Draytek AP 903 Wireless Access Point

Part: H201141
Dual Band 802.11ac Wave 2 Mesh Wireless Access Point High Performance Mesh Wireless System - Draytek VigorMesh Power over Ethernet (PoE) enabled Expand the wireless coverage Eliminate Wi-Fi dead zones
  • £122.36
  • Incl. VAT: £146.83

The DrayTek VigorAP 903 is an 802.11ac Wave 2 Mesh Wireless Access Point, well-suited to home and business use, providing reliable and flexible coverage to all manner of applications. A vast array of security and management features helps the AP to improve and protect the integrity of your wireless LAN.

Mesh Wireless System - VigorMesh

Featuring DrayTek’s new ‘VigorMesh’ Wireless system, a fast and reliable Wi-Fi network covering a large area, linking 2 or more VigorMesh capable access points. Create a unified Wireless network for 2.4GHz, 5GHz and wired clients. Mesh Wireless is ideal for covering large buildings that are difficult to blanket with wireless coverage or for extending wireless to places where is it tricky install structure network cabling for a traditional wired Acess Point; simply join additional Mesh Nodes to eliminate Wi-Fi dead zones and expand coverage.

Simple To Set Up & Manage

Easily manage VigorAP access points and Mesh Wireless with the DrayTek Wireless app for phones and tablets, freely available for both Apple’s iOS (iPad, iPhone) and Google’s Android devices.

Each VigorAP 903 has a QR-code to detect and configure that VigorAP with the DrayTek Wireless app, straight out of the box, no need to find it on the network, just plug it in, use the app to connect it to the AP and set it up.

New Interface

In addition to the DrayTek Wireless app, the VigorAP 903 has a new and improved web interface with Dashboard view. See wireless utilisation, traffic graphs and detailed information for connected wireless clients all in one place.

802.11ac Wave 2 Wireless AP

The VigorAP 903 is a simultaneous dual-band AP with 802.11ac Wave 2 Wi-Fi, improving transfer speeds & efficiency with Multi-User MIMO. The 5 Gigabit Ethernet LAN ports provide a Gigabit uplink for wireless access, and connectivity for additional network devices such as IP phones and printers. Connect a USB printer to share it, or connect an optional USB thermometer for temperature logging and alerts.

Manage from the Cloud

VigorAPs can be managed as standalone access points, as a single Mesh Wireless group, or centrally. Manage and provision VigorAPs centrally across a single building or multiple sites with DrayTek VigorACS, or with a DrayTek Vigor router that supports Central AP Management.

Power via Power-over-Ethernet or Mains Power

The VigorAP is powered through either Mains (DC PSU, supplied) or through Power over Ethernet (PoE) by any standard PoE (802.3af) or PoE+ (802.3at) Ethernet switch, PoE injector or a PoE-equipped router such as the DrayTek Vigor 2952P.

VigorAP 903 is a high-performance Mesh Wireless solution, designed to expand the wireless coverage, eliminate Wi-Fi dead zones and significantly reduce the cost of network deployments. It can also be used as a traditional access point either managed or stand alone so has the flexibility to be used how you need it.

The VigorAP 903 is a dual-band 802.11ac Wave 2 Mesh Wireless solution, designed to eliminate wireless drop outs, stuttering videos, slow download speeds, poor signal and Wi-Fi dead zones. One access point acts as the controller (Mesh root) and in total up to 8 access points create an easy to manage wireless mesh. Extend coverage without running expensive cabling.


Access points connect to each other. Eliminates ethernet cabling. 


In case of a mesh node failure, the surrounding nodes automatically re-connect and resume service without downtime 

Wireless Optimisation

Band steering: steers wireless clients to the faster 5Ghz band. Airtime Fairness: improves time management between wireless clients.

AP Assisted Roaming: makes sure the devices are always connecting to the best AP. 


Automatically configure new wireless access points into the network. 


Nodes identify the best next hop and connect with it automatically. 

802.11ac Wave2

High performance AC1300 class access point. Improving transfer speeds and efficiency with Multi-User Mimo

DrayTek Mesh Wireless

Mesh Wireless links VigorAP access points across both Wi-Fi and Wired links to cover a large area with a single Wireless network, spanning multiple Wireless Access Points and easily managed from the Mesh Root VigorAP or with the DrayTek Wireless app.

The Mesh Root VigorAP links up to your existing Internet router, such as the DrayTek Vigor 2862 and additional VigorAPs join up as Mesh Nodes, which connect wirelessly to the Mesh Root.

