Category: Wireless

Office Network Cabling During a Remodel:

A Practical Guide for Business Owners in Grants Pass

Transform your office remodel with professional network cabling - before and after shots from a recent Grants Pass project by Farmhouse Networking
Before and after office network cabling remodel showing messy wires transformed into clean structured cabling installation in Grants Pass office space

A remodeled office is the perfect time to fix slow Wi‑Fi, random disconnects, and that tangle of mystery cables in the closet. Investing in office network cabling during construction gives your business faster speeds, fewer outages, and a cleaner, more professional workspace that is ready to grow with you.

Why Network Cabling Matters

  • Well‑planned cabling is the backbone of reliable internet, phones, and cloud apps your team uses every day.​
  • Structured cabling (typically CAT6 or CAT6a) supports current needs and future upgrades like faster internet and new workstations without re‑opening walls.

For owners, this is about business continuity and productivity, not just “wires in the walls.”

Key Steps for You and Your IT Team

Use this checklist to keep your remodel on track and avoid expensive rework later.

  1. Define business and growth needs
    • List how many employees, workstations, phones, printers, and Wi‑Fi access points you need now and in the next 3–5 years.​
    • Note special areas like conference rooms, reception, and break rooms that need extra connectivity.
  2. Review floor plans with IT before walls close
    • Have your IT provider mark data jack locations, wireless access point locations, and network closet placement on the architect’s plans.
    • Confirm there is proper power, ventilation, and space in the network closet for switches, patch panels, and future equipment.
  3. Choose the right cabling standard
    • For most small and midsize offices, CAT6 or CAT6a structured cabling is recommended for performance and cost‑effectiveness.
    • Ensure all cabling, jacks, and patch panels are rated consistently (e.g., all CAT6) to avoid bottlenecks.​
  4. Plan clean cable pathways and labeling
    • Require cables to be run through ceilings/walls with proper supports, avoiding sharp bends and electrical interference.
    • Insist on clear labeling on both ends of every cable and a simple network map so future troubleshooting is fast and inexpensive.​
  5. Coordinate access and scheduling
    • Provide keys/access codes and confirm work windows so your cabling team can work efficiently without disrupting other trades or your staff.​
    • Schedule final testing and certification of each cable run before you move in equipment and people.

Common Questions Owners Ask

Q: Why not just rely on Wi‑Fi instead of running cables?
A: Wi‑Fi is great for mobility, but wired connections are faster, more secure, and more stable for desktops, VoIP phones, and servers. A hybrid approach (wired for fixed devices, Wi‑Fi for mobile) gives the best performance.

Q: Is CAT6 enough, or should we pay more for CAT6a or fiber?
A: For most standard offices, CAT6 or CAT6a supports typical internet speeds and internal traffic very well. Fiber is usually reserved for backbone links between floors or high‑density areas where very high bandwidth is required.

Q: How much disruption will cabling cause during our remodel?
A: If cabling is coordinated early with your contractor and scheduled while walls are open, most work happens before staff move in, greatly reducing disruption. Final terminations and testing can be done after painting and flooring.

Q: What should I ask for in documentation when the job is done?
A: Request:

  • A simple diagram of the network closet and cabling layout.
  • Labeling that matches the diagram and wall jacks.
  • Test results showing each cable passed certification.
    This documentation saves hours of billable troubleshooting later.

How Farmhouse Networking Helps Business Owners

Farmhouse Networking specializes in turning remodel projects in Grants Pass and Southern Oregon into an opportunity to upgrade your IT foundation, not just “pull wire.”

Here is how the team can support you:

  • Consultative planning with owners
    • Translate your business goals (more staff, new phone system, better Wi‑Fi for clients) into a practical cabling and network design in plain English, not jargon.
    • Coordinate with your general contractor, electrician, and low‑voltage vendors so you are not stuck in the middle relaying technical details.
  • Professional structured cabling and cleanup
    • Design and install structured cabling, patch panels, and network racks that are neat, labeled, and ready for growth.
    • Fix legacy “spaghetti closets” by organizing existing cables, documenting the layout, and improving reliability.
  • End‑to‑end IT support after the remodel
    • Configure switches, firewalls, Wi‑Fi, and workstations so the new cabling actually delivers faster, more stable performance for your team.
    • Provide ongoing managed IT services to monitor your network, catch issues early, and support your staff.

