Why can a device connect to SSID without being on the MAC list?

Zyxel_Bella
Zyxel_Bella Posts: 526  Zyxel Employee
Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch 50 Answers

This issue may arise if your SSID settings are configured to allow clients to access the network without signing in or passing the authentication, except they are explicitly blocked. If the Nebula Cloud Authentication Server (NCAS) is temporarily disconnected or unreachable, the system defaults to allowing connectivity.

To ensure only authorized clients can connect, adjust the setting to "Limited: Only currently authorized clients will be able to access the network." Here are the steps:

  1. Navigate to the SSID advanced settings and select the SSID
  2. Change the setting of NCAS disconnect behavior from "Allowed: Client devices can access the network without signing in, except they are explicitly blocked" to "Limited: Only currently authorized clients will be able to access the network."
  3. Save the settings.

This configuration will prevent any devices from connecting to the network without authentication, even if there is a temporary issue with the NCAS.