Credentials & Setup

Default credentials & access

Factory default logins (unadopted)

Device type	Username	Password	Examples
Legacy	`ubnt`	`ubnt`	U6, G3/G4/G5 cameras, USG
UniFi OS	`ui`	`ui`	UDM, U7/E7 AP, G6 cameras, UXG, UCG

Important: once adopted, SSH and device passwords are managed by your UniFi Network Application under Settings > System > Advanced > Device Authentication. They are no longer the factory defaults.

Default network addresses

Gateways (UDM, UDR, UXG, UCG, USG)

192.168.1.1 — most common default
192.168.2.1 — alternate gateway address
10.0.0.1 — rare legacy configuration

APs, cameras, switches (unadopted)

192.168.1.20

Standard fallback IP when a device hasn't received DHCP. Reach it over HTTP port 8080 (legacy) or HTTPS 443 (modern UniFi OS devices).

SSH Commands

SSH command reference

Universal device commands

info

Show device model, firmware, adoption URL and status.

ssh ubnt@192.168.1.20 info

set-inform <url>

Point a device at your controller for adoption (must be reachable on 8080).

ssh ubnt@192.168.1.20 set-inform http://192.168.1.10:8080/inform

upgrade <url>

Flash firmware from a URL (device reboots automatically).

ssh ubnt@192.168.1.20 upgrade https://dl.ui.com/firmwares/path/to/firmware.bin

reboot

Reboot the device immediately.

ssh ubnt@192.168.1.20 reboot

ping <ip>

Test connectivity from the device to a remote host.

ssh ubnt@192.168.1.20 ping 8.8.8.8

UniFi OS hosts (UDM, UDR, UXG, UCG)

ubnt-systool cputemp

Current CPU temperature in °C.

ubnt-systool cputemp

ubnt-systool portstatus

Physical port status and link speeds.

ubnt-systool portstatus

ubnt-device-info summary

System summary — uptime, memory, CPU model.

ubnt-device-info summary

unifi-os restart

Restart the UniFi OS container (not a full reboot — may drop sessions).

unifi-os restart

df -h · free -h

Disk usage across mounts, and RAM / available memory.

df -h free -h

Camera-specific

Factory reset — G6 / modern

Reset a modern UniFi camera to defaults.

ubnt_system_util reset-default

Factory reset — legacy G3 / G4 / G5

cp /usr/etc/system.cfg /tmp/system.cfg && cfgmtd -w -f /tmp/system.cfg && reboot

Network & Ports

Network ports reference

Essential ingress ports (to controller)

Port	Proto	Service	Required
`11443`	TCP	UniFi OS Web UI / API	Core
`8080`	TCP	Device inform (phone home)	Core
`3478`	UDP	STUN (NAT traversal)	Core
`10001`	UDP	Device discovery (L3)	Core
`7447`	TCP	Protect RTSP stream	Cameras
`443`	TCP	Remote access & WebSockets	Remote

Guest portal & optional ports

Port	Proto	Purpose
`8881, 8882, 8880`	TCP	Guest portal (HTTP)
`8444`	TCP	Guest portal (HTTPS, preferred)
`22`	TCP	SSH — lock to admin IP only
`5514`	UDP	Remote syslog (optional)

Security critical: never expose SSH (22) to the internet. Restrict it to your admin IP with a firewall rule, and use a VPN or SSH tunnel for remote access.

Network

Network & VLAN issues

No IP / DHCP not working

Device shows fallback 192.168.1.20

DHCP enabled? Settings > Networks > the relevant network.
Scope exhausted? Widen the DHCP range.
Wrong VLAN — device can't reach the DHCP server; check port profile and native VLAN.
Rogue DHCP server handing out addresses — track it down and disable it.
Read the logs — Settings > System > Logs for DHCP errors.

Network loop / devices flapping

Ports cycling up and down

Usual cause — two switch ports patched together by accident.
Find it — run ubnt-systool portstatus, then unplug cables one at a time until the flapping stops.
Fix — remove the offending cable, and enable Spanning Tree (STP/RSTP) plus Loop Protection so it can't happen again.

VLAN reachability

VLAN clients can't reach controller or each other

Port tagging — tagged uplinks carry the VLAN; access ports use the right native VLAN.
DHCP in the VLAN — provide a scope there, or configure a DHCP relay on the gateway.
Firewall / zone rules — Network 9's Zone-Based Firewall may be blocking inter-zone traffic by design; check the zone matrix.
Test — SSH to the device and ping the controller IP.

