I
VigorAP 903 802.11ac Access Point User’s Guide Version: 1.0 Firmware Version: V1.3.
Intellectual Property Rights (IPR) Information Copyrights © All rights reserved. This publication contains information that is protected by copyright. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. Trademarks The following trademarks are used in this document: Microsoft is a registered trademark of Microsoft Corp.
Table of Contents Chapter I Installation....................................................................................................................................VI I-1 Introduction ............................................................................................................................................................. 1 I-1-1 LED Indicators and Connectors ..................................................................................................................
III-1-3 Administrator Password ........................................................................................................................ 92 III-1-4 User Password ..................................................................................................................................... 93 III-1-5 Configuration Backup............................................................................................................................ 94 III-1-6 Syslog/Mail Alert.................
Chapter I Installation
I-1 Introduction This is a generic International version of the user guide. Specification, compatibility and features vary by region. For specific user guides suitable for your region or product, please contact local distributor. Thank you for purchasing this VigorAP 903, the concurrent dual band wireless (2.4G/5G) access point offering high-speed data transmission. With this high cost-efficiency VigorAP 903, computers and wireless devices which are compatible with 802.11n/802.
can be clear at the first sight. For multiple wireless clients to apply the AP Load Balancing to the multiple APs, AP management will manage wireless traffic with smooth flow and enhanced efficiency. Support Mesh Network The message, information, and data can be transferred via wireless connection among VigorAP 903 devices without by using Ethernet cables. It can reduce the construction cost and eliminate the trouble of wiring. Therefore, mesh AP is suitable for outdoor activities, or meetings.
I-1-1 LED Indicators and Connectors Before you use the Vigor modem, please get acquainted with the LED indicators and connectors first. LED ACT Status Explanation LAN A1 - A4 Off Blinking On Blinking On Off Blinking On Off Blinking On LAN B Off Blinking On USB 2.4G 5G Off The system is not ready or is failed. The system is ready and can work normally. A USB device is connected and active. The data is transmitting. Wireless function is ready. Wireless function is not ready.
Wireless band will be switched /changed according to the button pressed and released. For example, 2.4G (On) and 5G (On) – in default. 2.4G (On) and 5G (Off) – pressed and released the button twice. 2.4G (Off) and 5G (Off) – pressed and released the button three times. 2.4G (Off) and 5G (On) – pressed and released the button once. WPS - When WPS function is enabled by web user interface, press this button for more than 2 seconds.
I-2 Hardware Installation This section will guide you to install the VigorAP 903 through hardware connection and configure the device’s settings through web browser. Before starting to configure VigorAP 903, you have to connect your devices correctly. I-2-1 Wired Connection for PC in LAN 1. Connect VigorAP 903 to ADSL modem, router, or switch/hub in your network through the LAN A port of the access point by Ethernet cable. 2. Connect a computer to other available LAN A port.
I-2-2 Wired Connection for Notebook in WLAN 1. Connect VigorAP 903 to ADSL modem or router in your network through the LAN A port of the access point by Ethernet cable. 2. Connect the A/C power adapter to the wall socket, and then connect it to the PWR connector of the access point. 3. Power on VigorAP 903. 4. Check all LEDs on the front panel. ACT LED should be steadily on, LAN LEDs should be on if the access point is correctly connected to the ADSL modem or router.
I-2-3 Wireless Connection VigorAP 903 can access Internet via an ADSL modem, router, or switch/hub in your network through wireless connection. 1. Connect the A/C power adapter to the wall socket, and then connect it to the PWR connector of the access point. 2. Power on VigorAP 903. 3. Check all LEDs on the front panel. ACT LED should be steadily on. 4. Connect VigorAP 903 to ADSL modem or router via wireless network. (For the detailed information of LED status, please refer to section I-1-1.
I-2-4 PoE Connection VigorAP 903 can gain the power from the connected switch, e.g., VigorSwitch P2260. PoE (Power over Ethernet) can break the install limitation caused by the fixed power supply. 1. Connect VigorAP 903 to a switch in your network through the LAN A4 (PoE) port of the access point by Ethernet cable. 2. Connect a computer to VigorSwitch P2260. Make sure the subnet IP address of the PC is the same as VigorAP 903 management IP, e.g., 192.168.1.X. 3. Power on VigorAP 903. 4.
I-2-5 Wall-mount Connection 1. Drill two holes on the wall. The distance between the holes shall be 80mm. The recommended drill diameter shall be 6.5mm (1/4”). 2. Fit screws into the wall using the appropriate type of wall plug. 3. Hang the VigorAP directly onto the screws.
I-3 Network IP Configuration After the network connection is built, the next step you should do is setup VigorAP 903 with proper network parameters, so it can work properly in your network environment. Before you can connect to the access point and start configuration procedures, your computer must be able to get an IP address automatically (use dynamic IP address).
Under the General tab, click Use the following IP address. Then input the following settings in respective field and click OK when finish. IP address: 192.168.1.9 Subnet Mask: 255.255.255.
I-3-2 Windows 2000 IP Address Setup Click Start button (it should be located at lower-left corner of your computer), then click control panel. Double-click Network and Dial-up Connections icon, double click Local Area Connection, and Local Area Connection Properties window will appear. Select Internet Protocol (TCP/IP), then click Properties. Select Use the following IP address, then input the following settings in respective field and click OK when finish. IP address: 192.168.1.9 Subnet Mask: 255.255.255.
I-3-3 Windows XP IP Address Setup Click Start button (it should be located at lower-left corner of your computer), then click control panel. Double-click Network and Internet Connections icon, click Network Connections, and then double-click Local Area Connection, Local Area Connection Status window will appear, and then click Properties. Select Use the following IP address, then input the following settings in respective field and click OK when finish: IP address: 192.168.1.9 Subnet Mask: 255.255.255.0.
