VigorAP 902
- Business-class wireless access point
- 802.11ac (866mbps) & 802.11n (300mbps)
- Simultaneous dual-band (2.4/5Ghz)
- Support for 5Ghz Extended Channels (100-140)
- Gigabit Ethernet Switch (4+1 Ports)
- Centrally managed or standalone operation
- Central Management supports mobility, load-balancing, monitoring, status, upgrade and configuration
- Local temperature monitoring/logging
(Optional thermometer accessory required) - Can be powered by supplied PSU or standard 802.3af PoE (Power-over-Ethernet)
- WPA2 Wireless Encryption
- Repeater/Bridge/Access Point & WDS
- Time-Scheduled Operation
- Bandwidth management per SSID
- 802.1q VLAN Tagging
- Client Isolation & Multiple SSIDs
- MAC Address Filtering
- Radius / WPA & 802.1x User Authentication
- Built-in Site Surveyor
- Wall Mountable
- Business-class wireless access point
- 802.11ac (866mbps) & 802.11n (300mbps)
- Simultaneous dual-band (2.4/5Ghz)
- Support for 5Ghz Extended Channels (100-140)
- Gigabit Ethernet Switch (4+1 Ports)
- Centrally managed or standalone operation
- Central Management supports mobility, load-balancing, monitoring, status, upgrade and configuration
- Local temperature monitoring/logging
(Optional thermometer accessory required) - Can be powered by supplied PSU or standard 802.3af PoE (Power-over-Ethernet)
- WPA2 Wireless Encryption
- Repeater/Bridge/Access Point & WDS
- Time-Scheduled Operation
- Bandwidth management per SSID
- 802.1q VLAN Tagging
- Client Isolation & Multiple SSIDs
- MAC Address Filtering
- Radius / WPA & 802.1x User Authentication
- Built-in Site Surveyor
- Wall Mountable
VigorAP 902 Dual-Band 802.11ac Wireless Access Point
The DrayTek VigorAP 902 is a wireless access point which can be operated in standalone or centrally managed/monitored mode (with the use of a central DrayTek management product - see later).
The VigorAP 902 is a high specification professional access point providing reliable and flexible coverage to all manner of applications. A vast array of security and management features helps the AP to improve and protect flexibility and integrity of your wireless LAN.
The VigorAP 902 is ideal for adding wireless connectivity to an existing LAN, or for expanding the range of an existing wireless LAN by using the WDS repeater features.
Simultaneous Dual-Band Operation & Extended 5Ghz Bands
The VigorAP 902 supports simultaneous operation of the common 2.4Ghz band and faster 5Ghz band. The 5Ghz band is far less congested so if your PCs or other devices support the 5Ghz band, you can use that. The 5Ghz band is used for 802.11ac (or optionally 802.11n and 802.11a). The VigorAP 902 operates both bands at the same time, allowing your devices to use either band and each has its own bandwidth so overall wireless capacity is also increased. The 5Ghz interface supports the full range of extended domestic 5Ghz channels, thank to its support for DFS/TPC; you can select all 5Ghz channels up to channel 140, as opposed to just the 4 'Band A-Lower' channels (which provides only two non-overlapping channels).
It has support for Band Steering which can be configured to guide clients that are able to connect to 5GHz wireless networks onto this band instead of the more congested 2.4GHz band, which results in client connections being shared between the two frequencies more evenly, potentially increasing the number of wireless clients that can be connected to each Vigor Access Point.
Wireless Security & VLANs
The VigorAP 902 features multiple levels of wireless security. Encryption using WPA2 (802.11i) is available and you can also use the access control list (ACL) to specify the hardware addresses of clients which are permitted to connect (by MAC hardware address). Any unauthorised hardware is refused access.
For additional user authentication, you can activate 802.1x RADIUS (Remote Authentication Dial-in User Service) which allows you to centrally manage and store user names and passwords either within the AP setup itself (thus not needing any external server) on an external radius server which can permit time limited, temporary or continuous access to your clients as required.
The VigorAP 902 supports the 802.1q VLAN protocol so that if it is connected to an 802.1q enabled LAN, it can split tagged data (whether it's different subnets or intended for different users) and broadcast each on its own SSID. This means, for example, that your guest WiFi access is provided on a separate isolated SSID with no access to your company data.
Central Management with DrayTek VigorACS
The DrayTek VigorAP 902 can be managed by the DrayTek VigorACS central management system - a cloud platform which can manage most DrayTek products - routers, wireless access points and Ethernet switches, giving you complete visibility and control of your DrayTek product estate, even without a DrayTek Vigor router on site.
