UniFi Hotspot Portal and Guest WiFi

Use the UniFi Hotspot Portal to create a professional and custom-branded landing page enabling guests to securely connect to your WiFi.

Enabling a Hotspot Portal

You can convert standard WiFi into a Hotspot Portal by navigating to UniFi Network > Settings > WiFi > Select a WiFi instance > Enable Hotspot Portal. 

Configuring a Hotspot

Once enabled, use the Hotspot Manager icon on the left sidebar and select the Landing Page tab to customize your portal.

Branding

UniFi provides an intuitive way to add custom branding to your landing page. Configurable options include Title, Welcome Text, Login Button, Logo, Success Text, and complete Color Schemes.

Authentication

Easily select one or multiple ways for your guests to connect:

• Facebook: Guests can authenticate using a Facebook account.
• Password: Guests must enter a password to connect.
• Payment: Guests must pay to use the WiFi. This is currently supported by Stripe.
• Vouchers: Provide guests with vouchers that can be used to authenticate. Customize vouchers to support various expiration times, bandwidth limits, or data consumption quotas.
• RADIUS (advanced): Preconfigure guest authentication via a RADIUS server.
• External Portal Server (advanced): Integrate with a third-party portal server.

Security and Isolation

By default, guests connected to your Hotspot Portal will be isolated from all other networks except the one they are assigned to. This can be modified by enabling Pre-Authorization Allowances. 

Note: Do not create additional allowances for captive portal sites, such as captive.apple.com (iOS), or connectivitycheck.gstatic.com (Android). This will break the redirection process and prevent devices from captive portal authentication.

Configuring a Guest Network

If a UniFi Gateway is present, Virtual Networks can also be configured to securely allow both wired and WiFi guests to connect. You can convert a standard network into a guest network by navigating to UniFi Network > Settings > Networks > Select a Virtual Network > Enable Isolation. 

This creates firewall rules on the UniFi Gateway which automatically isolates guests from other networks not defined as guest networks. Guests on this network are able to access the internet, and communicate with the UniFi gateway to obtain a DHCP lease and resolve names using DNS. If the landing page is enabled in the Hotspot Manager, both wired and WiFi guests are also redirected for authentication.