I-3-4 Windows Vista IP Address Setup Click Start button (it should be located at lower-left corner of your computer), then click control panel. Click View Network Status and Tasks, then click Manage Network Connections. Right-click Local Area Netwrok, then select ‘Properties’. Local Area Connection Properties window will appear, select Internet Protocol Version 4 (TCP / IPv4), and then click Properties.
I-4 Accessing to Web User Interface All functions and settings of this access point must be configured via web user interface. Please start your web browser (e.g., Firefox). 1. Make sure your PC connects to the VigorAP 903 correctly. 2. Open a web browser on your PC and type http://192.168.1.2. A pop-up window will open to ask for username and password. Pease type “admin/admin” on Username/Password and click OK.
3. For the first time accessing VigorAP, the Quick Start Wizard for configuring wireless settings will appear as follows. Refer to Section I-7 Quick Start Wizard for detailed information. 4.
5. The web page can be logged out by clicking Log Out on the top right of the web page. Or, logout the web user interface according to the chosen condition. The default setting is Auto Logout, which means the web configuration system will logout after 5 minutes without any operation. Change the setting of auto logout if you want. Note: If you fail to access the web configuration, please go to the section “Trouble Shooting” for detecting and solving your problem.
I-5 Changing Password 1. Please change the password for the original security of the modem. 2. Go to System Maintenance page and choose Administration Password. 3. Enter the new login password on the field of Password. Then click OK to continue. 4. Now, the password has been changed. Next time, use the new password to access the Web User Interface for this modem.
I-6 Dashboard Dashboard shows system status including the number of client connected, throughput, gateway, physical connection status, radio (2.4GHz / 5GHz) status, backhaul network, recent activities, wireless network usage, and so on. Click Dashboard from the main menu on the left side of the main page.
I-7 Quick Start Wizard Quick Start Wizard will guide you to configure 2.4G wireless setting, 5G wireless setting and other corresponding settings for Vigor Access Point step by step. Available operation mode includes: Access Point Mesh Root Mesh Node Range Extender In this page, the advanced settings pages will vary according to the operation mode specified.
I-7-1 Settings for Access Point 1. Choose Access Point as the operation mode and click Next Step. 2. In the following page, configure the settings for wireless LAN (for both 2.4GHz and 5GHz) and click Next Step. Available settings are explained as follows: Item Description WiFi Name Set a name for VigorAP 903 to be identified. WiFi Password Type 8~63 ASCII characters, such as 012345678..
digits leading by 0x, such as "0x321253abcde..."). Enable Guest Wireless Check the box to enable the guest wireless setting. Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers free Wi-Fi service for its guests for one hour every day. Guest WiFi Name - Set a name for VigorAP 903 which can be identified and connected by wireless guest. Guest WiFi Password - Set 8~63 ASCII characters which can be used for logging into VigorAP 903 by wireless guest.
23
I-7-2 Settings for Mesh Root 1. Choose Mesh Root as the operation mode and click Next Step. 2. Configure the settings for wireless LAN (for both 2.4GHz and 5GHz) and click Next Step. Available settings are explained as follows: Item Description WiFi Name Set a name for VigorAP 903 to be identified. WiFi Password Type 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). Enable Guest Check the box to enable the guest wireless setting.
Wireless Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers free Wi-Fi service for its guests for one hour every day. Guest WiFi Name - Set a name for VigorAP 903 which can be identified and connected by wireless guest. Guest WiFi Password - Set 8~63 ASCII characters or 8~63 ASCII characters which can be used for logging into VigorAP 903 by wireless guest.
5. After clicking Finish, the following web page appears. VigorAP will search for mesh node around the network.
6. Available VigorAP devices will be shown on the screen. Select the device (as a mesh node) for grouping under such mesh group and enter a device name for identification. 7. Click Apply and wait for a while.
8. Later, a summary page of mesh root with mesh node will be shown on the screen.
I-7-3 Settings for Mesh Node 1. Choose Mesh Node as the operation mode and click Next Step. 2. A summary of settings configuration will be shown on screen. Click Finish.
I-7-4 Settings for Range Extender 1. Choose Range Extender as the operation mode and click Next Step. 2. Configure the settings for wireless LAN (for both 2.4GHz and 5GHz) and click Next Step. Available settings are explained as follows: Item Description WiFi Name Set a name for VigorAP 903 to be identified. WiFi Password Type 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde...").
Guest WiFi Name - Set a name for VigorAP 903 which can be identified and connected by wireless guest. Guest WiFi Password - Set 8~63 ASCII characters or 8~63 ASCII characters which can be used for logging into VigorAP 903 by wireless guest. Enable Bandwidth Limit Check the box to define the maximum speed of the data uploading/downloading which will be used for the guest connecting to Vigor device with the same SSID. Upload Limit – Scroll the radio button to choose the value you want.
Available settings are explained as follows: Item Description SSID/Security Key Once the access point specified above, the name / security key of the AP will be shown automatically in these fields. Channel Means the channel frequency of the wireless LAN. You may switch channel if the selected channel is under serious interference. Security Mode There are several modes provided for you to choose. Each mode will bring up different parameters (e.g., WEP keys, Pass Phrase) for you to configure.
Type 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). 5. A summary of settings configuration will be shown on screen. Click Finish.
This page is left blank.
Chapter II Connectivity 35
II-1 Operation Mode This page provides several available modes for you to choose for different conditions. Click any one of them and click OK. The system will configure the required settings automatically. Available settings are explained as follows: Item Description AP This mode allows wireless clients to connect to access point and exchange data with the devices connected to the wired network. Mesh Mesh Root – VigorAP must connect to a gateway with an Ethernet cable.
