Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

# 204413 30-Sep-2016 16:54
22 people support this post
Send private message

 

PLEASE NOTE! The controller URL has been moved - it is now hosted at https://gzunifi.murfy.nz:8443

 



I understand that for some of you getting into UniFi gear is a bit tedious because of the controller... Not anymore.

 

The server itself is managed by yours truly, I do have a fulltime job so will manage it in my spare time. This is intended for home/small business use. It is running the latest version of the UniFi controller software with LetsEncrypt for SSL. Pricing for UniFi products is available Here.

 

The server itself is kindly sponsored and hosted by Sitehost - https://sitehost.nz - they're also a provider I trust and offer excellent service.

 

This controller is only available for people inside New Zealand on a residential IP address (eg - no VPN providers).

 

Setup:
You'll first need to register for the UniFi portal. Please send me a DM with the following details:

Name: Your Name
Email Address: Your email address (I need to be able to send you a registration email)

Once you're provisioned you'll be able to set-inform your devices, you'll be granted rights with the ability to accept devices into your portal. Remember to do a set-inform twice once more once you've hit adopt in the controller to confirm the add.

 

UniFi Access Points:
Make sure that the UniFi is not adopted to any other UniFi controller before proceeding - if it is then you'll need to factory reset it.  If you're running an Edgerouter you can almost skip all these steps and look at this post.

 

Once you've opened up your shiny new UniFi access point and got an account on the UniFi portal you'll need to inform it. Plug it into your network first off and download / install the UniFi discovery tool (Chrome Extension) - there will be instructions here to inform it (but this is not working for me - typical...) however it essentially involves clicking "Manage" beside your access point and informing it to http://gzunifi.murfy.nz:8080/inform using the default user/pass of ubnt/ubnt. You need to run the inform twice - the first time to make it show up under devices in your portal and the 2nd time to accept the inform (when you've hit adopt in the portal).

 

The manual way when the tool doesn't work is to grab the IP address of your UniFi and SSH into it. Using Putty (Windows) or the SSH command (OSX, Linux) SSH into your access point with the username "ubnt" and password "ubnt" and run the command "set-inform http://gzunifi.murfy.nz:8080/inform" and you should get a response back. Note step 2 of the instructions that you need to do this twice when you've clicked adopt in the portal.

 

Click to see full size

 

USG:
This is just like the UniFi AP however you need to ensure you've got internet connectivity to the USG first (via WAN1) - navigate to https://192.168.1.1 first to connect it to the internet then run the set-inform on it. You'll need to run this twice (when it is in the adopting stage in the portal) for it to be accepted.

 

Note: To save you time adopt this first then simply plug in your other devices once it is adopted. Your other devices will automatically inform to the cloud controller pending adoption.

 

It can be a tad annoying to get the USG on VLAN 10 required for most UFB providers and FibreX - if you're with Voyager you can ask them to turn off VLAN however with other ISP's I've found this to be the easiest way to get around this:

 

1) Get your old router and set it to an IP range that is outside of the UniFi's - I use 192.168.10.0/24
2) Plug your USG in, set it up with DHCP in the internet options and adopt it to the controller.
3) Once it is online in the controller - set your ISP settings w/ VLAN. As it is provisioning the USG will go offline, give it a good 2 minutes then plug the USG into your ONT / Cable Modem.
4) Success - it should come online. If not, you'll need to factory reset and try again.

 

Tuning:
The settings I recommend for the UniFi AC access points are the following:

 

2.4GHz - HT20 (20MHz) (unless if you live in the middle of nowhere with no other WiFi congestion)
5GHz - VHT80 (80MHz) AC models only otherwise 40MHz.
Channel / Transmit power on both set to Auto.
Band Steering - Prefer 5G (AC / dual radio UniFi AP's only).
Airtime Fairness: Turn this on.

