UniFi Guest Network with Captive Portal

Crosstalk Solutions
12 May 201759:05

TLDRIn this informative video, Chris from Prof Stock Solutions walks through the process of setting up a UniFi guest network with a captive portal for a Motel 6 in Seaside, Oregon. He discusses the equipment used, the client's needs, and the step-by-step configuration, including overcoming challenges and providing wireless access for guests. The video also covers the use of a cloud-based UniFi controller and the importance of testing and troubleshooting for optimal network performance.

Takeaways

  • ๐Ÿ“ The video is a walkthrough of setting up a UniFi guest network with a captive portal for a Motel 6 in Seaside, Oregon.
  • ๐Ÿ”ง The setup uses a simple USG and two UAP AC Pros, with a focus on plugging into existing equipment for guest wireless access.
  • ๐Ÿ–ผ๏ธ A drawing was made to visualize the proposed network setup, which was then modified as the setup progressed.
  • ๐Ÿ› ๏ธ The existing router's LAN port was connected to the USG, which was configured with a random LAN IP addressing scheme.
  • ๐ŸŒ A DHCP pool was set up for hotel guests, with a specific subnet chosen to avoid conflicts with the internal network.
  • ๐Ÿ”’ Security measures included client isolation and bandwidth limitations for guest users, with an 8-hour expiration on captive portal access.
  • ๐Ÿ’ป The setup utilized an Amazon AWS-based UniFi controller due to the remote nature of the client location.
  • ๐Ÿ“ฑ The captive portal was set up with a simple password authentication and a custom landing page directing to the Motel 6 website.
  • ๐Ÿš€ The video also covered troubleshooting steps when the UniFi controller didn't show the USG in the list initially.
  • ๐Ÿ”„ The process of setting static IP addresses for network devices was demonstrated, ensuring they do not change.
  • โฑ๏ธ Testing revealed a delay in authentication when using a cloud-hosted controller, leading to a recommendation to use a local controller for better performance.

Q & A

  • What is the main topic of the video?

    -The main topic of the video is setting up a UniFi guest network with a captive portal for a Motel 6 in Seaside Oregon.

  • What equipment is being used for this setup?

    -The equipment being used includes a USG (UniFi Security Gateway), a UniFi Switch 8 60W, and two UAP AC Pros (access points).

  • How does the installer plan to handle the client's existing router?

    -The installer plans to use the existing router as the internet connection point and branch off to the USG. The USG will then handle the guest wireless network separately from the internal network.

  • What is the purpose of the captive portal in this setup?

    -The captive portal is used to authenticate guests and provide them with access to the internet. It also limits their bandwidth and restricts their access to certain network features.

  • What is the SSID for the guest network and what type of security is it using?

    -The SSID for the guest network is 'Motel 6 guest' and it is an open network with a captive portal for authentication using a simple password.

  • How is the installer addressing the issue of devices connecting to the network when the UniFi controller is unavailable?

    -The installer is using a cloud-based UniFi controller and setting a configuration property to allow guest mode traffic to pass through if the controller or captive portal is unavailable.

  • What is the installer's approach to testing and troubleshooting the setup?

    -The installer tests the setup by connecting devices to the network, observing the authentication process, and checking for successful internet access. Troubleshooting involves identifying issues through research and applying solutions, such as adding a local UniFi Cloud Key for better performance.

  • What is the installer's recommendation for dealing with slow authentication issues?

    -The installer recommends using a local UniFi Cloud Key or another local UniFi controller to reduce latency and improve the speed of the authentication process.

  • How does the installer ensure that the client understands the setup and operation of the new network?

    -The installer provides detailed labeling of the equipment, includes comprehensive documentation, and offers visual aids such as diagrams and flowcharts to help the client understand the network setup.

  • What is the estimated number of usable IP addresses provided for the clients of the hotel?

    -The installer has set up a DHCP pool that provides 244 usable IP addresses for the clients of the hotel.