II-2 General Concepts for Wireless LAN (2.4GHz/5GHz) VigorAP 903 is a highly integrated wireless local area network (WLAN) for 5 GHz 802.11ac or 2.4/5 GHz 802.11n WLAN applications. It supports channel operations of 20/40 MHz at 2.4 GHz and 20/40/80 MHz at 5 GHz. VigorAP 903 can support data rates up to 867 MBps in 802.11ac 80 MHz channels.
It is the simplest way to build connection between wireless network clients and VigorAP 903. Users do not need to select any encryption mode and type any long encryption passphrase to setup a wireless client every time. He/she only needs to press a button on wireless client, and WPS will connect for client and VigorAP 903 automatically. Note: Such function is available for the wireless station with WPS supported.
39
II-3 Wireless LAN (2.4GHz/5GHz) Settings for AP Mode When you choose AP as the operation mode, the Wireless LAN menu items will include General Setup, Security, Access Control, WPS, Advanced Setting, AP Discovery, Bandwidth Management, Airtime Fairness, Station Control, Roaming, Band Steering and Station List. Note: Available settings for Wireless LAN (2.4GHz) and Wireless LAN (5Ghz) are almost the same, except for Band Steering.
II-3-1 General Setup By clicking the General Setup, a new web page will appear so that you could configure the SSID, the wireless channel and WDS (for 5GHz only). Please refer to the following figure for more information. Available for 5GHz Access Point Mode Available settings are explained as follows: Item Description Enable Wireless LAN Check the box to enable wireless function.
to 64. Enable Client Limit per SSID Define the maximum number of wireless stations per SSID which try to connect to Internet through Vigor device. The number you can set is from 3 to 64. Mode At present, VigorAP 903 can connect to 11b only, 11g only, 11n only, Mixed (11b+11g), Mixed (11g+11n) and Mixed (11b+11g+11n) stations simultaneously. Simply choose Mixed (11b+11g+11n) mode. Channel Means the channel of frequency of the wireless LAN.
Subnet Choose LAN-A or LAN-B for each SSID. A remote AP should use LAN-A to connect to VigorAP 903 via WDS. Security Select WEP, TKIP or AES as the encryption algorithm. Type 8~63 ASCII characters, such as 012345678..(or 64 Hexadecimal digits leading by 0x, such as "0x321253abcde..."). Peer MAC Address Type the peer MAC address for the access point that VigorAP 902 connects to. After finishing this web page configuration, please click OK to save the settings.
II-3-2 Security This page allows you to set security with different modes for SSID 1, 2, 3 and 4 respectively. After configuring the correct settings, please click OK to save and invoke it. By clicking the Security Settings, a new web page will appear so that you could configure the settings. Available settings are explained as follows: Item Description Mode There are several modes provided for you to choose. Disable - The encryption mechanism is turned off.
which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. Select WPA, WPA2 or Auto as WPA mode. WPA/802.1x - The WPA encrypts each frame transmitted from the radio using the key, which either PSK (Pre-Shared Key) entered manually in this field below or automatically negotiated via 802.1x authentication. WPA2/802.
Item Description Use internal RADIUS Server There is a RADIUS server built in VigorAP 903 which is used to authenticate the wireless client connecting to the access point. Check this box to use the internal RADIUS server for wireless security. Besides, if you want to use the external RADIUS server for authentication, do not check this box. Please refer to the section, IV-1-1 RADIUS Server to configure settings for internal server of VigorAP 903.
II-3-3 Access Control For additional security of wireless access, the Access Control facility allows you to restrict the network access right by controlling the wireless LAN MAC address of client. Only the valid MAC address that has been configured can access the wireless LAN interface. By clicking the Access Control, a new web page will appear, as depicted below, so that you could edit the clients' MAC addresses to control their access rights (deny or allow).
Add Add a new MAC address into the list. Delete Delete the selected MAC address in the list. Edit Edit the selected MAC address in the list. Cancel Give up the access control set up. Backup Click it to store the settings (MAC addresses on MAC Address Filter table) on this page as a file. Restore Click it to restore the settings (MAC addresses on MAC Address Filter table) from an existed file. After finishing this web page configuration, please click OK to save the settings.
PinCode click Start PIN button. Both ACT and 2.4G WLAN LEDs on VigorAP 903 will blink quickly when WPS is in progress. It will return to normal condition after two minutes. (You need to setup WPS within two minutes). II-3-5 Advanced Setting This page is to determine which algorithm will be selected for wireless transmission rate.
for TxBURST on the tab of Option). Antenna VigorAP can be attached with two antennas to have good data transmission via wireless connection. However, if you have only one antenna attached, please choose 1T1R. Tx Power The default setting is the maximum (100%). Lowering down the value may degrade range and throughput of wireless. Fragment Length Set the Fragment threshold of wireless radio. Do not modify default value if you don’t know what it is, default value is 2346.
IP If it is enabled, VigorAP will isolate different wireless clients according to their IP address(es). WMM Capable To apply WMM parameters for wireless data transmission, please click the Enable radio button. Click Enable and manually enter the MAC address of the device with SSID 1. The MAC address of other SSIDs will change based on this MAC address. MAC Clone After finishing this web page configuration, please click OK to save the settings.
II-3-6 AP Discovery VigorAP 903 can scan all regulatory channels and find working APs in the neighborhood. Based on the scanning result, users will know which channel is clean for usage. Also, it can be used to facilitate finding an AP for a WDS link. Notice that during the scanning process (about 5 seconds), no client is allowed to connect to VigorAP. This page is used to scan the existence of the APs on the wireless LAN. Please click Scan to discover all the connected APs.
