Skip to content

Check the connection method and validation evidence for every available WiFi integration path. Open the compatibility centre

Product
All features How it works Guest WiFi portal Campaigns & automations Reviews Analytics All integrations
Solutions
Restaurants Cafés Hotels Bars & pubs Retail Gyms Salons
Hardware Pricing
Resources
Resources Guides Launch checklist Glossary Help centre
Log in Start free

Step-by-step guide

UniFi captive portal checklist

Create a local controller user, confirm the site identifier, then paste the controller URL into WeefyBox. The setup wizard validates the API connection before you publish a portal.

Guide 1 of 8 5-10 minute read Operator checklist

Before you change anything

  • Confirm the correct venue
  • Keep current settings handy
  • Test with one device first

Connect Ubiquiti UniFi to WeefyBox

Prerequisites

  • UniFi Network application or UniFi OS console
  • A separate guest WiFi network
  • A local, least-privilege controller account
  • A controller address reachable from WeefyBox

Setup

  1. In WeefyBox, select the venue, open Setup, and choose UniFi Network.
  2. Copy the Portal URL and walled-garden domains.
  3. In UniFi Network, open Settings > WiFi and edit the guest SSID.
  4. Enable Hotspot Portal and choose External Portal Server.
  5. Paste the WeefyBox Portal URL exactly.
  6. Open Settings > Hotspot > Pre-Authorization Access.
  7. Add each WeefyBox walled-garden domain on its own line.
  8. Disable UniFi's branded/default portal for this SSID.
  9. Keep Client Device Isolation enabled; it does not block WeefyBox.
  10. Create a local controller account for WeefyBox. Do not use a UI.com SSO-only account.
  11. Enter the controller URL, account, site ID, and console type in WeefyBox.
  12. Keep TLS verification enabled. Disable it only for a known self-signed local certificate.
  13. Select Save credentials, then Test my setup.
  14. Join the guest SSID with a phone and complete the portal.
  15. Confirm a successful result in Setup > Portal debugger.

Controller behind NAT? Publish it through a restricted VPN/reverse tunnel or use an installer-managed endpoint. Never expose the full controller UI with a weak password.

Troubleshooting

| Symptom | Check | |---|---| | Splash never appears | Guest SSID has Hotspot Portal enabled; Portal URL is exact; DNS works | | Splash works but no internet | Local account permissions, controller reachability, site ID, controller clock | | iPhone works but Android fails | Allow connectivitycheck.gstatic.com, clients3.google.com, and www.gstatic.com | | Returning guests sign up again | Keep Private WiFi Address set to fixed/stable; do not clear captive-browser data | | Controller unreachable | Check firewall/VPN, HTTPS port, TLS certificate, and NAT forwarding |