How to set up Multiple SSIDs in UniFi for Guest, IoT, and Admin Networks

If you’re running a café, managing an office, or just trying to keep your smart home devices from slowing down your Netflix stream, creating multiple Wi-Fi networks can make a huge difference. With Ubiquiti UniFi gear, you’re in luck, it’s built exactly for this kind of control.

This guide walks you through how to configure different Wi-Fi names (a.k.a. SSIDs) in UniFi, why you’d want to do that, and how to customize each one for different users or devices.

Let's dive in !!

---

Why You Might Want Multiple Wi-Fi Networks

Let’s start with the why. Here are a few situations where different SSIDs make your life easier:

• Separate Guest Access: Keep business or personal devices safe from outsiders.
• Bandwidth Management: Prioritize business traffic over casual browsing.
• Device Isolation: IoT devices are vulnerable, segregating them protects your main devices.
• Organized Troubleshooting: Each network serves a specific purpose, making issues easier to track.
• Branding & UX: Let’s face it, “CafeGuest” sounds better than “Linksys123.”

Step 1: Access Your UniFi Network Controller

Everything starts at the UniFi Network Controller. This could be running on:

• A UniFi Cloud Key
• A UniFi Dream Machine (UDM / UDM Pro)
• A server (VPS, Docker, Raspberry Pi, etc.)
• A managed cloud controller (like UniHosted)

Once you’re in, head to the UniFi Network Application. If it’s self-hosted, go to: https://<your-server-ip>:8443

Step 2: Create Your First Wi-Fi Network (Main SSID)

Let’s build your primary network, the one used by you, your team, or your family.

Settings:

• Name: MainNetwork (or anything you prefer)
• Security: WPA2/WPA3 Personal
• Password: Keep it strong
• Broadcast SSID: ON (unless you want it hidden)

Save it, and your main network is live.

Step 3: Add a Guest Wi-Fi Network

A dedicated guest network protects your internal devices and helps control abuse.

Steps:

• Create a new SSID, name it something like GuestWiFi
• Enable Guest Network and Apply Guest Policies
• Set a password or leave it open with a captive portal
• Enable VLAN (optional) for deeper isolation

This setup ensures guests can browse safely without accessing shared printers, NAS drives, or other internal assets.

Step 4: Create a Network for Smart Devices

IoT devices can’t be trusted with access to your whole network. Keep them on their own SSID.

• Name: SmartHome, IoTZone, etc.
• WPA2 Personal with a simple password
• Disable multicast filtering if using devices like Chromecast
• Use VLAN to segment traffic

Many smart devices only support 2.4 GHz, so ensure this SSID allows that band.

Step 5: Enable VLANs to Keep Things Clean

VLANs (Virtual LANs) let you separate traffic virtually even if it's on the same physical network.

SSID Name	Purpose	VLAN ID
MainNetwork	Admin devices	10
GuestWiFi	Visitors	20
SmartHome	IoT devices	30

To apply:

• Go to Wi-Fi > Select SSID > Advanced
• Assign VLAN ID
• Make sure your router/switch supports VLAN tagging (e.g., USG, UDM Pro)

Step 6: Assign SSIDs to Specific Access Points

You don’t need every access point broadcasting all SSIDs. Let’s say you want only the front-lobby AP to serve guests.

Steps:

1. Create AP Groups under Settings → Profiles → AP Groups
2. Assign access points to each group
3. When creating an SSID, select which AP group should broadcast it

It’s a great way to prevent overlap, improve signal clarity, and manage device behavior.

Step 7: Use Device Groups and User Tags (Advanced)

Want to tag all your sales laptops or limit certain mobile devices?

1. Under Client Devices, you can assign tags or place them into user groups.
2. User groups let you limit speed, session time, or access times.
3. Great for applying consistent rules across multiple devices.

Example:

• Tag: StaffDevice
• Group: RestrictedAccessGroup
• Apply 10 Mbps bandwidth cap

Step 8: Add Bandwidth and Time Restrictions

Not everyone needs full speed all the time. Here’s how to keep bandwidth fair:

• Go to Settings → User Groups
• Create a group like “GuestLimited”
• Set download/upload speed caps (e.g., 5 Mbps)
• Assign this group in the Wi-Fi SSID’s Advanced Settings

For Wi-Fi hours:

• Go to the SSID
• Enable Wi-Fi Schedule
• Limit access to specific times (e.g., 9 AM – 9 PM)

Step 9: Test All Your Networks

Checklist:

• Can each SSID connect properly?
• Is the right VLAN assigned?
• Are guest users blocked from internal LAN?
• Do APs only broadcast assigned SSIDs?
• Do bandwidth rules apply?

Tools like ping, UniFi’s built-in Client Insight, and mobile speed test apps help validate your setup.

Real-World Case Study: Co-Working Space Wi-Fi

Scenario: A co-working office has 3 SSIDs:

• OpenDesk: For daily pass users, 10 Mbps cap, no LAN access
• FullMember: For long-term users, no restrictions
• AdminNetwork: For printers, security cams, and VoIP systems

Outcome:

• Guests can't sniff LAN traffic.
• Admin devices are invisible to regular users.
• Network health is easier to monitor and manage.

This is textbook UniFi.

Additional Tips for Performance

Optimize Frequency Bands Limit some SSIDs to 5GHz for performance. Use 2.4GHz only for IoT.

** Reduce Channel Overlap** Set APs to auto-select non-overlapping channels. If needed, manually assign channels 1, 6, and 11 (2.4 GHz).

** Enable Band Steering** Encourages dual-band devices to connect to faster 5GHz.

Use Insights → Client History Track who connects, when, and for how long. Helpful for diagnostics or security reviews.

SSID Design Table

SSID Name	Use Case	Hidden?	VLAN	Bandwidth Cap	Time Restricted
MainNetwork	Admin work devices	No	10	No cap	No
GuestWiFi	Visitors, short-term	No	20	5 Mbps	Yes
SmartHome	IoT gadgets	Yes	30	2 Mbps	No
EventsOnly	Temporary access zones	No	40	10 Mbps	Yes

Troubleshooting Quick Hits

Issue: Devices can't connect to one SSID

• Check if AP is in the correct AP group
• Ensure band settings match the device (e.g., 2.4GHz)

Issue: Guests can access the main network

• Double-check guest firewall rules and VLANs

Issue: IoT device fails to connect

• Try disabling “Block LAN to WLAN Multicast and Broadcast”
• Enable legacy support or WPA2 fallback

Issue: Performance lags at night

• Someone might be hogging bandwidth. Check Client Usage Insights

Final Thoughts

UniFi makes it really simple to build a smart, segmented Wi-Fi network, without having to be a network engineer. By creating multiple SSIDs, you take control of your traffic, enforce better security, and deliver a smoother user experience.

And if setting this up still feels like a lot, don’t worry. We can help.

At Uniosted, we provide managed UniFi controllers with pre-configured VLANs, SSIDs, firewall rules, and performance profiles. Whether you’re setting up a single location or multiple branches, we’ve got you covered.