II-3-7 WDS AP Status VigorAP 903 can display the status such as MAC address, physical mode, power save and bandwidth for the working AP connected with WDS. Click Refresh to get the newest information. It is available for wireless LAN (5GHz) only. II-3-8 Bandwidth Management The downstream or upstream from FTP, HTTP or some P2P applications will occupy large of bandwidth and affect the applications for other programs. Please use Bandwidth Management to make the bandwidth usage more efficient.
you have to specify the rate manually. Download Limit Define the maximum speed of the data downloading which will be used for the wireless station connecting to Vigor device with the same SSID. Use the drop down list to choose the rate. If you choose User defined, you have to specify the rate manually. Auto Adjustment Check this box to have the bandwidth limit determined by the system automatically.
It is similar to automatic Bandwidth Limit. The dynamic bandwidth limit of each station depends on instant active station number and airtime assignment. Please note that Airtime Fairness of 2.4GHz and 5GHz are independent. But stations of different SSIDs function together, because they all use the same wireless channel. IN SPECIFIC ENVIRONMENTS, this function can reduce the bad influence of slow wireless devices and improve the overall wireless performance. Suitable environment: (1) Many wireless stations.
Note: Airtime Fairness function and Bandwidth Limit function should be mutually exclusive. So their webs have extra actions to ensure these two functions are not enabled simultaneously.
II-3-10 Station Control Station Control is used to specify the duration for the wireless client to connect and reconnect VigorAP. If such function is not enabled, the wireless client can connect VigorAP until it shuts down. Such feature is especially useful for free Wi-Fi service. For example, a coffee shop offers free Wi-Fi service for its guests for one hour every day. Then, the connection time can be set as “1 hour” and reconnection time can be set as “1 day”.
II-3-11 Roaming The network signal for a single wireless access point might be limited by its coverage range. Therefore, if you want to expand the wireless network in a large exhibition with a quick method, you can install multiple access points with enabling the Roaming feature for each AP to reach the purpose of expanding wireless signals seamlessly. These access points connecting for each other shall be verified by pre-authentication.
Fast Roaming (WPA2/802.1x) With Adjacent AP RSSI over – Specify a value as a threshold. Enable – Check the box to enable fast roaming configuration. PMK Caching - Set the expire time of WPA2 PMK (Pairwise master key) cache. PMK Cache manages the list from the BSSIDs in the associated SSID with which it has pre-authenticated. Such feature is available for WPA2/802.1 mode. Pre-Authentication - Enables a station to authenticate to multiple APs for roaming securer and faster.
II-3-12 Band Steering Band Steering detects if the wireless clients are capable of 5GHz operation, and steers them to that frequency. It helps to leave 2.4GHz band available for legacy clients, and improves users experience by reducing channel utilization. If dual-band is detected, the AP will let the wireless client connect to less congested wireless LAN, such as 5GHz to prevent from network congestion. Note: To make Band Steering work successfully, SSID and security on 2.
Open Wireless LAN (2.4GHz)>>Band Steering to get the following web page: Available settings are explained as follows: Item Description Enable Band Steering If it is enabled, VigorAP will detect if the wireless client is capable of dual-band or not within the time limit. Check Time…. – If the wireless station does not have the capability of 5GHz network connection, the system shall wait and check for several seconds (15 seconds, in default) to make the 2.4GHz network connection.
Below shows how Band Steering works.
How to Use Band Steering? 1. Open Wireless LAN(2.4GHz)>>Band Steering. 2. Check the box of Enable Band Steering and use the default value (15) for check time setting. 3. Click OK to save the settings. 4. Open Wireless LAN (2.4GHz)>>General Setup and Wireless LAN (5GHz)>> General Setup. Configure SSID as ap903-BandSteering for both pages. Click OK to save the settings. Same value for 2.
5. Open Wireless LAN (2.4GHz)>>Security and Wireless LAN (5GHz)>>Security. Configure Security as 12345678 for both pages. Click OK to save the settings. Same value for 2.4GHz and 5GHz 6. Now, VigorAP 903 will let the wireless clients connect to less congested wireless LAN, such as 5GHz to prevent from network congestion.
II-3-13 Station List Station List provides the knowledge of connecting wireless clients now along with its status code. Each tab (general, advanced, control, neighbor) will display different status information (including MAC address, Vendor, SSID, Auth, Encrypt, Tx/Rx Rate, Hostname, RSSI, Link Speed, BW, PSM, WMM, PHMd, MCS, Connection Time, Reconnection Time, Approx. Distance, Visit Time, and so on). General Display general information (e.g., MAC Address, SSID, Auth, Encrypt, TX/RX Rate) for the station.
Control Display connection and reconnection time of the wireless stations. Neighbor Display more information for the neighboring wireless stations.
II-4 Mesh Settings for Mesh Mode When you choose Mesh as the operation mode, the Mesh menu with the settings of Mesh Setup, Mesh Status, Mesh Discovery and Configuration Sync will be shown on the screen.
Mesh Root indicates that VigorAP would be other AP's uplink connection. As a Mesh Root, VigorAP must connect to a gateway with Ethernet cable first to have an internet connection. As a Mesh Node, VigorAP can connect to the mesh root or mesh node within the same mesh group via wireless network or physical connection with an Ethernet cable.
II-4-1 Mesh Setup Such page can determine the role of the VigorAP connecting to the computer physically. For a mesh root, you can search and specify mesh nodes as members under current mesh group. Available settings are explained as follows: Item Description Role Mesh Root – When VigorAP is connected to a Vigor router with a physical Ethernet cable, it can be set as mesh root to deliver the wireless signals to a mesh node AP.
When Mesh Node is selected Wired Uplink – Check the box if such VigorAP connects to an uplinked mesh root or an uplinked mesh node with an Ethernet cable. Wireless Uplink Band – Choose a wireless band for connecting with an uplinked mesh root or an uplinked mesh node. Log Level – Choose Basic or Detailed. Related information will be shown on the Diagnostics>>System Log.
