE 807 11 Enable Wireless LAN C Enable Limit Client 3 64 Default 64 Mode Mixed 11b 11g 1in Enable 2 Subnet Simulate 2 APs solate Isolate WLAN ID IGMP SSID ma Plt LAN Member 0 Untagged Snooping Bese 1 O ap9300 BandSteg LAN A Y O apoo DrayTek LAN B H B d sp ma o oD ma o Hide SSID Prevent SSID fram being scanned lenlato ARK lhueohace ehant fetotingnc 4 asthe tho coro TOM earnrnat arrazo wirod Ore Same value for 2 4GHz Wireless LAN GHz gt gt General Setup and 5GHz General Setting IEEE 602 11 Enable Wireless LAN O Enable Limit Client 3 64 Default 64 Mode Enable 2 Subnet Simulate 2 APs Isolate WLAN ID IGMP ae Se sete Suunet Member O Untagged Snooping no b o oO m o 5 3 DOD Ld m o OUD o oO VigorAP 900 User s Guide 60 Dr ay Te k 5 Open Wireless LAN 2 4GHz gt gt Security and Wireless LAN 8
129. imultaneously 3 7 10 Band Steering Band Steering detects if the wireless clients are capable of SGHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization i ea Disable Band Steering J aa Tran in SS SS Ba a If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent from network congestion i T ee I rr My a Wana i in Enable Band Steering F i F 87 VigorAP 900 User s Guide Dray Tek Open Wireless LAN 2 4GHz gt gt Band Steering to get the following web page Wireless LAN 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability 30 second s 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security OK Cancel Available settings are explained as follows Item Description Enable Band Steering If it is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of SGHz network connection the system shall wait and check for several seconds 30 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wirel
130. in EN55022 Class B and EN55024 Class B The product conforms to the requirements of Low Voltage LVD Directive 2006 95 EC by complying with the requirements set forth in EN60950 1 This product is designed for 2 4GHz 5GHz WLAN network throughout the EC region and Switzerland with restrictions in France Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of
131. ined as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter ve Disable Activate MAC address filter Blocked MAC address filter MAC Address Filter Display all MAC addresses that are edited before Client s MAC Manually enter the MAC address of wireless client Address Add Add a new MAC address into the list Delete Delete the selected MAC address in the list Edit Edit the selected MAC address in the list Cancel Give up the access control set up Dr ay Tek 103 VigorAP 900 User s Guide Backup Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Restore Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 8 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt WPS Wi Fi Protected Setup Enable WPS Wi Fi Protected Setup Information WPS Configured Yeas WPS SSID DrayTek L amp an 4 WES Auth Mode Mixed vvPAt WAS PSK WES Enc
132. ing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 148 Dr ay Te k 3 10 8 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wirele
133. inutes You need to setup WPS within two minutes VigorAP 900 User s Guide 104 Dray Tek 3 8 5 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt Access Point Discovery Access Point List Select SSID BSSID RSSI Channel Authentication Encryption See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP AF s MAC Address 0 J J J J AP sSSID sd Select as Universal Repeater Each item is explained as follows Dray Tek Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Di
134. ion Aifsn Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin CW Max CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CW Max value must be greater than CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can Dr ay Tek 53 VigorAP 900 User s Guide restrict stations from using specific category class if it is checked Note VigorAP 900 provides stand
135. ion list Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Click this button to add current typed MAC address into Access Control Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the Station Control VigorAP 900 User s Guide 154 Dr ay Tek Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations Dr ay Tek 155 VigorAP 900 User s Guide 3 11 RADIUS Server VigorAP 900 offers a built in RADIUS server to authenticate the wireless client that tries to connect to VigorAP 900 The AP can accept the wireless connection authentication requested by wireless clients RADIUS Server Configuration Enable RADIUS Server Users Profile upto 96 users Username Password Confirm Password Configure dt eal NO Username Select Delete Selected Delete All Authentication Client upto 16 clients Client IP Secret Key Confirm Secret Key Configure po dt an WO Client IP Select Delete Selected Delete All Backup Radius Cfg Upload From File Available settings are explained as follows Item Description Enable RADIUS Check it to enable the internal RADIUS server
136. ions for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek L4h 4 Per Station Bandwidth Limit Enable Upload Limit 64k Download Limit Auto Adjustment F Note a ese Traffic going ta any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 110 Dr ay Te k 3 8 9 Airtime Fairness Airtime fairness is essential in wir
137. iption Display the SSID of the AP scanned by VigorAP 900 Display the MAC address of the AP scanned by VigorAP 900 Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Display the wireless channel used for the AP that is scanned by VigorAP 900 Display the encryption mode for the scanned AP Display the authentication type that the scanned AP applied It is used to discover all the connected AP The results will be shown on the box above this button 128 Dr ay Tek 3 9 6 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 5GHz gt gt WMM Configuration WMM Configuration WME Capable APSO Capable Setto Factory Default Enable ODisable OQEnable Disable WMM Parameters of Access Point Aifsn AC_BE Bo AC_BK po AC WI i AC NVO WMM Parameters of Station CWMin CWMax AackPolicy 15 E 63 E 15 E 7 w 15 E Available settings are explained as follows Item WMM Capable Aifsn CWMin CWMax Txop ACM Dray Tek Description To apply WMM parameters for wireless data transmission please click the Enable radio button I
138. irmware TIO AO cssriiinnn eiin a dae iaaa Eaa a A tatonesacaesanectaes 171 S ABI Spe ee E E E E EE E E E E E E ES 172 LTE yS em LO eccna E E A R 172 OIA SO TS S aa T E E A 172 MCE CA E E E E E E E E E E T 173 OLA WEAN AZ StU SUCS naie iconii a a E 173 3149 WLAN S5G Z Statisti S ermoni i a a a a a aa a 174 Sa RIELES Fal O E eee E E E eee 175 IUO AO e ee ee eee eee eee 177 PRD ICAU ONS rise cciseca onc a E E 179 4 1 How to set different segments for different SSIDs in VigorAP 900 cccceeceeeeeeeeeeeeees 179 4 2 How to use VigorAP in Universal Repeater Mode cccccccseeeeeeceeeeeeeeeseeeeeeeeeeneeeeeeeeas 183 Trouble Shooting ve vaceeiccc cant ccsesestsasnsestcerecentssseseatsvaesestwessdeetesndusteesueniocuss 191 5 1 Checking If the Hardware Status Is OK or NoOb cccccccccccececeseseeeeeeeeeeeseeeeeeeeeeeseeaaeeeeeees 191 Dr ay Te k ix VigorAP 900 User s Guide 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 192 5 3 Pinging the Modem from Your COMPUTEL cccccccccsssssssesseeeeeeeeeeeeeeseeaaeaaeeesseeseeeeeeeeeeeeees 195 5 4 Backing to Factory Default Setting If Necessary 0 0 0 0 ccceeeeeeeeeeeeeetetieneeteeeeee 196 5 5 Contacting Dray TOK sxsccccccteesstesietecstecctedetiesteiuisedsedaduenetieda leuncalsasGedeeasleeetacsticedadadeandestadauesasiseoes 197 VigorAP 900 User s Guide x Dr ay Tek Introduction 9 Note This is a generic Internatio
139. is important to ensure that your server or data communications equipment are not overheating due to cooling system failures The inclusion of a USB thermometer in compatible VigorAP will continuously monitor the temperature of its environment When a pre determined threshold is reached you will be alerted via Syslog Temperature Sensor Settings Applications gt gt Temperature Sensor Setting Temperature Sensor Graph Temperature Sensor Settings Display Settings Calibration Offset Temperature Unit Alarm Settings o oo ec 10 C 10 C Celsius Fahrenheit Enable Syslog Alarm O Mail Alert High Alarm Low Alarm Available settings are explained as follows Item Display Settings Alarm Settings VigorAP 900 User s Guide Description Calibration Offset Type a value used for correcting the temperature error Temperature Unit Choose the display unit of the temperature There are two types for you to choose Enable Syslog Alarm The temperature log containing the alarm message will be recorded on Syslog if it is enabled Enable Mail Alert The temperature log containing the alarm message will be sent out by e mail High Alarm Low Alarm Type the upper limit and lower limit for the system to send out temperature alert 160 Dr ay Tek Dray Tek Temperature Sensor Graph Below shows an example of temperature graph Applications gt gt Temperature Sensor Graph Temperature Sensor
140. ivalent product of equal value and will be offered solely at our discretion This warranty will not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working conditions The warranty does not cover the bundled or licensed software of other vendors Defects which do not significantly affect the usability of the product will not be covered by the warranty We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes Web registration is preferred You can register your Vigor modem via http www draytek com Due to the continuous evolution of DrayTek technology all modems will be regularly upgraded Please consult the DrayTek web site for more information on newest firmware tools and documents http www draytek com i Dray Tek European Community Declarations Manufacturer DrayTek Corp Address No 26 Fu Shing Road Hukou Township Hsinchu Industrial Park Hsinchu County Taiwan 303 Product VigorAP 900 DrayTek Corp declares that VigorAP 900 is in compliance with the following essential requirements and other relevant provisions of R amp TTE Directive 1999 5 EC ErP 2009 125 EC and RoHS 2011 65 EU The product conforms to the requirements of Electro Magnetic Compatibility EMC Directive 2004 108 EC by complying with the requirements set forth
141. k card AP Router EJE io D CE T ae L1 WPS WPS Start PBC Or Web Button on Interface AP Router If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the VigorAP 900 AP Router Wireless D gt ce Client iL t Start PIN Define a PIN Code PIN Code of Station Web Interface Dr ay Te k 41 VigorAP 900 User s Guide 3 5 Wireless LAN Settings for AP Mode When you choose AP as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control Wireless LAN 2 4GHz VigorAP 900 User s Guide 42 Dr ay Te k 3 5 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN 2 4GHz gt gt General Setup General Setting IEEE 602 11 Enable Wireless LAN Enable Limit Client 64 3 64 Default 64 Mode Mixed lib iig i1in Enable 2 Subnet Simulate 2 APs Hide Isolate YLAN ID IaMFP SSID ma u Member 0 UntaggediSnooping DrayTek LAN A LAM A 0 Mac Clone DrayTek L4h B LAN B 0 LANM A 0 0 LAM A Hide SSID Prevent SSID from being scanned Isola
