UniFi Turnkey Setup: Controller, VLAN, Roaming, Monitoring

In an office of 200 m² with three UniFi U6-Lite access points, users complain about connection drops when moving around, and in the meeting room speed drops to 5 Mbps. Ping to the gateway jumps from 5 to 200 ms. Typical situation: good hardware but Wi-Fi performs worse than an old D-Link. The main reason is improper radio configuration and lack of traffic segmentation. Our experience from over 50 projects shows that in one day we can turn chaotic Wi-Fi into a stable network with roaming, guest portal, and monitoring. We guarantee results if recommendations are followed. All recommendations are based on real projects where we configured UniFi for offices from 10 to 500 devices.

Deploying the UniFi Controller on Docker

The UniFi Network Application can be deployed in several ways: UniFi Cloud Key G2+, Raspberry Pi 4, full VM, or Docker container. Docker Compose for development/small production:

version: "3"
services:
  unifi:
    image: lscr.io/linuxserver/unifi-network-application:latest
    container_name: unifi-network-application
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Kiev
      - MONGO_USER=unifi
      - MONGO_PASS=${MONGO_PASSWORD}
      - MONGO_HOST=mongo
      - MONGO_PORT=27017
      - MONGO_DBNAME=unifi
    volumes:
      - ./config:/config
    ports:
      - "3478:3478/udp" # STUN
      - "10001:10001/udp" # AP discovery
      - "8080:8080" # inform port (TCP)
      - "8443:8443" # HTTPS GUI
      - "8843:8843" # HTTPS portal
      - "6789:6789" # speed test
    depends_on:
      - mongo
    restart: unless-stopped
  mongo:
    image: mongo:4.4
    volumes:
      - ./mongo:/data/db
    restart: unless-stopped

For production — a separate VM (Ubuntu LTS, 2 vCPU, 4GB RAM is enough for 50+ APs).

An important nuance: access points discover the controller via Layer 2 discovery (UDP broadcast on port 10001) or via DNS record unifi. If AP and controller are in different VLANs, you need to either configure DHCP option 43 or explicitly set the inform URL. According to UniFi documentation, you can use the command:

# SSH to the access point (login ubnt/ubnt or admin/admin on factory defaults)
set-inform http://192.168.30.10:8080/inform

How to Configure Roaming Without Drops?

Main causes of Wi-Fi performance degradation:

• Minimum RSSI not configured — clients stick to a weak signal (-80 dBm) even though a nearby AP has -60 dBm.
• 40 MHz channel width on 2.4 GHz in dense areas — creates interference with neighboring networks.
• High transmit power on AP — clients hear the AP, but the client's return signal is weak (asymmetry).
• No Band Steering — modern clients stay on 2.4 GHz instead of 5 GHz.
• No VLAN segmentation — guest traffic mixes with corporate traffic, broadcast storms load the airwaves.

On one project (open-space for 100 people, 8 APs UniFi U6-Pro) we reduced retransmits from 15% to 2% with the following actions:

1. Spectrum scan with unifi-sta and wigle — selected unloaded channels.
2. On 2.4 GHz, set channel width to 20 MHz, channels 1,6,11 (non-overlapping). On 5 GHz, 80 MHz with priority on DFS range (channels 100-140).
3. Set Transmit Power: Auto on 2.4 GHz (medium level), Medium on 5 GHz.
4. Enabled Band Steering (Prefer 5G) and Minimum RSSI at -72 dBm.
5. Assigned VLANs per SSID (Corporate — VLAN 10, IoT — VLAN 30, Guest — VLAN 40) and enabled Client Isolation on guest and IoT.
6. Configured Captive Portal for guests with SMS authentication via Twilio (alternative — simple 'Connect' button).

Result: speed at the edge increased from 10 to 80 Mbps, roaming became seamless (switch time < 50 ms).

What's Included in Turnkey UniFi Setup?

• Documentation: network diagram, VLAN plan, frequency plan.
• Access: to controller, switches, access points.
• Training: basic skills in UniFi Network Application.
• Support: warranty service for 30 days.

Process of Turnkey UniFi Setup

1. Analytics: site survey, interference detection, signal-to-noise ratio measurements.
2. Design: AP placement diagram, VLAN plan, frequency plan.
3. Implementation: controller installation (Docker/VM), SSID configuration, RADIUS server (if 802.1X required), captive portal.
4. Testing: load simulation, roaming verification, iPerf measurements.
5. Deployment: apply configuration, monitoring, handover of documentation.

Estimated Timeframes

Cost is calculated individually. Budget savings up to 60% compared to Meraki with comparable functionality. Total cost of ownership is 40-60% lower. We'll assess your project in one working day — contact us.

Checklist of Common Mistakes

• Using 40 MHz on 2.4 GHz in an apartment building or office center.
• Transmit Power set to High — creates a perception of good signal, but uplink suffers.
• Forgetting to enable Band Steering — some clients stay on 2.4 GHz.
• Minimum RSSI not set — clients stick to a distant AP.
• Captive Portal runs without HTTPS (port 8843) — browsers complain about insecure connection.
• No backup of controller configuration (UniFi does automatic backup, but it's better to set up cron to upload to S3).

UniFi outperforms budget solutions (TP-Link, MikroTik) in stability by 2-3 times: the number of incidents after proper configuration is reduced dramatically. Compared to Cisco Meraki or Aruba, total cost of ownership is 40-60% lower with comparable functionality. We have been working with UniFi for over 5 years and have completed over 50 projects — from small offices to campuses with 500+ devices.

Contact us for an assessment of your project — our engineers will help with configuration selection and provide recommendations. Get a consultation on Wi-Fi setup tailored to your needs.