Ubiquiti UAP-PRO access point

How to Install a Ubiquiti UniFi Access Point Pro (UAP-PRO) 27

Getting decent WiFi coverage at my house has always been a challenge. The house is three stories (the bottom floor is a daylight basement) and has a footprint of 50′ x 100′. A four car garage extends the footprint even farther to the south, and because I use WiFi-controller irrigation controllers and look things up on my phone while performing auto maintenance, I need good WiFi signal in the garage, too. We also spend a lot of time in the summer in the back yard, so I also want WiFi coverage outside. I’ll be the first to admit it’s a #FirstWorldProblem, but with four kids and a spouse who love their mobile devices just as much as I do, it’s a problem I need to solve.

In the early days of wireless networking, I used a non-wireless Linksys BEFSR41 router with a single Linksys WAP11 to provide 2.5GHz Wireless-B access to the northern half of the house, which included my home office. Believe it or not, you can still find both the Linksys WAP11 and the Linksys BEFSR41 on Amazon… though I honestly can’t imagine why you’d want to. Both devices have been replaced by newer and faster technologies. My first upgrade was to move to a Linksys WRT54G Wireless-G router, which is arguably the most popular consumer-class WiFi router in history. Using third-party firmware like Tomato and DD-WRT, I was able to extend the capabilities of the WRT54G router, and configure four additional units as access points throughout the house to get (mostly) full coverage.

When Wireless-N became the latest technology, I upgraded to the Linksys E4200 dual band router, which broadcast WiFi over the traditional 2.4GHz band, as well as the less-congested 5GHz one. I still needed additional access points throughout the house to get full coverage, so I used a four Belkin 2.4GHz access points to fill the gaps. That meant I had a total of 5 devices transmitting WiFi signal throughout the house.

Using multiple access points throughout the house has its drawbacks. For the best performance, they each have to operate on a separate wireless channel… which isn’t as easy as it might sound. With so many access points available, our mobile devices would often get “confused” about which access point to talk to, and I also could never get the Belkin units to be as reliable as I wanted, even though I constantly tweaked the settings. Taking one or two out of the mix wouldn’t work, since that would leave dead spots in the house. Finally, I decided to stop using consumer-class WiFi devices and step up to industrial-strength wireless products… like the kind used in businesses, hotels, convention centers, and other locations that needed to reliably cover large areas with rock-solid WiFi.

I’d first discovered Ubiquiti wireless devices back in 2013, when I wrote a blog post about configuring one of their outdoor wireless antennas to work with iPhones. I’d purchased one of their small NanoStation LOCO M5 antennas to provide WiFi coverage in the back yard of our cabin… and was floored by its WiFi performance when I still had a strong signal out in the middle of the lake. I’ve been a fan of UBNT products ever since, so when it came time to get a “bigger hammer” to solve my residential WiFi problems at our main house, Ubiquiti felt like the right way to go.

Ubiquiti’s UniFi line of products offers their enterprise-level high-performance WiFi products, including their UniFi Access Points (known as UAPs). And even though Wireless-AC is currently the “latest and greatest,” it’s still in its infancy, and I don’t find it reliable enough (yet) to deploy. So I opted for the UniFi UAP-PRO Enterprise access point, which supports all wireless protocols up to Wireless-N, and broadcasts on both the 2.4 GHz and 5 GHz bands. At a retail price of $229, it isn’t cheap… but I haven’t regretted the purchase for a minute. Plus, they look awesome, like a flying saucer:

Ubiquiti UAP-PRO access point

Ubiquiti UAP-PRO access point

Unlike most residential wireless routers, the UAPs don’t act as a router. They’re just an access point, meaning you’ll still need to keep your existing router running (though I’d disable its WiFi access, which I’ll address in a minute). Also, unlike most residential routers, it’s not a simple “plug and play” install. This is a professional device, and Ubiquiti assumes that a networking professional is installing it. You’re going to have to jump through some hoops you may have never encountered before, and even with this blog post to help you, it might not be a bad idea to bribe one of your geeky friends to help you out.

What’s the Difference Between the UniFi AP (UAP) and UniFi AP-PRO (UAP-PRO)?

So what’s the difference between the Ubiquiti UniFi UAP vs. the UniFi UAP-PRO? The easy answer is “about $130.” But what you probably care about is whether it’s worth spending $79.99 MSRP for the UAP (or around $70 on Amazon) vs. $229.00 MSRP (or around $200 on Amazon) for the UAP-PRO.

Visually, the two units look identical — except that the UniFi UAP’s LED light ring glows green when it’s happy, while the UniFi UAP-PRO glows blue.

