Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

Topic # 204413 30-Sep-2016 16:54
15 people support this post
Send private message quote this post

I understand that for some of you getting into UniFi gear is a bit tedious because of the controller... Not anymore.

 

Thanks to the kind folks at NexLevel Business Solutions (and @chevrolux) for donating a virtual machine I've now fired up a free UniFi controller for the Geekzone community to use.

The server itself is managed by yours truly, I do have a fulltime job so will manage it in my spare time. This is intended for home/small business use. It is running the latest version of the UniFi controller software behind a nginx proxy hosted in AWS. Pricing for UniFi products is available Here.

 

Setup:
You'll first need to register for the UniFi portal and know the mac addresses of the devices you're wanting to add. You can find the mac addresses on the back of your UniFi device. Please send me a DM with the following details:

Name: Your Name
Email Address: Your email address (I need to be able to send you a registration email)
MAC Addresses of your UniFi Products: Please put in the format 0a:de:ad:be:ef:4a (lowercase).

 

Once you're provisioned you'll be able to set-inform your devices. I have a script that checks the log files and will automatically inform into your site - you'll need to set-inform again once you see your device adopting in the portal.

 

UniFi Access Points:
Make sure that the UniFi is not adopted to any other UniFi controller before proceeding - if it is then you'll need to factory reset it. Please also ensure you've sent me through the MAC addresses of the device(s) you're wanting to add. If you're running an Edgerouter you can almost skip all these steps and look at this post.

 

Once you've opened up your shiny new UniFi access point and got an account on the UniFi portal you'll need to inform it. Plug it into your network first off and download / install the UniFi discovery tool (Chrome Extension) - there will be instructions here to inform it (but this is not working for me - typical...) however it essentially involves clicking "Manage" beside your access point and informing it to http://gzunifi.nlb.nz:8080/inform using the default user/pass of ubnt/ubnt. You need to run the inform twice - the first time to make it show up under devices in your portal and the 2nd time to accept the inform (when it is seen adopting under the portal).

 

The manual way when the tool doesn't work is to grab the IP address of your UniFi and SSH into it. Using Putty (Windows) or the SSH command (OSX, Linux) SSH into your access point with the username "ubnt" and password "ubnt" and run the command "set-inform http://gzunifi.nlb.nz:8080/inform" and you should get a response back. Note step 2 of the instructions that you need to do this twice when you've clicked adopt in the portal.

 

Click to see full size

 

USG:
This is just like the UniFi AP however you need to ensure you've got internet connectivity to the USG first (via WAN1) - navigate to https://192.168.1.1 first to connect it to the internet then run the set-inform on it. You'll need to run this twice (when it is in the adopting stage in the portal) for it to be accepted.

 

Tuning:
The settings I recommend for the UniFi AC access points are the following:

 

2.4GHz - HT20 (20MHz) (unless if you live in the middle of nowhere with no other WiFi congestion)
5GHz - VHT80 (80MHz) AC models only otherwise 40MHz.
Channel / Transmit power on both set to Auto.
Band Steering - Prefer 5G (AC / dual radio UniFi AP's only).
Airtime Fairness: Turn this on.

Disclaimer: this is a community project. Uptime is not at all guaranteed however in the event it does ever go down for a period of time your networks will still stay running as normal. Backups are made by the server on a daily basis off-site and community-based help is available in this thread. Approval to the UniFi controller is based on users having at-least 10 posts on Geekzone, introducing themselves in the Introductions thread, actually being a member for a period of time and on my general approval - do DM me anyway as there are some exceptions to this case.

 

There is also a post on the general security of this here (or below).





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5
3159 posts

Uber Geek
+1 received by user: 975

Subscriber

  Reply # 1643385 30-Sep-2016 17:14
2 people support this post
Send private message quote this post

Dam, i guess I better do an introduction on that thread to get access!


I fix stuff!
1562 posts

Uber Geek
+1 received by user: 247

Trusted
Vocus
Subscriber

  Reply # 1643387 30-Sep-2016 17:17
Send private message quote this post

Nice one!

I have built my own but this will be very useful for those who don't have the time time or skill to run their own.


 
 
 
 




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1643389 30-Sep-2016 17:21
Send private message quote this post

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

Just what I was thinking. There are people who are needing a few UniFi UAP's for their house but don't want to deal with a controller or using the Cloud Key. This way I can assist people with getting better WiFi in their house which is especially important as from tomorrow ;)





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


51 posts

Master Geek
+1 received by user: 19

Subscriber

  Reply # 1643422 30-Sep-2016 18:14
One person supports this post
Send private message quote this post

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

 

Snap.  @michaelmurfy - a +1 doesn't cover it - you Sir, deserve a beer!  Thank you - go forth in your awesomeness!

 

 Edit: splleling




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1643448 30-Sep-2016 18:40
2 people support this post
Send private message quote this post

Just on the matter of security. I understand having your network data stored in the cloud may worry you a bit so here is what I have done to help mitigate the worries:

 

- SSL is enabled site-wide with strong Cipher Suites (report here).
- Ports opened on the server are the minimal required to make a controller work - there is IP blacklisting present on the server.
- SSH access is blocked off to my own personal management network (I have a bunch of managed servers) and not open to the world.
- Updates are handled mostly automatically however I do physically login to every one of my servers to do an security audit bi-weekly.
- The portal is monitored by Uptime Robot and I do aim for the best uptime possible.

