1. Install controller
Prerequisite:
To install the UniFi controller, we need to install mongodb, Java JDK, unzip, wget first.
yum -y install epel-release yum -y install mongodb-server java-1.8.0-openjdk unzip wget
Install Unifi controller and
yum install http://dl.marmotte.net/rpms/redhat/el7/x86_64/unifi-controller-5.8.24-1.el7/unifi-controller-5.8.24-1.el7.x86_64.rpm systemctl enable unifi.service systemctl start unifi.service
Then we need to open a couple of ports for controller to function:
#ssh sudo firewall-cmd --add-port=22/tcp --permanent # Unifi - Device Inform & Management sudo firewall-cmd --add-port=8080-8081/tcp --permanent #https management sudo firewall-cmd --add-port=8443/tcp --permanent #Unifi - Guest Portal Redirect (SSL) sudo firewall-cmd --add-port=8843/tcp --permanent # Unifi - Guest Portal Redirect sudo firewall-cmd --add-port=8880/tcp --permanent #Webmin sudo firewall-cmd --add-port=10000-10010/tcp --permanent #AP discovery, without which you will not see devices from the controller sudo firewall-cmd --add-port=10001/udp --permanent # Port 3478/udp is used by the APs to report into the controller using the "STUN" protocol, you controller and APs can work, but there will be a yellow warning mark next to the device in controller sudo firewall-cmd --add-port=3478/udp --permanent
Give the controller a static IP address:
sudo vi /etc/sysconfig/network-scripts/ifcfg-eth0
Then open a web browser and type:
https://ip_address_of_controller:8443
2. Create a WLAN
During the initialisation, you will be asked to create a wireless network, if you want to create multiple WLAN, and put more control on the WLAN, follow below steps:
Step1, create user group for a SSID, from where we can control the bandwidth, go to settings > User groups, create a user, then set the bandwidth limit for download/upload.
Step2, go to the settings > wireless networks. Select the User Group created in Step 1. Configure Security Authentication method and Guest Policy if required.
3. Adop device to Remote Unifi Controllers
By default unifi APs adopt to the controllers via Multicast/Broadcast packet. So if you use one controller for multiple site or deploy controller on cloud will need some extra configuration. The main issue is DHCP options 43.
See below article to configure the DHCP on routers
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management
If you using windows DHCP server, then use below article:
Right click on the IPV4 node just below your server name, and choose Define Vendor Classes
. You will be presented with this fancy screen.
Add a new vendor class by clicking the Add button. In the New Class
window, enter a Display Name (I suggest Ubiquiti
) and an optionally enter a description. In the ASCII portion of the lowest box type the letters ubnt
. Make sure there’s nothing else, to include white space, in that box. The whole line should read 0000 75 62 6E 74 ubnt
as in the screenshot. Click OK, then Close to close both windows.
Right click the IPV4 node again and choose Set Predefined Options
from the context menu. In the Predefined Options and Values
window, choose your new Ubiquiti class from the top dropdown, and click the Add
button to create a new option.
In the Option Type
window, enter UniFi Controller
, or some similar name, into the Name
box, choose Binary
in the Data type
dropdown, and enter 1
in the Code
box. I chose to write “IP as HEX in the BINARY section: 0a 0a 0a 02” in the Description
box to remind myself how to enter the controller’s IP address later. Click OK, then OK again to accept and close both windows.
We have now defined both the Ubiquiti vendor class and a predefined option in that class that we can use to point our devices at our UniFi Controller, no matter what subnet they’re on.
For each subnet that contains UniFi devices, we must now add our newly created option to the Scope Options. Begin by right clicking the Scope Options node under one of your Scopes, and choosing Configure Options
. Click the Advanced tab and choose Ubiquiti under Vendor Class dropdown.
There’s only one option, so that’s obviously the one we want. Make sure it’s checked, and then erase the default value in the Binary section.
We now need to do a little math. The IP address of your UniFi Controller must be converted from decimal to hexadecimal. Windows 8.1 and later (at least) makes this extraordinarily easy with the built in calculator.
Open the windows calculator and go to Programmer mode. Ensure DEC mode is selected and type in the first octet of your UniFi Controller’s IP, then see the HEX value displayed. Windows displays the value as a single digit when possible, but when entering it in hexadecimal, it must be 2 digits. Prepend a 0
to any single-digit hex values you get. For example, 10
converts to A
, so you would prepend a 0 and get 0A
for your hexadecimal octet.
Repeat this for each octet in your IP address, writing down each hex value.
Once you have all the hexadecimal octets, you need to enter them into the Binary section of the Data Entry box. Just type the numbers in the order of the octets. An IP of 10.10.10.2
, for instance, would be entered as 0A 0A 0A 02
. Click OK to close the Scope Options window.
Reboot your APs and watch them magically appear in your UniFi Controller