DNS / routing

Names won't resolve / no internet

Verify DNS servers — Settings > Networks.
Test from a device — nslookup google.com.
Allow outbound DNS (UDP and TCP 53); watch for filtering that's too aggressive.
Reliable resolvers — 1.1.1.1 (Cloudflare), 8.8.8.8 (Google), 9.9.9.9 (Quad9).

Troubleshooting

Access point issues

AP won't adopt / stuck "Adopting…"

New AP not appearing in Network

LED should flash white-blue (searching for controller).
Power-cycle and watch for an LED change after ~30s.
From the controller, ping 192.168.1.20 to confirm reachability.
UDP 10001 must be open between AP and controller.
Set inform manually: ssh ubnt@192.168.1.20 set-inform http://[CONTROLLER_IP]:8080/inform
A maxed-out controller (high CPU) won't process adoption.
Big firmware gap between AP and controller — upgrade the AP first.

Stuck "Adopting…" for 5+ minutes

TCP 8080 blocked between AP and controller (firewall or VLAN).
Network loop — two switches cabled together.
Controller hiccup — unifi-os restart.
Factory reset (hold reset ~10s until the LED goes off) and retry.
Different segment — discover via WiFiman, then SSH set-inform.

AP repeatedly goes offline

Checklist

PoE power — check the injector or switch port LED; WiFi 7 APs need PoE++ / PoE+++, not 802.3af.
Loose or damaged cable — reseat both ends, inspect the run.
Interference — use AirView; watch for DFS radar hits on 5 GHz.
Channel — move to a clean DFS or non-overlapping channel.
WiFi loop / mesh — a mesh backhaul AP needs at least -67 dBm from its uplink.
Firmware — update to current from the controller.
Controller DB bloat — Settings > System > Maintenance > archive events.

WiFi 7 (U7 / E7) gotchas

No 6 GHz / WPA3 / underperforming

No 6 GHz on U7 Lite — it's dual-band. Use U7 Pro or higher for 6 GHz.
6 GHz also depends on regional regulatory permission.
Devices won't join with pure WPA3 — switch the SSID to WPA2/WPA3 mixed.
Only about 2× the speed of WiFi 6? The uplink is likely 1GbE — move to 2.5GbE (Pro) or 10GbE (XG/XGS/E7).
If an AP locks up needing a reset after hours or days, check for a known firmware regression and update.

Slow WiFi / poor signal

Diagnose

Client RSSI — -50 excellent · -65 good · -75 fair · -80 poor (dBm).
AirView — look for neighbour APs overlapping your channels.
Airtime — high airtime plus interference means a channel problem.
Source — microwaves and baby monitors hammer 2.4 GHz.
Throughput — speed-test the client; is it limited by wireless or by the uplink?
Rogues — check Client Insights for bandwidth hogs.

Fix

Move to a less crowded channel (AutoSelect can pick poorly).
Raise transmit power from minimum to medium or high.
Enable band steering to lift dual-band clients off 2.4 GHz.
Relocate the AP away from metal, microwaves and thick walls.
Drop channel width from 160/80 to 40 MHz under heavy interference.
Let the AI Optimizer retune if you'd rather not do it by hand.

Roaming / hand-off

Devices stick to a distant AP

Enable 802.11k/v for faster roaming.
Raise minimum-RSSI (for example -80 to -75 dBm) to push earlier roams.
Band steering too aggressive? It may force 5 GHz when 2.4 GHz is closer.
Toggle Fast Roaming off to test whether it's the culprit.
iOS caches APs — forget and rejoin the network.

Troubleshooting

Gateway / controller issues

Won't boot / web UI unreachable (11443)

Gateway stuck booting or no UI

No power LED — try another outlet or PSU; verify the supply is rated for the model.
LED flashing red — critical fault; attempt recovery (hold reset ~10s while powered).
LED flashing blue forever — boot hung; wait 5–10 minutes, then reset if it persists.
Solid blue but no UI — UniFi OS is still starting; give it another ~3 minutes.
PoE-powered models — confirm the injector or switch port supplies the device's full wattage, or use the bundled PSU.

