How To Configure Unifi Controller Guest Hotspot With Vouchers
In this tutorial you will learn how to configure your Unifi Controller 7.0.22 Guest Hotspot with Vouchers. This will come handy if you’re a hotel or some type of business looking to control guest access to your Wi-Fi using a finite time-based voucher.
Before we start make sure you are on Unifi Controller 7.0.22 or later and proceed to adopt all your Unifi devices into your controller. Make sure all firmware is updated as well.
The Tutorial Run Down
- Configure a Guest Network.
- Configure Bandwidth Profile.
- Configure a SSID for a group of access points.
- Configure Guest Hotspot Profile with vouchers.
- Simple way to manage vouchers.
Let’s start by configuring the Guest Network.
1. Log into your Unifi Controller 7.0.22
2. Once you’re on the dashboard click Settings.
3. Now locate and click on Networks.
4. Now that you’re on the Networks Section locate and click on Create New Network.
5. For our New Network let’s do the following
- Name your network Guest Hotspot
- Uncheck Auto Scale Network
- Change your Host Address to something different, in my case I am changing it to 192.168.168.1 and a Netmask of /24 this will give us 249 available addresses for guest devices. If you require more addresses change the Netmask from the dropdown list.
6. Scroll down and change Advanced Configuration to Manual.
7. In Advanced Configuration let’s make the following changes.
- Change your VLAN ID. I like matching the VLAN ID’s to the 3rd octette of the subnets so in my case it will be 168.
- For Network Type, select Guest Network.
- For Content Filtering select Work.
- Make sure Multicast DNS is Enabled.
8. Now we can click on the Add Network button to create the network.
Configure Bandwidth Profile for Guest Hotspot
1. Locate and click Profiles.
2. Scroll down until you locate Bandwidth Profile and select Create New Bandwidth Profile.
3. Name your Bandwidth Profile, Guest Hotspot. Provide your Download and Upload limits and click Apply Changes.
Configuring a Guest SSID for a group of Access Points.
1. Locate and click on the WiFi option.
2. Now that we are in the WiFi Settings page click on Create New WiFi Network.
3. Here on the New WiFi Network page fill out the Name for your SSID and provide a simple password.
4. In the Network section click on the dropdown, locate Guest Hotspot or whichever name you decided to name your Guest Network and select it.
5. Now this next section, this option is entirely up to you if you would like to use all available access points or just use a select few for Guest WiFi Services. I am going to create a group for just 1 access point for the purpose of this tutorial. Select Create New Group.
7. In this New Group I will select all the access points I want to provide Guest Hotspot services to. Name your access point group and select the access points you want to use. When done click the Save Changes button.
8. Now under Broadcasting AP’s make sure only the group you wish to use is selected.
9. Locate Advanced Configuration and select Manual. We will be making some advanced setting changes here.
10. Let’s start by configuring the following advanced options.
- WiFi Band – Uncheck 2.4GHz this is an old noisy technology that will just limit bandwidth and make your guests frustrated.
- WiFi Type – Select Guest Hotspot
11. Under Bandwidth Profile from the dropdown select Guest Hotspot
12. Scroll down until you locate Security. For Security Protocol we will mark this as open since our guest vouchers will be controlling access.
13. Now we can click on the Add WiFi Network button to create the SSID.
Configuring Guest Hotspot Profile with Vouchers
1. Now we will have some fun configuring the Guest Hotspot with Vouchers. Locate and click on Profiles.
2. The Guest Hotspot table should be first on your list and you should see a Default policy there. Go ahead and click on it to open it.
3. Now that we are on the Guest Hotspot page find Authentication Type and from the drop-down options select Vouchers.
4. Once Vouchers are selected, we can now Add a New Voucher. We will be creating a few for your guests.
5. There are many ways to go about setting up vouchers however I will be showing you the most practical way for guests and employees to understand when handling vouchers.
6. Now that the Add a New Voucher window is open, we will configure a per day per device access solution.
- Name – Create Vouchers based on days a guest will be staying. For example:
-1 Day – Guest Hotspot Access
-2 Day – Guest Hotspot Access
-3 Day – Guest Hotspot Access
-4 Day – Guest Hotspot Access
-5 Day – Guest Hotspot Access
-6 Day – Guest Hotspot Access
-7 Day – Guest Hotspot Access - Quantity – Depends on your guest arrival device trends on how many you would like to have readily available. For the sake of the tutorial, I will be providing 25 vouchers for each number of days.
- Voucher Usage – Select Multi-Use and set it to 10. This will allow the voucher package to be used up to 10 guest devices.
