Configure Ubiquiti UniFi Devices

You can confirm your environment under Operator Customizations.

Before configuring your device, please be sure that you have added the Gateway to the Smart WiFi Platform and associated it with a Hotspot.
ADD GATEWAY
ADD HOSPOT

We’ve identified an issue with Unifi products where the Server Secret can not be more than 15 characters. If your guests receive the splash page but are unable to authenticate, please make sure your Radius Server Secret is not more than 15 characters.

The following instructions outline how to setup a Ubiquiti UniFi network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your Unifi controller is already operational and on a live network with adopted Access Points. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

  1. Add your Ubiquiti Unifi Access Points to the Marketing4WiFi Dashboard. Note the 2 files that will be required for the final step to complete the Ubiquiti configuration. Please download those files now and save to your Dekstop or some other folder. Note: These files are specific to your splash page url. If you ever change your splash page URL then these files will need to be replaced in your Ubiquiti UniFi controller.

  2. Log into the Controller at https://unifi.ubnt.com, launch the correct site and click the settings icon in the bottom left.
  3. Select User Group from the tabs on the left then click Create New User Group.
  4. Give the usergroup a name and enable Download and Upload Bandwith Limiting and save the group. Please make sure you select MBPS, Unifi has the default set to KBPS.
  5. Select Wireless Networks from the tabs and click the + Icon to create a new network.
  6. Enter your desired SSID. Select open for security and check the Guest Policy box.
    Click advanced options and set the User Group to the group just created then save.

    Please do not use special characters like apostrophes in your SSID as it will cause issues with Authentication.

  7. Select Profiles from the tabs on the left and then Create New Radius Profile.
  8. Name the profile and configure according to the information below and save.
    Please be sure to add both RADIUS servers to the Auth and Accounting lists.
    Radius Auth Server: Select one
    US-A Radius 1 IP

    52.23.46.139

    US-B Radius 1 IP

    3.132.31.3


    Radius Auth Server: Select one
    US-A Radius 2 IP

    52.207.192.243

    US-B Radius 2 IP

    3.18.137.68


    Port: 1812
    Password: Radius Secret from the Smart WiFi Dashboard
    Enable accounting: checked
    Enable interim update: checked
    Interim update interval: 3600
    Radius Accounting Server: Select one
    US-A Radius 1 IP

    52.23.46.139

    US-B Radius 1 IP

    3.132.31.3


    Radius Accounting Server: Select one
    US-A Radius 2 IP

    52.207.192.243

    US-B Radius 2 IP

    3.18.137.68


    Port 1813
    Password: Radius Secret from the Smart WiFi Dashboard
  9. Select guest control and configure according to the information below.

    Enable Guest Portal: Checked
    Authentication: Hotspot
    Promotional URL: Select one
    US-A Redirect URL

    https://splash.4wifi.net/hotspotlogin.php?res=success

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

    US-B Redirect URL

    https://splash.4wifi-e2.net/hotspotlogin.php?res=success

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success


    Redirection-
    a)Use Secure Portal: Unchecked
    b)Redirect Using Hostname: Unchecked
    c)Enabled HTTPS Redirection: Unchecked
    d)Enable encrypted redirect URL: Unchecked
    Template Engine: Angular JS
    Override Default Templates: Checked
    Radius: Checked Enable RADIUS-based authentication
    Profile: Use the radius profile we created before
    Authentication type: CHAP
    Pre-Authorization Access List: Please add the Pre-Authroization Access List in CIDR notation. You can view the Unifi IP Ranges document that has been prepared as a reference point.
    These IP ranges are subject to change depending on the network setup.

    Please see the Locations and IP Address Ranges of CloudFront Edge Servers as well as the AWS IP Address Ranges for the most up to date list of IP Address Ranges from Amazon.

    1. JSON output for Cloudfront
    2. JSON output for Amazon Web Services
      Filter the list for service EC2 regions us-east-1 and us-east-2

BE SURE TO APPEND THE WALLED GARDEN TO INCLUDE ANY OTHER DOMAINS THAT YOU WANT TO BE DISPLAYED AS WELL.

  • Last Step:Place the two html files that you downloaded from the dashboard earlier to your UnifFi controller hotspot directory. If using a cloudkey please use a SFTP program like WinSCP.
    You can find your site directory name by looking at the URL when viewing the site on the controller.

    Typical file location examples are below.(depending on the UniFi controller):
    Please note you will typically use your site auto generated folder name instead of default.CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal
    Windows: C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
    MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
    Linux: /usr/lib/unifi/sites/default/app-unifi-hotspot-portal
  •  

     

    Disclaimer on hardware configuration guides in the KB:

    This equipment has been integrated and tested in our labs with the Marketing4WiFi platform using the firmware versions below.

    Ubiquiti UniFi Controller 6.0.41
    Ubiquiti UniFi Access Point 4.3.24.11355

    LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.

    Updated on February 10, 2021

    Was this article helpful?

    Need Support?
    Can't find the answer you're looking for? Don't worry we're here to help!
    CONTACT SUPPORT