Table of Contents

Ubiquiti - Ports

The following ports are used by UniFi:

Ingress Ports Required for L3 Management Over the Internet

These ports need to be open at the gateway/firewall as well as on the controller host.

This would be achieved by creating port forwards on the gateway/firewall where the controller host is located.

PortProtocolDescriptionComments
3478UDPSTUN.
6789TCPUniFi mobile speed test.
8080TCPunifi.http.portDevice inform. Device and controller communication.
8443TCPunifi.https.portController UI / API as seen in a web browser.
8880TCPportal.http.portPortal redirect port for HTTP.
8843TCPportal.https.portPortal redirect port for HTTPs.

Local Ingress Ports

PortProtocolDescriptionComments
1900UDP“Make controller discoverable on L2 network” in controller settings.
3478UDPSTUN.
5514UDPRemote syslog capture.
5656-5699UDPAP-EDU broadcasting.
6789TCPUniFi mobile speed test.
8080TCPunifi.http.portDevice inform. Device and controller communication.
8081TCPunifi.shutdown.portFor management purpose.
8443TCPunifi.https.portController UI / API as seen in a web browser.
8880TCPportal.http.portPortal redirect port for HTTP.
8843TCPportal.https.portPortal redirect port for HTTPs.
10001UDPDevice discovery.
27117TCPunifi.db.portLocal-bound port for DB server.

Egress Ports Required for UniFi Remote Access

PortProtocolDescriptionComments
443TCP/UDPRemote Access service.
3478UDPSTUN.
8883TCPRemote Access service.

References

https://help.ui.com/hc/en-us/articles/218506997-UniFi-Ports-Used

https://help.ui.com/hc/en-us/articles/218506997

http://wiki.ubnt.com/UniFi_FAQ#How_can_I_run_UniFi_Controller_on_different_ports

https://community.ui.com/questions/Confused-Which-Ports-to-Open-on-the-Firewall/7ce35348-9b4a-42ab-90e4-d006dad2f7f2