Wireless

Segment Your Wireless Networks Using VLANs

Segment Your Wireless Networks Using VLANs

Configure VLANs per SSID on UniFi wireless access points

One great feature of enterprise ready wireless access points is VLAN support. This feature allows greater control over the flow of data on your wireless network as with wired networks. Quality of service controls may be applied, the broadcast domain of the wireless network may be reduced, and traffic on the network may be isolated. VLAN support on your wireless access point also allows you to extend your wired VLAN networks to your wireless VLAN networks.
Enabling Guest Control in UniFi Controller Blocked Access to Local Network Services by Default

Enabling Guest Control in UniFi Controller Blocked Access to Local Network Services by Default

Properly configuring guest isolation in the UniFi Controller

For my guest wireless network, I like the idea of all of the network devices on the guest network to be isolated from one another. Since the guest network should be used for visitors and other untrusted devices, it makes sense to restrict communication between the devices to improve security. Even though captive portals are a pretty cool feature that can provide a “wow” factor for guests that log onto your guest network, I have read where the captive portal on UniFi wireless access points can reduce the throughput of the guest network.