Managing multiple UniFi sites

Discussion in 'Networking' started by IamSpartacus, May 31, 2018.

  1. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    Does anyone have experience managing multiple sites running UniFi AP's/switches where each network is it's own entity (ie. there is no VPN/LAN connectivity) between sites?

    I'm looking for a good way to manage AP's for 6-7 small/home office locations from a single controller. Is running a single instance of the UniFi controller in a VPS an option? If so, how can on adopt all the the devices from different networks to this cloud instance?
     
    #1
  2. Rain

    Rain Active Member

    Joined:
    May 13, 2013
    Messages:
    195
    Likes Received:
    64
    Using a "Remote" UniFi Controller is actually a supported option. Here is the support article on it: UniFi - Device Adoption Methods for Remote UniFi Controllers

    While I have never had to deploy UAPs across multiple sites with a single controller, I think I would use the DNS method for simplicity. The APs attempt to resolve "unifi" (or "unifi.domain.com" where "domain.com" is the domain passed out by DHCP); if this gets resolved to your VPS running the UniFi controller, the UAPs will appear in the controller and can be adopted. This would make adding UAPs in the future at a given site pretty easy, too; just plug them in!

    If controlling DNS isn't an option at a particular location, I'd fall back on simply using SSH and the set-inform command.
     
    #2
    Last edited: May 31, 2018
    audio catalyst likes this.
  3. Caleb

    Caleb Member

    Joined:
    Nov 16, 2015
    Messages:
    35
    Likes Received:
    8
    I have used the ssh-inform command with good results. I host my parents and siblings unifi products on my homelab unifi controller. I would definitely consider using a VPS in the cloud if this is for production.
     
    #3
  4. audio catalyst

    Joined:
    Jan 4, 2014
    Messages:
    80
    Likes Received:
    11
    yes, we provide that service to about 35 sites globally from our hosted controller in our own DC

    We were using it only for WiFim but for a few smaller sites now manage the complete stack ( FW,Switch and AP) like that

    we always try to setup L3 dns adoption ( basically create a cname called unifi , pointing to your controller hostname
    the DHCP option interferes with SCCM/WIS and hate hexing :)

    Other option would be set-inform, but the downside of that is that you need direct ssh access to the ap, which may be problematic on a remote site
     
    #4
  5. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    I've been thinking about trying a UniFi FW in one or more locations. How are you liking it and does it have DNS services built in for said L3 adoption?
     
    #5
  6. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    Has anyone used Digital Ocean for a VPS? Do they offer elastic (static) public IP's like AWS?
     
    #6
  7. K D

    K D Well-Known Member

    Joined:
    Dec 24, 2016
    Messages:
    1,241
    Likes Received:
    254
    #7
  8. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272

    Yea I manage mine and my parents unifi networks (connected via site-to-site VPN) using my own locally hosted controller in a docker container. Works great.

    However, this project is for a small/medium sized business so it needs to be hosted for HA. The adoption part I have worked out as there are many ways to do it (DNS, DHCP, locally setting the inform URL, etc.) but to ensure there are no issues with the new installation I wanted to be sure my VPS IP doesn't change. I've confirmed that it doesn't once set in Digital Ocean.
     
    #8
  9. audio catalyst

    Joined:
    Jan 4, 2014
    Messages:
    80
    Likes Received:
    11
    it does have the possiblity to add cnames, however the Controller allows you to simply add the controller ip per subnet.
    Am about to take reception of the 10G router, so once i have fiddled around with it a bit i'll let you know.

    just as an afterthought...
    Essentially these are EdgeOS/Vyos routers, abeit they have a unifi shell over them.
    it is quite easy to add the required configuration ( bgp,OSPF or what have you) to the device, then add those non gui configurations back to the controller by adding the config.json to the controller.