Web UI slow / "Service Unavailable"

Diagnosis & recovery order

Disk space — df -h; keep more than 10% free or the UI will choke.
CPU, RAM and temperature — free -h and ubnt-systool cputemp.
Restart the stack — unifi-os restart clears most temporary hangs.
Archive old events — Settings > System > Maintenance frees database space.
Hard-refresh the browser — Ctrl+Shift+R against https://[IP]:11443.
Full reboot if a service restart doesn't help.
Suspected DB corruption — restore the most recent backup.

High CPU temperature / throttling

Console running hot (above 80°C)

Check with ubnt-systool cputemp; find runaway processes with top.
Improve airflow — front intake, rear exhaust; don't box it in.
Trim the camera load, or switch 4K to 2K / H.265 to cut transcode heat.
Offload Protect to a dedicated NVR (UNVR / UNVR Pro) on large sites.

Storage / SMART errors

Protect storage full or disk faults

A full disk stops recording — df -h to confirm.
In order: reduce retention days, switch to H.265, use motion-only recording, remove unused footage, then fit a larger or additional drive.
SMART warnings mean the drive is failing — back up and replace promptly.

Remote / cloud access

Can't reach the console remotely

Remote Access toggle — Settings > System (Control Plane) > Console.
Re-sign-in to your Ubiquiti account if the session expired.
Outbound HTTPS to unifi.ui.com on 443 must be allowed — test with curl -I https://unifi.ui.com.
Check status.ui.com for a service incident.
ISP blocking inbound? Use the built-in Teleport/WireGuard VPN as a workaround.

PoE budget exceeded

Some devices won't power up

Symptoms — a few APs or cameras stay dark, or restart at random under load.
Check — add up device wattage against the switch's PoE budget (see the PoE table in the Switching section).
Fixes — prioritise critical ports, add a SmartPower RPS, move high-draw devices to a dedicated injector, or step up to a higher-budget switch.

Sizing tip: size your UPS against the switch's total wall draw (PoE budget plus system overhead), not the PoE budget alone — a 720W-PoE switch can pull around 820W from the wall.

Troubleshooting

Camera issues (G6 / G5 / G4 / G3)

Camera won't adopt / pending

Steps

LED — solid blue means adopted, flashing means searching, off means no power.
Confirm PoE reaches the camera (switch port LED or power output).
Test reachability: ssh ubnt@controller ping 192.168.1.20
On a separate VLAN? You'll need DHCP relay and an allow path to the console.
TCP 8080 blocked between the camera network and Protect?
Power-cycle and allow ~30s to boot.
Set inform: ssh ubnt@[CAM_IP] set-inform http://[NVR_IP]:8080/inform
Upgrade firmware via the web UI before adoption if it's old.
Factory reset (hold reset ~10s) if truly stuck.

Offline after adoption

Causes

Intermittent (hourly) — PoE, cable, or network instability.
After a firmware update — the update didn't finish; restart Protect and the device.
After storage filled — recording stopped and Protect restarted; free space.
In bad weather — moisture in the connector; check waterproofing.
After 30+ days uptime — reboot periodically.

Recover

Power-cycle (PoE off for ~10s).
Check PoE budget: ubnt-systool portstatus.
Restart Protect: unifi-os restart on the NVR.
Update camera firmware.
Replace a bent or crimped cable.
Try a different PoE port.
Still down — forget and re-adopt.

No live view (camera shows "Online")

Checks

RTSP blocked — allow TCP 7447 device-to-NVR.
NVR overload — high bitrate plus high CPU forces lower quality.
Network loop — Protect can disable video; check switch topology.
Codec change — just switched H.264 to H.265, or back? Revert and retry.
Browser cache — hard refresh (Ctrl or Cmd + Shift + R).

No recording / motion not triggering

Checklist

Storage full — df -h, keep more than 10% free.
Is recording actually enabled for this camera?
Motion sensitivity too low (the default of 50 is often too high a threshold).
Smart detection set to alert only — enable "record on detection".
Recording schedule disabled for this time or day?
Codec unsupported by the NVR firmware? Update.

IR / night vision

IR dim or not working

IR mode set to OFF — switch to AUTO or ALWAYS ON.
Out of range — typical IR reach is around 6m (Instant), 30m (Bullet, Turret, PTZ) and 40m (Pro Bullet). Reposition if the scene is beyond that.
Other IR sources (heaters, lamps) saturating the sensor.
IR bouncing off a nearby shiny surface — change the angle.
Out-of-date firmware — IR tuning improves in updates.

