How to enable or disable NAT-Mode

Zyxel AP NAT mode is a network setting on Zyxel access points where the AP itself acts as a DHCP server and NAT (Network Address Translation) device. This mode creates an isolated network for wireless clients. Client cannot communicate with other clients associated with different AP.

If AP management IP address is NOT part of “10.0.0.0/8”, SSID subnet becomes “10.0.0.0/8”.

If AP management IP address is part of “10.0.0.0/8”, SSID subnet becomes “172.16.0.0/12”

Go to Configure > Access points> SSID settings. Add to SSID as "Wi-Fi". Then click "Edit".

Supported model list:
NWA50AX, NWA50AX PRO, NWA55AXE, NWA90AX, NWA90AX PRO, NWA110AX, NWA110BE, NWA130BE, NWA210AX, NWA210BE, NWA220AX-6E, NWA1123-AC HD, NWA1123ACv3, NWA1302-AC, NWA5123-AC HD, WAC500, WAC500H, WAC5302D-Sv2, WAC6303D-S, WAX300H, WAX510D, WAX610D, WAX620D-6E, WAX630S, WAX640S-6E, WAX650S, WAX655E, WBE510D, WBE530, WBE630S, WBE660S

Note: Updated model information is available here Device function table

• The following AP features do not work when NAT mode is on.
      a. 802.11r
      b. Layer2 isolation
      c. Dynamic VLAN (cloud authentication, RADIUS server)
• When NAT mode is enabled on non-supported models, Nebula CC does not show any error message. And non-supported models disable any SSID with NAT mode enabled.
• The IP address lease time is 8 hours.