Take the Next Step

If you are planning an office remodel—or just finished one and want to be sure your office network cabling was done right—this is the ideal moment to set your business up for years of smooth, reliable operations.

Email support@farmhousenetworking.com for more information about how Farmhouse Networking can help improve your business with smarter office network cabling and ongoing IT support.

When Your Business Wireless Becomes a Target

Business wireless network under attack from rogue access points and security threats targeting WiFi vulnerabilities
Defend your business WiFi from becoming a hacker target with robust wireless security measures against common threats

Reliable and secure internet access is critical, especially for satellite offices relying on connectivity to central locations. Recently, one of our healthcare clients was nearly shut down by their ISP after the Recording Industry Association of America (RIAA) reported illegal music downloads traced to their IP address. The source? An open guest wireless network left unprotected.

How the Incident Unfolded

The ISP alerted the client via email, having received a complaint from the RIAA alleging that copyrighted music was illegally copied and distributed through BitTorrent on their network. Farmhouse Networking’s investigation pinpointed the activity: at 2 a.m., someone exploited the guest WiFi, which lacked any password protection, to download files illegally.

Had the ISP shut down the internet, this satellite healthcare office would have faced canceled appointments and redirected patients, impacting not only their reputation but costing thousands in lost revenue.

Key Wireless Network Security Lessons for Healthcare Providers

This incident highlights crucial vulnerabilities common in healthcare and other sectors:

  • Never leave guest WiFi networks open. Any unsecured network is an open invitation to unauthorized use and legal risks.
  • Use strong encryption and passwords on all wireless networks, including guest access, to block unauthorized connections.
  • Implement DNS filtering to prevent illicit peer-to-peer activity and block access to unauthorized sites.
  • Separate guest traffic from internal business-critical networks to safeguard sensitive data and operations.
  • Regularly audit network access points and update security settings, including changing default passwords on routers and regularly changing the wireless passwords.


Steps Farmhouse Networking Took to Protect the Client’s Wireless Network

Working closely with the healthcare office, Farmhouse Networking:

  • Secured their wireless network with strong WPA3 encryption and complex passwords.
  • Added DNS filtering to the guest wireless network to prevent peer-to-peer and similar applications.
  • Advised on ongoing monitoring and best security practices to safeguard against future misuse.
  • Emphasized the importance of network segmentation to protect sensitive healthcare data.


Why Wireless Network Security Matters in Healthcare

Beyond avoiding ISP shutdowns and illegal activity accusations, securing wireless networks in healthcare is essential for compliance with regulations like HIPAA, protecting Electronic Protected Health Information (ePHI), and maintaining patient trust.

Protect Your Business WiFi Today

Don’t risk your healthcare practice’s internet access, reputation, or compliance by allowing unsecured wireless access. Contact Farmhouse Networking to perform a comprehensive wireless network security assessment tailored to your industry’s unique needs. Secure your internet, protect your patients, and keep your practice running smoothly.

Website Filtering for Business:

Strengthening Your Cybersecurity Defenses

Website filtering for business strengthens cybersecurity by blocking malicious sites and threats with Farmhouse Networking solutions
Enhance business cybersecurity defenses using advanced website filtering from Farmhouse Networking.

Businesses are faced with an ever-growing number of cybersecurity threats. One effective method to protect your organization’s sensitive data and network is implementing website filtering. Website filtering solutions offer businesses an essential tool to manage and safeguard their networks, ensuring employees are protected from accessing malicious or inappropriate websites. We will explore the importance of website filtering for business cybersecurity and provide practical insights for implementation.

Understanding Website Filtering:

Website filtering is an advanced security measure that enables organizations to control the websites that can be accessed by their employees. This essential cybersecurity practice helps mitigate risks associated with malware, phishing attacks, and overall data breaches. Through the implementation of website filtering, businesses can proactively manage internet usage, reduce network congestion, and improve productivity.

