I have 4 non UI switches, management by my ISP with 2 vlans (phones and internet). I have a server handling DHCP on the main LAN.

My current wifi system from Cambium Network is handling all Wifi via thier Cloud product (CN Maestro). I have 10 access points that are attached to the various switches. DHCP for wifi clients is handled in their system as well. I have multiple vlans on that system as well. Its been working well for the most part, but am starting to look at other options.

If I was to purchase a Cloud Gateway Ultra, would I be able to manage everything I need to for just access points? Meaning, it would handle DHCP for wifi clents, while allowing me to seperate main vs guest network. Can the Cloud Gateway, just hang (not literally) off one of my switches in the network and be managed fully in Unifi?

P.S. I did did purchase a Gen 3 Cloud Key, but soon realized that it doesnt do what I had thought it would do, like routing or DHCP.

This is for a church.

Thank you for any advice you can provide.

However, I now realized that all of my environment can now be accessed via unifi.com.

How can I migrate my online account setup to a local only setup (and then delete the online account)?

Please dont tell me to make a backup and factory reset...

I want to deploy some U7 access points. I dont have any UI switches or gateways. I simply want to use my existing switches and hang access points off them. I understand that I need some kind of controller. Would a Cloud Key Gen 2 work for my situation? I dont need anything more. Dont plan on adding any additional products, like cameras or access.

thank you for providing clarification for me!

I've seen UniFi equipment and networks deployed in the past, but never dived in myself. Compared to pre-2020, there are numerous categories and products.

While it would be awesome to have a fully fledged Ubiquiti network one day to support my parents, as I'm planning on moving out two of the main prioritisations for me right now are safe and secure Storage and Security.

Would it be possible to receive some advice on the following:

• Would it be worth going for a Cloud Gateway with a built in NVR or something like the "Network Video Recorder Instant Kit" which is an NVR, Viewport and four decent cameras.
• If so, is there a way to get the G5 Turret Ultra cameras in black instead of white with the kit?

• Is the UNAS 2 a good starting point for on-site backup, with the ability to use the NVR for remote backups when I move?
• What's the maximum storage quantity for this unit?
• Is it worth going for the UNAS 4 instead?

• If I went with the NVR Instant Kit and UNAS are they both manageable from the same admin page or would these be two separate links?
• Are both manageable from the Ubiquiti UniFi mobile app?

Apologies for the questions, I just want to get things right. I hope the community can help.

in my Company we are thinking about migrating our Wireless-Infrstructure to Unifi APs. Only Unifi AP for now - all other stuff (Switches, Gateways,... from different manufactures). We did set up an local On-premise Network manager Server (not the new OS Server, we gonna have to migrate that too but different story). And we got us a few U6-Pro APs, we set up the server and everything so that the Unifi Network server is reachable via the internet on a public DNS name through a Firewall-DNAT.

Now if i try do do the set-inform on my AP it says sometimes nothing and Sometimes it says the infrom request is sent. On my Network manager i never see anything. And when i say info on the AP after sending the set-inform in the bottom it says Timeout and the URL to my Network Server.

Still when i do an nslookup or a PING i can resolve it and also Ping my Server.

One last special thing. My Network Server and my AP are in two diffrent Buildings with each its own Internet Connection. And also a Firewall at each Site. The two Firewalls do also make a IPsec Connection between them. But that just as information, cause normally i would still want to connect to the Controller over the public DNS name and then Firewall DNAT insted of the IPsec connection.

If anybody maybe can help me here or sees where i misunderstand anything, do Wrong or whatever, iam happy and thankful for every possible Help!

Greetings Fabian

So, I’ve decided on a Sysrack as my plan B. I’m going to get a 42U. I plan on shelving my existing gear and transition over time to Unifi. I’m deciding between their two options; 32” deep or 39” deep.

if I went with the 32” would I have any trouble getting any Unifi equipment in there?

id get the 39” if necessary, but if I can get away with the 32” including room for cable management I will.

