How to configure ubiquiti network equipment

General steps

  • Reset the device
  • ssh into it (username: ubnt, password: ubnt)
  • Setup a password

Upgrading most ubiquiti access points

  • Dowload the latest firmware from
  • scp it to the device as /tmp/fwupdate.bin
  • ssh into the device, run
    • upgrade2 &
    • Seems to need to be backgrounded from all examples in the web - it instantly exits though
    • so & might-or-might-not be necessary

Enabling ssh access without a password

  • Add your public RSA (ed25519 don't work) to /etc/dropbear/authorized_keys

Configuring Wifi

  • Download the "unifi network" app
  • Go to account->standalone devices : wait for the aps to show up

Installing OpenWRT on AP Lite/LR/Pro

Stock ubiquiti does not work in IPv6 only environments. So replacing the stock firmware with OpenWRT makes them usable.

Sample session (don't copy and paste)

[20:14] manager:~% wget
[20:14] manager:~% scp openwrt-19.07.3-ath79-generic-ubnt_unifiac-lite-squashfs-sysupgrade.bin ubnt@[2a0a:e5c0:13:0:f29f:c2ff:fef3:cbe4]:
[20:14] manager:~% ssh ubnt@2a0a:e5c0:13::f29f:c2ff:fef3:cbe4    

BZ.v3.7.58# mtd write openwrt-19.07.3-ath79-generic-ubnt_unifiac-lite-squashfs-sysupgrade.bin kernel0

BZ.v3.7.58# mtd write openwrt-19.07.3-ath79-generic-ubnt_unifiac-lite-squashfs-sysupgrade.bin kernel0
Unlocking kernel0 ...

Writing from openwrt-19.07.3-ath79-generic-ubnt_unifiac-lite-squashfs-sysupgrade.bin to kernel0 ...     
BZ.v3.7.58# mtd erase kernel1
Unlocking kernel1 ...
Erasing kernel1 ...
BZ.v3.7.58# cat /proc/mtd 
dev:    size   erasesize  name
mtd0: 00060000 00010000 "u-boot" 
mtd1: 00010000 00010000 "u-boot-env" 
mtd2: 00790000 00010000 "kernel0" 
mtd3: 00790000 00010000 "kernel1" 
mtd4: 00020000 00010000 "bs" 
mtd5: 00040000 00010000 "cfg" 
mtd6: 00010000 00010000 "EEPROM" 
BZ.v3.7.58# dd if=/dev/zero bs=1 count=1 of=/dev/mtd4
1+0 records in
1+0 records out
BZ.v3.7.58# reboot 

Updated by Nico Schottelius almost 4 years ago · 8 revisions