Benefits of Website Filtering:

  1. Enhanced Network Security:
    By filtering out potentially harmful websites, businesses can significantly reduce the risk of malware infiltration, phishing attempts, and other cyber threats. Website filtering acts as a vital line of defense, preventing employees from inadvertently accessing websites hosting malicious content and safeguarding sensitive corporate data.
  2. Regulatory Compliance:
    As the healthcare industry is subject to strict compliance regulations, implementing website filtering can help organizations maintain adherence to industry-specific regulations such as HIPAA. By blocking access to unauthorized websites or content, businesses ensure they are aligning with compliance requirements, reducing the potential for fines or legal repercussions.
  3. Increased Employee Productivity:
    Unrestricted internet access often leads to time-wasting activities, reducing overall productivity within the organization. With website filtering, businesses can minimize distractions by blocking access to social media platforms, gaming websites, or other non-work-related sites, fostering a more focused work environment.
  4. Bandwidth Optimization:
    Streaming services and large media files can significantly impact network bandwidth, leading to slower connections and decreased productivity. Website filtering helps alleviate this strain by allowing organizations to control access to bandwidth-intensive websites or file-sharing platforms, optimizing network performance.

Choosing the Right Website Filtering Solution:

When selecting a website filtering solution, organizations should consider the following:

  1. Granular Control:
    Look for a solution that offers granular control, allowing you to tailor website filtering policies to specific departments or individual users. This flexibility ensures that employees only have access to relevant websites and content necessary for their job roles.
  2. Real-Time Updates:
    The cybersecurity landscape evolves rapidly, with new threats emerging constantly. Ensure your chosen website filtering solution offers AI powered real-time updates and threat intelligence to protect against the latest risks effectively.
  3. User-Friendly Interface:
    Implementing a user-friendly website filtering solution simplifies management. Look for a solution with an intuitive interface that enables easy configuration and monitoring of website filtering policies.

Potential Challenges and Mitigation Strategies:

While website filtering can provide numerous benefits, there are potential challenges to consider:

  1. False Positives:
    Overzealous website filtering policies can sometimes lead to legitimate websites being inaccurately blocked, causing frustration for employees. Regularly review and fine-tune filtering policies to minimize the risk of false positives, striking a balance between security and productivity.
  2. BYOD (Bring Your Own Device) Environments:
    There is an increasing reliance on personal devices to access corporate networks. Ensure that your website filtering solution extends to cover such devices and effectively enforces security policies, mitigating the risk of potential threats from unsecured devices.
  3. Ongoing Maintenance and Monitoring:
    Website filtering requires ongoing maintenance and monitoring to ensure optimal performance and adaptability to emerging threats. Assign dedicated IT staff or consider a managed service provider (MSP) like Farmhouse Networking to oversee the implementation, management, and updates of your website filtering solution.

Website filtering is a critical component of any business’s cybersecurity strategy, providing robust protection against web-based threats and enhancing network security. Farmhouse Networking provides website filtering service to all our monthly managed clients at no additional cost. Sign-up today to become cyber secure. 

The Dangers of Relying on an IT Guy

Dangers of relying on an IT guy for your small business including downtime, security risks, and lack of support
Relying on one IT guy can expose your small business to downtime, data loss, and security vulnerabilities—managed IT services offer stronger protection.

The role of Information Technology (IT) in business success cannot be overstated. IT systems and infrastructure form the backbone of modern businesses, facilitating communication, data management, and efficient workflow. From managing customer databases to ensuring network security, IT plays a crucial role in driving productivity and competitiveness. However, many businesses make the mistake of relying on a single IT guy to handle all their technological needs. In this article, I will discuss the risks associated with this approach and the importance of adopting a team-based approach to IT support.

The risks of relying on a single IT guy

Lack of expertise and knowledge

When you rely on a single IT guy, you are limited to their individual skills and expertise. While they may be knowledgeable in certain areas, they may not possess the breadth of knowledge required to handle all aspects of your business’s IT infrastructure. IT is a vast field that encompasses various domains such as network administration, cybersecurity, software development, and hardware maintenance. By relying on a single guy, you risk missing out on specialized expertise that could greatly benefit your business.

