UniFi Radius Setup

[@lanprosystems6816]

I'd love to see a video on configuring RADIUS assigned VLAN for wired network on the UniFi switches alongside a Windows based Radius and NPS server.

[@aarkaybirdsview7718]

Thank you Willie - I was trying to configure my Unifi AP with pfSense freeRadius server and struggled to get it to work. Your video explained the setup required for the client on Radius server. Even though you were configuring in Windows server. I got the concept.

[@MrThomaspilk]

Could you do a video like this using FreeRadius on a Raspberry Pi and also using the FreeRadius as the authentication for a Remote User VPN on the USG?

[@jabarimoshe4934]

a tip: you can watch movies at Flixzone. Me and my gf have been using it for watching lots of of movies during the lockdown.

[@graysonhamza5235]

@Jabari Moshe yup, I have been using flixzone for years myself :D

[@Gilson.reinaldo]

Hi Willie Thanks beautiful step by step the of configuration unifi radius. Congratulations!

[@williambreen2431]

Willie Great Video!, Following your video on Radius authentication VPN with USG and Windows, I have that working at multiple customers, I did not find this one till tonight, can I run this on same policy/radius server as the VPN? or should I pick a different server???

[@mikehemmes6370]

Hi Willie! Is configuring the UniFi Switch client entry in Windows NPS, and then enabling 802.1x in the UniFi switch config, a requirement for the APs to perform WPA2 Enterprise authentication? Can I stop at the WiFi AP portion of the tutorial to achieve WPA2 Enterprise authentication against our Windows server?

[@ajita91]

Awesome tutorial! I setup my UniFi perfectly with this! Thanks :)

[@dhowser2008]

This doesn't work for me. I followed your steps on my 2012 R2 server and when I log in to my Wifi connection I get 3 options. Identity, anonymous identity, and password. Every combination I have tried doesn't work.

[@hpsfresh]

Hi. Thank you for your tutorial. Have a question: what if I want to use radius for both wpa enterprise and vpn, but users are not the same for both services (user1 have access to WiFi and not vpn, user2 have vpn access and not WiFi, user3 have both WiFi and vpn access and user4 is not allowed neither vpn, no WiFi). Can’t find how can I make it with same radius server. Is it possible?

[@pinokiopinokio79]

Willie use SYNOLOGY radius server, Work vary well. u should try, simple configurations. i use with unifi APs

[@cesarbonilla5442]

Hi Willie, any videos on RADIUS MAC AUTHENTICATION? for Chromecast, Roku, Xbox and other devices

[@TENTHIRTYONE]

Hi Willie - Perfect timing on this video as I'm in the processing of drawing up specs to hopefully purchase and deploy several Ubiquiti products in our SMB environment. You seem knowledgeable about Ubitiqui products so I hope you may be able to answer some initial questions. We currently use 2 cheap wifi routers and have 1 on our network and 1 wired directly into firewalls DMZ port. The former is for staff and the latter is for Guests (i.e., no access to corporate LAN). In moving to Ubiquiti AP's and the Unifi controller software, I'd like to deploy RADIUS (for Staff to authenticate using their AD credentials), but I'd also like to retain a totally separate Guest network. Now, I believe I'll have to give up the idea of a physically separate network wired directly into the firewall and will have to rely on some software to create this "Guest" network/access. With that said, can you confirm that the same Ubiquiti AP's deployed around the office can host multiple networks, 1 with RADIUS and 1 with traditional authentication WPA2 or whatever Ubiquiti may have built-in for Guest access? Regards, Jason

[@aaronpropes9134]

Any chance of you following up on this video for UniFi switches and EdgeSwitches?

[@pageb018]

When I implemented RADIUS with my Ruckus system, I needed both a Network Policy and a Connection Request Policy... Does Unifi only need the Network Policy? This would be for Server 2012 integrating with Active Directory.

[@andrecampbell3724]

Hey Willie, have set this up at a holiday apartments building, however the issue i'm facing is this; Chrome cast doesn't support WAP2 Enterprise, therefor if I provide an apartment with radius controlled Vlan, they cannot use their chrome cast. I have tried setting up seperate VLAN's and created individual SSID's, but I require more than 4. I know you can disable Uplink connectivity monitor, but I actually require Wireless uplink to repeat single to different apartments on each level. Any assistance would be appreciated, this is driving me insane!

[@waiswamuhamood2466]

Hey Willie, i followed the steps to configure my unifi controller along with windows server 2016. however i am getting an 'Athentication problem' error on my Android devices. How do i go about this. Thanks

[@sblees93]

For my environment I'd like to find a video on a self-enrolling captive portal using a radius server. I currently use pfsense as my router (behind an EdgeRouter pro) and unifi APs.

[@sblees93]

Lol, that was a hint.

