WiFi Configuration
The Proroute H685 and H820 series routers include a 2.4 GHz 802.11b/g/n Wi-Fi radio that operates as a wireless access point by default. This article covers the full Wi-Fi configuration interface — radio settings, SSID configuration, wireless security, and MAC-address filtering.
Navigation
Network > Wi-Fi
Wi-Fi Overview
The Wi-Fi Overview is the starting point for all wireless configuration. It shows the physical radio, all configured SSIDs, and a list of currently connected client devices.
| Devices Overview | |||||||||||||
| Generic MAC80211 802.11bgn (radio0) Channel: 11 (2.462 GHz) | Bitrate: ? Mbit/s |
Wifi Restart AP Client Add | ||||||||||||
| SSID: Cell_AP | Mode: Master BSSID: 90:22:08:03:AD:62 | Encryption: WPA2 PSK (CCMP) |
Disable Edit Remove | ||||||||||||
| Associated Stations | |||||||||||||
|
|||||||||||||
Overview controls
| Button | Function |
|---|---|
| Wifi Restart | Restarts the wireless radio. Use this after making changes that do not take effect immediately. |
| AP Client | Switches the radio to client mode, allowing the router to connect to another access point as a Wi-Fi WAN uplink. See the Set WiFi to Client AP for Internet Access article. |
| Add | Creates an additional SSID (virtual interface) on the same radio — used for a guest network or a second wireless network with different security settings. |
| Disable / Enable | Toggles an individual SSID on or off without deleting it. |
| Edit | Opens the Interface Configuration form for the selected SSID — covers ESSID, security, and MAC filtering. |
| Remove | Permanently deletes the SSID. |
The Associated Stations panel lists all devices currently connected to the Wi-Fi network, showing their MAC address, IP address, signal level, and data rates. This is useful for confirming which devices are connected and diagnosing wireless performance issues.
Device Configuration
Device Configuration controls the physical radio — the channel, bandwidth, and transmit power that apply to all SSIDs on this radio. Click the radio device row (Generic MAC80211 802.11bgn (radio0)) in the Devices Overview to open this form.
General Setup
| Device Configuration | |||||||
|
|||||||
| Status | Mode: Master | SSID: Cell_AP BSSID: 90:22:08:03:AD:62 | Encryption: WPA2 PSK (CCMP) Channel: 11 (2.462 GHz) | Tx-Power: 20 dBm Signal: 0 dBm | Noise: 0 dBm Bitrate: 0.0 Mbit/s | Country: 00 |
||||||
| Wi-Fi network is enabled | Disable | ||||||
| Operating frequency |
|
||||||
| Transmit Power | 20 dBm (100 mW) ▼ | ||||||
| Save and Apply | |||||||
| Field | Description |
|---|---|
| Wi-Fi network is enabled | Master enable/disable for the radio. Disabling this turns off all SSIDs on this radio simultaneously. |
| Operating frequency — Mode | Wi-Fi protocol mode. 11g/n mixed supports both 802.11g and 802.11n clients simultaneously and is the recommended default. Use 11n to restrict to N-only clients only. |
| Operating frequency — Channel | The 2.4 GHz channel to broadcast on (1–13). Channels 1, 6, and 11 are non-overlapping and are preferred to minimise interference when multiple access points are deployed in the same area. |
| Operating frequency — Width | Channel bandwidth. 40 MHz (two bonded channels) offers higher throughput; 20 MHz is more robust in congested 2.4 GHz environments and causes less interference to adjacent channels. |
| Transmit Power | RF output power. Default is 20 dBm (100 mW). Reducing transmit power limits range — useful where the wireless signal should not extend beyond a specific physical area. |
Advanced Settings
| Device Configuration | |||
|
|||
| Country Code | 00 - World ▼ | ||
| Distance Optimization | |||
| Fragmentation Threshold | |||
| RTS/CTS Threshold | |||
| Save and Apply | |||
| Field | Description |
|---|---|
| Country Code | Sets the regulatory domain for permitted channels and power levels. Default is 00 - World. Set to GB - United Kingdom for UK deployments to ensure compliance with local channel and power regulations. |
| Distance Optimization | Adjusts the ACK timeout to compensate for propagation delay on long-distance links. Leave blank for standard indoor or short-range deployments. |
| Fragmentation Threshold | Packets larger than this value (bytes) are split before transmission. Leave blank to use the default (2346). Lowering this value can improve reliability in environments with high RF interference at the cost of throughput overhead. |
| RTS/CTS Threshold | Enables RTS/CTS handshaking for packets above this size, reducing collisions in environments with many clients or hidden-node problems. Leave blank to disable. |
Interface Configuration
Interface Configuration controls the SSID and its associated settings — the network name, which LAN zone clients are placed on, wireless security credentials, and MAC-address filtering. Click Edit next to an SSID in the Wi-Fi Overview to open this form.
