1. Home
  2. Knowledge Base
  3. Supported Hardware
  4. Ubiquiti
  5. Configure Ubiquiti UniFi Devices [Classic View]

Configure Ubiquiti UniFi Devices [Classic View]

You can confirm your environment under Operator Customizations.

Checklist before proceeding with the Unifi configuration

  1. Please ensure the necessary ports are open to the controller per Unifi documentation, including port 8880 both directions or guest devices will be unable to load the splash page.
  2. Make sure your hotspot RADIUS secret in the dashboard is less than 15 characters.
  3. The MAC of all APs that will be broadcasting the Guest WiFi signal need to be properly added to the hotspot as gateways or guests could receive a hotspot deactivated message.

 

The following instructions outline how to setup a Ubiquiti UniFi network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your Unifi controller is already operational and on a live network with adopted Access Points. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

  1. Add your Ubiquiti Unifi Access Points to the Marketing4WiFi Dashboard. Note the 2 files that will be required for the final step to complete the Ubiquiti configuration. Please download those files now and save to your Dekstop or some other folder. Note: These files are specific to your splash page url. If you ever change your splash page URL then these files will need to be replaced in your Ubiquiti UniFi controller.

  2. Log into the controller, launch the correct site and click the settings icon in the bottom left.
  3. Select User Group from the tabs on the left then click Create New User Group.
  4. Give the usergroup a name and enable Download and Upload Bandwith Limiting and save the group. Please make sure you select MBPS, Unifi has the default set to KBPS.
  5. Select Wireless Networks from the tabs and click the + Icon to create a new network.
  6. Enter your desired SSID. Select open for security and check the Guest Policy box.
    Click advanced options and set the User Group to the group just created then save.

    Please do not use special characters like apostrophes in your SSID as it will cause issues with Authentication.

  7. Select Profiles from the tabs on the left and then Create New Radius Profile.
  8. Name the profile and configure according to the information below and save.
    Please be sure to add both RADIUS servers to the Auth and Accounting lists.
    Radius Auth Server: Select one
    US-A Radius 1 IP

    52.23.46.139

    US-B Radius 1 IP

    3.132.31.3


    Radius Auth Server: Select one
    US-A Radius 2 IP

    52.207.192.243

    US-B Radius 2 IP

    3.18.137.68


    Port: 1812
    Password: Radius Secret from the Smart WiFi Dashboard
    Enable accounting: checked
    Enable interim update: checked
    Interim update interval: 3600
    Radius Accounting Server: Select one
    US-A Radius 1 IP

    52.23.46.139

    US-B Radius 1 IP

    3.132.31.3


    Radius Accounting Server: Select one
    US-A Radius 2 IP

    52.207.192.243

    US-B Radius 2 IP

    3.18.137.68


    Port 1813
    Password: Radius Secret from the Smart WiFi Dashboard
  9. Select guest control and configure according to the information below.

    Enable Guest Portal: Checked
    Authentication: Hotspot
    Promotional URL: Select one
    US-A Redirect URL

    https://splash.4wifi.net/hotspotlogin.php?res=success

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

    US-B Redirect URL

    https://splash.4wifi-e2.net/hotspotlogin.php?res=success

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success


    Redirection-
    a)Use Secure Portal: Unchecked
    b)Redirect Using Hostname: Unchecked
    c)Enabled HTTPS Redirection: Unchecked
    d)Enable encrypted redirect URL: Unchecked
    Template Engine: Angular JS
    Override Default Templates: Checked
    Radius: Checked Enable RADIUS-based authentication
    Profile: Use the radius profile we created before
    Authentication type: CHAP
    Pre-Authorization Access List: Please add all the entries contained in the Unifi IP Ranges document.

    We have found for the most reliable guest experience it is best to use the IP list provided above instead of using the standard hostnames available in the default walled garden.

  10. Last Step:Place the two html files that you downloaded from the dashboard earlier to your UnifFi controller hotspot directory. If using a cloudkey please use a SFTP program like WinSCP.
    You can find your site directory name by looking at the URL when viewing the site on the controller.

    Typical file location examples are below.(depending on the UniFi controller):
    Please note you will typically use your site auto generated folder name instead of default.
    CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal
    Dream Machine: /data/unifi/data/sites/default/app-unifi-hotspot-portal
    Windows
    : C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
    MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
    Linux: /usr/lib/unifi/data/sites/default/app-unifi-hotspot-portal

 

 

Troubleshooting Splash page

  1. Please do not use apostrophes in the SSID name as they can cause issues with RADIUS authentication.
  2. If devices are redirected but the device hangs on the controller url please ensure port 8880 is open to the Unifi Controller.
  3. If devices are redirected and port 8880 is open to the controller please ensure that the ‘Secure Portal’ option is turned OFF.
  4. If devices present an certificate error please ensure https redirection is disabled.
  5. If a hotspot deactivated message is presented please ensure all the AP MACs have been added as gateways to the correct hotspot.
  6. If devices are redirected to the splash page URL but the page fails to load please ensure the Allowed Authorization Access list has been properly configured.
  7. If the internal captive portal from the Unifi controller is displayed instead of the hotspot splash page make sure ‘Override Default Templates’ is ON and the index and auth files have been placed on the correct site directory.
  8. If devices load the splash page properly but after pressing connect the splash page is loaded again please ensure you’ve used the correct RADIUS servers for your environment and the RADIUS Authentication password is correct and less than 15 characters.
  9. If devices are able to authenticate but you don’t see connections posted in the dashboard please ensure you’ve used the correct RADIUS servers for your environment and the RADIUS Accounting password is correct.

Unifi Resources

The following links are to Unifi community resources that can help with troubleshooting the captive portal experience for guests.


Disclaimer on hardware configuration guides in the KB:

This equipment has been integrated and tested in our labs with the Marketing4WiFi platform using the firmware versions below.

Ubiquiti UniFi CloudKey Version 6.4.54 Firmware 1.1.19
Ubiquiti UniFi UAP-AC-Lite 5.43.43.12741

LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.

 

Updated on September 20, 2021

Was this article helpful?

Related Articles

Need Support?
Can't find the answer you're looking for? Don't worry we're here to help!
CONTACT SUPPORT