How to set up a mesh group? The following steps will guide you how to setup a Mesh Group (with mesh root and mesh node) from Mesh >> Mesh Setup. 1. Open Mesh>>Mesh Setup. Click Mesh Root and click OK for the VigorAP connected to PC with Ethernet cable. At first, a Mesh Group is with only Mesh Root. 2. Click the Search button in the field of Add Mesh Node.
3. Wait until the searching result appears. 4. Choose the device(s) you want to add to the Mesh Group as mesh node(s) and define the Device Name for each node. In this example, five devices are specified as mesh nodes.
5. Click the Apply button and wait for it to finish the procedure. 6. After finishing the mesh network configuration, refer to Mesh>>Mesh Status for viewing the result. A mesh root with 5 mesh nodes is online.
II-4-2 Mesh Status This page shows that one Mesh Group can contain up to 8 devices. In the following figure, the 7th Device with hop 0 is one special Ethernet Backhaul. It means this node will use Ethernet cable to join the mesh group while others use the wireless link. Item Description Local Status Display general information for such VigorAP. Devices Display detailed information for this VigorAP (as mesh root) and mesh node(s) in the group.
II-4-3 Mesh Discovery Before a Mesh Node is connected, it is unable to check the device status from Mesh Root. This page can help to discover all Mesh devices around and offer the Link Status and Operation Mode of each Mesh device. For obtaining the list of devices around this VigorAP, click Scan. Later, surrounding VigorAP device(s) will be displayed on this page.
II-4-4 Configuration Sync If you add one Mesh Node in a mesh group, the Mesh Root will send the basic configuration to the device. This page could help you to change the Mesh Root settings and deliver the new configuration of the Mesh Root to all "connected" Mesh Nodes.
Item Description System Maintenance / Check the item(s) you want to make configuration sync. Wireless LAN (2.4Hz) / Apply – Click it to apply the settings configured by such AP to all connected mesh node. Note that this button is available only when such AP is in mesh root mode. Wireless LAN (5GHz) Tips for Mesh Network Setup Set up TWO mesh devices with uplink RSSI larger than -65dBm.
- Check the OP (operation) Mode. Make sure new Mesh Node doesn't accidentally get DHCP IP and becomes AP mode. - Check the country code and channels. For example, it is impossible for connecting a VigorAP 903 Mesh Root with 5G channel 36 to VigorAP920R Wireless Mesh Node in EU country code. - Check the channel load. Make sure it is not over 70%. - Collect some Mesh logs and send the result to DrayTek for analyzing.
II-5 Universal Repeater Settings for Range Extender Mode When you choose Range Extender as the operation mode, the Wireless LAN menu items (for 2.4GHz and 5GHz) will include General Setup, Security, Access Control, WPS, Advanced Setting, AP Discovery, WDS AP Status, Universal Repeater, Bandwidth Management, Airtime Fairness, Station Control, Roaming, Band Steering and Station List. This section will introduce settings for Universal Repeater only. For other wireless setting items (e.g.
While using Universal Repeater mode, the access point will demodulate the received signal. Please check if this signal is noise for the operating network, then have the signal modulated and amplified again. The output power of this mode is the same as that of AP mode. Available settings are explained as follows: Item Description SSID Display the SSID defined for Range Extender operation mode in Quick Start Wizard. Change the name of SSID whenever you want.
Encryption Type for Open/Shared This option is available when Open/Shared is selected as Security Mode. Choose None to disable the WEP Encryption. Data sent to the AP will not be encrypted. To enable WEP encryption for data transmission, please choose WEP. WEP Keys - Four keys can be entered here, but only one key can be selected at a time.
II-6 LAN Local Area Network (LAN) is a group of subnets regulated and ruled by modem. II-6-1 General Setup Click LAN to open the LAN settings page and choose General Setup. Note: Such page will be changed according to the Operation Mode selected. The following screen is obtained by choosing AP as the operation mode.
Item Description LAN-A IP Network Configuration Enable DHCP Client – When it is enabled, VigorAP 903 will be treated as a client and can be managed / controlled by AP Management server offered by Vigor router (e.g., Vigor2860). IP Address – Type in private IP address for connecting to a local private network (Default: 192.168.1.2). Subnet Mask – Type in an address code that determines the size of the network. (Default: 255.255.255.
agent should redirect the DHCP request to. DHCP Relay Agent - It is available when Enable Relay Agent is selected. Set the IP address of the DHCP server you are going to use so the Relay Agent can help to forward the DHCP request to the DHCP server. Disable Server - Disable Server lets you manually or use other DHCP server to assign IP address to every host in the LAN. WLAN Trusted DHCP Server –There is no right for such VigorAP to assign IP address for wireless LAN user.
II-6-2 Port Control To avoid wrong connection due to the insertion of unsuitable Ethernet cable, the function of physical LAN ports can be disabled via web configuration. Available settings are explained as follows: Item Description Enable Port Control Check it to enable the port control. If it is enabled, you are allowed to disable the function of physical LAN port by checking the corresponding check box. Disable Port Choose and check the LAN port.
This page is left blank.
Chapter III Management 87
III-1 System Maintenance For the system setup, there are several items that you have to know the way of configuration: Status, TR-069, Administrator Password, Configuration Backup, Syslog/Mail Alert, Time and Date, SNMP, Management, Reboot System, and Firmware Upgrade. Below shows the menu items for System Maintenance.
III-1-1 System Status The System Status provides basic network settings of Vigor modem. It includes LAN and WAN interface information. Also, you could get the current running firmware version or firmware related information from this presentation. Each item is explained as follows: Item Description Model /Device Name Display the model name of the modem. Firmware Version Display the firmware version of the modem. Build Date/Time Display the date and time of the current firmware build.
