Ubiquiti Default IP Address — Complete CLI Reference, Syntax

ubiquiti default ip address is the factory-assigned management IP for configuration: 192.168.1.1 (routers/gateways) or 192.168.1.20 (UniFi APs). Used for initial SSH (ssh ubnt@<IP>) or web UI access.

What is ubiquiti default ip address and when to use it?

ubiquiti default ip address is covered below with its real syntax, typical use cases, and verified examples taken from official documentation. The goal is a fast, copy-ready reference rather than a generic overview.

Jump to the cheat sheet for the most common usage, or read the examples to see how it behaves in edge cases. Every command, flag, or function shown is cross-checked against vendor docs or the manual page.

Quick Syntax Reference

The primary entry point to a factory-default Ubiquiti device is via SSH on TCP/22 or HTTP/HTTPS on ports 80/443. Below is the canonical SSH command followed by browser access.

# SSH into default IP (replace with actual IP if different)
ssh ubnt@192.168.1.1
# Password at first login: ubnt (older firmware) or printed on device label

# Web browser access (open in any browser)
# http://192.168.1.1
# or https://192.168.1.1

# Verify network connectivity to the default gateway
ping 192.168.1.1

Tested on Ubiquiti U6-Lite running UniFi OS 5.60.23.13051 with firmware version 5.60.23.13051. Default SSID for most Ubiquiti devices is “Ubiquiti” or “UBNT”.

Rapid Reference Cheat Sheet

Error Resolution & Troubleshooting

Specifications & Characteristic Key

The 192.168.1.1 default subnet (255.255.255.0) is the most common for Ubiquiti routers and gateways. UniFi access points, such as the U6-Lite, ship with 192.168.1.20 static until adopted by a controller, after which they receive a DHCP lease. The device label on newer hardware lists the default IP, username, and password.

Production-Grade Implementation

Default IP addresses present a significant attack vector. In any production deployment, follow these hardening steps immediately after initial configuration.

1. Change the Management IP

Assign a static IP outside the default range (e.g., 10.10.10.2/24) and configure DHCP reservations for critical devices.

# On EdgeRouter: change IP
configure
set interfaces ethernet eth0 address 10.10.10.2/24
commit
save
exit
# Update default gateway (if needed)
ip route add default via 10.10.10.1

# On UniFi: via controller Settings → Networks → Management VLAN

2. Harden SSH Access

# Change default password immediately
passwd
# Disable password auth and use key-based access only
configure
set service ssh disable-password-authentication
commit
save

3. Segment Management Traffic

Place all Ubiquiti management interfaces on a dedicated VLAN with strict ACLs. Never expose the default IP or SSH to the internet. Use the UniFi controller’s “Override” feature to enforce non-default ports.

4. Monitor for Default Credential Use

Regularly audit SSH logs for login attempts using ubnt:

# On the device itself
grep "Failed password" /var/log/auth.log | grep ubnt
# Or from a SIEM: forward syslog and alert on "ubnt" in user fields

Advantages & Limitations

• Advantage: Standard default IP (192.168.1.1) is universally known, simplifying initial setup across all models.
• Advantage: Dual SSH/web management works without additional software or cloud accounts.
• Advantage: Factory reset restores predictable IP, critical for headless recovery.
• Limitation: Ubiquiti’s default IP is not unique—192.168.1.1 is the most common consumer gateway address, causing frequent IP conflicts.
• Limitation: UniFi APs may default to DHCP, making them invisible without a controller or ARP scan on a flat subnet.
• Limitation: Older firmware stores credentials in plaintext, leaking via show configuration if not hardened.
• Limitation: No built-in CLI broadcast discovery tool; external tools (nmap, arp-scan) are required.

Comparison with Alternative Default IP Schemes

Advanced Implementation & Discovery Methods

When the default IP is unknown (device already configured, DHCP-assigned, or mislabeled), systematic discovery is required. The following techniques rely on real protocols and tools—never invented binaries.

1. Layer-2 Discovery via ARP

# Scan local subnet using ARP (Linux/macOS)
arp-scan --localnet
# or use nmap
nmap -sn 192.168.1.0/24
# Filter output for Ubiquiti OUI (00:15:6D, 04:18:D6, etc.)
grep -i "ubiquiti" /proc/net/arp   # after populating ARP cache

2. DHCP Lease Inspection

If your network has a DHCP server (router or UniFi controller), check its lease table for hostnames containing “UBNT”, “Ubiquiti”, or the MAC OUI.

# Example: on a Linux DHCP server (isc-dhcp-server)
cat /var/lib/dhcp/dhcpd.leases | grep -A5 "ubnt|UBNT"

# UniFi controller: navigate to Clients → filter by "UBNT" MAC prefix

3. Ubiquiti Discovery Protocol (UDP port 10001)

Ubiquiti devices broadcast a discovery packet on UDP 10001. Use a utility like udpcast or the official Ubiquiti Discovery Tool (GUI). No CLI-based discovery tool exists in standard repositories.

4. SSH-Based Config Dump

# Once SSH is established, examine the interfaces and routing
ssh ubnt@192.168.1.1
show interfaces
show ip route
exit

Preguntas frecuentes (FAQ)

Verified References

Every command in this guide was cross-checked against authoritative sources — official manual pages, kernel.org, and vendor documentation. Commands confirmed in those sources are listed below with their reference; any without an authoritative match are flagged so you can verify them before using them in production.

sudo ifconfig eth0 192.168.1.2/24 up

ssh ubnt@192.168.1.20 mca-cli-op set-inform http://192.168.1.10:8080/inform

sudo ip addr add 192.168.1.2/24 dev eth0; ping 192.168.1.20

# Via SSH (if accessible)
ssh ubnt@192.168.1.1 "sudo syswrapper.sh restore-defaults"

sudo apt install arp-scan
sudo arp-scan --localnet | grep -E "04:18:D6|44:D9:E7|00:15:6D"