This article discusses how to use VLANs with UniFi Network routing products. Find a link to an introductory article on VLANs in the Related Articles below, as well as how to use VLANs on UniFi switching and wireless devices.
Table of Contents
UniFi Device Management
Begin by adopting the UniFi wireless device over the native, or untagged, VLAN. This will be the continued requirement. That being said, L3 management is supported, so the UniFi Network Controller can remote. See more about that in the UniFi - Device Adoption Methods for Remote UniFi Controllers article.
As of Controller software version 5.8, access points and switches can be set to tagged VLANs. After the device is adopted over the untagged VLAN, define a tagged management VLAN to use. This is found under the device Properties window (from the Devices page click on the device to reveal the Properties Panel). Select Config (gear icon) > Services > Management VLAN.
How to Configure VLANs on UniFi Routing Devices
The UniFi Security Gateway (USG) and UniFi Dream Machine (UDM and UDM-Pro) can be used to manage DHCP server, routing, and VLANs on networks. It would also use the Settings > Networks area to define subnets. A corporate network has no restrictions, whereas a guest network cannot communicate with other subnets on your network. The guest control settings are also applied to guest networks (i.e. wired guest portal).
The default physical LAN interface's network is, by default, using untagged VLAN 1. There can be multiple VIFs (virtual interface/VLANs) per physical LAN interface. The VLAN ID of the untagged subnet (it is 1 or 4010, depending on if it's LAN or VoIP subnet) cannot be edited. The settings window looks similar for both corporate and guest networks, so only a corporate network will be shown below. Basically, enter the desired IP with CIDR, and then choose the VLAN ID.