Welcome to Purple Support

Ubiquiti UniFi Controller (Legacy)

  • Updated
This guide is only for older UniFi controllers and shouldn't be used for new setups. If you are running v7.0 or above, please choose the newer Ubiquiti UniFi Network Controller hardware type instead.

 

You need to disable the new UI until you've set everything up. To do so, click the Setting icon and go to System > Advanced, then set the Interface to Legacy.

 

Log in to your UniFi controller and click the Setting icon (bottom left).


On the left menu, under Wireless Networks click Create New Wireless Network and configure with:

  • Name/SSID: Guest WiFi (or whatever you wish)
  • Enabled: Enabled
  • Security: Open
  • Guest Policy: Enabled

Click Save to apply. Next, click on Guest Control configure with:

Under the Guest Policies header:

  • Enable Guest Portal: Enabled
  • Authentication: Hotspot
  • Default Expiration: 8 hours
  • Landing Page: Promotion URL - *insert redirect_url here*
  • Use Secure Portal: Disabled
  • Redirect using hostname: Disabled
  • Enable HTTPS Redirection: Disabled
  • Enable encrypted redirecet URL: Disabled

 

Under the Portal Customization header:

  • Template Engine: AngularJS
  • Override Default Templates: Enabled

 

Under the Hotspot header:

  • RADIUS: Enabled

 

Under the RADIUS header:

Profile: click Create New RADIUS Profile and configure with:

  • Profile Name: guestwifi
  • RADIUS Auth Server: *insert radius_server_ip here*  Port: 1812  Password: *insert radius_secret here*
    click Add Auth Server and configure with:
  • RADIUS Auth Server: *insert radius_server2_ip here*  Port: 1812  Password: *insert radius_secret here*
  • Accounting: Add the same servers as above, but with port 1813.

   Click Save to continue.

  • Authentication type: CHAP

Under the Access Control > Pre-Authorization header enter the following IP:

  • *insert walled_garden_ip here*

If you wish to support social network logins, you also need to add further IP's as per below for each network you plan to support

Facebook 31.13.24.0/21
31.13.64.0/18
45.64.40.0/22
66.220.144.0/20
69.63.176.0/20
69.171.224.0/19
74.119.76.0/22
103.4.96.0/22
129.134.0.0/16
157.240.0.0/16
173.252.64.0/18
179.60.192.0/22
185.60.216.0/22
204.15.20.0/22

Twitter 199.16.156.0/22
199.59.148.0/22
199.96.56.0/21
192.133.76.0/22
104.244.42.0/24
104.244.43.0/24
104.244.46.0/24

LinkedIn 91.225.248.0/23
103.20.94.0/23
108.174.0.0/22
108.174.4.0/24
108.174.8.0/22
108.174.12.0/23
144.2.0.0/22
144.2.192.0/24
216.52.16.0/23
216.52.18.0/24
216.52.20.0/23
216.52.22.0/24
65.156.227.0/24
8.39.53.0/24
185.63.144.0/24
185.63.147.0/24
199.101.161.0/24
64.152.25.0/24
8.22.161.0/24

 

NOTE: These IP ranges are subject to change depending on the social network setup.

 

Click Apply Changes to save.

 

Finally, you will need to modify two html on the controller so that it correctly redirects and authenticates. First of all, download the below two files:

Open the index.html file and at the top of this document you will see an item named "splashurl": Edit this so that it shows:

 

var splashurl = "*insert access_url here*";

 

Now, you need to copy these two html files to your UnifFi controller hotspot directory. This is typically located at the below location:

  • Windows: C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
  • MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
  • Linux: /usr/lib/unifi/data/sites/default/app-unifi-hotspot-portal
  • UDM Pro: /data/unifi/data/sites/default/app-unifi-hotspot-portal
  • CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal

(replace default in the folder structure with your site name if different)

 

If the sites folder is not present, you can created it by simply uploading a floorplan (even a dummy one if required) in the UniFi controller which will create the folder you need. 

 

 

Share online:
Was this article helpful?
0 out of 0 found this helpful