142. k the box to set the maximum number of wireless stations VigorAP 900 User s Guide 72 Dr ay Tek which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixed 11b 11g 11n lib Only iig Only iin Only Misediiib iigi Misediiiqg iin Mixed 11b 1lg 1in Enable 2 Subnet Check the box to enable the function for two independent Simulate 2 APs subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage SSID Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and
143. l that provides communication across diverse interconnected networks M Show icon in taskbar when connected Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 Internet Protocol TCP IP Properties x General ou can get IF settings assigned automatically if vour network supports this capability Otherwise You need to ask your network administrator for the appropriate IP settings G Obtain an IP address autorgaigals sooo i Use the following IF address IP address Subnet mask Default gateway Obtain ONS server cities esr OOP eee eee eee Use the following DNS server addresses Preferred DNS server Alternate DNS server Dr ay Te k 11 VigorAP 900 User s Guide 2 3 Windows XP IP Address Setup Click Start button it should be located at lower left corner of your computer then click control panel Double click Network and Internet Connections icon click Network Connections and then double click Local Area Connection Local Area Connection Status window will appear and then click Properties Local Area Connection Properties General Authentication Advanced i Connect using BS AMD PCNET Family PCI Ethernet Ad Configure This connection uses the following items ivi e Client for Microsoft Networks be he and Printer Shang fo
144. led simultaneously 3 8 10 Band Steering Band Steering detects if the wireless clients are capable of SGHz operation and steers them to that frequency It helps to leave 2 4GHz band available for legacy clients and improves users experience by reducing channel utilization i ea Disable Band Steering J aa Tran in SS SS Ba a E a If dual band is detected the AP will let the wireless client connect to less congested wireless LAN such as 5GHz to prevent from network congestion i T ee I rr My a Wana i in Enable Band Steering F i F 113 VigorAP 900 User s Guide Dray Tek Open Wireless LAN 2 4GHz gt gt Band Steering to get the following web page Wireless LAN 4GHz gt gt Band Steering Enable Band Steering Check Time for WLAN Client 5G Capability 30 second s 1 60 Default 30 Note Please setup at least one pair of 2 4GHz and SGHz Wireless LAN with the same SSID and security OK Cancel Available settings are explained as follows Item Description Enable Band Steering If it is enabled VigorAP will detect if the wireless client is capable of dual band or not within the time limit Check Time If the wireless station does not have the capability of SGHz network connection the system shall wait and check for several seconds 30 seconds in default to make the 2 4GHz network connection Specify the time limit for VigorAP to detect the wir
145. less LAN 56Hz gt gt Security Settings SSID 1 SSID 2 SSID Mode SSID 3 SSID 4 DrayTekSG L4n 4 Mixed WRA WPAS 1 PSK k Set up RADIUS Server if 802 18 is enabled WPA WPA Algorithms Pass Phrase key Renewal Interval WEP Key 1 Key 2 Key so Key 4 802 1 WEP TKIP AES TKIPJAES 3600 secondsiRkange 600 36000 seconds Default 3600 seconds Disable Enable a Available settings are explained as follows Dray Tek Item Mode Description There are several modes provided for you to choose IWPA2 PSK Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio 139 VigorAP 900 User s Guide usin
146. less stations VigorAP 900 User s Guide 136 Dr ay Te k 3 10 Wireless LAN 5GHz Settings for Universal Repeater Mode 3 10 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN 5GHz gt gt General Setup General Setting IEEE 802 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mixed llat ilini Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate VLAN ID Member O Untagged LANA LAN B oy LANA LANA 9 Hide SSID Prevent SSID from being scanned Isolate Member Wireless clients stations with the same SSID cannot access for each other Channel S180MHz Channel 36 Extension Channel s200MHz Channel 40 Channel width Auto 2O 40MHZ 2OMHZ Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11a only 11n only and Mixed 1la 11n Mixed lla iini a Lia Onl p ce Mixed 1la iinij E L Fr L Enable 2 Subnet Check the box to enable the function for two independent Simulate 2 APs subnets O
147. lf my Documents 1 E id My Computer My Recent Emy Network Places Documents iB Ry5 COM Lite 3 MWSnapsoo C TeleDanmark Tools config v2k2_232_ config 1 My Documents v2ke_250_config_1 My Computer File name contig ka My Network Dave as type Configuration file Dr ay Te k 167 VigorAP 900 User s Guide 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate Restore Configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Configuration Backup Restoration Restoration Select a configuration file Click Restore to upload the file Click Backup to download current running configurations as a file 2 Click Browse button to choose the correct configuration file for uploading to the modem 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 3 13 5 Syslog Mail Alert SysLog function is provided for users to monitor AP Ther
148. ly in this field below or automatically negotiated via 802 1x authentication Dr ay Tek 23 VigorAP 900 User s Guide WPA Algorithm Pass Phrase Key Renewal Internal PMK Cache Period Pre Authentication Key 1 Key 4 802 1x WEP WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated
149. m Maintenance 3 Memory Left 43156 kB IP address 192 168 1 2 Diagnostics Cached Memory 14464 kB 62208 kB IP Mask 25 255 255 0 Wireless LAN 2 4GHz LAN B FAQ Application Note MAC Address 00 10 AA 9E 2B 38 Product Registration 5 SSID DrayTak LAN A MAC Address 00 10 AA SE 26 38 IP Mask 255 255 255 0 Drives Vergo 27 1 5 Wireless LAN SGHE Universal Repeater WG MAC Address 00 10 Aa SE 25 SA MAC Address 1 D6 10 AA 96 26 38 SSID DrayTek 5G LAN A Seip Channel 36 Channel ii riwer Version 2 7 1 5 Admin made Universal Repeater Mode Note If you fail to access to the web configuration please go to Trouble Shooting for detecting and solving your problem For using the device properly it is necessary for you to change the password of web configuration for security and adjust primary basic settings VigorAP 900 User s Guide 14 Dr ay Te k 2 6 Changing Password 1 Please change the password for the original security of the modem 2 Goto System Maintenance page and choose Administrator Password System Maintenance gt gt Administration Password Administrator Settings Accaunt Password Confirm Password Note Authorization can contain only a z A Z20 9 MF p Sekt OG yi lt 2 T7 3 Enter the new login password on the field of Password Then click OK to continue 4 Now the password has been changed Next time use the new password to ac
150. ment The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such featur
151. mode Mixed 1ib 11g 11in 11b Only 1ig Only 1in Only Mixed 11b 11q Mixed iib iig 1in Main SSID Set a name for VigorAP 900 to be identified Enable 2 Subnet Simulate 2 APs Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two VigorAP 900 User s Guide 16 Dr ay Tek independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Multiple SSID When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Channel Means the channel frequency of the wireless LAN The default channel is 6 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 2462MHz Channel 11 AutoSelect 2412MHz Channel 1 2417MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 2432MHz Channel 5 2437MHz Channel 6 2442 MHz Channel 7 2447 MHz Channel 8 2452MHz Channel 9 9462MHz Channel 11 2467MHz Channel 12 Extension Channel With 802 11n there is one option to
152. n This page allows you to enable the roaming feature and the pre authentication Wireless LAN GHz gt gt Roaming Enable Fast Roaming PMK Caching Cache Period 10 minutercs 10 600 Default 10 Pre Authentication Note This function is only supported when WPA2 802 1x is selected as the security mode Please open Wireless LAN SGHz2 gt gt Security to check the security configuration OK Cancel Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 134 Dray Tek 3 9 11 Station List Station List provides the knowledge Station List of connecting wireless clients now along with its status code General Display general information e g MAC Address SSID A
153. nal version of the user guide Specification compatibility and features vary by region For specific user guides suitable for your region or product please contact local distributor 1 1 Introduction Thank you for purchasing this VigorAP 900 the concurrent dual band wireless 2 4G 5G access point offering high speed data transmission With this high cost efficiency VigorAP 900 computers and wireless devices which are compatible with 802 1 1n 802 11a can connect to existing wired Ethernet network via this VigorAP 900 at the speed of 300Mbps Easy install procedures allows any computer users to setup a network environment in very short time within minutes even inexperienced users Just follow the instructions given in this user manual you can complete the setup procedure and release the power of this access point all by yourself VigorAP 900 also is a Power over Ethernet Powered Device which adopts the technology of PoE for offering power supply and transmitting data through the Ethernet cable Vigor2920n VigorAP 900 Internet 7 l l LAN switch Printer P2P NAS Web server storage e g personal web Dr ay Te k 1 VigorAP 900 User s Guide AP Management The VigorAP900 can operate in standalone mode for your office network or a classroom or a waiting room of some transportation terminals e g ferry terminal bus station train station or a clinic s waiting room connected to your LAN and offering you with wireless acces
154. nce you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can Dr ay Tek 137 VigorAP 900 User s Guide Hide SSID SSID Subnet Isolate Member VLAN ID Channel Extension Channel Channel Width make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage Set a name for VigorAP 900 to be identified Default settings are DrayTek5G LAN A and DrayTek5G LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN
155. nd AF at the same time Wireless LAN 5GHz AP 4P 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them Universal Repeater AF 900 can act as a wireless repeater it can be Station and AF at the same time Available settings are explained as follows Item Description Wireless LAN 2 4GHz AP This mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network AP Bridge Point to This mode can establish wireless connection with another Point VigorAP 900 using the same mode and link the wired network which these two VigorAP 900s connected together Only one access point can be connected in this mode AP Bridge Point to This mode can establish wireless connection with other VigorAP Multi Point 900s using the same mode and link the wired network which these VigorAP 900s connected together Up to 4 access points can be connected in this mode AP Bridge WDS This mode is similar to AP Bridge to Multi Point but access point is not working in bridge dedicated mode and will be able to accept wireless clients while the access point is working as a wireless bridge VigorAP 900 User s Guide 32 Dray Tek Universal Repeater This product can act as a wireless range extender that will help you to extend the networking wirelessly The access point can act as Station and AP at the same time It can use Station function to
156. nd wired Ethernet network and exchanges data between them 2 Open Wireless LAN 2 4GHz gt gt General Setup and then Wireless LAN S5GHz gt gt General Setup Choose the subnet LAN B for SSID 1 and choose LAN A for SSID 2 Specify the wireless channel Then click OK to save the configuration Wireless LAN 5GHZ gt General Setup General Setting IEEE 802 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mixediiib iig iin Enable 2 Subnet Simulate 2 APs Hide Isolate VLAN ID SSID 2a Sunnet Member 0 Untagged Mer cone 1 O Oo be ol 2 E no b 3 E lo 4 P D fo Hide SSID Prevent SSID from being scanned Isolate Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 2462MHz2 Channel 11 Extension Channel 2442MHz Channel F se VigorAP 900 User s Guide 180 Dr ay Te k 3 Open Wireless LAN 2 4GHz gt gt Security Settings and Wireless LAN 5GHz gt gt Security Settings Set the encryption method and set the password for SSID 1 and SSID 2 respectively Mode Set up RADIUS Server if 502 18 is enabled WPA WPA Algorithms OTKIP AES TKIP AES Pass Phrase Key Renewal Interval seconds PMK Cache Period minutes Pre Authentication Dis
157. nds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming 124 Dr ay Tek Key 1 Key 4 802 1x WEP securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings RADIUS
158. ntrol panel Click View Network Status and Tasks then click Manage Network Connections Right click Local Area Netwrok then select Properties Local Area Connection Properties window will appear select Internet Protocol Version 4 TCP IPv4 and then click Properties Networking Connect u using ir Intel R FPRO 1000 MT Network Connection This connection uses the following items W OM Client for Microsoft Networks W Jt Q0S Packet Scheduler Sa detideandfenternine fee Mewa eios i Intemet Protocol animai G oe sees Froperties M Description SSA Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 Internet Protocol Version 4 TCP TPy4 Properties General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automi soe ee Use the following IF addfess IP a 5 192 168 1 9 209 a ee net mask Default gateway Sn eee wa a Ta p pe a P LDTaIN Oo server add s altomatically HBHRHRHHEHEHEHEHEHEHEHEHEHEHEEHEEE Use the
159. on for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set four sets of SSID for different usage Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not access for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices th
160. onds no station is allowed to connect with the router AP s MAC Address p p AP s S510 Select as Universal Repeaters 3 A window will pop up Please enter the security information of Vigor2830n in it and click OK Wireless LAN gt gt Universal Repeater Universal Repeater Parameters SSID DrayTek 2830 MAC Address Optonal 00 50 7f 70 80 26 Channel 2437MHz Channel 6 Security Mode WPA2 PSK x Encryptoan Type TKIP Pass Phrase PTrTTiriti Note If Channel is modified the Channel setting of AP would also be changed 2 C cancel 4 Confirm the Universal Repeater connection is up We can launch the Command Prompt cmd exe on a wireless client of AP800 to ping Vigor2830 to confirm the Universal Repeater connection has been established successfully CAWINDO WStsystem32 cmd exe lol x VigorAP 900 User s Guide 188 Dr ay Te k Setting Wireless LAN on AP900 l Please go to Wireless LAN gt gt General Setup Make SSID and Channel settings the same as configured for Vigor2830n Please go to Wireless LAN gt gt Security Settings Make SSID and Channel settings the same as configured for Vigor2830n Using the Wireless Service of AP900 l Choose the SSID of AP900 Avelable Networt Profile Management 9 WPS About 00 50 7F 629880 E DrayTek SF Wireless 0050 7F 70 2A 08 EE gt rayTek 2830 00 50 7F 70 80 28 efa Ditta paga A OOF EAE AS ss 00 50 7F C3 5S F8 af
161. onnected Number Analysis 43 00 2 46 Nearby Number E 56 Nearby Number 732 25 2 46 Connected Number E 5G Connected Number 21 50 10 75 0 00 REETA HETA EHE Ta E TA ae aie TA HE TA H ie are re 0 re 0s sd Fr re eS APO aye Weekly Nearby amp Connected Number Weekly Connected Number Analysis 28 2 46 Nearby Number 56 Nearby Number T7 2 46 Connected Number E 5G Connected Number 14 T 0 Aug 23 Aug 24 Aug 25 Aug 26 Auger Aug 28 Aug 29 Aug 30 Aug 1 Sep 01 Sep le Sep 03 Note Only browser supporting HTMLS can display Station Statistics correctly Available settings are explained as follows Item Description Show Chart Choose one of the items to display the statistics chart for wireless stations Dr ay Tek 175 VigorAP 900 User s Guide Daily Connected Number Analysis Daily Visiting Number Analysis Weekly Connected Number Analysis Weekly Visiting Number Analysis VigorAP 900 User s Guide Nearby amp Connected Number Nearby amp Connected Number Visiting amp Passing Number Visiting Time Nearby amp Connected Number Choose it to have the statistics of the wireless stations which is nearby and connected to VigorAP 900 Visiting amp Passing Number Choose it to have the statistics of the wireless stations which is visiting and passing to VigorAP 900 Visiting Time Choose it to have the statistics of the wireless stations which is visiting VigorAP 900 Click
162. ore Click it to restore the settings RADIUS configuration from an existed file After finishing this web page configuration please click OK to save the settings 3 12 Applications Below shows the menu items for Applications 3 12 1 Schedule The VigorAP has a built in clock which can update itself manually or automatically by means of Network Time Protocols NTP As a result you can not only schedule the AP to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance gt gt Time and Date menu press Inquire Time button to set the VigorAP s clock to current time of your PC The clock will reset once if you power down or reset the AP There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the AP s clock This method can only be applied when the WAN connection has been built up Applications gt gt Schedule Schedule Enable Schedule Schedule Configuration Index Setting Action Status Add Dr ay Tek 157 VigorAP 900 User s Guide Available settings are explained as follows Item Description Schedule Schedule Configuration Enable Schedule Check it to enable the function of schedule configuration Inde
163. ou choose User defined 1440 min i User defined 30 min 1 hour 2 hours 4 hours ip days Display All Station All the wireless stations connecting to Vigor router by using Control List such SSID will be listed on Station Control List After finishing all the settings here please click OK to save the configuration Dr ay Tek 117 VigorAP 900 User s Guide 3 8 12 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAH 7 4GHz gt gt Roaming Enable Fast Roaming PMK Caching Cache Period 10 minutets 10 6004 Default 104 Pre Authentication Note This function is only supported when WPA2 802 1x Is selected as the security mode Please open Wireless LAN 2 4GHz gt gt Security ta check the security configuration OK Cancel Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in th
164. ough VigorAP 900 Although they have equal probability to access the wireless channel Station B 1 1n gets only a little airtime and waits too much because Station A 11g spends longer time to send one packet In other words Station B fast rate is obstructed by Station A slow rate a Packet Packet Packet a z E P Station B To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fair airtime and it s speed is not limited by Station A slow rate Packet Packet Station A Station B VigorAP 900 User s Guide 150 Dr ay Te k It is similar to automatic Bandwidth Limit The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment Please note that Airtime Fairness of 2 4GHz and 5GHz are independent But stations of different SSIDs function together because they all use the same wireless channel IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless conn
165. p HTTP port HTTPS port Specify user defined port numbers for the HTTP and HTTPS servers Wi Fi Hardware Button Stop people manually disabling the wireless if they do not Setup have the right of administration to access to the device Enable Choose it to enable the hardware button function Disable Choose it to disable the hardware button function LED Setup The LEDs blink always since VigorAP 900 is powered on Some people might not like that Therefore the function of LED is allowed to be disabled to make people feeling comfortable and undisturbed When the box is checked all the LEDs on VigorAP 900 will light off immediately after clicking OK Enable Choose it to enable the function of LED Disable Choose it to disable the function of LED VigorAP 900 User s Guide 170 Dr ay Te k 3 13 8 Reboot System The web user interface may be used to restart your modem Click Reboot System from System Maintenance to open the following page System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration If you want to reboot the modem using the current configuration check Using current configuration and click OK To reset the modem settings to default values check Using factory default configuration and click OK The modem will take 5 seconds to reboot the system Note When the system pops up Reboot System web page af
166. pe the MAC address of the AP Click Add Later the MAC address of the AP will be added and be shown on WDS settings page 69 VigorAP 900 User s Guide 3 6 3 WDS AP Status VigorAP 900 can display the status such as MAC address physical mode power save and bandwidth for the working AP connected with WDS Click Refresh to get the newest information Wireless LAN 2 4GHz gt WDS AP Status WDS AP List AID MAC Address 802 11 Physical Mode Power Save Bandwidth VigorAP 900 User s Guide 70 Dr ay Te k 3 7 Wireless LAN Settings for AP Bridge WDS Mode When you choose AP Bridge WDS as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery WDS AP Status WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control Wireless LAN 2 4GHz 3 7 1 General Setup By clicking the General Setup a new web page will appear so that you could configure security Tx Burst and choose proper mode Please refer to the following figure for more information Dray Tek 71 VigorAP 900 User s Guide Wireless LAN 7 4GHz gt gt General Setup General Setting IEEE 602 11 Enable Wireless LAN Enable Limit Client 64 3 64 Default 64 Mode Mixed 11b 11g lini T Enable 2 Subnet Simulate 2 APs Hide Isolate Isolate WYLAN ID IGMP SSID aR sunne LAN Member Untagged Snooping Mac Elang DrayTek LANM A LAN A
