Home

VigorAP 900 User's Guide i

1. C Remember my password Lo J _cancat_ 3 The Main Screen will pop up Dray Tek VigorAP 900 System Status Quick Start Wizard ia Model VigorAP 900 Online Status pE Firmware Version 1 4 0RC4a 7 Build Date Time 13252 Mon Jul 29 15 08 35 CST 2013 Operation Mode 2 System Uptime Od 00 04 28 LAN A Operation Mode AP Wireless LAN 2 4GHz Wireless LAN 5GHz RADIUS Server System LAN A Applications Bi Memory Total 62192 kB MAC Address 00 50 7F 22 33 43 System Maintenance a Memory Left 40472 kB IP Address 192 168 1 2 Diagnostics Cached Memory 11436 kB 62192 kB IP Mask 255 255 255 0 E Wireless LAN 2 4GHz LAN B FAQ Application Note a MAC Address OD SiO FF 22 33 44 MAC Address OD SO F222 33 43 Product Registration SSID DrayTek LAN A IP Address 192 168 2 2 All Rights Reservada Channel 311 l IP Mask 255 255 255 0 Wireless LAN SGHz MAC Address 00 50 7F 22 33 45 5510 Draytek_SG LANA Channel 36 Admin mode AP Mode Note If you fail to access to the web configuration please go to Trouble Shooting for detecting and solving your problem For using the device properly it is necessary for you to change the password of web configuration for security and adjust primary basic settings VigorAP 900 User s Guide 14 Dr ay Te k 2 6 Changing Password 1 Please change the password for the original securi
2. a ge i Ph d i F k 1 7 SS T F FO TE oa Fi Le i aa F T a y ii A Pm E ig l l i F j 7 j Ts r B m L d i 2 a rrent Dual conway ai Concu ee Your reliable networking solutions partner User s Guide V1 0 VigorAP 900 User s Guide ii Dr ay Te k VigorAP 900 Concurrent Dual Band AP User s Guide Version 1 0 Firmware Version V1 1 0_RC4a Date 12 08 2013 Dray Tek iii VigorAP 900 User s Guide Copyright Information Copyright Declarations Trademarks Copyright 2013 All rights reserved This publication contains information that is protected by copyright No part may be reproduced transmitted transcribed stored in a retrieval system or translated into any language without written permission from the copyright holders The following trademarks are used in this document Microsoft is a registered trademark of Microsoft Corp e Windows Windows 95 98 Me NT 2000 XP Vista and Explorer are trademarks of Microsoft Corp Apple and Mac OS are registered trademarks of Apple Inc Other products may be trademarks or registered trademarks of their respective manufacturers Safety Instructions and Approval Safety Instructions Warranty Be a Registered Owner Firmware amp Tools Updates VigorAP 900 User s Guide Read the installation guide thoroughly before you set up the modem The modem is a complicated electro
3. AP Bridge Point to This mode can establish wireless connection with another Point VigorAP 900 using the same mode and link the wired network which these two VigorAP 900s connected together Only one access point can be connected in this mode AP Bridge Point to This mode can establish wireless connection with other VigorAP Multi Point 900s using the same mode and link the wired network which these VigorAP 900s connected together Up to 4 access points can be connected in this mode AP Bridge WDS This mode is similar to AP Bridge to Multi Point but access point is not work in bridge dedicated mode and will be able to accept wireless clients while the access point is working as a wireless bridge Universal Repeater This product can act as a wireless range extender that will help you to extend the networking wirelessly The access point can VigorAP 900 User s Guide 30 Dray Tek act as Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to service all wireless clients within its coverage Wireless LAN 5GHz AP This mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network Note The Wireless LAN settings will be changed according to the Operation Mode selected here For the detailed information please refer to the section of Wireless LAN 3 2 LAN Local Area Network LAN is a group of subnets re
4. Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The al
5. The product conforms to the requirements of Low Voltage LVD Directive 2006 95 EC by complying with the requirements set forth in EN60950 1 Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help This device complies with Part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference and 2 This device may accept any interf
6. Enable Management VLAN DHCP Server Configuration Enable Server Disable Server Relay Agent Start IP Address End IP Address Subnet Mask Default Gateway Lease Time DHCP Server IP Address for Relay Agent Primary IP Address VigorAP 900 User s Guide Description When it is enabled VigorAP 900 will be treated as a client and can be managed controlled by AP Management server offered by Vigor router e g Vigor2860 Type in private IP address for connecting to a local private network Default 192 168 1 2 Type in an address code that determines the size of the network Default 255 255 255 0 24 In general it is not really necessary to specify a gateway for VigorAP 900 However if it is required simply type an IP address as the gateway for VigorAP 900 It will be convenient for the access point acquiring more service e g accessing NTP server from Vigor router VigorAP 900 supports tag based VLAN for wireless clients accessing Vigor router Only the clients with the specified VLAN ID can access into VigorAP 900 VLAN ID Type the number as VLAN ID tagged on the transmitted packet 0 means no VALN tag DHCP stands for Dynamic Host Configuration Protocol DHCP server can automatically dispatch related IP settings to any local user configured as a DHCP client Enable Server lets the modem assign IP address to every host in the LAN Disable Server lets you manually or use other D
7. and WPA Enterprise or called WPA 802 Ix In WPA Personal a pre defined key is used for encryption during data transmission WPA applies Temporal Key Integrity Protocol TKIP for data encryption while WPA2 applies AES The WPA Enterprise combines not only encryption but also authentication Since WEP has been proved vulnerable you may consider using WPA for the most secure connection You should select the appropriate security mechanism according to your needs No matter which security suite you select they all will enhance the over the air data protection and or privacy on your wireless network The VigorAP 900 is very flexible and can support multiple secure connections with both WEP and WPA at the same time WPS Introduction WPS Wi Fi Protected Setup provides easy procedure to make network connection between wireless station and wireless access point VigorAP 900 with the encryption of WPA and WPA2 It is the simplest way to build connection between wireless network clients and VigorAP 900 Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time He she only needs to press a button on wireless client and WPS will connect for client and VigorAP 900 automatically Wireless Card Installed r Connection via WPS Set SSID and Encryption WPA WPA2 PIN Code VigorAP 900 User s Guide 34 Dr ay Tek Note Such function is available for the wirel
8. After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 88 Dr ay Tek 3 7 10 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN 2 4GHz gt gt Roaming Enable PMK Caching Cache Period 10 minutes Pre Authentication Note This function is only supported by WPA2 802 1x security Before you enable it please switch to Security page and set Wireless Lan security to WPA2 802 1x or press Security Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay pe
9. Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through Vigor router The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixed 1lib 1iig 1in v lib Only iig Only iin Only Misediiib iig Misediiig iin Mixed 1ib 11ig 1 1n Enable 2 Subnet Check the box to enable the function for two independent Simulate 2 APs subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Hide SSID Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set three sets of SSID for different usage SSID Set a
10. Jr Waiting for WPS requests from wireless clients Available settings are explained as follows Item Description Enable WPS Check this box to enable WPS setting WPS Configured Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Click Start PBC to invoke Push Button style WPS setup Button procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes The WPS LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client Type the PIN code specified in wireless client you wish to PinCode connect and click Start PIN button The WLAN LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Dr ay Tek 81 VigorAP 900 User s Guide 3 7 5 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can
11. Obtain an IF address automatically Use the following IF address IP address 192 1668 1 5 255 255 255 0 00 e 2 5 Subnet ma Default gateway Use the following DNS server addresses Preferred ONS server Alternate DHS server m P oaii Myanced ___ s eenece VigorAP 900 User s Guide 12 Dr ay Te k 2 4 Windows Vista IP Address Setup Click Start button it should be located at lower left corner of your computer then click control panel Click View Network Status and Tasks then click Manage Network Connections Right click Local Area Netwrok then select Properties Local Area Connection Properties window will appear select Internet Protocol Version 4 TCP IPv4 and then click Properties 4 Local Area Connection Properties x Networking Connect using EF Intel R PRO 1000 MT Network Connection This connection uses the following items 1 Client for Microsoft Networks iw I GoS Packet Scheduler 7 fl FleearadePeimtersGhrarine fer bliswati Networks po PT 2 Intemet Protocol Version 6 TPA V6 gt nic Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255
12. Dr ay Tek 109 VigorAP 900 User s Guide 3 11 4 Configuration Backup Backup the Configuration Follow the steps below to backup your configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Configuration Backup Restoration Restoration Select a configuration file Click Restore to upload the file Click Backup to download current running configurations as a file 2 Click Backup button to get into the following dialog Click Save button to open another dialog for saving configuration as a file File Download P j You are downloading the File p config chg From 192 168 1 1 Would you like to open the file or save it to your computer Always ask before opening this type of file 3 In Save As dialog the default filename is config cfg You could give it another name by yourself my Documents a Fa 4 My Computer My Recent Emy Network Places Documents eR yS COM Lite 2 _MWSnapsoo C TeleDanmark Tools a ss 7 contig v2k2_ 232 config_1 v2k6_250_config_1 My Documents g8 My Computer My Network Save as type Configuration file j VigorAP 900 User s Guide 110 Dr ay le k 4 Click Save button the configuration will download automatically to your computer as a file named config cfg The above example is using Windows platform for demonstrating examples The Mac
13. MAC Address SSID Auth Encrypt TX RX Rate for the station Advanced Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the station VigorAP 900 User s Guide 48 Dray Tek 3 4 8 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Per Station Bandwidth Limit Enable Upload Limit bps Download Limit bos Default unit K Auto Adjustment Total Upload Bandwidth bos Default unit K Total Download Bandwidth bps Note oe Traffic going to any station Upload Traffic being sent from a wireless 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name of the router Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless stat
14. Total Download Bandwidth User defined bps Default unit MOLE station 1 Download Traffic going to any station Upload Traffic being sent from a wireless 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item SSID Enable Upload Limit Download Limit Auto Adjustment Total Upload Limit VigorAP 900 User s Guide Description Display the specific SSID name of the router Check this box to enable the bandwidth management for clients Define the maximum speed of the data uploading which will be used for the wireless stations connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Check this box to have the bandwidth limit determined by the system automatically When Auto Adjustment is checked the value defined here will 100 Dray Tek be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data uploading Total Download When Auto Adjustment is checked the value defined here will Limit be treated as the total bandwidth shared by all of the wi
15. 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings Dr ay Tek 63 VigorAP 900 User s Guide RADIUS Server Cluse internal RADIUS Server IP Address Port ole Shared Secret DrayTek Session Timeout Jii OK Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 9 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both side
16. 255 0 Internet Protocol Version 4 TCP TPv4 Properties General You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address autqmptraly pee Use the following IF addfess IP a 5 192 168 1 93 255 255 255 0 net mask Default gateway Fo a Oe To Pal Sa Et ee PA Obtain DNS server add 7 aUTOMancally he Lt Ld L HBHRHRHEHEHEHEHEHEHEHEHHEHEHEHEE Use the following DNS ener TETT Preferred DNS server Alternate DNS server of L Dray Te k 13 VigorAP 900 User s Guide 2 5 Accessing to Web User Interface All functions and settings of this access point must be configured via web user interface Please start your web browser e g IE 1 Make sure your PC connects to the VigorAP 900 correctly g Notice You may either simply set up your computer to get IP dynamically from the modem or set up the IP address of the computer to be the same subnet as the default IP address of VigorAP 900 192 168 1 2 For the detailed information please refer to the later section Trouble Shooting of the guide 2 Open a web browser on your PC and type http 192 168 1 2 A pop up window will open to ask for username and password Pease type admin admin on Username Password and click OK Lonnect to 192 166 1 2 Username E admin Password ee
17. 3 Subnet LAN 4 Security Disabled OWEP OTKIP AES Disabled WEP OTKIP AES Peer Mac Address Peer Mac Address A ee C Cr CEFER 2 Subnet Security 4 Subnet Security Disabled WEP TKIP AES Disabled WEP TKIP AES key of w Peer Mac Address Peer Mac Address PEPE EEE Ed EEE EE Packet OVERDRIVE Tx Burst Note 1 7 Burst only supports 11g mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna 2l2R Ts Power 100s Channel Width Auto 20 40 MHZ 20 MHZ OK cancel Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function Enable Limit Client Check the box to set the maximum number of wireless stations which try to connect Internet through Vigor router The number you can set is from 3 to 64 Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixedilib ilig ilini 11b Only iig Only iin Only Mixed 11b 119q Misediiig iin Mixed 11b 119 11n Enable 2 Subnet Check the box to enable the function for two independent Simulate 2 APs subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that
18. 5 1 3 9 WESS GONMOCIION eismo EE E E 6 oA POE CONNEC IO eae E eee ee ee 7 Network Configuration ccccsssecsssseecesseecesseecenseseenseeenseesenseesesseesensessoaes 9 2 1 Windows 7 IP Address SOU iccciesecorotassagtectecigscedetecetedactasusentanedoadetyentabacimcuseatevatsessinesoduecancsinds 9 2 2 Windows 2000 IP Address SetuP ccccccecseecccceeeeeeeeeeeceeeeeeeaeeeeeeeeeeeseeaeeeeeeseessaeeeeeeeeeseaaas 11 2 3 Windows XP IP Address Setup cccccessseeeeeceeeeeceeeeeeeeeeeeeeeeaeesceeeeeeeaeeaeeeeeeeeessaeaseeeeeeseaaas 12 2 4 Windows Vista IP Address Setup cccccccsscececcceeeeceeeeeeeeeeeseeeeeeseeeeeeeeeseeaeeeeeeesseeeeseeeeeeeeeeaas 13 2 5 Accessing to Web User Interface cccccccssssecececeeseeecceeeecececeeeeseecesseageceesssaeeeessesageeeeesaas 14 26 CeO F aS SW ON se ape cesta tga oes E gee sudeaaienw E tae ee coencceanetondawesaaeeeee 15 2 7 QUICK Start Wizard ee eeeeccccccecceeeeseceeeeeeeeeeesseceeeceeeeeeesseeceseeeeeaesseceeeeeeaeasseceeeseesauaaseceseeeess 16 2 7 1 Configuring 2 4G Wireless Settings Gene ral ccccceccssseeeeeeeeeeeeeeeeeeeeeeeeseaenseeeeees 16 2 7 2 Configuring 2 4G Wireless Settings based on the Operation Mode cee 18 2 7 3 Configuring 2 4G Security Settings ceecccccecessecceeeeseceeeeesseceeeseeeeeeeeeeseeceeeeseeeees 23 2 7 4 Configuring 5G Wireless SettinGS ccccceececcccceccessseeeeeeeeeeeeeeseeeeeeeeseeeeee
19. C Set mini status always on top Pieri 802 1 1bigh 24GH Y C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel C Group Roaming eae Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O Adhoc network only C Automatically connect to non preferred networks Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lower down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the router will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transit After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 76 Dr ay Te k 3 7 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 2 4GHz gt Security Settings SSID 1
20. Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs 45 VigorAP 900 User s Guide 3 4 6 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt WMM Configuration WMM Configuration Setto Factory Default WMM Capable Enable Disable WMM Parameters of Access Point Aifsn CWMin CWMaz AckPolicy 53 w F 102 M C 15 E C L WMM Parameters of Station Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for A
21. LAN 5GHz gt gt WMM Configuration WMM Configuration WM Capable SPSO Capable SettoFactoryDefault Enable Disable Enable Disable WMM Parameters of Access Point Aifsn WMM Parameters of Station CWhMin AckPolicy Available settings are explained as follows Item WMM Capable Aifsn CWMin CW Max Txop ACM VigorAP 900 User s Guide Description To apply WMM parameters for wireless data transmission please click the Enable radio button It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CWMax value must be greater than CWMin or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest trans
