UniFi - Guest Access?

M

marley1

Supreme [H]ardness
Joined
Jul 18, 2000
Messages
5,447
Do you need any special router for UniFi if you want to have your office network and then a guest network?

Normally you would need to do a VLAN and then have another DHCP server.
 
marley1 said:
Do you need any special router for UniFi if you want to have your office network and then a guest network?

Normally you would need to do a VLAN and then have another DHCP server.
Click to expand...

you can do vlans, and a seperate dhcp network for the new vlan. I'd also make a block rule between subnets..

what router / firewall do you have ?
 
do you need to do vlan? thats what I am wondering.

i am wondering if all this is built into the unifi. at the site we have they dont have a router that can do vlan.
 
marley1 said:
do you need to do vlan? thats what I am wondering.

i am wondering if all this is built into the unifi. at the site we have they dont have a router that can do vlan.
Click to expand...

not sure how you are going to do this then, because you will be giving them access to the network if you just do a guest access, im not to sure how the unifi's work but im pretty sure they work like the rest.

What kind of firewall / router do they have then ?
 
Does the router have interfaces that can be additional LAN interfaces? I'm doing a Unify setup where I'm going to have 1x AP connected to a 2nd LAN interface on an Untangle NG-100 unit...just for guests.
 
Its an RV042. From what I am reading the UniFi controller has Level3 built in, and when you do the guest mode they cant communicate with the other SSID. I do not have one to test so can't tell.

Brian do you have one at the office?
 
switches were provided by someone else, believe they are just gigabit unmanaged
 
Client Isolation mode works...within other wireless clients..but soon as the traffic leaves the AP and hits the LAN nothing can police it so it can find other nodes on the switch. True client AP with wireless with smaller biz stuff needs to be done from wireless built in a router. Or on higher end wireless controllers that are fed from anutter VLAN. At least AFAIK.

I had one at the office for a month or so, but it got put to use elsewhere...so we don't run them at our office. Got some at clients though, working well....but setup with traditional LAN access. The one I'm doing with Untangle will be the first one truely for guests at a client..I'm sure that will work fine though since it's going to a dedicated Untangle interface.
 
YeOldeStonecat said:
Client Isolation mode works...within other wireless clients..but soon as the traffic leaves the AP and hits the LAN nothing can police it so it can find other nodes on the switch. True client AP with wireless with smaller biz stuff needs to be done from wireless built in a router. Or on higher end wireless controllers that are fed from anutter VLAN. At least AFAIK.

I had one at the office for a month or so, but it got put to use elsewhere...so we don't run them at our office. Got some at clients though, working well....but setup with traditional LAN access. The one I'm doing with Untangle will be the first one truely for guests at a client..I'm sure that will work fine though since it's going to a dedicated Untangle interface.
Click to expand...

Exactly how I have mine set-up,

Port one Lan
port 2 wireless AP with different subnet & rules to see certain things like printer on LAN network, all other things blocked, and only allowed OUT to the WWW...

Only thing i think is stupid with Untangle is, if yu have 2 NIC ports and add in another, it becomes DMZ, so to get a second port you need to add in two ports..

Good thing PCI & PCIE dp cards are cheap..
 
On the Unifi you can apply guest policies. Basically you'll get an IP from the same DHCP server as everyone else, but you cannot access or even ping anything on the network when it's enabled.

Or you can go with VLAN route and multiple DHCP servers which works really well. That's how mine is setup at home with 4 VLANs just for wireless to give me guest access, internal network, and two test networks with different Public IPs.
 
Does the UniFi provide any kind of captive portal for guest access or is it just open/PSK only?
 
/usr/home said:
On the Unifi you can apply guest policies. Basically you'll get an IP from the same DHCP server as everyone else, but you cannot access or even ping anything on the network when it's enabled.

Or you can go with VLAN route and multiple DHCP servers which works really well. That's how mine is setup at home with 4 VLANs just for wireless to give me guest access, internal network, and two test networks with different Public IPs.
Click to expand...

Perfect that sounds like it will do what we want. As long as the guest network cant access anything on the network. It's proposed for 6 of them
 
dashpuppy said:
Only thing i think is stupid with Untangle is, if yu have 2 NIC ports and add in another, it becomes DMZ, so to get a second port you need to add in two ports.. ..
Click to expand...

That is just a default name it assigns the port....don't let it confuse you, you can do whatever you want with it equally as if you added a 3rd or 4th interface.
 
You must log in or register to reply here.
Back
Top