-
How to turn off the captive portal on wireless network?
In Nebula, the Captive Portal is controlled by the SSID's Network Access / Sign-in Method. To disable the Captive Portal so that clients can connect directly to the Wi-Fi without being redirected to a sign-in or agreement page, follow these steps: Step-by-Step Configuration: Log in to the Nebula Control Center (NCC).…
-
The APs do not broadcast an SSID on the 2.4 GHz and 5 GHz band
If your Zyxel Access Points (APs) are not broadcasting on both the 2.4 GHz and 5 GHz bands, this issue is typically related to power supply limitations or specific hardware configurations. Please check the following troubleshooting steps to resolve the issue: 1. Check the AP Power Supply (PoE Requirements) The most common…
-
Clients on the VLAN 1 SSID cannot get an IP address when the AP’s management VLAN ID is tagged
For a Nebula-managed Zyxel AP, your issue is likely related to how the AP handles VLAN 1 when its Management VLAN ID is set tagged. When the AP Management VLAN is configured as tagged, SSID traffic should also use tagged VLAN interfaces. Recommended configuration Setting Configuration AP Management VLAN 99 (Tagged) SSID…
-
Some devices cannot connect to the 5G SSID on the NWA130BE, even the security mode is set to open
With the latest WiFi 7 firmware (version 7.20 and above) on NWA130BE, the 802.11be mode enforces strict security requirements. Under this mode, legacy "Open" security is no longer supported on the 5GHz and 6GHz bands. Because of this, Nebula automatically converts your Open SSID on the 5GHz band to Enhanced Open (OWE) to…
-
What Is an IoT SSID and How to Enable It?
What is IoT SSID? •A one-click optimization that automatically adjusts existing SSID settings for better IoT device compatibility •Users can quickly apply IoT-friendly settings without manually configuring each option on NCC How to enable it? Site-wide > Configure > Access point > SSID settings > simple mode(Advanced mode…
-
The configured SSID is not being broadcast on the NWA50BE PRO
Check radio band configuration The NWA50BE PRO is bandflex model. A BandFlex AP is a cost-effective, dual-radio AP where the primary radio is dedicated to 2.4 GHz, but the second radio is configurable. You must choose whether the second radio operates in either the 5 GHz or 6 GHz band: Option A: 2.4 GHz + 5 GHz (6 GHz is…
-
Which Zyxel Access Points support Captive Portal with NID FS Integration?
After Nebula 20.10 and AP firmware 7.40 release, the Captive Portal with NID FS Integration support on following models: WBE660S, WBE530, WBE510D, WBE630S, IAP500BE, WBE665S, Root, Root Plus, Leaf Plus You could check here as well: Help center > Device function table. Site-wide > Configure > Access points > SSID advanced…
-
What customization options are available when using Nebula Cloud Authentication Server (NCAS)?
Even with the modern, secure authentication updates to the Nebula Cloud Authentication Server (NCAS), administrators still have a control over the user experience. While the core login page itself is standardized and hosted securely by the identity platform to support advanced security features like biometric passkeys, you…
-
Why is captive portal sign-on with Facebook stuck during verification?
When using Sign-on with Facebook on a Zyxel AP captive portal, users may get stuck at the reCAPTCHA or two-factor authentication (2FA) verification step. This can occur if the domains required for verification are not included in the Walled Garden list, preventing users from accessing these resources before completing…
-
Which walled garden domains are required for Facebook sign-on on Zyxel APs?
When using the captive portal Sign-on with Facebook option, please add the following domains to the Walled Garden list: www.fbsbx.com *.gstatic.com www.google.com These domains allow access to the resources required for Meta’s reCAPTCHA verification and Facebook two-factor authentication (2FA) before captive portal…
-
What does the "Station Roaming" category, selectable in the event log screen, represent?
The "Station Roaming" category selectable in the event log screen (most commonly found in the Zyxel Nebula Control Center or AP Event Logs) represents log entries specifically dedicated to tracing wireless client transitions (roaming) within your Wi-Fi network. Here is a detailed breakdown of what this category represents…
-
What Sign-in method can I use if a custom logo is must have?
After the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page. If a custom logo and other branding elements are…
-
Can the captive portal logo be customed if using Sign-on with Nebula cloud authentication server?
No, after the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page.
-
Why my Customized Logo disappear after Nebula 20.10?
After the Nebula 20.10 update, the customization of captive portals, especially for those using Nebula Cloud Authentication Server (NCAS), has changed significantly. The new authentication flow, based on OIDC, redirects users to a modern IFS/NCAS hosted authentication page, which affects how portals can be branded. Please…
-
Captive Portal Customization After Nebula 20.10 Update
After the Nebula 20.10 update, you might notice that your guest Wi-Fi captive portal, especially when using Nebula Cloud Authentication, no longer displays custom branding like logos and colors. Instead, it redirects to a generic authentication page. * Understanding the New Authentication Flow * Nebula 20.10 introduces a…
-
The limitations of DPPSK (Dynamic Personal Pre-Shared Key)
1. DPPSK and Dynamic VLAN Assignment Yes, you can absolutely combine DPPSK and Dynamic VLAN assignment at the same time. During the creation of individual or batch DPPSK keys, you can specify a dedicated VLAN ID directly for each key. When a tenant connects using their assigned DPPSK password, the AP will dynamically…
-
Why does the newly added SSID showing 'Unable to join the network' when the phone tries to connect?
If only the newly created SSID shows “Unable to join the network,” while existing SSIDs on the same AP work normally, that strongly suggests the AP/radio itself is healthy. Please check: Security/authentication mismatch Wrong WPA2/WPA3 mode or password. WPA3/PMF settings incompatible with the phone. 2. The new SSID…
-
How to change the name of Wi-Fi network?
For a Zyxel AP managed by Nebula, follow these steps: Log in to Nebula Control Center (NCC). Go to Configure > Access points > SSID advanced settings. Select the SSID you want to modify. Change the SSID name to your preferred Wi-Fi name. Click Save to apply the configuration. After the change is applied, wireless devices…
-
Best Practice: Optimize an SSID for IoT Device Compatibility
IoT devices often support fewer Wi-Fi features than laptops and smartphones. Some devices may experience onboarding failures, intermittent disconnections, or difficulty reconnecting when advanced security, sign-in, roaming, or band-steering features are enabled. The IoT compatibility action applies a recommended set of…
-
What is "Existing user protection" function under "Simultaneous login limit" function?
"Existing user protection" is a feature found within the "Captive portal advance setting" section, often in network configuration interfaces like the Zyxel Nebula Control Center. This setting is designed to safeguard existing Wi-Fi client logins. When activated, it prevents new Wi-Fi clients from logging in once the…