Ubiquiti UniFi + WiFi Marketing: Everything You Need to Know

Why UniFi Is So Common in Hospitality

Ubiquiti's UniFi product line dominates independent hospitality networking for three reasons: competitive pricing (an EAP-equivalent UniFi AP costs £80–£180), a powerful centralised management interface, and a sufficiently technical but non-enterprise-level setup that suits venues with IT-capable owners or a small IT support contractor.

The UniFi ecosystem — access points, switches, security gateways, and the UniFi Network Controller (UNC) — gives venue operators professional-grade network management with a reasonably accessible interface. For WiFi marketing purposes, the critical feature is UniFi's guest portal and external captive portal redirect capability.

How UniFi's Guest Portal Redirect Works

UniFi supports two approaches to captive portals:

Built-in guest portal: A simple form hosted on the UniFi controller itself. Functional but limited — it does not integrate with email marketing platforms, does not support custom branding beyond basics, and does not capture GDPR-compliant opt-in consent in a marketing-grade way.

External portal server (the right approach for marketing): UniFi redirects unauthenticated guests to a URL you specify — your VoqadoWiFi portal URL. The guest completes the form on the VoqadoWiFi-hosted page. VoqadoWiFi then calls the UniFi controller API to authorise the guest's MAC address for network access. This approach gives you full design control, GDPR compliance, and Mailchimp integration.

What You Need From UniFi

To configure the external portal redirect in UniFi Network Controller:

1. Create a guest SSID (Settings > WiFi > Add New WiFi Network > enable "Guest Network")
2. Enable the guest portal on the guest network: Settings > Guest Portal > Enable
3. Select "External Portal Server" and enter your VoqadoWiFi portal URL as the redirect destination
4. Note your UniFi Controller URL and site name — VoqadoWiFi needs these to call the auth API
5. Create a read/write API key in UniFi Network Controller under Settings > Admin > API

Walled Garden Configuration

Before a guest authenticates, their device can only access the captive portal URL (and any domain you whitelist in the "Pre-authorisation access" / Walled Garden list). Ensure the following domains are whitelisted:

• Your VoqadoWiFi portal domain
• Any CDN or asset domains loaded by the portal
• Mailchimp's opt-in submission endpoint (if applicable)
• Google/Apple social login domains (if using social login)

Incomplete walled garden configuration is the most common cause of portal load failures. If the portal page loads but form submission fails, the submission endpoint is likely not whitelisted.

UniFi Cloud vs Self-Hosted Controller

UniFi supports two controller modes:

UniFi Network Application (self-hosted): Runs on a local server (a Raspberry Pi, NAS device, or dedicated machine). The controller is only accessible from the local network unless you expose it to the internet via port forwarding. VoqadoWiFi's API calls to the controller must be able to reach it from the internet — which requires either port forwarding or use of UniFi's Teleport/VPN feature.

UniFi Site Manager / Cloud (cloud-hosted): Ubiquiti's cloud-hosted controller service. Accessible from anywhere with the correct API credentials. Simpler for VoqadoWiFi integration because no port forwarding is required.

Recommendation: For new deployments, use UniFi Cloud. For existing self-hosted deployments, configure port forwarding on port 8443 (default UniFi controller port) and ensure VoqadoWiFi's IP ranges are whitelisted in your firewall rules.

Data Passed to the Marketing Portal

When UniFi redirects a guest to the external portal, the redirect URL includes the following parameters (UniFi Network 8.x):

• ap_mac: Access point MAC address (identifies which AP the guest connected to — useful for multi-location venue identification)
• client_mac: Guest device MAC address (used for authentication after form completion)
• ssid: The name of the guest network
• redirect: The URL the guest was trying to reach before being intercepted

VoqadoWiFi uses these parameters to identify the venue, the location, and the device for session tracking.