HOME NETWORK SOLUTIONS BERKSHIRE
  • Home
  • Network Services
    • WiFi services
    • Ethernet network cabling installation
    • Reliable and Fast Event WiFi Solutions
    • Network design and consultation
    • WiFi and Network Support Services
  • Ubiquit Unifi
    • Ubiquiti Unifi Installers
    • Ubiquiti Unifi Access - Door Entry
  • Security
    • CCTV
    • Intruder Alarms
  • Business Services
  • Gallery
  • Contact
  • Audio
  • FAQs
  • Blogs
  • About us
  • Privacy Policy
  • Change Request Form

Blogs.

Kids safe Wi-Fi with Unifi - Content filters and timings

10/1/2021

5 Comments

 
Picture

How to set-up content filtering and WiFi timings with Unifi

Keeping our children safe from harmful online content is a priority for parents, the internet can be a scary place. As well as shielding our kids sometimes we just want them to switch off and get to bed. Well the good news is with Ubiquiti's Unifi Range you can provide your children with their own dedicated WiFi network, with content filtering and timings. In this guide we are going to show you how to set it up. 

Rather watch the video guide? Check out our YouTube Video Instead. For more Unifi tips and other relevant comment why not subscribe to our channel. 

What Unifi Equipment do I need for content filtering? 

There are a few pieces of equipment that you'll need before you can set up you children's content filtered and timed WiFi. In this guide we are going to be using solely Unifi equipment. However the good news is that you don't necessarily have to use Unifi or even Ubiquiti, setting up these kind of features is possible with most professional networking brands. 

In this guide we are using Family Shield as the content filter, this is a free service provided by Open DNS. Details of the service can be found here. The service is not configurable, but there are other family protection services available. 
wifi2buy.com
Picture

1. Unifi Router

As you may know Unifi don't call their routers, routers. The Unifi Security Gateway and the Dream Machines (regular and Pro) are all routers. Ubiquiti also have a range of other routers such as the Edge Routers which they do call routers. Confusing! The UI for the edge routers is different so we won't be using those in this guide.  

We are going to be setting up a Virtual Local Area Network (VLAN) so we need the router. Without a router it is still possible to install the timings, but you can't install the content filtering. As mentioned above, it doesn't necessarily have to be a Unifi Router but for that is what we are covering in this guide.

2. Unifi Switch

A managed switch allows the VLAN tag to be added to the Access Points. Again this doesn't have to be a Unifi Switch but to keep things simple that's what we are going to use in this guide. 
If you use an unmanaged switch (not Unifi) you may find that it strips the VLAN tag, not always an issue, but if you are struggling to get things to work and there is an unmanaged switch in your set up it may be causing the problem. 

3. Unifi Access Point

Unifi have a whole host of Access Points and this set-up can be done on any of them. If you already have your main network and a guest network, don't worry you can add another and keep those. 

4. Unifi Controller

A Unifi Controller can be on a Cloudkey, on a PC/laptop, on a Server or even on a Raspberry Pie, wherever it is you will need access to it. 
wifi2buy.com

How to Configure the Content filtering and WiFi Timing

1. Setting up a VLAN

Stage one will be to set-up the content filtering and the VLAN. 
​
Login to your Unifi Controller and select the following:
- Settings (the cog at the bottom left of the page)
- Networks
- Create New Network
Picture
Once you get to the New Network you need to fill in a few details, anything not mentioned below can either be left blank or with the settings already prefilled.

Name:
as you like the network as you like for example "Kids"
Purpose: Leave as "Corporate"
Network: "LAN"
VLAN: Let's make this "10"
Leave Gateway Type as: "Default"
Gateway IP/Subnet: Assuming your main network is on 192.168.1.1 you can put this network on 192.168.2.1 and then enter "192.168.2.1/24". This will give your kids network 254 IP addresses which should be plenty. 
DHCP Range: 192.168.2.1 - 192.168.2.254
DHCP Name Server: 208.67.222.123 in the DNS server 1 and 208.67.220.123 in the DNS server 2
These are the Family Shield DNS Server which restrict the content. 

Make sure to press "Save" at the bottom of the page. You may notice your router is now provisioning (applying the settings).
Picture

2. Setting up WiFi Network

Stage 2 is setting up the WiFi network and, applying the VLAN and giving it a schedule.

In the Unifi Controller select the following:
-Settings
-Wireless Networks
-Create New Wireless Network​
Picture
Once you are into the options page for the new WiFi settings you need to add some information. 

Name/SSID:
This is the WiFi Name that will be displayed, for example "Kids WiFi".

Security: WPA Personal
Network: Select the VLAN you just created in the last step, we called ours "kids"

Once you've done these select Advanced Setting at the bottom to give more options. 

Schedule: Tick "Enable WLAN schedule". Schedule can be tricky to see, it's quite far down the list of options. 

