UniFi Access - Assign Access Devices to a Separate VLAN

Assigning UniFi Access devices to a separate VLAN can isolate them from the main network for added security. Devices on different VLANs cannot communicate with each other.

UniFi Console Requirements

• See this article for the consoles supporting the Access application.
• Network Video Recorder Pro (UNVR Pro) does not support having the Ethernet port and SFP port on different VLANs.

Create a VLAN for Access

1. Go to your Network application > Settings > Networks and click New Virtual Network.
2. Follow the on-screen instructions and click Add. Learn more
   

Change Access Control Hub's Port Network

1. Go to your Network application > UniFi Devices and select the console/switch to which the Access Control Hub is connected.
2. In the prompt panel, go to Overview > Port Manager.
3. Select a port and set the Native VLAN / Network to the network you just created.
4. Click Apply Changes.
   

Assign Static IP Address for Access Devices (Optional)

1. Go to your Network application > UniFi Devices and select an Access device.
2. In the prompt panel, go to Settings > IP Settings and tick the Fixed IP Address checkbox.
3. Click Apply Changes.
4. Repeat the steps for all Access devices.
   

Update the UniFi Access Network Settings

1. Ensure the new IPs are applied to your Access devices in your Network application > UniFi Devices. If the IPs are not updated, try unplugging the Ethernet cable and plugging it back in.
2. Go to your Access application > Settings > General > Advanced > Network.
3. Select a network from the dropdown menu and click Apply Changes.