VigorAP 902 - Managed 802.11ac Wireless Access Point
|VAP902-K / 4716779079425||VigorAP 902 (UK/IE)|
- Business-class wireless access point
- 802.11ac (866mbps) & 802.11n (300mbps)
- Simultaneous dual-band (2.4/5Ghz)
- Support for 5Ghz Extended Channels (100-140)
- Gigabit Ethernet Switch (4+1 Ports)
- Centrally managed or standalone operation
- Central Management supports mobility, load-balancing, monitoring, status, upgrade and configuration
- Local temperature monitoring/logging
(Optional thermometer accessory required)
- Can be powered by supplied PSU or standard 802.3af PoE (Power-over-Ethernet)
- WPA2 Wireless Encryption
- Repeater/Bridge/Access Point & WDS
- Time-Scheduled Operation
- Bandwidth management per SSID
- 802.1q VLAN Tagging
- Client Isolation & Multiple SSIDs
- MAC Address Filtering
- Radius / WPA & 802.1x User Authentication
- Built-in Site Surveyor
- Wall Mountable
VigorAP 902 Dual-Band 802.11ac Wireless Access Point
The DrayTek VigorAP 902 is a wireless access point which can be operated in standalone or centrally managed/monitored mode (with the use of a central DrayTek management product - see later). The VigorAP 902 is a high specification professional access point providing reliable and flexible coverage to all manner of applications. A vast array of security and management features helps the AP to improve and protect flexibility and integrity of your wireless LAN. The VigorAP 902 is ideal for adding wireless connectivity to an existing LAN, or for expanding the range of an existing wireless LAN by using the WDS repeater features.
Simultaneous Dual-Band Operation & Extended 5Ghz Bands
The VigorAP 902 supports simultaneous operation of the common 2.4Ghz band and faster 5Ghz band. The 5Ghz band is far less congested so if your PCs or other devices support the 5Ghz band, you can use that. The 5Ghz band is used for 802.11ac (or optionally 802.11n and 802.11a). The VigorAP 902 operates both bands at the same time, allowing your devices to use either band and each has its own bandwidth so overall wireless capacity is also increased. The 5Ghz interface supports the full range of extended domestic 5Ghz channels, thank to its support for DFS/TPC; you can select all 5Ghz channels up to channel 140, as opposed to just the 4 'Band A-Lower' channels (which provides only two non-overlapping channels).
It has support for Band Steering which can be configured to guide clients that are able to connect to 5GHz wireless networks onto this band instead of the more congested 2.4GHz band, which results in client connections being shared between the two frequencies more evenly, potentially increasing the number of wireless clients that can be connected to each Vigor Access Point.
Gigabit Ethernet Ports
The VigorAP 902 has five wired Ethernet ports (separated into two distinct separated LANs). LAN A and LAN B can be fed separately and in turn broadcast on independent and isolated SSIDs. As the ports are all Gigabit, you can be sure that the AP is fed at the maximum speed in order to fully satisfy the full speed of both 2.4GHz and 5Ghz bands simultaneously. The four ports on LAN A are particularly of use if you are using the AP as a wireless bridge as you can then connect wired PCs or devices to it. LAN Port 3 on LAN-A is also used as the PoE input if you're powering the AP by PoE.
The VigorAP 902 can operate in standalone autonomous mode, but can also form part of a centrally managed wireless installation by adding a compatible DrayTek wireless controller (a Vigor2860, 2925, 2952 or 3220). This enables you to centrally control, manage and administer multiple AP devices installed around your building/campus. Management also enables efficient usage of your wireless access point through load-balancing, whereby wireless clients are distributed across several access points to reduce congestion.
For further details of the central management feature, click here.
Wireless Security & VLANs
The VigorAP 902 features multiple levels of wireless security. Encryption using WPA2 (802.11i) is available and you can also use the access control list (ACL) to specify the hardware addresses of clients which are permitted to connect (by MAC hardware address). Any unauthorised hardware is refused access.
For additional user authentication, you can activate 802.1x RADIUS (Remote Authentication Dial-in User Service) which allows you to centrally manage and store user names and passwords either within the AP setup itself (thus not needing any external server) on an external radius server which can permit time limited, temporary or continuous access to your clients as required. The VigorAP 902 supports the 802.1q VLAN protocol so that if it is connected to an 802.1q enabled LAN, it can split tagged data (whether it's different subnets or intended for different users) and broadcast each on its own SSID. This means, for example, that your guest WiFi access is provided on a separate isolated SSID with no access to your company data.