Scroll down and you will see the WLAN schedule N schedule
wifi2buy.com
Picture
The schedule allows you to set the time on the WiFi network, it should be fairly self explanatory, the timings are drag and drop and the day they apply are on the side. The blue is when the WiFi is on.

Once you have selected the timings don't forget to press Save at the bottom. 

Your Access Points will now provision. A few minutes and the Kids WiFi network will be up and running. 

Your Content Filter and timed Kids WiFi is up and Running. 

I hope you have found this blog useful. If you have please like, share and comment. If you have any questions pop them in the comments below. 
5 Comments
rob
19/2/2021 08:41:39 pm

great - has this changed since it was first done - eg with the new unifi software - does it still work?

Would it be easier to assign kids devices a static IP and then force it to use the kids network instead of using up a SSID as I think you are only allowed 4 SSIDs per access point?

Reply
Hensly
13/6/2021 05:06:43 pm

Create a firewall Group that contains IP for the Approved DNS server. Create a LAN firewall rule "Before predefined rules" that Allows port 53 from Kids Network to the approved DNS server IP Group created earlier. Create a LAN firewall rule "After predefined rules" that blocks ALL port 53 from Kids LAN.

This prevents kids circumventing the DNS in their devices.

Reply
Warren
12/11/2021 09:44:07 pm

Hi -

"Create a LAN firewall rule "Before predefined rules" that Allows port 53 from Kids Network to the approved DNS server IP Group created earlier. Create a LAN firewall rule "After predefined rules" that blocks ALL port 53 from Kids LAN."

Should the LAN firewall rule be LAN In or LAN out?

Reply
Gary
20/12/2021 08:28:42 pm

Hi, can someone confirm this is still working on V6 controller software? I'm currently running 6.5.55, have copied the setup above but the AP's are not broadcasting the SSID (Broadcast is selected)
I have my home lan on 10.0.1.0 and the Kids Safe lan as I've named it on 10.0.2.0. I'm using VLAN 10. On the AP's the SSID is there, listed with my other two SSID's, but I've noticed the Kids SSID has a BSSID of 00:00:00:00:00:00 where as the other SSID's have a valid BSSID derived from the AP MAC address.
I suspect that if I select the Kids Safe lan under services on an AP it will start to broadcast (will try that later) but suspect doing that, will knock out my other two SSID's?
I was hoping to have this in place for Christmas as we have a lot of grand kids coming over!!

Reply
Monkey
7/9/2022 11:17:17 pm

I think that this solution is a little overly complicated. You can get away with one LAN and 2+ WIFI SSIDs tied to the LAN.
I'd reccommend
1 SSID for adults
1 SSID for IOT devices (like your TV)
1 SSID for kids. This will be a guest hotspot

The SSID for kids can have a schedule and can be paused as desired without affecting adults or the TV
The SSID for IOT devices will have mac address filtering to only allow those devices to connect. Saves you from the kids looking up it's password and connecting

I also like to set the DNS Server on the WAN to quad-9 from some extra protection. Or better yet proxy DNS through a PiHole -but that's a little more complicated

Reply



Leave a Reply.

    Huw Jones

    Owner of Home Network Solutions Berkshire

    RSS Feed

    Categories

    All
    Broadband
    Business Networking
    Ethernet
    Firewalls
    Hikvision CCTV Guides
    Home Networking
    Mesh WiFi
    NAS Devices
    Network Security
    Powerline Adapters
    Smart Home
    TP-Link Omada
    Ubiquiti Unifi
    VLANs
    Wi Fi
    Wi-Fi

    Archives

    May 2024
    January 2024
    December 2023
    June 2023
    May 2023
    January 2023
    August 2022
    July 2022
    April 2022
    March 2022
    April 2021
    January 2021
    December 2020
    April 2020
    March 2020
    July 2018
    May 2018
    April 2018
    March 2018
    February 2018

    Picture
    ​Follow us on Instagram for more networking and tech! 

    Home Network Solutions Berkshire are on Youtube
    Home Network Solutions are on Youtube
    Click here for details of our Privacy Policy
Home Network Solutions Berkshire Ltd. - 01628 337501​ - [email protected]
Maidenhead, Berkshire, UK
 Company number 11887009 VAT 356828363
  • Home
  • Network Services
    • WiFi services
    • Ethernet network cabling installation
    • Reliable and Fast Event WiFi Solutions
    • Network design and consultation
    • WiFi and Network Support Services
  • Ubiquit Unifi
    • Ubiquiti Unifi Installers
    • Ubiquiti Unifi Access - Door Entry
  • Security
    • CCTV
    • Intruder Alarms
  • Business Services
  • Gallery
  • Contact
  • Audio
  • FAQs
  • Blogs
  • About us
  • Privacy Policy
  • Change Request Form