Thanks!

I expected it would be plug and play - help pls

I was planning to use an old network switch as well. I see that there is no specific instructions that come with the Express 7.

Is there any more information that will help me with the setup? Are there any other recommendations that you may have?

I have a home lab and want to replace all my Network/Server equipment with Rack Mounted equipment. My research tells me Ubiquiti is the way to go. That said, unfortunately I can’t get a Ubiquiti rack because they are pre-assembled an I can’t navigate through my hallway and make the required 90 turn through a doorway. 😭

So, I am having to buy another brand rack that is white and assemble it in the room. My question is, I want to get Ubiquiti rack accessories like shelves, rails, etc. Will Ubiquiti accessories work in an other brands’ racks?

Thank you! Tony

I did a factory reset of U7 in wall, turned off ethernet ports on my cloud gateway, restarted the cloud gateway, reconnected everything properly and it seemed to work... for a while. I think they just love to be each others parent. Would like to know how to properly fix this

Not sure what tag to use for this post -- so I picked getting started ¯\_(ツ)_/¯

Upstairs (network point of entry):

• Total of at least 72 RJ45 copper ethernet ports
• At least 6 wireless access points
• Enough PoE ports for the WAP
• Wireless controller is built in or separate hardware?
• SFP fiber port for connection to downstairs

Presently I use two 48 port layer 3 Cisco switches, stacked, one of which is PoE, connected to Ruckus WAPs

Downstairs (datacenter and LAN)

• Four 48 port RJ45 copper ethernet switches, stacked
• SFP fiber port for connection to upstairs

Presently I use layer 3 devices from Dell which are stacked.

I'm learning that Unify offers stacking only in the Enterprise Campus tier. This may be overkill for us, we only have a handful of VLANs and no QoS/VOIP or anything that requires or leverages layer 3. So I could see a hub&spoke model with a small SFP fiber switch that connects the uplink and then down to the four 48 port switches. That'd be five devices with five unique management IPs, but I understand Ubiquity may offer centralized management to facilitate this.

Any thoughts or advice warmly appreciated.

I've create a new network assigned it to a wifi and added rules to prevent porn both as specific firewall rules and by CyberSecure with Content Filter - Basic (Adult & Malicious Filter) to the correct sources and it does absolutely nothing.

Connected to Test network as in screenshot but can see those websites.

I've blocked DNS over HTTPS

I've blocked DNS via TLS

I've added a explicit filewall rule to stop some porn domains and it will still allow them. Network 10.4.57. I've bought this to replace a cheap MERCSYS mesh and cannot get it to doe the basic stuff the MERCSYS stuff done.

No doubt its a testing but I don't know what?!

• UniFi OS Server (self-hosted) 5.1.19
• Host OS: Debian 13 (running on OpenMediaVault, bare metal)
• Podman 5.4.2 (rootless), pasta networking
• Host clock synchronized correctly via chrony

Symptom

When trying to link my UI account (Settings → Control Plane → Remote Access), the login failed with an error stating that an incorrect date/time was preventing remote connectivity. However, the system clock was perfectly accurate (verified on both host and container, offset well under 1 ms).

The unifi-core log showed:

system.log: warn: NTP is not synchronized
http.log:   warn: https 4312ms 403 POST /api/sso/login

Troubleshooting steps (things that were NOT the cause)

I spent a long time chasing the wrong lead before finding the real issue. For anyone searching, here is what I ruled out:

• Time value itself: Both host and container reported the correct time. timedatectl showed System clock synchronized: yes.
• TCP 8883 / port blocking: Outbound 8883 to unifi.ui.com appeared to time out, but 8883 to test.mosquitto.org worked fine, and 443 to Ubiquiti worked. This turned out to be a red herring — a tcpdump during the login attempt showed no outbound traffic to 8883 at all. The request was being rejected internally, before any external connection.
• DNS / NTP reachability: DNS resolution worked (except the deprecated time.ubnt.com), and outbound UDP 123 was reachable.
• Host firewall / OMV / Podman networking: Ruled out by reproducing the port behavior from a separate machine on the same network.