The DrayTek VigorACS management system can be used to configure and provision DrayTek VigorAP access points, similarly to performing these actions through the VigorAP's web interface, with a familiar menu layout in the Configuration section of VigorACS.
Profiles for groups of access points can be provisioned in VigorACS by selecting a VigorACS network, then accessing Configuration > AP Profile to configure profiles and apply them selectively.
DrayTek's VigorACS management monitors the VigorAP 902, with a Dashboard view giving a central overview of the most important information from the VigorAP's current status.
Managing a VigorAP in VigorACS
For further details of the VigorACS central management system, click here .
Central Management with a DrayTek Router
Provision & Manage VigorAPs with a DrayTek Vigor router
For further details of the central management feature, click here .
The VigorAP 902 can operate in standalone autonomous mode, but can also form part of a centrally managed wireless installation by adding a compatible DrayTek wireless controller such as the Vigor 2862 router. This enables you to centrally control, manage and administer multiple AP devices installed around your building/campus. Management also enables efficient usage of your wireless access point through load-balancing, whereby wireless clients are distributed across several access points to reduce congestion.
The DrayTek router operating as the wireless controller can provision DrayTek VigorAP access points using the Central AP Management profiles configured on the router, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.
Power-over-Ethernet
The VigorAP 902 has built-in PoE (Standard IEEE 802.3af Power over Ethernet) as standard. Connect the VigorAP to a PoE-enabled Ethernet switch or PoE injector to power it without local power to the unit (power supply) - the VigorAP 903 will take its power from the Ethernet cable. The VigorAP 902 supports Gigabit PoE (if you have a Gigabit PoE switch/injector) such as our VigorSwitch P1280 or P1092 models (or any other 802.3af/at device).
PoE is ideal for situations where you do not have mains power available in the exact location where you want to install the VigorAP 903 or just for general aesthetic neatness, perhaps where the AP is installed somewhere prominent.
The DrayTek VigorAP 902 is also supplied with an AC/DC mains PSU for installations where you are not using PoE.
Gigabit Ethernet Ports
The VigorAP 902 has five wired Ethernet ports (separated into two distinct separated LANs). LAN A and LAN B can be fed separately and in turn broadcast on independent and isolated SSIDs. As the ports are all Gigabit, you can be sure that the AP is fed at the maximum speed in order to fully satisfy the full speed of both 2.4GHz and 5Ghz bands simultaneously.
The four ports on LAN A are particularly of use if you are using the AP as a wireless bridge as you can then connect wired PCs or devices to it. LAN Port 3 on LAN-A is also used as the PoE input if you're powering the AP by PoE.
Local Temperature Logging and Alarm
This facility is ideal for detecting if any part of your building is over or under-heated or if heating/cooling has been left on overnight and therefore helping to make more efficient use of your heating or cooling energy consumption, potentially saving cost.
The VigorAP 902's USB interface can alternatively connect to a regular printer. That printer is then accessible from any wireless or wired PC which connects to the VigorAP 902, or a PC anywhere else on the network. This is ideal to provide printer access to wireless laptops but could also be used for installing a printer elsewhere in your home/office by using a pair of VigorAP 902s to make a bridge.
Wireless Features
Wireless Bridging
The DrayTek VigorAP 902 can act as a standalone wireless access point, ideal for adding wireless connectivity to an existing LAN but also operates in several other wireless modes to provide enlarged wireless coverage or wireless bridges to other parts of your LAN. Many different configurations are possible:
- Universal Repeater (2.4GHz & 5GHz) - Wirelessly extend network coverage with the VigorAP operating as a wireless client, repeating that signal to extend coverage and bridging the LAN ports of the Access Point across the network
- Station Infrastructure - Wirelessly extends network coverage with the VigorAP connecting to a wireless network and bridging wired network devices connected to the Access Point's LAN ports across the network
- AP Bridge-Point to Point - Connects two VigorAP Access Points as a wireless bridge, allowing wired network devices to communicate across the link
- AP Bridge-Point to Multi-Point - Connects two or more VigorAP Access Points as a wireless bridge, allowing wired network devices to communicate across the link
- AP Bridge WDS (Wireless Distribution System) - Connects two or more VigorAP Access Points or DrayTek wireless routers as a wireless bridge, allowing wired network devices to communicate across the link. The VigorAP can also broadcast a wireless network to increase wireless coverage
For further details of the wireless modes available on DrayTek VigorAP Access Points, click here.
