The compatibility of the Ubiquiti UniFi system with the SOCIFI platform was tested on the controller version 5.4.11 (Build: atag_5.4.11_9184) and UniFi AP version 184.108.40.20601. This manual presumes a preconfigured controller with associated APs.
The release of the Unifi Controller Firmware 5.10.12 is not compatible with SOCIFI at this moment. Please DO NOT UPGRADE to this version. If the the firmware is already updated to the latest version, please rollback the firmware to the previous version to keep the SOCIFI external portal service running.
We will inform you when the necessary changes are done and when the new version of the FW is compatible.
The issue was caused by a bug on the firmware for APs in 5.10.12 and should be fixed in version 5.10.16
See https://community.ubnt.com/t5/UniFi-Updates-Blog/UniFi-Network-Controller-5-10-16-Stable-Candidate-has-been/ba-p/2674811 section bugfixes, Fix external guest portal cookies.
1. Guest Control
1.1 Guest Policies
Login to the UniFi Controller and Click on "Settings" - "Guest Control"
Set the Guest Policies options with the following values:
|Enable Guest Portal||checked|
|Authentication||External portal server|
|Custom Portal IP Address||According to geolocation table (see below)|
|Use Secure Portal||unchecked|
|Redirect using hostname|
|Enable HTTPS Redirection||unchecked|
Portal IP selection table according to geolocation:
|Europe, Africa, Middle East||220.127.116.11|
|Asia, Australia, Pacific||18.104.22.168|
1.2 Access Control
Under the Access Control section click "Add Hostname or Subnet" and enter the allowed subnet. Repeat this for all SOCIFI and CDN required subnets. Even if entering a hostname is allowed, the DNS translation functionality is limited and not recommended by SOCIFI.
List of IP addresses needed for SOCIFI service
|IP / range|
|List of IP ranges for use with SOCIFI service||List of IP ranges for enabling social networks login|
Due to the problems with the activation of the captive portal on IP-based Walled Garden systems with many allowed IP ranges, add these ranges only if you want to use the Social Network Login.
Generally, we cannot recommend using the Social Network Login on IP-based hotspot systems.
2.1 RADIUS Profiles
Click on "Profiles". Under the section "Radius Profiles" click on "Create New Radius Profile". Set the RADIUS Auth Servers with following options:
|Profile Name||ad lib|
|RADIUS Auth Server|
|IP address||see bellow for RADIUS server selection|
Click on "Add Auth Server" and repeat procedure for the secondary Auth server.
Check the option "Enable Accounting". Set the RADIUS Accounting Servers with following options:
|RADIUS Accounting Server|
|IP address||see bellow for RADIUS server selection|
Click on "Add Accounting Server" and repeat procedure for the secondary Accounting server.
Click on "Save"
We recommend to use this set of RADIUS servers:
3. Wireless Networks
Click on "Settings" - "Wireless Networks"
Select the SSID intended for use with SOCIFI and click on "Edit".
Configure the network with the following values:
|Enabled||checked "Enable this wireless network"|
|Guest Policy||checked "Apply guest policies"|
Click on "Admins" and create a new admin profile for API communication. This account must be set in the SOCIFI Dashboard when adding a new Ubiquity hotspot
Click on "Add New Admin" and enter the following values:
|Name||ad lib (eg. apiSOCIFI)|
|Invite to Controller||Manually|
|Pasword||enter a secure password|
|Require the user to change their password||unchecked|
Click on "Create"
Enablig API Access
It is necessary to forward the TCP port 8443 to UniFi controller on your NAT service or to assign a public IP to the UniFi controller. This will allow to communicate the SOCIFI portal with UniFi API.
The access to the port shall be allowed for the following list of IP addresses:
If you have a Firewall, it may or may not block the communication / connection to SOCIFI Servers (Captive Portal, API endpoints, RADIUS servers).
The following IP Addresses have to be passed thru the Firewall or any other blocking mechanism to successfully reach SOCIFI. Without allowing these IP Addresses to go thru your Firewall, your deployment cannot work properly.
API Access is used by Ruckus, Ubiquiti and ANTlabs devices
5. Registering in Dashboard
5.1 Locating the MAC for the registration in SOCIFI Dashboard.
Click on "Devices". The MAC address for registration is in the column "Device Name". All listed AP devices must be registered in SOCIFI Dashboard.
5.2 Hotspot Registering
Step 1: Login to SOCIFI Dashboard
Step 2: Click on the "Hotspots" tab on the left sidebar
Step 3: Click on the “Add a new hotspot” button located on the top right corner on the screen (pictured below)
Note: A pop-up window will appear (below)
Step 4: Select the Wi-Fi hardware manufacturer from the drop down menu
Step 5: Enter the serial number or MAC address (depending on the specific equipment manual) of your equipment. You can add multiple hotspots at once.
Step 6: Set your Network location (this step is essential for correct ad targeting)
Step 8: In the pop-up window type your location or just move the marker on the map and click on the save button to confirm the selection. This address is used for ad GEO targeting.
Step 9: Click Save
Note: Newly added hotspot are marked as (Hotspot pending). After the first user connects to the hotspot via SOCIFI, the status will automatically change and appear as (Active) within an hour. Get your first connections to test if it works properly.