Guest wireless connecting but no internet

Options
ARLamb200
ARLamb200 Posts: 2 image  Freshman Member
in Wireless

Hi,

We have a couple of NWA1123ACv3 devices that are controlled through the Nebula portal. they have two SSIDs on them a business one and a Guest one, the business side is working okay, but the Guest one isn't. the users are connecting and getting an IP address but can't connect to the internet.

I have read a lot of the troubleshooting documentation about how to get this to work, but it hasn't fixed the issue.

The SSID is enabled and broadcasting (the users can see it)

We are using NAT mode, so shouldn't need our own DHCP or DNS Servers

Enable layer 2 isolation is greyed out, so I can't turn it on

The firewall is enabled and has the default entries in it

Can anyone suggest where I am going wrong please?

Thannks

All Replies

  • Zyxel_Tina
    Zyxel_Tina Posts: 529 image  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 100 Answers 500 Comments

    Hi @ARLamb200,

    Welcome to the Zyxel Community!

    Regarding the Layer 2 isolation function appearing greyed out, this occurs when NAT mode is active on your device. In NAT mode, guest traffic uses the AP's IP address as the source IP. For proper Guest WiFi setup, please refer to this FAQ as needed.

    For the issue where guest wireless clients on NWA1123ACv3 devices connect and get IP addresses but lack internet access, please review these troubleshooting steps:

    • Uplink connectivity
      • Although the business SSID works normally, traffic from the Guest SSID in NAT mode follows a different forwarding path. Please perform ping tests from a guest client to confirm reachability to the NWA1123ACv3 and upstream firewall.
    • DNS Resolution Issues
      • Guest clients may get IPs but fail to resolve domain names. Please verify that the DNS servers provided by the AP are reachable. You may perform a test by setting public DNS servers (e.g., Google DNS: 8.8.8.8 or 8.8.4.4) on a client to isolate DNS problems.
    • Upstream Firewall Rules
      • Even if the AP has internet access to connect with NCC, the upstream firewall may block traffic to other domains and ports. Please check the upstream device's firewall/security rules to allow other domains and ports.

    If the issue persists, please collect the diagnostic info file, enable Zyxel Support Access, and provide your organization and site names along with the file via private message. We'll review the configuration and logs directly.

    Zyxel Tina

Categories

Wireless Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）