User Manual

32
UniFi Controller User Guide
Ubiquiti Networks, Inc.
Chapter 3: Using the UniFi Controller Software
Advanced
Logging Check the box to enable logging (disabled by
default).
States Select each state that will apply to the rule (none
are selected by default): [Please verify this all descriptions
below; they are based on info found online]
• New The packet is the first packet seen in a new
connection.
• Established The packet is part of an existing
connection which has seen packets in both directions.
• Invalid The packet cannot be identified or its state
cannot be determined.
• Related The packet is part of a new connection that is
related to an existing connection.
P2P Check the box to disable P2P (unchecked by default).
IPsec Select the criteria for IPsec packet filtering:
Don’tmatch on IPsec packets (default), Match inbound IPsec
packets, or Match inbound non-IPsec packets.
Source
Source Type Select the type of source:
• Address/Port Group The source is an address/port
group. Specify the following:
- Address Group Select an address group from the
drop-down list.
To create a new address group, click Create Address
Group, and then fill in the Name and Address fields.
Toadd another address to the group, click Add. When
finished adding addresses, click Save.
- Port Group Select a port group from the drop-down
list.
To create a new port group, click Create Port Group,
and then fill in the Name and Port fields. To add
another port to the group, click Add. When finished
adding ports, click Save.
• Network The source is a network. Specify the following:
- Network Select the network and the IP group
(ADDRv4) or subnet (NETv4) from the drop-down lists.
MAC Address Enter the MAC address of the source.
Destination
Destination Type Select the type of destination:
• Address/Port Group The destination is an address/port
group. Specify the following:
- Address Group Select an address group from the
drop-down list.
To create a new address group, click Create Address
Group, and then fill in the Name and Address fields.
Toadd another address to the group, click Add. When
finished adding addresses, click Save.
- Port Group Select a port group from the drop-down
list.
To create a new port group, click Create Port Group,
and then fill in the Name and Port fields. To add
another port to the group, click Add. When finished
adding ports, click Save.
• Network The destination is a network. Specify the
following:
- Network Select the network and the IP group
(ADDRv4) or subnet (NETv4) from the drop-down lists.
Save Click to apply changes.
Cancel Click to discard changes.
Create or Edit a Firewall Group
Name Enter a name for the group.
Type Select the type of group to create: Address or Port.
Address (Available if Type is set to Address.)
Port (Available if Type is set to Port.)
Add Click Add to add another address or port to the
group.
Save Click to apply changes.
Cancel Click to discard changes.
Settings > Guest Control
The Guest Control screen displays the following sections:
• Guest Policies (see below)
• “Access Control” on page 39
• “Hotspot” on page 36 (for Hotspot authentication)
• “Access Control” on page 39