Network Deployment
  • 14 Mar 2023
  • 1 Minute to read
  • Dark
    Light

Network Deployment

  • Dark
    Light

You need to configure port forwarding when your UniFi OS Console does not have a public IP, but its parent route does.

Notes
  • If your console has multi-level routes above it, you will need to configure the port forwarding for each level from top to bottom.



Before setting up your One-Click VPN, you need to configure your deployment in the UniFi Network application by using either:

  • An uplink router directly connected to your network that has port forwarding already configured.
  • A public network IP. We recommend using this when your console's public network doesn't match your WAN IP.
Note

If your console has a public IP address, you can skip the port forwarding instructions.


Create Port Forwarding Rules in UniFi Network

  1. Connect the UniFi OS Console's WAN port to the top-level router.
  2. Sign in to your UniFi OS Portal.
  3. Go to Applications > Network.
  4. Go to Settings > Firewall & Security > Port Forwarding.
  5. Click Create New Port Forwarding.
  6. Configure the new rule:
    1. Enter the port's Name.
    2. Enable Forward Rule to implement the configured port forwarding rule.
    3. Select your WAN Interface type.
    4. Select the port forwarding source network in the From field. If you select Any, you can skip the Source configurations.
      1. Select the source network's IP in the Source field, if you selected Limited in the From field.
    5. Enter the Port number.
    6. Enter the console's WAN IP in the Forward IP field.
    7. Set the Forward Port to 10118.
    8. Select the network's Protocol (UDP is recommended).
    9. Enable or disable Logging depending on your preference.

  7. Click Apply Changes.

Configure Public IP Settings in UniFi Network

  1. Sign in to your UniFi OS Portal.
  2. Go to Applications > UniFi Network.
  3. Go to Settings > Internet.
  4. Select the WAN port.
  5. Click Edit.
  6. Go to the Advanced section.
  7. Enable Manual.
  8. Configure the IPv4 network advanced settings:
    1. Go to IPv4 Connection.
    2. Select Static IP.
    3. Configure the following settings:
      • DNS Server: Disable Auto to configure the primary and secondary DNS servers. These are provided by your ISP.
      • IPv4 Connection: Set a static IP.
      • IPv4 Address: This is your specified IP address.
      • Subnet Mask
      • Router

  9. Click Apply Changes.

Was this article helpful?

Changing your password will log you out immediately. Use the new password to log back in.
First name must have atleast 2 characters. Numbers and special characters are not allowed.
Last name must have atleast 1 characters. Numbers and special characters are not allowed.
Enter a valid email
Enter a valid password
Your profile has been successfully updated.