Ubiquiti UniFi RADIUS Configuration

The following instructions outline how to setup a Ubiquiti UniFi network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your Unifi controller is already operational and on a live network with adopted Access Points. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

1. 1. 1. Log into the Controller and open the desired site.
      2. Select User Group from the tabs on the left then click Create New User Group.
      3. Give the usergroup a name and enable Download and Upload Bandwith Limiting and save the group. Please make sure you select MBPS, Unifi has the default set to KBPS.
         
      4. Select Wireless Networks from the tabs and click the + Icon to create a new network.(Or edit your existing network) and configure with the details below.

         Please do not use special characters like apostrophes in your SSID as it may cause issues with Authentication.

         • Enter your desired SSID.
         • Select open for security
         • Check the Guest Policy checkbox.
      5. Select Profiles from the tabs on the left and then Create New Radius Profile.  Configure with the details below.
         • Radius Auth Server: This will be provided to you
         • Radius Auth Server: This will be provided to you
         • Port: 1812
         • Password: This will be provided to you
         • Enable accounting: checked
         • Enable interim update: unchecked
         • Radius Accounting Server: This will be provided to you
         • Radius Accounting Server: This will be provided to you
         • Port: 1813
         • Password: This will be provided to you
      6. Select Guest Control from the tabs on the left and configure with the details below.
         • Guest Portal: Checked
         • Authentication: Hotspot
         • Landing Page: Promotional URL- This will be provided to you
         • Redirection:
           1. Use Secure Portal: Unchecked
           2. Redirect Using Hostname: Unchecked
           3. Enabled HTTPS Redirection: Unchecked
           4. Enable encrypted redirect URL: Unchecked
         • Override Default Templates: Checked
         • Hotspot:
           • RADIUS: Checked
           • Uncheck all other available options
         • RADIUS:
           • Profile: Select the profile created in step 5
           • Authentication Type: CHAP
         • Pre-Authorization Access: Please use the entries contained inside the default walled garden and include any extra entries included by your provider.

Last Step: Place the two provided html files into your UnifFi controller hotspot directory. If using a cloudkey please use a SFTP program like WinSCP.
You can find your site directory name by looking at the URL when viewing the site on the controller.

Typical file location examples are below.(depending on the UniFi controller):
Please note you will typically use your site auto generated folder name instead of default.CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal
Windows: C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
Linux: /usr/lib/unifi/sites/default/app-unifi-hotspot-portal