Captive Portal for UniFi Networks
Guest WiFi Captive Portal for UniFi
A captive portal for UniFi networks allows businesses to keep their UniFi access points for wireless coverage while using a dedicated guest WiFi gateway to manage the login page, vouchers, access rules, bandwidth limits, guest isolation, and analytics. This setup is useful for hotels, cafés, restaurants, campsites, venues, and managed WiFi projects where the UniFi wireless network already works well, but the business needs stronger guest access control.
Using UniFi Access Points with a Captive Portal Gateway
UniFi access points are commonly used in business WiFi deployments because they provide flexible wireless coverage across hotels, restaurants, offices, venues, and multi-area properties. In many installations, the WiFi signal is not the problem. The real problem is how guests log in, how access is controlled, and how the guest network is separated from the private business network.
A gateway-based captive portal can be added to the network while the UniFi access points continue to broadcast the guest WiFi network. The access points handle the wireless coverage, while the captive portal gateway handles guest authentication and access control.
A simple deployment can look like this:
- Main internet router or firewall
- WAVER captive portal gateway
- Network switch
- UniFi access points
- Guest devices
This approach allows the business to improve the guest WiFi experience without replacing the access points that are already installed.
Why Add a Captive Portal Gateway to UniFi?
Many UniFi networks already provide good WiFi coverage. However, some businesses need more control over guest access than a basic guest network or simple password can provide.
A dedicated captive portal gateway can help when the business wants:
- Branded guest WiFi login pages
- WiFi voucher access
- Paid or free guest WiFi plans
- Time limits and speed limits
- Guest session control
- Guest network isolation
- Analytics and user visibility
- Hotel room login or PMS integration options
- Gateway-level control independent from the AP layer
This is especially useful for installers and businesses that want to keep UniFi as the wireless coverage layer, but manage guest access through a dedicated captive portal device.
Access Points vs Guest WiFi Control
It helps to separate the two jobs inside the network.
Access points provide wireless coverage. They broadcast the WiFi signal and allow phones, laptops, tablets, and other devices to connect to the network.
The captive portal gateway controls what happens after the guest connects. It can show the login page, validate vouchers, apply access rules, limit speed, manage sessions, and separate guest traffic from private systems.
| Network Layer | Main Role |
|---|---|
| UniFi access points | Provide WiFi coverage and broadcast the guest SSID |
| Captive portal gateway | Manage guest login, vouchers, access rules, and traffic control |
| Business network | Private systems, staff devices, POS, office devices, and management access |
This separation is useful because it avoids forcing the business to rebuild the full WiFi network just to improve guest access management.
Branded Login Pages for UniFi Guest WiFi
A business guest WiFi network should look professional when a visitor connects. Instead of only using a shared password, the business can show a branded captive portal page before internet access is granted.
A branded guest WiFi login page can include:
- Business logo
- Welcome message
- Terms of use and privacy policy links
- Email login
- Voucher login
- Paid access options
- Room number login for hotels
- Promotions, offers, or useful links
- Multilingual content when needed
For hotels, cafés, restaurants, campsites, and venues, this creates a better first impression than a generic password-based guest WiFi experience.
WiFi Vouchers with UniFi Access Points
Voucher-based access is one of the most useful reasons to add a captive portal gateway to an existing UniFi network. Instead of giving every guest the same WiFi password, the business can create voucher codes with specific access rules.
WiFi vouchers can be used for:
- Hotel guests and visitors
- Café and restaurant customers
- Campsite and RV park guests
- Marina and vessel users
- Event attendees
- Staff, contractors, or temporary users
- Premium or paid WiFi plans
Each voucher can be configured with rules such as access duration, expiration date, speed limit, device limit, or data usage limit depending on the system configuration.
This gives the operator more control than a shared password and makes guest access easier to manage across different user types.
Paid WiFi Access with UniFi Networks
Some businesses want to offer free guest WiFi. Others want to sell premium access, time-based access, or visitor internet plans. A captive portal gateway can support paid or voucher-based access while UniFi access points continue to provide wireless coverage.
Paid access can be useful for:
- Campsites and RV parks selling daily or weekly WiFi plans
- Marinas offering short-term or seasonal access
- Hotels offering premium speed packages
- Events selling temporary access
- Public hotspots where internet access is a service
The business can also use a hybrid model. For example, free basic access can be offered to all guests, while paid vouchers are used for faster or longer access.
Guest Network Isolation with UniFi
Guest WiFi should be separated from the private business network. Visitors should not be able to access POS terminals, reception computers, office devices, printers, cameras, administration panels, or staff systems.
When using UniFi access points with a captive portal gateway, the network should be designed so guest traffic passes through the gateway where rules can be applied. The gateway can help control access between the guest side and the private business side.
A professional guest WiFi setup should support:
- Separation between guest and private networks
- Firewall rules
- Guest-to-admin protection
- Session control
- Bandwidth limits
- Different rules for guests, staff, visitors, and paid users
Good guest WiFi is not only about the login page. It is also about protecting the network behind it.
VLAN and Guest Network Design
In many business networks, guest WiFi is separated using VLANs or dedicated guest network segments. UniFi access points can broadcast a guest SSID, while the network routes guest traffic toward the captive portal gateway.
The exact configuration depends on the network design, switch setup, VLAN plan, access point configuration, and gateway placement. In simple deployments, the guest access points or guest network can connect directly through the captive portal gateway. In more advanced deployments, VLANs may be used to separate guest traffic from management and private networks.
The important principle is simple:
Guest traffic should pass through the captive portal gateway before reaching the internet.
This allows the gateway to control login, access rules, vouchers, speed limits, and session handling.