High bandwidth / storage use

Camera filling storage fast

4K continuous is roughly 200GB per month — consider 2K or motion-only.
Switch H.264 to H.265 to save around 40%.
Drop 30fps to 15fps if motion capture is enough.
Enable adaptive bitrate for quiet periods.
A busy scene (moving trees or shadows) inflates bitrate.
Motion-only recording saves around 60–70% over continuous.

AI / analytics not working

Face ID, LPR or smart detection missing

Advanced features need AI hardware — an AI Key (G4/G5/G6) or an AI-series camera (native). ONVIF cameras need an AI Port.
Smart detection toggled off — Protect > Settings > Smart Detections.
Face ID needs enrolled faces before it can match.
LPR needs the correct country or region set.
NVR CPU above 90% pauses AI — check free -h and load.
Out-of-date camera firmware reduces accuracy — update G6 units.

Gateways & NVRs

UniFi gateways & recorders (2026)

All-in-one cloud gateways (with Protect / NVR)

UDM Pro Max

Top-tier 1U gateway. Dual 3.5" bays, 128GB NVMe for AI events, around 50× 1080p / 25× 2K / 15× 4K cameras, optional 10GbE. Approx. £599 — 2–4 week lead time.

UDM Pro (UDMP)

Professional 1U gateway. Single 3.5" bay, around 24× 1080p / 14× 2K / 8× 4K. The long-standing enterprise workhorse. Approx. £379.

UDM SE

1U gateway with PoE built in. Single 3.5" bay, full routing plus Protect, around 24× 1080p / 14× 2K / 8× 4K. Approx. £399.

UDR7 — Dream Router 7 New

Compact WiFi 7 all-in-one. Built-in 64GB microSD, runs Network, Protect, Talk, Access and Connect, with one PoE port to power an AP or camera. Best for home offices and very small sites (2–4 cameras, around 7-day retention). Approx. £279.

UDR 5G Max New 2026

Cellular-first desktop gateway. Full 5G up to 3.4 Gbps downlink, WiFi 7, 10G SFP+, microSD storage. Built for sites with no wired internet — pop-ups, trailers, failover.

UDW — Dream Wall New

Wall-mounted gateway. 512GB microSD plus 128GB SSD, around 12× 1080p / 7× 2K / 4× 4K. For tidy small-office and residential installs. Approx. £699.

UCG Max New

Compact desktop gateway. 1× M.2 NVMe (to 2TB) for Protect, around 15× 1080p / 8× 2K / 5× 4K. Approx. £199–279.

UCG Fibre New

Fibre-optimised gateway with SFP+ WAN. Around 10 Gbps routing (roughly 5 Gbps with IDS/IPS on). Ideal for fibre ISPs. Approx. £279.

UCG Industrial New 2026

First product in the rugged UniFi Industrial line. Fanless metal chassis, PoE+++ (90W) ports with a 270W budget, SFP+ cage, 1× 10GbE plus 4× 2.5GbE, microSD, 3GB RAM. For harsh or outdoor enclosures. Approx. £499 ($579).

Compact gateways (network only — no camera storage)

UCG Ultra

Tiny desktop router. Around 30 managed devices / 300 clients, around 1 Gbps IDS/IPS. Runs UniFi Network only — no Protect storage. Plan for 25 or fewer switches and APs in practice with full threat management on. Approx. £129.

Express 7 (UX7) New

Smallest WiFi 7 all-in-one — gateway plus WiFi 7 AP in one puck. Runs UniFi Network (not the full app stack). A good starter console for a flat home or small-office network. Approx. £199.

Enterprise & high-capacity gateways

Enterprise Fortress Gateway (EFG)

Rackmount enterprise gateway. Around 500+ devices / 5,000+ clients, around 12.5 Gbps IDS/IPS, dual 25G SFP28, dual hot-swappable PSUs — the only UniFi gateway with field-replaceable power and no downtime. Pairs with CyberSecure Enterprise.

UXG Enterprise

High-throughput enterprise gateway and router for large multi-VLAN sites; supports the CyberSecure Enterprise threat library.

