UniFi · Fundamentals

Understanding the UniFi Ecosystem

UniFi combines networking devices with management applications. Knowing which component does each job makes a system easier to buy, maintain and hand over.

In plain English

UniFi is a product and management family. A gateway routes between networks, a switch joins wired equipment, and an AP supplies Wi-Fi. The management application lets authorized people configure and observe supported devices.

Reviewed September 2026 · 3 minute read

Follow the traffic through the equipment

Direct link
  1. Internet provider
    Delivers the service handoff.
  2. Gateway
    Routes traffic and applies network policy.
  3. Switch
    Connects wired devices and supplies supported PoE.
  4. Access point
    Connects wireless clients to the network.

A management application configures and monitors compatible devices. It is a different role from forwarding business traffic. Some products combine several roles; others provide only one. A Cloud Gateway combines gateway and management functions, while a CloudKey is an application host rather than an internet router.

This distinction matters during an outage: losing a gateway, a PoE switch or access to the management application can affect different parts of the system. Identify which component a failing service actually depends on.

Match the application to the job

Direct link
Common UniFi application roles
ApplicationPrimary roleAdditional planning
NetworkGateway, switch and Wi-Fi management.Addressing, access policy and performance.
ProtectCompatible video-system management and recording.Storage, retention and authorized viewing.
AccessCompatible door-access devices and permissions.Door hardware, safety requirements and qualified scope.
TalkCompatible business calling workflows.Provider services, numbers and call handling.

These are product roles, not a promise that every service is included in a network installation. Fire and alarm installation is outside FryAVSI’s current scope. See the manufacturer’s application overview for the wider product family.

Choose where management will run

Direct link

Options include a suitable Cloud Gateway, a separate supported console, self-hosted Network software or official hosted Network service. Application compatibility, device capacity and storage vary. Confirm the current specification for the exact host instead of assuming that every console runs every application.

A customer retaining a third-party firewall may still use UniFi switches and APs with a separate Network host. Routing policy remains the responsibility of the chosen routing device. The control-plane comparison helps separate these choices.

Site Manager provides a common remote management view of authorized sites. The underlying applications run on their selected hosts. Remote visibility does not replace a local recovery plan; test which required services remain available during an approved internet-outage check. See UniFi’s cloud architecture.

Check power, capacity and ownership

Direct link
  • Power: verify each endpoint’s PoE standard, each port’s capability and the switch’s total available power. Count expansion devices as well.
  • Capacity: check uplinks, application limits, recording/storage needs, cooling, rack space and realistic UPS runtime.
  • Ownership: give the customer an agreed owner account and assign delegated access by role. Keep recovery credentials in approved secure storage.
  • Support: identify who receives alerts, approves updates, keeps backups and responds when hardware fails.
Before buying: every device should have a purpose, compatible host, cable/network path, power source and recovery owner. Compare total costs, including any optional services and support labor.

Choose another platform when a required integration, vendor standard or support arrangement fits the business better. Consistent ownership and a documented handoff matter as much as a coordinated dashboard.

Recognize each equipment role

Direct link

Your practical challenge

List the jobs your planned network needs, then assign a product role to each. Mark which box supplies routing, PoE, Wi-Fi and management. Check whether an existing device already performs one of those jobs.

Explain your result, the evidence you used and what remains untested. Use the reference library when you need a chart or worked example.

Put it into practice

Check what you learned

Choose an answer for each question, then check your understanding. Your answers stay in this browser.

1. Does a CloudKey automatically replace the internet gateway?
2. What should determine whether a host can run the required applications?
3. What belongs in the final handoff?

Read the answers and explanations
  1. No; application hosting and routing are different roles

    A CloudKey hosts management applications. Products called Cloud Gateways combine management and gateway roles.

  2. The current specifications for its exact model

    Application compatibility, storage and capacity vary across models and hosting options.

  3. Customer ownership, delegated access, backups and support responsibilities

    A supportable installation includes clear access, recovery and operational responsibilities.

Sources and further reading

Keep your momentum

Ready for the next step?

If you can explain the example and your answer, try the next lesson. Revisit the feedback whenever you need it.

FryAVSI · Updated September 10, 2026

Reference this lesson or use a section’s direct link for a particular chart or example. How to cite an example.

FryAVSI · Northeast Ohio and beyond

A clear next step for your project.

Share the location, the challenge and your target timing. Our team will help define the work.

Talk with our team