VigorAP 902

The business-grade Gigabit Wi-Fi Access Point.
  • Concurrent Dual Band 802.11ac AP
  • IEEE802.11ac compliant (2x2, 867Mbps)
  • 802.3af Power over Ethernet (PoE-PD)
  • Wi-Fi multimedia (WMM) quality of service features
  • Comprehensive and trusted security
  • 4 SSIDs for each band (2.4G/5G)
  • Support 5 Gigabit LAN ports
  • Embedded USB printer server and support USB thermometer
  • 2 VLAN groups managing both wired (Ports) & wireless clients (SSIDs)
  • Multiple operation modes for 2.4G Wireless
  • TR-069 for LAN-A and LAN-B
  • Unified devices management portal offer single-panel view across AP Management


The VigorAP 902 is the business-grade Gigabit Wi-Fi Access Point. You can establish a stable and extendable wireless network. The dual band (2.4G/11ac) allows essential applications to operate in the less interference environment. The MIMO technology offers the advance wireless network standard for the coverage, backward compatible with 802.11b/g/n. The Power over Ethernet (PoE) by LAN A3 port eases the installation no matter where the power plug is. The robust management and simple configuration deliver reliable and secure wireless local area networks (WLANs). On the other hand, the VigorAP 902 with 5 Gigabit LAN ports enhances the data transmission for wired connected devices as well.


Models & Connectors


Model Product PoE USB Antenna Wireless
Vigor AP902


Temperature Operating : 0°C ~ 40°C
Storage : -20°C ~ 60°C
Humidity 10% ~ 90% ( non-condensing )
Power Adapter DC12V@1A
Max. Power 12 watt
Dimension W157 * H30 D127 ( mm )
Voltage of 802.3af PoE 44v~57v)


Simultaneous Dual Band for less interference

The VigorAP 902 delivers 2.4G & 5G band simultaneously. The 5G band can reserve for the most essential application, such as video call, which requires less interference and latency. The 2.4G band can serve the application with more tolerance of latency, such as the e-mail.

PoE for easy installation

The LAN A3 port supports 802.3af Power over Ethernet (PoE) to deliver both data and power by the single cable. You can place the VigorAP 902 based on the best spot to extend wireless coverage, not limited by the location of the power plug.

WMM for Wi-Fi application prioritization

The VigorAP 902 supports Wi-Fi Multi Media standard (WMM) for Quality-of-Service (QoS) in Wi-Fi networks. WMM improves audio, video and voice applications transmitted over Wi-Fi. It adds prioritized capabilities to Wi-Fi networks and optimizes their performance when multiple concurring applications, each with different latency and throughput requirements, compete for network resources.

SSID + 2 VLAN groups for network security

The VigorAP 902 supports 4 separate SSIDs and two virtual LANs (VLANs). You can set certain SSID(s) accessing Internet through either VLAN A or B. The 2.4G and 5G band each has 4 SSID to separate the access. As a result, the VigorAP 902 divides itself into several virtual access points all within a single box. The wired connected devices can be categorized to either VLAN group by the connected LAN ports (Ethernet RJ45 interfaces). Devices connected to LAN A1-A4 ports belong to VLAN A group and LAN B port for VLAN B group. The organization can simply separate the public and corporate network to reduce the risk. 

Comprehensive WLAN security control

The MAC Address Control only allows clients within the authenticated list to join with the WLAN. It manages the wireless resources and prevents network breaking. With industry level security standards for wireless user authentication and data encryption, 802.11i (WPA2) offers strengthened and interoperable wireless networking security. The 802.1x authentication is also available. The VigoAP 902 can act as the internal RADIUS server (Remote Authentication Dial-in User Service) or work with the external one to manage and store user names and passwords.

Extendible wireless coverage

The Wireless Distribution System (WDS) takes care of the establishment of WLAN network with "point-to-point" and "point-to-multipoint". These modes extend wireless access to additional clients where there is a relay AP repeats signal from a base AP to distant clients. The bridge-to-bridge mode allows two wired networks to be connected across some distance.  

The Universal Repeater mode is also available which eases settings as trying to extend wireless coverage from another AP than WDS mode. The VigorAP 902 can simultaneously be the wireless client to connect to another AP and offer Wi-Fi access to other wireless devices. In addition, you can get even better wireless performance as choosing Universal Repeater to extend coverage. It significantly reduces the signal decrease from the base AP to replay APs.

