UniFi Multiple Sites - One Controller

In this video I cover the port(s) you need to forward to have an external site adopted to your single controller. You'll need to create the second site and then adopt your devices in.
Need consulting? Check out the website for my company right below this description. Contact us through the Contact link!
h5technology.com
PayPal Donations - www.paypal.me/...
Twitter - @WillieHowe
Instagra - @howex5
My Amazon Link: amzn.to/2jTFBxK
Buy your Ubiquiti gear here:
UniFi G3 Bullet Camera: amzn.to/2ni8QdO
UniFi G3 Dome Camera: amzn.to/2n32QUg
UniFi G3 Bullet Cam IR Extender: amzn.to/2niiCN6
UniFi DVR: amzn.to/2nnCqQK
UniFi Switch 16-XG (10G): amzn.to/2m0OweP
U Fiber 10G SFP+ Modules: amzn.to/2ng4RNq
UniFi AC-HD: amzn.to/2kXwMRE
UniFi USG: amzn.to/2idKAdA
UniFi USG Pro: amzn.to/2iDuUjR
UniFi AP-AC-LR: amzn.to/2k5EtbS
UniFi AP-AC-PRO: amzn.to/2jALDDW
UniFi Mesh: amzn.to/2j8puNp
UniFi Cloud Key: amzn.to/2idI2vX
UniFi Switch 8-150: amzn.to/2igTKkE
UniFi Switch 8-60: amzn.to/2igS7Uc
UniFi Switch 8: amzn.to/2jwhNge
UniFi Switch 16-150W: amzn.to/2jpemcM
UniFi Switch 24-250W: amzn.to/2jpnwGd
UniFi Switch 48-500W: amzn.to/2iKTElz
UniFi Switch 48-750W: amzn.to/2iDfWdW
AmpliFi HD Home WiFi: amzn.to/2lbhqeW
EdgeSwitch 8 150: amzn.to/2mQVrMQ
EdgeSwitch 24 Lite: amzn.to/2niwB3D
EdgeSwitch 24 250W: amzn.to/2oAgcc6
EdgeSwitch 48 500W: amzn.to/2oj16bA
EdgeRouter X: amzn.to/2iThhf9
EdgeRouter X SFP: amzn.to/2iKZK5x
EdgeRouter Lite: amzn.to/2jpqF8W
EdgeRouter 5 PoE: amzn.to/2jAzwXc
EdgeRouter 8: amzn.to/2iTdb6C
EdgeRouter 8 Pro: amzn.to/2iDl5lS
Cradlepoing 850 for verizon: amzn.to/2pkGgc9
Alpha Litebook - Ultralite $249 laptop: alpha.store/re...
Private Internet Access - www.privateint...
Get 10% off your Netool at netool.io by using coupon code WILLIEHOWE
Malwarebytes: malwarebytes.a...
Beyondtec Cabling: amzn.to/2iARlBi
Want a small physical pfSense box? Here is a great appliance!: amzn.to/2j7tmOl
Buy your MikroTik hAP Lite here: amzn.to/2kpnekY
Sonicwall TZ105: amzn.to/2mQAccr
Support my channel and keep the lab growing!
Come back for the next video!
SUBSCRIBE! THUMBS-UP! Comment and Share!

[@NickBergmann]

Hey Willie - You've been busy with videos. Thanks for these, and keep up the good work!

[@faisalouahab7719]

I barely comment on YT videos.. But YOU, MY MAN!!! are the BEST at explaining stuff!!

[@raymondfb]

Thank you for taking the time to make this and all your other videos. I learn so much and I just wanted to say thank you!

[@zdrgdr]

For security i highly recommend to use restricted port forward only for your remote sites WAN IP's and not for all world.

[@sayubu]

Great tutorial/explanation Willie, thanks for sharing the knowledge!

[@markwang895]

This is great! Thank you very much. I ended up having to open port 8080 on my "Site2" side and pointed it back to the USG for the CK on Site 1 to adopt.

[@davidscott9895]

How do you setup your settings?

[@soremekun]

Thanks for the informative video. Could I go through the following steps to add a "remote" site? Set up Site A (adopt local switches and APs) including Cloud Key connected to switch. Travel to Site B and create a new site (Site B) via web interface. Adopt the switches at that location via the web interface into Site B. Perhaps not explained the best but would such a scenario be possible?

[@conrazon]

Thanks for the this video. Maybe next time you can do it while configuring both sites.

[@capdemelc]

Can you add to the video the set up of site 2? I don’t understand hot to set up that inform port you are talking about.

[@andyrandy0815]

ha - I was not even aware it is possible to use one controller for multiple sites, nice!

