unifi wifi 访问规则

unifi wifi 访问规则
English Answer:
Understanding UniFi Wi-Fi Access Rules.
UniFi Wi-Fi access rules are a powerful tool that allows you to control who can access your network and what they can do once they are connected. Access rules can be used to:
Restrict access to your network based on MAC address, IP address, or client type.
Create guest networks with limited access.
Control bandwidth usage for specific devices or groups of devices.
Block access to specific websites or applications.
Set up time-based restrictions on network access.
Creating an Access Rule.
To create an access rule, navigate to the "Access Rules" tab in the UniFi Network controller. Click on the "Add Rule" button and enter the following information:
Name: The name of the access rule.
Enabled: Select "Yes" to enable the access rule.
Description: A brief description of the access rule.
Match Criteria: Select the criteria that will be used to identify the clients that the access rule will apply to. You can match on MAC address, IP address, client type, or a combination of these criteria.
Action: Select the action that will be taken when a client matches the match criteria. You can allow or deny access, limit bandwidth, or block access to specific
websites or applications.
Schedule: Select a schedule for the access rule. You can choose to have the access rule apply all the time or only during specific hours or days of the week.
Advanced Options.
The following additional options are available in the "Advanced Options" section of the access rule editor:
Logging: Select "Yes" to enable logging for the access rule. This will log all traffic that matches the match criteria.
Allow DHCP: Select "Yes" to allow the matching clients to obtain an IP address from a DHCP server.
Allow Association: Select "Yes" to allow the matching clients to associate with the network.
Accept from: Select the interface(s) that the matching
clients will be able to connect to.
Apply to: Select the SSID(s) that the access rule will apply to.
Example Access Rules.
Here are some examples of access rules that you can create:
Restrict access to a specific MAC address: Use the match criteria "MAC Address" and enter the MAC address of the device that you want to restrict access to. In the "Action" section, select "Deny Access".
Create a guest network: Use the match criteria "Client Type" and select "Guest" from the drop-down menu. In the "Action" section, select "Allow Access" and limit the bandwidth for the guest network to 1 Mbps.
Block access to a specific website: Use the match criteria "Destination URL" and enter the URL of the website
that you want to block. In the "Action" section, select "Block Access".
Set up time-based restrictions: Use the "Schedule" section to set up a time-based restriction for the access rule. For example, you could create an access rule that denies access to the network from midnight to 6am.
Conclusion.
UniFi Wi-Fi access rules are a powerful tool that can be used to improve the security and performance of your network. By carefully configuring access rules, you can control who can access your network, what they can do once they are connected, and when they can access your network.
Chinese Answer:
UniFi Wi-Fi 访问规则。

UniFi Wi-Fi 访问规则是一个强大的工具，允许您控制谁可以访问您的网络以及他们在连接后可以做什么。

访问规则可用于：
根据 MAC 地址、IP 地址或客户端类型限制对网络的访问。

创建具有有限访问权限的访客网络。

控制特定设备或设备组的带宽使用率。

阻止访问特定网站或应用程序。

对网络访问设置基于时间限制。

创建访问规则。

要创建访问规则，请导航到 UniFi Network 控制器的“访问规则”选项卡。

单击“添加规则”按钮并输入以下信息：
名称，访问规则的名称。

启用，选择“是”以启用访问规则。

描述，访问规则的简要描述。

匹配条件，选择将用于识别访问规则将应用到的客户端的条件。

您可以根据 MAC 地址、IP 地址、客户端类型或这些条件的组合进
行匹配。

动作，选择当客户端匹配匹配条件时所采取的动作。

您可以允
许或拒绝访问、限制带宽或阻止访问特定网站或应用程序。

计划，为访问规则选择一个计划。

您可以选择始终应用访问规则，或仅在特定时间或一周中的特定日期应用访问规则。

高级选项。

以下其他选项在访问规则编辑器的“高级选项”部分中可用：
日志记录，选择“是”以启用访问规则的日志记录。

这将记录
所有匹配匹配条件的流量。

允许 DHCP，选择“是”以允许匹配客户端从 DHCP 服务器获
取 IP 地址。

允许关联，选择“是”以允许匹配客户端与网络关联。

接受来自，选择匹配客户端可以连接到的接口。

应用于，选择访问规则将应用到的 SSID。

访问规则示例。

以下是一些您可以创建的访问规则示例：
限制对特定 MAC 地址的访问，使用匹配条件“MAC 地址”并输入您要限制其访问的设备的 MAC 地址。

在“操作”部分中，选择“拒绝访问”。

创建访客网络，使用匹配条件“客户端类型”并从下拉菜单中选择“访客”。

在“动作”部分中，选择“允许访问”并将访客网络的带宽限制为 1 Mbps。

阻止访问特定网站，使用匹配条件“目标URL”并输入您要阻止的网站的 URL。

在“操作”部分中，选择“阻止访问”。

设置基于时间限制，使用“计划”部分为访问规则设置基于时间的限制。

例如，您可以创建一个在午夜到早上 6 点之间拒绝访问网络的访问规则。

结论。

UniFi Wi-Fi 访问规则是一个强大的工具，可用于提高您网络的安全性和性能。

通过仔细配置访问规则，您可以控制谁可以访问您的网络、他们在连接后可以做什么以及何时可以访问您的网络。