When the Uniquiti APs were setup (there are about 7 APs), I managed them through web interface. Firewall died. I connected Sonic firewall to my switch and enabled DHCPv4. Devices came online. Wired devices have internet access. The APs, broadcast the SSID, but when I connect I get no internet access.

Do I need to assign the APs the same static IPs that were assigned to them from the other firewall?

The sitemanager that I used to manage the APs in the past is gone. What tool can I use to manage the APs now?

5 Spice ups

Your APs were likely using a DHCP option 43

See here

Remote Adoption (Layer 3) – Ubiquiti Help Center

3 Spice ups

Will I need to enable option 43 on the Sonic firewall?

1 Spice up

You need to configure option 43 for the VLAN you want the APs on. Configure each VLAN if they sit on different networks.

2 Spice ups

First off, anything i need to never change its IP address gets statically assigned by me. Why not just do that?

2 Spice ups

Same. Network gear of any kind is always a static IP in my book.

For OPs question we’d have to know if there were multiple VLANs involved. Are the APs on the correct VLAN?

Are you saying you no longer have access to the Ubiquiti management? If so, then you should spin up a new one and adopt the APs and configure them with the same SSID/passwords they had before.

3 Spice ups

the APs don’t have a web interface. You managed them through a Unifi Network Controller (which does have a web interface)

Was your firewall that died a Unifi device? Like a Dream Machine? because if it was it was also the controller that managed all your other Unifi devices.

What are you using as the Unifi Controller?

2 Spice ups

There’s one network, no VLANS. I should have included that. Thanks

1 Spice up

Then you don’t need the DHCP option.

That’s only needed for VLANs.

Do your APs have the correct gateway and can they see the gateway.

Is your firewall passing traffic from them?

1 Spice up

It was a Zyxel, it wasn’t a Unifi device. A computer was hosting the controller, but I need to set all of that back up.

1 Spice up

I’ll re-check the firewall settings. The firewall might not be passing traffic through. When I disconnect the firewall and plug everything directly to the switch without the firewall, the APs work.

1 Spice up

Good point! I should start with the basics of assigning statics to everything.

1 Spice up

The APs do not need an IP or to communicate with the controller to actually work - on boot they will just work unless reset.

So if you have no vlans the possible explanations are there was filtering on the SSID such as guest policy, or the Aps are just not connecting to the switch correctly.

If your existing controller (software on a server) is gone you will need to reset all devices and start again. The quickest thing may be to setup a new controller (network app installed on a server/pc) and reset 1 AP - adopt that on new network app and setup Wifi and test. then repeat for all APs and also for the switches.
Very quick if you have a simple network with no vlan and just one IP range.

2 Spice ups

Is there a reason you would plug them in to the firewall directly, the switch seems like that’s where they should be if they work.

I didn’t see this piece before, but why are you connecting them this way?

2 Spice ups

If you don’t have a controller there is no way to manage the APs.

Step one is getting your controller back.

If you have a copy of the last backup you should be able to stand up a controller quickly. if you don’t have that data you are going to end up having to factory reset everything and start over.

1 Spice up

I didn’t see this either…these are POE units, if the firewall ports aren’t pushing power how do you expect the AP’s to stay powered up? Are you running injectors to them?

1 Spice up

I removed the firewall and it wasn’t connected to the switch at all. Then I connected the firewall by running cable to ISP supplied modem and another cable to the switch to connect the firewall to the switch. The switch is POE.

If you had a PC that had the Uni-Fi controller running, make sure this PC is plugged into the switch and powered up. If it has a static IP assigned, confirm no IP conflict with any other device. The additional SonicWall ports usually need programming.

That would explain no internet, then.

I’d leave the APs on the switch if they are doing what you want.

Probably your IP and gateway is not correct. A good rule of thumb is always assign static IPs onto the proper network interfaces this way your network topology, layout is always in alignment. You also properly control the SSID and the vlans they can go into if desired. Avoid DHCP scopes and stuff like that to try and control. Easier way to begin network segmentation and deploy proper vlans if you choose to.