How to set up Guest access to the network on Nebula

Zyxel_Judy

Guest network can be applied in a public network where most devices connect to the same SSID, to make sure network security and prohibit the devices for accessing each other.

 

Note: * Please replace the example below with your actual profile. This example was viewed using WAC6503-S (Firmware Version: V6.28(AASF.0)).

 

There are two functions can be used in a guest network: Intra-BSS Blocking and Layer2 Isolation.

 

Intra-BSS Traffic blocking: By enabling in this feature, we can prohibit the devices that connecting to the same SSID from accessing each other.

 

Layer-2 Isolation: Layer 2 isolation will only allow the traffic of whitelisted destination MAC addresses. In this case, if we configure L2 isolation and limit the traffic of Guest SSID, the traffic outgoing from Guest SSID will not be able to pass through.

** Note: L2 isolation only applies to SSIDs under the same subnet, if SSIDs have different LAN subnets it is up to the switch or gateway to block traffic with ACL or firewall rules.

 

There are guide shows how to set up Guest access to the network on Nebula.

Method 1: 

Open the Access point >> Configure >> SSID setting 

Enable Guest Network, click Save

Enable Guest Network will enable layer 2 isolation and add gateway automatically.

If your network is VLAN supported, please add your gateway MAC address into layer 2 isolation list manually at Access point >> Configure >> SSID advanced setting >> Advanced setting

*** Intra-BSS Traffic Blocking is enable automatically with Layer-2 Isolation.

Method 2:

1.    Open the Access point >> Configure >> SSID advanced setting >> Advanced setting

Enable Intra-BSS Traffic blocking.

 

2.    Enable Layer-2 Isolation, add your gateway MAC address, click Save.

If there are other devices in the network that should be allowed to connect, simply press "Add" to create a new entry and enter the MAC of the device.