Limited availability and support

Another significant risk of relying on a single IT guy is limited availability and support. IT issues can arise at any time, and if your IT guy is unavailable or overwhelmed with other responsibilities, it can lead to significant downtime and disruptions in your business operations. With a single point of contact, you may have to wait for extended periods before your IT issues are resolved, resulting in decreased productivity and potential financial losses.

Single point of failure

Relying on a single IT guy also means that your business is vulnerable to a single point of failure. If your IT guy falls ill, takes a vacation, or leaves the company, you may be left without any IT support. Singular IT techs often don’t have the time or resources to properly document procedures and critical passwords, so when they go this information is lost. This can be particularly problematic during critical times when you need immediate assistance. Having a backup plan or a team of IT professionals ensures that your business operations can continue uninterrupted, even if one person is unavailable.

The impact of downtime on business operations

Downtime can have severe consequences on your business operations. Every minute your systems are down translates to lost revenue, missed opportunities, and frustrated customers. According to a study conducted by Gartner, the average cost of IT downtime is $5,600 per minute. Imagine the financial implications if your IT guy is unavailable for an extended period. With a team-based approach to IT support, you can minimize downtime and ensure swift resolution of any issues, thereby safeguarding your business’s success.

The importance of a team approach to IT support

Adopting a team approach to IT support offers numerous benefits for your business. Firstly, it provides a diverse set of skills and expertise that can be leveraged to address various IT challenges effectively. Each team member brings their unique knowledge and experience, allowing for comprehensive and well-rounded support. Additionally, with a team, you have the advantage of increased availability and faster response times. By distributing responsibilities among team members, you can ensure that someone is always available to address your IT needs promptly.

The benefits of outsourcing IT support

Outsourcing IT support is a viable solution for businesses looking to avoid the risks associated with relying on a single IT guy. Outsourcing allows you to tap into a pool of talented professionals with specialized expertise in different IT domains. Moreover, outsourcing IT support can often be more cost-effective than hiring a full-time IT staff, especially for small and medium-sized businesses. By partnering with an external IT support provider, like Farmhouse Networking, you can access a wide range of services, including network monitoring, cybersecurity, data backup, and software maintenance, all while enjoying the benefits of a dedicated team.

Finding the right IT support provider

Finding the right IT support provider is crucial to ensuring a successful and secure IT infrastructure. When evaluating potential providers, consider their experience, track record, and the range of services they offer. Look for certifications and qualifications that demonstrate their expertise and commitment to quality. It is also essential to assess their responsiveness and availability to ensure that they can meet your business’s IT needs promptly. Ask them about their record keeping habits, make sure they document everything and keep your information secure with industry standard protocols. By conducting thorough research and seeking recommendations, you can find an IT support provider that aligns with your business goals and requirements.

By adopting a team-based approach to IT support or outsourcing your IT needs, you can mitigate these risks and ensure a successful and secure IT infrastructure. Don’t get stuck when your IT guy no longer responds; contact us to experience the comfort of having a team look after your business IT. With the right IT support provider, you can focus on growing your business while leaving your technological needs in capable hands.

Setup of Synology RADIUS server for EAP Authentication

Synology DSM interface showing RADIUS server configuration for EAP-PEAP authentication with certificate paths
Configure Synology RADIUS for secure EAP enterprise WiFi authentication

This is the eighth and final of a series that documents the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article has detailed a separate piece of the project. This article shows the setup of Synology RADIUS server for EAP authentication via EAP-PEAP, EAP-TLS, and EAP-TTLS.

