[Release Note] Zyxel BE Series Access Point - V7.30 Patch 2 firmware has been released

Zyxel_Melen

BE Series Access Points Firmware Release Note 

January 2026

Overview

This document provides firmware release information on Zyxel Access Points platforms, introduce new Access Points, new features and enhancements, bug fix, known issues and workarounds information for Release V7.30 Patch 2 C0.

Supported Platforms

(Click Hyperlink to download the firmware directly)

WiFi 7 model(s):

Zyxel WBE660S - V7.30(ACGG.2)C0

Zyxel WBE630S - V7.30(ACLW.2)C0

Zyxel WBE530 - V7.30(ACLE.2)C0

Zyxel WBE510D - V7.30(ACLX.2)C0

Zyxel NWA210BE - V7.30(ACLY.2)C0

Zyxel NWA110BE - V7.30(ACLZ.2)C0

Zyxel NWA130BE - V7.30(ACIL.2)C0

Zyxel NWA90BE PRO - V7.30(ACPE.2)C0

Zyxel NWA90BE - V7.30(ACPD.2)C0

Zyxel NWA55BE - V7.30(ACPH.2)C0

Zyxel NWA50BE PRO - V7.30(ACPC.2)C0

Zyxel NWA50BE - V7.30(ACPB.2)C0

Zyxel NWA30BE - V7.30(ACPI.2)C0

Zyxel IAP500BE - V7.30(ACPJ.2)C0

Zyxel NWA210AXv2 - V7.30(ACSR.2)C0

Zyxel WBE665S - V7.30(ACQJ.2) (first firmware version)

Zyxel NWA240BE - V7.30(ACQG.2) (first firmware version)

Zyxel FWA7 Root Plus - V7.30(ACQL.2) (first firmware version)

Zyxel FWA7 Leaf Plus - V7.30(ACQK.2) (first firmware version)

New Features and Enhancements

1. Captive Portal Security: Enables Two-Factor Authentication (2FA) for Captive Portal logins using the Nebula Cloud Authentication Server (NCAS).
Note: This feature currently does not support External Portal configurations. 

2. Dynamic Bandwidth Control: Administrators can now apply client rate limits dynamically using RADIUS attributes. 

Bug Fix

C=Cloud mode, M=Managed, S=Standalone mode

Bug fix	C	M	S
1. [eITS: 250900997, 250601432 ] [Symptom] Wi-Fi 7 AP experiences unexpected reboot or hang due to kernel panic.	V	V	V
2. [eITS: 251200910 ] [Symptom] Wireless service interruption on NWA130BE due to system memory usage reaching 90%.	V	V	V
3. [eITS: 251100079 ] [Symptom] Ethernet-connected devices cannot access the repeater or its clients in a standalone WDS mesh (2.4 GHz & 5 GHz).	-	-	V
4. [eITS: 251101963] [Symptom] After rebooting the USG FLEX H series, managed access points may incorrectly display a “VLAN Conflict” status in the AP list, even though the VLAN configuration is correct.	-	V	-
5. [eITS: 251100237] [Symptom] DNS and gateway communication failure occurs when the 6 GHz band is disabled and Layer-2 isolation (Guest Network mode) is enabled without gateway MAC addresses in the allow list.	V	-	-
6. [eITS=251001732,251001918] [Symptom] Microsoft Entra authentication failed because the AP did not replace the certificate after receiving the updated certificate from NCC.	V	-	-
7.[eITS=250901312,250901486,250901395,251000631] [Symptom] Wireless service interruption on WBE530/NWA130BE/WBE660S due to restart hostapd process.	V	-	-
8. [SPRID: 250402043] [Symptom] When an MLO client connects to the SSID, the authentication field of client page does not display voucher.	V	-	-
9. [SPRID: 250402050] [Symptom] Under this configuration combination : Sign-on with my RADIUS enabled along with MAC authentication fallback. The behavior of MLO clients after connecting may not be as expected: a. Traffic does not pass through (no connectivity). b. Client remains online after reconnecting, even without re- authentication. c. After completing MAC authentication, the client is redirected to the captive portal.	V	-	-
10. [SPRID: 250627398] [Symptom] 5G radio is 11be mode + MLO enabled + security is enhance open, after wireless client which support enhance open security connected the SSID field of client list will show SSID name(transition mode).	V	V	V
11. [SPRID: 250714115] [Symptom] After the wireless STA connects to the initial SSID, the AP's web GUI is accessible, but pinging the AP's IP address fails.	V	V	V
12. [RMID: 62239] [Symptom] The access point may reboot unexpectedly when the 2.4GHz radio is configured in BE mode. To prevent this, the 2.4GHz radio mode has been converted to AX mode.	V	V	V
13. [RMID: 65019] [Symptom] Abnormal display of loading status for 2.4 GHz — 2.4 GHz always shows as -.	-	V	-
14. [RMID: 64436] [topology] mlo root )))((( mlo repeater [Symptom] When a tri-band WiFi 7 repeater is manually configured to use a dual-band WiFi 7 root as its uplink, it can only connect to one band.	V	-	-
15. [RMID:64381 ] [Symptom] If all radios on the repeater are operating in ax mode and it successfully connects to the uplink, the indicator icon on Nebula will show a solid green light.	V	-	-
16. [RMID: 64099] [Application Visibility] [Symptom] All AP models with MLO supported have this issue. Real-time bandwidth limitation changes — STA connection actual test not restricted. [Steps] 1. Add the AP to a site. 2. Enable Application Visibility. 3. Set File Sharing to be limited to 1 Mbps. 4. Connect a wireless station and test FTP upload/download. → Upload and download are correctly limited to 1 Mbps. 5. Keep the wireless station connected, then change the File Sharing limit to 15 Mbps. 6. Test FTP upload/download again. [Result] FTP upload and download are not limited; to resolve this issue, the wireless station needs to reconnect.	V	-	-
17. [RMID: 63816] [Symptom] When an MLO client connects to the AP using both 2.4 GHz and 5 GHz links, you will see two entries for the same client on the WLAN Clients page.	-	V	-
18. [RMID: 63221] [Symptom] [IAP500BE] When a new AP is opened from the box and powered on via PoE but fails to obtain an IP address, it automatically switches to repeater mode. During its attempt to connect to the uplink, a system hang occurs. The AP must be rebooted and should be able to obtain an IP address to provide the service.	V	-	-

