Don't forget to deny inter-user bridging (Aruba-speak for stopping devices talking to other devices on the vlan)
Hmm wonder if Ubiquiti does this.
It does by default just check the "guest policies" box and it blocks 192.168.0.0/16
We put guest wifi on a vlan. Block all access to non internet sources for that vlan. Guess has a simple password which is usually written in the conference room white board tbh. Only use a disclaimer when customer wants one (we offer but don't push)
Good to hear. I have policies enabled.