Setup Synology Radius for EAP-PEAP

  1. Login to Synology IP via SSH
  2. Use admin login credentials
  3. Go to the Radius certificate directory
    cd /var/packages/RadiusServer/target/etc/raddb/certs/
  4. Radius must be configured on our certificates:
    sudo vi ../mods-enabled/eap
  5. Type i to start insert then paste the following:
    eap {
        default_eap_type = peap
        timer_expire     = 60
        ignore_unknown_eap_types = no
        cisco_accounting_username_bug = no
        max_sessions = ${max_requests}

        #md5 {
        #}

        #leap {
        #}

        #gtc {
        #   auth_type = PAP
        #}

        tls-config tls-common {
            #private_key_password = whatever
            private_key_file = ${certdir}/server.key
            certificate_file = ${certdir}/server.crt
            #$INCLUDE /usr/local/synoradius/rad_ca_cert
            dh_file = ${certdir}/dh
            random_file = ${certdir}/random
            ca_file = ${certdir}/ca.crt
            ca_path = ${certdir}
            #INCLUDE /var/packages/RadiusServer/target/etc/cipher_list
            verify {
            }
        }

        #tls {
        #   tls = tls-common
        #}

        #ttls {
        #   tls = tls-common
        #   default_eap_type = mschapv2
        #   copy_request_to_tunnel = no
        #   use_tunneled_reply = no
        #   virtual_server = "inner-tunnel"
        #}

        peap {
           tls = tls-common
           default_eap_type = mschapv2
           copy_request_to_tunnel = yes
           use_tunneled_reply = yes
           virtual_server = "inner-tunnel"
        }

        #mschapv2 {
        #}
    }
  1. Hit ESC to end insert then type :wq to exit
  2. The radius service must be restarted in the Synology Package Center (Stop / Run)

Setup Synology Radius for EAP-TLS

  1. Login to Synology IP via SSH
  2. Use admin login credentials
  3. Go to the Radius certificate directory
    cd /var/packages/RadiusServer/target/etc/raddb/certs/
  4. Radius must be configured on our certificates:
    sudo vi ../mods-enabled/eap
  5. Type i to start insert then paste the following:
       eap {
        default_eap_type = tls
        timer_expire     = 60
        ignore_unknown_eap_types = no
        cisco_accounting_username_bug = no
        max_sessions = ${max_requests}

        #md5 {
        #}

        #leap {
        #}

        #gtc {
        #   auth_type = PAP
        #}

        tls-config tls-common {
            #private_key_password = whatever
            private_key_file = ${certdir}/server.key.pem
            certificate_file = ${certdir}/server.crt.pem
            #$INCLUDE /usr/local/synoradius/rad_ca_cert
            dh_file = ${certdir}/dh
            random_file = ${certdir}/random
            ca_file = ${certdir}/ca.crt.pem
            ca_path = ${certdir}
            #INCLUDE /var/packages/RadiusServer/target/etc/cipher_list
            verify {
            }
        }

        tls {
            tls = tls-common
        }

        #ttls {
        #   tls = tls-common
        #   default_eap_type = mschapv2
        #   copy_request_to_tunnel = no
        #   use_tunneled_reply = no
        #   virtual_server = "inner-tunnel"
        #}

        #peap {
        #   tls = tls-common
        #   default_eap_type = mschapv2
        #   copy_request_to_tunnel = no
        #   use_tunneled_reply = no
        #   virtual_server = "inner-tunnel"
        #}

        #mschapv2 {
        #}
    }
  1. Hit ESC to end insert then type :wq to exit
  2. The radius service must be restarted in the Synology Package Center (Stop / Run)

Setup Synology Radius for EAP-TTLS

  1. Login to Synology IP via SSH
  2. Use admin login credentials
  3. Go to the Radius certificate directory
    cd /var/packages/RadiusServer/target/etc/raddb/certs/
  4. Radius must be configured on our certificates:
    sudo vi ../mods-enabled/eap
  5. Type i to start insert then paste the following:
     eap {
        default_eap_type = ttls
        timer_expire     = 60
        ignore_unknown_eap_types = no
        cisco_accounting_username_bug = no
        max_sessions = ${max_requests}

        #md5 {
        #}

        #leap {
        #}

        #gtc {
        #   auth_type = PAP
        #}

        tls-config tls-common {
            #private_key_password = whatever
            private_key_file = ${certdir}/server.key
            certificate_file = ${certdir}/server.crt
            #$INCLUDE /usr/local/synoradius/rad_ca_cert
            dh_file = ${certdir}/dh
            random_file = ${certdir}/random
            ca_file = ${certdir}/ca.crt
            ca_path = ${certdir}
            #INCLUDE /var/packages/RadiusServer/target/etc/cipher_list
            verify {
            }
        }

