The RADIUS integration for Ubiuiqit Unifi is no longer supported. Please see this article on configuring Ubiquiti Unifi API integration.
- If you are running UniFi 6.0 or higher you need to disable the new UI to complete this configuration guide. To do so, click Settings then System on the left menu and enable Legacy Interface option.
- Please ensure the necessary ports are open to the controller per Unifi documentation, including port 8880 both directions or guest devices will be unable to load the splash page.
- Make sure your hotspot RADIUS secret in the dashboard is less than 15 characters.
- The MAC of all APs that will be broadcasting the Guest WiFi signal need to be properly added to the hotspot as gateways or guests could receive a hotspot deactivated message.
The following instructions outline how to setup a Ubiquiti UniFi network for the Marketing4WiFi Platform. This guide covers details such as configuring RADIUS, walled garden entries, and captive portals. This guide assumes that your Unifi controller is already operational and on a live network with adopted Access Points. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.
- Add your Ubiquiti Unifi Access Points to the Marketing4WiFi Dashboard. Note the 2 files that will be required for the final step to complete the Ubiquiti configuration. Please download those files now and save to your Dekstop or some other folder. Note: These files are specific to your splash page url. If you ever change your splash page URL then these files will need to be replaced in your Ubiquiti UniFi controller.
- Log into the controller, launch the correct site and click the settings icon in the bottom left.
- Select User Group from the tabs on the left then click Create New User Group.
- Give the usergroup a name and enable Download and Upload Bandwith Limiting and save the group. Please make sure you select MBPS, Unifi has the default set to KBPS.
- Select Wireless Networks from the tabs and click the + Icon to create a new network.
- Enter your desired SSID. Select open for security and check the Guest Policy box.
Click advanced options and set the User Group to the group just created then save.Please do not use special characters like apostrophes in your SSID as it will cause issues with Authentication.
- Select Profiles from the tabs on the left and then Create New Radius Profile.
- Name the profile and configure according to the information below and save.
Please be sure to add both RADIUS servers to the Auth and Accounting lists.
Radius Auth Server: Select one
Radius Auth Server: Select one
Port: 1812
Password: Radius Secret from the Smart WiFi Dashboard
Enable accounting: checked
Enable interim update: checked
Interim update interval: 3600
Radius Accounting Server: Select one
Radius Accounting Server: Select one
Port 1813
Password: Radius Secret from the Smart WiFi Dashboard - Select guest control and configure according to the information below.
Enable Guest Portal: Checked
Authentication: Hotspot
Promotional URL: Select one
Redirection-
a)Use Secure Portal: Unchecked
b)Redirect Using Hostname: Unchecked
c)Enabled HTTPS Redirection: Unchecked
d)Enable encrypted redirect URL: Unchecked
Template Engine: Angular JS
Override Default Templates: Checked
Radius: Checked Enable RADIUS-based authentication
Profile: Use the radius profile we created before
Authentication type: CHAP
Pre-Authorization Access: Add all the Default walled garden entries.If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.
- Last Step:Place the two html files that you downloaded from the dashboard earlier to your UnifFi controller hotspot directory. If using a cloudkey please use a SFTP program like WinSCP.
You can find your site directory name by looking at the URL when viewing the site on the controller.
Typical file location examples are below.(depending on the UniFi controller):
Please note you will typically use your site auto generated folder name instead of default.
CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal
Dream Machine: /data/unifi/data/sites/default/app-unifi-hotspot-portal
Windows: C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
Linux: /usr/lib/unifi/data/sites/default/app-unifi-hotspot-portal
Troubleshooting Splash page
- Please do not use apostrophes in the SSID name as they can cause issues with RADIUS authentication.
- If devices are redirected but the device hangs on the controller url please ensure port 8880 is open to the Unifi Controller.
- If devices are redirected and port 8880 is open to the controller please ensure that the ‘Secure Portal’ option is turned OFF.
- If devices present an certificate error please ensure https redirection is disabled.
- If a hotspot deactivated message is presented please ensure all the AP MACs have been added as gateways to the correct hotspot.
- If devices are redirected to the splash page URL but the page fails to load please ensure the Allowed Authorization Access list has been properly configured.
- If the internal captive portal from the Unifi controller is displayed instead of the hotspot splash page make sure ‘Override Default Templates’ is ON and the index and auth files have been placed on the correct site directory.
- If devices load the splash page properly but after pressing connect the splash page is loaded again please ensure you’ve used the correct RADIUS servers for your environment and the RADIUS Authentication password is correct and less than 15 characters.
- If devices are able to authenticate but you don’t see connections posted in the dashboard please ensure you’ve used the correct RADIUS servers for your environment and the RADIUS Accounting password is correct.
Unifi Resources
The following links are to Unifi community resources that can help with troubleshooting the captive portal experience for guests.
Disclaimer on hardware configuration guides in the KB:
This equipment has been integrated and tested in our labs with the Marketing4WiFi platform using the firmware versions below.
Ubiquiti UniFi CloudKey Version 7.2.92-18687-1 Firmware 1.1.19
Ubiquiti UniFi UAP-AC-Lite 6.0.21.13673
LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.