Unifi seadme kasutamine

Sissejuhatus

Unifi on tagasihoidliku nimetamisega

• unifi (firma nimi) - unified - ühendatud üheks tervikuks
• ubiquiti (toote liini nimi) - ubiquitous - igal pool korraga olev

Mõisted

• Unifi OS Server - podman põhine lahendus, kus töötavad erinevad Application rakendused
• Network Application - Unifi lahenduse komponent
• Inner Space - Unifi lahenduse komponent

Tööpõhimõte

Unifi toodab mitmeid valdkondi katvaid lahendusi (st riistvara, tarkvara jne)

Start Here -> Site Map -> Expand

kus

• wifi access point
• valvekaamera ja salvestusseade
• tulemüür
• ethernet switch
• sissepääsusüsteem (füüsilisele hoonele)
• igasugused targa maja liidestused jms

Unifi järgib nö moodsat halduse paradima

• esmalt tekitatakse kasutaja isanda juurde, https://ui.com/ osakonda
• esmalt paigaldatakse nutitelefoni app
• avatakse pakend ja ühendatakse seade toitesse
• esmasel käivitusel on seada väga usaldav ja nutitelefoni app saab temaga kontakti üle blootooth-wifi-direct-vms kanali
• seadmele tehakse esmane seadistus, muu hulgas seatakse piirang haldusliidesele
• seade leiab endale kohtvõrku kasutades võrguseadistuse ja võtab ühendust oma https://unifi.ui.com/ isandaga
• logides sisse https://unifi.ui.com/ osakonda telefonist saab seadme registreerida: nutitelefonil on usalduslik kanal ühelt poolt seadmega ja teiselt poolt isandaga
• seadet saab hallata https://unifi.ui.com/ pealt
• disclaimer - tundub, et see wifi-bluetooth jne on pigem teooria - praktiliselt on ikka parim kui seade kohta alustuseks dhcp serverit ja asub kontrolleriga samas ip subnetis

Tavaliselt on vajalik kohalik nö Unifi kontroller, mis töötab seadmete ja unifi isanda vahel vahendajana

                       unifi isand - https://unifi.ui.com/
                               
                           _______
                          |       |
                          |       |
                          |_______|
                              |
                              |
 
                          internet
 
                   |
                ___|___
               |       | 3rd party tulemüür - nt OpenBSD
               |       |
               |_______| 192.168.10.254 (vlan10), 192.168.17.254 (vlan17)
                   |
                   |                 192.168.10.0/24, 192.168.17.0/24
              -----|-----------|---------------------|-------
                               |                     |
                               |                     |
                            ___|___               ___|___
              kontroller   |       |             |       |  unifi füüsiline seade
           192.168.10.56   |       |             |       |  192.168.10.55
                           |_______|             |_______|
                                                     |
                                                     |
                                                 ----|------- raadio, wifi 2.4, 5, 6 GHz ------ 192.168.17.0/24
     
   

kus

• unifi füüsilisest seadmest väljuvad ainult vlan siltidega paketid, vlan 10 ja vlan 17
• vlan 10 on haldusliiklus
• vlan 17 on wifi teenusliiklus
• saab moodustada järgmisi wifi teenusliikluse subnette ja levialasid juurde
• wifi subnettide võrgulüüsiks on OpenBSD tulemüür

Kontrolleri ettevalmistamine

Väited

• kontrolleri ettevalmistamine ja kasutamine üldiselt toimub ühteviis sõltumata konkreetsest füüsiliste seadmete komplektist
• kontrolleri tarkvara sisaldab erinevate seadmete tuge (wifi, switch jne), lihtsalt osa menüü valikuid on mitte-aktiivsed kui vastav seade puudub