General Setup
| Interface Configuration | ||||
|
||||
| ESSID | Cell_AP | |||
| Mode | Access Point ▼ | |||
| Network | ifmobile ✓ lan wan wan6 create: |
|||
| Hide Extended Service Set Identifier | ||||
| WMM Mode | ✓ | |||
| Save and Apply | ||||
| Field | Description |
|---|---|
| ESSID | The Wi-Fi network name broadcast to clients — what appears in the Wi-Fi list on connecting devices. Default: Cell_AP. Change this to a name that identifies the network for your deployment. |
| Mode | Access Point — the router broadcasts a Wi-Fi network that clients connect to. This is the standard operating mode. Other modes include Client (for Wi-Fi WAN) and Monitor. |
| Network | The network zone that Wi-Fi clients are bridged into. Default is lan, placing wireless clients on the same subnet as wired LAN clients. To create an isolated guest network, tick create, enter a new network name, and apply separate firewall rules to restrict its access. |
| Hide Extended Service Set Identifier | When enabled, the SSID is not broadcast — clients must know the network name and enter it manually. This provides no meaningful protection against a determined attacker but reduces visibility in passive Wi-Fi scans. |
| WMM Mode | Wi-Fi Multimedia — enables QoS prioritisation for voice and video traffic. Enabled by default and required for 802.11n operation. Leave enabled. |
Wireless Security
| Interface Configuration | ||||
|
||||
| Encryption | WPA2-PSK ▼ | |||
| Cipher | auto ▼ | |||
| Key | ●●●●●●●●● | |||
| Enable WPS pushbutton, requires WPA(2)-PSK | ||||
| Save and Apply | ||||
| Field | Description |
|---|---|
| Encryption | The wireless security protocol. WPA2-PSK is the current standard for most deployments and is the recommended setting. None disables encryption entirely — do not use on any network with internet access or sensitive devices connected. |
| Cipher | The encryption algorithm. auto selects the strongest algorithm supported by the connecting client (CCMP/AES for WPA2). Leave as auto unless compatibility with a specific legacy device requires a fixed cipher. |
| Key | The Wi-Fi passphrase. Minimum 8 characters; a minimum of 12 characters with mixed letters, numbers, and symbols is recommended. Change the default passphrase before deploying the router. |
| Enable WPS pushbutton | Enables Wi-Fi Protected Setup push-button pairing. WPS has well-documented security vulnerabilities — leave disabled. |
MAC-Filter
MAC filtering restricts Wi-Fi access based on the client device's hardware MAC address, independent of the passphrase.
| Interface Configuration | ||||
|
||||
| MAC-Address Filter | Disabled ▼ | |||
| MAC-List | — ▼ + | |||
| Save and Apply | ||||
| Mode | Behaviour |
|---|---|
| Disabled | No MAC filtering applied. Any device with the correct passphrase can connect. This is the default. |
| Allow List | Only devices whose MAC addresses appear in the MAC-List are permitted to associate. All other devices are blocked, even with the correct passphrase. |
| Block List | Devices whose MAC addresses appear in the MAC-List are denied association. All other devices with the correct passphrase can connect normally. |
To add a device to the MAC-List, select a currently associated device from the dropdown or type the MAC address directly (format: AA:BB:CC:DD:EE:FF), then click the add button. Click Save and Apply when done.
Note: MAC addresses can be spoofed by any capable device. MAC filtering is a useful control layer in managed environments but should not be relied upon as the sole access security measure.
Adding a second SSID
The router supports multiple SSIDs on the same radio — for example, a primary staff network and a separate guest network. To add a second SSID:
- Navigate to Network > Wi-Fi
- Click Add in the Devices Overview panel
- In the Interface Configuration form that opens, set the ESSID for the new network (e.g.
Guest_WiFi) - In the Network field, tick create and enter a new network name (e.g.
guest) — this creates a separate network interface so the new SSID is not bridged directly onto the main LAN - Set the appropriate Wireless Security settings for the new SSID
- Click Save and Apply
- Apply firewall rules at Network > Firewall > Traffic Rules to restrict what the guest network can reach
Important: Creating a separate network interface in step 4 is necessary but not sufficient to isolate guest traffic. Without corresponding firewall rules, clients on the guest SSID may still be able to reach the main LAN. See the Firewall — Traffic Rules article for guidance on blocking inter-zone traffic.