22. MAC address of access point that VigorAP 900 wants Optional to connect to Channel Means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you Security Mode There are several modes provided for you to choose Each mode will bring up different parameters e g WEP keys Pass Phrase for you to configure Encryption Type for This option is available when Open Shared is selected as Dr ay Tek 83 VigorAP 900 User s Guide Open Shared Encryption Type for WPA PSK and WPA2 PSK Pass Phrase Connection Type Router Name IP Address Subnet Mask VigorAP 900 User s Guide Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP Mone hd WEP WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and This option is available when WPA PSK or WPA2 PSK is selected as Security Mode Select T
23. Maintenance gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration Hardware Reset While the modem is running press the Factory Reset button and hold for more than 5 seconds When you see the ACT LED blinks rapidly please release the button Then the modem will restart with the default configuration Dr ay Tek 123 VigorAP 900 User s Guide A f f 4 4 A 7 E j i g AAA ORDO AU crue After restore the factory default setting you can configure the settings for the modem again to fit your personal request 5 5 Contacting Your Dealer If the modem still cannot work correctly after trying many efforts please contact your dealer for further help right away For any questions please feel free to send e mail to support draytek com VigorAP 900 User s Guide 124 Dray Tek
24. Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Ke
25. Time Protocols NTP As a result you can not only schedule the router to dialup to the Internet at a specified time but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours say business hours The schedule is also applicable to other functions You have to set your time before set schedule In System Maintenance gt gt Time and Date menu press Inquire Time button to set the Vigor router s clock to current time of your PC The clock will reset once if you power down or reset the router There is another way to set up time You can inquiry an NTP server a time server on the Internet to synchronize the router s clock This method can only be applied when the WAN connection has been built up Applications gt gt Schedule Schedule C Enable Schedule Schedule Configuration Index Setting Status Dray Tek 103 VigorAP 900 User s Guide Available settings are explained as follows Item Schedule Schedule Configuration Description Enable Schedule Check it to enable the function of schedule configuration Index Display the sort number of the schedule profile Setting Display the summary of the schedule profile Status Display if the profile is enabled V or not X Add Such button is available when Enable Schedule is checked It allows to add a new schedule profile You can set up to 15 schedules To add a schedule 1 Check the b
26. accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change based on this MAC address Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 2437MHz Channel 6 AutoSelect 2412MHz Channel 1 241 TMH Channel 2 Ze Channel 3 Channel 4 ad 8 Channel 9 Channel 10 Channel 11 Channel 12 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate 38 Dray Tek Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access
27. and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note Vigor2920 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP router will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP router will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 86 Dr ay Tek 3 7 8 Station List Station List provides the knowledge of connecting wireless clients now along with its status code Dray Tek Wireless LAN 2 4GHz gt Station List Station List MAC Address Addto Access Control General Advanced Encrypt Tx Ratel KbpsiRx RatelKbps Client s MAC Address Add Available settings are explained as follows Item Description MAC Address Display the MAC Address for the connecting client S
28. be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt Access Point Discovery Scan See Channel Statistics Note During the scanning process about 5 seconds no station is alowed to connect with the AF AF s MAC Address 0 0h 0N 2 yy AP sSSID sd Select as Universal Repeater Each item is explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Receive Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be Channel Statistics shown on the box above this button It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify a
29. channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be VigorAP 900 User s Guide 54 Dr ay Tek shown on the box above this button Channel Statistics It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP Add Type the MAC address of the AP Click Add Later the MAC address of the AP will be added and be shown on WDS settings page Dr ay Tek 55 VigorAP 900 User s Guide 3 5 3 WDS AP Status VigorAP 900 can display the status such as MAC address physical mode power save and bandwidth for the working AP connected with WDS Click Refresh to get the newest information Wireless LAN 2 4GHz gt WDS AP Status WES AP List AID MAC Address 802 11 Physical Mode Power Save Bandwidth 3 5 4 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming featu
30. in Profile Ad hoc Channel C Group Roaming ERTE Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only adhoc network only C Automatically connect to non preferred networks VigorAP 900 User s Guide 60 Dr ay Te k Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lower down the value may degrade range and throughput of wireless 1 0 0 Mo Channel Width 20 MHZ the router will use 20Mhz for data transmission and receiving between the AP and the stations Auto 20 40 MHZ the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transit After finishing this web page configuration please click OK to save the settings Dr ay Tek 61 VigorAP 900 User s Guide 3 6 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 4GHz gt gt Security Settings SSID 1 SSID 2 SSID 3 SSID 4 Mode Mixed WPA WPA PSE w Set up RADIU
31. you have two independent AP subnet VigorAP 900 User s Guide 58 Dray Tek Dray Tek Hide SSID SSID Subnet Isolate LAN Isolate Member VLAN ID Mac Clone Channel functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set three sets of SSID for different usage Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for wired PC in LAN Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign
32. 0 User s Guide 2 3 Windows XP IP Address Setup Click Start button it should be located at lower left corner of your computer then click control panel Double click Network and Internet Connections icon click Network Connections and then double click Local Area Connection Local Area Connection Status window will appear and then click Properties Local Area Connection Properties F Eg General Authentication Advanced Connect using AMD PONET Family PC Ethernet Ad Configure Thiz connection uses the following items El Client for Microsoft Networks Morand and Printer Shisning for Microsoft Networks amp e M fb GoS Packet Scheduler my Internet Protocol TCPYIP F 022ta se _ CLL a 7 z a z Description saasaa Transmission Control Protocollntermet Protocol The detault wide area network protocol that provides communication across diverse interconnected networks C Show icon in notification area when connected Notify me when this connection has limited of no connectivity Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 Internet Protocol TCP IP Properties General You can get F settings assigned automatically if pour network supports this capability Othenwse you need to ask your network administrator for the appropriate P settings
33. 6 Extension Channel S200MHz2 Channel 40 Channel Width auto 20 40MHZ 20MHZ Available settings are explained as follows Item Description Enable Wireless LAN Check the box to enable wireless function VigorAP 900 User s Guide 90 Dr ay Te k Dray Tek Enable Limit Client Mode Enable 2 Subnet Simulate 2 APs Hide SSID SSID Subnet Isolate Member VLAN ID Channel Extension Channel Check the box to set the maximum number of wireless stations which try to connect Internet through Vigor router The number you can set is from 3 to 64 At present VigorAP 900 can be connected by 11a only 11n only 5G Mixed 11a 11n stations simultaneously Simply choose Mixed 11a 11n mode Mixed 1ia lini be lia Only Lin Only 5G Mixed 11la 11in Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the u
34. 900 management IP e g 192 168 1 X 3 Power on VigorAP 900 4 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctly connected to the ADSL modem router or switch hub Internet Dray Te k 7 VigorAP 900 User s Guide This page is left blank VigorAP 900 User s Guide 8 Dr ay Te k Network Configuration After the network connection is built the next step you should do is setup VigorAP 900 with proper network parameters so it can work properly in your network environment Before you can connect to the access point and start configuration procedures your computer must be able to get an IP address automatically use dynamic IP address If it s set to use static IP address or you re unsure please follow the following instructions to configure your computer to use dynamic IP address For the default IP address of this AP is set 192 168 1 2 we recommend you to use 192 168 1 X except 2 in the field of IP address on this section for your computer If the operating system of your computer is Windows 7 please go to section 2 1 Windows 2000 please go to section 2 2 Windows XP please go to section 2 3 Windows Vista please go to section 2 4 2 1 Windows 7 IP Address Setup Click Start button it should be located at lower left corner of your computer then click Control Panel Double click Network and Internet and the following wind
35. C_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin CW Max CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CWMax value must be greater than CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can VigorAP 900 User s Guide 46 Dr ay Te k restrict stations from using specific category class if it is checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP router will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP router will not answer any response request for the transmitting p
36. Connect using EF Realtek RTL8139 810k Family Fast Ethemet NIC This connection uses the following items Oo Client for Microsoft Networks fw E QoS Packet Scheduler w ai File and Printer ahang for l Microsoft Networks p Protocol Version 6 lucida ie eA ree yeme ery bleep W a fink Loves kay Decry Install Uninstall Description Sees wonoo Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Under the General tab click Use the following IP address Then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically i Use the following IP address MBER RBBB REP ee eee eee eee eee eee IP address 192 168 1 9 Subnet mask 255 255 255 0 192 168 1 i Default gateway Obtain DNS server address automatically Use the following DNS server addresses Preferred DNS server 168 95 1 Alternate DNS server Validate settings upon exit Q d aaaoaooot VigorAP 900 User s Guide 10 Dr ay Te k 2 2 Windows 2000 IP Address Setup Click Start button it should be located at lower left corner of your compute
37. HCP server to assign IP address to every host in the LAN Specify which subnet that DHCP server is located the relay agent should redirect the DHCP request to Enter a value of the IP address pool for the DHCP server to start with when issuing IP addresses If the Ist IP address of your modem is 192 168 1 2 the starting IP address must be 192 168 1 3 or greater but smaller than 192 168 1 254 Enter a value of the IP address pool for the DHCP server to end with when issuing IP addresses Type in an address code that determines the size of the network Default 255 255 255 0 24 Enter a value of the gateway IP address for the DHCP server It allows you to set the leased time for the specified PC It is available when Enable Relay Agent is selected Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field 32 Dray Tek Secondary IP Address You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the modem will automatically apply default secondary DNS Server IP address 194 98 0 1 to this field After finishing th
38. Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication 93 VigorAP 900 User s Guide Key 1 Key 4 802 1x WEP Disable Disable IEEE 802 1 X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values
39. It can assure that the peer must receive the WMM packets Check the box means the AP router will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings Dr ay Tek 69 VigorAP 900 User s Guide 3 6 8 Station List Station List provides the knowledge of connecting wireless clients now along with its status code Wireless LAN 2 4GHz gt Station List Station List MAC Address Addto Access Control General Advanced PSM Wh l RSSI PhMd Client s MAC Address Add Available settings are explained as follows Item Description MAC Address Display the MAC Address for the connecting client SSID Display the SSID that the wireless client connects to Auth Display the authentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Client s MAC Address For additional security of wireless Control access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Ad
40. KIP or AES as the algorithm for WPA TKIP My AES Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Choose DHCP or Static IP as the connection mode DHCP The wireless station will be assigned with an IP from Vigor router Static IP The wireless station shall specify a static IP for connecting to Internet via Vigor router DHCP IY Static IP Type a name for the router as identification Simply use the default name This setting is available when Static IP is selected as Connection Type Type an IP address with the same network segment of the LAN IP setting of the router Such IP shall be different with any IP address in LAN This setting is available when Static IP is selected as Connection Type 84 Dray Tek Type the subnet mask setting which shall be the same as the one configured in LAN for the router Default Gateway This setting is available when Static IP is selected as Connection Type Type the gateway setting which shall be the same as the default gateway configured in LAN for the router After finishing this web page configuration please click OK to save the settings 3 7 7 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best e
41. Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option igor N61 802 11n Wireless USB Adapter Utility Configuration Status General Setting Advance Setting Auto launch when Windows start up C Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 2347 C Set mini status always on top Pieri 802 1 1bigh 24GH Y C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel C Group Roaming eae Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O Adhoc network only C Automatically connect to non preferred networks Antenna VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR Tx Power The default setting is the maximum 100 Lower down the value may degrade range and throughput of wireless 100 Channel Width 20 MHZ the router will use 20Mhz for data transmission and rec
42. RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings Dray Tek 79 VigorAP 900 User s Guide 3 7 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 Policy MAC Address Filter Index MAC Address Client s MAC Address TE Al _ Backup ACL Cfg Upload From File 3t iE Available settings are explained as follows Item Description Policy Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC a
43. S Server if 802 18 is enabled WPA WPA Algorithms OTKIF AES TKIP AES Key Renewal Interval 3600 seconds WEP Key 1 Hex m Key 2 Hex m Key 3 Hex 1 Key 4 SS Hex m 802 1 WEP Disable Enable Available settings are explained as follows Item Description Mode There are several modes provided for you to choose WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 User s Guide 62 Dr ay Te k VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the rad
44. SID Display the SSID that the wireless client connects to Auth Display the authentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Client s MAC Address For additional security of wireless Control access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Add Click this button to add current typed MAC address into Access Control General Advanced General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the station Advanced Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the station 87 VigorAP 900 User s Guide 3 7 9 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt Bandwiith Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek Lan 4 Per Station Bandwidth Limit Enable Upload Limit bps Default unit K Download Limit bps Auto Adjustme
45. SSID Mode SSID 3 SSID 4 Mixed W PA HAPAZ PSK k Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms Pass Phrase OTKIP OAES TKIP AES Key Renewal Interval 3600 seconds WEP key 1 Key 2 keyg key 4 502 1 WEF EE DO E EE See Disable Enable ai Available settings are explained as follows Item Mode Dray Tek Description There are several modes provided for you to choose Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access T7 VigorAP 900 User s Guide authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication
46. Universal Repeater cccccccccsssesecceceeeseeeeceeeeeceeeceeeeeeeeeseeeseceeesseaeeceeesseaeeeeeeaaseeeeessaasess 83 3 7 7 WMM Configuration cccccccccssssseeccceeeeceaeeseeeceeeeeeeaeeseeeeeesseaeaseeeeeeesssaaaseeeeeeessaaaageess 85 JO Stalon LIS ensin ra a ATEA A ENNEN 87 3 7 9 Bandwidth Manageme nt cccsccccccsseeeeeeeeseeeeeeeeeesaeseeeseaseeeeseeeeesseeeeesseeeeeensgeeesseeeeeeas 88 les TO ROAMING cntnetaiacvaesuncsue ica edeees tunes breantet E RE nen muntemtanats 89 3 8 Wireless LAN 5GHZ Settings for AP MOde cccceccccceceeeesseeeeeeeeeeeaeeeseeeeeeseeeeeeeeeeeeeesaas 90 28 1 GMINA SID eserini r a E EE a Ea 90 Eao SE 6 0 A P E T E ee E E E EEA E ee ee eee 92 TOS FAC OOTO e n e E E E E E E E E E 95 SOTW e A E eee E E E 96 ea AP DISCOVON ae E E E E E E E O 97 3 0 6 WMM CONU ANO isossa naisina a aa a Ea Ea i a i 98 OT An E a a E E E EE E E 99 3 8 8 Bandwidth Manageme nt ccccsscccccssseeccsesecccsseeeccaseeseseeessaeeecseuseesseseeessaneessaeees 100 ao NOA a E R E E 101 T ARADIU CNY ON a T E TE 102 IAO APEI AO e A nn qnusiantonanieddondasinbonaiauncteaniietts 103 SAREE o T E N E E EA 103 3 11 System VRAIS ANG E rinna eE iA a A a iaa Raia 105 SENEE EEEE E T A E A N T 105 S TREO e r E A A E 107 3 11 3 Administrator FASS WONG ovis susiniansicguteansintzornadanananunettsinntabenbindesasearndhepvenndisudiuedauedinnsanandaat 109 3 114 GOMMOUPAUON BACKUP sade esaisiecencecuedan ndcnns easisc