On the horizon — Dream Machine Beast · EFG Core · Enterprise 100G

Shown at NAB 2026 and not yet generally available: the UDM Beast (around 750+ devices, 8× 10GbE, dual 3.5" bays, Shadow Mode HA), Enterprise Fortress Gateway Core, and 25G/100G enterprise switching. Treat specs as provisional and confirm on the UniFi Store before quoting.

Dedicated NVR appliances (Protect only)

UNVR Instant

Desktop NVR. Single 3.5" bay, around 15× 1080p / 8× 2K / 6× 4K. Entry-level recorder. Approx. £199.

UNVR G2 refresh

1U, 4× 3.5" bays, RAID 1/5. The second-generation UNVR adds a faster CPU and larger capacity, runs up to 16 cameras at 4K without an AI licence, and stays backward-compatible with G3–G6. The natural upgrade once you outgrow the original 4-bay. Approx. £299+.

UNVR Pro

2U, 7× 3.5" bays, RAID 1/5/10, around 70× 1080p / 35× 2K / 24× 4K. Approx. £499.

ENVR — Enterprise NVR

3U, 16× 3.5" bays, RAID 1/5/10, around 210× 1080p / 140× 2K / 70× 4K. Enterprise-scale surveillance. Approx. £1,999.

Cameras & Protect

UniFi Protect cameras (G6 + AI)

G6 generation — 8MP 4K, multi-TOPS AI engine

G6 Bullet

Versatile outdoor bullet. 1/1.8" 8MP sensor, true 4K, glare-free IR to around 30m, IP66. The default all-rounder. £199 · PoE.

G6 Turret

Same sensor and AI as the Bullet in a compact 3-axis turret. IP66, discreet. £199 · PoE.

G6 Dome

8MP 4K dome with an IK10 vandal-proof housing and integrated Ethernet for fast installs. Ideal for retail and high-traffic interiors. £249 · PoE.

G6 Instant

Wireless plug-and-play with the same 8MP 4K sensor and AI engine. WiFi Auto-Link setup, IPX5, around 6m IR — best for short-range spots near an AP. £179 · WiFi.

G6 PTZ

Dual 1/1.8" 8MP lenses, 10× hybrid zoom, 350° pan and 100° tilt, auto-tracking, around 30m IR, microSD, NDAA-compliant. PoE+ (around 24.5W). £399.

G6 180 New

Two 1/1.8" 8MP sensors stitched into a seamless 16MP, 180° ultra-wide image — cover a frontage or forecourt with one camera and fewer cable runs. For hotels, retail and public spaces. PoE.

G6 Pro 360

Ceiling 360° fisheye. 1/1.6" 12MP sensor, full panoramic capture with digital PTZ after recording, and Smart IR with four individually controllable zones. Approx. £299 · PoE.

G6 Pro Bullet

Premium long-range bullet. Larger 1/1.2" sensor, 2.36× optical zoom, around 40m IR, NDAA-compliant. Best image quality in the line. £479 · PoE.

G6 Pro Entry New

Entry-tier G6 with on-device Smart Detect — the natural replacement for the G4 Pro at a similar price, bringing 4K plus AI down-market. PoE.

New form factors — multi-sensor & edge

AI-MS Multi-Sensor (AI-MS-4)

Four separate image sensors on one mount giving a full 360° view, with on-device AI that tracks a subject across all four and stitches it into a single event timeline. Replaces mechanical PTZ where pan and tilt motors would wear out — retail entries, school corridors and similar.

G6 Edge / Pro Bullet Edge New

NVR, Edge AI and camera in a single unit. Standalone operation with on-board recording (microSD), integrated AI-powered search, 2.36× optical zoom and a 1/1.2" sensor — no separate recorder needed for a one-camera site.

Edge AI — AI Key, AI Port & AI cameras

UniFi AI Key

Edge AI appliance (PoE++). Re-processes smart detections from your cameras — up to around 1,800 events per hour — to add NeXT AI natural-language search ("person in a red shirt near the entrance"), AI alerts, speech-to-text transcription and image enhancement. Brings LPR and Face ID to G4, G5 and G6 cameras that lack native AI silicon.

UniFi AI Port

Bridges third-party ONVIF cameras into UniFi Protect with AI. Requirements: ONVIF support, resolution within 3840×2160 at a standard aspect ratio, camera on the same subnet as the console, and a full-range mic if you want speech detection. Pair with an AI Key for the full feature set.

AI Series cameras (AI Pro, AI Turret)

Built-in AI silicon — facial recognition and licence-plate reading work natively, with no AI Key or AI Port required. The simplest route to plate and face features at the edge.