AP-Assisted Client Mobility
A wireless network covering a large area is usually made up of several Wireless Access Points (APs), to provide coverage between rooms and avoid wireless dead spots.
A wireless client, such as a Laptop, Phone or Tablet, when moving around a building or outdoors, is typically expected to make the decision of when to uncouple from one wireless access point and re-connect to a closer one.
In some cases, a client will try to stay connected to an AP even when that client has moved outside of the AP's optimal range, which can result in longer wait times for videos to buffer and pages to load.
The VigorAP 902 can work in conjunction with VigorAP access points and DrayTek Vigor routers, managing the connection quality of wireless devices, to ensure that the wireless clients maintain a stronger and quicker wireless link when moving around.
When moving a device such as a tablet between the optimal ranges of a DrayTek Vigor 2862ac router and two VigorAP access points, the router and access points share details of the tablet's connection strength.
If the tablet moves away from the router, the router can detect if the tablet would have a stronger signal if it was connected to a nearer VigorAP.
When this occurs, the tablet is moved off of the router's wireless, allowing it to quickly re-connect to the closer VigorAP and continue what it was doing with higher throughput and less chance of lagging.
Band Steering
Band Steering is designed to 'steer' wireless clients that support both 2.4GHz and 5GHz bands to the faster and less congested 5GHz bands, when possible. This can improve the connection experience for clients for both 2.4GHz only devices and dual-band capable clients.
 |
 |
With more 5GHz capable devices using the faster 5GHz band, the remaining 2.4GHz clients would experience less collisions and congestion.
The total capacity (number of clients that can connect) is increased by sharing clients more evenly between each Access Point's band. When clients are more evenly distributed between both the APs 2.4Ghz and 5Ghz bands, each VigorAP can efficiently and effectively service more wireless clients.
Mobile Device Management
Mobile Device Management (MDM for short) allows the VigorAP to determine what type of device is connecting, based on the device manufacturer and operating system that each device is running.
Using this information, the VigorAP can apply policies to either block or allow clients of specified types for specific SSIDs, building on the VigorAP's MAC based Access Control List with an automated system that can automatically block certain types of devices, such as tablets or mobile phones.
For instance, mobile devices are not allowed to connect to an office's wireless network (SSID: Office)
The VigorAP's Mobile Device Management policy has detected that a device connecting to the "Office" wireless network is a phone, and blocks its connection to the "Office" network. The "Guest" wireless network is not restricted, so this phone can reconnect to the Guest wireless network.
Access Control / User Authentication
For additional security, wireless access can be restricted to authorised users only by use of a unique username and password for each user, which uses WPA2-Enterprise / WPA2-802.1x for encryption and authentication. When the user first opens their wireless connection, the VigorAP 902 will request their Username and Password in place of a Pre-Shared-Key.
The VigorAP 902 can use an external RADIUS server to hold user credentials but also has its own built-in radius server to store up to 96 users. The AP's built-in Radius server can also act as a server to additional devices (such as another AP, meaning that you don't need to set up the same users up on several units).
Dual-LAN
The VigorAP 902 can support two completely independent LANs. Each is connected via its own independent RJ45 Ethernet interface. There are Ethernet RJ45 interfaces for LAN A (4 ports) and LAN B (one port). These networks remain completely isolated from each other. Each LAN can be assigned its own separate Wireless SSID so they remain separated even on the Wireless LAN. This is the equivalent of having two completely separate access points and ideal for public and private networks in the same location or wireless LANs for two separate companies.
Having two physical LAN interfaces provides a much simpler alternative to using tagged VLANs and/or a Radius server for authentication. It is also much easier/quicker to set up (that said, the AP can also support tagged VLANs and Radius).
WPS - WiFi Protected Setup
Wireless Security (encryption) is important to protect your data (privacy) but also to prevent unauthorised people from accessing your network or your Internet connection. The WPS system means that instead of having to create and enter long encryption keys, you can activate WPS registration.
To activate, you press and hold the WPS button, then activate WPS on your wireless device; the two devices then automatically exchange encryption keys. WPS can be disabled if not required or for more security.
The same button on the VigorAP 902 also serves as a physical on/off toggle switch for the Wireless LAN if you wish to quickly disable it at any time, whilst still leaving your wired ports active.
