Help with Unifi CloudKey remote access!

[Klutch9]

Yesterday I made some changes to my home Unifi network. I have a USG and several access points that were previously managed via a controller I had running on a local PC 24/7. I could always access my network via WAN or LAN. I didn't want to have the PC running all the time, and I was in the mood for tinkering, so I am now running my network on a Gen 1 CloudKey (yes, I know this CloudKey is EOL, but that shouldn't affect me in this case). I re-configured the network from scratch; didn't use any backups since my network is pretty simple.. Everything is working great, but I can rarely access the console from WAN. I can always access it (via PC or iOS Unifi app) on LAN, but via WAN it hardly ever works. Just times out. All my settings appear to be correct, and remote access IS enabled. I have tried different DNS servers (Google, Quad 9, Cloudfare) to no avail. What am I missing? Is this old CloudKey EOL to the point where the WAN access doesn't work?

MODS: can you please move this to the Computer forum? I think the subject matter fits better there. Thanks!

 

[Rand]

could you post in detailed steps how you normally access it.

 

[Klutch9]

could you post in detailed steps how you normally access it.

Typically just via the Unifi app for iOS. Or Unifi.ubnt.com where I select my console. Always shows as being online, even when I’m on WAN, but it won’t actually connect.

 

[Pew]

For shiggles, have you already power cycled the USG?

 

[Klutch9]

For shiggles, have you already power cycled the USG?

I have not. I have power cycled the CloudKey though. I’ll try with the USG later.

 

[Rand]

I have not. I have power cycled the CloudKey though. I’ll try with the USG later.

I'm not very familiar with that type of setup as I have mostly newer gear.. Do you have to port forward for the cloudkey etc?
So you are:
trying to manage from separate internet to the remote cloudkey behind the USG?

What happens if you are on local wifi?

 

[Klutch9]

I'm not very familiar with that type of setup as I have mostly newer gear.. Do you have to port forward for the cloudkey etc?
So you are:
trying to manage from separate internet to the remote cloudkey behind the USG?

What happens if you are on local wifi?

No port forwarding is required with a cloud key. Yes, I am trying to manage my network from WAN, either cellular or another external WiFi network.

If I try to connect while on my LAN/local WiFi, I can connect quickly every time.

 

[Rand]

No port forwarding is required with a cloud key. Yes, I am trying to manage my network from WAN, either cellular or another external WiFi network.

are you sure? I am seeing conflicting info on google.

Also your problem seems to fit with that.

 

[Klutch9]

are you sure about that? I am seeing conflicting info on google.

There are a few common ports it uses for traffic, but no port forwarding should be required. I didn’t need to forward any ports when I had my last system hosted on my PC.

The weirdest part is that SOMETIMES it will connect while I’m on a WAN. That tells me that it’s configured properly, it just doesn’t like to connect that way for some reason.

 

[Rand]

https://community.ui.com/questions/...ng-guide/fbceb78b-1c87-421d-b912-6ce10d165936

That might give you some ideas.. some of the comments might also apply.

 

[tmorris1]

https://community.ui.com/questions/...ng-guide/fbceb78b-1c87-421d-b912-6ce10d165936

That might give you some ideas.. some of the comments might also apply.

If UNIFI cloud access is enabled you shouldn't need to do any port forwarding.

 

[OVERKILL]

Make sure the cloud key is logged into and owned by your ui.com account and not a local admin account. I had this problem recently with a client's device (Express) that was on DSL and setup locally first, then migrated to the cloud. I could always connect to it locally, could see it online through the portal, but never actually manage it. Went onsite, added my UI account to it, transferred the ownership to that account, and then it was able to managed from the web without issue.

 

[Klutch9]

Make sure the cloud key is logged into and owned by your ui.com account and not a local admin account. I had this problem recently with a client's device (Express) that was on DSL and setup locally first, then migrated to the cloud. I could always connect to it locally, could see it online through the portal, but never actually manage it. Went onsite, added my UI account to it, transferred the ownership to that account, and then it was able to managed from the web without issue.

I set the cloud key up using my Ui.com login. How do I check that it’s not registered locally? If I go into Settings - System - Admins, my email address is shown as the login (the one I use for Unifi). In the tab above under Administration, the “Enable remote access” box is checked, as is the “Sync local admin with Ubiquiti SSO” box. FYI.

 

[Klutch9]

I tried a few more things… even though it isn’t necessary, there are 5 ports that I opened that tech support recommended. I seemingly can now reliably manage the system on a WAN via the “Site manager” section on Unifi.ubnt.com, or on the mobile app under “Site manager” (these are both the same thing - looks basically like you’re in a web browser and gives you full access to all settings).

However, if I just open the app on a WAN and click on the site that comes up (not under site manager, but under sites), it will not connect. It shows online, but no connection. This interface is the simpler one that doesn’t give access to all settings, but is more mobile-friendly. I have no idea why it won’t work, but the full UI site manager will now. Some progress at least.

 

[Rand]

If UNIFI cloud access is enabled you shouldn't need to do any port forwarding.

I agree, except when you read online there seems to be a group of people who are having nearly the same problem that had to Fwd ports to make it work


All my current gear has the management on the router so no way I could test anything

Just trying to give the OP ideas.

 

[OVERKILL]

I set the cloud key up using my Ui.com login. How do I check that it’s not registered locally? If I go into Settings - System - Admins, my email address is shown as the login (the one I use for Unifi). In the tab above under Administration, the “Enable remote access” box is checked, as is the “Sync local admin with Ubiquiti SSO” box. FYI.

OK, those settings are a bit different than on my UDM and the Express I was working on, which looked like this:

The top account (green) is my UI account, which I had to transfer the ownership to under Control Plane (Remote Management was already enabled) as the Admin account you see there (local account) was the owner originally.