Host OverRide for UnFi APs

MagikMark

I just got a new U6 LR and this is the my first time working with this AP.

The Unifi controller is located in my LAN (10.0.1.1:8443) and my U6 is located in another interface "Wireless" (10.0.2.1). It seems the AP can't be adopted because it is located in another interface and network. The advise is to create a host overdrive that will allow the controller to search APs in another interface or network.

Since this is my first time, can someone help me create a host overdrive that will exactly do this?

Thanks a lot

mcury

Well, I adopted my device like this:

SSH into the ap:
set-inform http://controller_ip:8080/inform

default user and password
ubnt ubnt

NogBadTheBad

@magikmark Not sure Host OverRide is the correct term.

Don't you need to do an additional DHCP Option ?

https://help.ui.com/hc/en-us/articles/360012097513-UniFi-UDM-USG-How-to-Configure-Custom-DHCP-Options

I've moved on from Unifi.

MagikMark

@nogbadthebad Do you have a step by step guide?

MagikMark

@mcury

What's the IP of U6, 192.168.1.1? If so this is also the IP of my WAN
set-inform http://10.0.1.1:8080/inform OR
3, set-inform http://10.0.1.1:8443/inform

mcury

@magikmark said in Host OverRide for UnFi APs:

@mcury

What's the IP of U6, 192.168.1.1? If so this is also the IP of my WAN

set-inform http://10.0.1.1:8080/inform OR
3, set-inform http://10.0.1.1:8443/inform

the U6 will get one IP of the 10.0.2.0 network through DHCP.
Check the DHCP to confirm what is the U6 IP address, connect to it through SSH, username and password mentioned above, then type: set-inform http://10.0.1.1:8080/inform

Port 8080 is for adoption, and 8443 to manage the controller, so, to adopt use port 8080.

Observation here is that you need a firewall rule in pfsense allowing the AP to reach the controller on TCP port 8080.

edit: https://help.ui.com/hc/en-us/articles/204909754-UniFi-Layer-3-Adoption-for-Remote-UniFi-Network-Applications

edit2: https://help.ui.com/hc/en-us/articles/218506997-UniFi-Ports-Used

MagikMark

@mcury

Ssh uses port 21 right?

Thanks for reminding about the firewall rule

Will try this later

mcury

@magikmark said in Host OverRide for UnFi APs:

@mcury

Ssh uses port 21 right?

Thanks for reminding about the firewall rule

Will try this later

TCP port 22.

MagikMark

@mcury

Oops! Thanks again

johnpoz

@magikmark why are you putting your AP on another vlan? You can run another vlan for your wireless once the AP Is up and running.

But for ease of setup and management of your AP should really be on the same network as your controller.

Or you have to do L3 adoption. That is NOT what I would suggest for the first time unifi user..

JKnott

@magikmark

This is why the network gods created management LANs. Actually, your problem is the controller relies on discovery to find the APs and other Unifi devices. Discovery uses multicasts, which are not normally passed by routers. This means the AP must be in the same LAN as the controller.

johnpoz

@jknott said in Host OverRide for UnFi APs:

This means the AP must be in the same LAN as the controller.

Well yes and no.. They do have L3 adoption, and they do have support for tagged vlans now for managment, etc.

But I sure wouldn't suggest someone new to it all to do any of that. Put your AP on the same network as your controller. Then you can setup your wifi networks to be on different vlans..

Once your more familiar with the how this all works, then if you wanted sure you could put your controller and the AP on different networks

MagikMark

@johnpoz

I'm putting the AP in another interface. I have a 4 port NIC.

192.168.1.1 - WAN
10.0.1.1 - LAN (Htpc)
10.0.2. 1 - AP multi SSID
192.168.1.2 - Failover WAN

As much as I would like to put the controller and AP in one network, I don't have available switch at the moment.

I would appreciate if you have tweaks and tips to share to make pfsense and U6 work seemlessly

johnpoz

@magikmark well use the L3 Adoption method that was linked too above.

Order a switch.. the little 5 port unifi flex mini is $30..

MagikMark

@johnpoz

Thanks. May I ask why it's called level 3 adoption?

johnpoz

@magikmark because your adopting the AP that resides on a different L3 than your controller.

NogBadTheBad

@magikmark Nope as I mentioned I ditched Unifi a while back.

https://community.ui.com/questions/pfSense-DHCP-provision-option/b42003ce-7560-4680-8731-805e59459bfc

johnpoz

@magikmark said in Host OverRide for UnFi APs:

Do you have a step by step guide?

The step by step guide is given on the link to the L3 adoption - they even provide a pfsense example for setting the dhcp option 43

stephenw10

Either SSHing into the access point and setting the inform url or setting a host override in pfSense for 'unifi' should work there. I have done both, neither was especially difficult.

Steve

MagikMark

This post is deleted!