47. ackets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings Dr ay Tek 47 VigorAP 900 User s Guide 3 4 7 Station List Station List provides the knowledge of connecting wireless clients now along with its status code Wireless LAN 2 4GHz gt gt Station List Station List MAC Address Addto Access Control General Advanced Encrypt Ts Rate EbpsiRs RatelKbps Client s MAC Address Add Available settings are explained as follows Item Description MAC Address Display the MAC Address for the connecting client SSID Display the SSID that the wireless client connects to Auth Display the authentication that the wireless client uses for connection with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Client s MAC Address For additional security of wireless Control access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Add Click this button to add current typed MAC address into Access Control General Advanced General Display general information e g
48. age is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt gt Access Point Discovery Access Point List Select SSID BSSID RSSI Channel Authentication Encryption See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the A amp P SEE ss as AP s MAC Address Atd to WDS Settings Each item is explained as follows Dray Tek Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Receive Signal Strength Indication Channel Display the wireless channel used for the AP that is scanned by VigorAP 900 Encryption Display the encryption mode for the scanned AP Authentication Display the authentication type that the scanned AP applied Scan It is used to discover all the connected AP The results will be Channel Statistics shown on the box above this button It displays the statistics for the channels used by APs AP s MAC Address If you want the found AP applying the WDS settings please type in the AP s MAC address AP s SSID To specify an AP to be applied with WDS settings you can specify MAC address or SSID for the AP Here is t
49. ally Please refer to the section 5 2 Please follow the steps below to ping the modem correctly For Windows L 2 4 Open the Command Prompt window from Start menu gt Run Type command for Windows 95 98 ME or cmd for Windows NT 2000 XP Vista The DOS command dialog will appear ce Command Prompt Microsoft Windows KP Yersion 5 1 2606 LC Copyright 1985 2001 Microsoft Corp D Documents and Settings fae gt ping 192 168 1 2 Finging 192 168 1 2 with 32 bytes of data Reply from 192 168 1 2 bytes 32 time lt ims TTL 255 Reply from 192 168 1 2 bytes 32 timet lt ims TTL 255 Reply from 192 168 1 2 bytes 32 timet lt ims TTL 255 Reply from 192 168 1 2 bytes 32 timet lt ims TTL 255 Ping statistics for 192 168 1 2 Packets Sent 4 Received 4 Lost Hz loss Approximate round trip times in milli seconds Minimum Bms Maximum Ams Average Bms D Documents and Settings fae gt _ Type ping 192 168 1 2 and press Enter If the link is OK the line of Reply from 192 168 1 2 bytes 32 time lt Ims TTL 255 will appear If the line does not appear please check the IP address setting of your computer For Mac Os Terminal Se i Double click on the current used Mac Os on the desktop Open the Application folder and get into Utilities Double click Terminal The Terminal window will appear Type ping 192 168 1 2 and press Enter If the link is OK the line of 64 bytes from 192 168 1 2
50. and downloading services VigorAP 900 User s Guide 118 Dr ay Te k Trouble Shooting This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the modem and finishing the web configuration Please follow sections below to check your basic installation status stage by stage Checking if the hardware status is OK or not Checking if the network connection settings on your computer are OK or not Pinging the modem from your computer Checking if the ISP settings are OK or not Backing to factory default setting if necessary If all above stages are done and the modem still cannot run normally it is the time for you to contact your dealer for advanced help 5 1 Checking If the Hardware Status Is OK or Not Follow the steps below to verify the hardware status l Dray Tek Check the power line and cable connections Refer to 1 3 Hardware Installation for details Power on the modem Make sure the POWER LED ACT LED and LAN LED are bright If not it means that there is something wrong with the hardware status Simply back to 1 3 Hardware Installation to execute the hardware installation again And then try again 119 VigorAP 900 User s Guide 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not Sometimes the link failure occurs due to the wrong network connection settings After trying the above section if the link is stille
51. ay Tek Dray Tek WPA Algorithms Pass Phrase Key Renewal Interval PMK Cache Period Pre Authentication entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64
52. ayTek LANA NAY O 6b OF 2 O ODrayTek LAn B LI o s300 ieee O p 0L A o Hide SSID Prevent SSID from being scanned Isolate Member Wireless cllents stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless chent will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of amp Channel 2462MHz Channel 11 VigorAP 900 User s Guide 36 Dr ay Te k Channel Extension Channel Packet OVERDRIVE CITS Burst Note 2462MHz Channel 11 2442MHz Channel 7 1 Ts Burst only supports 11g mode 2 The same technology must also be supported in chents to boost WLAN performance Antenna Ts Power Channel width Auto 20 40 MHZ 20 MH Available settings are explained as follows Item Enable Wireless LAN Enable Limit Client Mode Enable 2 Subnet Simulate 2 APs Hide SSID Dray Tek Description Check the box to enable wireless function Check the box to set the maximum number of wireless stations which try to connect Internet through Vigor router The number you can set is from 3 to 64 At present VigorAP 900 can connect to 11b only 11g only lIn only Mixed 11b 11g and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixedilib iig iin 11g Only iin Only Mixedi11b 1i
53. c Mixedi1lilb 1ig ilini Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Check it to prevent from wireless sniffing and make it harder for unauthorized clients or STAs to join your wireless LAN Depending on the wireless utility the user may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set three sets of SSID for different usage 37 VigorAP 900 User s Guide SSID Subnet Isolate Member VLAN ID Mac Clone Channel Extension Channel Rate VigorAP 900 User s Guide Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not
54. cess about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Please click Scan to discover all the connected APs Wireless LAN 5G gt Access Point Discovery Access Point List BSSID Channel Encryption Authentication Scan Note During the scanning process about 5 seconds no station is allowed to connect with the AP Each item is explained as follows Item SSID BSSID RSSI Channel Encryption Authentication Scan Dray Tek Description Display the SSID of the AP scanned by VigorAP 900 Display the MAC address of the AP scanned by VigorAP 900 Display the signal strength of the access point RSSI is the abbreviation of Receive Signal Strength Indication Display the wireless channel used for the AP that is scanned by VigorAP 900 Display the encryption mode for the scanned AP Display the authentication type that the scanned AP applied It is used to discover all the connected AP The results will be shown on the box above this button 97 VigorAP 900 User s Guide 3 8 6 WMM Configuration WMM 1s an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless
55. communication channel CCK w Select CCK 11b mode OFDM 11g mode or HTMIX 11b g n mixed mode from the drop down menu for the access point that VigorAP 900 wants to connect Each access point should be setup to the same Phy mode for connecting with each other Subnet Choose LAN A or LAN B for each SSID Security Select WEP TKIP or AES as the encryption algorithm Peer Mac Address Four peer MAC addresses are allowed to be entered in this page at one time Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option Yigor N61 802 11n Wireless USB Adapter Utility Configuration Status Option About General Setting Advance Setting Auto launch when Windows start up Disable Radio C Remember mini status position Fragmentation Threshold es Auto hide mini status RTS Threshold 2347 C Set mini status always on top Freeney 802 1 1bigh 24GH w C Enable IP Setting and Proxy Setting
56. curity Before you enable it please switch to Security page and set Wireless Lan security to WPA2 802 1x or press Security Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 50 Dr ay Tek 3 5 Wireless LAN Settings for AP Bridge Point to Point AP Bridge Point to Multi Point Mode When you choose AP Bridge Point to Point or Point to Multi Point Mode as the operation mode the Wireless LAN menu items will include General Setup AP Discovery and WDS AP Status AP Bridge Point to Point allows VigorAP 900 to connect to another VigorAP 900 which uses the same mode All wired Ethernet clients of both VigorAP 900s will be connected together Point to Multi Point Mode allows AP 900 t
57. d receiving between the AP and the stations Auto 20 40 MHZ the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transit After finishing this web page configuration please click OK to save the settings 3 8 2 Security This page allows you to set security with different modes for SSID 1 2 and 3 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 5GHz gt Security Settings SSID 1 SSID 2 Mode SSID 3 SSID 4 Mined WPA WPAZ PSK he Set Up RADIUS Server if 802 1 is enabled WPA WEA Algorithms Pass Phrase OTEIP OAES G TKIPJAES Key Renewal Interval 3600 seconds WEP key 1 Key ie Key so Key 4 602 18 WEP Disable Enable i Available settings are explained as follows Item Mode VigorAP 900 User s Guide Description There are several modes provided for you to choose WPAZ2 IPSK Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be 92 Dr
58. d Click this button to add current typed MAC address into Access Control General Advanced General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the station Advanced Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the station VigorAP 900 User s Guide 70 Dray Tek 3 6 9 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 2 4GHz gt Bandwidth Management SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTek LAN A Per Station Bandwidth Limit Enable Upload Limit User defined bps Default unit K Download Limit 512k w bps Auto Adjustment Total Upload Bandwidth User defined bps Default unit K Total Download Bandwidth bps 1 Download Traffic going to any station Upload Traffic being sent from a wireless station 2 Allow auto adjustment could make the best utilization of available bandwidth Note Available settings are explained as follows Item Description SSID Display the specific SSID name of the router Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to Vigor router with the same SSID Use the dro
59. d failed please do the steps listed below to make sure the network connection settings is OK For Windows The example is based on Windows XP As to the examples for other operation systems please refer to the similar steps or find support notes in www draytek com 1 Goto Control Panel and then double click on Network Connections Webwork Connections 2 Right click on Local Area Connection and click on Properties Disable Status Repair Bridge Connections Create Sharkcut Rename Properties 3 Select Internet Protocol TCP IP and then click Properties ethO Properties General Authentication Advanced Connect using BS ASUSTek Broadcom 440 10 100 Ir Configure This connection uses the following items El Client tor Microsoft Networks a File and Printer Sharing for Microsoft Networks fm 0s Packet Scheduler Internet Protocol TCP IP Description Transmission Control Protocol lnternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this connection has limited or no connectivity VigorAP 900 User s Guide 120 Dr ay Te k 4 Select Obtain an IP address automatically and Obtain DNS server address automatically Internet Protocol TCP IP Properties General Alternate Configuration You can get IP settings assigned automatically if your netw
60. d the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode 23 VigorAP 900 User s Guide WPA Algorithm Pass Phrase Key Renewal Internal PMK Cache Period Pre Authentication Key 1 Key 4 802 1x WEP WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This ra
61. ddress filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter Disable Activate MAC address filter Blocked MAC address filter MAC Address Filter Display all MAC addresses that are edited before Client s MAC Manually enter the MAC address of wireless client Address Add Add a new MAC address into the list Delete Delete the selected MAC address in the list Edit Edit the selected MAC address in the list Cancel Give up the access control set up VigorAP 900 User s Guide 80 Dr ay Tek Backup Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Restore Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 7 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt WPS Wi Fi Protected Setup Enable WPS Wi Fi Protected Setup Information WPS Configured Yes WPS SSID DrayTek L4n 4 WPS Auth Mode Mined APAAPA IP Sk WES Encryp Type TEIP AES Device Configure Configure via Push Button Start PBC Configure via Client PinCode SEPN Status Idle Note WPS can help your wireless client automatically connect to the Access point WPS is Disabled i WES is Enabled
62. de Security Peer MAC Address Dray Tek Description There are three types of transmission rates developed by different techniques for Phy Mode Data will be transmitted via communication channel Ss CCK OFDM HTML Select CCK 11b mode OFDM 11g mode or HTMIX 11b g n mixed mode from the drop down menu for the access point that VigorAP 900 wants to connect Each access point should be setup to the same Phy mode for connecting with each other Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to 19 VigorAP 900 User s Guide Advanced Settings for AP Bridge WDS When you choose AP Bridge WDS you will need to configure the following page Quick Start Wizard gt Wireless LAN 2 4GHz Note Enter the configuration of 4Ps which 4P 900 want to connect Remote 4P should always set L4N 4 MAC address to connect 4P900 WDS Phy Mode 1 Subnet LAN 4 Security Disabled WEP OTKIP OAES ey Key Peer MAC Address PE EE 2 Subnet Security Disabled WEP OTKIP OAES Key Peer MAC Address PLL PE CCK E 3 Subnet Security Disabled WEP OTKIP OAES Peer MAC Address LEPET 4 Subnet L4N 4 Security Disabled WEP TKIP AES Key Peer MAC Address COO Oo Available settings are explained as follows Item Phy Mode Subnet Security Peer MAC Addre
63. e Dray Tek 29 VigorAP 900 User s Guide 3 1 Operation Mode This page provides several available modes for you to choose for different conditions Click any one of them and click OK The system will configure the required settings automatically Operation Mode Configuration Wireless LAN 2 4GHz AP AFP 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them AP Bridge Point to Point AP 900 will connect to another AP 900 which uses the same mode and all wired Ethernet clients of both AP 900s will be connected together AP Bridge Point to Multi Point AFP 900 will connect to up to four AP 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together AP Bridge WDS AP 900 will connect to up to four AP 900s which uses the same mode and all wired Ethernet clients of every AP 900s will be connected together This mode is still able to accept wireless clients Universal Repeater AFP 900 can act as a wireless repeater it can be Station and AP at the same time Wireless LAN 5GHz AP AFP 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them Available settings are explained as follows Item Description Wireless LAN 2 4GHz AP This mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network
64. e settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 9 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external RADIUS server and client share a secret that is used to authenticate the messages sent between them Both sides must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 42 Dr ay Tek 3 4 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wi
65. eeeeeessaaeeeeeseeees 25 2 7 5 Configuring 5G Security Settings cc eeececccceeeeeseesseeeeeeeeeeeeeeceeeeesseaeeseeeeeeeeseegeeeeeeees 26 2 7 6 Finishing the Wireless Settings Wizard cccccccsseseseeceeeeeeaeeeeeeeeeeeseaeeeeeeeeeessaeaseeeeees 28 e CONOS S ic 10 seen nee E ee ee E eee ee 28 Advanced Configuration asescccetcesssscinsusoctsercssansesesssessaueasasvinssancenoaswessaneceasnwace 29 2T Operation ModE sssr ne oaa Ei ia ekinaki 30 SL ENN a E E E E E E A E 31 3 3 General Concepts for Wireless LAN 2 4GHZ 5GHZ ccccccssseseeeeeeeeeeeeseeeeeeeesseaeaseeseeees 34 3 4 Wireless LAN Settings for AP MOde cccccecccccceseeeeeeeaeeeeeeeeeeeeeeesseeeeeeeeseeseeeeessaeeeeeeneas 36 SUREE nee S CU o E N E A E A E 36 AZ 60 E EE E ee ee eee 40 34 3 ACCESS 16 9 6 Eaten ene ee ere ee eee en ee ee ee eee ee 43 AANE e E on etn sos es ise ene oa eves dus oon eesniou see ate attain E EE 44 S A 5 AP DISCOVGLY swiscivicsinesineecvessaseitiesaiavnsinesttvasui as EIEEE a i raai ais 45 3 4 6 WMM Configuration cccccccccssssseeecceeeeeeeeeeeeeeeeeeesaeeeeseeeeeessaeesseeeeeeesssaeaseeeceeeesssaaageees 46 Dray Tek vii VigorAP 900 User s Guide 3A GANON NG aen eine ifen tence ie E NS a R 48 3 4 8 Bandwidth Manageme nt ccccccccccseeeeeeeeseeeseeseeeseegeeeseeseeeeeaeeeesseeeeesseeeeeseeseesseeeeeeas 49 Dis Fa el INN E E EEEE E acm ce lew teens E E sae dpminw hiae ches E N 50 3 5 Wirele
