"nwa1123-ac pro" guest wifi

Hi,

I have the following setup:
"4G-AC68U Asus 4G router" - several unmanaged switches - "nwa1123-ac pro"

How can I setup a guest wifi network where the clients are not able to reach internal IPs, only the internet?

Thanks!

All Replies

  •  Zyxel_Judy
    Zyxel_Judy Posts: 138
    5 Answers First Comment Friend Collector
     Ally Member
    Hi @jh17,

    To create the guest wifi network, please refer to this FAQ: How to set up Guest access to the network on Nebula — Zyxel Community
  • jh17
    jh17 Posts: 3
    First Comment
    Hi,
    thanks - but I think this does not work - I think this only blocks other clients which are connected to the same SSID, isn't it?
    I simply want that the guest clients are not able to reach my servers etc.
    Thanks,
    Johannes
  • mMontana
    mMontana Posts: 1,091
    1000 Comments 25 Answers Friend Collector Third Anniversary
     Guru Member
    edited January 26
    jh17 said:
    I simply want that the guest clients are not able to reach my servers etc.

    If your 4G-AC68U Asus 4G router supports several LAN interfaces and vLANs, you need to buy managed and vLAN capable switches. And reconfigure nwa1123-ac pro to serve your SSID on the right vLAN bridged to your network, and the guest SSID on the right vLAN bridged to the secondary (and guest) network created from your  4G-AC68U Asus 4G router.
    In a shorter way: you need to verify if the other parts of your network (so not  nwa1123-ac pro) are adequate for your goal. Unmanaged switches surely are not.
  • jh17
    jh17 Posts: 3
    First Comment
    Hi,
    changing the overall hardware is not an option. Would it be possible with some other access point from Zyxel? Can you recommend one? POE is important.
    Thanks
  •  Zyxel_Judy
    Zyxel_Judy Posts: 138
    5 Answers First Comment Friend Collector
     Ally Member

     

    With your current topology with unmanaged switches, the Zyxel access points can support to create a guest network that allows wireless clients which are connected to the same SSID can surf the Internet and can’t access other wireless clients.  

    In case you want that the guest wireless clients are not able to reach your wired servers, please refer to the recommendation from user @mMontana