With UniFi, multiple SSIDs can connect to VLANs on single interface of a router / firewall. Wi-Fi guest have different rights & throughout allowances depending on the SSID they join. This could for example keep a guest network away from production networks at layer 2 or for multiple services to be presented using a single set of hardware e.g. an SSID with static PSK that’s non-trusted, a guest portal that’s non trusted and a production SSID with 802.1X auth that is trusted for corporate laptops/devices etc…
The instructions below assume you can access your devices, have set static IP addresses for management & authentication on both the Cyberoam & Switch & have the latest version of UniFi available for installation. Details on this are available for each device separately & aren’t covered in this guide.