- Expiration – Since this is the 1 Day voucher set it for 24 hours. The 2 Day voucher will be 48 hours and so on.
- Download limit – We want to be mindful of our available ISP bandwidth. In a perfect world we would have and ISP for Guest and an ISP for Corporate.
7. The end result should look something like this.
8. Locate Guest Landing Page and turn it to ON.
9. Now you are able to edit the look and feel of the landing page to match your business.
10. For Terms of Service make sure this is Enabled. You want to protect your company with a disclaimer for use.
11. Now your complete, click the Apply Changes button.
Simple way to manage vouchers
Here I will be providing a simple way scenario to provide access to guests.
1. Locate and click Profiles.
2. Click on the Default Guest Hotspot policy.
3. Locate Hotspot Manager. Click Open Hotspot Manager.
4. You should now be on the Hotspot Manager page. Click on Vouchers.
5. Click, Print all unused vouchers.
6. Now you should be presented with a print window, and you can print all the vouchers to provide to your guests. You can also play around with the settings under more settings within this print preview to display them differently.
I hope this article was helpful, if you have any questions, please feel free to contact me. If you would like to be notified of when I create a new post, you can subscribe to my blog alert.
Discover more from Patrick Domingues
Subscribe to get the latest posts sent to your email.
I had the visitor network set up with Facebook WIFI, but since the update, it no longer works.
Hello Alexandru,
Since which update? The UDM PRO or did Facebook have an update preventing the logins? What have you done so far to troubleshoot the issue? Have you reconfigured the Visitor Network or delete and start over?
Thank you,
Patrick Domingues
Thank you for the great tutorial. After this is setup how do guests access the voucher page?
The voucher page is administrative only. Once the guests try to log into the wifi they will be redirected to the landing page for authentication.
If the PC hosting the controller goes off, guests are able to connect to the internet without authentication. How do you mitigate that?
Make sure the PC hosting the controller does not go off. You can also migrate the controller to a cloud hosted controller https://patrickdomingues.com/2021/05/12/install-unifi-controller-on-ubuntu-20-04-linode/
Hi Patrick,
thx for this great tutorial,
i follow point a point but i don’t received IP address with my new network,
if i test with production network i instantly have the login portal for the voucher
do you have an idea ?
Hello,
thank you for the turorial. We happen to have an E-Reader that should not be allowed to access the internal Network, but which is unable to access the Guest-Portal due to it not having a Web-Browser installed. It shows up in the Client-Devices list trying to connect and I can manually authorize the device, but I’d like to know if there’s a way to manually set a Voucher to the device from the Controller.
(Internally we decided to make 1-year Vouchers for devices of our employees, I’d like to use that Voucher instead of the manual authentication since the manual way only works for a day and can only be extended for a day per click on “extend”. I kind of don’t want to click this button 300 times)
Greetings,
Claus
I’m using UDM, enabled the Voucher system everything seems right at first but after some time all connected device suddenly will display no internet connection. I already deleted the SSID twice and reconfigure the voucher along with it. Also restarted the UDM a bunch of times but the issue still persist.
By the way upon restarting of UDM the connection will be ok but only for a couple of hours only.
Current Controller firmware 7.3.83
Unifi OS 3.0.17
Hello John,
Are you exclusively utilizing the UDM for voucher-related purposes, or are there other functionalities associated with the UDM as well? Does the UDM display an “Internet down” message? Is the issue limited to the guest network with vouchers that experience connectivity problems?
Thank you,
Patrick Domingues
We are using the UDM for Wi-Fi MAC Filter and and Standard WPA2 along with voucher setup.
It displays No internet. Yes! the issue persist only in Guest Network.
Great tutorial but it doesn’t work because unifi ruined the guest Hotspot with the latest update.
Hello, that is understandable this article was created over a year ago. Many things have changed since then.
Thank you for the great write up Patrick. I followed your advice and created 7 day, 3 multi use vouchers good for 7gb per user on our UniFi network. The intent was to give each user 7gb of data total for three different devices. It turns out with the multi use pass they got 7gb per use/device; 21gb total per voucher. We then tried to leave the vouchers at one time use but then the users can’t login to multiple devices. Is there any way around this aside from issuing 3 separate, one time vouchers for 2.33gb each? I am, managing a LAN on a ship and we only have 1tb of data for the whole ship. The intent is to give everyone 1gb of data a day, in 7 day increments, that they can use to connect their phone, ipad, and laptop if need be. We would like to do this as efficiently as possible. Thanks in advance