[@socratekepko4005]

great video. please can you explain to me how to connect a site to my USG controller.

[@devinwoodyard302]

Thank you for the video. You mention the various options of server, cloud key AWS or digital ocean. I looked but I didn’t see any videos that discussed the benefits or when each of those should be considered.

[@rrrussell1009]

How exactly would you change the port used for the inform and what port is needed for the guest portal?

[@pauldeclercq4078]

very useful video. i have been looking this for so long

[@Joshv918]

“At this rate we’re gonna get to that 10,000” haha almost to 50k

[@zaheeryoonoos8156]

Hi Willie, Thanks for this video. I am having trouble adopting a USG-3P on a controller that already has a USG-4P. I am trying to adapt the 3P on to a separate site on the same controller, but getting "This site already has a security gateway. Please forget the existing gateway and then adopt this one, or adopt this gateway to another site" error. What I am doing wrong here? Thanks!

[@26CT1520]

Thank you very much for this. Very informative

[@solutec1977]

Hey Willie Great videos Keep Up the good work

[@BookMac2010]

hi Willie, can i use the UDM Pro as the single controller instead of cloud key or hosted controller in the same scenario?

[@christophehentsch1]

Many thanks all your training are a great help. Do i find a film explaining me how to connect in ipsec 2 usg (only one site with fix ip adress)?

[@ithelpdesk835]

Great videos, always clear and concise! Could you give me some advice on our maxed out wifi network? We now have 48 AP's on our campus network (two buildings on the same network/subnet) and so have outgrown the UCK Gen2+. I was wondering if you could give me some direction for the correct procedure in moving the AP's from one building away from the present UCK to another one on the same network? Thanks for your assistance.

[@DJ_Megahertz]

Excellent video. I guess as this was created three years ago things have changed. How do you create a new site in the GUI? I don’t see any way currently. I am not using “new settings view”

[@dtmills7795]

Curious, how would instructions differ with a site that has their own cloud key? I would like to provide the ability for a client to manage their own APs in case of changeover. -- I have my own cloud key and will have multiple client sites connected to my controller in a multi-tenant setup. There are times and certain locations, where installing a controller onsite, would be beneficial (guest access, local management, etc), but I would like to be able to manage the entire thing from my controller.

[@danielcristurean7475]

1.5x speed, thank me later Thank you for the videos Willie!

[@rono2275]

Question Willy ... If I have the USG to be installed at the 3rd location, currently at the Home location of the Cloudkey. Can I simply plug it into the network here and adopt it to the 3rd site in the controller ? ( which is already setup and configured ) I have already done the remote setup / inform a for site 2, but figured if the hardware were siting on my desk to be used at site 3, BOOM, then once we take it to site 3 it should be ready to plug and play ?

[@MuhammadImran-eb3im]

Hi Willie, That is great video. I just want to know how AP adoption request goes into right site in multisite environment?

[@CommoSutra]

Not sure if its been brought up, I have also had to open the ports on my windows firewall that houses the controller.

[@danman32]

So when adopting a USG to a separate site managed by a single cloud key, how do you specify in the informs which site the USG should be adopted into? I just noticed this was done in 2017. Here in 2020 there's no longer a means to make configuration changes on a specific devices, instead configurations are made at the site level. What baffles me is how you associate LANs and WANs defined in a site to a specific USG, especially if you have everything under one site, which it seems Ubiquity is forcing everyone to do, since as of controller CK firmware version 2, you no longer can configure multiple sites, at least not in the GUI. To sum up: If you can create multiple sites, how do you specify the adoption of a device at site 2, to the defined site 2? If you can't create multiple sites because you have UCK with version 2, how do you associate LANs and WANs to a specific USG?

[@Ryusama7244]

I have a main microtik router that receives the internet, it is the central hub for all connections, I've adopted my unifi ac mesh and ac pro to the network and created a new ap but I cannot get the ac mesh antenna to connect to the pro wirelessly

[@lespederson4118]

Hi Willie- great videos. Thanks for the Unifi cloud key video over DDNS setup. If I do this on my desk computer, How would it work when I am on-site with my laptop? which is what I use for Unifi now. I assume this means that I use one Cloud key at my office, and connect all the USG's to my UBNT account, therefore my cloud key. Thanks Les

[@Twoface227]

Sorry to necro, and probably a stupid question, but when you are saying send the site 2 USG the inform command, I'm assuming you mean SSH into the USG and then do it from there?

[@bradbuys]

Willie Will you be doing a product review of the UniFi AC In-Wall. I am going to be replacing my old Cisco AP in three elementary schools and I was either going to replace them with AC-Pro or AC In-Wall. The schools currently have Cisco 700 wall mount access points over the wall outlet. The AC In-Wall would look nicer but not sure is it is a good choice for a classroom of 40+ devices. Do you have a recommendation?