[@stanislavkaderka4608]

Hello, is it possible to autheticate by USG radius server in case that primary (Windows) radius is not available? Thanks

[@ewl9864]

Hi Willie Great Video. Can I use this Radius server / AD integration in a ER4 for VPN authentication?

[@alexmorettibrasil]

Tks for video... An question !!!!! In my job, i use 8 AP Unifi, 2 profiles "Guest" for internet "free" no my domain, and "work" for internet and my lan to work. I can enable to Radius in Work but Guest in the password guestfree ? Other question, who integrated to microsoft certificate ? "create a video to using unifi + radius + AD Certificate" :) Tks.

[@reynier2601]

in another brand using tacas, ACS or Radius you can assigned vlan or fixed ip for user or specific bandwidth. Its posible in this enviroments???

[@Red1Wollip]

Willie another Great Video for a Unifi Newbie like me.

[@michaelhametner9780]

I lost you towards the end. So how do you actually connect to your WIFI with the radius server set up? You put the credentials into the Nettolohn app on the iPad?

[@bonedaddy0755]

Any linux tutorial coming soon? Ubuntu/centOS

[@joseecheverria2545]

Hi, can you configure for vpn and using daloradius/freeradius.

[@Julillo24]

Greetings from Colombia, Willie

[@robmorin]

I dont understand why a special switch is need? IN the tutorial he uses lab-3? I do not have a Ubiquiti switch, do i have to have one to enable wpa-E?

[@emanuelpersson3168]

Wish you included the ipad in the process.

[@emanuelpersson3168]

Willie Howe no I just meant that I would like to know how to allow a ipad/iphone access to the enterprise network also with cert! I want to try to set it up in my home network! 😀 thank you BTW for all the great videos you make!

[@emanuelpersson3168]

Willie Howe ok thank you! I will try this tomorrow! Really nice and simple! I have a VMWARE ESXi 6.5 server with a 2016 test install just for this! Hopefully I can replace it with pfsense when I get that to work on my ESXi (problem with net speed)

[@peterfricht5528]

Even though i am with the NSA sitting in a basement rather then FBI in a van i can give this video thumbs up

[@dheerajw5395]

Is preshared key on the 2008 server and UNIFI remains same?

[@RobbieBott]

What about the RADIUS Server built into UniFi?

[@anothercalifornian]

@@WillieHowe Follow up?

[@elhamtaleb354]

hi, how can I do this without the USG? I configured radius and my UAP but the credential doesn't work

[@adlerweb]

The method shown here doesn't use USG and should work without it.

[@anindayupradetha]

How would I authenticate users so that they will have connection only on their work laptops? Is there a way that the RADIUS can check MAC addresses as well? If so, how would I configure this?

[@ZachSkagen]

Anindayu Pradetha certificate based. how? I don't know how to implement that.. lol. but definitely certificate based

[@JustinTheServerGuy]

Easiest way to do this is in AD, add the laptop to a new security group that you created and only allow that group to authenticate.

[@ngchongpoh]

I am trying to use Synology Radius server with Unifi APs. Anyone has a link I can go to do the proper setup? Thanks.

[@demonmaestro]

if you are using a Windows base environment couldn't you use ldap?

[@TomDubYeah]

From the reading I have done UniFi does not support LDAP so RADIUS needs to be used.

[@chrisskelly6408]

Hey there, i cannot find anything on how i can use my usg and unifi system to create a world wide accessible vpn, can someone please help?

[@salamdamai]

What is teh purpose of radius when I cannot get into the internet?

[@stephenkluthe6867]

It seems that assigning a VLAN to a wireless network prevents the DHCP server from giving out an IP. Any ideas? Running the latest 5.5.15 controller.

[@JustinTheServerGuy]

Stephen Kluthe is the dhcp server in the same subnet as the wireless vlan? If not then you probably have to add some ip helpers to forward the dhcp requests to the dhcp server in a separate subnet.

[@stephenkluthe6867]

I had forgotten to assign the network to the AP. Resolved now.

[@JassonQuill]

is the pc 24hrs running?

[@philipcook7608]

Any reason for using beta instead of the stable version of the controller?

[@philipcook7608]

It seems like they're still getting all the kinks worked out of the radius implementation. So I was curious if it was a feature thing.

[@zbc_152]

Unfortunately, this didn't work for me. Also my wifi symbol on the signal icon in the taskbar tray has a X with a circle around it. So it's being broadcast but I cannot connect to it.

[@marsmatt]

Same thing here! Working on it now, followed the steps exactly. Access points seem to accept the change but I can't connect. I get the same white X with a circle around it.

[@leomaredcampos4941]

My question is. is these setup need a vlan switch? I'm so confused.

[@thegorn]

It looks like a couple of your lab switches require an upgrade

[@mrbrooks56]

This is only Wi-Fi and not authenticating LAN

[@brofarix]

Great!!!

[@thegorn]

Not using a shared secret template lol