VLAN Help

bigdunc · 24 Jun 2021 at 19:38

Hi

I want to setup a VLAN with a different subnet and apply it to a guest Wifi network on Ubiquiti AP's. I have got a Draytek router, Ubiquiti switch and 4 x Ubiquiti AP's

What would be the best way to set this up?

Cheers

the-evaluator · 25 Jun 2021 at 07:52

What Draytek router have you got? Is it VLAN aware?

Essentially, create the VLAN in the Draytek then create it in the UniFi controller (as a VLAN only, not a Corporate network) making sure that the VLAN ID's match. Make sure that the switch port that connects to the AP's and Draytek is tagged in that VLAN then create your new WiFi network and give it the VLAN ID you selected earlier.

Avalon · 25 Jun 2021 at 08:04

If you just want isolated guest wifi with bandwidth limiting, you can do that via the Unifi controller with a guest SSID rather than setting up VLAN’s and port tagging. Obviously it depends on what your end goal is and if you need more granularity over routing/filtering than this.

the-evaluator · 25 Jun 2021 at 08:24

Avalon said:
If you just want isolated guest wifi with bandwidth limiting, you can do that via the Unifi controller with a guest SSID rather than setting up VLAN’s and port tagging. Obviously it depends on what your end goal is and if you need more granularity over routing/filtering than this.

I thought a USG was needed for that?

Avalon · 25 Jun 2021 at 09:19

the-evaluator said:
I thought a USG was needed for that?

It can be done with isolation and bandwidth limits on a dedicated SSID in the Unifi controller as stated

bigdunc · 26 Jun 2021 at 09:49

the-evaluator said:
What Draytek router have you got? Is it VLAN aware?

Essentially, create the VLAN in the Draytek then create it in the UniFi controller (as a VLAN only, not a Corporate network) making sure that the VLAN ID's match. Make sure that the switch port that connects to the AP's and Draytek is tagged in that VLAN then create your new WiFi network and give it the VLAN ID you selected earlier.

The Draytek is a 2952 so I'm sure it is VLAN aware. I'll give it a go at setting it up that way

Cheers