Unifi controller ports pfsense

[garner149]

Good afternoon,

I have a vm running unifi controller behind my pfsense firewall. I have added the NAT rules for port forwarding like I had on my TP-link router before I replaced it with the pfsense firewall. It seems like I am missing something as my unifi controller can not talk to the cloud access part so i can remotely manage my APs. Any suggestions of what i'm missing?

I have port forwarded:
3478(UDP)
8080, 8443, 8880, 8843, 6789, and 8883 all TCP

Thanks for your time.

[johnpoz]

What are you trying to do exactly? You do not need to port forward anything for cloud access to your UC

https://help.ubnt.com/hc/en-us/articles/115012240067-UniFi-How-to-Enable-Cloud-Access-for-Remote-Management

[garner149]

I'm trying to make it to where my controller at site A can reach the internet through cloud access so APs at Site B and C can talk back to Site As controller. This worked on my router before I swapped it out with pfsense. I want to use pfsense so I am trying to see what I am missing.

[johnpoz]

That is not cloud access that is L3 adoption..
https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Device-Adoption-Methods-for-Remote-UniFi-Controllers

[garner149]

But cloud access is required if you want to remotely manage your controller through unifi.ubnt.com

[johnpoz]

Yes true but that has ZERO do with AP talking to your controller via L3 adoption.

Once your controller at site A has adopted the AP at remote sites, then you could enable control cloud and remotely mange it.

If you need to troubleshoot port forwarding
https://docs.netgate.com/pfsense/en/latest/nat/port-forward-troubleshooting.html