Assistance with Guest SSID and VLAN Configuration

mike_bt
mike_bt Posts: 8
First Comment Friend Collector
in USG FLEX H Series

I am using a Zyxel USG110 and have two Zyxel Access Points (APs) connected directly to the same LAN1 network (ports 4 and 5). The current configuration includes a Wi-Fi network with an SSID that uses the LAN1 IP subnet.

I would like to create an additional guest SSID and assign VLAN10 to it. The intended network setup is as follows:

  • The USG110 provides internet access through the WAN interface.
  • Ports 4 and 5 on the USG110 connect to the APs.

Could you please guide me on how to configure the guest SSID with VLAN10 while ensuring the APs receive the necessary VLAN information from the USG110?

Accepted Solution

  • PeterUK
    PeterUK Posts: 3,348  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 25 Answer ✓

    That would be why its not working you need a VLAN PoE switch to tag the VLAN from USG to AP or just PoE injectors

«1

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,342  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @mike_bt,

    Please reference the handbook of USG110 page 691 "How to create a Wi-Fi VLAN interfaces to separate staff network and Guest network".

    USG110_Handbook_ZLD4.60_Handbook.pdf

    This chapter guides you on how to set up the guest VLAN interface on USG110. For the SSID setting, although the handbook uses controller mode, you can still reference it since the configuration steps are similar to the standalone mode of your access point.

    Hope it helps.

    Zyxel Melen

    Engage in the Community, become an MVP, and win exclusive prizes!


  • mike_bt
    mike_bt Posts: 8
    First Comment Friend Collector

    Hello and sorry for the late reply.
    I followed all the steps but unfortunately it did not work.

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,342  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @mike_bt,

    Could you screenshot the current setting and share it with us? It will help us to clarify the issue. You need to screenshot the Interface > ethernet setting & port setting page information for FW part. And SSID settings for AP part.

    Zyxel Melen

    Engage in the Community, become an MVP, and win exclusive prizes!


  • mike_bt
    mike_bt Posts: 8
    First Comment Friend Collector

    Hello,

    As per your request.

    1.png
    2.png

  • PeterUK
    PeterUK Posts: 3,348  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 22

    What AP's do you have? When you say the AP are directly connected ports P6 and P7 on LAN2 just with PoE and no switch?

    Make a zone first

    To make VLAN 10 go the VLAN tab and add with

    interface internal

    VLAN 10

    zone guest

    base port LAN2

    VLAN ID 10

    IP of guest network and DHCP

    on AP go to AP profile SSID tab security make a password for guest

    go to SSID add in profile name the SSID guest password VLAN ID 10

    go to AP management and add guess profile to the WIFI radio

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,342  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited July 23

    Hi @mike_bt,

    I remember you said your APs are connected directly to the same LAN1 network (ports 4 and 5). Looks like you change these to ports 6 and 7?

    If yes, you can follow @PeterUK's suggestion.

    If they still connect to P4 and P5, you just need to change one setting in the above configuration "the base port from LAN2 to LAN1".

    Zyxel Melen

    Engage in the Community, become an MVP, and win exclusive prizes!


  • mike_bt
    mike_bt Posts: 8
    First Comment Friend Collector

    I have 2 APs connected to the Zyxel USG110 (Model: NWA5123-AC).
    All steps mentioned by @PeterUK are already done and checked them again.

    The problem is that when a user connects to the Guest SSID, he doesn't get and IP address, just APIPA with no internet.

  • PeterUK
    PeterUK Posts: 3,348  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    how are the AP's powered?

  • mike_bt
    mike_bt Posts: 8
    First Comment Friend Collector

    APs are powered through a PoE switch (acting as dumb switch)

  • PeterUK
    PeterUK Posts: 3,348  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 25 Answer ✓

    That would be why its not working you need a VLAN PoE switch to tag the VLAN from USG to AP or just PoE injectors

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）