VigorAP 902 User Interface Screenshots
VigorAP 902 Wireless Configuration
VigorAP 902 - List of Connection Stations (clients) and diagnostics
Scanning & Discovery of other nearby Access Points
Access & Event Schedules
You can schedule wireless on/off, reboots or turn off all of the unit's LED's (lights) at different times (e.g. night).
Limiting Bandwidth for connected clients
Built-in or external Radius Server for Client Authentication
Temperature Sensor Graph - Log Temperature Data
Wireless Management via Router - Screenshots
The screenshots below show the web interface the Vigor2860 (or other DrayTek controller device) when centrally managing an estate of multiple Vigor APs or other compatible units.
Vigor 2860 Rogue Access Point Detection
Vigor 2860 Firmware Upgrade Status of multiple APs
Vigor 2860 managed upgrade of Vigor AP units
Vigor 2860 AP Management - Wireless Load Balance Policy
Note : The above screenshots are provided as a guide only. Exact operation and screen appearance will vary depending on firmware version and will change as features and functionality evolve. In some cases, the screenshots above may have been modified, resized, cropped or merged in order to best illustrate the features available.
DrayTek VigorAP 902 Specification
| Product Code | EAN | Description | Notes |
|---|---|---|---|
| VAP902-K | 4716779079425 | VigorAP 902 (UK/IE) |
Technical Specification (UK Hardware Spec.)
-
Physical Interfaces/Controls:
- LAN A : 4 x Gigabit Ethernet
Port 3 accepts 802.3af PoE Power - LAN B : 1 x Gigabit Ethernet
- USB 2.0 Interface (for printer or thermometer)
- Power On/Off Button
- Wireless On / Off / WDS Button
WDS Operation/button can be disabled - Factory Reset Button (recessed)
- DC Power Socket
- Two Antennae (Removable, 2dB, both TX/RX dual-band)
- Antenna connectors: RSMA Female
- LAN A : 4 x Gigabit Ethernet
-
Wireless LAN Compatibility:
- IEEE 802.11ac / a / b / g / n
- Frequency Band 2.4 GHz & 5.8Ghz - Simultaneous Operation
- Extended 5Ghz Band - Channels 36-140
- DFS/TPC Support
- Total wireless bandwidth (capacity) 1200Mb/s
- 802.11n : 300Mb/s
- 802.11ac : 867Mb/s
-
Security Features:
- Wireless Encryption : WPA2 (802.11i) Encryption
Also supports WPA/WEP (Not recommended) - User Authentication : 802.1x (using built-in or external Radius Server) (MD5/PEAP Modes)
- PMK Caching & Pre-authentication
- Wireless Client Isolation
- Hidden SSIDs (Selectable)
- WPS - WiFi Protected Setup
- MAC Address Filtering (ACL)
- Wireless Encryption : WPA2 (802.11i) Encryption
-
Operational Modes (2.4Ghz band)
- 802.11b, 802.11g, 802.11n
- Access Point
- Station Infrastructure
- AP Bridge Point-to-Point
- AP Bridge Point-to-Multipoint
- AP Bridge WDS
- Universal Repeater
-
Operational Modes (5.8Ghz band)
- 802.11ac / 802.11n / 802.11a
- Channels 36-140 with DFS/TPC
- Access Point
- Universal Repeater
-
Wireless Control Features
- Wireless Client Status List in WUI
- Up to four distinct SSIDs (for VLANs) for each frequency band (2.4/5Ghz)
- WMM (Wireless MultiMedia)
- MAC Cloning
- Built-in DHCP server & client
- 802.1q VLAN
- VLAN Grouping & mapping for LAN A & LAN B
- Airtime Fairness
- Band Steering
-
Management
- Web Interface (HTTP/HTTPS)
- TR-069 Control (For Vigor-ACS-SI or other TR-069 platform)
- CLI (Command Line Interface) - Telnet
- Firmware upgrade by TR-069/HTTP
- Central AP Management (from compatible DrayTek router/controller)
- Management VLAN for LAN A & LAN B
-
Power, environmental & Physical
- Temperature Operation : 0 ° C to 40 ° C
- Humidity Requirements: 10% to 90 % (Non-condensing)
- Physical Dimensions: 107 x 167 x 45 ( W x H x D ) mm
- Weight : 0.4kg (main unit, including Aerials)
- Wall Mountable
- Pack Contents : VigorAP 902 main unit, two aerials, PSU (220-240VAC), quick start guide, manual on CD-Rom
- Power : 12VDC via AC/DC PSU (supplied) or 802.3af PoE
- Warranty : 2 Years RTB
