Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

Topic # 204413 30-Sep-2016 16:54 11 people support this post Send private message quote this post

I understand that for some of you getting into UniFi gear is a bit tedious because of the controller... Not anymore.

 

Thanks to the kind folks at NexLevel Business Solutions (and @chevrolux) for donating a virtual machine I've now fired up a free UniFi controller for the Geekzone community to use.

The server itself is managed by yours truly, I do have a fulltime job so will manage it in my spare time. This is intended for home/small business use. It is running the latest version of the UniFi controller software behind a nginx proxy hosted in AWS. Pricing for UniFi products is available Here.

 

Setup:
You'll first need to register for the UniFi portal and know the mac addresses of the devices you're wanting to add. You can find the mac addresses on the back of your UniFi device. Please send me a DM with the following details:

Name: Your Name
Email Address: Your email address (I need to be able to send you a registration email)
MAC Addresses of your UniFi Products: Please put in the format 00:11:22:33:44:55

 

Once you're provisioned you'll be able to set-inform your devices. I have a script that checks the log files and will automatically inform into your site - you'll need to set-inform again once you see your device adopting in the portal.

 

UniFi Access Points:
Make sure that the UniFi is not adopted to any other UniFi controller before proceeding - if it is then you'll need to factory reset it. Please also ensure you've sent me through the MAC addresses of the device(s) you're wanting to add. If you're running an Edgerouter you can almost skip all these steps and look at this post.

 

Once you've opened up your shiny new UniFi access point and got an account on the UniFi portal you'll need to inform it. Plug it into your network first off and download / install the UniFi discovery tool (Chrome Extension) - there will be instructions here to inform it (but this is not working for me - typical...) however it essentially involves clicking "Manage" beside your access point and informing it to http://gzunifi.nlb.nz:8080/inform using the default user/pass of ubnt/ubnt. You need to run the inform twice - the first time to make it show up under devices in your portal and the 2nd time to accept the inform (when it is seen adopting under the portal).

 

The manual way when the tool doesn't work is to grab the IP address of your UniFi and SSH into it. Using Putty (Windows) or the SSH command (OSX, Linux) SSH into your access point with the username "ubnt" and password "ubnt" and run the command "set-inform http://gzunifi.nlb.nz:8080/inform" and you should get a response back. Note step 2 of the instructions that you need to do this twice when you've clicked adopt in the portal.

 

Click to see full size

 

USG:
This is just like the UniFi AP however you need to ensure you've got internet connectivity to the USG first (via WAN1) - navigate to https://192.168.1.1 first to connect it to the internet then run the set-inform on it. You'll need to run this twice (when it is in the adopting stage in the portal) for it to be accepted.

 

Tuning:
The settings I recommend for the UniFi AC access points are the following:

 

2.4GHz - HT20 (20MHz) (unless if you live in the middle of nowhere with no other WiFi congestion)
5GHz - VHT80 (80MHz) AC models only otherwise 40MHz.
Channel / Transmit power on both set to Auto.
Band Steering - Prefer 5G (AC / dual radio UniFi AP's only).
Airtime Fairness: Turn this on.

Disclaimer: this is a community project. Uptime is not at all guaranteed however in the event it does ever go down for a period of time your networks will still stay running as normal. Backups are made by the server on a daily basis off-site and community-based help is available in this thread. Approval to the UniFi controller is based on users having at-least 10 posts on Geekzone, introducing themselves in the Introductions thread, actually being a member for a period of time and on my general approval - do DM me anyway as there are some exceptions to this case.

 

There is also a post on the general security of this here (or below).





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4
2874 posts

Uber Geek
+1 received by user: 732

Subscriber

  Reply # 1643385 30-Sep-2016 17:14 2 people support this post Send private message quote this post

Dam, i guess I better do an introduction on that thread to get access!


I fix stuff!
1512 posts

Uber Geek
+1 received by user: 225

Trusted
Vocus
Subscriber

  Reply # 1643387 30-Sep-2016 17:17 Send private message quote this post

Nice one!

I have built my own but this will be very useful for those who don't have the time time or skill to run their own.




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1643389 30-Sep-2016 17:21 Send private message quote this post

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

Just what I was thinking. There are people who are needing a few UniFi UAP's for their house but don't want to deal with a controller or using the Cloud Key. This way I can assist people with getting better WiFi in their house which is especially important as from tomorrow ;)





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


41 posts

Geek
+1 received by user: 15

Subscriber

  Reply # 1643422 30-Sep-2016 18:14 One person supports this post Send private message quote this post

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

 

Snap.  @michaelmurfy - a +1 doesn't cover it - you Sir, deserve a beer!  Thank you - go forth in your awesomeness!

