This article will explain how to use the built-in wireless function in your firewall (USG20W-VPN(USG FLEX 50W)/ATP100W/USG FLEX 100W etc.) configured in Nebula Cloud Center (NCC), and in stand-alone (on-premise mode) using the quick setup (wireless setup wizard) or Manual Setup.

 

Table of Content 

1) Nebula - Configure Built-in Wireless Function 

2) Stand-alone mode - Configure built-in Wireless Function

2.1 Using Quick Setup (Wireless Setup Wizard)

2.2 Using Manual Setup

 

Limitations

1) The wireless option in the firewall both supports 2.4 GHz and 5GHz. However, only one can be used at the same time. So you need to choose between using the 2.4GHz or 5GHz.

2) The built-in Wireless AP and other APs are seperated and cannot communicate with each other. However, if you set the same encryption, SSID name and password, you can make it work.

3) USG40W doesn't support 5GHz

 

1) Nebula - Configure Built-in Wireless Function 

 

a) Navigate to Firewall -> Configure -> Wireless 

b) Name your SSID (WiFi)

c) Enable the SSID by clicking the switch to "green" status

d) Choose the WLAN Security to WPA2-PSK and enter your Associate key (WiFi password)

e) Choose the band (2.4GHz or 5GHz) you want to use for your built-in WiFi. You cannot have 1 Corporate network on 5GHz and Guest WiFi on 2.4GHz, for example.

f) Choose the outgoing interface 

g) Select the outgoing interface (which IP address the WiFi devices should get)

h) Choose the Channel width (the lower the value, the lower the interference level, however - also, lower WiFi throughput)

i) Choose the Channel Deployment (recommended to use Three-Channel Deployment for 2.4GHz and Auto for 5GHz)

j) Hit "Save" to apply the configuration changes

 

2) Stand-alone mode - Configure built-in Wireless Function

Navigate to Configuration -> Wireless -> Built-In AP

 

2.1 Using Quick Setup (Wireless Setup Wizard)

2.1.1 Configure SSID

Choose the SSID (WiFi) that you want to configure and select "on".

 

2.1.2 Configure WPA2 in SSID Profile

Double-click on the ZyXEL SSID and change the Security mode from Open to WPA2 in order to secure your SSID and network:

 

2.1.3 Configure Radio Settings

Choose if you want to use the 2.4GHz, or 5GHz network, you cannot use both at the same time in the built-in AP.

 

2.1.4 Save the Wireless Setup Wizard Configuration

Double-check your settings in the summary page and then hit "save" to enable your SSID

 

 

2.2 Using Manual Setup

2.2.1 Configure General Settings

Navigate to Configuration -> Wireless -> Built-in AP -> General 

 

2.2.2 Configure SSID (SSID Profile)

Double-click on the SSID (WiFi) you want to enable and edit

a) Activate the SSID (WiFi) by ticking the "Activate" box.

b) Name your SSID 

c) Select the outgoing interface (which IP address the WiFi devices should get)

d) Select Security mode: WPA2-Personal and enter a secure pre-shared key (password)

e) Enable Intra-BSS Traffic Blocking if this is a Guest WiFi (read more here)

f) Click "OK" to save the configuration

 

2.2.3 Configure Radio Settings

Go to Configuration -> Wireless -> Built-in AP -> Radio -> General Settings

a) Choose the band (2.4GHz or 5GHz) you want to use for your built-in WiFi. You cannot have 1 Corporate network on 5GHz and Guest WiFi on 2.4GHz, for example.

b) Choose the 802.11 standard you want to use (e.g. 802.11ac)

c) Choose the Channel width (the lower the value, the lower the interference level, however - also, lower WiFi throughput)

d) Select DCS for the best result and the Output Power to 30 in order to maximize the WiFi reach

e) Disable DCS Client Aware and 5GHz DFS Aware if you're having disconnection problems, or interference issues

 

f) Click on "Advance" and enable signal threshold using the values:

Station Signal Threshold: -75

Disassociate Station Threshold: -85

Station Retry Count: 6

Transmission Mode: Fixed Multicast Rate

Multicast Rate: 6

g) Hit "Apply" to save your configuration