Smart features across G6 & AI models

Find Anything search

With AI hardware, search footage by object, colour, accessory (backpack, sunglasses), vehicle make and model, plate, keyword or sound.

Face ID & LPR

Facial recognition and licence-plate reading — native on the AI series, or via an AI Key on G4, G5 and G6.

Person / vehicle / animal / package

On-device smart detection filters false alerts.

Edge AI

Analytics run on-premises — on the camera, AI Port or AI Key — so video never leaves the site.

IR night vision

Ranges vary by model, from around 6m (Instant) up to around 40m (Pro Bullet).

Storage planning: 4K continuous recording can use around 200GB per camera per month. Use the IT Pro Expert Storage Calculator to size drives for your camera count, codec and retention.

Switching

UniFi switches (2026)

Match the switch to the AP. A WiFi 7 AP on a 1GbE uplink is capped at gigabit. U7 Lite and Pro want 2.5GbE; U7 Pro XG, XGS and E7 want 10GbE. Pick the line by uplink speed and PoE budget first, port count second.

Switch lines at a glance

Lite / Standard — 1GbE

Layer 2, gigabit ports, 1G uplinks. Fine for WiFi 5 and 6 APs, IoT and basic office traffic. A bottleneck for WiFi 7 — the Lite 8 PoE offers only around 52W of PoE.

Pro — L3 · 10G SFP+

USW-Pro-24-PoE and Pro-48-PoE. Adds Layer 3 (inter-VLAN routing, static routes, DHCP server), 10G SFP+ uplinks, near-silent PWM fans and RPS/DC redundancy.

Pro Max — 2.5GbE · Etherlighting

The flagship for WiFi 7. Selective 2.5GbE PoE++ ports, 10G SFP+ uplinks, Layer 3 routing and Etherlighting port LEDs. The right backbone for modern installs.

Pro XG — 10GbE access

10GbE to the access port. Pro XG 24 PoE gives 16× 10GbE plus 8× 2.5GbE, PoE+++ (90W) per port and 25G SFP28 uplinks. Built to power E7 and U7 Pro XGS at full speed.

Enterprise

2.5GbE access ports with the largest PoE budgets, optimised for high-density WiFi 7 in large sites.

Ultra / Flex — edge

Compact switches that can themselves be PoE-powered — no power outlet needed at the desk or in the ceiling. The USW Flex 2.5G 8 PoE is a handy small WiFi-7-ready edge switch.

Representative Pro Max PoE switches

Model	2.5G / 1G ports	Uplinks	Notes
Pro Max 16 PoE	4× 2.5G + 12× 1G	2× 10G SFP+	Fanless. 2–4 WiFi 7 APs. Approx. £399
Pro Max 24 PoE	8× 2.5G + 16× 1G	2× 10G SFP+	Office backbone. Approx. £799
Pro Max 48 PoE	2.5G mix	10G SFP+	720W PoE budget. Approx. £1,299

PoE standards quick reference

Marketing name	Standard	Max per port
PoE	802.3af	15.4W
PoE+	802.3at	30W
PoE++	802.3bt Type 3	60W
PoE+++	802.3bt Type 4	Around 90W

Etherlighting & power

Etherlighting port LEDs

Illuminated ports show link speed and can be colour-coded per VLAN. Useful for remote support ("unplug the blue glowing cable") and dense racks. You need UniFi's translucent Etherlighting patch cables to see the full effect.

SmartPower RPS

Redundant power supply that fails over for Pro and Enterprise switches — keeps the backbone up if a switch PSU dies.

Sizing a UPS: a switch's PoE budget is not its total draw. A Pro Max 48 PoE pulls around 100W internally on top of its 720W PoE budget — roughly 820W at the wall. Size backup power from the switch's maximum power consumption on its tech-specs page, not the PoE figure.

WiFi & Access Points

WiFi 7 access points (U7 / E7)

WiFi 7 · 802.11be — the U7 / E7 line

U7 Lite — entry

Dual-band WiFi 7, 2.5GbE uplink. Small offices, guest networks, budget rollouts. No 6 GHz band. Approx. £99–139.

U7 Pro — standard

Tri-band WiFi 7 with 6 GHz, 6 spatial streams, 2.5GbE uplink. The best-value workhorse for high-density offices. Approx. £189.

