WiFi 6E (IEEE802.11ax – Extended Standard)
WiFi 6E is an extended standard of WiFi 6 (IEEE 802.11ax). WiFi 6E inherits all the WiFi 6 features and brings with an additional 6 GHz band. The 6 GHz band allows you to avoid possible congested traffic in the lower 2.4 GHz and 5 GHz bands. WiFi clients must support WiFi 6E to connect to the device using the 6 GHz band.
You must use WPA3 for security with WiFi 6E.
* Check your client device’s product specification to see if your client device supports the 6 GHz band (WiFi 6E). If not, you should still use the 2.4/5 GHz bands for connection.
Wireless General Settings
Use this screen to enable the WiFi, enter the SSID and select the WiFi security mode. We recommend that you select More Secure to enable WPA3-SAE data encryption.
*If you are configuring the Zyxel Device from a computer connected by WiFi and you change the Zyxel Device’s SSID, channel or security settings, you will lose your WiFi connection when you press Apply. You must change the WiFi settings of your computer to match the new settings on the Zyxel Device.
*If upstream or downstream bandwidth is empty, the Zyxel Device sets the value automatically.
*Setting a maximum upstream or downstream bandwidth will significantly decrease wireless performance.
*Keep the same settings for 2.4G, 5G wireless networks is enabled and cannot be disabled when you enable MPro Mesh in the Network > Wireless > MESH screen.
Click Network Setting > Wireless to open the General screen.
Network Setting > Wireless > General
The following table describes the general WiFi labels in this screen.
Network Setting > Wireless > General 
Select Keep the same settings for 2.4G, 5G and 6G wireless networks and the 2.4 GHz, 5 GHz and 6 GHz WiFi networks will use the same SSID and wireless security settings.
Wireless/WiFi Network Setup
This shows the WiFi band which this radio profile is using. 2.4GHz is the frequency used by IEEE 802.11b/g/n/ax WiFi clients, 5GHz is used by IEEE 802.11a/n/ac/ax WiFi clients while 6GHz is used by IEEE 802.11a/n/ac/ax WiFi clients.
Click this switch to enable or disable WiFi in this field. When the switch turns blue, the function is enabled. Otherwise, it is not.
Select a channel from the drop-down list box. The options vary depending on the frequency band and the country you are in.
Use Auto to have the Zyxel Device automatically determine a channel to use.
A standard 20 MHz channel offers transfer speeds of up to 150 Mbps whereas a 40 MHz channel uses two standard channels and offers speeds of up to 300 Mbps.
40 MHz (channel bonding or dual channel) bonds two adjacent radio channels to increase throughput. The WiFi clients must also support 40 MHz. It is often better to use the 20 MHz setting in a location where the environment hinders the WiFi signal.
An 80 MHz channel groups adjacent 40 MHz channels into pairs to increase bandwidth even higher.
Select 20MHz if you want to lessen radio interference with other wireless devices in your neighborhood or the WiFi clients do not support channel bonding.
Not all Zyxel Devices support all channels. The Zyxel Device will choose the best bandwidth available automatically depending on the radio you chose and network conditions.
Control Sideband
This is available for some regions when you select a specific channel and set the Bandwidth field to 40MHz or 20/40MHz. Set whether the control channel (set in the Channel field) should be in the Lower or Upper range of channel bands.
Wireless/WiFi Network Settings
Wireless/WiFi Network Name
The SSID (Service Set IDentity) identifies the service set with which a wireless device is associated. Wireless devices associating to the access point (AP) must have the same SSID.
Enter a descriptive name for this WiFi network. You can use up to 32 printable characters, including spaces.
Max Clients
Specify the maximum number of clients that can connect to this network at the same time.
Select this checkbox to hide the SSID in the outgoing beacon frame so a station cannot obtain the SSID through scanning using a site survey tool.
This checkbox is grayed out if the WPS function is enabled in the Network Setting > Wireless > WPS screen.
Blocking BSSID LAN Access
Select this checkbox so that the WiFi client’s access to all devices on the LAN will be blocked.
Multicast Forwarding
Select this checkbox to allow the Zyxel Device to convert wireless Multicast traffic into wireless unicast traffic.