167. poo DrayTek LAN B M E C 20 oO sD 1 A Hide SSID Prevent SSID fram being scanned lenlato ARK Ihtieoloce ehant Potatiognc4 saith tho como COTA earnnnt orraze wirod Ore Same value for 2 4GHz Wireless LAN GHz gt gt General Setup and 5GHz General Setting IEEE 602 11 Enable Wireless LAN O Enable Limit Client 3 64 Default 64 Mode Mixed lla iin Enable 2 Subnet Simulate 2 APs Isolate VLAN ID IGMP Hide SSID R Sunet Member O Untagged Snooping o ei E 2 0 oO o O 3 DOD Ld m o o mA oF bf o Dr ay Tek 115 VigorAP 900 User s Guide 17 Open Wireless LAN 2 4GHz gt gt Security and Wireless LAN 5GHz gt gt Security Configure Security as 12345678 for both pages Click OK to save the settings Wireless LAN 7 4GHz gt gt Security Settings SSID 1 SSID SSID 3 SSID 4 SSID apy00 Bandsteering Mode Missed WRA IPAS IPSE ka Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms OTKIP aeS TKIP AES al Interval 3600 second s 600 360005 Default 36005 Pass Phrase Same value for 2 4GHz and SGHz Wireless LAN GHz gt gt Security Settings SSID 3 SSID 4 Dray TekSG LAN A Missed W PA HWPAZN PSE be Set up RADIUSNSerer if 902 1 is enabled WPA WEA Algorithms OTKIP OasaesS TKIP AES Pass Phrase Key Renewal Interval WEP 18 Now VigorAP 900 will let the wireless clients connect to less congested wireles
168. r Microsoft Metworks le i il dos Packet Scheduler 5 cms nternet Protacal TCP P H lt lt _ gt CLIJ wooo lastall Lliairretall Properties d vo e Description oo Transmission Control Protocol nternet Protocol The default Wide area network protocol that provides communication across diverse interconnected networks or me 4 w C Show icon in notification area when connected Notify me when this connection has limited of no connectivity Cancel 7 Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 Internet Protocol TCP IP Properties General You can get F settings assigned automatically if pour network supports this capability Othenwse you need to ask your network administrator for the appropriate P settings Obtain an IF address automatically Use the following IF address IP address 192 1668 1 5 255 255 255 0 00 e 2 5 Subnet ma Default gateway Use the following DNS server addresses Preferred ONS server Alternate DHS server m P oaii Myanced ___ s eenece VigorAP 900 User s Guide 12 Dr ay Te k 2 4 Windows Vista IP Address Setup Click Start button it should be located at lower left corner of your computer then click co
169. r NAT Usage d E Enable Server Disabile Server si f D Enable Relay Agent Start IP Address 192 168 1 10 IP Pool Counts 150 RIP Protocal Control __ 3 Gateway IP Address 192 168 1 1 Lease Time 269200 DNS Server IP Address Primary IP Address Secondary IP Address AC x 183 VigorAP 900 User s Guide Dray Tek 1 Enter the IP address and Subnet Mask 2 Enable the DHCP Server 3 Set the DHCP IP range 4 Click OK Online Status Physical Connection IPv4 LAN Status IP Address 192 168 1 1 WAN 1 Status Enable RX Packets 3424 Mode PPPoE Line Name ADSL GW IP TX Packets 0 0 Message PPP Shutdown WAN Status Enable Line Name Mode Ethernet TX Packets 64 f34 LAP AR F Catr Setting Wireless LAN on Vigor2830n 1 Please go to Wireless LAN gt gt General Setup Wireless LAN gt gt General Setup General Setting IEEE 602 11 Enable Wireless LAN 1 Mode Mixedi 1 1b 11g 1 In xl Index 1 15 in Schedule Setup PPPoE TX Rate Bps IPv6 Primary DNS 165 95 192 1 TX Packets 1928 TX Rate Bps Go to Online Status gt gt Physical Connection to check if WAN is connected System Uptime Oday 0 7 44 Secondary DNS 168 95 1 1 gt gt Dial PPPoE Up Time 00 00 00 RX Packets 0 RX Rate Bps 0 gt gt Drop PPPoE Up Time 0 00 08 RX Packets 48 RX Rate Bps 513 Only sch
170. r airtime and it s speed is not limited by Station A slow rate VigorAP 900 User s Guide 56 Dr ay Tek m Packet Packet Station A i Station B It is similar to automatic Bandwidth Limit The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment Please note that Airtime Fairness of 2 4GHz and 5GHz are independent But stations of different SSIDs function together because they all use the same wireless channel INSPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Wireless LAN 7 4GHz gt gt Airtime Fairness Enable Airtime Fairness Triggering Client Number 2 2 64 Default 2 OK Cancel Available settings are explained as follows Item Description Enable Airtime Try to assign similar airtime to each wireless station by Fairness controlling TX traffic Airtime Fairness Click the link to display the following screen of airtime fairness note A 172 17 3 110 wireless ap_af_note asp Airtime Fairness Note Airtime is the time where a wireless station occupies the wirelees channel Airtime Fairness function tries to assign similar airtime to each station by controlling Tx traffic IN
171. rAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 102 Dray Tek 3 8 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Policy MAC Address Filter Indes MAC Address Clent s MAC Address l l Limit 256 entries Backup ACL Cfg Upload From File Available settings are expla
172. re information e g AID PSM WMM RSSI PhMd BW MCS Rate for the Station VigorAP 900 User s Guide 7 Dray Tek Control Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations 3 6 Wireless LAN Settings for AP Bridge Point to Point AP Bridge Point to Multi Point Mode When you choose AP Bridge Point to Point or Point to Multi Point Mode as the operation mode the Wireless LAN menu items will include General Setup AP Discovery WDS AP Status Airtime Fairness Roaming Status and Station Control AP Bridge Point to Point allows VigorAP 900 to connect to another VigorAP 900 which uses the same mode All wired Ethernet clients of both VigorAP 900s will be connected together Point to Multi Point Mode allows AP 900 to connect up to four AP 900s which uses the same mode All wired Ethernet clients of every VigorAP 900 will be connected together Dr ay Te k 65 VigorAP 900 User s Guide 3 6 1 General Setup By clicking the General Setup a new web page will appear so that you could configure security Tx Burst and choose proper mode Please refer to the following figure for more information Wireless LAN 7 4GHz gt gt General Setup General Setting IEEE 607 11 Enable Wireless LAN Mode Mixed lib 1lig lin Channel 2462MHz Channel 11 Extension Channel 2442MHz Channel 7 T Note Enter the configuration of A
173. ress Type the peer MAC address for the access point that VigorAP 900 connects to VigorAP 900 User s Guide 18 Dr ay Tek Advanced Settings for AP Bridge Point to Multi Point When you choose AP Bridge Point to Multi Point you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Note Enter the configuration of APs which AP 900 want to connect Phy Mode HTMIx 1 Security 3 Security O Disabled WEP OTKIP Oaes O bDisabled WEP OTKIP AES ey CO ey O Peer MAC Address Peer MAC Address LPL Pee LeeLee 2 Security 4 Security O bDisabled WEP OTKIP Oaes O Disabled WEP TKIP AES Peer MAC Address Feer MAC Address ELLELE L PLE ee Available settings are explained as follows Item Description Phy Mode Data will be transmitted via HTMIX mode Each access point should be setup to the same Phy mode for connecting with each other Security Select WEP TKIP or AES as the encryption algorithm Type the key number if required Peer MAC Address Type the peer MAC address for the access point that VigorAP 900 connects to Dr ay Te k 19 VigorAP 900 User s Guide Advanced Settings for AP Bridge WDS When you choose AP Bridge WDS you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Note Enter the configuration of APs which AP 900 want to connect Remote 4P should always set LAN A MAC address to connect 4P900 WHOS Phy Mode HTM
174. rload disassociation is enabled clients in black list will be disassociated first Clients In white list will not be disassociated OK Clear All Available settings are explained as follows Item Description White List Black List Display the information such as index number MAC address and comment for all of the members in White List Black List Wireless stations listed in Black List will be forcefully disconnected first when traffic overload occurs and Force Overload Disassociation is enabled Client s MAC Specify the MAC Address of the remote local client VigorAP 900 User s Guide 38 Dr ay Te k Address Apply to White List MAC address listed inside Client s MAC Address will be categorized as one of members in White List Black List MAC address listed inside Client s MAC Address will be categorized as one of members in Black List Add Add a new MAC address into the White List Black List Delete Delete the selected MAC address in the White List Black List Edit Edit the selected MAC address in the White List Black List Cancel Give up the configuration 3 3 5 Status of Settings Load Balance can help to distribute the traffic for all of the access points e g VigorAP900s registered to Vigor 2860 or Vigor2925 series This web page displays the settings related to Load Balance for VigorAP 900 In which By Station Number By Traffic and Force Overload Disassociation indicate settings configured in
175. rograms Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Per Station Bandwidth Limit Enable Upload Limit Download Limit Auto amp djustment Note L Download Traffic going to any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 84 Dr ay Tek 3 7 9 Airtime Fairness Airtime fairness is essential in wireless network
176. rver and the usage of video Wireless station connecting to VigorAP 900 with SSID 2 can get the IP address with the network segment of 192 168 1 0 24 LAN A wireless station connecting to VigorAP 900 with SSID 1 can get the IP address with the same network segment of 192 168 2 0 24 LAN B LAN B 192 168 2 0 24 gt for internal server LAN A 192 168 1 0 24 gt for music video traffic VigorAP 900 User s Guide Dray Tek 179 Below shows you how to configure the web page for VigorAP 900 1 Inthe page of Operation Mode click AP mode for 2 4GHz Wireless and 5GHz Wireless Operation Mode Configuration Wireless LAN 2 4GHz Tt moe Cetween wireless devices and wired Ethernet network and exchanges data between them AP Bridge Point to Point AF 900 will connect to another AP 900 which uses the same mode and all wired Ethernet clients of both AP 900s willbe connected together AP Bridge Point to Multi Point AF 900 will connect to up to four 4P 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together AP Bridge WDS AF 900 will connect to up to four 4P 900s which uses the same mode and all wired Ethernet clients of every AP 900s willbe connected together This mode is still able to accept wireless clients Universal Repeater AFP 900 can act as a wireless repeater it can be Station and AP at the same time Wireless LAN 5GHz d ge between wireless devices a
