NWA110AX AP Guest Wifi
Just installed a number of the above APs and working well, we have gone for Nebula to configure them etc... but now i need to create a guest Wifi...
I've created a new SSID and enabled Guest Wifi option and added the MAC of our gateway.. but still the clients can get to our corporate network.. are there some other settings we need to change or something on the firewall etc?
Well... the guest network is only on the APs. Not into switches and firewall.
Thanks for your reply... so how do you go about restricting access to the network via the AP? or is this not possible? what does the guest network option actually do if not to restrict access?
Zeus Posts: 4Well what you are essentially doing is splitting the wifi into two seperate SSIDs, only to then connect both SSIDs to the same router interface. Its like connecting two physical access points to the same router interface.
What you probably would want to do is assigning the SSIDs to different VLANs, each with their own subnet and then prevent routing between the subnets.1
Thanks for your reply... I thought the guest option stopped devices communicating, then enabling L2 isolation and add in the exceptions? I'm just not understanding how it works...
we did have a Ruckus setup prior to the and I'm sure all we had to do was to enable the guest access mode and it just worked and only allowed traffic out onto the internet.. but I could be wrong..
Thanks for sharing your experience on Zyxel community!
When you enable Guest Network, the Layer 2 isolation and Intra-BSS traffic blocking is automatically enabled.
Intra-BSS Blocking is clients can’t communicate with each other when connecting to the same SSID on the same AP.
Layer-2 Isolation is clients can’t communicate with each other in the same subnet, only allow access to devices listed.
We got your ticket and checked for your settings, because your corporate network subnet is different to wireless users. Thus, the wireless user to different subnet won’t be restricted.
Per discussed, we’re thinking on the same way to suggest you can use NAT mode with firewall rule.
NAT mode is to generate each client unique IP address from their own MAC, the subnet is using on AP only which can provide separated network from your whole topology so it is safety. You can use it without worries.
- 8.4K All Categories
- 1.6K Nebula
- 71 Nebula Ideas
- 57 Nebula Status and Incidents
- 4.5K Security
- 226 Security Ideas
- 981 Switch
- 46 Switch Ideas
- 873 WirelessLAN
- 22 WLAN Ideas
- 5.1K Consumer Product
- 157 Service & License
- 280 News and Release
- 98 Success Stories
- 59 Security Advisories
- 13 Education Center
- 580 FAQ
- 263 Nebula FAQ
- 160 Security FAQ
- 76 Switch FAQ
- 74 WirelessLAN FAQ
- 7 Consumer Product FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 69 About Community
- 46 Security Highlight