Source
r/Ubiquiti•
yeahoner

How to silo SSID's from each other?

Question

I've got a pretty simple setup:

  • I have four unifi AP's.
  • I can't get my ISP to switch their modem to pass-through mode without paying extra for a static IP so I'm just using it as the router.
  • I run the controller on an old mac right now. I bought a cloud key to keep the controller running full time but I haven't set it up.

I set up multiple SSID's so the two rental units we have can have their own login, but we can still see all of the printers each of us have, and smart speakers and TV's and such.

I tried setting up VLAN's for each, but I maybe didn't do it right, or maybe the hardware I have can't do that without buying a USG or something, but when It was setup only the main SSID on the "corporate" network had internet access.

Can anyone point me in the direction of a setup guide for this process? Do I need additional hardware? I've tried some googling to no avail.

Thanks, I'm a intermediate level user, getting to the edge of my depth here.

Posted Mar 20, 2023, 8:21 PM UTC

15
AutoModeratorMOD•

Hello! Thanks for posting on r/Ubiquiti!

This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.

Please read and understand the rules in the sidebar, as posts and comments that violate them will be removed. Please put all off topic posts in the weekly off topic thread that is stickied to the top of the subreddit.

If you see people spreading misinformation, trying to mislead others, or other inappropriate behavior, please report it!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1
SaltyMind•

Hi, you probably need an extra router to set up vlans. An USG or dream machine will do if you want to stick to Ubiquiti. You'll have 2 routers daisy chained, but thats fine. Dream machine will run the controller as well, so you wont need the cloud key for that.

For each vlan you can setup up a separate subnet and isolate them in the firewall rules. Then you can attach different ssid's to each vlan. Search youtube for instruction videos on vlans on USG

1
yeahonerOP•

thanks. yeah. my isp won’t let me access any of the settings on their router so i’ll need to add a layer over that i guess. somehow i thought the cloud key was going to let me do that. too bad all the prices spiked so hard on this stuff.

1
SaltyMind•

A used USG is doing $50 to $75 in my area, so it's not that bad. Any old hardware with 2 network connections will do if you put Pfsense or OPNsense on it.

2
willdeliver4money•

Preventing one VLAN traffic from going to another VLAN is done in the firewall rules. So you will want to contact the support for your firewall/router on how to config its firewall rules. It will be different for each manufacturer.

1