        #tls {
        #    tls = tls-common
        #}

        ttls {
           tls = tls-common
           default_eap_type = mschapv2
           copy_request_to_tunnel = no
           use_tunneled_reply = no
           virtual_server = "inner-tunnel"
        }

        #peap {
        #   tls = tls-common
        #   default_eap_type = mschapv2
        #   copy_request_to_tunnel = yes
        #   use_tunneled_reply = yes
        #   virtual_server = "inner-tunnel"
        #}

        #mschapv2 {
        #}
    }
  1. Hit ESC to end insert then type :wq to exit
  2. The radius service must be restarted in the Synology Package Center (Stop / Run)

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

Setup Ubiquiti Wireless Network with PSK & RADIUS

This is the seventh in a series that document the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the basic setup of Ubiquiti Controller for PSK and RADIUS authentication from wireless devices.

Setup Ubiquiti Wireless Network with PSK

  1. Login to Ubiquiti controller previously created – Here
  2. Click on Setting gear icon at bottom left
  3. Make sure you are on Wifi tab and click Create New link
    • Set network BSSID
    • Create Password
    • Click Add Wifi Network button
UniFi Network controller WiFi settings screen configuring WPA Enterprise RADIUS profile PPSK security VLAN assignment for hybrid authentication
UniFi SSID advanced security settings with RADIUS profile and PPSK configuration.

Setup Ubiquiti Wireless Network with RADIUS

  1. Login to Ubiquiti controller previously created – Here
  2. Click on Setting gear icon at bottom left
    • Click on Profiles
    • Click on Radius Tab
    • Click on Create New link
    • Give the Profile a name
    • Enter RADIUS server IP address as Authentication Server
    • Enter RADIUS shared secret
    • Click Add
    • Click Apply Changes
  3. Click on Wifi Tab
  4. Click on Create New link
  5. Set network BSSID
  6. Change Advanced to Manual
  7. Set Security Protocol – WPA2 Enterprise
  8. Select new RADIUS Profile
  9. Click Add Wifi Network

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

Setup Cisco Wireless Network with PSK & RADIUS

Cisco Wireless Controller WLAN advanced settings screen configuring WPA2 PSK with RADIUS authentication MAC filtering and AAA servers
Cisco WLC WLAN configuration enabling PSK with RADIUS backend authentication.

This is the sixth in a series that document the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the basic setup of Cisco Wireless Controller for PSK and RADIUS authentication from wireless devices.

Setup Cisco Wireless Network with PSK

  1. Login to Cisco Wireless Controller
  2. Click on WLANs tab at top
  3. Click on GO next to Create New drop down
  4. Create Profile Name & SSID
  5. Click Apply
  6. Click Enabled next to Status
  7. Click Apply
  8. Click on Security tab
  9. Uncheck 802.1x
  10. Check PSK
  11. Enter Pre-Shared Key next to PSK format
  12. Click Apply
  13. Click Save Configuration at the top

Setup Cisco Wireless Network with RADIUS

  1. Log into Cisco Wireless Controller
  2. Click on Security tab at top
  3. Click on Authentication under RADIUS on left hand side
  4. Change both Acct Call Station ID Type to IP Address
  5. Click Apply
  6. Click on New
  7. Add RADIUS server IP address
  8. Add Shared Secret
  9. Uncheck management
  10. Click Apply
  11. Click on WLANs tab at top
  12. Edit WLAN 1
  13. Click on Security tab
  14. Click on AAA Servers tab
  15. Change Server 1 to the one entered on RADIUS Authentication page
  16. Click Apply
  17. Click on Layer 2 tab
  18. Change Authentication type to 802.11x
  19. Click Apply
  20. Click Save Configuration at the top

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

Basic Setup of Ubiquiti Wireless Controller on Synology NAS

This is the third in a series that documents the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the basic setup of Ubiquiti Wireless Controller as a Docker instance on the Synology.