66. eiving between the AP and the stations Auto 20 40 MHZ the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transit After finishing this web page configuration please click OK to save the settings Dray Tek 39 VigorAP 900 User s Guide 3 4 2 Security This page allows you to set security with different modes for SSID 1 2 3 and 4 respectively After configuring the correct settings please click OK to save and invoke it By clicking the Security Settings a new web page will appear so that you could configure the settings Wireless LAN 2 4GHz gt Security Settings SSID 1 SID 2 SSID 3 SSID 4 Mode Mixed WPA WPA PSE kd Set up RADIUS Server if 802 18 is enabled WPA WPA Algorithms OTKIP Oases TKIP AES Pass Phrase Key Renewal Interval 3600 seconds WEP Key 1 Hex Key 2 EE Hex key 3 Hex key 4 Hex S02 1 WEP Disable Enable Available settings are explained as follows Item Description Mode There are several modes provided for you to choose Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA 2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK T
67. eration mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery Station List Bandwidth Management and Roaming Wireless LAN 2 4GHz 3 6 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the Phy mode security Tx Burst and choose proper mode Please refer to the following figure for more information Wireless LAN 2 4GHz gt General Setup General Setting IEEE 8027 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mixedi11b 11g 1lin Enable 2 Subnet Simulate 2 4Ps Hide ccp subret Isolate Isolate VLAN ID Waeciine SSID LAN MemberlO Untagged 10 Oo O b J OL 20 Oo oO p 30 a OO pio 4O wv OO OO lb Hide SSID Prevent SSID from being scanned Isolate LAN Wireless cients stations with the same SSID cannot access wired Pls on LAN Isolate Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of amp Dray Tek 57 VigorAP 900 User s Guide Note Enter the configuration of APs which 4P900 want to connect Remote AFP should always set L4N 4 MAC address to connect 4P900 WoOS Phy Mode CCK 1 Subnet LAN 4 Security
68. erence received including interference that may cause undesired operation This product is designed for 2 4GHz 5GHz WLAN network throughout the EC region and Switzerland with restrictions in France C O FE Please visit http www draytek com user SupportDLRTTECE php You are cautioned that changes or modifications not expressly approved by the party responsible for compliance could void your authority to operate the equipment FCC RF Radiation Exposure Statement 1 This Transmitter must not be co located or operating in conjunction with any other antenna or transmitter 2 This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body Dr ay Tek v VigorAP 900 User s Guide VigorAP 900 User s Guide vi Dr ay Te k Table of Contents TAC i oecteacetenene cite seman a 1 11 TNO CHIC WGI seisein ia a EEA ea E E EEE EAEEREN ENE REE 1 1 2 LED Indicators ANd CONNECHOSS ericsson E aea ENEAS 2 AoC ell Gs UNIO la 2c ec azaedeeeesasesccsesaateccasaesesesvaedeessuantesesssehonessacedeuestecneeeavaehencatbessensteetesseaece 4 1 3 1 Wired Connection for PC in LAN ccccceccccecsssseceeeeeesseceeceeesseceeeeeeaaeeeeeseeaeeeeeeeseaeeeeeeeas 4 1 3 2 Wired Connection for Notebook in WLAN cccccccccceeeseseeseeeeeeeeeeeeeeeeeeeeeessaeeaeeeeeeeeeaas
69. ess station with WPS supported There are two methods to do network connection through WPS between AP and Stations pressing the Start PBC button or using PIN Code On the side of VigorAP 900 series which served as an AP press WPS button once on the front panel of VigorAP 900 or click Start PBC on web configuration interface On the side of a station with network card installed press Start PBC button of network card WLAN Card If you want to use PIN code you have to know the PIN code specified in wireless client Then provide the PIN code of the wireless client you wish to connect to the VigorAP 900 PINCode WLAN Card i css N M M ass PIN Code of Station Dray Te K 35 VigorAP 900 User s Guide 3 4 Wireless LAN Settings for AP Mode When you choose AP as the operation mode the Wireless LAN menu items will include General Setup Security Access Control WPS AP Discovery and Station List Wireless LAN 2 4GHz 3 4 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN 2 4GHz gt General Setup General Setting IEEE 02 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mixedilib i11ig 1ini Enable 2 Subnet Simulate 2 4Ps Hide Isolate VLAN ID SSI an subnet Member 0 Untagged Mac Clone 1 O Dr
70. etween the AP and the stations Auto 20 40 MHZ the router will use 20Mhz or 40Mhz for data transmission and receiving according to the station capability Such channel can increase the performance for data transit After finishing this web page configuration please click OK to save the settings 3 5 2 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to VigorAP 900 This page is used to scan the existence of the APs on the wireless LAN Yet only the AP which is in the same channel of VigorAP 900 can be found Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt gt Access Point Discovery Access Point List See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP AP s MAC Address CN CEE AP s SSID 0 Atd to WDS Settings Available settings are explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Receive Signal Strength Indication Channel Display the wireless
71. f Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option igor N61 802 11n Wireless USB Adapter Utility General Setting Advance Setting Auto launch when Windows start up C Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 2347 C Set mini status always on top Frequency 802 11b gin 2 4GH v C Enable IP Setting and Proxy Setting in Profile Ad hoc Channel C Group Roaming basen Power Save Mode Tx Burst WLAN type to connect Infrastructure and Ad hoc network Infrastructure network only O Ad hoc network only C Automatically connect to non preferred networks VigorAP 900 can be attached with two antennas to have good data transmission via wireless connection However if you have only one antenna attached please choose 1TIR The default setting is the maximum 100 Lower down the value may degrade range and throughput of wireless 53 VigorAP 900 User s Guide 100 LOO Channel Width 20 MHZ the router will use 20Mhz for data transmission and receiving b
72. feature and the pre authentication Wireless LAN 2 4GHz gt gt Roaming Enable PMK Caching Cache Period 10 minutes Pre Authentication Note This function is only supported by WPA2 802 1x security Before you enable it please switch to Security page and set Wireless Lan security to WPA2 802 1x or press Security Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 72 Dr ay Tek 3 7 Wireless LAN Settings for Universal Repeater Mode When you choose Universal Repeater as the operation mode the Wireless LAN menu items will include General Setup Security WPS AP Discovery Universal Repeater and Station List 3 7 1 General Setup By clicking the General Setup a
73. ffort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt gt WMM Configuration WMM Configuration WME Capable Setto Factory Default OkEnable Disable WMM Parameters of Access Point Aifsn WMM Parameters of Station Aifsn CWMin AckPolicy LI d d LI Available settings are explained as follows Item WMM Capable Aifsn CWMin CWMax Dray Tek Description To apply WMM parameters for wireless data transmission please click the Enable radio button It controls how long the client waits for each data transmission Please specify the value ranging from 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from 1 to 15 Be aware that CWMax value must be greater than CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories 85 VigorAP 900 User s Guide must be greater Txop It means transmission opportunity For WMM categories of AC_VI
74. for you 2462MHz Channel 11 AutoSelect 2412MHz Channel 1 2417MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 2432MHz Channel 5 2437MHz Channel 6 2442MHz Channel 7 2447MHz Channel 8 2452MHz Channel 9 2457MHz Channel 10 2462MHz Channel 11 2467MHz Channel 12 247 2MHz Channel 13 Extension Channel With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Station List Click the Display button to open the Station List dialog It provides the knowledge of connecting wireless clients now along with its status code AP Discovery Click this button to open the AP Discovery dialog VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood This option is not available when AP is selected as the Operation Mode After finishing this web page configuration please click Next to continue Dr ay Tek 17 VigorAP 900 User s Guide 2 7 2 Configuring 2 4GHz Wireless Settings based on the Operation Mode In this page the advanced settings will vary according to the operation mode chosen on ie ka Advanced Settings for AP Bridge Point to Point When you choose AP Bridge Point to Point you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Note Enter the configuration of 4Ps which 4P 900 want to connect Phy Mode Securi
75. gulated and ruled by modem Click LAN to open the LAN settings page and choose General Setup Note Such page will be changed according to the Operation Mode selected The following screen is obtained by choosing AP as the operation mode LAN gt gt General Setup Ethernet TCP IP and DHCP Setup LAN A IP Network Configuration VigorAP Management Enable Client Specify an IP address IP Address 192 168 1 2 Subnet Mask 255 255 255 0 Default Gateway Cl Enable Management VLAN YLAN ID 0 LAN B IP Network Configuration IP Address 192 168 2 2 Subnet Mask 255 255 255 0 Cl Enable Management VLAN VLAN ID 0 DHCP Server Configuration O Enable Server Disable Server O Relay Agent Start IP Address End IP Address Subnet Mask Default Gateway Lease Time DHCP Server IP Address for Relay Agent Primary DNS Server Secondary DNS Server DHCP Server Configuration O Enable Server Disable Server O Relay Agent Start IP Address End IP Address Subnet Mask Default Gateway Lease Time DHCP Server IP Address for Relay Agent Primary DNS Server Secondary DNS Server Available settings are explained as follows Dray Tek 31 VigorAP 900 User s Guide Item Enable Client IP Address Subnet Mask Default Gateway
76. he WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 User s Guide 40 Dr ay Te k VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde S
77. he place that you can type the SSID of the AP Add Click Repeater for the specified AP Next click Add Later the MAC address of the AP will be added and be shown on WDS settings page 67 VigorAP 900 User s Guide 3 6 6 WDS AP Status VigorAP 900 can display the status such as MAC address physical mode power save and bandwidth for the working AP connected with WDS Click Refresh to get the newest information Wireless LAN 2 4GHz gt WDS AP Status WDS AP List AID MAC Address 802 11 Physical Mode Power Save Bandwidth 1 OO SO F eo 60C CERK OFF z0M 3 6 7 WMM Configuration WMM is an abbreviation of Wi Fi Multimedia It defines the priority levels for four access categories derived from 802 1d prioritization tabs The categories are designed with specific types of traffic voice video best effort and low priority data There are four accessing categories AC_BE AC_BK AC_VI and AC_VO for WMM Wireless LAN 2 4GHz gt gt WMM Configuration WMM Configuration Setto Factory Default WM Capable OEnable Disable WMM Parameters of Access Point Aifsn CWMin CWMazx AckPolicy LJ d L d WMM Parameters of Station Aifsn Available settings are explained as follows Item Description WMM Capable To apply WMM parameters for wireless data transmission please click the Enable radio button Aifsn It controls how long the client waits for each data transmission Please specify the value ranging f
78. icmp_seq 0 ttl 255 time xxxx ms will appear VigorAP 900 User s Guide 122 Dray Tek 806 Terminal bash 80x24 Last login Sat Jan 3 B2 24 16 on ttypi Welcome ta Darwin Vigorla draytekd ping 192 168 1 1 PING 192 168 1 1 192 168 1 1 56 data bytes 64 bytes from 192 165 1 1 tcomp_seq 6 ttl 255 times8 755 ms 64 bytes from 192 165 1 1 icmp_seg 1 ttl 255 times8 697 ms t bytes from 192 165 1 1 icmp_seg 2 ttl 255 times6 716 ms 64 bytes from 192 165 1 1 icmp_seg 3 ttl 255 timesh 731 ms 64 bytes from 192 168 1 1 tcmp_seq 4 ttl 255 timesh 72 ms AE 192 168 1 1 ping statistics EF packets transmitted 5 packets received 6 packet loss round trip minfgaygemax 0 697 6 7236 755 ms Vigoria draytekd fj 5 4 Backing to Factory Default Setting If Necessary Sometimes a wrong connection can be improved by returning to the default settings Try to reset the modem by software or hardware Q Warning After pressing factory default setting you will loose all settings you did before Make sure you have recorded all useful settings before you pressing The password of factory default is null Software Reset You can reset the modem to factory default via Web page Go to System Maintenance and choose Reboot System on the web page The following screen will appear Choose Using factory default configuration and click OK After few seconds the modem will return all the settings to the factory settings System
79. ilib 1i1ig Mixed 1ig iin Mixed 11b 11g 11n Means the channel of frequency of the wireless LAN The default channel is 11 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 2462MH2 Channel 11 P46 7MH2 Channel 12 247 2MH2 Channel 13 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate There are three types of transmission rates developed by different techniques for Phy Mode Data will be transmitted via communication channel 52 Dray Tek Dray Tek Security Peer Mac Address Packet OVERDRIVE Antenna Tx Power Select CCK 11b mode OFDM 11g mode or HTMIX 11b g n mixed mode from the drop down menu for the access point that VigorAP 900 wants to connect Each access point should be setup to the same Phy mode for connecting with each other Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides o
80. in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings RADIUS Server IP Address Port Shared Secret Session Timeout Cluse internal RADIUS Server DrayTek o Available settings are explained as follows Item Use internal RADIUS Server IP Address Port Shared Secret Session Timeout VigorAP 900 User s Guide Description There is a RADIUS server built in VigorAP 900 which is used to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 9 RADIUS Server to configure settings for internal server of VigorAP 900 Enter the IP address of external RADIUS server The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 The external RADIUS server and client share a secret that is used to authenticate
81. io using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA Algorithms Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Pass Phrase Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde Such feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to
82. ion connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically Total Upload Limit When Auto Adjustment is checked the value defined here will be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data uploading Total Download When Auto Adjustment is checked the value defined here will Limit be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data downloading After finishing this web page configuration please click OK to save the settings Dr ay Tek 49 VigorAP 900 User s Guide 3 4 9 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN 2 4GHz gt gt Roaming Enable PMK Caching Cache Period 10 minutes Pre Authentication Note This function is only supported by WPA2 802 1x se
83. ireless function is not ready Blinking Data is transmitting sending receiving 5G Wireless function is ready Off Wireless function is not ready Blinking Data is transmitting sending receiving LAN AI A4 O A normal connection rate with 100M 1000M is through its corresponding port Off LAN is disconnected Blinking Data is transmitting sending receiving A normal connection rate with 100M 1000M is through its corresponding port Off LAN is disconnected Blinking Data is transmitting sending receiving 5 LAN B VigorAP 900 User s Guide 2 Dr ay Te k Interface Description Press the button quickly less than 2 seconds to wait for client device making network connection 2 4G through WPS WPS Button Press the button more than 2 seconds to turn on or turn off the wireless network connection SdW J4O NO NVM Factory Restore the default settings Usage Turn on the router Press the button and keep for more than 6 seconds Then the router will restart with the factory default configuration LAN B Connecter for xDSL Cable modem Giga level or router LAN A1 PoE Connecter for xDSL Cable modem Giga level A4 computer or router PWR Connecter for a power adapter a BBBABABBABRWANAAAA 4 o CITIT sey Aope ARO AU UWE HEEE YMd PWR Connector for a printer EF AF a F Oe ae le oe 4 ar oe Q ON OFF Power sw
84. is Disable If you click Enable please type the relational settings listed below Server Address Type the IP address of the STUN server Server Port Type the port number of the STUN server Minimum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the minimum period The default setting is 60 seconds Maximum Keep Alive Period If STUN is enabled the CPE must send binding request to the server for the purpose of maintaining the binding in the Gateway Please type a number as the maximum period A value of 1 indicates that no maximum period is specified After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 108 Dr ay Te k 3 11 3 Administrator Password This page allows you to set new password System Maintenance gt Administration Password Administrator Settings Account Confirm Password Note Authorization can contain only a z A Z 0 9 e RX i lt gt 7 Available settings are explained as follows Item Description Account Type the name for accessing into Web User Interface Password Type in new password in this filed Confirm Password Type the new password again for confirmation When you click OK the login window will appear Please use the new password to access into the web user interface again