Disclaimer: this is a community project. Uptime is not at all guaranteed however in the event it does ever go down for a period of time your networks will still stay running as normal. Backups are made by the server on a daily basis off-site and community-based help is available in this thread. Approval to the UniFi controller is based on users having at-least 10 posts on Geekzone, introducing themselves in the Introductions thread, actually being a member for a period of time and on my general approval - do DM me anyway as there are some exceptions to this case.

 

I do also monitor the uptime here: https://uptime.murfy.nz/ 

 

There is also a post on the general security of this here (or below).





View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3 | 4 | 5 | 6 | 7
4205 posts

Uber Geek


  # 1643385 30-Sep-2016 17:14
4 people support this post
Send private message

Dam, i guess I better do an introduction on that thread to get access!


I fix stuff!
1783 posts

Uber Geek

Trusted
Vocus
Subscriber

  # 1643387 30-Sep-2016 17:17
Send private message

Nice one!

I have built my own but this will be very useful for those who don't have the time time or skill to run their own.


 
 
 
 




Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1643389 30-Sep-2016 17:21
Send private message

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

Just what I was thinking. There are people who are needing a few UniFi UAP's for their house but don't want to deal with a controller or using the Cloud Key. This way I can assist people with getting better WiFi in their house which is especially important as from tomorrow ;)





51 posts

Master Geek

Subscriber

  # 1643422 30-Sep-2016 18:14
One person supports this post
Send private message

Sounddude: Nice one!
I have built my own but this will be very useful for those who don't have the time time or skill to run their own.

 

 

Snap.  @michaelmurfy - a +1 doesn't cover it - you Sir, deserve a beer!  Thank you - go forth in your awesomeness!

 

 Edit: splleling




Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1643448 30-Sep-2016 18:40
2 people support this post
Send private message

Just on the matter of security. I understand having your network data stored in the cloud may worry you a bit so here is what I have done to help mitigate the worries:

 

- SSL is enabled site-wide with strong Cipher Suites (report here).
- Ports opened on the server are the minimal required to make a controller work - there is IP blacklisting present on the server.
- SSH access is blocked off to my own personal management network (I have a bunch of managed servers) and not open to the world.
- Updates are handled mostly automatically however I do physically login to every one of my servers to do an security audit bi-weekly.
- The portal is monitored by Uptime Robot and I do aim for the best uptime possible.

 

The UniFi portal in general is rather secure and all passwords are stored in the database as salted SHA512 - not even I can retrieve any passwords so if you forget it then you'll need to press "forgotten password" and get a new one.

 

I'll also never touch your site without permission (unless if it is during the initial setup phase) and am the only superadmin on this server, your site data is kept confidential by me. I'll never share anything without the explicit permission of the owner. Password resets (if required) are self-managed with a linked email address to your profile and I won't be providing support for password resets on the forum or via DM's unless if there is something seriously wrong.

 

I am using smtp2go as a mail relay for all alerts and this has the tendency to be flagged as spam by some mail hosts.

 

Your site security is your responsibility but by doing my part too I hope you have the confidence to use a service like this. I am happy to provide some assistance with some configuration but again - only with the explicit permission of the user.





2566 posts

Uber Geek


  # 1643468 30-Sep-2016 19:06
Send private message

This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?



Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1643470 30-Sep-2016 19:12
Send private message

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

To be perfectly honest I am not too sure. I've used UniFi products extensively in the past (and use an Edgerouter Lite) however nothing I can use to test. Like, literally nothing. It is the full controller software so if you can do it in the bulk standard controller then you can do it here.





 
 
 
 


3169 posts

Uber Geek

Subscriber

  # 1643489 30-Sep-2016 19:33
Send private message

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?

 

Pretty sure you can't do that with the Unifi APs, they are not routers.

 

The cloud controller doesn't have to be up for the APs to work either, so it can't control DNS or anything like that.

 

 


4205 posts

Uber Geek


  # 1643490 30-Sep-2016 19:36
Send private message

PhantomNVD: This looks to suit me perfectly, thanks Michael.

Quick question though, would this allow me to set static routes or alternate DNS'ing for clients connected to this UNIfy AP?


