Unifi port isolation

[glennd]

Unifi port isolation is a little confusing. Would it be true to say that a port that has "port isolation" enabled is only isolated from other ports that also have "port isolation" enabled and is not isolated from other ports that do not have "port isolation" enabled? Is there a way to say "port 4 may only communicate with port 1" ?

Having answered that question, the actual problem is: i have a Unifi 8 port switch with an assortment of internal devices connected as well as the uplink to the modem. I want to connect one port to a dumb switch and use that dumb switch to connect to unverified customer devices on the bench. I want this to be isolated from everything on my lan except the uplink but without impacting the full connectivity of existing devices on the lan. Call it a guest lan.

Can the switch do this or am I looking at a device that produces multiple LAN networks, eg EdgeRouter ?

 

[YeOldeStonecat]

It's to minimize broadcast/multicast traffic from LAN...to wireless. Not meant to isolate the APs....such as a VLAN or anything. I enable this feature in the profile applied to any ports that face an AP.
https://help.ubnt.com/hc/en-us/articles/115001529267-UniFi-Managing-Broadcast-Traffic

 

[HCHTech]

Can the switch do this or am I looking at a device that produces multiple LAN networks, eg EdgeRouter ?

The second one. You need a router/firewall for this. A USG ought to do it, or whatever firewall you already have. You do have a firewall, right?

 

[glennd]

The second one. You need a router/firewall for this. A USG ought to do it, or whatever firewall you already have. You do have a firewall, right?

Yes, I thought that would be the case. Thanks.