-
Does Nebula AP Support User Accounts Starting with Special Characters for Sign-in?
Currently, Nebula AP sign-in methods does not support usernames that start with special characters, such as #. Special characters may be used after the first character, depending on the authentication environment.
-
Captive Portal account limitation with Nebula
Case Study: Captive Portal Authentication Limitation with Nebula A customer asked Why does Nebula authentication fail when the user account format starts with a special character # ? In this case, the authentication process ends before the RADIUS Access-Request is generated. The customer’s HAR confirmed that the…
-
I get disconnected and have to enter the voucher code again
This issue is typically caused by the Reauth Time (Reauthentication Time) or Idle Timeout settings on your network. When a user remains inactive or their connection session exceeds the configured time limits, the system automatically logs them out to free up IP addresses and secure the network, requiring them to re-enter…
-
802.11r does not work with WPA3-Enterprise or WPA3-Personal security
Under the current specifications of the Zyxel product architecture and Nebula system, 802.11r (Fast Roaming/Fast Transition) support when using WPA3-Enterprise and WPA3-Personal is as follows: 1. Conclusion: Not Supported Under the current system specifications and firmware design, when WPA3 security mode is enabled…
-
Why can’t the WBE665S broadcast an SSID on the 6 GHz band?
The WBE665S fully supports the 6GHz frequency band. Important Operational Note: Indoor vs. Outdoor Mode The WBE665S is an IP67-rated ruggedized access point designed for both indoor and outdoor deployments . Because outdoor 6GHz usage is restricted by regulatory laws in many regions, the AP includes a software mode switch:…
-
The printer is unreachable from the AP while it is in power-saving mode.
When the printer enters power-saving mode, it may partially turn off or suspend its network interface, such as Wi-Fi, Ethernet, or the print service. During that time, the printer may not respond to ping, discovery, or print requests until it wakes up again. You could enable the U-APSD function of SSID that printers…
-
How do I disable a single AP from broadcasting the SSID?
1. Assign Tags to All SSIDs Each SSID should have at least one tag. This allows Nebula to determine which APs are allowed to broadcast each SSID. 2. Ensure the Target AP Has No Tags For the AP that should not broadcast WiFi: Ensure no exist tags assign to that AP. 3. Verify Tag Consistency Across the Network Make sure…
-
Why can't I connect to the internet after enabling the Guest Network?
This issue may be related to the Layer 2 isolation configuration, specifically the allowed MAC address settings. When a guest SSID is assigned to a specific VLAN, the allowed MAC address configured under Layer 2 isolation must match the gateway interface MAC address corresponding to that VLAN. If a different MAC address is…
-
Why Do Duplicate SSIDs Appear on the Client Devices?
Client devices display the same SSID as two separate entries, even though the SSID is configured as a single network. Below, we explain the reasoning and suggest recommendations: Reason for Duplicate SSIDs: To comply with standard regulations and chipset requirements for Wi-Fi 6E and Wi-Fi 7 Access Points, the device will…
-
Can Nebula set different rate limits for individual clients that connecting to same SSID?
No. Currently, Nebula does not support assigning different bandwidth limits to individual clients directly within same SSID. However, administrators can use: SSID Rate Limit with Base Pack for simple bandwidth control per SSID. Traffic Shaping with Pro Pack for more flexible bandwidth control based on VLAN/user group…
-
Stations are connected to different SSIDs with NAT mode enabled, but are able to discover each other
The NAT mode of an SSID is used to assign IP addresses to devices when there is no gateway or router in the environment to provide DHCP service. However, it is not a true Layer 3 isolation mechanism and cannot fully isolate devices from each other. To prevent devices on different NAT-mode SSIDs from communicating with each…
-
How do I delete entries in DPPSK?
You could go to Site-wide > Configure > Cloud authentication > DPPSK 2. Select the DPPSK entries you want to delete 3. Click "Remove users" button and click "Yes" button 4. Click "Save" button and the selected DPPSK entries are deleted
-
Steps for configuring WPA2-Enterprise on firewall acting as the AP Controller with a RADIUS server
This guide explains the process for configuring WPA2-Enterprise on Zyxel’s USG FLEX H-Series acting as the AP Controller (APC) with a RADIUS server using Windows NPS. Below are the steps: Create AAA server on USG FLEX firewall Go to User & Authentication > User Authentication > AAA Server > Radius Server 2. Configure SSID…
-
HIDE SSID does not work on BE radio
When using WiFi 7 (802.11be) mode on the 5 or 6 GHz radio, the 'HIDE SSID' feature is not supported. This occurs due to updated IEEE 802.11be regulatory requirements and the implementation of Multi-Link Operation (MLO) standards. Therefore, this behavior is expected when the access point operates in WiFi 7 mode. How to…
-
Is it possible to set a data limit on an SSID?
You can limit wireless client device traffic rate by configuring rate limits on a per-SSID basis. This allows you to control the upload and download bandwidth for clients connected to a specific Wi-Fi network. To do this, navigate to "Site-wide > Configure > Access points > SSID advanced settings" in Nebula. Select the…
-
What is the VIP QoS of SSID Advanced settings?
The incoming traffic can be mapped to specific Access Category and Priority Queue for differentiated forwarding treatment. ￭WMM (Auto)-Standard priority. It is default. •Auto SSID traffic is mapped to Best Effort Category ￭Gold (Voice)-Highest priority •Gold SSID traffic is mapped to Voice Category ￭Silver (Video)-Medium…
-
Which access point support web-based (captive portal) authentication using Microsoft Entra ID?
Currently Supported model list: IAP500BE, NWA110AX, NWA110BE, NWA130BE, NWA210AX, NWA210AXv2, NWA210BE, NWA220AX-6E, NWA240BE, Root Plus, WAX300H, WAX510D, WAX610D, WAX620D-6E, WAX630S, WAX640S-6E, WAX650S, WAX655E, WBE510D, WBE530, WBE630S, WBE660S, WBE665S Alternately,when you want to check what features your AP model…
-
Where can I find the setting for 802.11w?
Currently, there is no 802.11w setting available for configuration. 802.11w (PMF) Behavior Under Different Security Modes Security Mode 802.11w (PMF) Status Notes Enhanced Open (OWE) Enabled & Required OWE relies on PMF; devices without PMF support cannot connect. WPA3 Enabled & Required PMF is mandatory under the WPA3…
-
How to disable Layer 2 isolation on Access Point?
To disable Layer 2 isolation on your Zyxel AP, you will generally need to access the wireless settings of your device and modify the SSID configuration. Here are the general steps: Scenario 1: Guest Network function is enabled Navigate to Site-wide > Configure > Access points > SSID settings Look for Guest Network 3. Turn…
-
How to Enable Layer 2 isolation on Access Point?
To enable Layer 2 isolation on your Zyxel Access Point (AP), the specific steps can vary slightly depending on your device model and firmware version. However, the general process involves configuring the SSID settings. Navigate to Site-wide > Configure > Access points > SSID advanced settings Look for Layer 2 Isolation:…