WiFi Configuration

The Proroute H685 and H820 series routers include a 2.4 GHz 802.11b/g/n Wi-Fi radio that operates as a wireless access point by default. This article covers the full Wi-Fi configuration interface — radio settings, SSID configuration, wireless security, and MAC-address filtering.


Navigation

Network > Wi-Fi


Wi-Fi Overview

The Wi-Fi Overview is the starting point for all wireless configuration. It shows the physical radio, all configured SSIDs, and a list of currently connected client devices.

Devices Overview
Generic MAC80211 802.11bgn (radio0)
Channel: 11 (2.462 GHz)  |  Bitrate: ? Mbit/s
Wifi Restart AP Client Add
SSID: Cell_AP  |  Mode: Master
BSSID: 90:22:08:03:AD:62  |  Encryption: WPA2 PSK (CCMP)
Disable Edit Remove
Associated Stations
SSID MAC-Address IPv4-Address Signal RX Rate TX Rate
No information available

Overview controls

Button Function
Wifi Restart Restarts the wireless radio. Use this after making changes that do not take effect immediately.
AP Client Switches the radio to client mode, allowing the router to connect to another access point as a Wi-Fi WAN uplink. See the Set WiFi to Client AP for Internet Access article.
Add Creates an additional SSID (virtual interface) on the same radio — used for a guest network or a second wireless network with different security settings.
Disable / Enable Toggles an individual SSID on or off without deleting it.
Edit Opens the Interface Configuration form for the selected SSID — covers ESSID, security, and MAC filtering.
Remove Permanently deletes the SSID.

The Associated Stations panel lists all devices currently connected to the Wi-Fi network, showing their MAC address, IP address, signal level, and data rates. This is useful for confirming which devices are connected and diagnosing wireless performance issues.


Device Configuration

Device Configuration controls the physical radio — the channel, bandwidth, and transmit power that apply to all SSIDs on this radio. Click the radio device row (Generic MAC80211 802.11bgn (radio0)) in the Devices Overview to open this form.

General Setup

Device Configuration
General Setup Advanced Settings
Status Mode: Master  |  SSID: Cell_AP
BSSID: 90:22:08:03:AD:62  |  Encryption: WPA2 PSK (CCMP)
Channel: 11 (2.462 GHz)  |  Tx-Power: 20 dBm
Signal: 0 dBm  |  Noise: 0 dBm
Bitrate: 0.0 Mbit/s  |  Country: 00
Wi-Fi network is enabled Disable
Operating frequency
Mode Channel Width
11g/n mixed 11 (2462 MHz) 40 MHz
Transmit Power 20 dBm (100 mW)
Save and Apply
Field Description
Wi-Fi network is enabled Master enable/disable for the radio. Disabling this turns off all SSIDs on this radio simultaneously.
Operating frequency — Mode Wi-Fi protocol mode. 11g/n mixed supports both 802.11g and 802.11n clients simultaneously and is the recommended default. Use 11n to restrict to N-only clients only.
Operating frequency — Channel The 2.4 GHz channel to broadcast on (1–13). Channels 1, 6, and 11 are non-overlapping and are preferred to minimise interference when multiple access points are deployed in the same area.
Operating frequency — Width Channel bandwidth. 40 MHz (two bonded channels) offers higher throughput; 20 MHz is more robust in congested 2.4 GHz environments and causes less interference to adjacent channels.
Transmit Power RF output power. Default is 20 dBm (100 mW). Reducing transmit power limits range — useful where the wireless signal should not extend beyond a specific physical area.

Advanced Settings

Device Configuration
General Setup Advanced Settings
Country Code 00 - World
Distance Optimization  
Fragmentation Threshold  
RTS/CTS Threshold  
Save and Apply
Field Description
Country Code Sets the regulatory domain for permitted channels and power levels. Default is 00 - World. Set to GB - United Kingdom for UK deployments to ensure compliance with local channel and power regulations.
Distance Optimization Adjusts the ACK timeout to compensate for propagation delay on long-distance links. Leave blank for standard indoor or short-range deployments.
Fragmentation Threshold Packets larger than this value (bytes) are split before transmission. Leave blank to use the default (2346). Lowering this value can improve reliability in environments with high RF interference at the cost of throughput overhead.
RTS/CTS Threshold Enables RTS/CTS handshaking for packets above this size, reducing collisions in environments with many clients or hidden-node problems. Leave blank to disable.

