Very good video. Leaving it on default network for purposes of setup tripped me up. Once it's all setup, its handy to go into Client Devices and add the column "802.1X Identity" to easily see the user accounts currently connected to the network.
Hey @Dwight_Rortugal thanks for your comment and insight in to your situation. That's terrible you have to do that and that the pupil betrays your trust, but there are people like that sometimes, unfortunately of course!
Hi, thanks for your comment. I haven't actually tried this or if it can be done, I don't think it can as far as I know but you might like to try searching on the Ubiquiti forum/community to see if there's anything on their about it.
hi, maybe you can answer if we can use a self hosted network server + USW Pro 48 PoE as radius server ??, we have no unifi gateway, we have a edge router instead, tanks !!
I don't think you can as you will need to have a 'Unifi' gateway/router as you need that as the 'Controller' which will manage Radius for the unifi switches. As the Edge Routers are not effectively UniFi as far as the ecosystem is concerned.
I don't think you can self-register. You have to create RADIUS user profiles before they can connect as far as I know. You could just setup a guest user account and hand that out to users as and when, however that's not really improving security, which is what RADIUS is really doing by creating individual user accounts
Hi I already try this one and it works perfectly fine on all mobile users but its not working on all the windows laptop. Do you have idea what's the issue?
Hi, Do you mean laptops that are connected via Ethernet cables I presume. If so then you need to make sure you apply Radius Server settings for both Wireless & Wired devices and also set the laptop's network settings to authorise via Radius. Hopefully that helps.
@@MrTimTech2022 Hi, All our laptops are connected via wireless connection on Unifi SSID with radius authentication, They are not working. Unifi support said that this are wellknown issues on unifi that users are unable to connect on windows 11 laptops.
@@MrTimTech2022 when you connect using windows 11 laptop via wireless connection, there is no certificate pop up like on android and IOS devices so that's why connection is not working
@@arnoldbabao9056 Thanks for the updates on this and for the info from Unifi Support, that's very odd, sounds like it has something to do with MS Windows then, let's hope someone fixes the issue, either Ubiquiti or MS.
@@arnoldbabao9056 is this now working for you guys?? I have a wifi authentication project for work which must be done by end of the year, thinking of using this method.
Great video, thanks alot for sharing! one question tho - is it possible to have one radius user that for several VLANS? - i have a seperate wifi and VLAN for my work-devices but i would like to have the same logon-credentials to my "work wifi" as my "home wifi".
Hey kimpedersen, thanks very much for your appreciation, I enjoy sharing my knowledge through videos. I think as far as I know you would have to have different RADIUS accounts as if you had just one account it wouldn't know which VLAN to put you in (work/home). Maybe Ubiquiti might add an option to select a VLAN when logging in to RADIUS, in the future
Hi, thanks a lot for the video, I wanted to ask you about a type of configuration I'm trying to do, I'm trying to do the same thing you explain in the video but using an external DHCP server, I manage to get my user to authenticate but I can't get it to acquire an IP address from the DHCP, if I use the same wireless network but instead of RADIUS I use a WPA2 password, I do get an IP address from the external DHCP server, do you have any idea what could be happening? Sorry my English is not good, greetings.
I cannot think of anything straight away, maybe you could try disabling the 'Rogue DHCP Server' option in UniFi Controller ? Go in to 'Settings' and then select 'Networks' and untick 'Rogue DHCP Server option' and see if you are then able to get IP address from external DHCP server ?
Maybe check the help section of Ubiquiti. However I may well do an updated video around RADIUS as I'm about to do a new updated video series for UniFi.
Hey Adrian, thanks very much. Yes I believe ticking the 'Wired Networks' which is in the RADIUS Server settings. Just be careful with this though in case you mess things up and are not able to access your UniFi Controller. I have yet to test this on 'Wired Networks' so may well do a video in the future. But I'm sure it should let you allocate it to certain networks/VLANS or Ports.
hI Tim, thanks for the awesome video, really straight forward. I have aproject at work to do wifi authentication and maybe this might be helpful, as I am running out of time... We use Unifi also, question, to add radius users in an enterprise environment whereby there are 200 users... is there a way to add users via bulk method or this has to be done one by one?? or as an alternative also for wifi authentication solution, we want to have a radius server in the cloud, because we dont have server on prem... do you know of an alternative wifi authentication solution? Basically we want users to authenticate via their Google account. and for the guest wifi, it will just be a captive portal. thanks in advance
I guess you could try HostiFi for the cloud solution as you can run Unifi Network controller from that, so that might be a solution for Cloud RADIUS auth. I can't say off the top of my head I know of a solution to add users in bulk. Have you had a look/check on the Ubiquiti Unifi support portal/community portal to see if it mentions about adding users from a bulk list ?
I found , that you could set-up a Hotspot and also EAP-TLS (With simple custom webpage and some kind of simple code) There is a possiblity to login with SSH over console . For your needs I woul rather use FreeRADIUS with AAA build-in server based on UBNT . It's simple to connect and setup auth_server (In Cisco or TP-Link - really easy, but dont know how with Unify) - But it couldn't be much worse
Very good video. Leaving it on default network for purposes of setup tripped me up. Once it's all setup, its handy to go into Client Devices and add the column "802.1X Identity" to easily see the user accounts currently connected to the network.
You're welcome, glad you found the video useful in your case.
Fantastic video. Thank you.
You're very welcome!
Thanks for the video. I appreciate the work you do.
You're very welcome @sandsquid (great YT name by the way). Keep a look out for my new Grandstream network video series starting today with unboxings!
Great video thank you so much!
You're welcome Ali, glad you found it helpful.