When This Setup Makes Sense
A captive portal gateway with UniFi access points is a good fit when the wireless coverage is already good, but the business needs better control over guest access.
This setup makes sense when:
- The business already has UniFi access points installed
- The WiFi coverage is acceptable, but the guest login experience is weak
- The business wants vouchers or paid WiFi access
- The operator wants branded captive portal pages
- The venue needs guest isolation and access rules
- The installer wants one guest access layer across different projects
- The business wants local gateway control for core captive portal features
In this case, replacing the access points may not be necessary. Adding the gateway can solve the guest access problem directly.
Where to Use UniFi with a Captive Portal Gateway
Hotels and Resorts
Hotels can use UniFi access points for wireless coverage while the captive portal gateway manages room login, vouchers, guest isolation, PMS integration options, and branded login pages.
Cafés and Restaurants
Cafés and restaurants can offer customer WiFi with branded login pages, time limits, vouchers, email collection, promotions, and protection for POS systems.
Campsites and RV Parks
Campsites can use outdoor access points for coverage while the gateway manages daily, weekly, or paid WiFi voucher plans.
Marinas and Vessels
Marinas can use a gateway-based captive portal to control guest, crew, visitor, and seasonal access while keeping bandwidth usage under control.
Events and Venues
Events can use voucher codes, QR codes, temporary access, staff access, and different rules for attendees, exhibitors, and VIP users.
Managed Service Providers
Installers and MSPs can use a gateway-based captive portal when they want consistent guest WiFi control across different customer networks.
Common Mistakes to Avoid
Adding a captive portal to an existing UniFi network is not only about enabling a login page. The network path, guest isolation, VLAN design, and gateway placement matter.
Common mistakes include:
- Letting guest traffic bypass the captive portal gateway
- Mixing guest and management networks
- Using one shared WiFi password for all users
- Not protecting POS, office, or staff systems
- Not applying bandwidth or session limits
- Creating a login page that is confusing on mobile
- Not planning separate access for guests, staff, and visitors
A clean design should make the guest network easy to use, but also properly controlled.
Guest WiFi Analytics and Visibility
A captive portal gateway can provide useful visibility into guest WiFi usage. This helps the business understand how guests connect, which login methods are used, how vouchers perform, and when the network is busiest.
Useful guest WiFi analytics may include:
- Active guest sessions
- New and returning users
- Voucher usage
- Login method performance
- Session duration
- Bandwidth usage
- Peak usage times
- Access plan usage
This information can help the operator adjust access plans, detect heavy usage, improve the captive portal page, and better understand the guest network.
Why Use WAVER with UniFi Networks?
WAVER provides standalone captive portal gateways designed for professional guest WiFi deployments. In a UniFi network, WAVER can be installed as the guest WiFi control point while UniFi access points continue to provide wireless coverage.
WAVER can help businesses using UniFi access points:
- Add branded captive portal login pages
- Create voucher-based guest access
- Offer free or paid WiFi access
- Apply speed, time, and session limits
- Separate guest traffic from business systems
- Use guest analytics and access reports
- Support hotel room login and PMS integration options
- Keep existing access points where coverage is already good
- Operate core captive portal features locally from the gateway
This makes WAVER a practical option for businesses that like their UniFi wireless coverage but need stronger guest WiFi access control from the gateway level.
Important Note About UniFi Compatibility
WAVER can be deployed with UniFi access points in suitable network designs, but the exact configuration depends on the existing topology, VLAN setup, switches, gateway placement, and how the guest network is routed.
The goal is to ensure that guest traffic passes through the WAVER gateway so the captive portal, vouchers, access rules, bandwidth limits, and analytics can work correctly.
WAVER is not presented as an official UniFi product or official UniFi partnership. It is a gateway-based captive portal solution that can be used in networks where UniFi access points provide the wireless coverage.
Frequently Asked Questions About Captive Portal for UniFi Networks
Can I use a captive portal gateway with UniFi access points?
Yes. In many deployments, UniFi access points can continue to provide WiFi coverage while a captive portal gateway manages guest login, vouchers, access rules, and sessions.
Do I need to replace my UniFi access points?
Not usually. If your UniFi access points already provide good wireless coverage, a gateway-based captive portal can often be added as the guest access control layer.
Can I use WiFi vouchers with UniFi access points?
Yes. A captive portal gateway can manage voucher-based access while UniFi access points broadcast the guest WiFi network.
Can I offer paid WiFi on a UniFi network?
Yes. Paid WiFi can be offered through voucher plans or captive portal access flows, depending on the gateway configuration and payment setup.
Can guest traffic be separated from the business network?
Yes. The network should be designed so guest traffic is separated from private systems and routed through the captive portal gateway where access rules can be applied.
Does this require VLAN configuration?
It depends on the network design. Some deployments are simple, while others use VLANs to separate guest, staff, and management traffic. The important point is that guest traffic should pass through the captive portal gateway.
Is WAVER an official UniFi product?
No. WAVER is not an official UniFi product. It is a standalone captive portal gateway that can be deployed with UniFi access points in suitable network designs.
Final Thoughts
A UniFi network can provide strong wireless coverage, but businesses often need more than a basic guest WiFi password. They need branded login pages, vouchers, paid access options, guest isolation, access rules, analytics, and a clear way to control guest traffic.
A captive portal gateway for UniFi networks allows the business to keep UniFi access points for coverage while adding gateway-based guest WiFi control.
WAVER provides standalone captive portal gateways that can be deployed with UniFi access points, helping hotels, cafés, restaurants, campsites, marinas, venues, and managed service providers control guest WiFi access without replacing the entire wireless infrastructure.