[@RickeyRoach]

Hey Willie, an easy one here. I have a cloud key at my home and UniFi setup. I installed a 3P, switch, and an AP at my sister’s. All is working, but when I set the FQDN in the cloud key, my local Pro 4 goes into an adoption loop. Ports are open for inform and for STUN. Thoughts?

[@TheSwampDaddy]

I’m finally setting up multiple sites with one CK and I want to do the right thing with FQDNs. So, I just need the FQDN in one direction from the outside world coming in.... so just one FQDN on my WAN?

[@portfrankscharters]

I don't quite understand the FQDN... is that covered in another video? My CK url does not look anything like that...

[@SaschaWeidinger]

When I want to access the webinterface of the cloudkey, do I have to port forward both, 8443 and 8080?

[@DynMFree7269]

Hi Willie, I have been using UniFi and love it but the problem I'm having is after a power outage; some of my clients' cloud keys go offline. Sometimes a reboot (Un plugging and plugging back in) fixes it, but sometimes it takes a factory default and restore from backup to fix. Any ideas why this is happening?

[@tadejsadar7033]

Cloud keys are known to be problematic.

[@maliquedouglas7072]

Can you please make a video using Multi site managing a captive portal

[@goldbrick2751]

You man you are awesome

[@primaryinc]

Thanks for posting Willie, I do have a question for you. Have you ever tried to setup site to site VPN using a 4G network? And is there any NAT rules that needs to be setup on remote side if 4G have been used? 4G -> Router -> USG -> switch. Seems to connect but no traffic will go across the sites.

[@FarLogs]

Can we connect multiple sites without a physical controller?

[@WillieHowe]

As long as you have a controller it doesn't have to be physical.

[@Icespear01]

Hi Willie, We have 2 USG, I send the set-inform command, and I see it show up on the controller, but when it adpots it is disconnected.. how do I make it show up?

[@JasonBaldry]

Would you have to have had site 2 configured via a local controller first? What happens to that controller setup once you have adopted them to the cloud key . Ideally want to set them up on main controller first thing.

[@jeromes58]

Great video. This is just what I needed to do as I have Ubiquiti eqipment at my house and a single AP in my daughter's restaurant that I want to control from my cloud key in my home. One step I am not familiar with is the "FQDN" How do I set that up? I have a USG followed by Switch8-150 that the cloud key is plugged into. Thanks in advance. Jerome

[@jeromes58]

I do not own a domain.

[@jeromes58]

Thanks. Will look at afraid.org

[@jeromes58]

I am missing something with using ddns. I have setup a subdomain on afraid.org. I can ping that domain name. I have setup the port forward on my home USG (where the cloud key is). When I am onsite setting up a USG and AP, (away from my home) using my laptop running UniFi, how do I point my laptop back to my cloud key to adopt the two devices? Thank you for all your videos. They really help with setting up the Ubiquity equipment.

[@jmaviles]

Hey Willie, some questions, do this way is not encrypted conection? right?, and if I do it with 2 CK in both side, yes do it is? thank you.

[@mahmoodalganadi8917]

Hi Wille - Thanks for efforts and the info that you shared with us. I have a question regarding the sites management and my question is how to to assign another admins to control just their site and not the all sites ? what I want to do is to create an all sites admin and a limited admin for his site only ?

[@mahmoodalganadi8917]

Thanks. Can you do a video how to configure load balancing in USG ? it seems there are many issues as I read in forums so it will be good if you can show how it works with USG and thanks in advanced :)

[@nerd_fathersons5468]

You need to do STUN protocol on 3478 UDP to.

[@tadejsadar7033]

Yep, important info.

[@zencor]

If you have multiple sites on one controller, is it possible to give access to on single site user for only there own unifi "page" ?

[@XtremeTechYT]

I got a question: I got a Controller with static IP on Site 1 and an internet connection on Site 2 with a non static IPv4 Address. Adopting without ddns is no problem cuz controller is on static IP. Now I established a VPN Site to Side connection between the 2 USG's. Will there be any problem when Site 2 suddenly changes IP or will the VPN still be held up properly? Thx already for an answer. Cheers

[@RedEyeschannel]

Ok so i need a unifi switch in both physicaly sites?, if i don't have any can i still use this feature?

[@eaph20001]

Hey Willie, thank you for all you explanations. Is this still possible with the latest firmwares (feb. 2021) in cloud key gen 2? How do you do the set inform?

[@skorpion1298]

Set inform using SSH. Should be possible even today :)

[@MrTerryRay1]

Willie, just for clarity, can we accomplish this without a cloud key, just using the Unify software? Or must we configure Amazon Cloud services etc?

