{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/unifi-ppsk-wpa2-six-ghz-vlan-design/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
        "slug": "unifi-ppsk-wpa2-six-ghz-vlan-design",
        "url": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/unifi-ppsk-wpa2-six-ghz-vlan-design/"
        },
        "title": "Check the 6 GHz requirement before choosing UniFi PPSK for one-SSID VLAN assignment",
        "summary": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "network-infrastructure",
            "label": "Networks & infrastructure",
            "alt": "Resilient network core with engineered blue and gold data paths.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "cybersecurity",
                "name": "Cybersecurity",
                "url": "https://update.dsesecurity.com/topic/cybersecurity/"
            },
            {
                "slug": "networks-infrastructure",
                "name": "Networks & Infrastructure",
                "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-10-15T13:34:01+00:00",
        "modified_at": "2026-10-15T13:36:18+00:00",
        "reviewed_on": "2026-10-15",
        "reading_minutes": 2,
        "word_count": 271,
        "potentially_affected": "This applies to UniFi Network PPSK and the documented RADIUS alternative. Confirm the access-point, client, software, and radio requirements before choosing an authentication design for a production SSID.",
        "dse_recommendation": "DSE recommends deciding the required client population and radio bands before using PPSK to simplify SSID management.",
        "primary_source": {
            "name": "Ubiquiti — PPSK and RADIUS VLANs",
            "url": "https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network",
            "published_on": null,
            "authority": "help.ui.com"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<p>UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.</p>\n<h2>Source facts</h2>\n<p>Ubiquiti documents UniFi Network PPSK as using different shared passwords on one SSID to determine a client’s VLAN. Individual usernames are not required for that method. The documented PPSK option is WPA2-only and therefore does not work on 6 GHz bands. RADIUS-assigned VLANs are a separate approach using user profiles and enterprise-capable authentication. For a client moving between PPSK VLANs, Ubiquiti describes forgetting the saved network and reconnecting with the appropriate new password. The VLANs must already be configured.</p>\n<p>Source: <a href=\"https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network\">Ubiquiti — PPSK and RADIUS VLANs</a>.</p>\n<h2>Applicability</h2>\n<p>This applies to UniFi Network PPSK and the documented RADIUS alternative. Confirm the access-point, client, software, and radio requirements before choosing an authentication design for a production SSID.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends deciding the required client population and radio bands before using PPSK to simplify SSID management. Document which password maps to which VLAN and who may distribute it. If 6 GHz is a requirement, review a supported alternative rather than assuming the PPSK network will use every radio. Keep the downstream VLAN access policy in the network design; choosing a VLAN by password is only one part of that policy. Provide support instructions for removing a saved password when a device legitimately changes VLAN.</p>\n<h2>Verification</h2>\n<p>Use test clients representative of the intended device classes. Verify their actual radio band, assigned VLAN, address, and permitted destinations for each test key. Exercise the documented saved-network change when moving between keys, and confirm that the design meets its band requirement before broad rollout.</p>\n<h2>Official reference</h2>\n<p><a href=\"https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network\">Ubiquiti — PPSK and RADIUS VLANs</a>. Reviewed October 15, 2026.</p>",
        "content_text": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.\nSource facts\nUbiquiti documents UniFi Network PPSK as using different shared passwords on one SSID to determine a client’s VLAN. Individual usernames are not required for that method. The documented PPSK option is WPA2-only and therefore does not work on 6 GHz bands. RADIUS-assigned VLANs are a separate approach using user profiles and enterprise-capable authentication. For a client moving between PPSK VLANs, Ubiquiti describes forgetting the saved network and reconnecting with the appropriate new password. The VLANs must already be configured.\nSource: Ubiquiti — PPSK and RADIUS VLANs.\nApplicability\nThis applies to UniFi Network PPSK and the documented RADIUS alternative. Confirm the access-point, client, software, and radio requirements before choosing an authentication design for a production SSID.\nDSE recommendation\nDSE recommends deciding the required client population and radio bands before using PPSK to simplify SSID management. Document which password maps to which VLAN and who may distribute it. If 6 GHz is a requirement, review a supported alternative rather than assuming the PPSK network will use every radio. Keep the downstream VLAN access policy in the network design; choosing a VLAN by password is only one part of that policy. Provide support instructions for removing a saved password when a device legitimately changes VLAN.\nVerification\nUse test clients representative of the intended device classes. Verify their actual radio band, assigned VLAN, address, and permitted destinations for each test key. Exercise the documented saved-network change when moving between keys, and confirm that the design meets its band requirement before broad rollout.\nOfficial reference\nUbiquiti — PPSK and RADIUS VLANs. Reviewed October 15, 2026.",