Interface Configuration

Interface Configuration controls the SSID and its associated settings — the network name, which LAN zone clients are placed on, wireless security credentials, and MAC-address filtering. Click Edit next to an SSID in the Wi-Fi Overview to open this form.

General Setup

Interface Configuration
General Setup Wireless Security MAC-Filter
ESSID Cell_AP
Mode Access Point
Network  ifmobile
 lan
 wan
 wan6
 create:  
Hide Extended Service Set Identifier  
WMM Mode
Save and Apply
Field Description
ESSID The Wi-Fi network name broadcast to clients — what appears in the Wi-Fi list on connecting devices. Default: Cell_AP. Change this to a name that identifies the network for your deployment.
Mode Access Point — the router broadcasts a Wi-Fi network that clients connect to. This is the standard operating mode. Other modes include Client (for Wi-Fi WAN) and Monitor.
Network The network zone that Wi-Fi clients are bridged into. Default is lan, placing wireless clients on the same subnet as wired LAN clients. To create an isolated guest network, tick create, enter a new network name, and apply separate firewall rules to restrict its access.
Hide Extended Service Set Identifier When enabled, the SSID is not broadcast — clients must know the network name and enter it manually. This provides no meaningful protection against a determined attacker but reduces visibility in passive Wi-Fi scans.
WMM Mode Wi-Fi Multimedia — enables QoS prioritisation for voice and video traffic. Enabled by default and required for 802.11n operation. Leave enabled.

Wireless Security

Interface Configuration
General Setup Wireless Security MAC-Filter
Encryption WPA2-PSK
Cipher auto
Key ●●●●●●●●●
Enable WPS pushbutton, requires WPA(2)-PSK  
Save and Apply
Field Description
Encryption The wireless security protocol. WPA2-PSK is the current standard for most deployments and is the recommended setting. None disables encryption entirely — do not use on any network with internet access or sensitive devices connected.
Cipher The encryption algorithm. auto selects the strongest algorithm supported by the connecting client (CCMP/AES for WPA2). Leave as auto unless compatibility with a specific legacy device requires a fixed cipher.
Key The Wi-Fi passphrase. Minimum 8 characters; a minimum of 12 characters with mixed letters, numbers, and symbols is recommended. Change the default passphrase before deploying the router.
Enable WPS pushbutton Enables Wi-Fi Protected Setup push-button pairing. WPS has well-documented security vulnerabilities — leave disabled.

MAC-Filter

MAC filtering restricts Wi-Fi access based on the client device's hardware MAC address, independent of the passphrase.

Interface Configuration
General Setup Wireless Security MAC-Filter
MAC-Address Filter Disabled
MAC-List   +
Save and Apply
Mode Behaviour
Disabled No MAC filtering applied. Any device with the correct passphrase can connect. This is the default.
Allow List Only devices whose MAC addresses appear in the MAC-List are permitted to associate. All other devices are blocked, even with the correct passphrase.
Block List Devices whose MAC addresses appear in the MAC-List are denied association. All other devices with the correct passphrase can connect normally.

To add a device to the MAC-List, select a currently associated device from the dropdown or type the MAC address directly (format: AA:BB:CC:DD:EE:FF), then click the add button. Click Save and Apply when done.

Note: MAC addresses can be spoofed by any capable device. MAC filtering is a useful control layer in managed environments but should not be relied upon as the sole access security measure.


Adding a second SSID

The router supports multiple SSIDs on the same radio — for example, a primary staff network and a separate guest network. To add a second SSID:

  1. Navigate to Network > Wi-Fi
  2. Click Add in the Devices Overview panel
  3. In the Interface Configuration form that opens, set the ESSID for the new network (e.g. Guest_WiFi)
  4. In the Network field, tick create and enter a new network name (e.g. guest) — this creates a separate network interface so the new SSID is not bridged directly onto the main LAN
  5. Set the appropriate Wireless Security settings for the new SSID
  6. Click Save and Apply
  7. Apply firewall rules at Network > Firewall > Traffic Rules to restrict what the guest network can reach

Important: Creating a separate network interface in step 4 is necessary but not sufficient to isolate guest traffic. Without corresponding firewall rules, clients on the guest SSID may still be able to reach the main LAN. See the Firewall — Traffic Rules article for guidance on blocking inter-zone traffic.