Nebula SSID-Tags - different SSIDs to different Access Points in Nebula

Created June 02, 2020 06:09 - Updated April 07, 2026 12:29

Serhii Boiarynov

SSID Tags in Nebula Control Center (NCC) allow network administrators to control which Access Points (APs) broadcast specific SSIDs.
This feature is especially useful in multi-branch, multi-floor, or role-based wireless environments, where different APs should serve different user groups or VLANs.

When configured, only APs whose tags match an SSID’s tag will broadcast that SSID — giving administrators precise control over wireless availability.

How SSID Tags Work

Without tags: All APs broadcast the SSID.
With tags: Only APs that have at least one tag matching the SSID tag will broadcast it.

SSID Tag Assigned?	AP Tag Matches?	SSID Broadcasts?
No	—	✅ Yes (all APs)
Yes	Yes	✅ Yes
Yes	No	❌ No

Relationship Between AP Groups and Tags

Tags operate within the scope of an AP Group.
They are not global objects and cannot be shared across different groups.

Tags created under one AP Group cannot be used by APs in another group.
The same tag name (e.g., “tag-01”) can exist in multiple AP Groups, but they remain independent.
The “All” AP Group view does not allow tag creation — the tag option is greyed out in this view.
(This behavior helps prevent cross-group configuration conflicts.)

🔹 Example:
Group A → tags: A1, A2
Group B → tags: B1, B2
Tags A1 and B1 are unrelated and cannot be mixed between groups

Configuration Procedure

The new Tags appear on the lobby and office APs in Site-wide > Devices > Access points.

Go to Site-wide > Configure > SSID settings. Select the “lobby” tag for the previously configured “SSID_lobby”. Select the “office” tag for the previously configured “SSID_office”.

The Nebula Devices will broadcast SSIDs according to the assigned tags.

Go to Site-wide > Clients to check the WiFi clients connection status.

System Limits Summary

Parameter	Limit
Tags per AP	32
Tags per SSID	32
Tags per AP Group	32
AP Groups per Controller	8
Tags per Controller	256 (8 × 32)

Troubleshooting and Verification

“Tag” field greyed out?
→ You’re viewing the “All” AP Group — switch to a specific group.
SSID not broadcasting?
→ Confirm at least one AP’s tag matches one of the SSID’s tags.
Too many tags assigned?
→ Check the 32-tag limits on both AP and SSID levels.

SSID Tagging provides a scalable way to deploy selective SSID broadcasting in multi-branch environments without creating redundant network objects. By combining AP Groups and per-SSID tags, administrators can maintain a clean, flexible wireless topology that aligns with organizational structure and access policies.