        "content_markdown": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.\n\n## Source facts\n\nUbiquiti documents UniFi Network PPSK as using different shared passwords on one SSID to determine a client’s VLAN. Individual usernames are not required for that method. The documented PPSK option is WPA2-only and therefore does not work on 6 GHz bands. RADIUS-assigned VLANs are a separate approach using user profiles and enterprise-capable authentication. For a client moving between PPSK VLANs, Ubiquiti describes forgetting the saved network and reconnecting with the appropriate new password. The VLANs must already be configured.\n\nSource: [Ubiquiti — PPSK and RADIUS VLANs](https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network).\n\n## Applicability\n\nThis applies to UniFi Network PPSK and the documented RADIUS alternative. Confirm the access-point, client, software, and radio requirements before choosing an authentication design for a production SSID.\n\n## DSE recommendation\n\nDSE recommends deciding the required client population and radio bands before using PPSK to simplify SSID management. Document which password maps to which VLAN and who may distribute it. If 6 GHz is a requirement, review a supported alternative rather than assuming the PPSK network will use every radio. Keep the downstream VLAN access policy in the network design; choosing a VLAN by password is only one part of that policy. Provide support instructions for removing a saved password when a device legitimately changes VLAN.\n\n## Verification\n\nUse test clients representative of the intended device classes. Verify their actual radio band, assigned VLAN, address, and permitted destinations for each test key. Exercise the documented saved-network change when moving between keys, and confirm that the design meets its band requirement before broad rollout.\n\n## Official reference\n\n[Ubiquiti — PPSK and RADIUS VLANs](https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network). Reviewed October 15, 2026."
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
                "url": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-10-15"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Check the 6 GHz requirement before choosing UniFi PPSK for one-SSID VLAN assignment",
                        "item": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/#article",
                "identifier": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
                "url": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/",
                "headline": "Check the 6 GHz requirement before choosing UniFi PPSK for one-SSID VLAN assignment",
                "description": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.",
                "abstract": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.",
                "articleBody": "UniFi PPSK maps passwords to VLANs, but its WPA2 requirement excludes 6 GHz operation.\nSource facts\nUbiquiti documents UniFi Network PPSK as using different shared passwords on one SSID to determine a client’s VLAN. Individual usernames are not required for that method. The documented PPSK option is WPA2-only and therefore does not work on 6 GHz bands. RADIUS-assigned VLANs are a separate approach using user profiles and enterprise-capable authentication. For a client moving between PPSK VLANs, Ubiquiti describes forgetting the saved network and reconnecting with the appropriate new password. The VLANs must already be configured.\nSource: Ubiquiti — PPSK and RADIUS VLANs.\nApplicability\nThis applies to UniFi Network PPSK and the documented RADIUS alternative. Confirm the access-point, client, software, and radio requirements before choosing an authentication design for a production SSID.\nDSE recommendation\nDSE recommends deciding the required client population and radio bands before using PPSK to simplify SSID management. Document which password maps to which VLAN and who may distribute it. If 6 GHz is a requirement, review a supported alternative rather than assuming the PPSK network will use every radio. Keep the downstream VLAN access policy in the network design; choosing a VLAN by password is only one part of that policy. Provide support instructions for removing a saved password when a device legitimately changes VLAN.\nVerification\nUse test clients representative of the intended device classes. Verify their actual radio band, assigned VLAN, address, and permitted destinations for each test key. Exercise the documented saved-network change when moving between keys, and confirm that the design meets its band requirement before broad rollout.\nOfficial reference\nUbiquiti — PPSK and RADIUS VLANs. Reviewed October 15, 2026.",
                "datePublished": "2026-10-15T13:34:01+00:00",
                "dateModified": "2026-10-15T13:36:18+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/unifi-ppsk-wpa2-six-ghz-vlan-design/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/network-infrastructure-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Check the 6 GHz requirement before choosing UniFi PPSK for one-SSID VLAN assignment"
                },
                "articleSection": [
                    "Cybersecurity",
                    "Networks & Infrastructure"
                ],
                "keywords": [
                    "Cybersecurity",
                    "Networks & Infrastructure",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "Cybersecurity",
                        "url": "https://update.dsesecurity.com/topic/cybersecurity/"
                    },
                    {
                        "@type": "Thing",
                        "name": "Networks & Infrastructure",
                        "url": "https://update.dsesecurity.com/topic/networks-infrastructure/"
                    }
                ],
                "wordCount": 271,
                "timeRequired": "PT2M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Ubiquiti — PPSK and RADIUS VLANs",
                    "url": "https://help.ui.com/hc/en-us/articles/29887064407319-Using-PPSK-RADIUS-for-Multiple-VLANs-On-an-SSID-in-UniFi-Network"
                }
            }
        ]
    }
}