Configuring VLAN for guest network and transmit over external hardware

[Thomas233]

Hello,

just another question where I am not fully sure how to solve it.

I want - as the full source of thruth - configure an addtional guest network on OPNSense adding it to the existing internal network.

Then I want to transmit both networks (LAN and the guest network) over multiple Ubiquiti APs (they are used due to their very good signal strength) to WLAN.

I think the solution may be to use a seperate VLAN for the internal and the guest network and then tell the Ubiquitis to use that VLANs ?

Is that right?
I am somehow unsure how to configure the VLAN for both networks.

Between OPNsense and the Ubiquiti APs there is a Ubiquiti switch (Ubiquiti UniFiSwitch 8 Desktop).

Can you give me any tipps please? Thank you very much!

I`ve attached a schemata for clarification.

Thank you very much !

[meyergru]

See this thread.

You need a manageable, VLAN-capable switch for this. Usually, the untagged VLAN is the main and management VLAN and you define additional (guest VLANs). You can create the corresponding networks and SSIDs in the Unifi controller.

On the OpnSense, you just have to create the VLAN interface(s) and networks, set up DHCP and firewall rules. Usually, it will use a trunk port, like the Unifi APs.