VLAN & Subnet Planner
Generate a best-practice VLAN and IP addressing scheme for your UniFi network. Copy and paste directly into your controller.
Network Configuration
Include VLANs:
Your VLAN Plan
5 VLANs configured with 1,270 total usable IP addresses
Default/Corporate
Employee workstations, printers, standard devices
10.0.1.0/2410.0.1.110.0.1.10 - 250Guest WiFi
Isolated guest network with internet-only access
10.0.10.0/2410.0.10.110.0.10.10 - 250IoT/Smart Devices
Smart building devices, sensors, controllers (restricted internet)
10.0.30.0/2410.0.30.110.0.30.10 - 250Security/UniFi Protect
UniFi Protect cameras and NVR (isolated, no internet)
10.0.40.0/2410.0.40.110.0.40.10 - 250Network Management
UniFi controller, switches, APs, network gear only
10.0.99.0/2410.0.99.110.0.99.10 - 100Export VLAN Plan
All exports include full VLAN configuration details with ShiftCTRL branding
Implementation Best Practices
- • Create VLANs in UniFi controller under Settings → Networks
- • Assign SSIDs to specific VLANs for wireless segmentation
- • Use firewall rules to control inter-VLAN traffic
- • Isolate security cameras (no internet, controller access only)
- • Enable IGMP Snooping for VLANs with multicast traffic
- • Set QoS priority for VoIP VLAN (DSCP marking)
- • Document VLAN assignments and keep as-built diagrams
- • Test failover between primary and secondary gateways
Need help implementing your VLAN design?
Our network engineers can design, configure, and test your entire network with proper segmentation, firewall rules, and QoS.
About This Planner
This tool generates standard VLAN designs based on common network segmentation best practices. Your specific requirements may differ based on compliance needs, security policies, and application requirements. For production deployments, we recommend professional network design and security review.