---
title: 'Tutorial: Configure a Ubiquiti (UniFi) Router to Connect to CloudConnexa'
canonical: https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/connectors/routers/tutorial--configure-a-ubiquiti--unifi--router-to-connect-to-cloudconnexa/
product: CloudConnexa Docs
description: Step-by-step instructions for configuring a Ubiquiti UniFi gateway to connect to CloudConnexa as a Network Connector using a connection profile.
keywords: Ubiquiti (UniFi)
---

# Tutorial: Configure a Ubiquiti (UniFi) Router to Connect to CloudConnexa

## Introduction

This tutorial explains how to configure a Ubiquiti UniFi router as a CloudConnexa Network Connector. After completing these steps, devices and subnets behind the router can securely communicate with resources in your CloudConnexa private network (WPC) without requiring VPN client software on individual devices.

You will:

- Download a Network Connector connection profile from CloudConnexa.
- Configure the profile on the UniFi router.
- Route traffic between your local network and your CloudConnexa WPC.

This setup is useful for connecting branch offices, lab environments, or remote networks to CloudConnexa through a site-to-site style deployment.

> **Note**
>
> Ensure that your router is a UniFi Gateway or UniFi Cloud Gateway (for example, UniFi Gateway Ultra, UniFi Dream Machine, UniFi Dream Router, or UniFi Cloud Gateway Ultra). This tutorial does not apply to UniFi switches or access points.

## Before you begin

- You have a CloudConnexa account and can sign in to the Administration portal.
- You have SCP access to the router from your local computer.
- You have SSH access to the router.

## Step 1: Create a Network in CloudConnexa

1. Sign in to the CloudConnexa Administration Portal using your WPC's **Cloud ID** address (for example, `yourcompany.openvpn.com`).
2. Navigate to **Networks → Networks**.
3. Select **Add Network**.
4. Select at least one **Network Scenario**, and select **Continue**. Refer to [Add a Network](https://openvpn.net/cloud-docs/owner/networks/networks---networks/add-a-network-for-remote-access-using-the-network-wizard.md) for details.
5. Enter a **Network name** and optional description.
6. Leave the **Connector Tunneling Protocol** set to the default (**OpenVPN**).
7. Under **Connector**, enter a name, an optional description, and select a region.
8. Select **Next**.

## Step 2: Deploy the Connector and download a connection profile

In the **Deploy Network Connector** step:

1. Select **Ubiquiti** from the **Provider Type** drop-down menu.
2. Select **Download OVPN Profile** to download the connection profile to your local computer.
3. Select **Next**.
   - CloudConnexa displays the Connector status. The Connector will show as **Offline** until the router is configured and connects in the following steps.

## Step 3: Configure routing

1. Review the allocated **WPC Subnets**, **Domain Routing Subnets**, and routes of other connected networks displayed by CloudConnexa. Note any values you will need when configuring static routes on your router.
2. Optionally, you can add applications or IP services in the next wizard configuration steps.
3. Select **Finish**.

## Step 4: Copy the connection profile to the router

1. Open a terminal on your local computer.
2. Run the following command to upload the connection profile to the router's `/config/auth/` directory:

   ```
   scp /path/to/Profile.ovpn admin@<router_ip_address>:/config/auth/
   ```

   Replace `/path/to/Profile.ovpn` with the absolute path to the downloaded file.

   Replace `<router_ip_address>` with the external IP address of your router.

## Step 5: Create the OpenVPN interface

1. Connect to the router via SSH:

   ```
   ssh admin@<router_ip_address>
   ```
2. Enter configuration mode:

   ```
   configure
   ```
3. Create a new OpenVPN tunnel interface pointing to the connection profile:

   ```
   set interfaces openvpn vtun0 config-file /config/auth/Profile.ovpn
   set interfaces openvpn vtun0 description "CloudConnexa Connector"
   ```
4. Commit and save your changes, then exit configuration mode:

   ```
   commit
   save
   exit
   ```

   > **Note**
   >
   > The OpenVPN tunnel interface name must follow the format `vtun<num>` (for example, `vtun0`). Replace `Profile.ovpn` with the actual filename of your downloaded connection profile.

## Step 6: Verify the connection

1. Connect to the router through HTTPS.
2. Navigate to **Network → Settings → VPN**.
3. Confirm that your newly created interface exists with:
   - **Interface type:** `openvpn`
   - **Status:** Connected
   - An assigned IP address
4. In the CloudConnexa Administration portal, navigate to **Networks → Connectors**, and confirm the Connector status is **Connected**.

## Troubleshooting

If the tunnel doesn't connect, use the following approaches to diagnose the issue.

1. Review OpenVPN log entries:

   ```
   show log | match openvpn
   ```
2. Confirm the connection profile is present in the expected location:

   ```
   ls -la /config/auth/
   ```
3. If you see authentication errors in the log, the connection profile may have expired or been revoked. Navigate to **Networks → Connectors** in the CloudConnexa portal, download a new connection profile, then repeat Steps 4 and 5.

---

Prev: [Tutorial: Configure a Ubiquiti (EdgeMAX) Router to Connect to CloudConnexa](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/connectors/routers/tutorial--configure-a-ubiquiti--edgemax--router-to-connect-to-cloudconnexa.md)
Next: [Tutorial: Configure a GL.iNet Router to Connect to CloudConnexa](https://openvpn.net/cloud-docs/tutorials/configuration-tutorials/connectors/routers/tutorial--configure-a-gl-inet-router-to-connect-to-cloudconnexa.md)
Index: https://openvpn.net/cloud-docs/llms.txt