In an “optimal environment,” both units have a 2.5 GHz range of up to 400 feet, but the UAP’s max speed in that band is 300 Mbps, while the UAP-PRO supports 2.5 GHz speeds of up to 450 Mbps.

But the biggest different is that the UAP only has a 2.5 GHz antenna, while the UAP-PRO has both a 2.5 GHz and a 5 GHz antenna, meaning it also supports 300 Mbps speeds in the 5GHz range. And because the UAP-PRO is more powerful, it runs on 48V power while the standard UAP runs on 24V power.

In general, operating in the 5 GHz range is almost always superior to the 2.5 GHz range, particularly in neighborhoods where other WiFi networks exist. The 5 GHz channels are much “wider,” and therefore the 5 GHz range is far less congested, meaning there’s less interference and you’re fare more likely to achieve the maximum speeds due to reduced interference in that frequency range.

If you only have one or two wireless devices in your house that support the 5 Ghz band (newer mobile devices like iPhones, iPads, Android phone and tablets, or most modern laptops), then you’ll probably be fine with the standard UAP. But because we have a large family, all of whom have multiple 5 Ghz-capable devices, it was worth the extra money for the UAP-PRO.

In most instances, I recommend the UAP-PRO over the UAP. But if you think you’ll be OK with just the standard UniFi AP, go ahead and get it. However, if any part of you wonders if you’d regret not having the 5 GHz capable UniFi AP Pro down the road, or if you have a lot of Apple or Android devices in your family, spend the extra money and run both network bands in your house.

Choosing the Ubiquiti UAP-PRO Location

To get the best WiFi coverage, you should locate your WiFi antenna in the highest and most central location possible at your house. For me, this is the hallway on the top floor, which is (thankfully) accessible from the attic. I have network cables running through my attic, but none of them actually plug in up there, so I had to clip one of them, put RJ-45 network jack ends on both sides of the cable, and plug both ends into a 5-port network switch (I recommend the Netgear ProSAFE GS105). That left me three open ports on the switch — one of which I’d need to use for the UAP-PRO, and the other two for future expansion. If your existing router is located anywhere near where you want to install your UAP-PRO, it will be easiest to run a network cable from any of the LAN switch ports (not the WAN port) of your existing wireless router to the desired install location.

Mounting the UAP-PRO to my ceiling was pretty easy. I centered it visually with the hallway lights, checked from the attic to make sure that space was open on the other side (no air ducts or studs), then mounted the included plastic bracket into the ceiling drywall using the included molly bolts and screws. I drilled a 1 inch hole where it’s open in the bracket, then fed a network cable down from the attic and let it hang there. I didn’t use the included metal bracket piece in the kit, because it’s designed for industrial acoustic ceiling tile.

Powering the Ubiquiti UAP-PRO

The UAP-PRO doesn’t have a separate power cord. It uses “power over Ethernet” (or PoE), which requires either a special type of switch that provides 48V of power over the Ethernet cable in addition to its network connection, or you can just use the included 48V power-injector (which I recommend). Here’s what the power injector looks like:

Ubiquiti 48V power inector

Ubiquiti 48V power inector

Because I like having my network equipment protected, I purchased an APC BE550G battery backup unit to plug into an available power port in the attic. I plugged my 5-port network switch into the battery backup, as well as the plug for the Ubiquiti power injector. I plugged the long Ethernet cable (that was currently dangling into my upstairs hallway) into the POE port of the injector, then ran a shorter Ethernet cable between the LAN port of the injector and one of the open ports on the 5-port switch. I now had power and network connection ready to go.


I went back into the hallway, and flipped the UAP-PRO over to expose the main Ethernet port, as well as the reset button and secondary Ethernet port:

UAP-PRO connections

UAP-PRO connections


I plugged the dangling Ethernet cable coming from the POE port of the injector in the attic into the Main/48V port. After a few moments, the LED ring on the front of the unit lit up, indicating that the unit was powering up. I pushed the cable up through the hole into the attic, and twisted the UAP-PRO into place on the bracket. It looked pretty cool!

Ubiquiti UAP-PRO mounted to ceiling

Ubiquiti UAP-PRO mounted to ceiling

Configuring the Ubiquiti UAP-PRO

Remember when I said the UAP-PRO was not a consumer device? Here’s where that becomes an issue. The UAP-PRO doesn’t have its own a web interface to configure, so you have to install a piece of software called the UniFi Controller on one of the computers that’s physically connected to your local network or existing router with an Ethernet cable. You can download the UniFi Controller software (for Windows, Mac, or Linux) directly from Ubiquiti at this link.