Kontrolleri kasutamine toimub 'UniFi OS Server' kujul, juhend paistab selline

kus

• 20206 aasta kevadel tuleb tegeleda 'UniFi OS Server', st mitte 'UniFi Network Server' vms lahendusega

riistvara nõuded paistavad olema 2026 kevadel v. 5.1.15 puhul

You are about to install UniFi OS Server version 5.1.15.
Proceed? (y/N): y
 INFO Installing UniFi OS Server 5.1.15...
 WARN +------------------------------------------------------------+
 WARN | WARNING: Insufficient swap space detected                  |
 WARN |                                                            |
 WARN | It is recommended for system stability to have a minimal   |
 WARN | amount of swap configured.                                 |
 WARN |                                                            |
 WARN | Swap recommendations:                                      |
 WARN |   - Minimum: 2 GiB                                         |
 WARN |   - Consider increasing further if running other RAM-      |
 WARN |     intensive applications                                 |
 WARN |   - Optionally lower swappiness to 10-20                   |
 WARN |                                                            |
 WARN +------------------------------------------------------------+
 INFO Checking compatible podman runtime available...
 INFO Checking disk space for required directories...
 WARN - /home/: Requires 15.00 GB, available 9.22 GB
 INFO - /var/lib/uosserver: Requires 1.00 GB, available 7.67 GB
 INFO - /usr/local/bin/: Requires 0.12 GB, available 7.67 GB
 INFO - /tmp/: Requires 2.00 GB, available 2.89 GB
 INFO - /var/tmp/: Requires 2.00 GB, available 7.67 GB
ERROR Failed to install UniFi OS Server err=Insufficient disk space for install. Free up space.

Unifi OS server ettevalmistamiseks on vajalik operatsioonisüsteem podman viisil konteineri pidamiseks, nt Debian v. 13

• 2026 aasta kevadel pigem toetab Unifi OS Server slirp4netns põhist võrku; aga asub toetama ka passt põhist
• tundub, et 2026 aasta alguses on mõne operatsioonisüsteemi koosseisus podman v. 5, ja enamusel podman v. 4, eelistada uuemat

podman ja slirp4netns paigaldamiseks sobib öelda, igaks juhuks muudatuste kehtestamiseks reboot

# apt-get install podman slirp4netns -d
# reboot

Seejärel

root@unifi-oss:~/20260218# ./1856-linux-x64-5.0.6-33f4990f-6c68-4e72-9d9c-477496c22450.6-x64
You are about to install UOS Server version 5.0.6. Proceed? (y/N): y
 INFO Installing UOS Server 5.0.6...
 INFO Checking compatible podman runtime available...
 INFO Checking disk space for required directories...
 INFO - /home/: Requires 15.00 GB, available 27.04 GB
 INFO - /var/lib/uosserver/: Requires 1.00 GB, available 27.04 GB
 INFO - /usr/local/bin/: Requires 0.12 GB, available 27.04 GB
 WARN - /tmp/: Requires 2.00 GB, available 0.96 GB
 INFO - /var/tmp/: Requires 2.00 GB, available 27.04 GB
 INFO All disk space requirements met.
 INFO Checking ports...
 INFO Adding uosserver user and group...
 INFO Creating /var/lib/uosserver dir...
 INFO Creating /var/lib/uosserver/logs dir...
 INFO Creating /var/lib/uosserver/bin dir...

...

 INFO Waiting for container 'uosserver' to start (timeout: 60s)
 INFO Container 'uosserver' is running. (elapsed: 0.0s)
 INFO Waiting for systemd to be ready (timeout: 60s)
 INFO Systemd is ready. (elapsed: 7.3s)
 INFO Starting uosserver systemd service...
 INFO Waiting for UOS Server to start...
 WARN Timeout: Unifi-core did not start within 60 seconds.
 WARN
!!! INSTALLATION COMPLETE !!!
To grant permission for a user to run 'uosserver' commands:
-> Add the user to the 'uosserver' group:
   usermod -aG uosserver <username>
-> Then log out and log back in for the changes to take effect.
To get started with available commands, run:
   uosserver help