No it can't. UAP's are not routers. But if your router was a Ubiquiti USG then you could use this controller to manage it.

Jax

88 posts

Master Geek


  # 1643512 30-Sep-2016 21:03
Send private message

Nice work - just out of interest:

 

- is the server Windows or Linux?

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

 

 

Cheers

 

 




Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1643514 30-Sep-2016 21:07
Send private message

Jax:

 

- is the server Windows or Linux?

 

Linux based. I don't get on well with Windows.

 

- What is the requirement for a reverse proxy? what does that allow over NATting to the Server directly?

 

Allows for things like full SSL encryption, HTTP2, and more verbose logging over using the standard UniFi port. Also arguably better security.

 

 







Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1643529 30-Sep-2016 21:43
Send private message

Well it works - there have been some devices adopted and upgraded successfully. I've updated the general OP.

 

Pretty good going for something I couldn't test!





4528 posts

Uber Geek

Trusted

  # 1659724 28-Oct-2016 13:03
Send private message

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 





Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex




Mr Snotty
8871 posts

Uber Geek

Moderator
Trusted
Lifetime subscriber

  # 1659725 28-Oct-2016 13:04
Send private message

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.





4528 posts

Uber Geek

Trusted

  # 1659729 28-Oct-2016 13:09
Send private message

michaelmurfy:

 

davidcole:

 

I've just bought a single UAP-AC-Lite that I'm waiting to be delivered, and thinking about jumping on your server (if you please).  The backups, these are backups of the APs? 

 

 

Sure - I'll provision you now and give you a login.

 

 

Cheers.  I'm sure I'll have some questions.  I want 2 ssids, one for my house and one for guests, but if possible without being too painful, I want the guests to have no access to my local network, but the apple tv and maybe chromecast.  Anyway, once up and running I'll post a thread about that.

 

 





Previously known as psycik

OpenHAB: Gigabyte AMD A8 BrixOpenHAB with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Xiaomi Humidity and Temperature sensors and Bluetooth LE Sensors
Media:Chromecast v2, ATV4, Roku3, HDHomeRun Dual
Windows 10
Host (Plex Server/Crashplan): 2x2TB, 2x3TB, 1x4TB using DriveBender, Samsung 850 evo 512 GB SSD, Hyper-V Server with 1xW10, 1xW2k8, 2xUbuntu 16.04 LTS, Crashplan, NextPVR channel for Plex,NextPVR Metadata Agent and Scanner for Plex


 1 | 2 | 3 | 4 | 5 | 6 | 7
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Microsoft New Zealand Partner Awards results
Posted 18-Oct-2019 10:18


Logitech introduces new Made for Google keyboard and mouse devices
Posted 16-Oct-2019 13:36


MATTR launches to accelerate decentralised identity
Posted 16-Oct-2019 10:28


Vodafone X-Squad powers up for customers
Posted 16-Oct-2019 08:15


D Link ANZ launches EXO Smart Mesh Wi Fi Routers with McAfee protection
Posted 15-Oct-2019 11:31


Major Japanese retailer partners with smart New Zealand technology IMAGR
Posted 14-Oct-2019 10:29


Ola pioneers one-time passcode feature to fight rideshare fraud
Posted 14-Oct-2019 10:24


Spark Sport new home of NZC matches from 2020
Posted 10-Oct-2019 09:59


Meet Nola, Noel Leeming's new digital employee
Posted 4-Oct-2019 08:07


Registrations for Sprout Accelerator open for 2020 season
Posted 4-Oct-2019 08:02


Teletrac Navman welcomes AI tech leader Jens Meggers as new President
Posted 4-Oct-2019 07:41


Vodafone makes voice of 4G (VoLTE) official
Posted 4-Oct-2019 07:36


2degrees Reaches Milestone of 100,000 Broadband Customers
Posted 1-Oct-2019 09:17


Nokia 1 Plus available in New Zealand from 2nd October
Posted 30-Sep-2019 17:46


Ola integrates Apple Pay as payment method in New Zealand
Posted 25-Sep-2019 09:51



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.