U7 Pro XG — 10GbE

Tri-band WiFi 7, 6 streams, 10GbE uplink — removes the uplink bottleneck for multi-gig clients. Approx. £279.

U7 Pro XGS — flagship New

Ceiling-mount 8-stream WiFi 7 with a dedicated spectral-scanning radio for real-time airspace analysis, and 10/5/2.5/1 GbE uplink. The natural addition to any 10G UniFi console. Approx. £279 ($300).

U7 Pro Max — premium

Ceiling or wall, 8 spatial streams, 10GbE. Large enterprise coverage with maximum capacity. Approx. £349.

E7 — Enterprise top-end

UniFi's flagship enterprise WiFi 7 AP. Massive multi-band capacity; a 10GbE uplink is mandatory and it wants a PoE++/PoE+++ switch such as the Pro XG 8 PoE. An "E7 Audience" variant targets large venues. Approx. £499.

U7 In-Wall — room New

WiFi 7 in-wall AP with a small built-in PoE switch. Hotels, apartments and offices.

U7 Mesh / U7 Pro Wall

U7 Mesh is weatherproof outdoor WiFi 7 with around 3× the range of the U6 Mesh. U7 Pro Wall is a wall-mounted tri-band WiFi 7 AP with 2.5GbE. Approx. £199 each.

WiFi 7 capabilities

Deployment note: 6 GHz and WiFi 7 expect WPA3. Older printers, TVs and IoT devices may fail to join — use WPA2/WPA3 mixed mode for those SSIDs, or keep a 2.4 GHz IoT SSID. Test before a full rollout.

Switch first: WiFi 7 APs need 2.5GbE (U7 Lite and Pro) or 10GbE (Pro XG, XGS and E7) PoE uplinks. Pairing them with 1GbE switches wastes the radios — budget a Pro Max or Pro XG switch alongside the APs.

Software & AI

UniFi OS, Network 9 & Protect 6

Network 9 — Zone-Based Firewall

Zone-Based Firewall (ZBF)

Group networks into zones — Internal, External, Gateway, VPN, Hotspot, DMZ — and write policy between zones instead of juggling per-VLAN rules. The zone matrix shows traffic flow at a glance; predefined zones are locked, and you can add your own.

Object-Oriented Networking (9.4+)

Reusable objects (IP, port and network groups) referenced across rules. Migrate off legacy firewall rules now — a future major version (V10) is set to force the transition.

Find ZBF: Network 9.4 — Settings > Zones (or Policy Table). Network 9.3 — Settings > Policy Engine > Zones. Use Auto Allow Return Traffic on a policy if return traffic isn't already permitted.

Multi-site & security

Site Magic SD-WAN

Licence-free, one-click encrypted site-to-site mesh across up to around 1,000 sites — no manual IPsec. Lives under the VPN zone in ZBF.

Site Manager API

Programmatically manage and monitor many consoles from one place — useful for MSP fleet automation and reporting.

UniFi CyberSecure

Local IDS/IPS signature library (Proofpoint plus Microsoft MAPP). CyberSecure is around 55,000+ signatures at $99/yr, with a Memory-Optimized Mode for smaller gateways. CyberSecure Enterprise is around 95,000+ signatures at $499/yr, for EFG and UXG Enterprise.

Shadow Mode HA

Gateway high-availability and failover on supported enterprise consoles — a standby takes over if the primary fails.

AI across the platform

UniFi AI Optimizer

Scans for RF interference and auto-tunes AP channels and power, plus surfaces optimisation recommendations from traffic patterns — less manual RF babysitting.

Protect 6 — Find Anything

Natural-language and attribute search across footage (object, colour, accessory, vehicle make and model, plate, keyword, sound) — full power requires AI hardware such as an AI Key or AI-series cameras.

Protect 6 — Alarm Manager

Build custom triggers ("person with a black backpack"), test an alarm before relying on it, fire webhooks, and chain automations — turn on floodlights, drive a PTZ, or unlock a door via UniFi Access.

Protect 6 — Incident reports

Group and annotate related clips into a structured, exportable report; auto-archive detections to a local NAS or cloud for retention and compliance.

Access Control

UniFi Access & physical security

Core components

UA-Hub-Door — Access Hub

Controller for one door. PoE-powered; supports multiple readers, lock outputs, and auxiliary inputs and outputs for sensors, exit buttons, sirens and door openers.