III-1-2 TR-069 This device supports TR-069 standard. It is very convenient for an administrator to manage a TR-069 device (Vigor router, AP and etc.) through VigorACS (Auto Configuration Server). Available settings are explained as follows: Item Description ACS Settings Wizard – Click it to enter the IP address of VigorACS server host, port number and the handler.
ACS (Auto Configuration Server) you want to link. Please refer to Auto Configuration Server user’s manual for detailed information. Test With Inform – Click it to send a message based on the event code selection to test if such CPE is able to communicate with VigorACS SI server. Event Code – Use the drop down menu to specify an event to perform the test. Last Inform Response Time – Display the time that VigorACS server made a response while receiving Inform message from CPE last time.
III-1-3 Administrator Password This page allows you to set new password for accessing into web user interface of VigorAP. Available settings are explained as follows: Item Description Account Enter the name for accessing into web user Interface. Old Password Enter the old password for accessing into the web user interface. New Password Enter in new password in this filed. Confirm Password Enter the new password again for confirmation.
III-1-4 User Password This page allows you to set new account and password for accessing the web pages under User Mode. Available settings are explained as follows: Item Description Enable User Mode After checking this box, you can access into the web user interface with the password typed here for simple web configuration. The settings on simple web user interface will be different with full web user interface accessed by using the administrator password. Account Enter a user name.
III-1-5 Configuration Backup Such function can be used to backup/restore the VigorAP 903 settings. Available settings are explained as follows: Item Restoration Description Upload - Click it to specify a file to be restored. Password (optional) – Enter a password for configuration restoration. Restore – Click it to restore the configuration file to VigorAP. Backup Perform the configuration backup of this device.
4. Click Save, the configuration will download automatically to your computer as a file named config.cfg. The above example is using Windows platform for demonstrating examples. The Mac or Linux platform will appear different windows, but the backup function is still available. Note: Backup for Certification must be done independently. The Configuration Backup does not include information of Certificate. Follow the steps below to restore your configuration. 1.
III-1-6 Syslog/Mail Alert SysLog function is provided for users to monitor AP. There is no bother to directly get into the Web user interface of the AP or borrow debug equipments. Available settings are explained as follows: Item Description Syslog Access Setup Enable - Check Enable to activate function of Syslog. Server IP Address -The IP address of the Syslog server. Destination Port -Assign a port for the Syslog protocol. The default setting is 514.
Enable E-Mail Alert - VigorAP will send an e-mail out when a user accesses into the user interface by using web or telnet. When Admin Login AP – Enable/disable the function. When it is enabled, VigorAP will send out an e-mail to the recipient defined above when a user tries to access into VigorAP by entering login username and password. Click OK to save the settings. III-1-7 Time and Date It allows you to specify where the time of VigorAP should be inquired from.
III-1-8 SNMP This page allows you to configure settings for SNMP and SNMPV3 services. The SNMPv3 is more secure than SNMP through the authentication method (support e.g., management needs. MD5) for the Available settings are explained as follows: Item Description Enable SNMP Agent Check it to enable this function. Enable SNMPV3 Agent Check it to enable this function. USM User USM means user-based security mode. Type a username which will be used for authentication.
III-1-9 Management This page allows you to specify the port number for HTTP and HTTPS server. Available parameters are explained as follows: Item Description Device Name The default setting is VigorAP 903. Change the name if required. Access Control Allow management from WLAN - Enable the checkbox to allow system administrators to login from wireless LAN. Enable Telnet Server– The administrator / user can access into the command line interface of VigorAP remotely for configuring settings.
Enable Default Configuration Wizard – Default setting is enabled. When it is enabled, you will be guided into Quick Start Wizard whenever clicking the DrayTek logo on the top of the web user interface. Such function will be disabled if you have configured Operation Mode, WLAN>>General Setup, WLAN>>Bandwidth Management, WLAN>>Station Control or System Maintenance>>Administration Password. Click OK to save these settings.
III-1-10 Reboot System The web user interface may be used to restart your modem. Click Reboot System from System Maintenance to open the following page. If you want to reboot the modem using the current configuration, check Using current configuration and click OK. To reset the modem settings to default values, check Using factory default configuration and click OK. The modem will take 5 seconds to reboot the system.
III-1-11 Firmware Upgrade Before upgrading your modem firmware, you need to install the Modem Tools. The Firmware Upgrade Utility is included in the tools. The following web page will guide you to upgrade firmware by using an example. Note that this example is running over Windows OS (Operating System). Download the newest firmware from DrayTek's web site or FTP site. The DrayTek web site is www.draytek.com (or local DrayTek's web site) and FTP site is ftp.draytek.com.
III-2 Central AP Management Such menu allows you to configure VigorAP device to be managed by Vigor router. III-2-1 General Setup Available settings are explained as follows: Item Description Enable AP Management Check the box to enable the function of AP Management (APM). Enable Auto Provision VigorAP 903 can be controlled under Central AP Management in Vigor2860 series.
III-2-2 APM Log This page will display log information related to wireless stations connected to VigorAP 903 and central AP management. Such information also will be delivered to Vigor router (e.g., Vigor2860 or Vigor2925 series) and be shown on Central AP Management>>Event Log of Vigor router.
III-2-3 Overload Management Load Balance can help to distribute the traffic for all of the access points (e.g., VigorAP 903) registered to Vigor router. Thus, the bandwidth will not be occupied by certain access points. However, traffic overload might be occurred if too many wireless stations connected to VigorAP 903 for data incoming and outgoing. Therefore, “Force Overload Disassociation” is required to terminate the network connection of the client’s station to release network traffic.