Root cause

The tcpdump result (no outbound traffic on login) pointed to an internal pre-check. Investigation showed:

• timedatectl reported NTP service: n/a
• systemd-timesyncd did not exist / would not start inside the container
• The D-Bus interface org.freedesktop.timesync1 was not available

When I installed and tried to start systemd-timesyncd, it refused to start with:

Condition: start condition failed
  └─ ConditionVirtualization=!container was not met

So systemd-timesyncd is designed not to run inside a container. As a result, timedatectl reports NTP service: n/a, and unifi-core appears to interpret this as "NTP not synchronized" and blocks the SSO login (HTTP 403) — even though the actual clock is correct.

In other words: the SSO/remote-access flow requires an active NTP service inside the container, but the container ships with an NTP service that is structurally prevented from starting. This looks like a design bug in the self-hosted build.

Workaround / fix

Inside the container, override the ConditionVirtualization check so systemd-timesyncd can start:

bash

mkdir -p /etc/systemd/system/systemd-timesyncd.service.d
cat > /etc/systemd/system/systemd-timesyncd.service.d/override.conf <<'EOF'
[Unit]
ConditionVirtualization=
EOF

systemctl daemon-reload
systemctl restart systemd-timesyncd
timedatectl set-ntp true

After this, timedatectl changes from NTP service: n/a to NTP service: active. Retrying the UI account login then succeeded, and Remote Access started working immediately.

Note: This override may be lost if the container is recreated (e.g. on update). If Remote Access breaks again after an update, re-applying the override restores it.

Request to Ubiquiti

Could the self-hosted image either ship with a working in-container time-sync service, or change the remote-access pre-check so it accepts a correct system clock (rather than requiring an NTP service that cannot start in a container)? Happy to provide additional logs.

We have recently has the NBN Fibre to the Premises installed at home (500/200), and I want to upgrade our network to the Ubiquiti hardware.

We currently have a NetCommWireless ADSL2+ modem AC1600 with a DLink DGS-1210-10P 8 port switch.

The house is long and thin, so was planning on 3 WiFi access points through the house to provide coverage and an outdoor access point for the shed. There are several TVs and desks in the house, so the ports on the modem and the switch are all full.

I was thinking that we needed the following Ubiquiti hardware to achieve this

1 x USW-LITE-16-POE

3 x U6-PRO

1 x U7-OUTDOOR

1 x UCG-ULTRA

I am wondering if the UCG-ULTRA will allow me to get rid of the NetComm modem or do I need to go up to the UCG-Max to achieve this?

Thanks in advance.

I'm looking for a company that would help with this planning for us.

The site is not visible on Google Maps / there isn't any kind of easy layout to give, so I don't think I can do that remotely.

My IT friends all pointed to Unifi products for me to use at home, and I had to educate myself on how to set up your products because I'm so used to "plug and play". "Plug and play" didn't work in the long term with my Orbi or my Netgear products because, yes, I could plug in and have the satellites talk to the base, but I would eventually start to have dropped connections or weird resets at random times. I spent more money on these systems separately than I did for the Unifi products that have the same coverage and have not dropped off at all once set up.

I'm "lightly prosumer" because I had to learn a bit of what I needed to know about VLANs and WiFi settings and have a regular WiFi network, an IoT network, and a guest network available to my household. Took me about an hour to make sure I had set things up on my Dream Router 7 (including some firewall settings between the networks) and fortunately, the phone app and the browser console are enough to get everything set up and running. When I found that there was a low signal area in the house, I added a UniFi Express 7 that meshed into the network quickly and life has been great since.

Please continue to provide the basic interfaces and remote access with these devices without a subscription, and keep up the great work on providing hardware and software that this "lightly prosumer" has been able to enjoy and use with no hiccups after setting up.