How to set up Guest access to the network on Standalone mode

Options
Zyxel_Judy
Zyxel_Judy Posts: 1,005  Zyxel Employee
First Anniversary 10 Comments Friend Collector First Answer
edited April 11 in SSID

Guest network can be applied in a public network where most devices connect to the same SSID, to make sure network security and prohibit the devices for accessing each other.

 

* Note:Please replace the example below with your actual profile. This example was viewed using NWA210AX (Firmware Version: V6.30(ABTD.3)).

 

There are two functions can be used in a guest network: Intra-BSS Blocking and Layer2 Isolation.

 

Intra-BSS Traffic blocking: By enabling in this feature, we can prohibit the devices that connecting to the same SSID from accessing each other.

 

Layer-2 Isolation: Layer 2 isolation will only allow the traffic of whitelisted destination MAC addresses. In this case, if we configure L2 isolation and limit the traffic of Guest SSID, the traffic outgoing from Guest SSID will not be able to pass through.

**Note: L2 isolation only applies to SSIDs under the same subnet, if SSIDs have different LAN subnets it is up to the switch or gateway to block traffic with ACL or firewall rules.

 

There are guide shows how to set up Guest access to the network on Standalone mode.
  1. Create a Security Profile at Configuration >> Object >> AP profile >> SSID >> Security List
  2. Open the Configuration >> Object >> AP profile >> SSID >> SSID List
    Click the "Add" to create a new SSID-Profile or choose the SSID to edit.
  3. Enable Intra-BSS Traffic blocking.
  4. Configure Layer-2 Isolation Profile.
    4.1 Click the "Add" to create a new Layer-2 Isolation Profile
    4.2 Configure profile according to your demands. Click the "Add" to add Gateway MAC and allowed devices MAC.

• If there are other devices in the network that should be allowed to connect, simply press "Add" to create a new entry and enter the MAC of the device.

 

***  Intra-BSS Traffic Blocking is enable automatically with Layer-2 Isolation.


 

Be a Community MVP: Win a VIP Deal Dash on Your Next Zyxel Purchase!