177. ryp Type TEIP AES Device Configure Configure via Push Button Start PBC Configure via Client PinCode Stare PIN Status Idle Note WPS can help your wireless cient automatically connect to the Access point WPS is Disabled WPS 1s Enabled d Waiting for WES requests from wireless clients Available settings are explained as follows Item Description Enable WPS Check this box to enable WPS setting WPS Configured Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Click Start PBC to invoke Push Button style WPS setup Button procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client Type the PIN code specified in wireless client you wish to PinCode connect and click Start PIN button Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two m
178. s If your network requires several VigorAP900 units to centrally manage and monitor them individually as a group will be expected DrayTek central wireless management AP Management lets control efficiency monitoring and security of your company wide wireless access easier be managed Inside the web user interface we call central wireless management as Central AP Management which supports mobility client monitoring reporting and load balancing to multiple APs For central wireless management you will need a Vigor2860 or Vigor2925 series router there is no per node licensing or subscription required With the unified user interface of Vigor2860 Combo WAN series and Vigor2925 Triple WAN series the multiple deployment of VigorAP900 can be clear at the first sight For multiple wireless clients to apply the AP Load Balancing to the multiple APs AP management will manage wireless traffic with smooth flow and enhanced efficiency WLAN Setting w CA hp i rassa Vigor Router T Eia yarime Ee mal In et hs Eris b Fena a al Tene bia ase 7 TEF Seb MEI Kae AEF m arma PEER Tor F 1 APEH TA2BAC 192 fea A r Ona wokpy Aataichits Bat APAPA 1 40 Pasar i z APHOO SF i ee 192 1 25a 2 Diaytek ha ehia Whe FS fig Password k ba 3 APROO IFZA mmmn sk PETS h b o 20 T Passward Hate Green Online Red Ofine Gray Hidden 310 VigorAP 900 User s Guide 2 Dr ay Te k 1 2 LED Indicators and Connectors
179. s LAN such as 5GHz to prevent from network congestion 3 8 11 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP If such function is not enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as 1 hour and reconnection time can be set as 1 day Thus the guest can finish his job within one hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP VigorAP 900 User s Guide 116 Dr ay Te k Wireless LAH 2 4GHz gt Station Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Enable F Connection Time Reconnection Time Display All Station Control List Note Once the feature is enabled the connection time quota will apply to each wireless client identified by MAC address Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Use the drop down list to choose the duration for the wireless Reconnection Time client connecting reconnecting to Vigor router Or type the duration manually when y
180. s from 33 to 126 except and 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode After finishing this web page configuration please click Next to continue 2 7 6 Finishing the Wireless Settings Wizard When you see this page it means the wireless setting wizard is almost finished Just click Finish to save the settings and complete the setting procedure Quick Start Wizard Vigor Wizard Setup is now finished Basic Settings for AP9OO is completed Press Finish button to save and finish the wizard setup Mote that the configuration process takes a few seconds to complete 2 8 Online Status The online status shows the LAN status Station Link Status for such device Online Status System Status System Uptime 7d 21 59 15 LAH A Status IP Address TX Packets RX Packets TX Bytes RX Bytes 192 168 1 2 87507 16484 63383766 1497761 LAH E Status IP Address TX Packets RX Packets TX Bytes RX Bytes 192 168 2 2 0 6 0 36 Detailed explanation is shown below Item Description IP Address Displays the IP address of the LAN interface TX Packets Displays the total transmitted packets at the LAN interface RX Packets Displays the total number of received packets at the LAN VigorAP 900 User s Guide 28 Dr ay Tek interface TX Bytes Displays the total transmitted size at the LAN interface
181. s that must support critical enterprise applications Most of the applications are either symmetric or require more downlink than uplink capacity telephony and email send the same amount of data in each direction while video streaming and web surfing involve more traffic sent from access points to clients than the other way around This is essential for ensuring predictable performance and quality of service as well as allowing 802 11n and legacy clients to coexist on the same network Without airtime fairness offices using mixed mode networks risk having legacy clients slow down the entire network or letting the fastest client s crowd out other users With airtime fairness every client at a given quality of service level has equal access to the network s airtime The wireless channel can be accessed by only one wireless station at the same time The principle behind the IEEE802 11 channel access mechanisms is that each station has equal probability to access the channel When wireless stations have similar data rate this principle leads to a fair result In this case stations get similar channel access time which is called airtime However when stations have various data rate e g 11g 11n the result is not fair The slow stations 11g work in their slow data rate and occupy too much airtime whereas the fast stations 11n become much slower Take the following figure as an example both Station A 11g and Station B 1 1n transmi
182. same mode and all wired Ethernet clients of every AP 900s will be connected together This mode is still able to accept wireless clients Universal Repeater AP 900 can act as a wireless repeater it can be Station and AP at the same time Wireless LAN 5GHz AP AP 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them Universal Repeater AP 900 can act as a wireless repeater it can be Station and AF at the same time Setting LAN on AP900 Here we need to set AP900 using only one network segment which is correspondent to the one used by Vigor2830n Also the DHCP Server should be disabled so users will be assigned IP addresses by Vigor2830n 1 Please go to Wireless LAN gt gt General Setup and remove the tick on Enable 2 Subnet Please click OK to save setting Wireless LAN gt gt General Setup General Setting IEEE 602 11 Enable Wireless LAN Mode Mixed 11b 119 1in sci SSID Subnet gris et 4 Mac Clone 1 DrayTek Lan A L C QO T 2 O DrayTek Lan 8 O O 3 O Db o 0 40 O0 o 0 VigorAP 900 User s Guide 186 Dr ay Te k 2 Please go to LAN gt gt General Setup LAN gt gt General Setup Ethernet TCP IP and DHCP Setup LAN IP Network Configuration DHCP Server Configuration IP Addrass 192 168 1 2 4 O Enable Server Disable Server Subnet Mask 255 255 255 0 Start IP Address Default Gateway End IP Address Subnet
183. same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for 74 Dray Tek TxBURST on the tab of Option igor N61 802 11n Wireless USB Adapter Utility Configuration Status General Setting Advance Setting Auto launch when Windows start up Disable Radio C Remember mini status position Fragmentation Threshold 2346 _ Auto hide mini status RTS Threshold 9347 C Set mini status always on top Frequency 802 11 bighn 24GH C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel 1 v C Group Roaming Adhoc Power Save Mode v Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O Adhoc network only C Automatically connect to non preferred networks Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lowering down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the device will use 20Mhz for data transmission and receiving between the AP and
184. se NTP Client Time zone MHTP Server Daylight Saving NTP synchronization Fri Jun 21 15 03 41 GMT 2013 GMT 11 00 Midway Island Samoa eT LI Available parameters are explained as follows Item Current System Time Use Browser Time Use NTP Client Time Zone NTP Server Dray Tek Description Click Inquire Time to get the current time Select this option to use the browser time from the remote administrator PC host as router s system time Select to inquire time information from Time Server on the Internet using assigned protocol Select a time protocol Type the IP address of the time server Use Default Click it to choose the default NTP server 169 VigorAP 900 User s Guide Daylight Saving Check the box to enable the daylight saving Such feature is available for certain area NTP synchronization Select a time interval for updating from the NTP server Click OK to save these settings 3 13 7 Management This page allows you to specify the port number for HTTP and HTTPS server System Maintenance gt gt Management Dewice Name Name igor Ps00 Management Port Setup HTTP port HTTPS port 445 Wi Fi Hardware Button Setup Wi Fi Hardware Button Function rm m r uF T LED Status Enable Available parameters are explained as follows Item Description Device Name Name The default setting is VigorAP 900 Change the name if required Management Port Setu
185. sk 255 255 255 0 Inte 1et otoc Versi on A TCP IP vd P opel ties F mm You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address E IP address 192 168 1 94 Subnet mask 255 255 255 0 492 168 i 1 Default gateway Obtain DNS server address automatically Use the following DNS server addresses Preferred DNS server 168 95 i Alternate DNS server E Validate settings upon exit Q d aaaoaooot VigorAP 900 User s Guide 10 Dr ay Te k 2 2 Windows 2000 IP Address Setup Click Start button it should be located at lower left corner of your computer then click control panel Double click Network and Dial up Connections icon double click Local Area Connection and Local Area Connection Properties window will appear Select Internet Protocol TCP IP then click Properties Local 4rea Connection Properties a d x General Connect using BY Realtek ATLE029 A5 PEI Ethernet Adapter Components checked are used by this connection yd Seems Tor Mie icrostitsbedworks m 4 efile File and Printer ela far Wigrosott Networks S a A z Ire F t Install ill Properties Description Transmission Control Protocollnterrnet Protect Thedeladee Wide area network protoco