You won’t need to keep the UniFi Controller software running all the time, but you will need to have it running to set up the UAP-PRO, or change any settings later (don’t worry… you probably won’t have to change anything later). I recommend running it on a desktop system, and again… it must be connected via a network cable to the same physical network as the UAP-PRO.

After downloading and installing the software, run it. It will take a minute to initialize. It’s actually setting up a private web server on the local computer that you’ll access with your web browser. When it’s running, it will prompt you with a button to “Launch a Browser to Manage Wireless Network” to access the Controller.

Your UAP-PRO will be in a condition called “Awaiting Adoption,” meaning it hasn’t been “adopted” by (or added to) any network yet. If the UniFi Controller software “finds” the UAP-PRO right away and attempts to adopt it, great. Just follow the steps in the wizard to get up and running: along the way you’ll have to create a new admin user and password (this is only to configure the UAP, and not the same thing as the network name or password required for devices to join the WiFi network), and you’ll answer some questions like what network name you want to use, what password people will use to access the network, etc.

But if the UniFi Controller software doesn’t find the un-adopted UAP-PRO, don’t worry. It didn’t find mine right away, either. Just keep hitting “Next” or “Skip” to get into the main Dashboard area of UniFi Controller. Once in the Dashboard, click on the Devices icon in the left column. If you see a UniFi AP Pro in the list waiting for adoption, go ahead and hit the ADOPT button. If you don’t see anything, look near the bottom of the screen and click the Settings icon. Then click the Controller menu item on the left side, and make sure “Make controller discoverable on L2 Network” is checked. Hit APPLY then the X at the top of the screen to go back to the Dashboard. Now go back to the Devices icon and see if your UAP-PRO is there yet. If it’s not, check all your connections, make sure it’s powered, and temporarily turn off the Windows Firewall (you can find it in the control panel). That might make it easier to find.

If you still can’t find it, there’s not much else I can tell you that will help, besides verifying everything I’ve explained to this point. Eventually, it will show up in the Devices list, and you’ll be able to press the ADOPT button. It will take a while for it to join your network. Once it does, go back into the Settings icon (at the bottom of the Dashboard) and go through the following Menu items:

Site: Choose any site name you want (like Jenkins House), then choose your Country and the local time zone. I recommend turning on Automatically upgrade AP firmware. Leave everything else at the defaults.

Wireless Networks: If the Controller didn’t auto-detect your UAP when it first started, you’ll have to manually set up your WiFi network here. Click the CREATE NEW WIRELESS NETWORK button. Choose a name for your network to broadcast (also called the SSID). It’s OK for you to use the same network name that you were previously using on your wireless router, and as long as you also use the same security type and password in the next step, all your devices should “just work.” Or, if you want to make a separate network name, you can do that. Make sure the Enabled box is checked, choose WPA-PERSONAL for the Security, and enter a Security Key (the password people will need to join your network). Don’t check the Guest Policy box, or worry about any of the Advanced Options. Press SAVE when you’re done.

Exit back out to the Dashboard with the X in the top right corner. If you click on the link of your UAP, you’ll see its status in the right column. It might say something like “Provisioning,” which means it’s saving the stuff you just set. It might also indicate that it’s updating its firmware, since you just turned on automatic firmware updates. If that’s the case, wait a few minutes for it to finish up. When it’s showing green and “Connected,” it’s ready for you to test.

The UAP-PRO should now be showing a blue LED ring, which looks especially awesome in the dark:

Happy UAP-PRO in the dark

Happy UAP-PRO in the dark

Disable WiFi on your Existing Router

Because the UAP-PRO is powerful enough to cover your entire house, I recommend disabling the WiFi broadcast from your current wireless router. You still need it to do its routing duties, so you can’t just unplug it from your network. You’ll have to sign in to the admin interface of your router (that will vary depending on your device), find the Wireless settings, and turn it to “off” or “disabled.” Contact your device’s manufacturer if you need help, or do a web search for how to do it on your particular device.

Enjoy Your Upgraded WiFi!

At this point, all that’s left is for you to grab your wireless devices and walk around the house marveling at how awesome your WiFi coverage and speeds are. You really will notice a huge difference. Go outside and test it there, too. I had planned to use a second antenna to blast WiFi into my back yard, but a single UAP-PRO covers more than enough area for our needs… even outside the house.

If you changed your network name, password, or security type, you may need to tell your wireless devices to “Forget” the old network and join the new one. But you’ll only need to do that once. You can close down the UniFi Controller software — it doesn’t need to be running for the UAP-PRO to work. But if you want to check the status of your WiFi antenna, or see who’s connected to it, you can run the UniFi Controller at any time.

