Assistance with Guest SSID and VLAN Configuration

mike_bt

I am using a Zyxel USG110 and have two Zyxel Access Points (APs) connected directly to the same LAN1 network (ports 4 and 5). The current configuration includes a Wi-Fi network with an SSID that uses the LAN1 IP subnet.

I would like to create an additional guest SSID and assign VLAN10 to it. The intended network setup is as follows:

• The USG110 provides internet access through the WAN interface.
• Ports 4 and 5 on the USG110 connect to the APs.

Could you please guide me on how to configure the guest SSID with VLAN10 while ensuring the APs receive the necessary VLAN information from the USG110?

PeterUK

That would be why its not working you need a VLAN PoE switch to tag the VLAN from USG to AP or just PoE injectors

Zyxel_Melen

Hi @mike_bt,

Please reference the handbook of USG110 page 691 "How to create a Wi-Fi VLAN interfaces to separate staff network and Guest network".

USG110_Handbook_ZLD4.60_Handbook.pdf

This chapter guides you on how to set up the guest VLAN interface on USG110. For the SSID setting, although the handbook uses controller mode, you can still reference it since the configuration steps are similar to the standalone mode of your access point.

Hope it helps.

mike_bt

Hello and sorry for the late reply.
I followed all the steps but unfortunately it did not work.

Zyxel_Melen

Hi @mike_bt,

Could you screenshot the current setting and share it with us? It will help us to clarify the issue. You need to screenshot the Interface > ethernet setting & port setting page information for FW part. And SSID settings for AP part.

mike_bt

Hello,

As per your request.

PeterUK

What AP's do you have? When you say the AP are directly connected ports P6 and P7 on LAN2 just with PoE and no switch?

Make a zone first

To make VLAN 10 go the VLAN tab and add with

interface internal

VLAN 10

zone guest

base port LAN2

VLAN ID 10

IP of guest network and DHCP

on AP go to AP profile SSID tab security make a password for guest

go to SSID add in profile name the SSID guest password VLAN ID 10

go to AP management and add guess profile to the WIFI radio

Zyxel_Melen

Hi @mike_bt,

I remember you said your APs are connected directly to the same LAN1 network (ports 4 and 5). Looks like you change these to ports 6 and 7?

If yes, you can follow @PeterUK's suggestion.

If they still connect to P4 and P5, you just need to change one setting in the above configuration "the base port from LAN2 to LAN1".

mike_bt

I have 2 APs connected to the Zyxel USG110 (Model: NWA5123-AC).
All steps mentioned by @PeterUK are already done and checked them again.

The problem is that when a user connects to the Guest SSID, he doesn't get and IP address, just APIPA with no internet.

PeterUK

how are the AP's powered?

mike_bt

APs are powered through a PoE switch (acting as dumb switch)

PeterUK

That would be why its not working you need a VLAN PoE switch to tag the VLAN from USG to AP or just PoE injectors