UniFi CloudKey (Gen1)

[DSAGEY]

Hi,

 

We have a UniFi CloudKey (Gen 1) when this was installed in 2020, it wasn't set up to have a Guest Network meaning that when visitors use our WiFi they are using the same as pupils and staff (which requires a certificate to be installed through our internet provider).

 

I'm looking at setting up a Guest Network using a different IP range (so no certificate is required) to our main one, we currently have 3 different IP ranges with LGfL. My question is, do I need to have this additional IP range added to our DHCP server? I don't want them having access to our Network.

 

Any help/guidance would be greatly appreciated.

 

Thank you

Edited June 2, 2023 by DSAGEY

[Davit2005]

Hi,

 

We have a UniFi CloudKey (Gen 1) when this was installed in 2020, it wasn't set up to have a Guest Network meaning that when visitors use our WiFi they are using the same as pupils and staff (which requires a certificate to be installed through our internet provider).

 

I'm looking at setting up a Guest Network using a different IP range (so no certificate is required) to our main one, we currently have 3 different IP ranges with LGfL. My question is, do I need to have this additional IP range added to our DHCP server? I don't want them having access to our Network.

 

Any help/guidance would be greatly appreciated.

 

Thank you

 

You can use firewall or core switch to give out IPs. Personally I'd separate guest traffic and if possible all WiFi traffic by a firewall which blocks by default and you only allow the needed traffic between zones/interfaces (however the firewall works).

 

How can you tell if a student is not using the guest wifi and therefore bypassing filtering, etc.?

Edited June 2, 2023 by Davit2005

[Jcx500]

What I would do is

 

Create a guest vlan on your switch or firewall

 

Create some ACL / firewall policy’s to block access to your main subnets

 

Create a new ssid on the controller.

 

Up to you how you want users to authenticate you can use a psk or captive portal. If you use the capital portly your unifi controller will have to be on for it to work