Max. Upstream Bandwidth
Max. Upstream Bandwidth allows you to specify the maximum rate for upstream wireless traffic to the WAN from this wireless LAN in kilobits per second (Kbps).
Max. Downstream Bandwidth
Max. Upstream Bandwidth allows you to specify the maximum rate for downstream wireless traffic to this wireless LAN from the WAN in kilobits per second (Kbps).
This shows the MAC address of the wireless interface on the Zyxel Device when WiFi is enabled.
Security Level
Security Mode
Select More Secure (Recommended) to add security on this WiFi network. The WiFi clients which want to associate to this network must have same WiFi security settings as the Zyxel Device. When you select to use a security, additional options appears in this screen.
Or you can select No Security to allow any client to associate this network without any data encryption or authentication.
See the following sections for more details about this field.
Click Cancel to restore your previously saved settings.
Click Apply to save your changes.
No Security
Select No Security to allow wireless stations to communicate with the access points without any data encryption or authentication.
*If you do not enable any WiFi security on your Zyxel Device, your network is accessible to any wireless networking device that is within range.
Wireless > General: No Security
The following table describes the labels in this screen.
Wireless > General: No Security
Security Level
Choose No Security to allow all WiFi connections without data encryption or authentication.
More Secure (Recommended)
The WPA-PSK (WiFi Protected Access-Pre-Shared Key) security mode provides both improved data encryption and user authentication over WEP. Using a pre-shared key, both the Zyxel Device and the connecting client share a common password in order to validate the connection. This type of encryption, while robust, is not as strong as WPA, WPA2 or even WPA2-PSK. The WPA2-PSK security mode is a more robust version of the WPA encryption standard. It offers better security, although the use of PSK makes it less robust than it could be.
The WPA3-SAE (Simultaneous Authentication of Equals handshake) security mode protects against dictionary attacks (password guessing attempts). It improves security by requiring a new encryption key every time a WPA3 connection is made. A handshake is the communication between the Zyxel Device and a connecting client at the beginning of a WiFi session.
Click Network Setting > Wireless to display the General screen. Select More Secure as the security level. Then select WPA3-SAE from the Security Mode list if your WiFi client supports it. If you are not sure, select WPA3-SAE/WPA2-PSK or WPA2-PSK.
Wireless > General: More Secure: WPA3-SAE/WPA2-PSK
The following table describes the labels in this screen.
Wireless > General: More Secure: WPA3-SAE/WPA2-PSK 
Security Level
Select More Secure to enable data encryption.
Security Mode
Select a security mode from the drop-down list box.
Protected Management Frames
WiFi with Protected Management Frames (PMF) provides protection for unicast and Multicast management action frames. Unicast management action frames are protected from both eavesdropping and forging, and Multicast management action frames are protected from forging. Select Capable if the WiFi client supports PMF, then the management frames will be encrypted. Select Required to force the WiFi client to support PMF; otherwise the authentication cannot be performed by the Zyxel Device. Otherwise, select Disabled.
Generate password automatically
Select this option to have the Zyxel Device automatically generate a password. The password field will not be configurable when you select this option.
Select Generate password automatically or enter a Password.
The password has two uses.
1. Manual. Manually enter the same password on the Zyxel Device and the client. You can use 8 – 63 alphanumeric (0-9, a-z, A-Z) and special characters, including spaces.
2. WPS. When using WPS, the Zyxel Device sends this password to the client.
*More than 63 hexadecimal characters are not accepted for WPS.
Click the Eye icon to show or hide the password for your wireless network. When the Eye icon is slashed , you will see the password in plain text. Otherwise, it is hidden.
This displays the current password strength – weak, medium, strong.
Click this to show more fields in this section. Click this to hide them.
AES is the default data encryption type, which uses a 128-bit key.
Select the encryption type (AES or TKIP+AES) for data encryption.
Select AES if your WiFi clients can all use AES.
Select TKIP+AES to allow the WiFi clients to use either TKIP or AES.
*Not all models support TKIP+AES encryption.
This is the rate at which the RADIUS server sends a new group key out to all clients.