Known Issue

C=Cloud mode, M=Managed, S=Standalone mode

Known Issue	C	M	S
1. [SPRID: 240913082] [Symptom] Stations cannot authenticate when an SSID is configured with MLO (2.4G+5G bands) and the security mode is set to WPA3 with MAC Authentication via RADIUS.	V	-	-
2. [SPRID: 241216264] [Symptom] When the WAC5302D-Sv2 model is used as the Root in a Mesh setup, and WiFi 7 series models with firmware versions 7.00 & 7.10 are used as Repeaters, the Mesh connection cannot be established.	V	-	-
3. [RMID: 66894] [Symptom] When the WBE665S is in Standalone mode, configuration changes may not be applied when using the Wizard.	-	-	V
4. [RMID: 66666] [Symptom] When the WBE665S operates in Standalone mode with Indoor mode enabled, rebooting the AP may trigger an ERROR related to system-log suppression, causing the AP to apply lastgood.conf.	-	-	V
5. [RMID: 66414] [Symptom] Proxy ARP function not working for MLO STA connected on 5 GHz.	-	-	V
6. [RMID: 65938] [Symptom] [Dynamic VLAN] The STA connects to an AP and obtains an IP address via a dynamic VLAN. STA traffic is not passing after the STA triggers roaming.	V	-	-
7. [RMID: 64372] [Symptom] When using an SNMP MIB tool to perform an SNMP SET operation on the sysName OID, the SET request reports success; however, the System Name is not updated in the GUI.	-	-	V
8. [RMID: 64164] [Symptom] AP status show vlan conflict when Force Overwrite VLAN Config is enabled [Steps] a. AP MGMT > AP Group > Edit Group b. Force Overwrite VLAN Config: Enable MGMT VALN ID: 10 c. As Native VLAN: Enable [Result] AP MGMT > Mgmt. AP List AP show vlan conflict and Mgnt. VLAN ID(AC/AP) show 10/1	-	V	-

Limitation of Settings

C=Cloud mode, M=Managed, S=Standalone mode

Limitation	C	M	S
1. [SPRID: 241203097] [Symptom] When the Mesh topology consists of a non-supported MLO Root combined with MLO Repeater Hop1 and Hop2, it may affect the Repeater's downlink and cause issues with the service VAP lacking MLO functionality.	V	-	-