Unifi – VLAN for Guest DHCP with pfSense

• Don’t have enough IPs in your DHCP Scope?
• Don’t want your guests to have the same IP subnet?

Setup a VLAN for your Guest Network

On the pfSense

• Interfaces > Assignments > VLANS > Add
  • set parent interface to your LAN interface
  • choose a VLAN Tag
  • Save
    
• Interfaces > Assignments > Interface Assignments
  • Under available network ports, choose the VLAN you just added from the drop down, click Add
    
• Interfaces > Assignments > Interface Assignments
  • Click on the newly created interface (likely OPT3 or something like that)
  • Enable it, give it a description, set it to use static IPv4, give it a static IPv4 address
    

  

  • Save, Apply Changes
• Services > DHCP Server > UnifiGuest (or whatever you called your Interface)
  • Enable, Assign a range, any other settings you want, Save

  

• Firewall > Rules > UnifiGuest
  • Add, Protocol Any, Save
  • Add^, Action: Block, Protocol: Any, Destination: LAN net

  

On the Unifi Controller

• Select your Site > Settings > Wireless Networks
• Create new (or edit an existing network) > Advanced Options
• Check Use VLAN and enter number