 

The UniFi portal in general is rather secure and all passwords are stored in the database as salted SHA512 - not even I can retrieve any passwords so if you forget it then you'll need to press "forgotten password" and get a new one.

 

I'll also never touch your site without permission (unless if it is during the initial setup phase) and am the only superadmin on this server, your site data is kept confidential by me. I'll never share anything without the explicit permission of the owner. Password resets (if required) are self-managed with a linked email address to your profile and I won't be providing support for password resets on the forum or via DM's unless if there is something seriously wrong.

 

I am using smtp2go as a mail relay for all alerts and this has the tendency to be flagged as spam by some mail hosts.

 

Your site security is your responsibility but by doing my part too I hope you have the confidence to use a service like this. I am happy to provide some assistance with some configuration but again - only with the explicit permission of the user.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


2198 posts

Uber Geek
+1 received by user: 563


  Reply # 1643468 30-Sep-2016 19:06
Send private message quote this post

This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?



6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1643470 30-Sep-2016 19:12
Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

To be perfectly honest I am not too sure. I've used UniFi products extensively in the past (and use an Edgerouter Lite) however nothing I can use to test. Like, literally nothing. It is the full controller software so if you can do it in the bulk standard controller then you can do it here.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


2796 posts

Uber Geek
+1 received by user: 229


  Reply # 1643489 30-Sep-2016 19:33
Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

Pretty sure you can't do that with the Unifi APs, they are not routers.

 

The cloud controller doesn't have to be up for the APs to work either, so it can't control DNS or anything like that.

 

 





3159 posts

Uber Geek
+1 received by user: 975

Subscriber

  Reply # 1643490 30-Sep-2016 19:36
Send private message quote this post

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?


No it can't. UAP's are not routers. But if your router was a Ubiquiti USG then you could use this controller to manage it.

Jax

88 posts

Master Geek
+1 received by user: 6


  Reply # 1643512 30-Sep-2016 21:03
Send private message quote this post

Nice work - just out of interest:

 

- is the server Windows or Linux?

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

 

 

Cheers

 

 




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1643514 30-Sep-2016 21:07
Send private message quote this post

Jax:

 

- is the server Windows or Linux?

 

Linux based. I don't get on well with Windows.

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

Allows for things like full SSL encryption, HTTP2, and more verbose logging over using the standard UniFi port. Also arguably better security.

 

 





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1643529 30-Sep-2016 21:43
Send private message quote this post

Well it works - there have been some devices adopted and upgraded successfully. I've updated the general OP.

 

Pretty good going for something I couldn't test!





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3567 posts

Uber Geek
+1 received by user: 387

Trusted

  Reply # 1659724 28-Oct-2016 13:03
Send private message quote this post

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 





Previously known as psycik

NextPVR/OpenHAB: 
Gigabyte AMD A8 Brix --> Samsung LA46A650D via HDMI, NextPVR,OpenHAB with Aeotech ZWave Controller
Media:Chromecast v2, ATV4, Roku3, Raspberry PI temperature Sensors and Bluetooth LE Sensors,HDHomeRun Dual
Windows 2012 
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex




6802 posts

Uber Geek
+1 received by user: 3133

Moderator
Trusted
Subscriber

  Reply # 1659725 28-Oct-2016 13:04
Send private message quote this post

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router GuideCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3567 posts

Uber Geek
+1 received by user: 387

Trusted

  Reply # 1659729 28-Oct-2016 13:09
Send private message quote this post

michaelmurfy:

 

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.

 

 

Cheers.  I'm sure I'll have some questions.  I want 2 ssids, one for my house and one for guests, but if possible without being too painful, I want the guests to have no access to my local network, but the apple tv and maybe chromecast.  Anyway, once up and running I'll post a thread about that.

 

 





Previously known as psycik

NextPVR/OpenHAB: 
Gigabyte AMD A8 Brix --> Samsung LA46A650D via HDMI, NextPVR,OpenHAB with Aeotech ZWave Controller
Media:Chromecast v2, ATV4, Roku3, Raspberry PI temperature Sensors and Bluetooth LE Sensors,HDHomeRun Dual
Windows 2012 
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


 1 | 2 | 3 | 4 | 5
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Propel launch Disney Star Wars Laser Battle Drones
Posted 19-Nov-2017 21:26


UFB killer app: Speed
Posted 17-Nov-2017 17:01


The case for RSS — MacSparky
Posted 13-Nov-2017 14:35


WordPress and Indieweb: Take control of your online presence — 6:30 GridAKL Nov 30
Posted 11-Nov-2017 13:43


Chorus reveals technology upgrade for schools, students
Posted 10-Nov-2017 10:28


Vodafone says Internet of Things (IoT) crucial for digital transformation
Posted 10-Nov-2017 10:06


Police and Facebook launch AMBER Alerts system in NZ
Posted 9-Nov-2017 10:49


Amazon debuts Fire TV Stick Basic Edition in over 100 new countries
Posted 8-Nov-2017 05:34


Vodafone VoIP transition to start this month
Posted 7-Nov-2017 12:33


Spark enhances IoT network capability
Posted 7-Nov-2017 11:33


Vocus NZ sale and broadband competition
Posted 6-Nov-2017 14:36


Hawaiki reaches key milestone in landmark deep-sea fibre project
Posted 4-Nov-2017 13:53


Countdown launches new proximity online shopping app
Posted 4-Nov-2017 13:50


Nokia 3310 to be available through Spark New Zealand
Posted 4-Nov-2017 13:31


Nest launches in New Zealand
Posted 4-Nov-2017 12:31



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.