AP Management

The VigorAP902 can operate in standalone mode for your office network or a classroom or a waiting room of some transportation terminals (e.g. ferry terminal, bus station, train station) or a clinic's waiting room ; connected to your LAN and offering you with wireless access. If your network requires several VigorAP902 units, to centrally manage and monitor them individually as a group will be expected. DrayTek central wireless management (AP Management) lets control, efficiency, monitoring and security of your company-wide wireless access easier be managed. Inside the web user interface, we call “central wireless management” as Central AP Management which supports mobility, client monitoring/reporting and load-balancing to multiple APs.  For central wireless management, you will need a Vigor2860 or Vigor2925 series router; there is no per-node licensing or subscription required. With the unified user interface of Vigor2860 Combo WAN series and Vigor2925 Triple WAN series, the multiple deployment of VigorAP902 can be clear at the first sight. For multiple wireless clients, to apply the AP Load Balancing to the multiple APs will manage wireless traffic with smooth flow and enhanced efficiency.

Embedded USB printer server

You can connect a printer to the USB port of VigorAP 902 for users from wired PC or wireless network. i.e. The laptop users can access printer for printing. When you are using a pair of VigorAP 902s to make a bridge, the said printer can be installed elsewhere in your office/ home.

TR-069-supported VigorAP902 can work with TR-069 VigorACS SI Central Management 

The VigorAP 902 is TR-069 base. Hence, you can host VigorACS SI Central Management to manage several VigorAP 902 which were deployed remotely.


1. Wireless AP

  • Band 2.4GHz
    • IEEE802.11b/g/n compliant
      • 11b only
      • 11g only
      • 11n only
      • Mixed (11b+11g)
      • Mixed (11g+11n)
      • Mixed (11b+11g+11n)
    • Operation Mode:
      • AP
      • Station Infrastructure
      • AP Bridge Point to Point
      • AP Bridge Point to Multi-point
      • AP Bridge WDS (Wireless Distribution System)
      • Universal Repeater
  •  Band 5GHz
    • IEEE802.11a/n and IEEE802.11ac draft compliant
      • 11a only
      • 11n only
      • Mixed (11a+11n)
      • Mixed (11a+11n+11ac)
    • Operation Mode:
      • AP
      • Universal Repeater*
  • Support up to 64 Wireless Clients per band
    • Limited Wireless Clients
  • Multiple SSID
    • Support 4 SSIDs per band
  • Hidden SSID
  • Wireless Isolation
  • VLAN Grouping and SSID mapping for LAN A & B
  • MAC Clone
  • Security Mode
    • Open (Disable)
    • 64/128-bit WEP
    • WPA/PSK
    • WPA2/PSK
    • Mixed mode(WPA+WPA2)/PSK
    • 802.1X
    • Encryption: AES/TKIP
  • 802.1x authentication
    • Internal RADIUS Server support PEAP
    • RADIUS Proxy support TLS & PEAP
  • Internal Radius Server
  • MAC Address Control
    • Support total 256 entries
  • WPS mode
    • PBC
    • PIN
  • AP Discovery
  • WMM
  • Station List
  • Bandwidth Management
  • Airtime Fairness
  • Roaming
    • PMK-Caching
    • Pre-Authentication
  • Station Control
  • DrayTek WLAN Security default settings (Refer to Default Configuration Section):
    PSK write method follow MAC address mechanism
    Telnet command to:
    • Read PSK from flash (*similar with MAC Address read method)
    • Disable/Enable WLAN security, for test mode


2. USB

  • Printer Server
  • Support temperature sensor


3. Network Management 

  • Web-based User Interface (HTTP/HTTPS)
  • CLI (Command Line Interface, Telnet)
  • Configuration Backup/Restore
  • Firmware Upgrade via HTTP/TR-069
  • Syslog/Mail Alert
  • DHCP Server & Client
  • TR069 (Compliant with VigorACS SI)
  • AP Management (with Vigor Series Routers)


4. Hardware Interface

  • 5 x 10/100/1000M Base-T LAN Switch, RJ-45 (LAN A3 for PoE Indoor Use)
  • 1 x USB 2.0 Host with current limit 170mA
  • 2 x SMA Detached Antennas
  • 1 x Factory Reset Button
  • 1 x Wireless ON / OFF / WPS Button
  • 1 x Power ON / OFF Button

5 LAN switch including 1 PoE LAN port

draytek VigorAP 902 port

Multi SSID & Build-in Radius Server

draytek VigorAP 902 multi ssid

WUI Settings of AP Management/h3>

VigorAP 902APM

AP Management

draytek VigorAP 902 APM 2

AP Load-balancing

AP Load Balance


dual lan


dual band

Working with TR-069 VigorACS SI Central Management