Your devices see a single Wi-Fi network (SSID) and connect to the nearest VigorAP in the Mesh, instead of a distant Wi-Fi network with low signal. Internet connectivity relays through the Mesh, using the up to 866Mbps 5GHz wireless as the backhaul link, to relay between Mesh Nodes and avoid long waits for downloads.


New Interface with Dashboard View


The VigorAP 903 features a new web interface designed for use with tablets, phones and PCs, adapting to suit any device.

Dashboard view gives a detailed overview of the VigorAP's status at a glance, see individual connected clients and their traffic usage, ports in use and the utilisation of the VigorAP.


Easy Setup with the DrayTek Wireless app


The new 'DrayTek Wireless' app assists you with setting up the VigorAP 903 access points and Mesh Wireless network.


Once installed on your Smartphone or Tablet, use the Quick Start Wizard to adopt and set up your VigorAP 903 as an Access Point, Range Extender, or a group of VigorAPs in a Mesh Wireless network.


Simply scan the access point’s QR code to detect it, or manually input the VigorAPs default SSID & password, then configure your wireless network with step-by-step guidance.


When it’s all set up, view the Mesh Wireless status and connected wireless clients from the app.

Central Management with DrayTek VigorACS

The DrayTek VigorAP 903 can be managed by the DrayTek VigorACS central management system - a cloud platform which can manage most DrayTek products - routers, wireless access points and Ethernet switches, giving you complete visibility and control of your DrayTek product estate, even without a DrayTek Vigor router on site.

The DrayTek VigorACS management system can be used to configure and provision DrayTek VigorAP access points, similarly to performing these actions through the VigorAP's web interface, with a familiar menu layout in the Configuration section of VigorACS.

Profiles for groups of access points can be provisioned in VigorACS by selecting a VigorACS network, then accessing Configuration > AP Profile to configure profiles and apply them selectively.

DrayTek's VigorACS management monitors the VigorAP 903, with a Dashboard view giving a central overview of the most important information from the VigorAP's current status.

Managing a VigorAP in VigorACS


For further details of the VigorACS central management system.


Central Management with a DrayTek Router

Provision & Manage VigorAPs with a DrayTek Vigor router

For further details of the central management feature.

The VigorAP 903 can operate in standalone autonomous mode, but can also form part of a centrally managed wireless installation by adding a compatible DrayTek wireless controller such as the Vigor 2862 router. This enables you to centrally control, manage and administer multiple AP devices installed around your building/campus. Management also enables efficient usage of your wireless access point through load-balancing, whereby wireless clients are distributed across several access points to reduce congestion.

The DrayTek router operating as the wireless controller can provision DrayTek VigorAP access points using the Central AP Management profiles configured on the router, with an option to Auto Provision - auto configuring newly installed VigorAP access points with the Auto Provisioning profile, upon initial connection to the DrayTek Vigor router's network.

DrayTek Mesh - Auto-Configuring

Mesh Nodes are automatically configured in a VigorMesh network once they've been adopted by a Mesh Root.

Simply take a VigorAP out of the box and connect up the power, a new VigorAP decides automatically whether to be a Mesh Node or Access Point. If it doesn't detect a wired uplink, the VigorAP will start up as a Mesh Node and wait to be added into a VigorMesh network.

To set up new Mesh Nodes, simply have the Mesh Root search for new Mesh Nodes. When they're detected, give each VigorAP a name and the VigorMesh system will set up each VigorAP to join into the VigorMesh network. The Mesh will then automatically optimise links between Mesh Nodes to ensure the best network layout with the new Mesh Nodes.


DrayTek Mesh - Auto-Optimising, Self-Healing

A VigorMesh Wireless network can easily add new Mesh Nodes and self-organises links between up to 8 DrayTek VigorAP access points, to ensure the best possible speeds. If something causes a Mesh Node's uplink to drop out, it automatically re-connects to the next available point and resumes service.

Mesh Nodes further away will connect wirelessly to the nearest Mesh Node, with up to 3 wireless hops. Alternatively, where a network connection is available for a VigorAP, join a Mesh Node to the network through ethernet and nearby wireless Mesh Nodes can join it instead of the Mesh Root to reduce wireless hops and increase possible Mesh throughput.