Local Temperature Logging and Alarm
As your VigorAP 902 unit(s) will be distributed around your building, it's an ideal opportunity to also gather environmental information about those locations. By the addtition of an optional USB temperature sensor, your VigorAP 902 can report real-time local temperature information, show the previous 24 hour's chart and also set high/low alarms to alert/log if the temperature falls above or below your set levels. This facility is ideal for detecting if any part of your building is over or under-heated or if heating/cooling has been left on overnight and therefore helping to make more efficient use of your heating or cooling energy consumption, potentially saving cost. The VigorAP 902's USB interface can instead connect to a regular printer. That printer is then accessible from any wireless or wired PC which connects to the VigorAP 902, or a PC anywhere else on the network. This is ideal to provide printer access to wireless laptops but could also be used for installing a printer elsewhere in your home/office by using a pair of VigorAP 902s to make a bridge.
WPS - WiFi Protected Setup
Wireless Security (encryption) is important to protect your data (privacy) but also to prevent unauthorised people from accessing your network or your Internet connection. The WPS system means that instead of having to create and enter long encryption keys, you can activate WPS registration. To activate, you press and hold the WPS button, then activate WPS on your wireless device; the two devices then automatically exchange encryption keys. WPS can be disabled if not required or for more security.
The same button on the VigorAP 902 also serves as a physical on/off switch for the Wireless LAN if you wish to quickly disable it at any time, whilst still leaving your wired ports active.
The DrayTek VigorAP 902 can act as a standalone wireless access point, ideal for adding wireless connectivity to an existing LAN but also operates in several other wireless modes to provide enlarged wireless coverage or wireless bridges to other parts of your LAN. Many different configurations are possible:
- Universal Repeater (2.4GHz & 5GHz) - Wirelessly extend network coverage with the VigorAP operating as a wireless client, repeating that signal to extend coverage and bridging the LAN ports of the Access Point across the network
- Station Infrastructure - Wirelessly extends network coverage with the VigorAP connecting to a wireless network and bridging wired network devices connected to the Access Point's LAN ports across the network
- AP Bridge-Point to Point - Connects two VigorAP Access Points as a wireless bridge, allowing wired network devices to communicate across the link
- AP Bridge-Point to Multi-Point - Connects two or more VigorAP Access Points as a wireless bridge, allowing wired network devices to communicate across the link
- AP Bridge WDS (Wireless Distribution System) - Connects two or more VigorAP Access Points or DrayTek wireless routers as a wireless bridge, allowing wired network devices to communicate across the link. The VigorAP can also broadcast a wireless network to increase wireless coverage
For further details of the wireless modes available on DrayTek VigorAP Access Points, click here.
The VigorAP 902 supports PoE (Standard IEEE 802.3af Power over Ethernet) as standard (built-in) so if the AP is connected to a PoE-enabled Ethernet switch or PoE injector, you don't need any local power to the unit (power supply) - the VigorAP 902 will take its power from the Ethernet cable. The VigorAP 902 supports Gigabit PoE (if you have a Gigabit PoE switch/injector) such as our VigorSwitch P2261 or P1090 models (or any other 802.3af device). PoE is ideal for situations where you do not have mains power available in the exact location where you want to install the VigorAP 902 or just for general aesthetic neatness, perhaps where the AP is installed somewhere prominent.
The VigorAP 902 is also supplied with an AC/DC mains PSU for installations where you are not using PoE.
The VigorAP 902 can support two completely independent LANs. Each is connected via its own independent RJ45 Ethernet interface. There are Ethernet RJ45 interfaces for LAN A (4 ports) and LAN B (one port). These networks remain completely isolated from each other. Each LAN can be assigned its own separate Wireless SSID so they remain separated even on the Wireless LAN. This is the equivalent of having two completely separate access points and ideal for public and private networks in the same location or wireless LANs for two separate companies.
Having two physical LAN interfaces provides a much simpler alternative to using tagged VLANs and/or a Radius server for authentication. It is also much easier/quicker to set up (that said, the AP can also support tagged VLANs and Radius).
Central Wireless Management
The VigorAP 902 can operate in standalone mode; connected to your LAN and providing wireless access. If you have several AP units, you can centrally manage and monitor them individually as a group.
Central management makes security, efficiency, control and monitoring of your company-wide wireless access easier to manage. Supported management features includes mobility, load-balancing and client monitoring/reporting.
For central management, you require a Vigor 2925, 2860, 2952 or 3220 router; there is no per-node licencing or subscription required.
For further details on Wireless Management of the VigorAP series, click here.
VigorAP 902 User Interface Screenshots
VigorAP 902 Wireless Configuration
VigorAP 902 - List of Connection Stations (clients) and diagnostics
Scanning & Discovery of other nearby Access Points
Access & Event Schedules - You can schedule wireless on/off, reboots or
turn off all of the unit's LED's (lights) at different times (e.g. night).
Limiting Bandwidth for connected clients
Built-in or external Radius Server for Client Authentication
Vigor2860 (Wireless management) Screenshots
The screenshots below show the web interface the Vigor2860 (or other DrayTek controller device) when centrally managing an estate of multiple Vigor APs or other compatible units.
