Wi-Fi AP — UniFi / Aruba

Basic Information

Field	Value
Category	Infrastructure
Owner	Filip Kohák
Deputy	Artem Ryzhkov
SLA	8x5
Deployment	On-prem (access points throughout the office)

Description

Corporate Wi-Fi infrastructure consists of Ubiquiti UniFi and/or Aruba access points (APs) managed centrally via a management console.

SSID overview:

SSID	Purpose	Authentication	VLAN
Etnetera	Corporate employees	802.1X (via FortiNAC)	VLAN 20
Etnetera-Guest	Guests, visitors	Pre-shared key (rotating)	VLAN 30
Etnetera-IoT	IoT devices, printers	Pre-shared key	VLAN 40

Access and Login

• UniFi Network Controller: https://[unifi-controller-ip]:8443
• Aruba Controller: https://[aruba-controller-ip]
• Login: admin account (stored in Passbolt)

Procedure — Add New AP (UniFi)

1. Physically connect AP to PoE switch (802.3af/at)
2. AP appears in Controller as Pending Adoption
3. UniFi Controller → Devices → Adopt
4. AP auto-configures based on the site profile (SSID, VLAN, radio channels)

Procedure — Change Guest Wi-Fi Password

1. Log in to Controller
2. Navigate to SSID Etnetera-Guest → Edit
3. Change Pre-Shared Key
4. Save — applies to all APs in the site
5. Notify reception with the new password (or update QR code)

Troubleshooting

Problem	Solution
AP offline	Check PoE power on switch; verify network connection (ping AP IP); restart AP via Controller
User cannot connect (802.1X)	Check RADIUS logs in FortiNAC; verify user's AD groups; check device certificate
Slow Wi-Fi	Check channel utilization in Controller; consider changing channel or bandwidth
Guest Wi-Fi unavailable	Check VLAN 30 on switch (trunk port must include VLAN 30); verify DHCP scope for VLAN 30

Related Guides

• FortiNAC — 802.1X authentication for Wi-Fi
• DHCP — IP address assignment for Wi-Fi clients
• FortiGate — firewall policies for Wi-Fi VLANs

Contact

• Owner: Filip Kohák — Slack @filip
• Deputy: Artem Ryzhkov — Slack @artem
• Wi-Fi issues: Slack #it-help