Add Add a new MAC address into the White List/Black List. Delete Delete the selected MAC address in the White List/Black List. Edit Edit the selected MAC address in the White List/Black List. Cancel Give up the configuration. Click OK to save these settings. III-2-4 Status of Settings Load Balance can help to distribute the traffic for all of the access points (e.g., VigorAP 903s) registered to Vigor 2860 or Vigor2925 series.
III-3 Mobile Device Management Such feature can control / manage the mobile devices accessing the wireless network of VigorAP. VigorAP offers wireless LAN service for mobile device(s), PC users, MAC users or other users according to the policy selected. Below shows the menu items for Mobile Device Management (MDM). III-3-1 Detection Such page displays mobile device(s) detected by VigorAP Detected device(s) with Policy – Pass can access into the wireless LAN offered by VigorAP.
Once you check/uncheck the box of Enable Mobile Device Management and click OK, VigorAP will reboot automatically to activate MDM. At present, OS (for mobile device) categories supported by VigorAP include: Windows Linux iOS Andorid WindowsPhone BlackBerry Symbian III-3-2 Policies Such page determines which devices (mobile, PC, MAC or others) allowed to make network connections via VigorAP or blocked by VigorAP.
III-3-3 Statistics The number of detected devices and the number of device(s) passed/blocked according to the policy specified in Mobile Device Management>>Policy can be illustrated as doughnut chart.
This page is left blank.
Chapter IV Others 111
IV-1 RADIUS Setting IV-1-1 RADIUS Server VigorAP 903 offers a built-in RADIUS server to authenticate the wireless client that tries to connect to VigorAP 903. The AP can accept the wireless connection authentication requested by wireless clients.
Item Description Enable RADIUS Server Check it to enable the internal RADIUS server. Authentication Type Let the user to choose the authentication method for RADIUS server. Radius EAP Type – There are two types, PEAP and EAP TLS, offered for selection. If EAP TLS is selected, a certificate must be installed or must be ensured to be trusted. Users Profile Username – Type a new name for the user profile. Password – Type a new password for such new user profile.
Click Create Root CA to open the following page. Type or choose all the information that the window request such as subject name, key type, key size and so on. Available settings are explained as follows: Item Description Subject Name Type the required information for creating a root CA. Country (C) – Type the country code (two characters) in this box.
to specify the one you need. Apply to Web HTTPS VigorAP needs a certificate to access into Internet via Web HTTPS. Check this box to use the user-defined root CA certificate which will substitute for the original certificate applied by web HTTPS. Note: “Common Name” must be configured with rotuer’s WAN IP or domain name. After finishing this web page configuration, please click OK to save the settings. A new root CA will be generated.
IV-2 Applications Below shows the menu items for Applications. IV-2-1 Schedule The VigorAP has a built-in clock which can update itself manually or automatically by means of Network Time Protocols (NTP). As a result, you can not only schedule the AP to dialup to the Internet at a specified time, but also restrict Internet access to certain hours so that users can connect to the Internet only during certain hours, say, business hours. The schedule is also applicable to other functions.
Add – Such button is available when Enable Schedule is checked. It allows to add a new schedule profile. Delete – Check the index box of the schedule profile and click such button to remove the profile. You can set up to 15 schedules. To add a schedule: 1. Check the box of Enable Schedule. 2. Click the Add button to open the following web page. Available settings are explained as follows: Item Description Enable Check to enable such schedule profile.
Weekday 3. Choose and check the day to perform the schedule. It is available when Routine is selected as Acts. After finishing this web page configuration, please click OK to save the settings. A new schedule profile has been created and displayed on the screen. IV-2-2 Apple iOS Keep Alive To keep the wireless connection (via Wi-Fi) on iOS device in alive, VigorAP 903 will send the UDP packets with 5353 port to the specific IP every five seconds.
IV-2-3 Wi-Fi Auto On/Off When VigorAP is able or unable to ping the specified host, the Wi-Fi function will be turned on or off automatically. The purpose of such function is to avoid wireless station roaming to an AP which is unable to access Internet. Available settings are explained as follows: Item Description Enable Auto Switch On/Off Wi-Fi Check the box to enable such function. Ping Host Type an IP address (e.g., 8.8.8.8) or a domain name (e.g., google.
IV-2-4 Temperature Sensor A USB Thermometer is now available that complements your installed DrayTek AP installations that will help you monitor the server or data communications room environment and notify you if the server room or data communications room is overheating. During summer in particular, it is important to ensure that your server or data communications equipment are not overheating due to cooling system failures.
Temperature Unit - Choose the display unit of the temperature. There are two types for you to choose. Alarm Settings Enable Syslog Alarm - The temperature log containing the alarm message will be recorded on Syslog if it is enabled. Mail Alert - The temperature log containing the alarm message will be sent by mail. Temperature High Alarm/ Temperature Low Alarm - Type the upper limit and lower limit for the system to send out temperature alert.
This page is left blank.
Chapter V Troubleshooting 123
V-1 Diagnostics This section will guide you to solve abnormal situations if you cannot access into the Internet after installing the router and finishing the web configuration. Please follow sections below to check your basic installation status stage by stage. Checking if the hardware status is OK or not. Checking if the network connection settings on your computer are OK or not. Pinging the router from your computer. Checking if the ISP settings are OK or not.
V-1-1 System Log At present, only System Log is offered. V-1-2 Speed Test Click the Start button on the page to test the speed. Such feature can help you to find the best installation place for Vigor AP.
V-1-3 Traffic Graph Click Traffic Graph to open the web page. Choose one of the managed Access Points, LAN-A or LAN-B, daily or weekly for viewing data transmission chart. Click Refresh to renew the graph at any time. The horizontal axis represents time; the vertical axis represents the transmission rate (in kbps). V-1-4 Data Flow Monitor This page displays general information for the client connecting to VigorAP 903.
