-
Can I specify a custom subnet for the NAT mode SSID?
As of December 2025, Zyxel APs do not support manually customizing the subnet used by NAT Mode SSIDs. In NAT mode, the AP automatically assigns an internal subnet from predefined private IP ranges. The AP selects the NAT subnet automatically according to the management VLAN subnet it is operating in. Default NAT Subnet…
-
How to disable MLO for my WiFi 7 access point?
When the access point is operating in 802.11be (WiFi 7) mode, MLO (Multi-Link Operation) is enabled by default and cannot be disabled. This behavior is defined by the WiFi 7 standard and chipset design. Note: If you encounter compatibility issues and must have a requirement to run the AP without MLO, you may switch the…
-
How to set up MLO on WiFi 7 access point?
No specific configuration is required. When the access point is operating in 802.11be (WiFi 7) mode, the Multi-Link Operation (MLO) feature is automatically initialized and enabled by default.
-
Why can’t my device detect the DPPSK WiFi?
DPPSK Is Not Supported on WiFi 7 Radio Mode (as of Dec 2025) Currently, DPPSK cannot be broadcasted by 802.11be radio mode (WiFi 7). If your WiFi 7 access point radio are using 11be mode, the SSID may not appear on client devices. Workaround: Set the radio mode to 802.11ax (WiFi 6) so the DPPSK SSID can be broadcasted…
-
Why can’t I setup DPPSK function in SSID configuration?
DPPSK is available only for organizations with an active Nebula Pro Pack license. If your organization does not have Pro Pack, the DPPSK configuration will not be available for configuration. Please verify your license status under: Nebula > Organization-wide > License & Inventory
-
How to force WiFi to use WPA3 security?
1. Navigate to the Nebula » Configure » Access points » SSID advanced settings page *If you do not see the SSID advanced settings tab from sidebar, please go to Nebula » Configure » Access points » SSID settings tab and toggle on the Advanced mode button 2. Security options - Select WPA Personal With WPA3 option 3. Toggle…
-
How to Provide User Wi-Fi Access via a QR Code for Wireless Network Access?
In modern business settings, it's increasingly common to provide wireless access for visitors, clients. Instead of handing out lengthy passwords, an efficient approach is to utilize QR codes. Scanning this code gives users instant access to the wireless network, simplifying the connection process. Nebula provides Wi-Fi…
-
Differences between Intra-BSS Traffic Blocking and Layer-2 Isolation
The primary difference between Intra-BSS Traffic Blocking and Layer-2 isolation lies in their scope and functionality: Scope: Intra-BSS Traffic Blocking applies specifically to wireless networks and wireless clients connected to the same access point or extender. Layer-2 Isolation, on the other hand, is a feature found in…
-
[NEBULA] How to access Captive Portal login page
How to access the Captive Portal login page When a station(client) is associated to an SSID that has captive portal configured, there are some behavior differences for how to open captive portal depending on your configurations. After our phase2 release, there were more configurations for captive portal control thus the…
-
[NEBULA] How to control and secure network access with client policy (MAC filter)?
Function description: This function is used to do MAC filter for the stations. We can add the station into whitelisted called “Allow list” which can bypass the Captive portal, add into “Block list” which will be blocked to access the SSID, and "To specific SSID" allow to connect specific SSID. These rules can be found in…
-
Why can’t I see a 6 GHz WiFi network on my NWA90BE?
The NWA90BE does support WiFi 7 (802.11be), but it is important to note that it is designed as a dual-band access point operating on 2.4 GHz and 5 GHz only. The NWA90BE is positioned as an entry-level WiFi 7 model, delivering key WiFi 7 improvements—such as higher modulation (4K QAM), better efficiency, and overall faster…
-
Why can’t I see the 6 GHz WiFi network on my NWA50BE?
The NWA50BE does support WiFi 7 (802.11be), but it is important to note that it is designed as a dual-band access point operating on 2.4 GHz and 5 GHz only. The NWA50BE is positioned as an entry-level WiFi 7 model, delivering key WiFi 7 improvements—such as higher modulation (4K QAM), better efficiency, and overall faster…
-
How to Resolve Captive Portal SSL Warnings Appearing Since October 21, 2025
Symptom: When connecting to a Captive Portal SSID broadcasted by WiFi 7 access points running firmware v7.20, the browser displays a certificate warning after October 21, 2025. This occurs because some APs did not automatically synchronize the renewed captive portal certificate. Solution: Reboot the affected APs. After the…
-
How does Nebula AP determine session timeout with external RADIUS?
If no RADIUS Session-Timeout attribute is received, the AP uses Nebula’s configured Reauth/lease time. If the RADIUS server provides a Session-Timeout value, the AP compares it with Nebula’s Reauth/lease time (set site-wide or per SSID) and applies the smaller value as the effective session timeout.
-
How to control the connecting client on particular SSID?
To achieve this purpose, you will need to enable captive portal and set Simultaneous login limit for each of your users. Here is the configuration steps: Enable Captive portal: Please select sign-on with Nebula cloud authentication in the SSID advanced settings > Network Access > Sign-in method. Set Simultaneous login…
-
How to Set Up Facebook App ID and Configuration on Nebula?
This is a follow-up to 'How to Set Up Facebook Social Login? Log in to Facebook Before creating a developer account, log in to your Facebook account. Create a Facebook account Create Developer Account & Create Facebook APP You'll need a Facebook developer account to get started. If you don't have one, upgrade your personal…
-
How to set up your Guest networks
Introduction Providing WiFi access to customers has become part of the basic needs in today’s business demands, being a must for cafes, restaurants, chain stores and essential in sectors such as education and hospitality. But the need is not solved by just providing a WiFi connectivity, administrators need to ensure that…
-
Which Zyxel access point models do not support wireless bridge mode?
Non-Supported model list: NWA220AX-6E,NWA110AX,NWA210AX,WAX300H,WAX510D,NWA1123ACv3,WAC500, WAC500H,NWA50AX,NWA50AX PRO,NWA90AX,NWA90AX PRO,NWA1123-AC HD, NWA1302-AC,NWA5123-AC HD,WAC5302D-Sv2,NAP120,NWA1123-ACv2. Access points that support wireless bridge functions can provide Ethernet connectivity to downstream network…
-
The captive portal appears slowly on the wireless client when connecting to a Nebula AP
The Captive Portal is a web-based authentication that appears before users can access the internet. It intercepts all web traffic until the user has successfully pass captive portal. The captive port page is stored on AP since the AP is managed by Nebula. When the user opens a browser or launches a web app, the AP…
-
Can the IP subnet used in NAT mode be modified on a Nebula AP?
The subnet and IP range is automatically assigned and not user-configurable within the NAT function. Currently, NAT mode only allows for two subnets to be assigned automatically. Therefore, changing the DHCP IP settings is not supported in this particular feature. Detail: How to use NAT mode on AP?