Creating Virtual Networks (VLANs)

Virtual Networks, or VLANs, are used to segment networks for improved performance and security. This guide will cover creating VLANs using UniFi and third-party gateways.

Although a UniFi Gateway or UniFi Cloud Gateway is recommended for the most integrated experience, it is possible to bridge networks/VLANs from a third-party gateway so that they can be broadcasted on UniFi Access Points (APs) and applied to UniFi switch ports.

UniFi Gateway Configuration

1. In UniFi Network, navigate to Settings > Networks > New Virtual Network.
2. Name the network.
3. Optionally configure any manual settings, such as VLAN ID, subnet range, DHCP, isolation, content filtering, and DNS.
4. By default, the firewall on UniFi Gateways allows communication between different VLANs. See Traffic & Firewall Rules to learn about implementing restrictions.

Third-Party Gateway Configuration

1. Configure your network’s subnet, VLAN ID, and DHCP settings on your third-party gateway.
2. In UniFi, navigate to Settings > Networks to create a new virtual network.
3. Although not required, we recommend giving it the same name used in your third-party gateway, for consistency.
4. Enter the same VLAN ID that is configured on your third-party gateway.
5. By default, most third-party gateways block routing between separate VLANs. Make any desired changes on the gateway, not within UniFi.

Next Steps

To assign a Network/VLAN to a UniFi AP’s WiFi, read our article on Creating WiFi and Broadcasting VLANs.

To configure switch ports with VLAN restrictions, read our article on Switch Port VLAN Assignment.