Having a solid guest network is super important if you have a public facing business, such as a coffee shop, hotel, supermarket or retail store. Just as important as creating a good experience for the customers is the security, so we'll explore that here too.

To make a new Guest WiFi network, first go to Settings

Then, go to WiFi

Next, click Create New

Select the various settings such as SSID, Bands etc and then choose if you would like a hotspot portal or not.

The next important step is making a new guest network for your guest WiFi.

While there is some level of isolation that takes place on the access point itself to try to isolate the clients, it isn't fully secure like having the guest clients on a separate VLAN, with firewall rules to completely isolate them from the rest of the devices.

To make a new guest network, go to Settings

Then to Networks

Click on New Virtual Network

Select the various settings such as network name (this can be the same as your guest SSID to keep things simple) and subnet. For more advanced options, you can also choose the VLAN ID and network group.

Once done, click Add and move on to the next section

If your new guest network is designed to just give internet access to the connected guests, then the following firewall rule will work just fine and make sure that those users cannot access anything else on your network.

For blocking the guest network from other important subnets and networks. Make sure to make a new firewall rule that drops all protocols from the guest network going towards your important private networks, in our case the Admin network.

Repeat this same rule for other networks you have.

HostiFi

HostiFi provides hosting for both Ubiquiti and TP-Link software-defined-networking (SDN) applications, with servers for UniFi, UISP and Omada. We also offer professional networking consulting, with HostiFi Pro.

If you run into any issues, send an email to support@hostifi.com or contact us via live chat.