Available parameters are explained as follows: Item Description Auto-refresh After checking this box, Vigor system will refresh such page periodically. Refresh Click this link to refresh this page immediately. Index Display the number of the data flow. MAC Address Display the MAC address of the monitored device. Station Display the IP address/host name of the wireless client. TX rate (kbps) Display the transmission speed of the monitored device.
V-1-6 WLAN (5GHz) Statistics Such page is used for debug by RD only.
V-1-7 Station Statistics Such page is used for debug or for the user to observe network traffic and network quality. Available parameters are explained as follows: Item Description Show Chart Choose one of the items to display the statistics chart for wireless stations.
Nearby & Connected Number – Choose it to have the statistics of the wireless stations which is nearby and connected to VigorAP 903. Visiting & Passing Number – Choose it to have the statistics of the wireless stations which is visiting and passing to VigorAP 903. Visiting Time - Choose it to have the statistics of the wireless stations which is visiting VigorAP 903.
V-1-8 Interference Monitor As an interference detector, VigorAP can detect all of the environmental interference factors for certain channel used or for all of the wireless channels. Current Channel The analysis page with information about wireless band, channel, transmission power, bandwidth, wireless mode, and country code chosen will be displayed on this page completely based on the wireless band (2.4G or 5G) selected. Also, channel status can be seen easily from this page.
All Channels This page displays the utilization and energy result for all channels based on 2.4G/5G. Click Refresh to get the newly update interference situation.
V-1-9 Station Airtime This page displays the operation status for 2.4GHz wireless stations within 30 minutes.
V-1-10 Station Traffic Graph This page displays the data traffic (receiving/transmitting) status for 2.4GHz wireless stations within 30 minutes with a run chart.
V-1-11 Station Link Speed This page displays the link rate status for 2.4GHz/5GHz wireless stations within one hour with a run chart. V-1-12 Support Area When you click Support Area, you will be guided to visit www.draytek.com and open the corresponding pages directly.
V-2 Checking the Hardware Status Follow the steps below to verify the hardware status. 1. Check the power line and cable connections. Refer to “I-2 Hardware Installation” for details. 2. Power on the modem. Make sure the POWER LED, ACT LED and LAN LED are bright. 3. If not, it means that there is something wrong with the hardware status. Simply back to “I-2 Hardware Installation” to execute the hardware installation again. And then, try again.
V-3 Checking the Network Connection Settings Sometimes the link failure occurs due to the wrong network connection settings. After trying the above section, if the link is stilled failed, please do the steps listed below to make sure the network connection settings is OK. V-3-1 For Windows Note: The example is based on Windows 7 (Professional Edition). As to the examples for other operation systems, please refer to the similar steps or find support notes in www.draytek.com. 1.
3. Icons of network connection will be shown on the window. Right-click on Local Area Connection and click on Properties. 4. Select Internet Protocol Version 4 (TCP/IP) and then click Properties. 5. Select Obtain an IP address automatically and Obtain DNS server address automatically. Finally, click OK.
V-3-2 For Mac Os 1. Double click on the current used Mac Os on the desktop. 2. Open the Application folder and get into Network. 3. On the Network screen, select Using DHCP from the drop down list of Configure IPv4.
V-4 Pinging the Device The default gateway IP address of the modem is 192.168.1.2. For some reason, you might need to use “ping” command to check the link status of the modem. The most important thing is that the computer will receive a reply from 192.168.1.2. If not, please check the IP address of your computer. We suggest you setting the network connection as get IP automatically. (Please refer to the section V-2) Please follow the steps below to ping the modem correctly. V-4-1 For Windows 1.
141
V-5 Backing to Factory Default Setting Sometimes, a wrong connection can be improved by returning to the default settings. Try to reset the modem by software or hardware. Warning: After pressing factory default setting, you will loose all settings you did before. Make sure you have recorded all useful settings before you pressing. The password of factory default is null. V-5-1 Software Reset You can reset the modem to factory default via Web page.
After restore the factory default setting, you can configure the settings for the modem again to fit your personal request.
V-6 Contacting DrayTek If the modem still cannot work correctly after trying many efforts, please contact your dealer for further help right away. For any questions, please feel free to send e-mail to support@draytek.com.
Index Channel, 42, 80 8 Channel Width, 49 802.11n, 42 Client IP, 113 802.
HTTP port, 99 Open/Shared, 32, 81 HTTPS, 115 Operation Mode, 36 HTTPS port, 99 Overload Management, 105 I P Interference Monitor, 131 Packet-OVERDRIVE, 49 IP Address, 81, 83 Pass Phrase, 45, 81 Isolate Member, 42 Password, 18 Password Strength, 92 K Periodic Inform Settings, 91 Keep Alive Period, 91 PIN Code, 38 Key Renewal Interval, 45 PMK Cache Period, 59 Key Size, 114 PoE Connection, 8 Key Type, 114 Policy, 47, 108 L Port, 46 Port Control, 85 LAN, 82 Pre-Authentication, 59 LAN
Security Overview, 37 Temperature Sensor Graph, 121 Security Settings, 44 Time and Date, 97 Session Timeout, 46 Time Zone, 97 Shared Secret, 46 TKIP, 32, 37 Show Chart, 129 Total Download Limit, 54 Simulate 2 APs, 42 Total Upload Limit, 54 Software Reset, 142 TR-069, 90 Speed Test, 125 Traffic Graph, 126 SSL(HTTPS), 91 traffic overload, 105 Start Date, 117 Triggering Client Number, 55 Start PBC, 38 Trust DHCP Server, 83 Start Time, 117 Tx Power, 50 Station Airtime, 133 Station Contro