
One fine winter day, after another call about the lack of a network for an employee, I decided that I could not continue like this and
hit my fist on the table and slammed another cup of tea.
Having counted the budget of our IT department, I was a little bit despondent, I could not see us corporate WiFi, and sat down to explore other options. Zaydeksiv Google: corporate wifi is cheap, I sat down to study. From all corners of the Internet I was offered to buy a miracle overseas called UniFi. A little more google in Yandex and I was ready to thank the gods for the creators of the company
Ubiquiti .
With a clear conscience, I closed the browser and slammed another mug of tea.
From that moment several months passed and then that bright hour came when they called me on the phone ... Looking up from my thoughts, I picked up the phone and heard: your unknown crap arrived. You can ... Then I did not hear further, because I was running down the stairs to the warehouse ...
Next, I will try to conduct a mini review without any lyrics.
Caution. Under the cut a lot of pictures.
Episode One: Unboxing
I ordered
UAP LR-3 . Here they are handsome:

Next to the third box is the DDR-3 memory bar.
Begin unpacking. The box is divided into 2 compartments:
- Actually the plates themselves + fasteners + instructions
- PoE power supplies + cables + mounting screws
No discs included.

When unfolded, the whole set fit on the 1st square meter of the floor:

Included is nothing extra:
- 3 access points
- 3 PoE power supplies
- 3 power cables for power supply
- 3 metal rings for attaching points to a false ceiling
- 3 holders for points (not shown in the photo)
- 9 bolts for mounting holders
- One instruction
An interesting feature. On the power supply there is a button to reset the settings of the point connected to it. In the first revisions it was not there, and if something happened to a point, I had to climb to the ceiling, remove the point, and perform a reboot. Now, of course, everything has become more convenient.
And here is the point itself with the holder:

It is better not to snap the holder to the finish installation, because it will be problematic to open it later.
Well, for a snack power supply with the notorious reset button .:

Episode Two: Installation
The points are positioned as corporate ones, so they do not have any pre-installed ip addresses. So, at least initially, a DHCP server should function in the network. If you
pulled a point from work bought a point yourself home - this can be a small problem.
Go ahead. Web-muzzles do not have a point, but ubiquiti kindly provides us with a controller for windows, linux and mac. Here it is controlled through the web interface.
')
So, if you are a happy owner of windows or mac - go to the
off. site and download the fresh version of the controller. I do not know about mac, but I didn’t have any problems with installing on windows.
We should also mention the linux system. Click on the off site link:
Release notes and other downloads and get to the page with a description of the installation for ubuntu and debian. Owners of other systems are invited to download the zip archive and try to run everything on their own.
It is worth mentioning that, according to this instruction, I did not manage to put the controller on debian 7 (well, of course, because the instruction was written for version 5 and 6 of debian), but on the Internet there was an instruction on how to make it all work. So:
- We smoke installation instructions mongo-db
- Add security keys:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv 7F0CEB10
- Add the mongo-db repository:
echo 'deb downloads-distro.mongodb.org/repo/debian-sysvinit dist 10gen'>>/etc/apt/sources.list
- Updating:
sudo apt-get update
- Install mongo-db:
sudo apt-get install mongodb-10gen
Ufff ... Half way passed. You can proceed to install the controller.
- Add security keys:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv C0A52C50
- Add a repository:
echo 'deb www.ubnt.com/downloads/unifi/distros/deb/squeeze squeeze ubiquiti' >> /etc/apt/sources.list
- Updating:
sudo apt-get update
- Put the controller:
sudo apt-get install unifi
- Open the init script in your favorite editor:
nano /etc/init.d/unifi
- We are looking for the line: JAVA_HOME -: / JAVA_, or somehow differently but with the prefix JAVA_HOME, and replace it with "JAVA_HOME = / usr / lib / jvm / java-6-openjdk-amd64"
- Restart the controller:
sudo service unifi restart
Everything. Congratulations. Now you can go to: https: // <controller ip>: 8443 / manage and fill in everything you need.
I will not dwell on the creation of new SSIDs in detail, for this is done elementary in a couple of clicks. I will stop only at one moment. If you want WPA-Enterprise and set up a radius server, then for all points you need to create the same secret, and not for each point. But this is a matter of a separate article.
Episode Three: Oh, how many wonderful discoveries are to us ...
Here I would like to make a small review of the chips of this decision + my observations of users
So let's get started. The killer chip that is shown even on the box is a display of the network coverage area.

