This article describes how to use VLANs with UniFi Switches and other wireless and routing devices.
- Set your UniFi devices to tagged VLANs
- Configure VLANs on UniFi Switches
- Assign RADIUS-controlled VLANs
Note: For an introduction to VLANs and more information on using VLANs with otherUniFi wireless and routing devices, see the Related articles section below.
Set your UniFi devices to tagged VLANs
To set a UniFi device, such as a switch or access point, to a tagged VLAN, you’ll first need to adopt that device over the native, or untagged VLAN. Once done, you can define the device’s tagged management VLAN by:
- Logging in to your UniFi Network application and opening the Devices page.
- Click the device’s listing to open its Properties panel.
- Navigate to the Devices > Services > Management VLAN drop-down field and select your desired VLAN.
Note: UniFi Switches that support Layer 3 adoption can be adopted to remote UniFi OS Consoles. For more information, see UniFi - Device Adoption Methods for Remote UniFi OS Consoles.
Configure VLANs on UniFi Switches
By default, UniFi Switch ports are set to All. VLANs can be used with UniFi Switches, but they must be defined in the UniFi Network application. To do so:
- Open the Settings menu and click the Networks tab.
- Click Add New Network.
- Enter your new network’s name, router, VLAN ID, and other desired configurations (e.g., VPN settings, content filters, etc.), then click Add Network.
- Open the Devices page in your Network application.
- Click on your desired switch to open its Properties panel, then select the Ports tab listed at the top.
- Select the desired VLAN from the Port Profile drop-down menu and click Apply Changes.
You can also create a new port profile(s) by either:
- Clicking Manage Port Profiles in the Ports section, or
- Opening your Network application’s Settings menu, selecting the Advanced Features tab, and clicking Add a Port Profile.
Assign RADIUS-controlled VLANs
UniFi Switches also support RADIUS-controlled VLANs. To assign one to your switch:
- Click on your desired switch on the Devices page to open its Properties panel.
- Select the Device tab and enable the 802.1X Control toggle in the Services section.
- Select your desired VLAN from the RADIUS Profile drop-down menu, or click Create New RADIUS Profile to make a new one.
To configure your UniFi Switch’s 802.1x port profile in the Network application settings:
- Open the Settings menu and select the Advanced Features tab.
- Click Add New Port Profile, located in the Advanced Options section, to create or edit a port profile.
To edit your RADIUS profiles, click the RADIUS Settings tab in the Advanced Features menu.
Intro to Networking - Introduction to virtual LANs (VLANs) and tagging
UniFi - VLAN traffic tagging
UniFi - Layer 3 Adoption for Remote UniFi OS Consoles
UniFi - Configuring access policies (802.1X) for wired clients
UniFi - Using VLANs with UniFi Wireless devices
UniFi - Using VLANs with UniFi routing devices