-
Why is DPPSK not working on Wi-Fi 7 AP?
DPPSK authentication is not supported on 802.11be radio mode (Wi-Fi 7) starting from firmware 7.20 due to chipset-level security changes. Current Compatibility: DPPSK is not supported on 802.11be radio mode (Wi-Fi 7) with firmware version 7.20 and newer. Workarounds include broadcasting the SSID only on the 2.4 GHz…
-
How to Configuring SSID for VLAN-specific DHCP Allocation in Nebula Network?
In some networking scenarios, there's a need to ensure that clients connecting to a particular SSID are provided with an IP address by a specific DHCP server. While Nebula AP operate in a bridged mode and do not directly offer DHCP services, this guide will walk you through how to do so. Topology and Scenario Gateway…
-
Why Is the QR Code Not Showing When Creating a WiFi Voucher in Nebula?
The QR code is for popup promotion page to the user who has the voucher code print with the QR code on it and scans for detail information. Thus, it will only display when Promotion URL or Promotion text entries are filled.
-
Where is WMM by SSID in Nebula
WMM is enable by default on Nebula, but we don’t allow to change the setting or specify the priority for SSID currently. We suggest that you can set up different VLANs with different SSID and set up the QoS by VLAN ID on the switch.
-
How 802.11w (PMF) Operates Across Various Wireless Security Configurations?
802.11w (PMF) Behavior Under Different Security Modes Security Mode 802.11w (PMF) Status Notes Enhanced Open (OWE) Enabled & Required OWE relies on PMF; devices without PMF support cannot connect. WPA3 Enabled & Required PMF is mandatory under the WPA3 specification. WPA3 + Transition Mode Enabled & Optional WPA3-capable…
-
Where can I disable the intra-BSS traffic blocking feature?
You can enable or disable the Intra-BSS Traffic Blocking feature by navigating to: Site-wide > Configure > Access Points > SSID Advanced Settings However, if Intra-BSS Traffic Blocking is enabled together with Layer 2 Isolation because the Guest Network feature is enabled under: Site-wide > Configure > Access Points > SSID…
-
Why is my guest network not working?
If guest network clients cannot access the internet, ensure that both the DNS server’s MAC address and the gateway’s MAC address are added to the Layer 2 isolation whitelist. You can configure this under Configure > Access points > SSID advanced settings. These MAC addresses must be entered correctly so the access point…
-
Should I enable the guest network?
Yes — enabling a guest network is recommended if you want to provide Wi-Fi access to visitors while keeping your internal network secure. A guest network allows you to: Isolate guest clients from your internal LAN Prevent communication between guest devices (Layer 2 isolation) Apply separate security and bandwidth policies…
-
How can I broadcast the specific SSID on only one access point?
To broadcast the specific SSID on only a single access point, use the AP Tagging feature in Nebula: Create a tag for the specific AP Go to Site-wide > Devices > Access points Select the AP that should broadcast the SSID Click Tag and create/add a new tag (e.g., admin-ap) Assign the SSID to that tag Go to Configure > Access…
-
How do I configure the Group Rekey Interval on an AP?
The default Group Rekey Interval is 30,000 seconds. On Nebula, this value is fixed and cannot be modified.
-
Does Nebula AP support WEP security for WiFi
Zyxel Nebula access points do not support WEP security. WEP is an outdated and insecure encryption standard that can be easily compromised. For this reason, modern networking devices and cloud-managed platforms no longer support WEP.
-
Why is the SSID Advanced Settings option missing in the Nebula sidebar
This occurs because Advanced Mode for SSID settings has not been activated yet. To enable it, go to Configure » Access Points » SSID Settings and toggle the Advanced mode button. Once enabled, the SSID Advanced Settings option will appear in the sidebar.
-
Why can’t I set different WiFi passwords for different security modes on Nebula
Configure » Access points » SSID settings In Nebula, the SSID settings initially open in Simple Mode, which displays only the essential configuration options. To configure different security types or set more advanced WiFi password options, you must switch to Advanced Mode. You can do this by clicking the “Advanced mode”…
-
Why AP broadcast unknown SG-XXXX SSID
The SG-XXXX SSID you are seeing is Smart Mesh SSID automatically created by Zyxel access point to support mesh networking. It enables access points to discover each other and maintain mesh connectivity. Why does this SSID appear? The 6 GHz band used by Wi-Fi 7 requires SSIDs to be broadcast for device discovery. Hidden…
-
Why is my SSID still visible even when “Hide SSID” is enabled on WiFi 7 AP
Starting with firmware V7.20, Zyxel Access Points operating in 802.11be (WiFi 7) mode follow updated IEEE 802.11be regulatory requirements. Under these rules, the “Hide SSID” feature is no longer supported when the SSID is operating in WiFi 7 mode, including the 6 GHz band. This is expected behavior and is designed to…
-
Why can’t I hide the SSID on my Zyxel WiFi 7 access point
Starting with firmware V7.20, Zyxel Access Points operating in 802.11be (WiFi 7) mode follow updated IEEE 802.11be regulatory requirements. Under these rules, the “Hide SSID” feature is no longer supported when the SSID is operating in WiFi 7 mode, including the 6 GHz band. This is expected behavior and is designed to…
-
How can I restrict a DPPSK account to a single device on Nebula
As of 2025, Dec, Dynamic Personal Pre-Shared Key (DPPSK) on Nebula cannot be strictly limited to a single device based on its MAC address. One DPPSK can still be used on multiple devices, as Nebula currently does not yet support device-level binding.
-
What is the SG-XXXX SSID and why do you see it
The SG-XXXX SSID you are seeing is Smart Mesh SSID automatically created by Zyxel access point to support mesh networking. It enables access points to discover each other and maintain mesh connectivity. Why does this SSID appear? The 6 GHz band used by Wi-Fi 7 requires SSIDs to be broadcast for device discovery. Hidden…
-
How to troubleshoot guest WiFi no-Internet issue
If your guest Wi-Fi is not working that the client cannot browse Internet web page, follow these steps to resolve the issue: Ensure the Guest Network option is enabled by navigating to Configure > Access Points > SSID settings. Check that the guest network SSID is broadcasting and visible to connect to. Ensure that…
-
Can I specify a custom subnet for the NAT mode SSID?
As of December 2025, Zyxel APs do not support manually customizing the subnet used by NAT Mode SSIDs. In NAT mode, the AP automatically assigns an internal subnet from predefined private IP ranges. The AP selects the NAT subnet automatically according to the management VLAN subnet it is operating in. Default NAT Subnet…