186. snccsdscsnesesesconsceasesvexhasenvaecedenteasncceesuievessdensadessiondaweecsatevescseadweneaesededen 82 3 7 7 WMM Configuration cccccccccssssseeceeeeeceeaeeeeeeeeeeeesaaeeeseeeeeseeaeeeseeeeeeesseaaeseeseeeesssaaaeeees 82 3 7 8 Bandwidth Manageme nt cccsccccccseeceeeeeseeeeeeeeeseeceeeeseueeeeeeeeeesseeeesseeeeseneaeeesseeeeneas 84 3 7 9 Airtime Fairness ccccccssecccsseeccensecceneeceueeeceueeeceaeeesaeeesaeessaeeessaeeesseeeseueessgeessaeeessaeeees 85 3 1 10 Band SiC CIN serrer n E Sevan E EE E N 87 CEE EE ee E oie serene E A eet N A T ET 90 ale ROAM aeren E E E 91 S On E eaea E EE eee eee 93 3 8 Wireless LAN Settings for Universal Repeater Mode cccccccceeeeeeeeeeeeeeeeeeeeeeaeeeeeeeeeeaas 95 Ni SIC ae e toeadeadteacencucunesteaaranaeaeuunsauoniteos cacuasauaaseecennddeeatnentuacdaadie 96 lO 2 9S GY e E E N E E E E 100 TOO ACCESS O Oeean n E A E E E A E tie E E 103 VV e T A E E E S 104 Do APD COVO oa eea E E TE R E E E 105 3 6 0 Universal Repeal esosac sen cacdacacenctdvansenuesaseaazcewacsaneedouaseuecanceetenenanctecaaesescyoneiecdesesaaatacaves 106 26 7 WMM COmlQuratiOn ssenari aan aa a ia ETE E Aa Aa E inaa E aai i 108 3 8 8 Bandwidth Manageme nt cccscccccccseeeeeceeeeeeceeeeeesseeeeeceaseeessageeeesaeeeeesseseeessaeeesnaeees 110 3 9 9 Airtime Farne Secca Aa a aA ARA Aa eE AAAA 111 TOO Band o CGIN eea E EEE E doadaaseaasnceotaeande 113 LO ON ORO oire E AE E E NE EE 116 aoe ROIO ser
187. splay the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can Select as Universal Repeater specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP In Universal Repeater mode WAN would work as station mode and the wireless AP can be selected as a universal repeater Choose one of the wireless APs from the Scan list 105 VigorAP 900 User s Guide 3 8 6 Universal Repeater The access point can act as a wireless repeater it can be Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to serve all wireless stations within its coverage Note While using Universal Repeater mode the access point will demodulate the received signal Please check if this signal is noise for the operating network then have the signal modulated and amplified again The output power of this mode is the same as that of WDS and normal AP mode Wireless LAN 2 4GHz gt Universal Repeater Universal Repeater Parameters SSID MAC Address Optional Channel 2462MHz Channel 11 Security Mode Encryption T
188. ss LAN 56Hz gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTekSG L4n 4 Per Station Bandwidth Limit Enable a Upload Limit User defined bps Default unit K Download Limit User defined bps Default unit K Auto Adjustment Note t Download Traffic going to any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to VigorAP with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically After finishing this web page configuration please click OK to save the settings Dr ay Tek 149 VigorAP 900 User s Guide 3 10 9 Airtime Fairness Airtime fairness is essential in wireless networks that must support
189. ssensteneeduecee 5 1 3 1 Wired Connection for PC in LAN ccccceccccccessseceeeeeesseceeeeeesseceeeeeeaseeeeseeeaeeeeeeseaeeeeeeeas 5 1 3 2 Wired Connection for Notebook in WLAN cccececcceeeeeeeeseeeceeeeeeeeeeeeeeeeeeessaeeaeeeeeeeesaas 6 1 3 3 Wireless GONMECCIION esensina eeo AEEA AEAEE A Eea 7 oA POE CONNEC ION eee men E EE E ERSA 8 Network ConfiQuration ccccsssccsssseecssseecenseecenseseesseeeeneesenseesenseesensessones 9 2 1 Windows 7 IP Address SOU icccicceccretcsssssoces cig icedaseceted actacusensunarecbeducsdabecincueeatevedsesesncsosbecsuesengs 9 2 2 Windows 2000 IP Address Setup cccccesceecccceeeeeeeeeeeeceeeeeeeaeeeeeeeeeesseeeeeeeeeeeeessueaeeeeeeseaaas 11 2 3 Windows XP IP Address Setup ccccccsssesesecceeeeeaeeeseeeeeeeeeseeeeeeeeeeeeeaeeaeeeeeeeeessaeaaeeeeeeeeeaas 12 2 4 Windows Vista IP Address Setup cccccccsseeeecccceeeceeeeeeceeeeeeeeeeeeeeeeeesseseeaeeeeeeeesseaseeeeeeeeesaaas 13 2 5 Accessing to Web User Interface cccccccsssseeeccceeeseecceeeseceeecseeeeecesseaeceeessaaeeessesageeeeeeaas 14 26 Chanding age 112 3 een ee ee een nS eee eee ee eee ee 15 2 7 QUICK Start Wizard ec eeceeccccccccceeeeeceeeeeeeeeeeseceeeeeeeeeessseeceseeeenaeesseceeeeeeaeanseceeeeeessuaanseseseeeess 16 2 7 1 Configuring 2 4GHz Wireless Settings General cccccccsseeeeceeeeeeaeseeeeeeeeeeesaeaeeeeeess 16 2 7 2 Configuring 2 4GHz Wireless Settings based on
190. ssociated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 92 Dr ay Tek 3 7 13 Station List Station List provides the knowledge Station List of connecting wireless clients now along with its status code General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the Station Wireless LAN 2 4GHz gt gt Station List Station List Index Mac Address Add to Access Control Client s MAC Address General Advanced Control Neighbor Tx Rate Ru Rate Ebps Kops Hostname Encrypt Refresh Add Available settings are explained as follows Item MAC Address Hostname SSID Auth Encrypt Tx Rate Rx Rate Refresh Add to Access Control Add Advanced Description Display the MAC Address for the connecting client Display the host name of the connecting client Display the SSID that the wireless clien
191. st Delete Delete the selected MAC address in the list Edit Edit the selected MAC address in the list Cancel Give up the access control set up VigorAP 900 User s Guide 50 Dr ay Tek Backup Restore Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 5 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt gt WPS WLFi Protected Setup C Enable WPS Wi Fi Protected Setup Information WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Device Configure Status Not used Configure via Client PinCode Yes DrayTek LAN A Mined WiPAt WPA IPSE TEIP SES Note WPS can help your wireless chent automatically connect to the Access point WPS is Disabled ci WPS is Enabled 2 Waiting for WPS requests from wireless clients Available settings are explained as follows Item Enable WPS WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Configure via Push Button Configure via Client PinCode Dray Tek Description Check this box to enable WPS setting Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes
192. st while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings 3 9 7 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 56Hz gt Bandwidth Management SSID 1 SSID 2 SSID SSID 3 SSID 4 DrayTekSG L4ah 4 Per Station Bandwidth Limit Enable Upload Limit Download Limit Auto Adjustment User defined bps Default unit K bps Default unit K LJ Note Download Traffic going to any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item SSID Enable Upload Limit Download Limit Auto Adjustment VigorAP 900 User s Guide Description Display the specific SSID name Check this box to enable the bandwidth management for clients Define the maximum speed of the data uploading which will be used for the wireless stations connecting to VigorAP with the same SSID
193. t data packets through VigorAP 900 Although they have equal probability to access the wireless channel Station B 1 1n gets only a little airtime and waits too much because Station A 11g spends longer time to send one packet In other words Station B fast rate is obstructed by Station A slow rate a Packet Packet Packet Station B To improve this problem Airtime Fairness is added for VigorAP 900 Airtime Fairness function tries to assign similar airtime to each station A B by controlling TX traffic In the following figure Station B 11n has higher probability to send data packets than Station A 11g By this way Station B fast rate gets fair airtime and it s speed is not limited by Station A slow rate Dr ay Te k 85 VigorAP 900 User s Guide Packet Packet Station A i Station B It is similar to automatic Bandwidth Limit The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment Please note that Airtime Fairness of 2 4GHz and 5GHz are independent But stations of different SSIDs function together because they all use the same wireless channel IN SPECIFIC ENVIRONMENTS this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance Suitable environment 1 Many wireless stations 2 All stations mainly use download traffic 3 The performance bottleneck is wireless connection Wireless LAN
194. t be able to get an IP address automatically use dynamic IP address If it s set to use static IP address or you re unsure please follow the following instructions to configure your computer to use dynamic IP address For the default IP address of this AP is set 192 168 1 2 we recommend you to use 192 168 1 X except 2 in the field of IP address on this section for your computer If the operating system of your computer is Windows 7 please go to section 2 1 Windows 2000 please go to section 2 2 Windows XP please go to section 2 3 Windows Vista please go to section 2 4 2 1 Windows 7 IP Address Setup Click Start button it should be located at lower left corner of your computer then click Control Panel Double click Network and Internet and the following Click Network and Sharing Center Appearance and Personalization Clock Language and Region Ease of Access window will appear etwork G F 7 E Control Panel Network and Internet 4 Search Control Panel Control Panel Horr eoeeeen a nn AA Rork and Sharing Center ess 5 l View network status and tasks Connect to Snetwork ystem and Security Swigy network computers and devices abi a wireless device to the n Network and Internet Pe eeeweenecces Hardware and Sound a HomeGroup Choose homegroup and sharing options Programs User Accounts and Family eC ene Options ARTT Safety Change
195. t connects to Display the authentication that the wireless client uses for connection with such AP Display the encryption mode used by the wireless client Display the transmission receiving rate for packets Click this button to refresh the status of station list Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Click this button to add current typed MAC address into Access Control Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the Station Dray Tek 93 VigorAP 900 User s Guide Control Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wireless stations VigorAP 900 User s Guide 94 Dr ay Tek 3 8 Wireless LAN Settings for Universal Repeater Mode When you choose Universal Repeater as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery Universal Repeater WMM Configuration Station List Bandwidth Management Airtime Fairness Roaming Status and Station Control Dray Tek 95 VigorAP 900 User s Guide 3 8 1 General Setup By clicking the General Setup a new web page will appear so that you could con
196. t controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CW Max value must be greater than CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 It is an abbreviation of Admission control Mandatory It can 129 VigorAP 900 User s Guide AckPolicy restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification Uncheck default value the box means the AP will answer the response reque
