Usually the Ubiquiti Dream Machine Pro units are managed from the UI.COM interface.

However for external captive portals, it is a requirement to be able to access them via the WAN.

Here’s how:

Create a new Port Group

Click Profiles in the left menu

Under IP Groups, click Create New:

Call it “Fydelia” and add two ports:

Save the profile

Configure the UDM Firewall

NOTE: This is for version 8.x. Version 9.x has slightly different naming as it uses zones. For V9.x create a rule allowing traffic from “External” zone to “Gateway” zone (known as Internet Local on earlier versions).

Open the Security Firewall settings:

Click CREATE ENTRY

Enter the following details

As shown above, in the Destination Port Group, choose the profile you created above

IMPORTANT: Initially we recommend having action “Accept” on ALL protocols etc.  When you have successfully connected, you can then look at locking down access to the desired external IPs according to our Firewall settings guide.

You should now be able to access the controller via the external IP.