If you’re reading this article and trying to decide whether to upgrade your WiFi coverage, I cannot recommend the UniFi UAP-PRO Enterprise access point highly enough (Amazon has the best deals on them). It’s one of the best purchases I’ve made all year. Since installing it, nobody in the family has complained once about WiFi coverage or speeds anywhere in the house. That’s worth the $200 right there.

Good luck, have fun, and enjoy your enterprise-class WiFi!

If you run into any trouble, I highly recommend checking out the Ubiquiti forums. I’m sorry, but I can’t answer support requests in the comments or via email. Contacting Ubiquiti directly, or using their excellent support forums, is your best option if you run into issues not addressed by this article.

But if you have other questions, comments, or feedback, I welcome it below!

  • Magnus

    Hi, when you have a ‘small’ setup like this I recomend to turn off “Uplink connectivity monitor” in Settings, Site. This will make the AP’s work better when the controller computer is not available.

    To make your wifi more secure I recommend to set WPA mode to WPA2 only AES/CCMP only.

    If you wan too you can limit connection on a group basis and set the group to be on specific SSID WLANS, great when you have kids watching youtube in HD ^^


    • Hi, Magnus. All good points. I have my controller running on a server 24/7 (because I’m using a Guest Portal), so I left it on.

      I believe WPA2/AES i the default, but never a bad idea to manually verify that when setting it up. For those reading this, AES is the only way to go with WPA2. If you use TKIP, you’ll suffer lower speeds.

      I didn’t take the SSID WLANS group approach like you did, but instead added all their mobile devices (based on MAC address) to a “Kids’ Mobile Devices” group, then capped their download speeds. I capped all guest devices, too. 🙂

  • Well rats. I can’t see it in my list of available devices (which is empty). Hoped it would be straightforward. Guess I have to do more research.

    For the record, I made my own Ethernet cables and they test out fine going direct from my existing Verizon router to this laptop. I’m using the POE injector supplied with the AP. When I plug it all in, the AP blinks white and eventually is solid white. Followed all instructions above including “Make controller discoverable on L2 Network.” Will post resolution once found…

  • Well, I turned off Windoze Firewall and it found it…..

    • Ah – bingo. 🙂

      • This was just a test run. Right now it is in the same room as my original Verizon router (piece of junk). The new AP is on the floor (not an optimal location….) and going through several walls it has a much better signal strength than the existing Verizon router (WiFi Analyzer app on Android). That said, presently it has not improved my throughput. Then again, from my son’s room where his connectivity to the Verizon router was very sketchy and always dropping out, he has excellent signal and almost the same d/l and u/l speed as if he were in the room where the new AP is. This is a successful test, now I just have to run Cat6a through the walls and under the floor in the attic and drill a hole in the plaster ceiling in the hall. That’s all.

        • LOL. Oh, is THAT all? 🙂

          If you’re thinking about a new router, go with the Ubiquiti EdgeRouter Lite. Again, it’s pro-sumer, but it’s AMAZING.

          • DanBCook

            UBNT now markets the UniFi Security Gateway (Enterprise Gateway Router with Gigabit Ethernet). Would you still pick an EdgeRouter Lite or PoE over that?

          • The Security Gateway is a great product. It’s actually the same internal hardware as the ER-Lite, just different software. If you’re the type who likes to set it up and forget about it, the Security Gateway is a great choice. If you’re like me and like more command-line ability to tinker, go with the EdgeRouter. But to be honest, there’s no wrong answer between the two. 🙂

  • You’d think so, but not in my case. I’m also in a three story house with a basement. We still get crazy strong signal down there. It’s easy to add a second one later if it doesn’t reach, but I think you’ll be just as pleasantly shocked as I was! 🙂

  • Pingback: Replace Your Google Fiber Network Box with a Ubiquiti EdgeRouter Lite()

  • Chandler Newby

    Have you considered trying the UniFi AC AP? I think I want to do this, but I would want 802.11AC.

    • Hi, Chandler. Yes, I did consider it, but for production environments (whic his what I consider our home WiFi) I like to wait until the firmware has a few revs before I jump on a new bandwagon. I will eventually replace this one with an AC, and then “hand me down” the UAP-PRO to our cabin. 🙂

      • Chandler Newby

        Makes sense. It’ll be a while before I get around to implementing this. Maybe by then you’ll have a review of them up. 😉 Or I’ll install them and let you know how they work.


  • 73roderick

    I have a single floor house, replacing the wifi on my crappy google fiber router. However, the highest point in my house would be the vaulted ceiling family room in the center of the house, but then the AP will be mounted at an angle. Would it be better for me to put it in a hallway, so it’s flat? Also, it seems like in my scenario if it was at the top of the vault, it would have to go through lots of ceiling to get anywhere in the house, as opposed to just down the hallway. Thoughts?

