ElderUsr's Blog

After your controller has been built, you should configure it for Cloud Access. This will allow remote administration from your Android/iPhone for viewing/management of your devices/controller. 1. Create a Unifi Cloud Account at https://account.ubnt.com 2. Sign into your Controller and go to the Settings -> Cloud Access 3. Enable the Cloud Access, and populate it with your credentials created from the Unifi Cloud Account. 4. You should now be able to download the application on your mobile device for remote management.

This document assumes that you have already created an AWS Cloud Controller for Unifi + opened associated ports that are required for communication between the server and the endpoint. 1. Plug it all in, using the LAN port plug your PC in, and WAN port for your ISP. 2 Go to https://192.168.1.1 on your PC. 3. In the Inform URL section, type in your AWS Cloud Instance's URL and :8080/inform at the end of it such as: https:// :8080/inform 4. If that does not work, SSH into the device using ubnt/ubnt as the default credentials and perform the following commands: set inform https:// :8080/inform set inform http:// :8080/inform 5. Recheck your AWS Controller, it should now have an option for adoption such as below. 6. Log back into the USG via SSH, and issue the adopt/inform command again, it'll show another message about adoption within the Controller. You may need to do this twice. 7. It eventually will show Provisioning and then after a reboot with the new conf...

Building Site-to-Site B2B from Unifi USG to Fortigate (500D or other models) Fortigate Configuration 1. Build a New VPN Tunnel using Custom VPN Tunnel (No Template) 2. Under Network, point to the Public Side IP of the USG (Public IP, not WAN interface) 3. Leave everything else default (NAT-T Enabled, DPD Disabled..ect) 4. Authentication, use PSK and IKEv1 with Main 5. Phase 1 Purposal, set algorithms to AES128 and SHA1, with DH 14. 6. Phase 2 Purposal, set Local Address and Remote address to 0.0.0.0/0.0.0.0 and 0.0.0.0/0.0.0.0 respectively. 7. Set Encryption to AES128/Sha1, Replay Detection and PFS enabled, along with DH14. Enable Autokey Keep Alive, and Auto-Negotiate, and save changes. 8. Build a Static Route pointing to the Far-End Destination/Segment you want to reach. 9. Build a Policy Stating which Segments can hit the Far-End Destination/B2B USG Configuration 1. This is assuming that USG is already registered to the Unifi Controller. 2. Go t...