Setup Synology for Docker Container

  1. Login to Synology via HTTP
  2. Open Package Manager
  3. Search for Docker & InstallSynology DSM Container Manager showing UniFi Network controller Docker project with ports mapping data volume for Ubiquiti wireless management
  4. Open Docker
  5. Click on Container tab
    • Click Create
    • Select the image just downloaded and click Next
    • Select Use the same network as Docker Host and click Next
    • Give the container a name
    • Enable resource limitations (increase memory for larger installations)
    • Enable auto-restart then click nextSynology Docker General Settings
    • Click on Advanced Settings
    • Add environment variables
      • BIND_PRIV = false
      • RUNAS_UID0 = falseSynology Docker Advanced Settings
  6. Click Add Folder
    • Highlight the Docker folder and click Create folder then create a Unifi folder and then highlight it and click Select Synology Docker Add Volume
    • Change Mount path to /unifi then Next
    • Click Done

Configure Ubiquiti Controller

  1. Login to new controller – https://[IPAddressofSynology]:8443/manage
  2. Name the Ubiquiti Controller and Check the agree to terms box then click Next
  3. Change to Advanced settings
  4. Turn off remote and Ubiquiti account
  5. Create administrator user
  6. Create password
  7. Create admin email then click Next
  8. Enable Auto Backup and click Next
  9. Skip device setup by clicking Next
  10. Skip Wifi setup by clicking Skip
  11. Change time zone if needed and Click Finish

Setup Wireless Access Point

  1. Connect access point to same network
  2. Adopt in controller
    • Find IP address of access point
    • SSH into access point
    • Login with defaults ubnt / ubnt
    • Type: set-inform https://[IPAddressofSynology]:8080/inform
  3. Login to Controller – https://[IPAddressofSynology]:8443/manage
    • Click on Devices on the left
    • Click on access point and choose Adopt

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

Basic Setup of Cisco Wireless Controller

Cisco WLC GUI setup wizard screen showing service port configuration SSID creation and management interface for wireless controller installation
Cisco wireless controller setup wizard with SSID and management VLAN configuration.

This is the first in a series that document the Tier 3 / Co-Managed IT work we did to setup a wireless test bed for a Linux based scientific device. The testing environment included two different wireless network hardware types (Ubiquiti and Cisco). There was also a Synology device used for various purposes including hosting the Ubiquiti controller inside a Kubernetes container, providing certificate services, providing LDAP authentication, and providing RADIUS authentication. Each article will detail a separate piece of the project. This article shows the basic setup of Cisco Wireless Controller.

Setup of Cisco Wireless Controller

  1. Plug -in ethernet of Computer to port 2 on controller
  2. Boot controller and wait for SYS light to go solid
  3. Open web browser to http://192.168.1.1
  4. Create admin username
  5. Create password
  6. Fill in the needed information:
    1. System nameManagement IP Subnet MaskDefault Gateway
    1. Click Next
  7. Fill in temporary information for wireless
    1. Network BSSIDCreate PassphraseEnter local DHCP server address
    1. Click Next
  8. Click Apply and wait for reboot
  9. Click on Commands tab
  10. Click on Set Time on the left-hand menu
  11. Change needed values
  12. Click Set Date and Time
  13. Click Save Configuration at the top

If your company has highly customized setup requirements that you need consulting for, then contact us for assistance.

Archives

Categories

Plant a Seed @ 541-761-9549
233 Rogue River Hwy #873 Grants Pass, OR 97527
Mon-Fri: 9:00am-5:00pm
support@farmhousenetworking.com
© 2016-2026 - Farmhouse Networking. All rights reserved
Terms and Conditions Privacy Policy

Evaluation Signup

Error: Contact form not found.

And God will generously provide all you need. Then you will always have everything you need and plenty left over to share with others. As the Scriptures say,
“They share freely and give generously to the poor. Their good deeds will be remembered forever.”
For God is the one who provides seed for the farmer and then bread to eat. In the same way, he will provide and increase your resources and then produce a great harvest of generosity in you. - 2 Corinthians 9:8-10