NW55AXE Access Point Nebula Internet Access Issue

recepyiyit

I connected my access point to a port on the switch that I set as untagged 100. In Nebula, I set the VLAN ID as 100 in the SSID settings. In the SSID advanced settings, I set the VLAN ID to 701. In the AP & port settings, on LAN 1, I set PVID to 701 and Allowed VLANs to 10, 20, 100. My access points appear online in Nebula, and when I access the AP from Nebula and ping, I can ping google.com. However, when I connect my phone to the access point, it gets an IP, but I cannot access the internet from my phone. Are my PVIDs incorrect in Nebula?

Zyxel_Melen

Hi @recepyiyit

A little bit confused of your configuration from your description.

So, your AP's management IP is in VLAN 100, and it can access the Internet and Nebula. But SSID VLAN 701 can't access the internet.

Please check your switch is VLAN 701's member and tagged. Also, this VLAN needs a DHCP server to provide IP address. And, your router/firewall needs to allow this VLAN/IP subnet to access Internet/WAN.

recepyiyit

https://community.zyxel.com/en/discussion/comment/79756#Comment_79756

I have two VLANs defined on my firewall: VLAN2 and VLAN701. VLAN2 is my management VLAN. On my switch, VLAN2 and VLAN701 are configured as tagged on the uplink port. My access point is connected to port 1 as untagged with PVID set to VLAN701. I registered the device on Nebula, and it appears online. I assigned a static IP from the VLAN701 subnet, and when I ping google.com from the device within Nebula, there is no issue. When I perform a traceroute, I confirmed that the ingress and egress IPs are working correctly. However, when I connect to the access point with my phone, I cannot access the internet. The device automatically gets an IP from VLAN701. Could there be an error in the PVID settings in Nebula? Can you check my PVID configuration in the attached images?

Zyxel_Melen

Hi @recepyiyit

Please help to correct the switch VLAN setting for AP connecting port.

1. Please change your AP from static IP to DHCP.
2. Please change the PVID from 701 to 2. Remember to re-plug your AP to let it get a new DHCP IP address.
3. Please add VLAN 701 tagged member for this port.

The reason you can get the AP online is because the switch tagged VLAN 701. However, VLAN 701's traffic will be untagged when passing to AP from the switch. This cause the AP thought it doesn't receive VLAN 701's packet. Change the switch VLAN setting will helped.