DrayTek Mesh - Quick & Easy To Install

Setting up a Mesh Wireless network with VigorAPs

Using the DrayTek Wireless app and QR code on each DrayTek VigorAP, here's how to set up a DrayTek Mesh Wireless network:

1 Connect a VigorAP into your network and scan its QR code with the DrayTek Wireless app
2 Use the Quick Start Wizard to set it as the Mesh Root and configure the Wireless network name and password
3 Connect the power up to any new VigorAPs that you want to use as the Mesh Nodes
4 Search for new Mesh Nodes with the DrayTek Wireless app and add them to the Mesh group
5 Wait a couple of minutes for the Mesh Node VigorAPs to auto-configure and join the Mesh group
6 Done!

Check the status of the Mesh Wireless network and view connected clients through the DrayTek Wireless app, or in the VigorAP's web interface. To make changes, just change settings on the Mesh Root VigorAP and those will be pushed onto all of the connected nodes automatically.

5 Gigabit Ethernet Ports


The VigorAP 903 has five wired Ethernet ports. As the ports are all Gigabit, you can be sure that the AP is fed at the maximum speed in order to fully satisfy the full speed of both 2.4GHz and 5Ghz bands simultaneously. The four ports on LAN A are particularly of use if you are using the AP as a wireless bridge, as you can then connect wired PCs or devices to it. LAN Port A1 is also used as the PoE input if you're powering the AP by PoE.


Wireless Security & VLANs

The VigorAP 903 features multiple levels of wireless security. Encryption using WPA2 is available and you can also use the access control list (ACL) to specify the hardware addresses of clients which are permitted to connect (by MAC hardware address). Any unauthorised hardware is refused access.

For additional user authentication, you can activate 802.1x RADIUS (Remote Authentication Dial-in User Service) which allows you to centrally manage and store user names and passwords either within the AP setup itself (thus not needing any external server) or an external radius server which can permit time-limited, temporary or continuous access to your clients as required.

The VigorAP 903 supports the 802.1q VLAN protocol so that if it is connected to an 802.1q enabled LAN, it can split tagged data (whether it's different subnets or intended for different users) and broadcast each on its own SSID. This means, for example, that your guest WiFi access is provided on a separate isolated SSID with no access to your company data.


The VigorAP 903 has built-in PoE (Standard IEEE 802.3af Power over Ethernet) as standard. Connect the VigorAP to a PoE-enabled Ethernet switch or PoE injector to power it without local power to the unit (power supply) - the VigorAP 903 will take its power from the Ethernet cable. The VigorAP 903 supports Gigabit PoE (if you have a Gigabit PoE switch/injector) such as our VigorSwitch P1280 or P1092 models (or any other 802.3af/at the device).

PoE is ideal for situations where you do not have mains power available in the exact location where you want to install the VigorAP 903 or just for general aesthetic neatness, perhaps where the AP is installed somewhere prominent.

The DrayTek VigorAP 903 is also supplied with an AC/DC mains PSU for installations where you are not using PoE.

802.11ac Wave 2 - Multi-User MIMO

The VigorAP 903 is an 802.11ac Wave 2 access point, which improves performance by increasing the amount of data that can be sent at one time. The 802.11ac Wave 2 standard includes Multi-User MIMO (Multiple In, Multiple Out) or MU-MIMO technology, building upon the MIMO technologies introduced with 802.11n.

The VigorAP's MU-MIMO technology when used with MU-MIMO capable wireless clients, allows each of the antennas (or Spatial Streams) to send data to separate wireless clients, which can potentially double the data transmission rate to clients. This is because instead of spending each transmission slot transmitting to a single client regardless of whether that client can support one or both of the VigorAP's streams, the VigorAP can spend that time slot sending data out to two clients, that each uses a single spatial stream.

One limitation of wireless throughput is the wireless frequency space, which is shared between everyone. A wireless access point sending out data can only send to a single wireless client at a time.

Once an access point has enough clients connected, the amount of data that can be sent out is divided amongst each wireless client requesting data, with this congestion causing slower transfer speeds as the AP has to spend more time servicing every client. Multi-User MIMO allows the VigorAP to send data out to more than one wireless client at a time, so potentially the amount of data that can be sent is divided between the VigorAP's Spatial Streams instead of the access point and its assigned wireless frequency as a whole.

This is particularly useful in locations with many phones, tablet and laptops connecting, where the VigorAP's more efficient transmissions could allow each access point to serve more clients than an 802.11ac Wave 1 or 802.11n access point.

AP-Assisted Client Mobility

A wireless network covering a large area is usually made up of several Wireless Access Points (APs), to provide coverage between rooms and avoid wireless dead spots. 
A wireless client, such as a Laptop, Phone or Tablet, when moving around a building or outdoors, is typically expected to make the decision of when to uncouple from one wireless access point and re-connect to a closer one. In some cases, a client will try to stay connected to an AP even when that client has moved outside of the AP's optimal range, which can result in longer wait times for videos to buffer and pages to load.

