VLAN on WiFi Hotspot NWA1123-AC-Pro not working

aguswiss Posts: 3
Second Anniversary
edited August 2022 in WirelessLAN
I want to segregate my wirless network with VLAN's.
I have an usg60W - GS2210 - NWA1123AC-Pro configuartion.

I created the VLAN's on the USG Firewall including a DHCP on each of the VLAN's.

I created VLAN's on subnet on the GS2210 Switch

I associated every SSID to a VLAN on the NWA1123

unfortunately I probably have a mistake in my thinking because the Wi-Fi client doesn't pick up an IP Address and if I assign an IP address to the interface it won't communicate.

Every hint is welcome

Kind Regards

Accepted Solution

  • Zyxel_Richard
    Zyxel_Richard Posts: 191
    Zyxel Certified Network Engineer Level 2 - WLAN Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Security
     Zyxel Employee
    Answer ✓
    Hi Alex,

    The setting is correct in Wi-Fi part: just simply add the VLAN ID you'd like to assign to the devices connecting to this SSID.

    Two points I want to mention is on USG and Switch: 

    1. Is the "base port" of your VLAN Interface on USG actually the DMZ ? Please make sure it's the port that connecting to the switch. (You can check the "port" tab in the same page to see the role of each port)

    2. For the VLAN Settings on the switch, please also set up the static vlan on the "switch ports that connects to AP and USG Firewall", you can refer to the screenshot below for the configuration. (select the needed ports to "fixed") The directory is [Advanced Application > VLAN > Static VLAN Setup]


    Best Regards,

All Replies

  • mMontana
    mMontana Posts: 1,249
    50 Answers 1000 Comments Friend Collector Fourth Anniversary
     Guru Member
    edited July 2021
    Is DHCP server enable into vLAN 6 on your USG60W?
    Are you gonna use the USG's integrated AP Management for your NWA-1123 AC Pro?
    On your GS2210 the "incoming" vLAN port from USG60W is vLan tagged and enabled?
    Which is the vlan configuration of the port of your AP? AFAIK if not tagged and only with one SSID, vLAN ID should not be necessary...
  • aguswiss
    aguswiss Posts: 3
    Second Anniversary
    Many thanks for your help. I forgot to tag the uplink ports. all is working now.
    Great support
    thanks again

    have a nice day