Configure Private Pre-Shared Keys on UniFi and Grandstream

What is PPSK? Private Pre-Shared Key is a way to use a single SSID (WiFi Name) with different secret passwords to get either people on the same network or a different network. Let's check out how easy it is to deploy on both Grandstream and UniFi.
Afflilate Links:
GWN7624 Access Point: amzn.to/4551PjF
GWN7801P Switch: amzn.to/3PPESg5
Palo Alto PA-400: amzn.to/3Rxcz7w
Ubiquiti EdgeRouter X: amzn.to/3rwxooN
Ubiquiti EdgeRouter 4: amzn.to/3rkjy99
Grandstream GWN7062: amzn.to/3ZtPBjw
Teltonika RUT300: amzn.to/3PvKomu
Ubiquiti USG: amzn.to/3PNhxvm
TP-Link ER605: amzn.to/3Zq583G
Ubiquiti UniFi Dream Router: amzn.to/3PNB8f7
Protectli Vault 4 Port: amzn.to/3t91JtY
Protectli Vault 2 Port: amzn.to/451gdcW
Mikrotik hEX Lite: amzn.to/4580k49
Mikrotik hEX S: amzn.to/451CTtt
EnGenius ESG510: amzn.to/3RtD3GQ
Synology RT6600ax: amzn.to/3EMMmtR
Synology WRX560: amzn.to/46kw0V5
Rackmount Intel Appliance: amzn.to/3F7EGTr
Cisco C1101-4P: amzn.to/48riili
Juniper SRX100B: amzn.to/3PMuWDU
AXIS T8508 Switch: amzn.to/3RzXBh5
AXIS T8508 Rack Kit: amzn.to/3ZA5hSf
Hire us! williehowe.com
Want to join us in learning how to deploy network services like this? Put your name on the training list now: williehowe.com...
Affiliate Links (I earn a small percentage of the sale if you use these links):
My AmazonLink: www.amazon.com...
Netool: netool.io use code WHT to save at least 10%!
Digital Ocean Affiliate Link: m.do.co/c/39aa...
Patreon Link: / williehowe
Contact us for network consulting and best practices deployment today! We support all Grandstream, Synology, DrayTek, Obihai, Poly, Ubiquiti, MikroTik, Extreme, Palo Alto, and more!
Come back for the next video!
Twitter - @WillieHowe
TikTok - @whowe82
SUBSCRIBE! THUMBS-UP! Comment and Share!

[@seanwoods1526]

Grandstream also allows you to set them client on a PPSK as well. So if you hand out a PW you can limit the connection to 5 devices on that passkey.

[@dalevought8054]

Good video Sir. I am working with TP-Link on PPSK. Couple things we learned: PPSK will move to Omada Pro only in future, 128 max PPSKs without radius per site ( probably other vendors have limits also), not available on WiFi 6, only certain pieces of equipment ( this is probably an Omada Pro thing is my guess). Hope as is well. Thanks

[@jasonluong3862]

FBI Truck Best SSID ever.

[@pbrigham]

The most important thing you left out, dosen't work with WPA3, amazing how unsecure WPA2 is and no ones cares and still lunch features for WPA2 in 2023.

[@Wahinies]

Doesn't management frame protection (802.11w) mitigate the replay weakness in WPA2? It is still viable with that plugged AFAIK.

[@apalrd8588]

Very important to mention that PPSK based purely on password (and not MAC like RADIUS) does NOT work with WPA3, which has been required in wifi certified hardware for the last 3 years. So Unifi PPSK is essentially already obsolete.

[@techtalkandtechunboxed]

I have tried only on UniFi I have set 15 password on single SSID it works.

Excellent video, as usual. Tested PPSK on Grandstream GWN7664 (and GWN7001 with hardware acceleration). For whatever reason, I can max throughput with "regular" SSIDs, but PPSKs (no RADIUS) seemsto seriously downgrade speeds.

[@postnick]

This blew my mind... I can drop my 2GHZ AP now and just use this for my IOT and my main 2.4 ghz! and I can also get IOT stuff on my 5ghz network!

[@Alex-gz6hs]

Once i am connected to a network how can I connect to other network since this only have one ssid?

[@issacohasi]

Third like for you. Thanks a lot for sharing. Issac , brazil

[@Wahinies]

This is a great feature, thanks for exploring on both platforms. I like the way UniFi handles it better but the template upload on GS is sweet for larger deployments. Question: can the Grandstream use the same SSID for multiple PPSK? This used to be a feature exclusive to AeroHive IIRC.

[@WillieHowe]

Can you explain that a bit?

[@Wahinies]

I had just noticed the SSID were different for the PPSK and am wondering if it may be left the same or errors out if reusing the same SSID amongst different keys. OR it might have been a long weekend run ragged by crazy kids. Edit- no yep I had tired eyes nevermind

[@johnroz]

Sweet!

[@johntankard]

Deffo an issue on ubiquiti implementation. Using a U6 Pro access point you can't get above 300mbps. Apparently McTelecom Networks said ubiquiti are aware of issue so hopefully a fix will come soon...

[@be-kind00]

I have given up on PPSK. So now what I am thinking is to create four different SSID's that each have their own VLAN ID assigned however, I want most of them to work on the 6ghz 6e band with WPA3.. I have a U6LR that can but the performance is awful even if you are standing 1 foot, 25 ' or 50' away. It is fed by a 2.5ghz port switch on my Mikrotik Switch_CRS310-8G+2S+IN. Ineternet is 1.2Gbps and router is pfsense on Intel i5 with 2.5 gbps port going to 2.5gbps port on switch. My i7 PC in the same room on 10g port to switch gets 806 gpbs internet speeds an U6LR gets 425 Mbps when all these devices are in 1 small room. Does anyone know a list of AP's that can do this and maintain WPA3 on 6ghz?

[@JasonsLabVideos]

Doing this on the Alta Labs is 900x faster and easier !

[@WillieHowe]

But Alta Labs is cloud first and only -- that's a non starter for a lot of people.

[@JasonsLabVideos]

Their Onprem is on its way. & Atleast their cloud stuff works unlike Grandstream ATM.@@WillieHowe

[@dhiaahmed5420]

Does grandstream have heatmap design web page?

[@WillieHowe]

Yes

[@dhiaahmed5420]

@@WillieHowe thank you so much for your fast reply. Could send me the link ?