{"id":2670,"date":"2026-02-02T18:02:22","date_gmt":"2026-02-02T17:02:22","guid":{"rendered":"https:\/\/yellotab.se\/x056\/?p=2670"},"modified":"2026-02-02T20:01:09","modified_gmt":"2026-02-02T19:01:09","slug":"ubuiqity-radius","status":"publish","type":"post","link":"https:\/\/yellotab.se\/x056\/2026\/02\/02\/ubuiqity-radius\/","title":{"rendered":"Ubuiqity + Radius"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Ubiquiti&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>UniFi Cloud Gateway Ultra<\/strong>&nbsp;(UCG-Ultra) har omfattande st\u00f6d f\u00f6r RADIUS, b\u00e5de genom en&nbsp;<strong>inbyggd RADIUS-server<\/strong>&nbsp;och som&nbsp;<strong>RADIUS-klient<\/strong>&nbsp;f\u00f6r externa servrar.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Inbyggd RADIUS-server<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Alla UniFi Gateways, inklusive Ultra-modellen, har en inbyggd RADIUS-server som hanteras via UniFi Network-applikationen.&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Anv\u00e4ndning:<\/strong>\u00a0Den kan anv\u00e4ndas f\u00f6r s\u00e4ker autentisering (802.1X-standarden) f\u00f6r Wi-Fi-n\u00e4tverk (WPA-Enterprise) och VPN-\u00e5tkomst.<\/li>\n\n\n\n<li><strong>Konfiguration:<\/strong>\u00a0Du kan skapa lokala anv\u00e4ndare, tilldela specifika VLAN dynamiskt baserat p\u00e5 anv\u00e4ndare, och konfigurera portar och delade hemligheter (secrets) direkt i UniFi-inst\u00e4llningarna.<\/li>\n\n\n\n<li><strong>Protokoll:<\/strong>\u00a0Den inbyggda servern anv\u00e4nder sig bland annat av PEAP-protokollet, men kan ocks\u00e5 konfigureras med s\u00e4krare metoder som EAP-TLS om certifikat anv\u00e4nds.\u00a0<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Extern RADIUS-integration<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gateway Ultra kan ocks\u00e5 konfigureras som en klient som skickar autentiseringsf\u00f6rfr\u00e5gningar till en&nbsp;<strong>extern<\/strong>&nbsp;RADIUS-server (t.ex. FreeRADIUS, Windows NPS, eller en molnbaserad RADIUS-tj\u00e4nst).&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Anv\u00e4ndning:<\/strong>\u00a0Detta \u00e4r idealiskt om du redan har en centraliserad identitetshantering (som t.ex. Keycloak) och vill att n\u00e4tverks\u00e5tkomsten ska valideras mot den befintliga databasen.<\/li>\n\n\n\n<li><strong>Funktioner:<\/strong>\u00a0Den st\u00f6der avancerade funktioner som\u00a0<strong>RADIUS over TLS (RadSec)<\/strong>\u00a0f\u00f6r s\u00e4krare kommunikation mellan gatewayen och den externa servern, samt\u00a0<strong>RADIUS Change of Authorization (CoA)<\/strong>\u00a0f\u00f6r att dynamiskt \u00e4ndra anv\u00e4ndares beh\u00f6righeter eller koppla fr\u00e5n sessioner.\u00a0<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Kort sagt:<\/strong>&nbsp;UniFi Gateway Ultra erbjuder flexibla RADIUS-alternativ som t\u00e4cker de flesta behov, fr\u00e5n en enkel inbyggd l\u00f6sning till avancerad integration med externa system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vill du veta mer om hur man konfigurerar den inbyggda servern f\u00f6r&nbsp;<strong>WPA2-Enterprise<\/strong>eller hur man kopplar den till en&nbsp;<strong>extern FreeRADIUS-instans<\/strong>?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ubiquiti&nbsp; UniFi Cloud Gateway Ultra&nbsp;(UCG-Ultra) har omfattande st\u00f6d f\u00f6r RADIUS, b\u00e5de genom en&nbsp;inbyggd RADIUS-server&nbsp;och som&nbsp;RADIUS-klient&nbsp;f\u00f6r externa servrar.&nbsp; Inbyggd RADIUS-server Alla UniFi Gateways, inklusive Ultra-modellen, har en inbyggd RADIUS-server som hanteras via UniFi Network-applikationen.&nbsp; Extern RADIUS-integration Gateway Ultra kan ocks\u00e5 konfigureras som en klient som skickar autentiseringsf\u00f6rfr\u00e5gningar till en&nbsp;extern&nbsp;RADIUS-server (t.ex. FreeRADIUS, Windows NPS, eller en molnbaserad [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[1],"tags":[],"class_list":["post-2670","post","type-post","status-publish","format-standard","hentry","category-news"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/posts\/2670","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/comments?post=2670"}],"version-history":[{"count":1,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/posts\/2670\/revisions"}],"predecessor-version":[{"id":2671,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/posts\/2670\/revisions\/2671"}],"wp:attachment":[{"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/media?parent=2670"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/categories?post=2670"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/yellotab.se\/x056\/wp-json\/wp\/v2\/tags?post=2670"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}