Maps can be downloaded any number and switch between them. Point on the map can be set by dragging on it with the mouse. Map scale is set by clicking on the triangle on the right.
This thing is so awesome and it creates an excellent wow effect, but, unfortunately, it is absolutely useless. The point here is that when calculating the coverage area, walls and partitions are not taken into account. Therefore, the actual coverage area will be different. But, in her defense, I will say that there is a sense of the card. You can see in which room there are problems with the connection, see how many users are connected to this particular point. And, of course, estimate the approximate coverage area.
Go ahead. Statistics tab:

Here is more fun. Here you can quickly evaluate which point is more loaded, and also see the leader's
scoundrel who downloaded and transferred the most data.
Tab: Access Points

Shows all the points found on the network and manage them. If any of the points was registered on another controller, it will not be able to manage it, but we will see it.
Tab: Users

So we got to the most delicious tab. This shows all current user activity. Who is pumping, at what speed, signal level, how many downloaded, how many gave, etc. Even here you can block especially zealous Kachuns :-) or make the client reconnect to the network.
In conclusion of the current episode, I want to share my observations:
- Everyone loves a freebie. This is what it is. I created 2 points: corporate (WPA-Enterprise) and guest (without encryption, without the Internet, without access to the corporate network). The next day, I was visited by about a hundred androids, WindowsPhones, a couple of Nokia and one IPhone. There was even a couple of laptops from the hostel opposite.
- All user problems are created by users themselves. Now I am convinced of this. When one
woodpecker user starts pumping up gigabytes for a long time, everyone else nervously smokes aside while enjoying pings of 3000 ms. - Sometimes it happens that the client connects to a point with a low signal level. Then it helps to reconnect to wifi, or forced disconnection on the controller.
- Even the cheapest wifi adapters can work stably with good access points. It happened that cheap cards on cheap points were heated to such an extent that they melted a plastic case. Now there is no such thing.
- The power of the signal points is enough to break through 3 floors in a Soviet-built building. True wall and a half meters thick still perfectly dampens the signal
Brick production
It would seem that there are bricks here, but during the tests I managed to finish off one point. I do not know who exactly is to blame for this, but one point I, presumably, did not turn on. Well, okay about everything in order. I included a point in the network and went about my business. When I returned, it turned out that the dot showed no signs of life and only convulsed with its LEDs only every few minutes. On the face were all signs of a dead firmware. That's when I made my first brick. Further investigation revealed that the controller was a jackdaw auto-update firmware. Maybe I'm such a "lucky" and during the update the electricity was lost, and perhaps the point was initially broken. In any case, ubiquiti
took care of such poor fellows as I updated the firmware by tftp and this point stopped worrying me more. If someone is “lucky” just like me, I quote the instructions for resurrection:
- We copy the firmware from the controller /usr/lib/unifi/dl/firmware/BZ2/3.1.3.2187/firmware.bin, or download it off. the site
- Disconnect your computer from the network and heal the LAN port on the power supply to your ethernet port
- Configure your network interface to 192.168.1.1/24. In the future, the point will have IP 192.168.1.20
- Turning off the power from the point. Push the reset button. Without releasing the reset button, we apply power to the point. We continue to hold the reset button. After about 14 seconds, the indicator on the point: yellow / green / off will flash. All button can be released. Actually I did not manage to ping the point, but the firmware was updated without problems.
- If you have windows, then in the command line we drive in:
tftp -i 192.168.1.20 PUT [ ]\firmware.bin
- All firmware should flood. Now the main thing is to be patient and wait. When the firmware is updated - turn off the power, turn it on again and press the reset button for ~ 7 seconds. The green light will flash. Release the reset button and distort the power at the point.
They write on the site that if you wait in the service mode for too long, you will not be able to update via tftp and you will have to restart to the service mode. I did not hurry and still could not wait for the tftp to turn off. So do not rush.
And one more note. It’s not so easy to enter the service mode alone: ​​definitely not enough two hands, but with proper skill you can still get there.
findings
4 boxes of 3 points in each cost us 1700 green forever, while other manufacturers' iron controller costs about 10,000 without taking into account access points.
1 Point can serve more than 100 customers. The new generation with the AC standard is served by more than 200 users, but the price is, as yet, 3 times higher.
If the network disappears at a point, it automatically turns into a repeater and changes its status on the controller.
Communication breaks have stopped and I can calmly drink my tea.
Every week my partner and I hold a contest for the most desperate Kachun. True, until we decided what to do with them - so we keep a small notebook ;-)
The points look very futuristic, especially if the cables are brought from the back of the wall. Hanging a plate, glows green. Very good.
Thanks
First of all, I would like to thank
ubiquiti for creating such a wonderful product that allowed us to join the world of corporate wifi.
I would also like to thank Alexey, the director of
Atlastelecom . For the fact that he was able not only to supply us with the equipment, but also gave it to us for a test. It turned out that in Belarus it is not so easy to find this overseas product.
And of course, thank you% gtuser% for being able to read this note to the end.