UniFi: networks, VLANs, Wi-Fi and the zone-based firewall

Skills you'll practise

• Create a virtual network and assign clients to it by SSID, switch port or RADIUS
• Configure switch ports as access or trunk ports with Native and Tagged VLAN settings without breaking an AP uplink
• Choose SSID settings (bands, band steering, isolation, fast roaming) for staff, guest and IoT networks
• Isolate a guest network with Network Isolation, Client Device Isolation and Device Isolation (ACL)
• Write zone-based firewall policies with the right zones, actions and order

Course outline

1. 1.Virtual networks and switch portsLesson · 18 min
2. 2.Wi-Fi settings that matterLesson · 15 min
3. 3.Guest isolation and the zone-based firewallLesson · 20 min
4. 4.UniFi: networks, VLANs, Wi-Fi and the zone-based firewall: knowledge checkKnowledge check · 16 questions
5. 5.New UniFi AP on the management VLAN won't adoptScenario
6. 6.Final exam10 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Ubiquiti Help Center: Creating Virtual Networks (VLANs)
• Ubiquiti Help Center: Switch Port VLAN Assignment (Trunk & Access Ports)
• Ubiquiti Help Center: UniFi WiFi SSID and AP Settings Overview
• Ubiquiti Help Center: Best Practices: Guest WiFi
• Ubiquiti Help Center: Implementing Network and Client Isolation in UniFi
• Ubiquiti Help Center: Zone-Based Firewalls in UniFi