Guest Wi-Fi should give visitors internet access without any path back into your internal network — that isolation is the whole point, not an optional extra.

Steps

1. Create a dedicated VLAN for guests first (see our VLAN guide) if you don't already have one.
2. In the UniFi Network application, go to Settings > WiFi and click Create New WiFi Network.
3. Name the network (e.g. "Guest Wi-Fi") and set a password, or leave it open if you plan to use a guest portal for access control instead.
4. Under advanced options, assign the SSID to your guest VLAN.
5. Enable Guest Policies for this network — this typically includes client isolation (guest devices can't see or talk to each other) and blocks access to your internal LAN by default.
6. Optionally enable the Guest Portal under Settings > Guest Control to require a login, terms acceptance, or a voucher code before granting internet access.

Common Questions

Can guests see each other's devices on the network?

Not if client isolation is enabled (it's part of the standard guest network policy) — each guest device is kept from communicating directly with other devices on the same guest network.

Do we need a guest portal, or is a simple password enough?

A shared password is enough for basic access control, but a portal adds a welcome/terms page, gives you visitor visibility, and supports features like time-limited vouchers — worth it for higher-traffic or public-facing locations.