WiFi, VLANs, and Network Design Tips

Solid network design in UniFi OS reduces support tickets and improves WiFi experience.

VLAN basics

• Create Networks under Settings → Networks for each VLAN (Corporate, Guest, IoT, etc.).
• Assign each SSID to the correct network/VLAN.
• On switches, use port profiles so AP uplinks and trunks carry all required VLANs.

WiFi best practices

• Use WPA2/WPA3 — avoid open or WPA-only networks for production.
• Split 2.4 GHz and 5 GHz SSIDs only when needed; modern Band Steering often works better with one SSID.
• Enable Fast Roaming (802.11r) only after testing — some older clients behave poorly with it.
• Set minimum RSSI to discourage sticky clients on weak APs (start around -70 dBm and tune).

Guest WiFi

• Put guest traffic on a dedicated VLAN with guest portal or simple password.
• Enable client isolation so guests cannot see each other or internal resources.
• Apply bandwidth limits if you share one internet circuit with production traffic.

Performance tips

• Place APs for coverage overlap, not maximum distance — especially for VoIP and video.
• Use wireless scans to pick less congested channels on 2.4 GHz.
• Prefer 5 GHz/6 GHz for high-throughput clients when hardware supports it.

Quick checklist

• [ ] Gateway handles inter-VLAN routing (or use L3 switches intentionally)
• [ ] DHCP scopes match each VLAN
• [ ] Firewall rules block IoT/Guest from sensitive subnets
• [ ] Firmware is current on all wireless APs