[@toysareforboys1]

You can install the unifi software on anything (Windows, Linux, Raspberry Pi, VM, etc. etc.). Just forward ports 8080, 8443, 3478 (and if you want to the http to https forwarding to work forward port 80 as well) to the machine running the controller software. If running it on Windows make sure to triple check Windows Firewall settings. Look under "software: www.ubnt.com/download/unifi/

[@MrTerryRay1]

toysareforboys Thanks.

[@indianfarmer007]

Thank you for this video. Is there a limitation to the number of sites and devices that can be supported on a cloud key? If I may put it another way, what was the maximum that you tried pushing the cloud key to?

[@toysareforboys1]

I have 60 sites with about 500 devices total running on one cloud key without issue.

[@ppi57]

can I do all this remotely, or do I have to be on site at either/both location(s)

[@jmaviles]

To encrypted, Do one solution can be to do a Site To Site VPN and then we do all this? or not?

[@TheSwampDaddy]

Willie, I have most of my domains at 1and1. I can make a sub domain easily but how to use that with my comcast wan ip?

[@kirksteinklauber260]

Why don't do a better a S2S VPN (IPSec or OpenVPN with SSL) between the 2 sites and above opening the whole internet on site 1 just to allow site 2 devices to be adopted and controlled?. It will be more secure that way and avoid open inbound ports on the internet to everybody.

[@stephenreybantugan506]

Hello Willie. I have a question can I setup multisite setup using cloud key without using the USG and Unifi Switch. And use only the standard router (from ISP) and a standard switch for informing UAP to the cloud key?

[@stephenreybantugan506]

Do I port forward all site router or only the Site with cloud key?

[@azschalter]

Hey Willie and thank you for your videos. Any idea how to configure WAN PPPoE with VLAN on the remote sites USG without adopting it temporarily to a Controller?

[@BenjaminKX500]

If its a one time thing, try running a remote client like Team viewer do your changes then exit, no need for 2nd controller if there is something already in place.

[@shaktipatil]

Hello Willie, can we use site to site VPN on USG or ERX between site 1 and site 2 to pass the traffic to inform and manage the 2nd site on site 1 controller.

[@roydenheimdal]

Willie Howe Sending that traffic over VPN would be way more secure than forwarding the ports through the router.

[@sooocheesy]

just as a matter of security it's best to use the site to site vpn, or at the very least limit traffic that can access the internet facing port forwarding rule to only allow the specific IPs for your remote sites.

[@shaktipatil]

my idea was to have a single centralized controller at my home and have only USG or ERX and access point at customer side, this way i can lower the cost of installation for customer.

[@roydenheimdal]

There may be another way, but to create the VPN using a USG first would require direct access to the controller. That could be accomplished via the port forwarding scenario in the video. Once the tunnel is up and tested, the inform address on the remote USG could be changed to use the internal DNS name. Then remove the port forwarding, and continue to adopt the rest of the devices on the remote site.

[@RobertHorvat]

anyone know hot to enable multicast in EdgeRouter x?

[@samueladuamah-yeboah8179]

Hi willy i want to have a VPN for my two other usgs 500 km apart with different isp i want to be able to connect these three sites with vpn is it posible?

[@AJ-xu7wc]

Would setting up FQDN be the same as setting up a subdomain?

[@AJ-xu7wc]

Thanks. I plan on upgrading our IT with Unifi later this year and your videos are a huge help! I am the "self taught" IT guy for my work.

[@jungleboyfromoz]

Hi Willie, I've setup my ddns I've setup my port forwarding for 8080 and 8443 on my edge router lite I can Ping the ddns from with my Lan with success but cannot ping it from outside my Lan so I know my firewall is the issue. What do I look for ?

[@yt310yt]

Willie, I have the same issue here. Can't ping my ISP WAN IP or the DDNS that I've pointed to the WAN IP.

[@jhopiv]

Can you update this video? I think things have changed

[@kmortensen]

2 sites - 2 different controllers?

[@jayaer88]

Good day. I saw your video about unifi. Im willing to pay for your service... I have a government project and i have a 30 diferrent sites to provide internet and manage the service for thier free wifi project, In evry sites i have a 3-4 uap ac m pro which overall is 96 uap ac m pro for that 30 sites... The end user wants to have a 90 days logs for and they want only the disconnected and connected notification and the logs will be available through cloud for 90 days or more... They want also a one controller for that 30 sites... Thanks you and im looking forward for your response...

[@chrismallia29]

I have APs on remote site that I already adopted locally on my controller, so all I have to do is go and do the set inform?