WARNING: UOS Server startup timed out after 60 seconds. On low-powered devices, the web interface can take a few minutes to be accessible. Try opening it at: 10.0.9.56:11443

Tulemusena on paista

root@unifi-oss:~# su - uosserver
$ podman ps
CONTAINER ID  IMAGE                               COMMAND               CREATED      STATUS                  PORTS                                                                                                                                                                                                                                                                                                                   NAMES
0e99a614a4dd  docker.io/library/uosserver:0.0.54  /root/uos-entrypo...  12 days ago  Up 3 minutes (healthy)  0.0.0.0:5005->5005/tcp, 0.0.0.0:5671->5671/tcp, 0.0.0.0:6789->6789/tcp, 0.0.0.0:8080->8080/tcp, 0.0.0.0:8443-8444->8443-8444/tcp, 0.0.0.0:8880-8882->8880-8882/tcp, 0.0.0.0:9543->9543/tcp, 0.0.0.0:11084->11084/tcp, 0.0.0.0:11443->443/tcp, 0.0.0.0:3478->3478/udp, 0.0.0.0:5514->5514/udp, 0.0.0.0:10003->10003/udp  uosserver

$ podman images
REPOSITORY                   TAG         IMAGE ID      CREATED       SIZE
docker.io/library/uosserver  0.0.54      0faf0b7f0e4e  3 months ago  2.03 GB

$ podman network ls
NETWORK ID    NAME        DRIVER
2f259bab93aa  podman      bridge

$ podman volume ls
DRIVER      VOLUME NAME
local       uosserver_persistent
local       uosserver_var_log
local       uosserver_data
local       uosserver_srv
local       uosserver_var_lib_unifi
local       uosserver_var_lib_mongodb
local       uosserver_etc_rabbitmq_ssl

Wifi

Väited

• unifi wifi access point toimib vaid nö L2 kihi seadmena
• unifi wifi ap ei tee nat teisendust
• võimaldab seadistada mitu wifi leviala, igale vastab oma vlan
• unifi wifi ap kasutamiseks peab olema tema ja interneti vahel mingi tulemüür, nt üldotstarbeline OpenBSD või unifi enda tootevalikust 'gateway' seade
• dhcp server asub tulemüüris (mitte unifi wifi ap peal)
• unifi wifi ap oskab tagged vlan liiklust sh halduse liiklus
• unifi wifi ap ainuke ip aadress on tema haldusliidese aadress
• unifi wifi ap halduseks ei ole ta ise (st temas sisalduv veebiliides vms, aga unifi-os-server peal töötav network rakendus
• unifi wifi ap seadme riistvara on arm põhine
• unifi wifi ap seadme operatsioonisüsteem on OpenWrt variatsioon

Ühe adopteeritud wifi ap seadmega kontrolleri webgui ja isanda veebikoha kaudu, paistab nii

kus

• vasakul all on nö hammasratas valitud - Settings - st see on unifi lahenduse üldiste seadistuste osakond (mitte konkreetse unifi ap seadme)
• vlan10 kaudu toimub unifi ap seadme haldus
• vlan17 on wifi teenusliiklus
• default vlan1 ei ole praktiliselt kasutuses
• brauseris on aadress https://unifi.ui.com/

Seadme fookuses paistab webgui lokaalselt selline

kus

• brauseris on aadress https://192.168.10.56:11443/ (11443 on variatsioon 443 -> 8443 -> 11443)
• paremal all on füüsilise unifi ap seadme ssh ligipääsu info

% ssh z3gCdQ1dXdj@192.168.10.55
The authenticity of host '192.168.10.55 (192.168.10.55)' can't be established.
ED25519 key fingerprint is: SHA256:oWSfz1QZHgSZL0a3czyXfIdX9GglLSibB+29Qk63Pwo
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.10.55' (ED25519) to the list of known hosts.
z3gCdQ1dXdj@192.168.10.55's password:

********************************* NOTICE **********************************
* By logging in to, accessing, or using any Ubiquiti product, you are     *
* signifying that you have read our Terms of Service (ToS) and End User   *
* License Agreement (EULA), understand their terms, and agree to be       *
* fully bound to them. The use of SSH (Secure Shell) can potentially      *
* harm Ubiquiti devices and result in lost access to them and their data. *
* By proceeding, you acknowledge that the use of SSH to modify device(s)  *
* outside of their normal operational scope, or in any manner             *
* inconsistent with the ToS or EULA, will permanently and irrevocably     *
* void any applicable warranty.                                           *
***************************************************************************

  ___ ___      .__________.__
 |   |   |____ |__\_  ____/__|   PRODUCT: U7-Pro
 |   |   /    \|  ||  __) |  |   MAC:     1c:6a:1b:96:ee:e5
 |   |  |   |  \  ||  \   |  |   VERSION: 8.5.21+18681.260330.1557
 |______|___|  /__||__/   |__|
            |_/

Ubiquiti Inc. (c) 2010-2026      https://www.ui.com

z3gCdQ1dXdj@U7Pro:~# uptime
 23:10:28 up  4:27,  load average: 1.06, 1.03, 1.00
z3gCdQ1dXdj@U7Pro:~# df -h -T
Filesystem           Type            Size      Used Available Use% Mounted on
tmpfs                tmpfs         438.4M     75.3M    363.1M  17% /
tmpfs                tmpfs         438.4M      1.3M    437.1M   0% /tmp
/dev/mmcblk0p7       ext4            1.9G      3.2M      1.8G   0% /tmp/log
/dev/mmcblk0p3       squashfs       27.0M     27.0M         0 100% /lib/firmware/wififw
tmpfs                tmpfs         512.0K         0    512.0K   0% /dev

z3gCdQ1dXdj@U7Pro:~# uname -a
Linux U7Pro 5.4.213 #0 SMP PREEMPT Mon Jul 22 20:17:07 2024 armv7l GNU/Linux

z3gCdQ1dXdj@U7Pro:~# cat /etc/os-release
NAME="OpenWrt"
VERSION="23.05-SNAPSHOT"
ID="openwrt"
ID_LIKE="lede openwrt"
PRETTY_NAME="OpenWrt 23.05-SNAPSHOT"
VERSION_ID="23.05-snapshot"
HOME_URL="https://openwrt.org/"
BUG_URL="https://bugs.openwrt.org/"
SUPPORT_URL="https://forum.openwrt.org/"
BUILD_ID="r0-acca0cea06"
OPENWRT_BOARD="ipq53xx/ipq53xx_32"
OPENWRT_ARCH="arm_cortex-a7_neon-vfpv4"
OPENWRT_TAINTS="no-all busybox"
OPENWRT_DEVICE_MANUFACTURER="OpenWrt"
OPENWRT_DEVICE_MANUFACTURER_URL="https://openwrt.org/"
OPENWRT_DEVICE_PRODUCT="Generic"
OPENWRT_DEVICE_REVISION="v0"
OPENWRT_RELEASE="OpenWrt 23.05-SNAPSHOT r0-acca0cea06"

Switch

USWProMax24-01-US2.7.2.123# cli

USWProMax24-01# enable

Unknown command

USWProMax24-01# show  running-config

SYSTEM CONFIG FILE ::= BEGIN

! System Description: Unifi Switch UBNT-USPM24 Switch

! System Version: v3.5.0.3

! System Name: USWProMax24-01

! System Up Time: 0 days, 15 hours, 39 mins, 57 secs

...


USWProMax24-01# exit

USWProMax24-01> exit

Terminated

USWProMax24-01-US2.7.2.123#

Kaughaldus

Isanda veebikohas

TODO

Nutitelefoni app

TODO

Tarkvara uuendamine

TODO

Kasulikud lisamaterjalid

• https://www.packetswitch.co.uk/how-to-run-unifi-controller-in-docker/