Vigor 2860 Rogue Access Point Detection
Vigor 2860 Firmware Upgrade Status of multiple APs
Vigor 2860 managed upgrade of Vigor AP units
Vigor 2860 AP Management - Wireless Load Balance Policy
Note : The above screenshots are provided as a guide only. Exact operation and screen appearance will vary depending on firmware version and will change as features and functionality evolve. In some cases, the screenshots above may have been modified, resized, cropped or merged in order to best illustrate the features available.
Access Control / User Authentication
For additional security, wireless access can be restricted to authorised users only by use of a unique username and password for each user, which uses WPA2-Enterprise / WPA2-802.1x for encryption and authentication. When the user first opens their wireless connection, the VigorAP 902 will request their Username and Password in place of a Pre-Shared-Key.
The VigorAP 902 can use an external RADIUS server to hold user credentials but also has its own built-in radius server to store up to 96 users. The AP's built-in Radius server can also act as a server to additional devices (such as another AP, meaning that you don't need to set up the same users up on several units).
|DrayTek Wireless Access Point Comparison|
|VigorAP 710||VigorAP 810||VigorAP 902||VigorAP 910C|
|Wired LAN Ports||1 x
|1+4 x Gigabit
|1 x Gigabit
|WLAN Disable Button||-||Yes||Yes||-|
|USB Printer Port||-||Yes||Yes||-|
2.4Ghz & 5Ghz Concurrent
|Rogue AP Detection*||-||Yes||Yes||Yes|
|*Note: Central management requires a Vigor 2860 or Vigor 2925 to act as wireless controller.|
DrayTek VigorAP 902 Specification
- Physical Interfaces/Controls:
- LAN A : 4 x Gigabit Ethernet
Port 3 accepts 802.3af PoE Power
- LAN B : 1 x Gigabit Ethernet
- USB 2.0 Interface (for printer or thermometer)
- Power On/Off Button
- Wireless On / Off / WDS Button
WDS Operation/button can be disabled
- Factory Reset Button (recessed)
- DC Power Socket
- Two Antennae (Removable, 2dB, both TX/RX dual-band)
- Antenna connectors: RSMA Female
- LAN A : 4 x Gigabit Ethernet
- Wireless LAN Compatibility:
- IEEE 802.11ac / a / b / g / n
- Frequency Band 2.4 GHz & 5.8Ghz - Simultaneous Operation
- Extended 5Ghz Band - Channels 36-140
- DFS/TPC Support
- Total wireless bandwidth (capacity) 1200Mb/s
- 802.11n : 300Mb/s
- 802.11ac : 867Mb/s
- Security Features:
- Wireless Encryption : WPA2 (802.11i) Encryption
Also supports WPA/WEP (Not recommended)
- User Authentication : 802.1x (using built-in or external Radius Server) (MD5/PEAP Modes)
- PMK Caching & Pre-authentication
- Wireless Client Isolation
- Hidden SSIDs (Selectable)
- WPS - WiFi Protected Setup
- MAC Address Filtering (ACL)
- Wireless Encryption : WPA2 (802.11i) Encryption
- Operational Modes (2.4Ghz band)
- 802.11b, 802.11g, 802.11n
- Access Point
- Station Infrastructure
- AP Bridge Point-to-Point
- AP Bridge Point-to-Multipoint
- AP Bridge WDS
- Universal Repeater
- Operational Modes (5.8Ghz band)
- 802.11ac / 802.11n / 802.11a
- Channels 36-140 with DFS/TPC
- Access Point
- Universal Repeater
- Wireless Control Features:
- Wireless Client Status List in WUI
- Up to four distinct SSIDs (for VLANs) for each frequency band (2.4/5Ghz)
- WMM (Wireless MultiMedia)
- MAC Cloning
- Built-in DHCP server & client
- 802.1q VLAN
- VLAN Grouping & mapping for LAN A & LAN B
- Airtime Fairness
- Band Steering
- Web Interface (HTTP/HTTPS)
- TR-069 Control (For Vigor-ACS-SI or other TR-069 platform)
- CLI (Command Line Interface) - Telnet
- Firmware upgrade by TR-069/HTTP
- SNMP V2 / 2c / 3*
- Central AP Management (from compatible DrayTek router/controller)
- Management VLAN for LAN A & LAN B
- Power, environmental & Physical:
- Temperature Operation : 0° C to 40° C
- Humidity Requirements: 10% to 90 % (Non-condensing)
- Physical Dimensions: mm
- Weight : 0.4kg (main unit, including Aerials)
- Wall Mountable
- Pack Contents : VigorAP 902 main unit, two aerials, PSU (220-240VAC), quick start guide, manual on CD-Rom
- Power : 12VDC via AC/DC PSU (supplied) or 802.3af PoE
- Warranty : 2 Years RTB
This video gives a brief introduction to managed wireless. What it might be used for and how you would go about deploying it.