The VigorAP 903 can work in conjunction with VigorAP access points and DrayTek Vigor routers, managing the connection quality of wireless devices, to ensure that the wireless clients maintain a stronger and quicker wireless link when moving around.

When moving a device such as a tablet between the optimal ranges of a DrayTek Vigor 2862ac router and two VigorAP access points, the router and access points share details of the tablet's connection strength. 
If the tablet moves away from the router, the router can detect if the tablet would have a stronger signal if it was connected to a nearer VigorAP, and when this occurs, the tablet is moved off of the router's wireless, allowing it to quickly re-connect to the closer VigorAP and continue what it was doing with higher throughput and less chance of lagging.


Band Steering

Band Steering is designed to 'steer' wireless clients that support both 2.4GHz and 5GHz bands to the faster and less congested 5GHz bands, when possible. This can improve the connection experience for clients for both 2.4GHz only devices and dual-band capable clients.

With more 5GHz capable devices using the faster 5GHz band, the remaining 2.4GHz clients would experience fewer collisions and less congestion.

The total capacity (the number of clients that can connect) is increased by sharing clients more evenly between each Access Point's band. When clients are more evenly distributed between both the APs 2.4Ghz and 5Ghz bands, each VigorAP can efficiently and effectively service more wireless clients.


Mobile Device Management

Mobile Device Management (MDM for short) allows the VigorAP to determine what type of device is connecting, based on the device manufacturer and operating system that each device is running.

Using this information, the VigorAP can apply policies to either block or allow clients of specified types for specific SSIDs, building on the VigorAP's MAC based Access Control List with an automated system that can automatically block certain types of devices, such as tablets or mobile phones.

For instance, mobile devices are not allowed to connect to an office's wireless network (SSID: Office):

The VigorAP's Mobile Device Management policy has detected that a device connecting to the "Office" wireless network is a phone, and blocks its connection to the "Office" network. The "Guest" wireless network is not restricted, so this phone can reconnect to the Guest wireless network.


Local Temperature Logging and Alarm

As your VigorAP 903 unit(s) will be distributed around your building, it's an ideal opportunity to also gather environmental information about those locations. By the addition of an optional USB temperature sensor, your VigorAP 903 can report real-time local temperature information, show the previous 24 hour's chart and also set high/low alarms to alert/log if the temperature falls above or below your set levels. This facility is ideal for detecting if any part of your building is over or under-heated or if heating/cooling has been left on overnight and therefore helping to make more efficient use of your heating or cooling energy consumption, potentially saving cost.

The VigorAP 903's USB interface can instead connect to a regular printer. That printer is then accessible from any wireless or wired PC which connects to the VigorAP 903, or a PC anywhere else on the network. This is ideal to provide printer access to wireless laptops but could also be used for installing a printer elsewhere in your home/office by using a pair of VigorAP 903s to make a bridge.

Wireless On/Off Switch & WiFi Protected Setup

The WLAN On/Off & WPS button on the VigorAP 903 serves as a physical on/off switch for the Wireless LAN if you wish to quickly disable it at any time, whilst still leaving your wired ports active.

Wireless Security (encryption) is important to protect your data (privacy) but also to prevent unauthorised people from accessing your network or your Internet connection. The WPS system means that instead of having to create and enter long encryption keys, you can activate WPS registration to 'pair' wireless devices such as printers with the VigorAP's wireless network. When WPS is enabled, press and hold the WPS button, then activate WPS on your wireless device; the two devices then automatically exchange encryption keys. WPS can be disabled if not required or for more security.


The VigorAP 903 can support two completely independent LANs. Each is connected via its own independent RJ45 Ethernet interface. There are Ethernet RJ45 interfaces for LAN A (4 ports) and LAN B (one port). These networks remain completely isolated from each other.

Each LAN can be assigned its own separate Wireless SSID so they remain separated even on the Wireless LAN. This is the equivalent of having two completely separate access points and ideal for public and private networks in the same location or wireless LANs for two separate companies.