UA-G2 — Access Reader G2

NFC and mobile reader with camera and intercom. Unlock by NFC card, the UniFi Identity app, PIN or QR. Weather-resistant for entry doors.

UA-Ultra — Access Ultra

All-in-one single-door controller with the hub built in — no separate Access Hub needed. Wave-to-unlock supported.

UA-Blade — Smart Reader

Compact second-generation NFC reader. Hand-wave unlock and greeting messages; connects back to a UA-Hub over PoE.

Locks & door hardware

Electric strike (fail-secure)

ANSI-compliant strike wired to the hub's lock relay, typically 12V. Stays locked on power loss.

Magnetic lock (fail-safe)

270kg and 540kg holding-force variants. Powered means locked; it releases on power loss — pair with a request-to-exit and check local egress codes.

Intercom, display & chime

UA-Intercom / UA-Display

Video intercom plus a touchscreen viewer for visitor screening — two-way audio and live view, PoE-powered. Ties into Protect for call recording.

UA-Chime

PoE chime and announcer for entry alerts; pairs with a doorbell or hub.

Access 3.x — newer capabilities

Where it runs: the UniFi Access app no longer needs a Pro-class console — it runs on the UDR7 and the compact Cloud Gateway range as well as UDM Pro, Pro Max and the Enterprise Fortress Gateway. Match expected door and reader counts to the console's resources.

Network

Design & best practices

Small office (under 20 devices)

UCG Ultra or Express 7 for network-only, or a UDR7 / UDM SE if you want Protect on the gateway.
1–2× U7 Pro for WiFi 7 coverage.
A Pro Max 16 PoE (fanless) or Flex/Ultra PoE switch for access.
2–4× G6 cameras (Bullet or Turret, plus an Instant for awkward WiFi spots).

Medium business (50–200 devices)

UDM Pro Max (or UXG plus UNVR) as gateway and Protect.
4–8× U7 Pro / Pro XG, mixing standard and high-uplink units by area.
Pro Max / Pro XG access switches with a 10G aggregation layer.
Dedicated UNVR or UNVR Pro once camera counts climb.
8–24× G6 cameras; UniFi Access on reception and secure doors.
Turn on the AI Optimizer to auto-tune RF as the estate grows.

Enterprise (500+ devices)

Enterprise Fortress Gateway (EFG) or UXG Enterprise as the core, with Shadow Mode HA where uptime is critical.
Fleets of U7 / E7 Enterprise APs on 10GbE uplinks.
Pro XG / Enterprise switching with a 25G SFP28 backbone.
ENVR or UNVR Pro for large camera estates; RAID for resilience.
UniFi Access with identity integration for site-wide control.
CyberSecure (or CyberSecure Enterprise on EFG and UXG Enterprise) for IDS/IPS threat signatures.

The recurring gotcha: WiFi 7 APs need 2.5GbE or 10GbE uplinks. Pairing them with 1GbE switching throws away most of what you paid for — budget the switch layer alongside the APs.

Resources

Tools, calculators & links

IT Pro Expert tools

UniFi Protect Storage Calculator

Size a Protect deployment exactly — camera count, resolution, FPS and retention days.

Open calculator →

UniFi Protect / CCTV System Comparison

Side-by-side of UNVR models, UDM variants, camera limits and storage specs.

View comparison →

CCTV Choosing & Setup Guide (2026)

Choosing, placing and configuring UniFi cameras for solid coverage.

Read guide →

Official Ubiquiti

UniFi console & downloads

Cloud console: unifi.ui.com · Apps and firmware: ui.com/download

WiFiman (survey & discovery)

wifi.ui.com — iOS, Android, web, macOS and Windows.

Support, store & status

Help: help.ui.com · Store: store.ui.com · Community: community.ui.com · Status: status.ui.com

UniFi Support Tools

UniFi Support Toolkit

Default credentials & access

SSH command reference

Network ports reference

Network & VLAN issues

Access point issues

Gateway / controller issues

Camera issues (G6 / G5 / G4 / G3)

UniFi gateways & recorders (2026)

UniFi Protect cameras (G6 + AI)

UniFi switches (2026)

WiFi 7 access points (U7 / E7)

UniFi OS, Network 9 & Protect 6

UniFi Access & physical security

Design & best practices

Tools, calculators & links