Outlines

00:00

๐Ÿ› ๏ธ Introduction and Client Setup Overview

The speaker, Chris, introduces the video by explaining that it will be different from the usual content, focusing on a specific client setup. He outlines the process he follows when setting up a system for a new client, starting with a drawing and adjusting it as needed. The project involves a simple UniFi install for a Motel 6 in Seaside, Oregon, where he will be setting up a guest wireless network using existing equipment. Chris emphasizes problem-solving and transparency throughout the process.

05:02

๐ŸŒ Client's Network Configuration and UniFi Controller Setup

Chris details the client's existing network setup, including the internet connection and internal land. He explains his choice to use two UAP AC Pros for the installation and the decision not to use a USG due to the client's requirements. The setup involves a LAN port from the existing router and a DHCP IP address. Chris also discusses the UniFi controller setup, including the choice of an Amazon AWS-based unified controller and the configuration of the site for Motel 6, with specific settings and preferences.

10:03

๐Ÿ”Œ Hardware Setup and Initial Configuration

The video transitions to the physical setup of the hardware, including the USG, a VLAN, and the US plug. Chris explains the process of wiring the USG to his network and the importance of the boot-up process. He also covers the computer setup for configuration, the use of the command prompt for IP address confirmation, and the initial issues encountered with the unified controller connection, which he resolves through SSH.

15:05

๐Ÿ”„ Network Adoption and Provisioning

Chris discusses the adoption process of the USG and the Unify Switch 860W, including the use of the set-inform command and the challenges faced during the process. He explains the adoption status, the need for a second inform command, and the provisioning status. The video also covers the setup of the Unify Switch 860W, the IP address assignment, and the persistent ping test for internet connectivity.

20:07

๐Ÿ“ถ Access Point Configuration and Captive Portal Setup

The speaker moves on to the configuration of the access points, including the process of plugging them in, factory resetting, and adoption. He discusses the importance of labeling equipment and the configuration of the wireless network. Chris sets up a user group for bandwidth limitation, applies guest policies, and customizes the captive portal with a specific password and expiration time. He also addresses the issue of what happens if the access point cannot connect to the unified controller or the captive portal.

25:09

๐ŸŽจ Customizing the Guest Portal and Testing

Chris delves into the customization of the guest portal using the new AngularJS templates. He sets up the title, welcome text, and positions them above the login boxes. He also discusses the selection of a custom logo and background image, as well as the adjustment of text and button colors for visibility and branding. The speaker then tests the captive portal on his phone, noting the delay in authentication and the successful redirection to the Motel 6 webpage.

30:10

๐Ÿ”ง Troubleshooting and Finalizing the Setup

The speaker identifies issues with the captive portal's authentication process and the latency introduced by the cloud-hosted controller. He discusses the impact on user experience and presents a solution by introducing a local UniFi controller, the Cloud Key, to address the problem. Chris explains the process of factory resetting the equipment and setting up the network again using the Cloud Key. He tests the setup and notes improvements in the authentication process.

35:12

๐Ÿ“ฆ Documentation and Shipping Preparation

In the final segment, Chris emphasizes the importance of thorough documentation and clear labeling for the client. He shows the labeling of the boxes and the network diagram he prepared. Additionally, he demonstrates the use of an infrared thermometer to measure the operating temperatures of the devices, providing an extra layer of detail for the client's understanding of the setup.

Mindmap

Keywords

๐Ÿ’กUniFi

UniFi is a brand of networking equipment and software developed by Ubiquiti Networks. In the context of the video, UniFi refers to a system of devices such as the UniFi Security Gateway (USG), UniFi Switch (USW), and UniFi Access Points (UAPs) that are being set up to create a guest wireless network with a captive portal for a motel in Seaside, Oregon. The UniFi Controller, which can be cloud-hosted or a physical device like the Cloud Key, is used to manage these devices and configure the network.

๐Ÿ’กGuest Network

A guest network is a separate wireless network provided for guests or visitors to an establishment, such as a hotel or a coffee shop. In the video, the installer is setting up a UniFi guest network for Motel 6, which will allow guests to connect to the internet without having access to the motel's internal network. This is achieved by using the UniFi devices to create a wireless network with a captive portal for authentication.

