v1.24.0

vlan

How to setup vlans

Intro

How I setup vlans

Scheme

I will follow the scheme: 10.<VLAN ID>.<VLAN ID>.0/24

VLAN 10 → 10.10.10.0/24
VLAN 20 → 10.20.20.0/24
VLAN 30 → 10.30.30.0/24

DHCP Range

I will also configure DHCP Range to always start on 100. Example with 24 cidr

startstop
10.10.10.10010.10.10.254
10.20.20.10010.20.20.254
10.30.30.10010.30.30.254

Architecture
SSIDVLANSubnetGatewayStatic RangeDHCP RangePurposeColor
-1192.168.1.0/24192.168.1.1--Default (abandoned)
-1010.10.10.0/2410.10.10.1.2 - .99.100 - .254Managementgrey
wifi4home2010.20.20.0/2410.20.20.1.2 - .99.100 - .254Homeblue
wifi4work3010.30.30.0/2410.30.30.1.2 - .99.100 - .254Workyellow
wifi4iot4010.40.40.0/2410.40.40.1.2 - .99.100 - .254IoTteal
wifi4guest5010.50.50.0/2410.50.50.1.2 - .99.100 - .254Guestred
-6010.60.60.0/2410.60.60.1.2 - .99.100 - .254Homelabblack

Critical

For the Default network VLAN when blocking access to the Gateway, this will also disable the ability to adopt new unifi devices. If you need to add a new device, then you'd need to pause the block default to gateway rule temporarily and then reenable it after the device is adopted.

Management VLAN

All unifi devices like switches, APs etc should belong to the Management network. There is one special case tho, the gateway router cannot be overriden it will always display the 192.168.1.1 ip but you can verify the default network is not used/have any leased ips by going to Networks section and checking leased ips for the Default Network.

For all unifi devices navigate to UniFi Devices and for each device (except the gateway router and cameras for example) click on Settings -> IP Settings -> Network Override and select Management network under Virtual Network

Even tho the Management network does not have internet access, the gateway router will still have access to the internet. So you can still access the unifi controller from the internet using the UniFi app or ui.com and manage your devices.