Ubiquiti UniFi RADIUS Configuration -Discontinued

The RADIUS integration for Ubiuiqit Unifi is no longer supported. Please see this article on configuring Ubiquiti Unifi API integration.

The following instructions outline how to setup a Ubiquiti UniFi network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your Unifi controller is already operational and on a live network with adopted Access Points. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

User Interface

If you are running UniFi 6.0 or higher you need to disable the new UI to complete this configuration guide. To do so, click Settings then System on the left menu and enable Legacy Interface option.

      1. Log into the Controller and open the desired site.
      2. Select User Group from the tabs on the left then click Create New User Group.
      3. Give the usergroup a name and enable Download and Upload Bandwith Limiting and save the group. Please make sure you select MBPS, Unifi has the default set to KBPS.
      4. Select Wireless Networks from the tabs and click the + Icon to create a new network.(Or edit your existing network) and configure with the details below.

        Please do not use special characters like apostrophes in your SSID as it may cause issues with Authentication.

        • Enter your desired SSID.
        • Select open for security
        • Check the Guest Policy checkbox.
      5. Select Profiles from the tabs on the left and then Create New Radius Profile.  Configure with the details below.
        • Radius Auth Server: This will be provided to you
        • Radius Auth Server: This will be provided to you
        • Port: 1812
        • Password: This will be provided to you
        • Enable accounting: checked
        • Enable interim update: unchecked
        • Radius Accounting Server: This will be provided to you
        • Radius Accounting Server: This will be provided to you
        • Port: 1813
        • Password: This will be provided to you
      6. Select Guest Control from the tabs on the left and configure with the details below.
        • Guest Portal: Checked
        • Authentication: Hotspot
        • Landing Page: Promotional URL- This will be provided to you
        • Redirection:
          1. Use Secure Portal: Unchecked
          2. Redirect Using Hostname: Unchecked
          3. Enabled HTTPS Redirection: Unchecked
          4. Enable encrypted redirect URL: Unchecked
        • Override Default Templates: Checked
        • Hotspot:
          • RADIUS: Checked
          • Uncheck all other available options
        • RADIUS:
          • Profile: Select the profile created in step 5
          • Authentication Type: CHAP
        • Pre-Authorization Access: Please use the entries contained inside the default walled garden and include any extra entries included by your provider.

Last Step: Place the two provided html files into your UnifFi controller hotspot directory. If using a cloudkey please use a SFTP program like WinSCP.
You can find your site directory name by looking at the URL when viewing the site on the controller.

Typical file location examples are below.(depending on the UniFi controller):
Please note you will typically use your site auto generated folder name instead of default.CloudKey: /srv/unifi/data/sites/default/app-unifi-hotspot-portal
Windows: C:\Users\<username>\Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal
MAC: ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
Linux: /usr/lib/unifi/sites/default/app-unifi-hotspot-portal

You will need super root elevation to gain access to the folder for Linux.

Disclaimer on hardware configuration guides in the KB:This equipment has been integrated and tested in our labs with the SmartWiFiPlatform platform using the firmware versions below.

Ubiquiti UniFi CloudKey Version 7.2.92-18687-1 Firmware 1.1.19
Ubiquiti UniFi UAP-AC-Lite

LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.

We’ve identified an issue with Unifi products where the Server Secret can not be more than 15 characters. If your guests receive the splash page but are unable to authenticate through please make sure your Radius Server Secret is not more than 15 characters.

Updated on June 12, 2023
Was this article helpful?

Related Articles