85. is web page configuration please click OK to save the settings Dr ay Tek 33 VigorAP 900 User s Guide 3 3 General Concepts for Wireless LAN 2 4GHz 5GHz The VigorAP 900 is equipped with a wireless LAN interface compliant with the standard IEEE 802 11n draft 2 protocol To boost its performance further the VigorAP 900 is also loaded with advanced wireless technology to lift up data rate up to 300 Mbps Hence you can finally smoothly enjoy stream music and video Note The actual data throughput will vary according to the network conditions and environmental factors including volume of network traffic network overhead and building materials In an Infrastructure Mode of wireless network VigorAP 900 plays a role as an Access Point AP connecting to lots of wireless clients or Stations STA All the STAs will share the same Internet connection via VigorAP 900 The General Setup will set up the information of this wireless network including its SSID as identification located channel etc Security Overview WEP Wired Equivalent Privacy is a legacy method to encrypt each frame transmitted via radio using either a 64 bit or 128 bit key Usually access point will preset a set of four keys and it will communicate with each station using only one out of the four keys WPA Wi Fi Protected Access the most dominating security mechanism in industry 1s separated into two categories WPA personal or called WPA Pre Share Key WPA PSK
86. itch TAHRA Be Minnanna E WHY U Dray Tek Oo VigorAP 900 User s Guide 1 3 Hardware Installation This section will guide you to install the VigorAP 900 through hardware connection and configure the device s settings through web browser Before starting to configure VigorAP 900 you have to connect your devices correctly 1 3 1 Wired Connection for PC in LAN 1 Connect VigorAP 900 to ADSL modem router or switch hub in your network through the LAN A port of the access point by Ethernet cable 2 Connect a computer to other available LAN A port Make sure the subnet IP address of the PC is the same as VigorAP 900 management IP e g 192 168 1 X 3 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 4 Power on VigorAP 900 Check all LEDs on the front panel ACT LED should blink and LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router For the detailed information of LED status please refer to section 1 2 Internet VigorAP 900 User s Guide 4 Dr ay Te k 1 3 2 Wired Connection for Notebook in WLAN 1 Connect VigorAP 900 to ADSL modem or router in your network through the LAN A port of the access point by Ethernet cable 2 Connect the A C power adapter to the wall socket and then connect it to the PWR connector of the access point 3 Power on VigorAP 900 4 Check all LEDs on the fron
87. lable extension channel options will be varied according to the Channel selected above Station List Click the Display button to open the Station List dialog It provides the knowledge of connecting wireless clients now along with its status code Dr ay Tek 25 VigorAP 900 User s Guide After finishing this web page configuration please click Next to continue 2 7 5 Configuring 5GHz Security Settings VigorAP 900 offers 5GHz wireless connection capability You can setup 5G features in Quick Start Wizard first Once the USB 5GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt Wireless Security 5GHz SSID 1 SSID 2 SSID 3 SSID 4 SSID DrayTekSG L4an A Wireless Security Settings Mode Mined WPA WIPA2 PSK w WPA Algorithms QTKIF AES TKIP AES Pass Phrase Key Renewal Interval 3600 seconds PRE Cache Period minutes Pre Suthentication Disable Enable Available settings are explained as follows Item Description Mode There are several modes provided for you to choose WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Sha
88. lowed content is the ASCII characters from 33 to 126 except and Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode After finishing this web page configuration please click Next to continue Dray Tek 27 VigorAP 900 User s Guide 2 7 6 Finishing the Wireless Settings Wizard When you see this page it means the wireless setting wizard is almost finished Just click Finish to save the settings and complete the setting procedure Quick Start Wizard Vigor Wizard Setup is now finished Basic Settings for AP900 is completed Press Finish button to save and finish the wizard setup Mote that the configuration process takes a few seconds to complete 2 8 Online Status The online status shows the LAN status Station Link Status for such device Online Status System Status System Uptime 3d 01 15 52 LAN A Status IP Address TX Packets RX Packets TX Bytes RX Bytes 192 168 1 2 22 fO 2965 669695 320324 LAN B Status IP Address TX Packets RX Packets TX Bytes 192 168 2 2 0 0 0 Detailed explanation is shown below Item Description IP Address Displays the IP address of the LAN interface TX Packets Displays the total transmitted packets at the LAN interface RX Packets Displays the total number of received packets at the LAN interface TX Bytes Displays the total transmitted size at
89. mation The setting for URL can be domain name or IP address CPE Settings Such information is useful for Auto Configuration Server ACS Enable Check the box to allow the CPE Client to connect with Auto Configuration Server Dray Te k 107 VigorAP 900 User s Guide On Choose the interface LAN A or LAN B for VigorAP 900 connecting to ACS server Port Sometimes port conflict might be occurred To solve such problem you might change port number for CPE DNS Server IP Address Such field is to specify the IP address if a URL is configured with a domain name Primary IP Address You must specify a DNS server IP address here because your ISP should provide you with usually more than one DNS Server If your ISP does not provide it the modem will automatically apply default DNS Server IP address 194 109 6 66 to this field Secondary IP Address You can specify secondary DNS server IP address here because your ISP often provides you more than one DNS Server If your ISP does not provide it the modem will automatically apply default secondary DNS Server IP address 194 98 0 1 to this field Periodic Inform The default setting is Enable Please set interval time or Settings schedule time for the AP to send notification to VigorACS server Or click Disable to close the mechanism of notification Interval Time Type the value for the interval time setting The unit is second STUN Settings The default
90. mission opportunity Specify the value ranging from 0 to 65535 It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it 1s 98 Dray Tek checked Note VigorAP 900 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP router will answer the response request while transmitting WMM packets through wireless connection It can assure that the peer must receive the WMM packets Check the box means the AP router will not answer any response request for the transmitting packets It will have better performance with lower reliability After finishing this web page configuration please click OK to save the settings 3 8 7 Station List Station List provides the knowledge Station List of connecting wireless clients now along with its status code Wireless LAN 5GHz gt Station List Station List General Advanced MAC Address Encrypt Ts Rate KbpsiRs Ratelkbps Addto Access Control Client s MAC Address l Add Available settings are explained as follows Item Description MAC Address Display the MAC Address for the connecting client SSID Display the SSID that the wireless client connects to Auth Display the authentication that the wireless client uses for connectio
91. mode are different AF Bridge WOos w AP AF Bridge Foint to Point AF Bridge Foint to Multi Foint AF Bridge DS Universal Repeater Wireless Mode At present VigorAP 900 can connect to 11b only 11g only 11n only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixed 1ib 11g9 11n 11b Only 1ig Only 1in Only Mixed 11b 119 Mixed 1 ib 1 ig 1 in VigorAP 900 User s Guide 16 Dr ay Te k Main SSID Set a name for VigorAP 900 to be identified Enable 2 Subnet Simulate 2 APs Check the box to enable the function for two independent subnets Once you enable this function LAN A and LAN B would be independent Next you can connect one router in LAN A and another router in LAN B Such mechanism can make you feeling that you have two independent AP subnet functions in one VigorAP 900 If you disable this function LAN A and LAN B ports are in the same domain You could only connect one router no matter connecting to LAN A or LAN B in this environment Multiple SSID When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Channel Means the channel frequency of the wireless LAN The default channel is 6 You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine
92. n AP to be applied with WDS settings you can Select as Universal Repeater VigorAP 900 User s Guide specify MAC address or SSID for the AP Here is the place that you can type the SSID of the AP In Universal Repeater mode WAN would work as station mode and the wireless AP can be selected as a universal repeater Choose one of the wireless APs from the Scan list 82 Dray Tek 3 7 6 Universal Repeater The access point can act as a wireless repeater it can be Station and AP at the same time It can use Station function to connect to a Root AP and use AP function to serve all wireless stations within its coverage Note While using Universal Repeater mode the access point will demodulate the received signal Please check if this signal is noise for the operating network then have the signal modulated and amplified again The output power of this mode is the same as that of WDS and normal AP mode Wireless LAN 2 4GHz gt gt Universal Repeater Universal Repeater Parameters SSID MAC Address Optional Channel Security Mode Encryption Type WEP Keys O key 1 Key 2 Key 3 O key 4 Note If Channel is modified the Channel setting of 4P would also be changed Universal Repeater IP Configuration Connection Type DHCP w Router Name 4P9O0 Available settings are explained as follows Item Description SSID Set the name of access point that VigorAP 900 wants to connect to MAC Address Type the
93. n with such AP Encrypt Display the encryption mode used by the wireless client Tx Rate Rx Rate Display the transmission receiving rate for packets Refresh Click this button to refresh the status of station list Add to Access Client s MAC Address For additional security of wireless Control access the Access Control facility allows you to restrict the Dr ay Tek 99 VigorAP 900 User s Guide Add General Advanced network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface Click this button to add current typed MAC address into Access Control General Display general information e g MAC Address SSID Auth Encrypt TX RX Rate for the station Advanced Display more information e g AID PSM WMM RSSI PhMd BW MCS Rate for the station 3 8 8 Bandwidth Management The downstream or upstream from FTP HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs Please use Bandwidth Management to make the bandwidth usage more efficient Wireless LAN 5GHz gt Bandwidth Management SSID 1 SSID 2 SSIO Per Station Bandwidth Limit Enable Upload Limit Download Limit Auto Adjustment SSID 3 SSID 4 DrayTek56 LAN A User defined bps Default unit User defined bps Default unit Total Upload Bandwidth User defined bps Default unit
94. nable 4 Open LAN gt General Setup to configure the settings for enabling DHCP server on LAN A LAN B If there is a DHCP server configured in the same network segment skip this step LAN gt General Setup Ethernet TCP IP and DHCP Setup LAN A IP Network Configuration DHCP Server Configuration VigorAP Management Enable Server O Disable Server Enable Client O Relay Agent Specify an IP address Start IP Address 192 168 1 10 IP Address 192 168 1 2 End IP Address 192 168 1 100 Subnet Mask 200 200 200 0 Subnet Mask 2oo 2dd 200 0 Default Gateway 192 168 1 2 L Enable Management VLAN LASE TIME ATu Address for Relay Agent Primary DNS Server 168 95 1 1 Secondary ONS Server 168 95 192 1 LAN B IP Network Configuration DHCP Server Configuration IF Address 192 168 2 2 Enable Server Disable Server Subnet Mask 255 255 255 0 O Relay Agent Start IP Address 192 168 2 10 C Enable Management LAN End IP Address VLAN ID b subnet mask Default Gateway Lease Time DHCP Server IP nal Address for Relay Agent Primary DNS Server e DNS Serwer Pd Dr ay Tek 117 VigorAP 900 User s Guide 5 After finishing the above settings the wireless equipment connecting to VigorAP 900 with SSID 1 can get the IP address assigned by LAN B 192 168 2 0 24 for accessing the internal server The wireless equipment connecting to VigorAP 900 with SSID 2 can get the IP address assigned by LAN A 192 168 1 0 24 for using the video audio uploading
95. name for VigorAP 900 to be identified Default settings VigorAP 900 User s Guide 74 Dr ay Tek Dray Tek Subnet Isolate LAN Isolate Member VLAN ID Mac Clone Channel Extension Channel Rate are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for wired PC in LAN Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change based on this MAC address Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to le
96. nd then Wireless LAN SGHz gt gt General Setup Choose the subnet LAN B for SSID 1 and choose LAN A for SSID 2 Specify the wireless channel Then click OK to save the configuration Wireless LAN 5GHZ gt General Setup General Setting IEEE 302 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mixedi1ib 11ig ilini Enable 2 Subnet Simulate 2 APs Hide Isolate WLAN ID SSID aaa alles Member O Untagged pee ciang 1 Oo Oo b Ol 2 P O b 3 0 O b 4 0 o k Hide SSID Prevent SSID from being scanned Isolate Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 2462MHz Channel 11 Extension Channel 2442MHz Channel F se VigorAP 900 User s Guide 116 Dr ay Te k 3 Open Wireless LAN 2 4GHz gt gt Security Settings and Wireless LAN 5GHz gt gt Security Settings Set the encryption method and set the password for SSID 1 and SSID 2 respectively Mode Set up RADIUS Server if 802 1 is enabled WPA WPA Algorithms OTKIP OseES TKIP AES Pass Phrase Key Renewal Interval seconds PME Cache Period minutes Pre Authentication Disable Enable WEP Key 1 Hex Key 2 es Hex Key 3 a Hex Key 4 Hex 802 1 WEP Disable E
97. ndomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default 1s 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x m
98. network segment of 192 168 1 0 24 LAN A wireless station connecting to VigorAP 900 with SSID 1 can get the IP address with the same network segment of 192 168 2 0 24 LAN B LAN B 192 168 2 0 24 gt for internal server LAN A 192 168 1 0 24 gt for music video traffic Dray Tek 115 VigorAP 900 User s Guide Below shows you how to configure the web page for VigorAP 900 1 Inthe page of Operation Mode click AP mode for 2 4GHz Wireless and 5GHz Wireless Operation Mode Configuration Wireless LAN 2 4GHz Pee tetween wireless devices and wired Ethernet network and exchanges data between them AP Bridge Point to Point AFP 900 will connect to another AP 900 which uses the same mode and all wired Ethernet clients of both AP 900s will be connected together AP Bridge Point to Multi Point AF 900 will connect to up to four 4P 900s which uses the same mode and all wired Ethernet clients of every AP 900s willbe connected together AP Bridge WDS AF 900 will connect to up to four 4P 900s which uses the same mode and all wired Ethernet clients of every AP 900s willbe connected together This mode is still able to accept wireless clients O Universal Repeater SP 900 can act as a wireless repeater it can be Station and AP at the same time Wireless LAN 5GHz Ge between wireless devices and wired Ethernet network and exchanges data between them 2 Open Wireless LAN 2 4GHz gt gt General Setup a
99. new web page will appear so that you could configure the SSID and the wireless channel Please refer to the following figure for more information Wireless LAN 2 4GHz gt General Setup General Setting IEEE 807 11 Enable Wireless LAN C Enable Limit Client 3 64 default 64 Mode Mised iib iig iin Enable 2 Subnet Simulate 2 4Ps Hide Isolate Isolate VLAN ID SSID a subnet LAN MemberfO Untagged Mac Clone 1 O praytektanA LANA O O e OL 2 O Draytek tan 8 lana vy O O p 2O0 tt OO D po 4 OL tts OO OO fb Hide SSID Prevent SSID from being scanned Isolate LAN Wireless chents stations with the same SSID cannot access wired Ps on LAN Isolate Member Wireless clients stations with the same SSID cannot access for each other MAC Clone Set the MAC address of SSID 1 The MAC addresses of other SSIDs and the Wireless client will also change based on this MAC address Please notice that the last byte of this MAC address must be a multiple of 8 Channel 462MHz Channel 11 Extension Channel 2442MHz Channel 7 Dray Tek 73 VigorAP 900 User s Guide Extension Channel 2442MHz Channel 7 Packet O VERDRIVE LJ Tx Burst Note 1 7 Burst only supports 11g mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna ele Ts Power 100s Channel Width Auto 20 40 MHZ 20 MHZ Available settings are explained as follows
100. nic unit that may be repaired only be authorized and qualified personnel Do not try to open or repair the modem yourself Do not place the modem in a damp or humid place e g a bathroom The modem should be used in a sheltered area within a temperature range of 5 to 40 Celsius Do not expose the modem to direct sunlight or other heat sources The housing and electronic components may be damaged by direct sunlight or heat sources Do not deploy the cable for LAN connection outdoor to prevent electronic shock hazards Keep the package out of reach of children When you want to dispose of the modem please follow local regulations on conservation of the environment We warrant to the original end user purchaser that the modem will be free from any defects in workmanship or materials for a period of one 1 year from the date of purchase from the dealer Please keep your purchase receipt in a safe place as it serves as proof of date of purchase During the warranty period and upon proof of purchase should the product have indications of failure due to faulty workmanship and or materials we will at our discretion repair or replace the defective products or components without charge for either parts or labor to whatever extent we deem necessary tore store the product to proper operating condition Any replacement will consist of a new or re manufactured functionally equivalent product of equal value and will be
