How to set up Guest access to the network on Nebula

Zyxel_Judy

Guest network can be applied in a public network where most devices connect to the same SSID, to make sure network security and prohibit the devices for accessing each other.

 

Note: * Please replace the example below with your actual profile. This example was viewed using WAC6503-S (Firmware Version: V6.28(AASF.0)).

 

There are guide shows how to set up Guest access to the network on Nebula.

Method 1: 

Open the Configure > Access point > SSID settings

Enable Guest Network, click Save

Enable Guest Network will enable layer 2 isolation and add gateway automatically.

If your network is VLAN supported, please add your gateway MAC address into layer 2 isolation list manually at Configure > Access point > SSID advanced settings > Advanced settings

Method 2:

1.    Open the Configure > Access point > SSID advanced settings > Advanced settings

Enable Intra-BSS Traffic blocking.

 

2.    Enable Layer-2 Isolation, add your gateway MAC address, click Save.

If there are other devices in the network that should be allowed to connect, simply press "Add" to create a new entry and enter the MAC of the device.

** Intra-BSS Traffic Blocking is enable automatically with Layer-2 Isolation.

FYI: There are two functions can be used in a guest network: Intra-BSS Blocking and Layer2 Isolation.

Intra-BSS Traffic blocking: By enabling in this feature, we can prohibit the devices that connecting to the same SSID from accessing each other.

Layer-2 Isolation: Layer 2 isolation will only allow the traffic of whitelisted destination MAC addresses. In this case, if we configure L2 isolation and limit the traffic of Guest SSID, the traffic outgoing from Guest SSID will not be able to pass through.

*** Note: L2 isolation only applies to SSIDs under the same subnet, if SSIDs have different LAN subnets it is up to the switch or gateway to block traffic with ACL or firewall rules.