 

 Edit: splleling




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1643448 30-Sep-2016 18:40 One person supports this post Send private message quote this post

Just on the matter of security. I understand having your network data stored in the cloud may worry you a bit so here is what I have done to help mitigate the worries:

 

- SSL is enabled site-wide with strong Cipher Suites (report here).
- Ports opened on the server are the minimal required to make a controller work - there is IP blacklisting present on the server.
- SSH access is blocked off to my own personal management network (I have a bunch of managed servers) and not open to the world.
- Updates are handled mostly automatically however I do physically login to every one of my servers to do an security audit bi-weekly.
- The portal is monitored by Uptime Robot and I do aim for the best uptime possible.

 

The UniFi portal in general is rather secure and all passwords are stored in the database as salted SHA512 - not even I can retrieve any passwords so if you forget it then you'll need to press "forgotten password" and get a new one.

 

I'll also never touch your site without permission (unless if it is during the initial setup phase) and am the only superadmin on this server, your site data is kept confidential by me. I'll never share anything without the explicit permission of the owner. Password resets (if required) are self-managed with a linked email address to your profile and I won't be providing support for password resets on the forum or via DM's unless if there is something seriously wrong.

 

I am using smtp2go as a mail relay for all alerts and this has the tendency to be flagged as spam by some mail hosts.

 

Your site security is your responsibility but by doing my part too I hope you have the confidence to use a service like this. I am happy to provide some assistance with some configuration but again - only with the explicit permission of the user.





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


1721 posts

Uber Geek
+1 received by user: 384


  Reply # 1643468 30-Sep-2016 19:06 Send private message quote this post

This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?



5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1643470 30-Sep-2016 19:12 Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

To be perfectly honest I am not too sure. I've used UniFi products extensively in the past (and use an Edgerouter Lite) however nothing I can use to test. Like, literally nothing. It is the full controller software so if you can do it in the bulk standard controller then you can do it here.





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


2680 posts

Uber Geek
+1 received by user: 189


  Reply # 1643489 30-Sep-2016 19:33 Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

Pretty sure you can't do that with the Unifi APs, they are not routers.

 

The cloud controller doesn't have to be up for the APs to work either, so it can't control DNS or anything like that.

 

 





2874 posts

Uber Geek
+1 received by user: 732

Subscriber

  Reply # 1643490 30-Sep-2016 19:36 Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?


No it can't. UAP's are not routers. But if your router was a Ubiquiti USG then you could use this controller to manage it.

Jax

71 posts

Master Geek
+1 received by user: 3


  Reply # 1643512 30-Sep-2016 21:03 Send private message quote this post

Nice work - just out of interest:

 

- is the server Windows or Linux?

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

 

 

Cheers

 

 




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1643514 30-Sep-2016 21:07 Send private message quote this post

Jax:

 

- is the server Windows or Linux?

 

Linux based. I don't get on well with Windows.

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

Allows for things like full SSL encryption, HTTP2, and more verbose logging over using the standard UniFi port. Also arguably better security.

 

 





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1643529 30-Sep-2016 21:43 Send private message quote this post

Well it works - there have been some devices adopted and upgraded successfully. I've updated the general OP.

 

Pretty good going for something I couldn't test!





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3105 posts

Uber Geek
+1 received by user: 261

Trusted

  Reply # 1659724 28-Oct-2016 13:03 Send private message quote this post

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 





Previously known as psycik

NextPVR Based HTPC:

Gigabyte AMD A8 Brix --> Samsung LA46A650D via HDMI, SiliconDust HDHomeRun Dual DVB-T Tuner, NextPVR,
Clients:
Chromecast v2, ATV4, Roku3
Windows 2012 Host (Plex Server/Crashplan)
2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 1xUbuntu 14.04 LTS, Crashplan, NextPVR channel for Plex




5695 posts

Uber Geek
+1 received by user: 2298

Trusted
Subscriber

  Reply # 1659725 28-Oct-2016 13:04 Send private message quote this post

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.





Michael Murphy | https://murfy.nz
Want to be with an awesome ISP? Want $20 credit too? Use this link to sign up to BigPipe.
The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3105 posts

Uber Geek
+1 received by user: 261

Trusted

  Reply # 1659729 28-Oct-2016 13:09 Send private message quote this post

michaelmurfy:

 

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.

 

 

Cheers.  I'm sure I'll have some questions.  I want 2 ssids, one for my house and one for guests, but if possible without being too painful, I want the guests to have no access to my local network, but the apple tv and maybe chromecast.  Anyway, once up and running I'll post a thread about that.

 

 





Previously known as psycik

NextPVR Based HTPC:

Gigabyte AMD A8 Brix --> Samsung LA46A650D via HDMI, SiliconDust HDHomeRun Dual DVB-T Tuner, NextPVR,
Clients:
Chromecast v2, ATV4, Roku3
Windows 2012 Host (Plex Server/Crashplan)
2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 1xUbuntu 14.04 LTS, Crashplan, NextPVR channel for Plex


 1 | 2 | 3 | 4
View this topic in a long page with up to 500 replies per page Create new topic



Amazon prices in US$






Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:






Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.