man unirad
Secure Wi-Fi and wired access for UniFi networks, without passwords.
Unirad connects your UniFi network to Microsoft Intune. Company devices connect with their Cloud PKI certificate, without passwords, and land on the right VLAN automatically. Guests get a branded portal with vouchers, approval by a colleague or Microsoft sign-in. Everything is configured in one web interface, and changes take effect right away.
Requires UniFi Network 9.1 or later.
On-premises or hosted, one installation per customer.
Network access based on certificates, not passwords
Shared Wi-Fi passwords leak, never change and can't be revoked per device. Unirad uses EAP-TLS: every device proves who it is with a certificate from Microsoft Intune Cloud PKI. Laptops, phones and scanners connect automatically. When a device is lost or an employee leaves, you revoke the certificate and that device is off the network.
- Multiple certificate authorities, uploaded in the browser, with revocation lists downloaded automatically.
- Simple VLAN rules: laptops on the corporate SSID to VLAN 10, phones to VLAN 20, warehouse scanners to VLAN 40. The first matching rule decides.
- Rule tester to check which VLAN a device would get before it connects.
- MAC allowlist for printers, conference phones and access control systems, optionally with an end date.
- RadSec (RADIUS over TLS): UniFi gateways and access points talk to Unirad over an encrypted connection, so sites authenticate across the internet without a VPN.
A guest portal your visitors understand
A branded, mobile-friendly portal for your UniFi guest network, in English and Dutch, with your logo, colours and terms of use. Choose per portal how guests get online:
- Vouchers: print a batch of codes for an event or the front desk, and set how long a code is valid and on how many devices.
- Sponsored access: the guest enters the email address of the person they're visiting, who approves with one click.
- Single sign-on: employees and partners sign in with Microsoft Entra ID or Google.
- Accept the terms for open guest networks.
- Time, speed and data limits per portal or per voucher batch. Every guest is logged and can be disconnected.
Sponsored access, step by step
One web interface for everything
Certificate authorities, VLAN rules, RADIUS clients, RadSec peers, guest portals, vouchers and admin users all live in one place. Changes apply immediately, without restarts.
- Authentication log: see why a device was accepted or rejected, with the certificate, SSID, VLAN and matching rule.
- Sessions: which devices are online right now, and how much traffic they've used.
- Audit log: who changed what, and when.
- Roles: administrators and read-only users, for example for the service desk.
Your data stays where you want it
Each customer gets their own installation, in your own data centre or hosted by us. Unirad runs as containers on a standard Linux VM, so every installation is identical and updates are predictable. Two servers with database replication keep authentication running when one of them fails.
- EAP-TLS with Intune Cloud PKI certificates
- Multiple CAs, automatic CRL download
- VLAN assignment by CA, certificate name, UPN, SSID, wired / wireless and location
- MAC allowlist for printers and IoT, with end date
- RADIUS and RadSec (RADIUS over TLS)
- Guest portal: vouchers, sponsor approval, Entra ID / Google SSO, accept terms
- Time, speed and data limits for guests
- Branded portal in English and Dutch
- Authentication log, sessions, guest log, audit log
- Admin and read-only roles
- On-premises or hosted, one installation per customer
- Two-node setup with database replication
mail rob@robcloud.nl
Questions about Unirad?
Want a demo, pricing or just to know if it fits your setup? Send a message and I'll get back to you.