    • If it’s one story, I’d put it somewhere central, and wall-mounted will be fine. It’s powerful enough. 🙂

  • On the UAP-PRO, I get WiFi speeds on my MacBook Air in the 120-140+ Mbps range, when it’s on the 5GHz antenna. I just moved the UAP-PRO out to our cabin and installed the UAP-AC-PRO here at the house, and I’m seeing internal test speeds at almost 400 Mbps. But I only have 150 to the outside world there, so Internet speed tests max out based on the cable modem pipe. Go UBNT and never look back. 🙂

  • Hi, Faisal. If the steps in this article aren’t enough to help you, I recommend visiting the UBNT community forums.

  • Kristin Bradham

    Thank you!

  • James S

    Hi Steve,
    I just got a AC AP outdoor unit, I already have a cable termination to an android box which I can tether and get the connection to a laptop that I can use to redistribute the internet via the ethernet port.
    The main question is, how is the configuration to distribute the WAN while in the controller because I can broadcast my Wifi networks but it is not passing through my internet to the clients, or is it a must to get another unifi product like the edge router or USG to be able to do this.

  • I actually just bought a second one for our basement. I think you’ll enjoy having three.

    Though I’d recommend using a UBNT USG and CloudKey. The interface you get for admin-ing internal WiFi connections is awesome. 🙂

  • I agree – if the pretty interface is what you want (and it’s no joke… it is PRETTY), then a USG is a great choice. The ER is better for those who like to tinker. But for the “set it and forget it” crowd? USG is a great choice.

  • Jamie Browning

    Hi Steve,
    Great article.
    Sorry for the long post, hopefully some good questions to chew on.
    Have you installed UAP-AC-M & UAP-AC-PRO? If so any pointers?
    My issues listed below.

    My setup is ISP supplied Modem Router (Wifi Off, DHCP on)
    Ethernet to the PRO, Wireless Downlink to M1 and M2. Had M2 Uplinked to M1, but got constant isolations. So put M1 & M2 both under the PRO.
    PRO on second story, M1 on Ground Floor M2 in Basement.
    M2 –> PRO signal (82% (-57 dBm)) is better than M2 –> M1 (77% (-59 dBm))
    Controller running on MAC (V5.4.11), might move to linux server, would prefer controller on a switch or the like.
    Connectivity Monitor Enabled, uplink failover disabled.
    All APs on: Auto Channel / 2G – HT20 / 5G – VHT40
    Channels currently being used: Pro – 6 & 157 / M1 – 11 & 157 / M2 – 1 & 157.
    Should my 2G channels be the same?

    It was a bit tricky to setup.
    Once I got everything running with reasonable reliability, errors I am getting:
    Controller fails to start, but in browser it seems to work just fine, Controller Says:
    Initializing UniFi Controller …
    Starting UniFi Controller …
    Server taking too long to start…
    Start-up failed.
    Every 10-30 minutes I get a Heartbeat Missed error.
    Alerts: constant disconnections mainly on M1 & M2, a few times on the PRO
    Both M1 & M2 get this error: failed SSH host key verification, a few times a day.
    Quite a lot of retires and drops on all kit, mainly on the PRO 2G 5/15% retries/drops

    What Switch can I buy that will act as a more reliable Controller than my MAC assuming this is my issue.
    IF I ethernet my M1 & M2 will this be a more stable/reliable and bandwidth friendly network. If I do shall I just run standard ethernet to my M1 & M2 and then through the POE adapter to the AP, or is it worth me buying a POE switch? (10-15m)
    Can I use a PowerEdge Switch?
    What is a better configuration? Run wired to each AP? will this mesh?

  • Cindy N

    Thanks, Steve! This info was fantastic. I bought the UAP-AC-Pro for our 110 year old lathe and plaster walled two-story house. The thing is like a tank in allowing any wifi to penetrate the walls.
    I was having issues getting it configured and your blog saved the day. The person who suggested I purchase this model failed to tell me the UAP’s were layer two devices and required the router to obtain the IP address. Had I not read your blog, I would still be trying to figure out why nothing was working.
    I may eventually upgrade the current router (Linksys E3200) to the USG you suggested in the comments. We are on satellite, very slow satellite, and I could use any increase in speed I can squeeze out. If you have any configuration tweaks that will make downloads quicker I would love to hear them. Saving photos of my grand babies takes forever.
    Thanks again for sharing your expertise. Now this old Grammy is back online.

  • Pingback: HDB BTO 4BR @ McNair Road – Connectify()