101. nistrator PC host as router s system time Use NTP Client Select to inquire time information from Time Server on the Internet using assigned protocol Time Zone Select a time protocol NTP Server Type the IP address of the time server Use Default Click it to choose the default NTP server Daylight Saving Check the box to enable the daylight saving Such feature is available for certain area NTP synchronization Select a time interval for updating from the NTP server Click OK to save these settings 3 11 6 Reboot System The Web Configurator may be used to restart your modem Click Reboot System from System Maintenance to open the following page System Maintenance gt gt Reboot System Reboot System Do You want to reboot your router Using current configuration Using factory default configuration If you want to reboot the modem using the current configuration check Using current configuration and click OK To reset the modem settings to default values check Using factory default configuration and click OK The modem will take 5 seconds to reboot the system Note When the system pops up Reboot System web page after you configure web settings please click OK to reboot your modem for ensuring normal operation and preventing unexpected errors of the modem in the future 3 11 7 Firmware Upgrade Before upgrading your modem firmware you need to install the Modem Tools The Firmware Upgrade Utility i
102. nt Total Upload Bandwidth bps Default unit K Total Download Bandwidth 8m bps Note eee ede Traffic going to any station Upload Traffic being sent from a wireless 2 Allow auto adjustment could make the best utilization of available bandwidth Available settings are explained as follows Item Description SSID Display the specific SSID name of the router Enable Check this box to enable the bandwidth management for clients Upload Limit Define the maximum speed of the data uploading which will be used for the wireless stations connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically Total Upload Limit When Auto Adjustment is checked the value defined here will be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data uploading Total Download When Auto Adjustment is checked the value defined here will Limit be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data downloading
103. o connect up to four AP 900s which uses the same mode All wired Ethernet clients of every VigorAP 900 will be connected together 3 5 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the Phy mode security Tx Burst and choose proper mode Please refer to the following figure for more information Dray Tek Wireless LAN 2 4GHz gt General Setup General Setting IEEE 802 11 Enable Wireless LAN Mode Misediiib iig iin Channel 2462MHz Channel 11 Extension Channel 2442MHz Channel 7 Note Enter the configuration of APs which 4P900 want to connect Phy Mode Security Disabled WEP TKIP AES Key Peer Mac Address U a ee ee Packet OVERDRIVE LT Burst Note 1 Ts Burst only supports lig mode 2 The same technology must also be supported in clients to boost WLAN performance Antenna Tx Power Channel Width Auto 20 40 MHZ 20 MHZ 51 VigorAP 900 User s Guide Available settings are explained as follows Item Enable Wireless LAN Mode Channel Extension Channel Rate Phy Mode VigorAP 900 User s Guide Description Check the box to enable wireless function At present VigorAP 900 can connect to 11b only 11g only lIn only Mixed 11b 11g Mixed 11g 11n and Mixed 11b 11g 11n stations simultaneously Simply choose Mixed 11b 11g 11n mode Mixediiib iig iin iib Only Lig Only Lin Only i Mixedi
104. ode After finishing this web page configuration please click Next to continue VigorAP 900 User s Guide 24 Dray Tek 2 7 4 Configuring 5GHz Wireless Settings VigorAP 900 offers 5GHz wireless connection capability You can setup 5GHz features in Quick Start Wizard first Once the USB 5GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt gt Wireless LAN 56Hz Wireless Mode Ma SSI channel Extension Channel S200MHz Channel 40 Station List Available settings are explained as follows Item Description Wireless Mode At present VigorAP 900 can connect to 11a only 11n only SG Mixed 11a 11n stations simultaneously Simply choose Mixed 11la 11n mode Lin only S5Gi ad 1a onl Lin only SG Main SSID Set a name for VigorAP 900 to be identified Multiple SSID Set the SSIDs and specify subnet interface LAN A or LAN B for each SSID by click Multiple SSID Channel Means the channel of frequency of the wireless LAN The default channel is 48 You may switch channel if the selected channel is under serious interference S240MH2 Channel 45 5180MHz Channel 36 S2Z00MHz Channel 40 S220MH2 Channel 44 S240MH2 Channel 48 5260MHz Channel 52 5280MHz Channel 56 SS00MAH2 Channel 60 5320MHz Channel 64 SSOOMHz2 Channel 100 Extension Channel With 802 11n there is one option to double the bandwidth per channel The avai
105. offered solely at our discretion This warranty will not apply if the product is modified misused tampered with damaged by an act of God or subjected to abnormal working conditions The warranty does not cover the bundled or licensed software of other vendors Defects which do not significantly affect the usability of the product will not be covered by the warranty We reserve the right to revise the manual and online documentation and to make changes from time to time in the contents hereof without obligation to notify any person of such revision or changes Web registration is preferred You can register your Vigor modem via http www draytek com Due to the continuous evolution of DrayTek technology all modems will be regularly upgraded Please consult the DrayTek web site for more information on newest firmware tools and documents http www draytek com Dray Tek European Community Declarations Manufacturer DrayTek Corp Address No 26 Fu Shing Road Hukou Township Hsinchu Industrial Park Hsinchu County Taiwan 303 Product VigorAP 900 DrayTek Corp declares that VigorAP 900 is in compliance with the following essential requirements and other relevant provisions of R amp TTE Directive 1999 5 EEC ErP 2009 125 EC and RoHS 2011 65 EU The product conforms to the requirements of Electro Magnetic Compatibility EMC Directive 2004 108 EC by complying with the requirements set forth in EN55022 Class B and EN55024 Class B
106. ollows Item Description Enable WPS Check this box to enable WPS setting WPS Configured Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here WPS SSID Display current selected SSID WPS Auth Mode Display current authentication mode of the VigorAP 900r Only WPA2 PSK and WPA PSK support WPS WPS Encryp Type Display encryption mode None WEP TKIP AES etc of VigorAP 900 Configure via Push Click Start PBC to invoke Push Button style WPS setup Button procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes The WPS LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Configure via Client Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on VigorAP 900 User s Guide 96 Dr ay Tek PinCode 3 8 5 AP Discovery VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning pro
107. on on the page to test the speed Such feature can help you to find the best installation place for Vigor AP Diagnostics gt gt Speed Test Speed Test Welcome to Yigor4P900 Speed Test This test allows you to find out the best place for VigorAPOO0 You can execute the speed test at different places of the building and select the best location for it The performance test result is only for your reference Note Speed test could not work with chrome browser 3 13 Support Area When you click the menu item under Support Area you will be guided to visit www draytek com and open the corresponding pages directly FAQ Application Note Product Registration VigorAP 900 User s Guide 114 Dray Tek Application and Examples 4 1 How to set different segments for different SSIDs in VigorAP 900 VigorAP 900 supports two network segments LAN A and LAN B for different SSIDs With such feature the user can dispatch SSIDs with different network segments for reaching the target of managing wireless network See the following figure Dual LAN LAN B 4G hs 2 LAN B on SSID 1 LANA VigorSwitch IP Camera P2261 on SSID 2 IP Phone E mere ye 2 In the above figure VigorAP 900 is used to control the wireless network connection It can separate the wireless traffic between accessing internal server and the usage of video Wireless station connecting to VigorAP 900 with SSID 2 can get the IP address with the
108. or Linux platform will appear different windows but the backup function is still available Note Backup for Certification must be done independently The Configuration Backup does not include information of Certificate Restore Configuration 1 Goto System Maintenance gt gt Configuration Backup The following windows will be popped up as shown below System Maintenance gt gt Configuration Backup Configuration Backup Restoration Restoration Select a configuration file Click Restore to Upload the file Click Backup to download current running configurations as a file 2 Click Browse button to choose the correct configuration file for uploading to the modem 3 Click Restore button and wait for few seconds the following picture will tell you that the restoration procedure is successful 3 11 5 Time and Date It allows you to specify where the time of the router should be inquired from System Maintenance gt gt Time and Date Time Information Current System Time Fri Jun 21 15 03 41 GMT 2013 Time Setting O Use Browser Time Use NTP Client Time Zone GMT 11 00 Midway Island Samoa Daylight Saving F NTP synchronization Available parameters are explained as follows Item Description Current System Time Click Inquire Time to get the current time Dray Tek 111 VigorAP 900 User s Guide Item Description Use Browser Time Select this option to use the browser time from the remote admi
109. ork supports thie capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Use the folowing ONS server addresses ees For Mac Os 1 Double click on the current used Mac Os on the desktop 2 Open the Application folder and get into Network 3 On the Network screen select Using DHCP from the drop down list of Configure Pv4 0900 __ Network mae y Show All Displays Sound Network Startup Disk Location Automatic Show Built in Ethernet m IP Address 192 168 1 10 Renew DHCP Lease Subnet Mask 255 255 255 0 DHCP Client ID If required Router 192 168 1 1 DNS Servers Optional Search Domains Optional IPv6 Address fe80 0000 0000 0000 020a 95ff fe8d 72e4 Configure IPv6 Sooner re Click the lock to prevent further changes Assist me Apply Now Dray Te k 121 VigorAP 900 User s Guide 5 3 Pinging the Modem from Your Computer The default gateway IP address of the modem is 192 168 1 2 For some reason you might need to use ping command to check the link status of the modem The most important thing is that the computer will receive a reply from 192 168 1 2 If not please check the IP address of your computer We suggest you setting the network connection as get IP automatic
110. ow will appear Click Network and Sharing Center G 7 TF t Control Panel Network and Internet rf Search Control Panel P Control Panel Hom aad WOT ORE an AA EROK and Sharing Center mee System and Security View network status and tasks nnect to r l Sig network computers and devices a wireless device to the network Network and Internet eeeeeeeeeeee Hardware and Sound as HomeGroup Choose homegroup and sharing options Programs User Accounts and Family e Internet Options Saf ety Change yourhomepage Manage browser add ons Delete browsing history and cookies Appearance and Personalization Clock Language and Region Ease of Access Next click Change adapter settings and click Local Area Connection G a 7 nE t Control Panel Network and Internet Network and Sharing Center 4 Control Panel H control Panel Home j oooeeneemecnceaaan View your basic network information and set up connections 3 J 0 orat See full mag 4 R Change adapter settings s A E 2 i P ada TTF eT dish we settings oe CARRIE PC Unidentified network Internet i This computer View your active networks Connect or disconnect F Unidentified network Access type No Internet access F Public network Connections ji Local Area Connection Dray Tek 9 VigorAP 900 User s Guide Then select Internet Protocol Version 4 TCP IPv4 and click Properties nection Properties
111. ox of Enable Schedule 2 Click the Add button to open the following web page Applications gt gt Schedule Add Schedule Enable Start Date Start time Action Acts Weekday 2000 mij 1 v Year Month Day o w Hour Minute Suto Reboot al LI mMonday MH Tuesday LI Wednesday O Thursday MlFriday O Saturday Ml Sunday Available settings are explained as follows Item Enable Start Date Start Time Action Acts VigorAP 900 User s Guide Description Check to enable such schedule profile Specify the starting date of the schedule Specify the starting time of the schedule Specify which action should apply the schedule Auto Reboot gt Suto Reboot 245 Wi Fi UP 2 46 Wi Fi COW SG Wi Fi UP SG Wi Fi DOWN Specify how often the schedule will be applied Once The schedule will be applied just once Routine Specify which days in one week should perform the schedule Routine Once Routine 104 Dray Tek 3 After finishing this web page configuration please click OK to save the settings A new schedule profile has been created and displayed on the screen Applications gt gt Schedule Schedule Enable Schedule Schedule Configuration Index Setting Status i 2013 July 1 12 0 0 0 Routine Tue Fri Sun i Add 3 11 System Maintenance For the system setup there are several items that you have to know the way of configuration Status TR 069 Administra
112. p down list to choose the rate If you choose User defined you have to specify the rate manually Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor router with the same SSID Use the drop down list to choose the rate If you choose User defined you have to specify the rate manually Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically Total Upload Limit When Auto Adjustment is checked the value defined here will be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data uploading Total Download When Auto Adjustment is checked the value defined here will Limit be treated as the total bandwidth shared by all of the wireless stations with the same SSID for data downloading After finishing this web page configuration please click OK to save the settings Dr ay Tek 71 VigorAP 900 User s Guide 3 6 10 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming
113. r then click control panel Double click Network and Dial up Connections icon double click Local Area Connection and Local Area Connection Properties window will appear Select Internet Protocol TCP IP then click Properties Local 4rea Connection Properties a a _ x General Connect using Be Realtek ATL80D29 45 PEI Ethernet Adapter Components checked are used by this connection yd Semis Por ict icrostitthebwork s v1 4 efile File and Printer lla a Networks Install Ser Properties Description a Transmission Control FrotacalIntermet ProtacelThedefawee Wide area network protocol that provides communication across diverse interconnected networks M Show icon in taskbar when connected Select Use the following IP address then input the following settings in respective field and click OK when finish IP address 192 168 1 9 Subnet Mask 255 255 255 0 Internet Protocol TCP IP Properties 3 I General You can get IF settings assigned automatically if your network supports this capability Othermize you need to ask vour network administrator for the appropriate F settings O Obtain an IP address autorgaligals samme eee eee in Use the following IF address F address Subnet mask Default gateway ie Obtain ONS server sitesi belt BERBER Use the following DNS server addresses Prefered ONS server Alternate DNS server Dray Te k 11 VigorAP 90
114. rceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings Dr ay Tek 89 VigorAP 900 User s Guide 3 8 Wireless LAN 5GHz Settings for AP Mode When a 5G Dongle connects to VigorAP 900 only AP mode the operation mode is available for configuration The AP mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network If no 5G dongle connected to VigorAP 900 an error message will be displayed and no function in this menu can be activated 3 8 1 General Setup By clicking the General Setup a new web page will appear so that you could configure the general settings for wireless connection such as specifying SSID selecting the wireless channel isolate LAN connection and so on Wireless LAN 5GHz gt General Setup General Setting IEEE 802 11 Enable Wireless LAN O Enable Limit Client 3 64 default 64 Mode Mixed 1llat iini Enable 2 Subnet Simulate 2 APs Isolate VLAN ID Hide SSID SSID Member O Untagged Draytek 5G LAN4 Draytek 5G LANB LA 1 z 3 K 4 LAN Hide SSID Prevent SSID from being scanned Isolate Member Wireless clients stations with the same SSID cannot access for each other Channel 5180MHz2 Channel 3
115. re for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN 2 4GHz gt Roaming Enable PMK Caching Cache Period 10 minutes Pre Authentication Note This function is only supported by WPA2 802 1x security Before you enable it please switch to Security page and set Wireless Lan security to WPA2 802 1x or press Security Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff delay perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1 X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 56 Dr ay Tek 3 6 Wireless LAN Settings for AP Bridge WDS Mode When you choose AP Bridge WDS as the op
116. red Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station and the RADIUS server in performing mutual authentication It enables centralized remote access authentication for network management The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x VigorAP 900 User s Guide 26 Dr ay Tek WPA Algorithm Pass Phrase Key Renewal Internal PMK Cache Period Pre Authentication Key 1 Key 4 802 1x WEP authentication Select WPA WPA2 or Auto as WPA mode WPA 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WPA2 802 1x The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication Select TKIP AES or TKIP AES as the algorithm for WPA Such feature is available for WPA2 802 1x WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Either 8 63 ASCII characters such as 012345678 or 64 Hexadecimal digits leading by Ox such as 0x321253abcde