๐Ÿ’กCaptive Portal

A captive portal is a web page that users must interact with before they can access the internet. It is commonly used in public Wi-Fi networks to provide a login page, display terms of service, or collect user information. In the video, the installer creates a captive portal for the Motel 6 guest network, requiring guests to enter a password to gain internet access. The portal also includes a landing page that redirects authenticated users to the motel's website.

๐Ÿ’กUniFi Controller

The UniFi Controller is software used to manage UniFi devices and configure the network. It can be hosted locally on a device like the Cloud Key or in the cloud. In the video, the installer initially uses a cloud-hosted UniFi Controller but later switches to a local UniFi Controller, the Cloud Key, to address latency issues with the captive portal authentication process.

๐Ÿ’กCloud Key

The Cloud Key is a hardware device provided by Ubiquiti Networks that runs the UniFi Controller software. It is used to manage UniFi devices locally without the need for a cloud-hosted controller. In the video, the installer adds a Cloud Key to the network to improve the performance of the captive portal by reducing the latency associated with cloud-hosted controller authentication.

๐Ÿ’กUSG (UniFi Security Gateway)

The UniFi Security Gateway (USG) is a networking device that combines functions such as a router, firewall, and VPN server. In the video, the USG is used as the primary networking device for the motel's guest network. It is connected to the existing router and configured to provide DHCP services and a separate network segment for the guest Wi-Fi access points.

๐Ÿ’กUAP (UniFi Access Point)

The UniFi Access Point (UAP) is a wireless device that extends the Wi-Fi network. In the video, UAP AC Pros are used to provide wireless coverage for the guest network at Motel 6. The installer configures these access points to broadcast the guest SSID and directs users to the captive portal for authentication.

๐Ÿ’กSSID

An SSID (Service Set Identifier) is a unique identifier that is broadcasted by a wireless network to distinguish itself from other networks. In the video, the SSID for the Motel 6 guest network is 'Motel 6 guest'. Users connect to this SSID, and upon successful authentication through the captive portal, they are granted internet access.

๐Ÿ’กDHCP

DHCP (Dynamic Host Configuration Protocol) is a network management protocol used to automatically assign IP addresses and other network configuration parameters to devices on a network. In the video, the USG is set up to act as a DHCP server for the guest network, assigning IP addresses to connecting devices from a predefined pool.

๐Ÿ’กLAN

LAN (Local Area Network) refers to a network that connects computers and devices in a limited geographical area, such as a home, school, or office building. In the video, the installer connects the USG to the motel's existing LAN and configures it to obtain a DHCP IP address from the existing router, which allows the USG to integrate seamlessly with the existing network infrastructure.

๐Ÿ’กNAT

NAT (Network Address Translation) is a method of modifying network address information in the IP header of packets while in transit across a traffic routing device. In the video, the installer mentions that the setup will involve double NAT, which means the guest network's IP addresses will be translated twiceโ€”once by the existing router and once by the USGโ€”before they can communicate with the internet.

Highlights

Setting up a UniFi guest network with a captive portal at a Motel 6 in Seaside Oregon.

Using two UAP AC Pros for wireless access points and a USG for the internet connection.

Configuring a simple LAN IP addressing scheme to avoid conflicts with the existing network.

Utilizing an Amazon AWS-based UniFi controller for remote management.

Creating a DHCP pool for hotel guests with a specific IP range.

Setting up a captive portal with a password and an eight-hour expiration.

Limiting guest bandwidth to 5 Mbps down and 1 Mbps up for optimal network management.

Using client isolation to enhance security on the guest network.

Overcoming challenges with the cloud-based controller and switching to a local UniFi Cloud Key.

Learning from experience and improving the setup with a local controller for better performance.

The importance of testing the setup thoroughly before deployment.

Addressing the issue of latency in authentication with the cloud-hosted controller.

Implementing a workaround for the captive portal redirect issue by using a local HTTP server.

Documenting the setup process and providing clear labels for easy client understanding.

Measuring the operating temperatures of the network devices to ensure proper functioning.

The practical application of a UniFi guest network in a real-world scenario, demonstrating the process from setup to troubleshooting.