"nwa1123-ac pro" guest wifi

jh17
jh17 Posts: 3
First Comment
edited November 2023 in Nebula
Hi,

I have the following setup:
"4G-AC68U Asus 4G router" - several unmanaged switches - "nwa1123-ac pro"

How can I setup a guest wifi network where the clients are not able to reach internal IPs, only the internet?

Thanks!

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 1,494  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    Hi @jh17,

    To create the guest wifi network, please refer to this FAQ: How to set up Guest access to the network on Nebula — Zyxel Community

    Engage in the Community, become an MVP, and win exclusive prizes!

    https://bit.ly/Community_MVP

  • jh17
    jh17 Posts: 3
    First Comment
    Hi,
    thanks - but I think this does not work - I think this only blocks other clients which are connected to the same SSID, isn't it?
    I simply want that the guest clients are not able to reach my servers etc.
    Thanks,
    Johannes
  • mMontana
    mMontana Posts: 1,380  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary
    edited January 2023
    jh17 said:
    I simply want that the guest clients are not able to reach my servers etc.

    If your 4G-AC68U Asus 4G router supports several LAN interfaces and vLANs, you need to buy managed and vLAN capable switches. And reconfigure nwa1123-ac pro to serve your SSID on the right vLAN bridged to your network, and the guest SSID on the right vLAN bridged to the secondary (and guest) network created from your  4G-AC68U Asus 4G router.
    In a shorter way: you need to verify if the other parts of your network (so not  nwa1123-ac pro) are adequate for your goal. Unmanaged switches surely are not.
  • jh17
    jh17 Posts: 3
    First Comment
    Hi,
    changing the overall hardware is not an option. Would it be possible with some other access point from Zyxel? Can you recommend one? POE is important.
    Thanks
  • Zyxel_Judy
    Zyxel_Judy Posts: 1,494  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula

     

    With your current topology with unmanaged switches, the Zyxel access points can support to create a guest network that allows wireless clients which are connected to the same SSID can surf the Internet and can’t access other wireless clients.  

    In case you want that the guest wireless clients are not able to reach your wired servers, please refer to the recommendation from user @mMontana. 

    Engage in the Community, become an MVP, and win exclusive prizes!

    https://bit.ly/Community_MVP

Nebula Tips & Tricks