"nwa1123-ac pro" guest wifi

jh17

Hi,

I have the following setup:
"4G-AC68U Asus 4G router" - several unmanaged switches - "nwa1123-ac pro"

How can I setup a guest wifi network where the clients are not able to reach internal IPs, only the internet?

Thanks!

Zyxel_Judy

Hi @jh17,

To create the guest wifi network, please refer to this FAQ: How to set up Guest access to the network on Nebula — Zyxel Community

jh17

Hi,
thanks - but I think this does not work - I think this only blocks other clients which are connected to the same SSID, isn't it?
I simply want that the guest clients are not able to reach my servers etc.
Thanks,
Johannes

mMontana

jh17 said:

I simply want that the guest clients are not able to reach my servers etc.

If your 4G-AC68U Asus 4G router supports several LAN interfaces and vLANs, you need to buy managed and vLAN capable switches. And reconfigure nwa1123-ac pro to serve your SSID on the right vLAN bridged to your network, and the guest SSID on the right vLAN bridged to the secondary (and guest) network created from your  4G-AC68U Asus 4G router.
In a shorter way: you need to verify if the other parts of your network (so not  nwa1123-ac pro) are adequate for your goal. Unmanaged switches surely are not.

jh17

Hi,
changing the overall hardware is not an option. Would it be possible with some other access point from Zyxel? Can you recommend one? POE is important.
Thanks

Zyxel_Judy

Hi @jh17，

 

With your current topology with unmanaged switches, the Zyxel access points can support to create a guest network that allows wireless clients which are connected to the same SSID can surf the Internet and can’t access other wireless clients.  

In case you want that the guest wireless clients are not able to reach your wired servers, please refer to the recommendation from user @mMontana.