Ubiquiti Unifi 5.6 on Ubuntu or Debian

Ubiquiti Unifi server runs even on a Raspberry Pi Zero. However, Raspberry Pi Zero or Raspberry Pi 1 requires additional configuration, since the CPU is only ARMv6. ARMv7 CPUs on the Raspberry Pi 2 & 3 work out of the box.

This example assumes the Unifi server is at 192.168.1.2, and that the WiFi APs are on 192.168.10.*.

Prereqs

Backup existing Unifi configuration:

  1. Navigate to https://unifi.local:8443 (assuming you set Avahi up) or https://192.168.1.2:8443.
  2. Settings → Maintenance → Backup and save to your laptop.
  3. install Java 8
    apt install oracle-java8-jdk
    
  4. Be sure Java defaults to version 8
    java -version
    

    If not, fix with

    update-alternatives --config java
    

Unifi install

  1. add to /etc/apt/sources.list.d/ubnt.list
    deb http://www.ubnt.com/downloads/unifi/debian stable ubiquiti
    
  2. execute
    apt-key adv --keyserver keyserver.ubuntu.com --recv 06E85760C0A52C50
    apt update
    apt install unifi
    
  3. after about 10 seconds browse https://192.168.1.2:8443. If you have a very slow CPU (slower than Raspberry Pi 2) you may need to wait a little longer.
  4. Assuming the Unifi server is using UFW firewall:
    ufw enable
       
    ufw allow proto tcp from 192.168.1.0/24 to any port 8443
    ufw allow proto tcp from 192.168.10.0/24 to any port 8080
    ufw allow proto udp from 192.168.10.0/24 to any port 3478
    
    Port usage
    8080 Ubiquiti WiFi APs → Unifi server
    8443 HTTPS admin control panel
    3478 STUN AP control
  5. Unifi updates often include AP firmware updates. Upon AP update, Wifi may go down for a few minutes while the APs say “provisioning”.

Unifi Features

Neighboring Access Points

“Neighboring access points” shows you any other AP (including hidden SSID listed by BSSID). It’s fascinating to see how much better (more sensitive, longer range) the AP is than typical mobile devices. You may see distant SSIDs that you’ve never seen from a mobile or laptop in the same office.

Changelog

Currently, stable maps to Unifi 5.6.

  • 5.6.22 Fix for KRACK vulnerability via firmware update. Check in the Unifi management screen that your APs have updated to the appropriate firmware version listed.
  • 5.6.18 5.6 brings RADIUS server to Unifi, and many more options to the GUI instead of config files. Lots of bugfixes in general over 5.5.
  • 5.5.24 enabled 802.11r finally. Full changelog included.
  • 5.4.16
  • 5.4.11
  • 5.4.9
  • Unifi 5.3 added features:

    • allow individual permanent on/off of AP LED
    • complete mobile-friendly UI refresh
    • added DFS (enabled with 2016 or newer hardware)
    • better RF scanning
    • ability to log for up to one year

Notes

  • Unifi apt repo config
  • Unifi port usage table
  • https://loganmarchione.com/2016/11/ubiquiti-unifi-controller-setup-raspberry-pi-3/
  • Java 8 is recommended for Unifi ≥ 5.3, and at least Java 7 is required.
  • Oracle Java is said to be lighter-weight than OpenJDK

Fix errors

STUN Communication Failed This device is not able to connect to the internal STUN server. Please check if the device is able to reach the STUN server on port 3478

Be sure the firewall allows UDP on port 3478 to the Unifi server

Leave a Comment