117. reless stations with the same SSID for data downloading After finishing this web page configuration please click OK to save the settings 3 8 9 Roaming The network signal for a single wireless access point might be limited by its coverage range Therefore if you want to expand the wireless network in a large exhibition with a quick method you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly These access points connecting for each other shall be verified by pre authentication This page allows you to enable the roaming feature and the pre authentication Wireless LAN 5GHz gt gt Roaming Enable PMK Caching ache Period 10 minutes Pre Authentication Note This function is only supported when WPAS802 1s is selected as the security mode Please open Wireless LAN SGHz2 gt gt Security to check the security configuration Available settings are explained as follows Item Description PMK Cache Period Set the expire time of WPA2 PMK Pairwise master key cache PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre authenticated Such feature is available for WPA2 802 1 mode Pre Authentication Enables a station to authenticate to multiple APs for roaming securer and faster With the pre authentication procedure defined in IEEE 802 111 specification the pre four way handshake can reduce handoff dela
118. reless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 Policy MAC Address Filter Index MAC Address Client s MAC Address Backup ACL Cfg Upload From File 2 Fita Available settings are explained as follows Item Policy MAC Address Filter Client s MAC Address Add Delete Edit Cancel Backup Dray Tek Description Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter Activate MAC address filter Blocked MAC address filter Display all MAC addresses that are edited before Manually enter the MAC address of wireless client Add a new MAC address into the list Delete the selected MAC address in the list Edit the selected MAC address in the list Give up the access control set up Click it to store the settings MAC addresses on MAC Address 43 VigorAP 900 User s Guide Restore Filter table on this page as a file Click i
119. rom 1 to 15 Such parameter will influence the time delay for WMM accessing categories For the service of voice or video image please set small value for AC_VI and AC_VO categories For the service of e mail or web browsing please set large value for AC_BE and AC_BK categories CW Min CW Max CWMin means contention Window Min and CWMax means contention Window Max Please specify the value ranging from VigorAP 900 User s Guide 68 Dr ay Te k 1 to 15 Be aware that CW Max value must be greater than CW Min or equals to CWMin value Both values will influence the time delay for WMM accessing categories The difference between AC_VI and AC_VO categories must be smaller however the difference between AC_BE and AC_BK categories must be greater Txop It means transmission opportunity For WMM categories of AC_VI and AC_VO that need higher priorities in data transmission please set greater value for them to get highest transmission opportunity Specify the value ranging from 0 to 65535 ACM It is an abbreviation of Admission control Mandatory It can restrict stations from using specific category class if it is checked Note Vigor2920 provides standard WMM configuration in the web page If you want to modify the parameters please refer to the Wi Fi WMM standard specification AckPolicy Uncheck default value the box means the AP router will answer the response request while transmitting WMM packets through wireless connection
120. s filter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter ha Activate MAC address filter Blocked MAC address filter Display all MAC addresses that are edited before Manually enter the MAC address of wireless client Add a new MAC address into the list Delete the selected MAC address in the list Edit the selected MAC address in the list Give up the access control set up Click it to store the settings MAC addresses on MAC Address 65 VigorAP 900 User s Guide Restore Filter table on this page as a file Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 6 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt gt WPS WLFi Protected Setup Enable WPS Wi Fi Protected Setup Information WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Device Configure Yes DrayTek LAN A Mined W PAHA PAZ IPSE TEIP SES Note WPS can help your wireless client automatically connect to the Access paint WPS is Disabled WPS is Enabled Waiting for WPS requests from wireless clients Available settings are explained as follows Item Enable WPS WPS Configured WPS SSID WPS Auth Mode WPS Encryp T
121. s included in the tools The following web page will guide you to upgrade firmware by using an example Note that this example is running over Windows OS Operating System Download the newest firmware from DrayTek s web site or FTP site The DrayTek web site is www draytek com or local DrayTek s web site and FTP site is ftp draytek com Click System Maintenance gt gt Firmware Upgrade to launch the Firmware Upgrade Utility VigorAP 900 User s Guide 112 Dr ay Te k System Maintenance gt gt Firmware Upgrade Firmware Update Select a firmware file Click Upgrade to upload the file Click Browse to locate the newest firmware from your hard disk and click Upgrade 3 12 Diagnostics Diagnostic Tools provide a useful way to view or diagnose the status of your VigorAP 900 3 12 1 System Log At present only System Log is offered Dray Tek Diagnostics gt gt System Log System Log Information syslogd kernel kernel kernel kernel kernel kernel kernel kernel kernel kernel kernel kernel kernel Started BusyBox vl 1lz2 1 Clear Refresh LJ Line wrap klogd started BusyBox vlile l 2013 04 22 11 06 44 CAT rng vlan en Oxo tng vlan vidl Oxd tng vlan vide Uxu flag ravid ravid ravid ravid ravid ravid ravid ravid x O 0x0 0x0 0x0 0x0 0x0 0x0 0x0 Ox 0 113 VigorAP 900 User s Guide 3 12 2 Speed Test Click the Start butt
122. s must be configured to use the same shared secret Session Timeout Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second After finishing this web page configuration please click OK to save the settings VigorAP 900 User s Guide 64 Dr ay Tek 3 6 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 2 4GHz gt Access Control SSID 1 SSID SSID 3 SSID 4 Policy MAC Address Filter Index MAC Address Cllant s MAC Address Backup ACL Cfg Upload From File H2 aise Available settings are explained as follows Item Policy MAC Address Filter Client s MAC Address Add Delete Edit Cancel Backup Dray Tek Description Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC addres
123. se for you to configure WPAPSK Shared ry m pan if m E WPA IPSk Encryption Type for This option is available when Open Shared is selected as Open Shared Security Mode Choose None to disable the WEP Encryption Data sent to the AP will not be encrypted To enable WEP encryption for data transmission please choose WEP No re wv WEP WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except Dray Tek 21 VigorAP 900 User s Guide WEP Keys Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Encryption Type for This option is available when WPA PSK or WPA2 PSK is WPA PSK and selected as Security Mode WPA2 PSK Select TKIP or AES as the algorithm for WPA TKIP SES Pass Phrase It is available when WPA PSK or WPA2 PSK is selected After finishing this web page configuration please click Nex
124. ser may only see the information except SSID or just cannot see any thing about VigorAP 900 while site surveying The system allows you to set three sets of SSID for different usage Set a name for VigorAP 900 to be identified Default settings are DrayTek LAN A and DrayTek LAN B When Enable 2 Subnet is enabled you can specify subnet interface LAN A or LAN B for each SSID by using the drop down menu Choose LAN A or LAN B for each SSID If you choose LAN A the wireless clients connecting to this SSID could only communicate with LAN A Check this box to make the wireless clients stations with the same SSID not accessing for each other Type the value for such SSID Packets transferred from such SSID to LAN will be tagged with the number If your network uses VLANs you can assign the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Means the channel of frequency of the wireless LAN The default channel is 36 You may switch channel if the selected channel is under serious interference With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above 91 VigorAP 900 User s Guide Channel Width 20 MHZ the router will use 20Mhz for data transmission an
125. sion With this high cost efficiency VigorAP 900 computers and wireless devices which are compatible with 802 1 1n 802 11a can connect to existing wired Ethernet network via this VigorAP 900 at the speed of 300Mbps Easy install procedures allows any computer users to setup a network environment in very short time within minutes even inexperienced users Just follow the instructions given in this user manual you can complete the setup procedure and release the power of this access point all by yourself VigorAP 900 also is a Power over Ethernet Powered Device which adopts the technology of PoE for offering power supply and transmitting data through the Ethernet cable Vigor2920n VigorAP 900 Internet Bo LAWN switch Printer P2P NAS Web server storage e g personal web Dray Tek 1 VigorAP 900 User s Guide 1 2 LED Indicators and Connectors Before you use the Vigor modem please get acquainted with the LED indicators and connectors first LAN B il AHL See LAN Ad l i Lane BR I s r E eS UM LAN AZ a o o ia 3 LAN A 1 J a i r nw EL nE 5G D SS hee rees 24G ee e M E S a a ma VigorAP 900 a i m7 Status Explanation ACT Off The system is not ready or is failed The system is ready and can work normally USB A USB device is connected and active The data is transmitting 2 4G Wireless function is ready Off W
126. ss VigorAP 900 User s Guide Description There are three types of transmission rates developed by different techniques for Phy Mode Data will be transmitted via communication channel Select CCK 11b mode OFDM 11g mode or HTMIX 11b g n mixed mode from the drop down menu for the access point that VigorAP 900 wants to connect Each access point should be setup to the same Phy mode for connecting with each other Choose LAN A or LAN B for each SSID Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to 20 Dray Tek Advanced Settings for AP Bridge Universal Repeater When you choose AP Bridge Universal Repeater you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Please input the SSID you want to connect to Universal Repeater Parameters SSID MAC Address Optional O O Security Mode Encryption Type WEP Keys O key 1 asc O Key 2 Oo i ea O Key 3 ean O key 4 i ea Available settings are explained as follows Item Description SSID Means the identification of the wireless LAN SSID can be any text numbers or various special characters MAC Address Type the MAC address for the access point Optional Security Mode There are several modes provided for you to choose Each mode will bring up different parameters e g WEP keys Pass Phra
127. ss LAN Settings for AP Bridge Point to Point AP Bridge Point to Multi Point Mode 51 EREEREER E eas 51 Dae FA DISCOV CNY ser e E E E 54 S VA a eaa E r E E 56 ROT oea a E E E E 56 3 6 Wireless LAN Settings for AP Bridge WDS Mode cccccccsseeeeeeeeeeeeeeeeeeeeeeeeeaaaeeeeeeeneaas 57 CAMEE TIC TA SS E e E A cere E E eat wave tse Wines Day A A A A A E 57 E2 CUN e E E eee ee ee eee 62 3 6 3 Access COIN O he socsnenon eioi o EEA EAEE a REE EA 65 atc Sac E E 66 3 6 5 AP Discovery taveeciasecationcantetes tucrohasaseunsdeunie bevel deieutataged races weuiians si tates vst Aanieneidanasalabeatoneedea 67 366 WDS AP StatUS eenei E ony ncanataucsacdbedadase te uataugueseudede acad lt lose oct er EEE EES 68 3 6 7 WMM Configuration ccccccccssssseseceeeeeeeaeeeseeceeeeeesaaeseeeeeesseaaauseeeeeeessssaaseeeeeeeeessaaageess 68 CO O E e E thier uw oueutoned neater paenaueernnenesnmatan ones 70 3 6 9 Bandwidth Manageme nt cccccscccceseeceeceeeceeeeeseeesaeeeeeseeeeeeeeeeeessaeeesesegeeeeessesensegeeeeas 71 ap AIO RONDO sin ate stat copaitue a a A 72 3 7 Wireless LAN Settings for Universal Repeater Mode ccccceeceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaaaes 73 i SIC T Cl o U E E E EEE A E EN EA A 73 are SO UN E E NE AE E E 77 LS ACCESS CONTO aaaea aen casos tse ergs cu semen ioe cam EE EEEE E EEE EE E E Eei 80 STA NV eo segia rE a e E a a Ea E EE A E T E 81 Sr OAP DISCOVCLY scorse g een S ETEEN E EEE E TE ONENE NEEE 82 3 7 6
128. t panel ACT LED should be steadily on LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router For the detailed information of LED status please refer to section 1 2 Internet Dray Te k 5 VigorAP 900 User s Guide 1 3 3 Wireless Connection VigorAP 900 can access Internet via an ADSL modem router or switch hub in your network through wireless connection Connect VigorAP 900 to ADSL modem or router via wireless network l Connect the A C power adapter to the wall socket and then connect it to the PWR 2 connector of the access point 3 Power on VigorAP 900 Check all LEDs on the front panel ACT LED should be steadily on LAN LEDs 4 should be on if VigorAP 900 is correctly connected to the ADSL modem router or switch hub For the detailed information of LED status please refer to section 1 2 Internet ANNA l i ETET ae F f men ro a J MANAA d aiy i Aunt was F Dray Tek VigorAP 900 User s Guide 1 3 4 POE Connection VigorAP 900 can gain the power from the connected switch e g VigorSwitch P2260 PoE Power over Ethernet can break the install limitation caused by the fixed power supply 1 Connect VigorAP 900 to a switch in your network through the LAN A1 PoE port of the access point by Ethernet cable 2 Connect a computer to VigorSwitch P2260 Make sure the subnet IP address of the PC is the same as VigorAP
129. t system determine for you 243 MHz Channel 6 AutoSelect 2412MHz Channel 1 241 TM Hz Channel 2 Channel 3 bon 4 A ican 7 244 MATZ Channel 3 z Channel 9 z Channel 10 z Channel 11 z Channel 12 With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate 75 VigorAP 900 User s Guide Packet OVERDRIVE This feature can enhance the performance in data transmission about 40 more by checking Tx Burst It is active only when both sides of Access Point and Station in wireless client invoke this function at the same time That is the wireless client must support this feature and invoke the function too Note Vigor N61 wireless adapter supports this function Therefore you can use and install it into your PC for matching with Packet OVERDRIVE refer to the following picture of Vigor N61 wireless utility window choose Enable for TxBURST on the tab of Option igor N61 802 11n Wireless USB Adapter Utility Configuration Status General Setting Advance Setting Auto launch when Windows start up C Disable Radio C Remember mini status position Fragmentation Threshold 2346 C Auto hide mini status RTS Threshold 2347
130. t to continue VigorAP 900 User s Guide 22 Dr ay Te k 2 7 3 Configuring 2 4GHz Security Settings VigorAP 900 offers 2 4GHz wireless connection capability You can setup 2 4GHz features in Quick Start Wizard first Once the USB 2 4GHz wireless dongle connects to VigorAP 900 it can work immediately Quick Start Wizard gt gt Wireless Security 2 4GHz SID 1 SSID 2 SSID SSID 3 SSID 4 DrayTek LAN A Wireless Security Settings Mode WPA Algorithms Pass Phrase Mined WPS WPAS PSK 4 OTKIP AES TKIP AES Key Renewal Interval 3600 seconds Prk Cache Period minutes Pre Authentication Disable Enable Available settings are explained as follows Dray Tek Item Mode Description There are several modes provided for you to choose WPA2 PSK Mixed WPA WPA2 PSK WEP 802 1x WPA 802 1x WPA2 802 1x Mixed WPA WPA2 802 1x Disable The encryption mechanism is turned off WEP Accepts only WEP clients and the encryption key should be entered in WEP Key WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK Accepts only WPA clients and the encryption key should be entered in PSK The WPA encrypts each frame transmitted from the radio using the key which either PSK Pre Shared Key entered manually in this field below or automatically negotiated via 802 1x authentication WEP 802 1x The built in RADIUS client feature enables VigorAP 900 to assist the remote dial in user or a wireless station an
131. t to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 4 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN 2 4GHz gt gt WPS Wi Fi Protected Setup C Enable Wes Wi Fi Protected Setup Information WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Device Configure Yes DrayTek L4ah 4 Mixed WiPA WAS PSE TEIP ASES Note WPS can help your wireless client automatically connect to the Access point WPS is Disabled i WPS is Enabled A Waiting for WES requests from wireless clients Available settings are explained as follows Item Enable WPS WPS Configured WPS SSID WPS Auth Mode WPS Encryp Type Configure via Push Button Configure via Client PinCode VigorAP 900 User s Guide Description Check this box to enable WPS setting Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here Display current selected SSID Display current authentication mode of the VigorAP 900 Only WPA2 PSK and WPA PSK support WPS Display encryption mode None WEP TKIP AES etc of VigorAP 900 Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minu
132. ted Delete the selected user profile s Delete All Delete all of the user profiles Authentication Client This internal RADIUS server of VigorAP 900 can be treated as the external RADIUS server for other users Specify the client IP and secret key to make the wireless client choosing VigorAP 900 as its external RADUIS server Client IP Type the IP address for the user to be authenticated by VigorAP 900 when the user tries to use VigorAP 900 as the external RADIUS server VigorAP 900 User s Guide 102 Dray Tek Secret Key Type the password for the user to be authenticated by VigorAP 900 while the user tries to use VigorAP 900 as the external RADIUS server Confirm Secrete Key Type the password again for confirmation Configure Add Make a new client with IP and secrete key specified on the left boxes Cancel Clear current settings for the client Delete Selected Delete the selected client s Delete All Delete all of the clients Backup Click it to store the settings RADIUS configuration on this page as a file Restore Click it to restore the settings RADIUS configuration from an existed file After finishing this web page configuration please click OK to save the settings 3 10 Applications Below shows the menu items for Applications 3 10 1 Schedule The Vigor router has a built in real time clock which can update itself manually or automatically by means of Network