    As i amusing vyos quite extensively on various projects, i would expect to be happy with the device, but will post when i have the chance to actually test it
     
    #9
  10. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    Can you elaborate on what you mean by this? How does this apply to AP's in different geographical locations all talking up to a cloud controller?
     
    #10
  11. audio catalyst

    Joined:
    Jan 4, 2014
    Messages:
    80
    Likes Received:
    11
    in the controller, network, you can set the ipadress of your controller, which points to any ip address.
    i assume underwater they create either their own dns record, or any other l3 adoption method.

    still when i have a local server on site,i set the dns method on that anyway :)
     
    #11
  12. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    So you're saying you set the WAN IP of hostname of your controller, and when an AP connected to a local USG that is managed by that controller they will automatically tell AP's where the controller is?
     
    #12
  13. amalurk

    amalurk Member

    Joined:
    Dec 16, 2016
    Messages:
    72
    Likes Received:
    11
    Have you tried the DNS method where you make your the local router/DNS resolve unifi to your controller's IP? Did this work? Seems simple enough. I am thinking about expanding my camera's and adding one or more at my mom's and controlling them offsite with a VPS.
     
    #13
  14. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    Currently I have no control over DNS at the locations where I'm looking to setup this VPS to manage.
     
    #14
  15. maze

    maze Active Member

    Joined:
    Apr 27, 2013
    Messages:
    419
    Likes Received:
    53
    I have about 100 ap's running on a hosted unifi controller. Mainly doing it through dns, since I'v found the dhcp option is kinda crappy (never got it working..?)

    Flawless and simple to handle.

    If you cant do the dns, just do the ssh inform before deploying it at the customer, or migrate it from the current controller software - easy and simple. You just need tcp/8080 and tcp/udp/3758 or so forwarded - last one is STUN port, dont remember that port fully
     
    #15
  16. kalex1114

    kalex1114 New Member

    Joined:
    Jan 26, 2014
    Messages:
    6
    Likes Received:
    0
    we manage about 50 unifis at 30 sites for clients. You need to open up the ports on the firewall and setup controller somewhere. We host it at our colo but before it was running on aws. Like maze said we do it mostly via DNS entry at client sites but if that is not possible we do ssh inform
     
    #16
  17. dwright1542

    dwright1542 Active Member

    Joined:
    Dec 26, 2015
    Messages:
    319
    Likes Received:
    66
    I've got about 400 Unifi items across 25 clients on a single unifi panel. I've had it hosted various places, it sits on Azure right now with a public IP. When installing, we just use the Chrome app, find the IP, SSH in, and then do the set-informs. You need to do it 2x, then adopt, then set-inform again. DNS dosen't work reliably enough. It's been unbelievably solid for jeez, 5 years? We had it in the cloud long before it was en vogue.
     
    #17
  18. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    If I have a controller with multiple sites and do a set inform on devices in a new location, what site will those devices show up in for the initial adoption? The reason I ask is, I want to give someone access to do device adoption for a specific site but not access to the entire controller. But if the device shows up in a different site, they won't be able to do the adoption.
     
    #18
  19. dwright1542

    dwright1542 Active Member

    Joined:
    Dec 26, 2015
    Messages:
    319
    Likes Received:
    66
    It shows up as adoptable in every site.
     
    #19
  20. IamSpartacus

    IamSpartacus Well-Known Member

    Joined:
    Mar 14, 2016
    Messages:
    1,377
    Likes Received:
    272
    Perfect. Thanks!
     
    #20
Similar Threads: Managing multiple
Forum Title Date
Networking Extend Network to multiple Buildings Mar 23, 2018
Networking pfSense - Multiple Adapters with Multiple Subnets with Multiple Gateways Dec 7, 2016
Networking pfSense NAT multiple identical ports from single WAN connection conundrum Sep 28, 2016
Networking Multiple ESXi VM's using one internet connection? Feb 26, 2016
Networking 1 IP, multiple web servers? Mar 4, 2013

Share This Page