-
What is IEEE 802.11k/v Assisted Roaming?
IEEE 802.11k and IEEE 802.11v are standards that enhance the roaming experience for wireless clients by optimizing how they connect to the best available Access Point (AP) during transitions. IEEE 802.11k: This standard enables clients to request a list of neighboring APs (called a neighbor list) from the currently…
-
What is IEEE 802.1X?
IEEE 802.1X is a network access control standard that enhances security by providing authentication for devices attempting to connect to a network. It is commonly used in both wired and wireless networks. The key elements of 802.1X include: Authentication: It requires the use of an external RADIUS server to authenticate…
-
What is the difference between Personal and Enterprise WiFi authentication modes?
Personal Mode: In Personal mode, WiFi authentication is based on a shared password called the Pre-Shared Key (PSK). All users entering the same PSK can connect to the network. This method is simpler and commonly used in home networks or small offices. However, it provides less control over user access. Enterprise Mode: In…
-
What Are the Different WiFi Security Standards on Zyxel APs?
WEP (Wired Equivalent Privacy): WEP is an older WiFi security protocol that encrypts data packets transmitted between the access point (AP) and wireless stations to maintain privacy. Both the AP and the wireless stations must use the same WEP key for encryption and decryption. However, it is considered less secure due to…
-
What is an SSID and how does it function on a Zyxel AP?
The SSID (Service Set Identifier) is the name that identifies a specific wireless network. It is used to associate wireless stations (clients) with the access point (AP). For a client to connect to the network, it must match the SSID of the AP. In simpler terms, the SSID is the WiFi network name that clients look for and…
-
How can a MAC filter list be set up to block specific clients from accessing the network?
A MAC filter list allows or blocks network access based on clients' MAC addresses, ensuring only authorized devices can connect. To block specific clients, follow these steps: Navigate to Configuration > Object > AP Profile > SSID > MAC Filter List and click Add. Enter a Profile Name and select Deny for the Filter Action.…
-
How to Configure a RADIUS Server for WiFi Authentication?
Setting up a RADIUS server on an AP provides centralized user authentication and authorization, improving network security. This is ideal for enterprise users managing numerous WiFi clients. Steps to configure a RADIUS server: Go to Configuration > Object > AP Profile > SSID > Security List. Select the desired profile and…
-
How to Limit Network Bandwidth for Each WiFi Client?
Limiting bandwidth for each WiFi client ensures fair access to the network, preventing a small number of clients from monopolizing bandwidth. This can be configured in the device settings by defining specific bandwidth limits for individual clients, promoting a balanced network experience for all users. To limit the…
-
Does Zyxel AP support the WPS function?
Zyxel AP does not support the WPS function. This is because Zyxel APs are designed for enterprise use, where security is paramount. If you are having trouble connecting a device that only supports WPS, you can try below methods. Configure Advanced Security Settings: set the Security to "WPA-Personal with WPA1." This step…
-
Why my APs managed by controller not broadcast SSIDs?
1. Verify Controller Firmware Compatibility: Ensure the AP controller firmware is up to date to support the new models. 2. Ensure AP Status: Check the controller's device information to confirm the APs are online and syncing configurations as expected. 3. Check Radio Profiles: Confirm that the radio profiles are configured…
-
DPPSK with External Server
Dynamic Personal Pre-Shared Key (DPPSK) is a powerful feature aimed at enhancing user privacy and data integrity in a wireless network by assigning unique passwords to individual clients. This ensures that each client's traffic is encrypted with a unique key, enhancing security. Scaling DPPSK with External RADIUS Server…
-
Why some AP features not implement even AP is online being managed by controller?
This issue could be due to a discrepancy in firmware versions between new added AP and controller. Here are the steps to resolve this issue: Update Firmware Navigate to Configuration > Wireless > AP Management > Firmware. Click the "Check" button to look for available latest firmware updates. If an update is available,…
-
Creating Segregated SSIDs with VLANs using Zyxel AP and AP Controller(USG FLEX)
Background: In the office environment we would like to seperate the network traffic from employee and guest. Here a guidance to create two SSID in seperate VLAN with Zyxel AP and USG FLEX firewall. Scenario: In this scenario, the AP is managed by the firewall, and there are two SSIDs: one for employees using VLAN10 and one…
-
[Nebula] How to configure external captive portal for a SSID with click to continue?
Description: This article shows you how to configure the login page from an external web portal instead of the one built into the NCC. There is an example customized captive portal page, and we can configure the look of the web portal page based on these HTML files. This article uses XAMPP as the external webserver for…
-
What is the Support for WPA2-Enterprise on Zyxel APs like WAX610D?
Question: Do Zyxel APs like WAX610D, which are mentioned to support "WPA2/WPA3-Enterprise," actually support WPA2-Enterprise? Answer: Yes, Zyxel AP models such as WAX610D that are listed to support "WPA2/WPA3-Enterprise" do support WPA2-Enterprise as well. Even if your client's end devices are only compatible with WPA2,…
-
How to Configure Zyxel NWA50AX Access Points for Guest Network DHCP?
Question: How can I configure my Zyxel NWA50AX access points so that WiFi clients receive IP addresses directly from my DHCP server in the guest network? Answer: If you wish to configure your NWA50AX access points to enable WiFi clients to receive IP addresses from your DHCP server in the guest network, follow these steps:…
-
What to do when encountering issues downloading files from Captive Portal Customization page?
Answer: If you encounter continuous loading without error messages when trying to download files from the Captive Portal Customization page, the problem could be due to a missing "cdr_notification.html" file in the directory of theme version 2. This issue affects sites using theme version 2, and a fix has been implemented…
-
How to hide a Wi-Fi name (SSID)?
In certain scenarios, you may prefer not to display your Wi-Fi name on clients' lists of available networks. To achieve this, you can use the Hidden SSID feature by following these steps: Access the local GUI and navigate to Configuration > Wireless > AP Management. Click the Edit icon next to the SSID you wish to hide.…
-
Understanding WPA3 SSID
Scenario: Your network includes a variety of devices with different encryption capabilities, including WPA3. You're considering configuring the security method to WPA3 but are unsure if WPA2 devices will still be able to connect or whether let only devices with WPA3 capability to connect to the WPA3 SSID. This FAQ will…
-
How to block the certain wireless client on an AP?
To prevent specific devices from accessing your WLAN, you can use the MAC Filter feature. This method blocks all devices whose MAC addresses are entered into the Access Point's MAC address block list. Follow these step-by-step instructions to configure the MAC Filter: Navigate to Configuration > Object > AP Profile > SSID…