133. ter so that all of the devices with the MAC addresses listed on the MAC Address Filter table will be blocked and cannot access into VigorAP 900 Activate MAC address filter Activate MAC address filter Blocked MAC address filter Display all MAC addresses that are edited before Manually enter the MAC address of wireless client Add a new MAC address into the list Delete the selected MAC address in the list Edit the selected MAC address in the list 95 VigorAP 900 User s Guide Cancel Give up the access control set up Backup Click it to store the settings MAC addresses on MAC Address Filter table on this page as a file Restore Click it to restore the settings MAC addresses on MAC Address Filter table from an existed file After finishing this web page configuration please click OK to save the settings 3 8 4 WPS Open Wireless LAN gt gt WPS to configure the corresponding settings Wireless LAN GHz gt WPS Wi Fi Protected Setup Enable WES Wi Fi Protected Setup Information WPS Configured Yes WPS SSID Draytek_5SG LANA WPS Auth Mode Mixed WRATtWPAS IPSE WPS Encryp Type TEIP AES Device Configure Configure via Push Button Configure via Client PinCode Status Idle Note WPS can help your wireless client automatically connect to the Access point WPS is Disabled WPS is Enabled Waiting for WPS requests from wireless clients Available settings are explained as f
134. tes The WPS LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to 44 Dray Tek setup WPS within two minutes 3 4 5 AP Discovery Dray Tek VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This page is used to scan the existence of the APs on the wireless LAN Please click Scan to discover all the connected APs Wireless LAN 2 4GHz gt Access Point Discovery Access Point List SSID BSSID Scan See Channel Statistics Note During the scanning process about 5 seconds no station is allowed to connect with the AP Each item is explained as follows Item Description SSID Display the SSID of the AP scanned by VigorAP 900 BSSID Display the MAC address of the AP scanned by VigorAP 900 RSSI Display the signal strength of the access point RSSI is the abbreviation of Receive Signal Strength Indication Channel
135. that such device connects to Internet Display the operation mode that the device used Display the total memory of your system Display the remaining memory of your system Display the MAC address of the LAN Interface Display the IP address of the LAN interface Display the subnet mask address of the LAN interface Display the MAC address of the WAN Interface Display the SSID of the device Display the channel that the station used for connecting with such device 106 Dray Tek 3 11 2 TR 069 This device supports TR 069 standard It is very convenient for an administrator to manage a TR 069 device through an Auto Configuration Server e g VigorACS SI System Maintenance gt gt TR 069 Settings ACS Settings URL sername Password CPE Settings LAN A ttp 192 168 1 2 8069 cwmi CEN html Port 206g Username Password DNS Server IP Address Primary IP Address Secondary IP Address Note Please set default gateway no matter choose LAN A or LAN B Periodic Inform Settings Enable Interval Time second s STUN Settings Enable Disable server Port Minimum Keep Alive Period Seconds Maximum Keep Alive Period second s Available settings are explained as follows Item Description ACS Settings URL Username Password Such data must be typed according to the ACS Auto Configuration Server you want to link Please refer to Auto Configuration Server user s manual for detailed infor
136. the LAN interface RX Bytes Displays the total number of received size at the LAN interface VigorAP 900 User s Guide 28 Dr ay Te k 3 Advanced Configuration This chapter will guide users to execute advanced full configuration As for other examples of application please refer to chapter 5 1 Open a web browser on your PC and type http 192 168 1 2 The window will ask for typing username and password 2 Please type admin admin on Username Password for administration operation Now the Main Screen will appear Be aware that Admin mode will be displayed on the bottom left side Dray Tek Vigor AP 900 System Status Quick Start Wizard Model VigorAP 900 Online Status Firmware Version 1 1 0RC4a Build Date Time r3272 Fri Aug 2 15 13 29 CST 2013 Operation Mode System Uptime Od 00 14 46 LAN Operation Mode Universal Repeater Wireless LAN 2 4GHz Wireless LAN GHz RADIUS Server Memory Total 62192 kB MAC Address 00 50 7F 22 33 43 Applications Memory Left 39624 kB IP Address 192 168 1 2 System Maintenance Cached 11464 kB 62192 kB IP Mask 255 255 255 0 Diagnostics Memory MAC Address 00 50 7F 22 33 44 MAC Address 00 50 7F 22 33 43 FAQ Application Note SSID DrayTek LAN A IP Address 192 168 2 2 Product Registration Channel ie fa A IP Mask 255 255 255 0 All Rights Reserved MAC Address 00 50 7F 22 33 45 SSID DrayTekSG LAN 4 Channel 36 Admin mode Universal Repeater Mod
137. the SSID to a VLAN on your network Client devices that associate using the SSID are grouped into this VLAN The VLAN ID range is from 3 to 4095 The VLAN ID is 0 by default it means disabling the VLAN function for the SSID Check this box and manually enter the MAC address of the device with SSID 1 The MAC address of other SSIDs will change based on this MAC address Means the channel of frequency of the wireless LAN You may switch channel if the selected channel is under serious interference If you have no idea of choosing the frequency please select AutoSelect to let system determine for you 243 MHz Channel 6 AutoSelect 2412MHz Channel 1 241 7MHz Channel 2 2422MHz Channel 3 2427MHz Channel 4 2432MHz Channel 5 2437TMHz Channel 6 2442MHz Channel 7 244 7MHz Channel 3 2452MHz Channel 9 245 7MHz Channel 10 2462MHz Channel 11 2467MHz Channel 12 Hz Channel 13 59 VigorAP 900 User s Guide Extension Channel With 802 11n there is one option to double the bandwidth per channel The available extension channel options will be varied according to the Channel selected above Configure the extension channel you want Rate If you choose 11g Only 11b Only or 11n Only such feature will be available for you to set data transmission rate Phy Mode There are three types of transmission rates developed by different techniques for Phy Mode Data will be transmitted via
138. the messages sent between them Both sides must be configured to use the same shared secret Set the maximum time of service provided before re authentication Set to zero to perform another authentication immediately after the first authentication has successfully completed The unit is second 94 Dray Tek After finishing this web page configuration please click OK to save the settings 3 8 3 Access Control For additional security of wireless access the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client Only the valid MAC address that has been configured can access the wireless LAN interface By clicking the Access Control a new web page will appear as depicted below so that you could edit the clients MAC addresses to control their access rights deny or allow Wireless LAN 5GHz gt gt Access Control SSID 1 SSID 2 SSID 3 SSID 4 Policy MAC Address Filter Index MAC Address Client s MAC Address l Backup ACL Cfg Upload From File iHz Fapta Available settings are explained as follows Item Policy MAC Address Filter Client s MAC Address Add Delete Edit Dray Tek Description Select to enable any one of the following policy or disable the policy Choose Activate MAC address filter to type in the MAC addresses for other clients in the network manually Choose Blocked MAC address fil
139. tor Password Configuration Backup Reboot System Firmware Upgrade Below shows the menu items for System Maintenance 3 11 1 System Status The System Status provides basic network settings of Vigor modem It includes LAN and WAN interface information Also you could get the current running firmware version or firmware related information from this presentation System Status Model VigorAP 900 Firmware Version 1 1 0RC4 Build Date Time T3252 Mon Jul 29 15 08 35 CST 2013 System Uptime Od 02 32 24 Operation Mode Universal Repeater Memory Total 62192 kB MAC Address O0 50 F 22 33 43 Memory Left 39976 kB IP Address 192 1568 1 2 Cached IF Mask 1 255 255 255 0 Memory 11440 kE 62192 kB Wireless LAN 2 4GHz MAC Address OO S0 7F 22 353 44 MAC Address O0 50 7F 22 353 43 SSID DrayTek LAN A IP Address 192 168 22 Channel Tal IF Mask 255 255 255 0 MAC Address OO 50 7F 22 33 45 SSID Draytek __56 LANA Channel 36 Each item is explained as follows Dray Tek 105 VigorAP 900 User s Guide Item Model Name Firmware Version Build Date Time System Uptime Operation Mode System Memory total Memory left LAN MAC Address IP Address IP Mask Wireless MAC Address SSID Channel VigorAP 900 User s Guide Description Display the model name of the modem Display the firmware version of the modem Display the date and time of the current firmware build Display the period
140. ty Disabled WEP OTKIP AES Key Peer MAC Address ee Available settings are explained as follows Item Phy Mode Security Peer MAC Address VigorAP 900 User s Guide Description There are three types of transmission rates developed by different techniques for Phy Mode Data will be transmitted via communication channel CCK Select CCK 11b mode OFDM 11g mode or HTMIX 11b g n mixed mode from the drop down menu for the access point that VigorAP 900 wants to connect Each access point should be setup to the same Phy mode for connecting with each other Select WEP TKIP or AES as the encryption algorithm Type the key number if required Type the peer MAC address for the access point that VigorAP 900 connects to 18 Dray Tek Advanced Settings for AP Bridge Point to Multi Point When you choose AP Bridge Point to Multi Point you will need to configure the following page Quick Start Wizard gt gt Wireless LAN 2 4GHz Note Enter the configuration of APs which 4P 900 want to connect Phy Mode 1 Security eck y 3 Security Disabled WEP TKIP O AES Disabled OWEP TKIP O AES key Peer MAC Address Key Peer MAC Address PLL Ld PPL PLE Ed 2 Security 4 Security Disabled OWEP OTKIP O AES Disabled WEP OTKIP O AES Key Peer MAC Address Key Peer MAC Address PEE LL BON E os os E Available settings are explained as follows Item Phy Mo
141. ty of the modem 2 Goto System Maintenance page and choose Administrator Password System Maintenance gt gt Administration Password Administrator Settings Accaunt Password Confirm Password Note Authorization can contain only a z 4A Z20 9 mMmF p Sekt TJ yi lt 2 tf 3 Enter the new login password on the field of Password Then click OK to continue 4 Now the password has been changed Next time use the new password to access the Web Configurator for this modem Connect to 197 168 1 1 Login ta the Router Web Configurator User names i Password Remember my password x Dray Tek 15 VigorAP 900 User s Guide 2 7 Quick Start Wizard Quick Start Wizard will guide you to configure 2 4G wireless setting 5G wireless setting and other corresponding settings for Vigor Access Point step by step 2 7 1 Configuring 2 4GHz Wireless Settings General This page displays general settings for the operation mode selected Quick Start Wizard gt gt Wireless LAN 4GHz Operation Mode AP wt AF 900 acts as a bridge between wireless devices and wired Ethernet network and exchanges data between them Wireless Mode Misediiib iig iin Main SSID Enable 2 Subnet Simulate 2 APs Channel Extension Channel Station List Available settings are explained as follows Item Description Operation Mode There are six operation modes for wireless connection Settings for each
142. uaaasindannulencesiesdaipshetindslassweceantesesduindamerseosebendext 110 311 3 Time AIG AS secsi E a a a E Taaa Eni nR 111 311 0 REDOOL YSTEMS A a a Ea 112 gT Firmware Upgrade siioni E AEA E E E E 112 Onl 2 DONO SI CS e EE 113 VigorAP 900 User s Guide Vili Dray Te k heed Oy SUS WEY LO ees E E E E EE 113 3122 opecd Tesi aromin r ne ee eee eee ee eee eee 114 SMES eo 10 0 0 0 g ATE ie eee a ea ee nee ee eee ee ee ee eee eee 114 Application and EXAM PIGS wicca cece cee cece seetsieee cee ss tecsicesnwess aaa ai 115 4 1 How to set different segments for different SSIDs in VigorAP 900 cccceceeeeeseeeeeeeeeees 115 TROUDIC SNOOUING essei aE 119 5 1 Checking If the Hardware Status Is OK or NoOt cccccecccccceeeeeeeeseeeeeeeeeseeeeeeeeeeeessaaeeeeeeeees 119 5 2 Checking If the Network Connection Settings on Your Computer Is OK or Not 120 5 3 Pinging the Modem from Your Computer ccccccsseeseeccceeeeeeeeesseeeeeeesueaseeeeeeeeesauaaseeeeeeess 122 5 4 Backing to Factory Default Setting If Necessary ccccceeeeeeeeeeeeeeeeeeeeeeeaaeaeeeeeeeeeeeeeeeeeees 123 5 5 Contacting Your Dealer ccccccsseeecccceecceeesseeececeecsaeeseeceeeeeesseeaeeeceeesseaeaeeeeeeeessaaaaeeeeeeeeees 124 Dr ay Te k ix VigorAP 900 User s Guide aA Preface 1 1 Introduction Thank you for purchasing this VigorAP 900 the concurrent dual band wireless 2 4G 5G access point offering high speed data transmis
143. uch feature is available for WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key Renewal Interval WPA uses shared key for authentication to the network However normal network operations use a different encryption key that is randomly generated This randomly generated key that is periodically replaced Enter the renewal security time seconds in the column Smaller interval leads to greater security but lower performance Default is 3600 seconds Set 0 to disable re key Such feature is available for WPA2 802 1 WPA 802 1x WPA PSK or WPA2 PSK or Mixed WPA WPA2 PSK mode Key 1 Key 4 Four keys can be entered here but only one key can be selected at a time The format of WEP Key is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings Dr ay Tek 41 VigorAP 900 User s Guide RADIUS Server Cluse internal RADIUS Server IP Address Port ole Shared Secret DrayTek Session Timeout Jii OK Availabl
144. y is restricted to 5 ASCII characters or 10 hexadecimal values in 64 bit encryption level or restricted to 13 ASCII characters or 26 hexadecimal values in 128 bit encryption level The allowed content is the ASCII characters from 33 to 126 except and Such feature is available for WEP mode 802 1x WEP Disable Disable the WEP Encryption Data sent to the AP will not be encrypted Enable Enable the WEP Encryption Such feature is available for WEP 802 1x mode Click the link of RADIUS Server to access into the following page for more settings VigorAP 900 User s Guide 78 Dr ay Tek RADIUS Server Cluse internal RADIUS Server IP Address Port ole Shared Secret DrayTek Session Timeout Jii OK Available settings are explained as follows Item Description Use internal RADIUS There is a RADIUS server built in VigorAP 900 which is used Server to authenticate the wireless client connecting to the access point Check this box to use the internal RADIUS server for wireless security Besides if you want to use the external RADIUS server for authentication do not check this box Please refer to the section 3 9 RADIUS Server to configure settings for internal server of VigorAP 900 IP Address Enter the IP address of external RADIUS server Port The UDP port number that the external RADIUS server is using The default value is 1812 based on RFC 2138 Shared Secret The external
145. y perceivable by a mobile node It makes roaming faster and more secure Only valid in WPA2 Enable Enable IEEE 802 1 X Pre Authentication Disable Disable IEEE 802 1X Pre Authentication After finishing this web page configuration please click OK to save the settings Dray Tek 101 VigorAP 900 User s Guide 3 9 RADIUS Server VigorAP 900 offers a built in RADIUS server to authenticate the wireless client that tries to connect to VigorAP 900 The AP can accept the wireless connection authentication requested by wireless clients RADIUS Server Configuration Enable RADIUS Server Users Profile up to 96 users Username Password Confirm Password Configure Po Ct Caan J WoO Username Select Delete Selected Delete All Authentication Client up to 16 clients Client IP Secret Key Confirm Secret Key Configure po Ct Cea J NO Client IP Select Delete Selected Delete All Backup Radius Cfg Upload From File BRS Fiai taR Available settings are explained as follows Item Description Enable RADIUS Check it to enable the internal RADIUS server Server Users Profile Username Type a new name for the user profile Password Type a new password for such new user profile Confirm Password Retype the password to confirm it Configure Add Make a new user profile with the name and password specified on the left boxes Cancel Clear current settings for user profile Delete Selec
146. ype Configure via Push Button Configure via Client PinCode VigorAP 900 User s Guide Description Check this box to enable WPS setting Display related system information for WPS If the wireless security encryption function of VigorAP 900 is properly configured you can see Yes message here Display current selected SSID Display current authentication mode of the VigorAP 900r Only WPA2 PSK and WPA PSK support WPS Display encryption mode None WEP TKIP AES etc of VigorAP 900 Click Start PBC to invoke Push Button style WPS setup procedure VigorAP 900 will wait for WPS requests from wireless clients about two minutes The WPS LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes Type the PIN code specified in wireless client you wish to connect and click Start PIN button The WLAN LED on VigorAP 900 will blink fast when WPS is in progress It will return to normal condition after two minutes You need to setup WPS within two minutes 66 Dray Tek 3 6 5 AP Discovery VigorAP 900 can scan all regulatory channels and find working APs in the neighborhood Based on the scanning result users will know which channel is clean for usage Also it can be used to facilitate finding an AP for a WDS link Notice that during the scanning process about 5 seconds no client is allowed to connect to Vigor This p

VigorAP 900 User's Guide i

Contents

Download Pdf Manuals

Related Search

Related Contents