-
How do I configure the Group Rekey Interval on an AP?
The default Group Rekey Interval is 30,000 seconds. On Nebula, this value is fixed and cannot be modified.
-
Does Nebula AP support WEP security for WiFi
Zyxel Nebula access points do not support WEP security. WEP is an outdated and insecure encryption standard that can be easily compromised. For this reason, modern networking devices and cloud-managed platforms no longer support WEP.
-
Why is the SSID Advanced Settings option missing in the Nebula sidebar
This occurs because Advanced Mode for SSID settings has not been activated yet. To enable it, go to Configure » Access Points » SSID Settings and toggle the Advanced mode button. Once enabled, the SSID Advanced Settings option will appear in the sidebar.
-
Why can’t I set different WiFi passwords for different security modes on Nebula
Configure » Access points » SSID settings In Nebula, the SSID settings initially open in Simple Mode, which displays only the essential configuration options. To configure different security types or set more advanced WiFi password options, you must switch to Advanced Mode. You can do this by clicking the “Advanced mode”…
-
Why AP broadcast unknown SG-XXXX SSID
The SG-XXXX SSID you are seeing is Smart Mesh SSID automatically created by Zyxel access point to support mesh networking. It enables access points to discover each other and maintain mesh connectivity. Why does this SSID appear? The 6 GHz band used by Wi-Fi 7 requires SSIDs to be broadcast for device discovery. Hidden…
-
Why is my SSID still visible even when “Hide SSID” is enabled on WiFi 7 AP
Starting with firmware V7.20, Zyxel Access Points operating in 802.11be (WiFi 7) mode follow updated IEEE 802.11be regulatory requirements. Under these rules, the “Hide SSID” feature is no longer supported when the SSID is operating in WiFi 7 mode, including the 6 GHz band. This is expected behavior and is designed to…
-
Why can’t I hide the SSID on my Zyxel WiFi 7 access point
Starting with firmware V7.20, Zyxel Access Points operating in 802.11be (WiFi 7) mode follow updated IEEE 802.11be regulatory requirements. Under these rules, the “Hide SSID” feature is no longer supported when the SSID is operating in WiFi 7 mode, including the 6 GHz band. This is expected behavior and is designed to…
-
How can I restrict a DPPSK account to a single device on Nebula
As of 2025, Dec, Dynamic Personal Pre-Shared Key (DPPSK) on Nebula cannot be strictly limited to a single device based on its MAC address. One DPPSK can still be used on multiple devices, as Nebula currently does not yet support device-level binding.
-
What is the SG-XXXX SSID and why do you see it
The SG-XXXX SSID you are seeing is Smart Mesh SSID automatically created by Zyxel access point to support mesh networking. It enables access points to discover each other and maintain mesh connectivity. Why does this SSID appear? The 6 GHz band used by Wi-Fi 7 requires SSIDs to be broadcast for device discovery. Hidden…
-
How to troubleshoot guest WiFi no-Internet issue
If your guest Wi-Fi is not working that the client cannot browse Internet web page, follow these steps to resolve the issue: Ensure the Guest Network option is enabled by navigating to Configure > Access Points > SSID settings. Check that the guest network SSID is broadcasting and visible to connect to. Ensure that…
-
Can I specify a custom subnet for the NAT mode SSID?
As of December 2025, Zyxel APs do not support manually customizing the subnet used by NAT Mode SSIDs. In NAT mode, the AP automatically assigns an internal subnet from predefined private IP ranges. The AP selects the NAT subnet automatically according to the management VLAN subnet it is operating in. Default NAT Subnet…
-
How to disable MLO for my WiFi 7 access point?
When the access point is operating in 802.11be (WiFi 7) mode, MLO (Multi-Link Operation) is enabled by default and cannot be disabled. This behavior is defined by the WiFi 7 standard and chipset design. Note: If you encounter compatibility issues and must have a requirement to run the AP without MLO, you may switch the…
-
How to set up MLO on WiFi 7 access point?
No specific configuration is required. When the access point is operating in 802.11be (WiFi 7) mode, the Multi-Link Operation (MLO) feature is automatically initialized and enabled by default.
-
Why can’t my device detect the DPPSK WiFi?
DPPSK Is Not Supported on WiFi 7 Radio Mode (as of Dec 2025) Currently, DPPSK cannot be broadcasted by 802.11be radio mode (WiFi 7). If your WiFi 7 access point radio are using 11be mode, the SSID may not appear on client devices. Workaround: Set the radio mode to 802.11ax (WiFi 6) so the DPPSK SSID can be broadcasted…
-
Why can’t I setup DPPSK function in SSID configuration?
DPPSK is available only for organizations with an active Nebula Pro Pack license. If your organization does not have Pro Pack, the DPPSK configuration will not be available for configuration. Please verify your license status under: Nebula > Organization-wide > License & Inventory
-
How to force WiFi to use WPA3 security?
1. Navigate to the Nebula » Configure » Access points » SSID advanced settings page *If you do not see the SSID advanced settings tab from sidebar, please go to Nebula » Configure » Access points » SSID settings tab and toggle on the Advanced mode button 2. Security options - Select WPA Personal With WPA3 option 3. Toggle…
-
How to Provide User Wi-Fi Access via a QR Code for Wireless Network Access?
In modern business settings, it's increasingly common to provide wireless access for visitors, clients. Instead of handing out lengthy passwords, an efficient approach is to utilize QR codes. Scanning this code gives users instant access to the wireless network, simplifying the connection process. Nebula provides Wi-Fi…
-
Differences between Intra-BSS Traffic Blocking and Layer-2 Isolation
The primary difference between Intra-BSS Traffic Blocking and Layer-2 isolation lies in their scope and functionality: Scope: Intra-BSS Traffic Blocking applies specifically to wireless networks and wireless clients connected to the same access point or extender. Layer-2 Isolation, on the other hand, is a feature found in…
-
[NEBULA] How to access Captive Portal login page
How to access the Captive Portal login page When a station(client) is associated to an SSID that has captive portal configured, there are some behavior differences for how to open captive portal depending on your configurations. After our phase2 release, there were more configurations for captive portal control thus the…
-
[NEBULA] How to control and secure network access with client policy (MAC filter)?
Function description: This function is used to do MAC filter for the stations. We can add the station into whitelisted called “Allow list” which can bypass the Captive portal, add into “Block list” which will be blocked to access the SSID, and "To specific SSID" allow to connect specific SSID. These rules can be found in…