If the customer uses captive portal, which mode - tunnel or bridge - for SSID can be used?

Zyxel_Kathy

If the customer uses captive portal, the traffic must go back to the NXC to perform the captive portal.

In topology 1, the traffic from AP will go through the NXC, you can use tunnel mode or bridge mode; we prefer to use bridge mode.

In topology 2, the traffic from AP will go the best way to the internet without routing through the NXC; this configuration must use tunnel mode.