197. t enabled the wireless client can connect VigorAP until it shuts down Such feature is especially useful for free Wi Fi service For example a coffee shop offers free Wi Fi service for its guests for one hour every day Then the connection time can be set as hour and reconnection time can be set as 1 day Thus the guest can finish his job within one hour and will not occupy the wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP Wireless LAN 5GHz gt gt Station Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTekSG LAn A Enable Connection Time 1 hour T Reconnection Time 1 day T Display All Station Control List Note Once the feature is enabled the connection time quota will apply to each wireless client identified by MAC address OK Cancel Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Use the drop down list to choose the duration for the wireless Reconnection Time client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined 1440 min i User defined 30 min 1 hour 2 hours 4 hours ip days Display All Station All the wireless stations connecting to Vigor router by using Control List such SSID
198. te Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 Channel 2 462MH2 Channel 11 Extension Channel 2442MHz Channel 7 T Packet OVERDRIVE Te Burst Note 1 7 Burst only supports 11g mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna leR T Tx Power 100 T Channel Width Auto 20 40 MHZ 20 MHZ OK Cancel Available settings are explained as follows Dray Tek Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations Mode which try to connect Internet through Vigor device The number you can set is from 3 to 64 At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode 43 VigorAP 900 User s Guide Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate Member VLAN ID IGMP Snooping Mac Clone VigorAP 900 User s Guide Mixed 11b 11g 1in lib Only iig Only Lin Only Misediiib iigi ARERIA Ra Check the box to enable the functi
199. ter Mame P900 Available settings are explained as follows Item Description SSID Set the name of access point that VigorAP 900 wants to connect to MAC Address Type the MAC address of access point that VigorAP 900 wants Optional to connect to Channel Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you Security Mode There are several modes provided for you to choose Each mode will bring up different parameters e g WEP keys Pass Phrase for you to configure Dr ay Tek 145 VigorAP 900 User s Guide Encryption Type for Open Shared Encryption Type for WPA PSK and WPA2 PSK Pass Phrase Connection Type Router Name IP Address VigorAP 900 User s Guide This option is available when Open Shared is selected as Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP Mone iv WEP WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is
200. ter you configure web settings please click OK to reboot your modem for ensuring normal operation and preventing unexpected errors of the modem in the future 3 13 9 Firmware Upgrade Before upgrading your modem firmware you need to install the Modem Tools The Firmware Upgrade Utility is included in the tools The following web page will guide you to upgrade firmware by using an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek s web site and FTP site is ftp draytek com Click System Maintenance gt gt Firmware Upgrade to launch the Firmware Upgrade Utility System Maintenance gt gt Firmware Upgrade Firmware Update Select a firmware file Click Upgrade to upload the file Click Browse to locate the newest firmware from your hard disk and click Upgrade Dray Tek 171 VigorAP 900 User s Guide 3 14 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your VigorAP 900 3 14 1 System Log At present only System Log is offered Diagnostics gt gt System Log System Log Information Clear Refresh Line wrap Od 00 00 23 Kernel lt ETMFAllocAdapterBlock Status 0 Od 00 00 23 kernel p d gt ChPBasedddress OxcO cUO000 csar_addr UxcO7cOo00 Od 00 00 23 kernel RtnpEepromGetDefault ecp datault 2 Od 00 00 23 kern
201. the Operation Mode 00eeee 18 2 7 3 Configuring 2 4GHz Security Settings cccccccceseeeeeeeeeeseeeeseeeeeeeeeseeeseeeeeesssaaaeeeeeeess 23 2 7 4 Configuring 5GHZ Wireless Settings cccccccccesseseseeeeeeeeeeeeeeeeeeeeseeaeeeeeeesesseeeeeeeeeess 25 2 7 5 Configuring 5GHZ Security Settings ceeeeccceccsseeseeeeeeeeeeeeeeeseeceeeeeeeeeeeeeeeesssueeeeeeeees 26 2 7 6 Finishing the Wireless Settings Wizard ccccccccsseseeecceceeeceeeeeeeeeeeeueeeeeeeeesessaaaeeeseess 28 e GONS LUIS epa taasunauagaatanasacan A E tna baadaanionesharaaatines 28 Advanced Configuration ssictssccciercccercesescrsseccssecieexcensierasccesercecextenssers erssssieexecs 31 ST Operaio MOJE eenma E e N 32 ZEAN e e E T A E A E 33 EMR RE ne ee EE 0 o T A E A E E T T ee 33 Ire FO OMI e eaaa O E 36 3 3 Central AP ManageMe nt cccccccccceeccseeesseeceeeeeecaeeeseeceeeeseeeeeseeeeeessssaeaaeeeeesessaaaeeeeeeeeees 36 2321 GEMON A Ss E o a A see sined wuss E A E A A A A T 36 A WUE OO eeen E E E EE E r S 37 33 3 Funcion SUPPO LIST anssi cross eein s EENE SESE E EA EEEE EES 37 3 3 4 Overload Management cccccccccceeeseceeeceeeeeeeseeeseeeeeeseeeeeesseeaseeeessaeeeeessaaeeeeesesageeeees 38 3 3 5 Status Of SettingS ccccccceccccsssseeeeesccceesseneeseecesccsseneeeeesceceaeseseeenseccoeseseeeeessesccessees 39 Dray Tek vii VigorAP 900 User s Guide 3 4 General Concepts for Wireless LAN 2 4GHZ
202. this button to get analysis pie chart for daily connected wireless stations daily visiting wireless station Daily 2 4G Connected amp Not Connected Number Analysis Peak of Connected Station Number Time 14 58 13 58 Number 0 Off peak of Connected Sation Number Time 14 58 13 58 Number 0 Peak of Nearby Station Number Time 19 58 20 58 Number 12 E 2 4G Not Connected Number EE 2 4G Connected Number Off peak of Nearby Station Number Time 14 58 17 58 Number 0 Daily 5G Connected amp Not Connected Number Analysis Peak of Connected Station Number Time 14 58 13 58 Number 0 Off peak of Connected Sation Number Time 14 58 13 58 Number 0 Peak of Nearby Station Number Time 19 58 20 58 Number 3 E SG Not Connected Number Time 13 58 Number 3 E SG Connected Number Off peak of Nearby Station Number Time 14 58 17 58 Number 0 Click this button to get analysis pie chart for weekly connected wireless stations weekly visiting wireless station Weekly 2 4G Connected amp Not Connected Number Analysis Peak of Connected Station Number Time 2015 8 22 Sun 2015 9 3 Thu Number 0 Off peak of Connected Sation Number Time 2015 8 22 Sun 2015 3 3 Thu Number 0 Peak of Nearby Station Number Time 2015 9 2 Wed Number 4 E 2 4G Not Connected Number EE 2 4G Connected Number Off peak of Nearby Station Number Time 2015 8 22 Sun 2015 9 2 Wed Number 0 Time 2015 9 3 Thu Number 0
203. to Rew ACK after retry 0 F drop due to out of resource o RTS Success Rew CTS o Rx duplicate frame o RTS Fail Rew CTS E False CCA fone second 129 TransmitCountFromas 56 MulticasthecelyedFrameCount o TransmittedFragmentcount 1068 RealFcsErrcount 5508 TransmittedFrameCount 1068 WEPUndecryptableCount o MulticastTransmittedFrameCount oO MultipleRetry count 0 Transmitted4amMsSoUCount o ACKFailureCount o Transmitted ctetsIin MSDU 0 FeceiwvedAMSDUCount 0 TransmittedsMPoUCount 0 RecelvedOctesInamMsbUCount o TransmittedMPOUsInaMPouUCount oO MPOUInRecelvedAMPOUCount 0 TransmittedOctetsInAMPoUCount oO fanyStaFortyIntolerant oO SSID1 SSID Packets Recelved Packets Recelved Packets Sent Packets Sent Bytes Received Bytes Received Byte Sent Byte Sent Error Packets Received Error Packets Received Drop Received Packets Drop Received Packets CO o o o o o Oo o o o o VigorAP 900 User s Guide 174 Dray Tek 3 14 6 Station Statistics Such page is used for debug or for the user to observe network traffic and network quality Diagnostics gt gt Station Statistics Show Chart Nearby amp Connected Number Refresh Hourly Nearby amp Connected Number 38 0 E 2 46 Nearby Number E 56 Nearby Number 285 2 46 Connected Number M56 Connected Number 19 0 n ST TS 0 0 Oe 2208 SOF 0203 0709 1209 1709 2209 2709 S209 SF OF A0 A0 20 oF 100 10 0710 1210 1710 22 10 27 10 3210 37 10 42 10 4 Daily Nearby amp Connected Humber Daily C
204. to WOS Settings Each item is explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Received Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP Add Click Repeater for the specified AP Next click Add Later the MAC address of the AP will be added and be shown on WDS settings page Dr ay Tek 81 VigorAP 900 User s Guide 3 7 6 WDS AP Status VigorAP 900 can display the status such as MAC address physical mode power save and bandwidth for the working AP connected with WDS Click Refresh to get the newest information Wireless LAN 2 4GHz gt WDS AP Status WDS AP List AID MAC Address 802 11
205. tream music and video Note The actual data throughput will vary according to the network conditions and environmental factors including volume of network traffic network overhead and building materials In an Infrastructure Mode of wireless network VigorAP 900 plays a role as an Access Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection via VigorAP 900 The General Setup will set up the information of this wireless network including its SSID as identification located channel etc Security Overview WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dominating security mechanism in industry is separated into two categories WPA personal or called WPA Pre Share Key WPA PSK and WPA Enterprise or called WPA 802 1x In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism accor
206. ts can be disabled via web configuration LAN gt gt Port Control Port Control Enable Port Control L4N B LAN A4 LAN AZ LAN A2 LAN ALfPOE Disable Pot 7 O O O d Available settings are explained as follows Item Description Enable Port Control Check it to enable the port control If it is enabled you are allowed to disable the function of physical LAN port by checking the corresponding check box Disable Port Choose and check the LAN port After finishing this web page configuration please click OK to save the settings 3 3 Central AP Management Such menu allows you to configure VigorAP device to be managed by Vigor2860 series 3 3 1 General Setup Central AP Management gt gt General Setup Vigor AP Manegemet Enable AFP Management Enable Auto Provision Note LAN B cannot support 4PM feature Available settings are explained as follows Item Description Enable AP Check the box to enable the function of AP Management Management APM Enable Auto VigorAP 900 can be controlled under Central AP Management VigorAP 900 User s Guide 36 Dr ay Te k in Vigor2860 series When both Vigor2860 series and VigorAP 900 have such feature enabled once VigorAP 900 is registered to Vigor2860 series the WLAN profile pre configured on Vigor2860 series will be applied to VigorAP 900 immediately Thus it is not necessary to configure VigorAP 900 separately Provision 3 3 2 APM Log This page will display log
