User Manual
25
UniFi Controller User Guide
Ubiquiti Networks, Inc.
Chapter 3: Using the UniFi Controller Software
Add or Edit a NAI Realm
Name  Enter the name of the NAI realm.
Realm Enabled  Check the box to enable the NAI realm. 
This option is disabled by default.
EAP Method  Select the Extensible Authentication Profile 
(EAP) method: EAP-TLS, EAP-SIM, EAP-TTLS, EAP-AKA, or 
EAP-AKA’. 
(List of authentication types)  Displays a list of 
authentication types that have been defined for this NAI 
realm list entry:
•  Auth Type  Displays the authentication type.
•  Auth Subtype  Displays the authentication subtype.
•  Actions  Click 
to delete the authentication type 
from the list. 
To add an authentication type to the list, fill out the 
AuthType and Auth Subtype fields, and then click 
ADD AUTH
. 
The available authentication subtypes vary depending on 
the value of Auth Type, as shown in the following table:
Auth Type Auth Subtype
Non-EAP Inner Authentication PAP, CHAP, MSCHAP, MSCHAPv2
Inner Authentication EAP Method None
Credential SM, USIM, NFC Secure Element, 
Hardware Token, Softoken, 
Certificate, Username/Password, 
Anonymous, Vendor Specific
Cancel  Click to discard your changes.
Submit  Click to save your changes to the NAI realm list 
entry.
Domain Name List
(List of domain names)  Displays a list of domain names 
that have been defined for this NAI realm list entry:
•  Name  Displays the domain name.
•  Actions  Click 
to delete the domain name from 
the list. 
To add a domain name to the list, fill out the Name field, 
and then click 
ADD DOMAIN NAME
. 
Roaming Consortium List
(List of roaming consortiums)  Displays a list of roaming 
consortiums that have been defined for this NAI realm list 
entry:
•  Name  Displays the name of the roaming consortium.
•  Organization ID  Displays the roaming consortium’s 
IEEE-assigned organization ID.
•  Actions  Click 
to delete the roaming consortium 
from the list. 
To add a roaming consortium to the list, fill out the 
Name and Organization ID fields, and then click 
ADD ROAMING CONSORTIUM
. 
3GPP Cellular Network List
(List of 3GPP cellular networks)  Displays a list of 3GPP 
cellular networks that have been defined for this NAI realm 
list entry:
•  Name  Displays the name of the 3GPP cellular network.
•  MCC  Displays the Mobile Country Code (MCC).
•  MNC  Displays the Mobile Network Code (MNC).
•  Actions  Click 
to delete the 3GPP cellular network 
from the list. 
To add a 3GPP cellular network to the list, fill out the Name, 
MCC, and MNC fields, and then click 
ADD 3GPP CELLULAR NETWORK
. 
Settings > Networks
Configure the networks for each site. 
Networks
Name  Displays the network name.
Purpose  Displays the purpose of this network: Corporate, 
Guest, VLAN Only, Remote User VPN,
 Site-to-Site VPN, or 
VPNClient.
Subnet  Displays the IP address and prefix size.
VLAN  Displays the VLAN ID, if applicable.