  • Physical Interfaces/Controls

    • 5 x Gigabit Ethernet LAN Ports
    • USB 2.0 Port
    • WLAN On/Off & WPS Button
    • Factory Reset Button
    • 2 x Dual-Band Omni-directional RP-SMA Antennae


  • Wireless Performance

    • AC1300 Class Wireless Access Point
    • 5GHz: PHY Rate 866Mb/s
    • 2.4GHz: PHY Rate 400Mb/s


  • Wireless LAN Compatibility

    • IEEE 802.11ac (Wave 1 & 2) / a / b / g / n
    • Frequency Band 2.4 GHz & 5.8Ghz - Simultaneous Operation
    • Up to 64 clients per radio


  • 2.4GHz Wireless LAN Features

    • 802.11b, 802.11g, 802.11n
    • 20 / 40 MHz
    • Up to 400Mb/s total Wi-Fi throughput (PHY Rate):
      • 802.11b/g/n: 300Mb/s PHY rate (150Mb/s per Spatial Stream)
      • 256-QAM: 400Mb/s PHY rate (200Mb/s per Spatial Stream)


  • 5Ghz Wireless LAN Features

    • 802.11ac (Wave 1 & 2) / 802.11n / 802.11a
    • 20 / 40 / 80 MHz
    • Extended 5Ghz Band - Channels 36-48, 52-64, 100-140
    • DFS/TPC Support
    • Multi-User MIMO - New!
    • Up to 866Mb/s total Wi-Fi throughput (PHY Rate):
      • 802.11a/n: 300Mb/s PHY rate (150Mb/s per Spatial Stream)
      • 802.11ac: 866Mb/s PHY rate (433Mb/s per Spatial Stream)


  • Security Features

    • Wireless Encryption : WPA2 (802.11i) Encryption
      • also supports WPA/WEP (Not recommended)
    • Built in 802.1x server (PEAP / EAP-TLS)
    • 802.1x RADIUS Proxy (PEAP / EAP-TLS)
    • PMK Caching & Pre-authentication
    • Wireless Client Isolation
    • Control Isolation of 2.4GHz and 5GHz bands
    • Hidden SSIDs (Selectable)
    • WPS - WiFi Protected Setup
    • MAC Address Filtering (ACL) - Up to 256 entries
    • Mobile Device Management
    • EAPOL Key Retry - New! - Disable EAPOL Key Retry to protect unpatched WLAN clients from KRACK


  • Wireless Control Features

    • Wireless Client Status List in WUI
    • Client Limit per radio
    • Client Limit per SSID - New!
    • Up to four distinct SSIDs (for VLANs) for each frequency band (2.4/5Ghz)
    • MAC Cloning
    • Built-in DHCP Server & DHCP Relay
    • Trusted DHCP Server IP for WLAN - New! - Only specifed DHCP server IP can assign IP addresses to WLAN clients
    • 802.1q VLAN
    • Station Control - Time limit wireless connectivity per Station (e.g. 1 hour) & set allowed Reconnection time (e.g. 1 day)


  • Wireless Performance Optimisation

    • Airtime Fairness
    • Band Steering
    • AP-Assisted Client Mobility
    • WMM (Wireless MultiMedia)
    • Bandwidth Management (Per Station / Per SSID)


  • Diagnostic Features

    • System Log
    • Speed Test
    • Traffic Graph - AP Traffic & Per Station
    • Data Flow Monitor - View live traffic usage per WLAN client
    • Wireless LAN Statistics
    • Interference Monitor - Built-in Site Surveyor


  • Management

    • Web Interface (HTTP/HTTPS)
    • DHCP Client
    • TR-069 Control (For VigorACS or other TR-069 platform)
    • CLI (Command Line Interface) - Telnet
    • Firmware upgrade by TR-069/HTTP
    • Central AP Management (from compatible DrayTek router/controller)
    • SNMP v2, v2c, v3
    • Management VLAN
    • LED Control (enable/disable/schedule)
    • Configuration File Export (with password) & Import
    • Wireless Auto On/Off - New! - Sound alert / Disable Wireless if VigorAP is unable to ping specified host


  • Power Requirements

    • Maximum Power Consumption: 12 Watt
    • DC 12V via external 100-240v AC/DC PSU (supplied)
    • 802.3af PoE via LAN port A1. Requires PoE injector or a PoE switch such as the VigorSwitch P2121


  • Environmental & Physical

    • Operating Temperature : 0 ° C to 45 ° C
    • Operating Humidity: 10% to 90% (Non-condensing)
    • Physical Dimensions: 107mm (W) x 167mm (H) x 45mm (D)
    • Physical Dimensions with Aerials: 107mm (W) x 305mm (H) x 45mm (D)
    • Weight : 370g
    • Fitting: Wall Mountable or Free Standing
    • Pack Contents: VigorAP 903 access point, two RP-SMA Omnidirectional aerials, Quick Start Guide, DC 12V PSU
    • Warranty: Two (2) Years RTB