207. tup General Setting IEEE 802 11 W Enable Wireless LAN C Enable Limit Client 64 3 64 Default 64 Modes Mixed 11a 11n Y Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate ee ein Member 0 Untagged Snooping DrayTek5SG LAN A LANA Y DrayTek5G LAN B LANE Y lo o 1 2 3 LANA Y 4 Hide SSID Prevent SSID fram being scanned Isolate Member Wireless clents stations with the same SSID cannot access for each other Channel 5180MHz Channel 36 r Extension Channel 5200MHz Channel 40 F Channel Width Auto 20 40MHZ 20MHZ OK Cancel Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations Dray Tek 121 VigorAP 900 User s Guide which try to connect Internet through VigorAP The number you can set is from 3 to 64 Mode Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate Member VLAN ID IGMP Snooping Channel VigorAP 900 User s Guide At present VigorAP 900 can be connected by 11a only 11n only SG Mixed 11a 11n stations simultaneously Simply choose Mixed 11a 11n mod
208. ue Both values will influence the time delay for WMM accessing categories The difference VigorAP 900 User s Guide 108 Dr ay Te k between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings Dr ay Tek 109 VigorAP 900 User s Guide 3 8 8 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applicat
209. uide 3 5 12 Station List Station List provides the knowledge of connecting wireless clients now along with its status code General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the Station Wireless LAN 2 4GHz gt gt Station List Station List Index Mac Address Add to Access Control Client s MAC Address General Advanced Control Neighbor Tx Rate Ru Rate Ebps Ebpsa Hostname Encrypt Refresh Add Available settings are explained as follows Item MAC Address Hostname SSID Auth Encrypt Tx Rate Rx Rate Refresh Add to Access Control Add Advanced Description Display the MAC Address for the connecting client Display the host name of the connecting client Display the SSID that the wireless client connects to Display the authentication that the wireless client uses for connection with such AP Display the encryption mode used by the wireless client Display the transmission receiving rate for packets Click this button to refresh the status of station list Client s MAC Address For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Click this button to add current typed MAC address into Access Control Display mo
210. uter to other available LAN A port Make sure the subnet IP address of the PC is the same as VigorAP 900 management IP e g 192 168 1 X 3 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 4 Power on VigorAP 900 Check all LEDs on the front panel ACT LED should blink and LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router For the detailed information of LED status please refer to section 1 2 Internet Dr ay Te k 5 VigorAP 900 User s Guide 1 3 2 Wired Connection for Notebook in WLAN 1 Connect VigorAP 900 to ADSL modem or router in your network through the LAN A port of the access point by Ethernet cable 2 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router For the detailed information of LED status please refer to section 1 2 Internet VigorAP 900 User s Guide 6 Dr ay Te k 1 3 3 Wireless Connection VigorAP 900 can access Internet via an ADSL modem router or switch hub in your network through wireless connection 1 Connect VigorAP 900 to ADSL modem or router via wireless network 2 Connect the A C power adapter to the wall socket and then connect it to
211. uth Encrypt TX RX Rate for the station Wireless LAN GHz gt Station List Station List General Advanced Control Neighbor Index Mat Address Hostname Encrypt Refresh Add to Access Control Client s MAC Address Add Available settings are explained as follows Item Description MAC Address Display the MAC Address for the connecting client Hostname Display the host name of the connecting client SSID Display the SSID that the wireless client connects to Auth Display the authentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Client s MAC Address For additional security of wireless Control access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Add Click this button to add current typed MAC address into Access Control Advanced Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the station Dr ay Tek 135 VigorAP 900 User s Guide Control Display connection and reconnection time of the wireless stations Neighbor Display more information for the neighboring wire
212. utton style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button Both ACT and 2 4G WLAN LEDs on VigorAP 900 will blink quickly when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes 80 Dr ay Tek 3 7 5 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt Access Point Discovery Access Point List Select SSID BSSID RSSI Channel Encryption Authentication See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP AF s MAC Address p J AP sSSID 2s Add
213. w or automatically negotiated 26 Dray Tek WPA Algorithm Pass Phrase Key Renewal Internal PMK Cache Period Pre Authentication Key 1 Key 4 Dray Tek via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2
214. will be listed on Station Control List After finishing all the settings here please click OK to save the configuration VigorAP 900 User s Guide 152 Dray Tek 3 10 11 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN GHz gt gt Roaming Enable Fast Roaming PMK Caching Cache Period 10 minutets 10 600 Default 10 Pre Authentication Note This function is only supported when WPA2 802 1x Is selected as the security mode Please open Wireless LAN SGH2 gt gt Security to check the security configuration OK Cancel Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defin
215. will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want 20 MHZ the AP will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the AP will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transmission After finishing this web page configuration please click OK to save the settings 3 10 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it VigorAP 900 User s Guide 138 Dray Tek By clicking the Security Settings a new web page will appear so that you could configure the settings Wire
216. wireless network for a long time Note Up to 300 Wireless Station records are supported by VigorAP Wireless LAH 7 4GHz gt Station Control SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Enable F Connection Time Reconnection Time Display All Station Control List Note Once the feature is enabled the connection time quota will apply to each wireless client identified by MAC address Available settings are explained as follows Item Description SSID Display the SSID that the wireless station will use it to connect with Vigor router Enable Check the box to enable the station control function Connection Time Use the drop down list to choose the duration for the wireless Reconnection Time client connecting reconnecting to Vigor router Or type the duration manually when you choose User defined 1440 min User defined 7 30 min 1 hour 2 hours 4 hours ip days a days 4 days 5 days b days f days Display All Station All the wireless stations connecting to Vigor router by using Control List such SSID will be listed on Station Control List After finishing all the settings here please click OK to save the configuration VigorAP 900 User s Guide 62 Dr ay Te k 3 5 11 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access
217. x Display the sort number of the schedule profile Setting Display the summary of the schedule profile Action Display the action performed by the router Status Display if the profile is enabled V or not X Add Such button is available when Enable Schedule is checked It allows to add a new schedule profile You can set up to 15 schedules To add a schedule 1 Check the box of Enable Schedule 2 Click the Add button to open the following web page Applications gt gt Schedule Add Schedule Enable Start Date Start time Action Acts Weekday 2000 1 l Year Month Day O fal Hour Minute Auto Reboot Routine LI Monday MH Tuesday O wednesday O Thursday MlFriday O Saturday Ml Sunday Available settings are explained as follows Item Enable Start Date Start Time Action Acts VigorAP 900 User s Guide Description Check to enable such schedule profile Specify the starting date of the schedule Specify the starting time of the schedule Specify which action should apply the schedule Auto Reboot S Auto Reboot Wi Fi 2 4GHz UF Wi Fi 2 4GHz DOWN Wi Fi 5GHz UF WI FI 56Hz DOWN LED DISABLE LED EMAELE Specify how often the schedule will be applied Once The schedule will be applied just once Routine Specify which days in one week should perform the 158 Dray Tek Item Description schedule Routine Once Routine
218. x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings Dr ay Tek 71 VigorAP 900 User s Guide RADIUS Server Cluse internal RADIUS Server IP Address al Port olz Shared Secret DrayTek Session Timeout
219. xed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings VigorAP 900 User s Guide 140 Dr ay Te k RADIUS Server Cluse internal RADIUS Server IP Address al Port ole Shared Secret DrayTek Session Timeout Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 11 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server
220. you choose User defined 1440 min i User defined 30 min 1 hour 2 hours 4 hours ip days Display All Station All the wireless stations connecting to Vigor router by using Control List such SSID will be listed on Station Control List After finishing all the settings here please click OK to save the configuration 3 7 12 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Dr ay Tek 91 VigorAP 900 User s Guide Wireless LAN 7 4GHz gt gt Roaming Enable Fast Roaming PMK Caching Cache Period 10 minutets 10 600 Default 10 Pre Authentication Note This function is only supported when WPA2 802 1x Is selected as the security mode Please open Wireless LAN 2 4GHz gt Security to check the security configuration OK Cancel Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the a
221. ype WEP Keys O Key 1 Key 2 Key 3 Key 4 Note If Channel is modified the Channel setting of AP would also be changed Universal Repeater IP Configuration Connection Type DHCP w Device Name APOOO Available settings are explained as follows Item Description SSID Set the name of access point that VigorAP 900 wants to connect to MAC Address Type the MAC address of access point that VigorAP 900 wants Optional to connect to Channel Means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you Security Mode There are several modes provided for you to choose Each mode will bring up different parameters e g WEP keys Pass Phrase for you to configure VigorAP 900 User s Guide 106 Dr ay Te k Encryption Type for Open Shared Encryption Type for WPA PSK and WPA2 PSK Pass Phrase Connection Type Device Name IP Address Subnet Mask Dray Tek This option is available when Open Shared is selected as Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP Mone iv WEP WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key

Download Pdf Manuals

Related Search

DrayTek_UG VigorAP

DrayTek_UG-VigorAP

Contents

Download Pdf Manuals

Related Search

Related Contents