-
Which Zyxel Access Points support Captive Portal with NID FS Integration?
After Nebula 20.10 and AP firmware 7.40 release, the Captive Portal with NID FS Integration support on following models: WBE660S, WBE530, WBE510D, WBE630S, IAP500BE, WBE665S, Root, Root Plus, Leaf Plus You could check here as well: Help center > Device function table. Site-wide > Configure > Access points > SSID advanced…
-
What customization options are available when using Nebula Cloud Authentication Server (NCAS)?
Even with the modern, secure authentication updates to the Nebula Cloud Authentication Server (NCAS), administrators still have a control over the user experience. While the core login page itself is standardized and hosted securely by the identity platform to support advanced security features like biometric passkeys, you…
-
Why is captive portal sign-on with Facebook stuck during verification?
When using Sign-on with Facebook on a Zyxel AP captive portal, users may get stuck at the reCAPTCHA or two-factor authentication (2FA) verification step. This can occur if the domains required for verification are not included in the Walled Garden list, preventing users from accessing these resources before completing…
-
Which walled garden domains are required for Facebook sign-on on Zyxel APs?
When using the captive portal Sign-on with Facebook option, please add the following domains to the Walled Garden list: www.fbsbx.com *.gstatic.com www.google.com These domains allow access to the resources required for Meta’s reCAPTCHA verification and Facebook two-factor authentication (2FA) before captive portal…
-
What does the "Station Roaming" category, selectable in the event log screen, represent?
The "Station Roaming" category selectable in the event log screen (most commonly found in the Zyxel Nebula Control Center or AP Event Logs) represents log entries specifically dedicated to tracing wireless client transitions (roaming) within your Wi-Fi network. Here is a detailed breakdown of what this category represents…
-
What Sign-in method can I use if a custom logo is must have?
After the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page. If a custom logo and other branding elements are…
-
Can the captive portal logo be customed if using Sign-on with Nebula cloud authentication server?
No, after the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page.
-
Why my Customized Logo disappear after Nebula 20.10?
After the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page, which affects how portals can be branded. Please…
-
Captive Portal Customization After Nebula 20.10 Update
After the Nebula 20.10 update, you might notice that your guest Wi-Fi captive portal, especially when using Nebula Cloud Authentication, no longer displays custom branding like logos and colors. Instead, it redirects to a generic authentication page. * Understanding the New Authentication Flow * Nebula 20.10 introduces a…
-
The limitations of DPPSK (Dynamic Personal Pre-Shared Key)
1. DPPSK and Dynamic VLAN Assignment Yes, you can absolutely combine DPPSK and Dynamic VLAN assignment at the same time. During the creation of individual or batch DPPSK keys, you can specify a dedicated VLAN ID directly for each key. When a tenant connects using their assigned DPPSK password, the AP will dynamically…
-
Why does the newly added SSID showing 'Unable to join the network' when the phone tries to connect?
If only the newly created SSID shows “Unable to join the network,” while existing SSIDs on the same AP work normally, that strongly suggests the AP/radio itself is healthy. Please check: Security/authentication mismatch Wrong WPA2/WPA3 mode or password. WPA3/PMF settings incompatible with the phone. 2. The new SSID…
-
How to change the name of Wi-Fi network?
For a Zyxel AP managed by Nebula, follow these steps: Log in to Nebula Control Center (NCC). Go to Configure > Access points > SSID advanced settings. Select the SSID you want to modify. Change the SSID name to your preferred Wi-Fi name. Click Save to apply the configuration. After the change is applied, wireless devices…
-
What is "Existing user protection" function under "Simultaneous login limit" function?
"Existing user protection" is a feature found within the "Captive portal advance setting" section, often in network configuration interfaces like the Zyxel Nebula Control Center. This setting is designed to safeguard existing Wi-Fi client logins. When activated, it prevents new Wi-Fi clients from logging in once the…
-
Does Nebula AP Support User Accounts Starting with Special Characters for Sign-in?
Currently, Nebula AP sign-in methods does not support usernames that start with special characters, such as #. Special characters may be used after the first character, depending on the authentication environment.
-
Captive Portal account limitation with Nebula
Case Study: Captive Portal Authentication Limitation with Nebula A customer asked Why does Nebula authentication fail when the user account format starts with a special character # ? In this case, the authentication process ends before the RADIUS Access-Request is generated. The customer’s HAR confirmed that the…
-
I get disconnected and have to enter the voucher code again
This issue is typically caused by the Reauth Time (Reauthentication Time) or Idle Timeout settings on your network. When a user remains inactive or their connection session exceeds the configured time limits, the system automatically logs them out to free up IP addresses and secure the network, requiring them to re-enter…
-
802.11r does not work with WPA3-Enterprise or WPA3-Personal security
Under the current specifications of the Zyxel product architecture and Nebula system, 802.11r (Fast Roaming/Fast Transition) support when using WPA3-Enterprise and WPA3-Personal is as follows: 1. Conclusion: Not Supported Under the current system specifications and firmware design, when WPA3 security mode is enabled…
-
Why can’t the WBE665S broadcast an SSID on the 6 GHz band?
The WBE665S fully supports the 6GHz frequency band. Important Operational Note: Indoor vs. Outdoor Mode The WBE665S is an IP67-rated ruggedized access point designed for both indoor and outdoor deployments . Because outdoor 6GHz usage is restricted by regulatory laws in many regions, the AP includes a software mode switch:…
-
The printer is unreachable from the AP while it is in power-saving mode.
When the printer enters power-saving mode, it may partially turn off or suspend its network interface, such as Wi-Fi, Ethernet, or the print service. During that time, the printer may not respond to ping, discovery, or print requests until it wakes up again. You could enable the U-APSD function of SSID that printers…
-
How do I disable a single AP from broadcasting the SSID?
1. Assign Tags to All SSIDs Each SSID should have at least one tag. This allows Nebula to determine which APs are allowed to broadcast each SSID. 2. Ensure the Target AP Has No Tags For the AP that should not broadcast WiFi: Ensure no exist tags assign to that AP. 3. Verify Tag Consistency Across the Network Make sure…