December 2024 – LinuxLinus

Unifi Site-to-Site-VPN with Wireguard

This article describes how to establish a Site 2 Site connection with Unifi components from Ubiquiti via Wireguard. As of now (12.2024), the VPN connection must be added manually. However, there no access to the console via SSH is necessary.

Network overview

IP VPN-Gateway and
Site 0  (010-RAT)     10.11.0.1
--------------------------------
Site 1  (011-LST)     10.11.0.2

################################

Networks Site 0 (VPN Server)
10.10.60.0/24
--------------------------------
Netwokrs Site 1
10.0.200.0/24

Markdown

Unifi network components automated reboot

As some of our Unifi network components have very long uptimes, we need a script to restart them automatically.
First, ICMP ping is used to check which devices are online in the network and then they are restarted. There is a waiting time between the restart of the individual components, so that switches or APs start up again completely before the next device is restarted.

The latest version is always available on Github: https://github.com/LinuxLinusDE/unifi

.ssh permissions

chmod 600 .ssh/id_rsa
chmod 600 .ssh/id_rsa.pub
chmod 600 .ssh/authorized_keys
chmod 600 .ssh/known_hosts
chmod 600 .ssh/config