Thank you. I hate having to lock things down but I've got one kid in particular that keeps betraying my trust and is failing school as a result. 😢
Hey @Dwight_Rortugal thanks for your comment and insight in to your situation. That's terrible you have to do that and that the pupil betrays your trust, but there are people like that sometimes, unfortunately of course!
How do I set this up to authenticate to Microsoft accounts using Entra ID. No on prem??
Hi, thanks for your comment. I haven't actually tried this or if it can be done, I don't think it can as far as I know but you might like to try searching on the Ubiquiti forum/community to see if there's anything on their about it.
hi, maybe you can answer if we can use a self hosted network server + USW Pro 48 PoE as radius server ??, we have no unifi gateway, we have a edge router instead, tanks !!
I don't think you can as you will need to have a 'Unifi' gateway/router as you need that as the 'Controller' which will manage Radius for the unifi switches. As the Edge Routers are not effectively UniFi as far as the ecosystem is concerned.
Will the user have to type in the user name and password on the device each day they get to the location?
That I'm not 100% sure but I would certainly think that to be the case as the user would be logging off and then have to login again.
How to configure radius for Guest Self-Registration?
I don't think you can self-register. You have to create RADIUS user profiles before they can connect as far as I know. You could just setup a guest user account and hand that out to users as and when, however that's not really improving security, which is what RADIUS is really doing by creating individual user accounts
Hi I already try this one and it works perfectly fine on all mobile users but its not working on all the windows laptop. Do you have idea what's the issue?
Hi, Do you mean laptops that are connected via Ethernet cables I presume. If so then you need to make sure you apply Radius Server settings for both Wireless & Wired devices and also set the laptop's network settings to authorise via Radius.
Hopefully that helps.
@@MrTimTech2022 Hi, All our laptops are connected via wireless connection on Unifi SSID with radius authentication, They are not working. Unifi support said that this are wellknown issues on unifi that users are unable to connect on windows 11 laptops.
@@MrTimTech2022 when you connect using windows 11 laptop via wireless connection, there is no certificate pop up like on android and IOS devices so that's why connection is not working
@@arnoldbabao9056 Thanks for the updates on this and for the info from Unifi Support, that's very odd, sounds like it has something to do with MS Windows then, let's hope someone fixes the issue, either Ubiquiti or MS.
@@arnoldbabao9056 is this now working for you guys?? I have a wifi authentication project for work which must be done by end of the year, thinking of using this method.
Great video
Thank you very much
Great video, thanks alot for sharing! one question tho - is it possible to have one radius user that for several VLANS? - i have a seperate wifi and VLAN for my work-devices but i would like to have the same logon-credentials to my "work wifi" as my "home wifi".
Hey kimpedersen, thanks very much for your appreciation, I enjoy sharing my knowledge through videos.
I think as far as I know you would have to have different RADIUS accounts as if you had just one account it wouldn't know which VLAN to put you in (work/home). Maybe Ubiquiti might add an option to select a VLAN when logging in to RADIUS, in the future
Hi, thanks a lot for the video, I wanted to ask you about a type of configuration I'm trying to do, I'm trying to do the same thing you explain in the video but using an external DHCP server, I manage to get my user to authenticate but I can't get it to acquire an IP address from the DHCP, if I use the same wireless network but instead of RADIUS I use a WPA2 password, I do get an IP address from the external DHCP server, do you have any idea what could be happening? Sorry my English is not good, greetings.
I cannot think of anything straight away, maybe you could try disabling the 'Rogue DHCP Server' option in UniFi Controller ? Go in to 'Settings' and then select 'Networks' and untick 'Rogue DHCP Server option' and see if you are then able to get IP address from external DHCP server ?
Perfect!
Thanks!
Thanks James, glad it's been helpful to you😁
Nice. How do this work when using the RADIUS MAC authentication option?
Maybe check the help section of Ubiquiti. However I may well do an updated video around RADIUS as I'm about to do a new updated video series for UniFi.
Great video! Is there anyway to have the same type of authentication when connecthing via ethernet cable?
Hey Adrian, thanks very much. Yes I believe ticking the 'Wired Networks' which is in the RADIUS Server settings. Just be careful with this though in case you mess things up and are not able to access your UniFi Controller. I have yet to test this on 'Wired Networks' so may well do a video in the future. But I'm sure it should let you allocate it to certain networks/VLANS or Ports.
hI Tim, thanks for the awesome video, really straight forward. I have aproject at work to do wifi authentication and maybe this might be helpful, as I am running out of time... We use Unifi also, question, to add radius users in an enterprise environment whereby there are 200 users... is there a way to add users via bulk method or this has to be done one by one??
or as an alternative
also for wifi authentication solution, we want to have a radius server in the cloud, because we dont have server on prem... do you know of an alternative wifi authentication solution? Basically we want users to authenticate via their Google account. and for the guest wifi, it will just be a captive portal. thanks in advance
I guess you could try HostiFi for the cloud solution as you can run Unifi Network controller from that, so that might be a solution for Cloud RADIUS auth. I can't say off the top of my head I know of a solution to add users in bulk.
Have you had a look/check on the Ubiquiti Unifi support portal/community portal to see if it mentions about adding users from a bulk list ?
I found , that you could set-up a Hotspot and also EAP-TLS (With simple custom webpage and some kind of simple code)
There is a possiblity to login with SSH over console .
For your needs I woul rather use FreeRADIUS with AAA build-in server based on UBNT . It's simple to connect and setup auth_server (In Cisco or TP-Link - really easy, but dont know how with Unify) - But it couldn't be much worse
great
Thank you 🙂