How to set up a UniFi Cloud Gateway Ultra

The UniFi Cloud Gateway Ultra is Ubiquiti’s most budget-friendly gateway and it’s surprisingly capable. You don’t need to spend hours tinkering or watching a dozen videos to get it working. Here’s how to set it up, step by step.

Let's dive in!

Before we dive in, please don't self-host your UniFi Controller if you take care of client networks. Sooner or later this will cause issues! It's fine for home users, but definitely not recommended for IT service businesses and MSPs. If you want secure, reliable and a scalable hosting solution check out UniHosted. )

What the Gateway Ultra can and can’t do

This gateway runs UniFi OS and comes with the Network application pre-installed. That means it supports features like IDS/IPS, Layer 7 firewall, and VPN. It does not support UniFi Protect, Talk, or other UniFi apps. There’s no NVR slot, and no support for connected cameras. If you plan to run UniFi Protect, you’ll need a more advanced gateway.

Still, for the price, the Cloud Gateway Ultra gives you enough for a secure, modern network.

Check our video

Rather watch a video than read this article? Our own Fernando created a video that shows you how its done!

What’s in the box

You’ll get the gateway itself, a power adapter, and an ethernet cable. That’s all you need to start.

Step 1: Plug it in

  1. Connect the power adapter to the back of the gateway and plug it into a wall outlet.
  2. Take the included ethernet cable and connect the WAN port of the gateway to your modem/router.
  3. Optionally, plug another ethernet cable into a LAN port and connect it to your computer.

Once powered, the gateway will boot. This may take up to 5 minutes.

Step 2: Access the setup wizard

After the boot process, your browser may automatically redirect to https://unifi/ or show a setup prompt. If not, go to https://unifi/ manually. Accept any self-signed certificate warnings and continue.

You’ll now see the UniFi OS setup wizard.

Step 3: Set up your controller

You’ll be asked to name your console and sign in with a UI.com account. You have two options:

  • Use a UI account – Recommended. Enables remote access, cloud backups, and MFA.
  • Use a local user – Works offline but lacks MFA and remote access.

For security, create a strong password, and enable MFA if you use a UI account.

Step 4: Run a speed test

The gateway will run a quick speed test to determine your internet connection. This helps auto-configure bandwidth settings.

Step 5: Update UniFi OS and Network Application

Before you start configuring anything, update your system.

  • Go to the Applications tab and update the UniFi Network application to version 9 if available.
  • Next, go to Security > Firewall & Security and upgrade to the new zone-based firewall if prompted.

This enables more powerful firewall rules and traffic filtering.

Step 6: Create your networks

Go to Network Settings and configure two networks:

Main network (LAN)

  • Name it something like main-lan
  • Change the IP scheme from the default (192.168.1.x) to something like 192.168.20.1/24
  • Adjust DHCP range to avoid IP conflicts (e.g., 192.168.20.50–192.168.20.200)

Guest network

  • Name it guest
  • Use a different VLAN (e.g., 30)
  • Enable Isolate Network to prevent guest devices from accessing your LAN
  • Keep internet access enabled

When you enable isolate, UniFi automatically adds firewall rules to block traffic between zones.

Step 7: Adopt your access point

If you connected an access point (like a UniFi U6+) to one of the LAN ports, it should show up as “pending adoption” in UniFi Devices.

Click “Adopt” and wait for the provisioning process to complete.

Step 8: Create Wi-Fi networks

In the Wi-Fi section:

  1. Create a main Wi-Fi network linked to your main LAN.
  2. Create a guest Wi-Fi network linked to the guest VLAN.

Each network gets its own SSID and password. You can enable advanced settings like band steering, but defaults are fine for most setups.

Step 9: Turn on IDS/IPS

Go to Security > Intrusion Detection and Prevention and enable it.

  • Use Notify and Block (IPS) to automatically block suspicious traffic.
  • Leave all detection categories enabled unless you have specific needs.

Step 10: Test your setup

Connect a device to your guest Wi-Fi and try to ping a device on the main network. If the firewall is working, the ping will fail—guest devices won’t be able to talk to anything in main-lan.

If you disable isolation, the ping should succeed. That confirms your zone firewall is active.

Optional: Dual WAN

You can configure a second WAN connection on LAN port 4 (port 4 is reassignable). This lets you set up failover or load balancing if you have two ISPs.

Go to Internet Settings and add a second WAN using port 4.

Final Thoughts

The UniFi Cloud Gateway Ultra is cheap and smart. It gives you the full UniFi Network experience with deep control over routing, VPN, firewall rules, and traffic monitoring. If you’re running a small office or home network and want a reliable, self-managed gateway, it’s one of the best value options available.

We host controllers for customers using the Cloud Gateway Ultra every day. If you want to offload controller maintenance, backups, and updates, we’re happy to help. You can try our free plan or spin up a dedicated server with our hosted UniFi Controller.