My ISP router and the Cloud Gateway Ultra both use 192.168.1.x. What happens?

If the Ultra's WAN side receives an address in the same 192.168.1.0/24 range its LAN defaults to, routing breaks — a gateway cannot route between identical networks. Treat this as a pre-flight planning item: check your ISP router's LAN range before setup, and change one side deliberately (put the ISP box in bridge mode, change its LAN range, or set the UniFi LAN to a different range during setup). Be sceptical of claims that UniFi OS automatically renumbers the LAN for you: that behaviour could not be verified in any official Ubiquiti documentation during this guide's research.

Is the Cloud Gateway Ultra really 1 Gbps with security inspection on?

Ubiquiti rates IDS/IPS throughput at 1 Gbps, with a datasheet footnote that is worth reading verbatim: 'Measured with iPerf3 on a DHCP network. Performance may be reduced with PPPoE depending on ISP implementation.' So the rating is real under Ubiquiti's test conditions; a PPPoE fibre connection may see less. Also note the port reality: the WAN port accepts 2.5 GbE, but the LAN ports are 1 GbE each with no link aggregation, so no single wired device gets more than gigabit regardless of your internet plan.

Can the Cloud Gateway Ultra run UniFi Protect cameras?

No. The UCG-Ultra runs the UniFi Network application only — it has no Protect, Access or Talk support and no storage. Camera systems need a different host (a Cloud Key+, a UDM-class console with Protect, or a UNVR). Retail listings that imply camera competence on the Ultra are wrong; plan Protect separately if cameras are on your roadmap.

UniFi · Cloud Gateway Ultra · First setup

Cloud Gateway Ultra: first setup for a small business, start to finish

First published 20 October 2026 · Hardware figures from Ubiquiti's official datasheet (read in full); capacity figures flagged where they come from Ubiquiti's store specification mirrors. Where a popular claim could not be verified in Ubiquiti's own documentation, this guide says so — starting with the big one in the pre-flight.

THE BOX IN ONE CARD WAN 2.5 GbE · LAN 4 × 1 GbE (no PoE) · IDS/IPS 1 Gbps · Network app only

The Ultra is a gateway and your UniFi controller in one small box — quad-core, 3 GB RAM, a tiny status screen, set up by app (Bluetooth) or browser. It is not a camera recorder and its LAN ports do not power access points: budget a PoE switch or injectors for your APs (our U7 Pro guide covers the PoE+ requirement).

30+ devices / 300+ clients (Ubiquiti guideline)No Protect · No PoE · No multi-gig LAN

Pre-flight — the 10 minutes that save the afternoon

Know your ISP handoff: DHCP (most cable/fibre), PPPoE (credentials needed — get them from the ISP before the swap), or static. PPPoE readers: remember the datasheet footnote — inspection throughput “may be reduced with PPPoE.”
Decide the ISP box's fate: bridge mode (best: the ISP box becomes a dumb modem, the Ultra is the only router) or double NAT (works for most things, complicates inbound VPN/port rules). Ubiquiti publishes no official bridge-mode walkthrough — the setting lives in your ISP box's own menus, and the ISP's support line is the honest source for it.
Check the subnet collision: if the ISP router's LAN is 192.168.1.0/24 and stays in router mode, plan to give the UniFi LAN a different range (192.168.2.x or 10.x) during setup. Claims online that UniFi “automatically” renumbers to avoid the clash could not be verified in Ubiquiti's documentation — do not build your Saturday on them.
Inventory the static things: printers, NAS, cameras, the point-of-sale terminal — anything with a hand-set address on the old network. A LAN range change breaks them all until re-addressed; write the list now.
Account readiness: a UI.com account unlocks remote management and cloud backups; local administration works without one (officially — the “forced cloud account” claim is stale). Decide now, not mid-wizard.

The setup ladder

Wire: ISP box → Ultra WAN port; your main PC into a LAN port for setup (or use the UniFi app over Bluetooth).
Boot and wait: first boot is minutes, not seconds — the LCM screen shows progress. Resist the reboot reflex.
Run the wizard (app or browser at the gateway's setup address): name the site, set the internet connection type from your pre-flight, apply any PPPoE credentials.
Verify internet at the gateway before touching Wi-Fi: the Ultra's own status shows WAN address and connectivity. (No internet here? Rungs below.)
Update firmware when offered — before adopting anything else.
Set the LAN range if your collision plan requires it — now, while nothing depends on it.
Create the WLAN (name + strong password; WPA2/WPA3 mixed for a mixed fleet).
Adopt switches and APs — powered by PoE from a switch/injector (the Ultra's ports won't power them); adoption trouble routes to our adoption guide.
Turn on the day-one settings (next section) and take a backup.

Day-one settings

Setting	Guidance
IDS/IPS	Enable it — it's the reason for the box — knowing the ceiling: 1 Gbps rated, on Ubiquiti's DHCP/iPerf3 basis, with the PPPoE caveat. On a gigabit DHCP line you keep full speed; on PPPoE, measure after enabling and decide with data.
Updates	Keep UniFi OS and Network updates deliberate for a business: automatic device firmware in a maintenance window beats a midday surprise reboot of the whole network's brain. Whatever you choose, choose it — don't drift on defaults.
Remote access	Optional and genuinely useful for whoever supports your network; it is a UI-account feature. Local-only administration remains fully functional (verified in Ubiquiti's docs).
Backups	Export a settings backup after setup and store it off-box. A gateway that dies with its config unexported turns a hardware swap into a rebuild.
Admin hygiene	Unique local admin password, and the UI account (if used) with two-factor on. This box is the network's front door and its diary.

Capacity honesty — when the Ultra is NOT enough

Your reality	Verdict
One site, a handful of APs/switches, ≤ ~300 clients, gigabit internet	The Ultra's design centre — Ubiquiti's 30+ devices / 300+ clients are guidelines, not guarantees, and real usage varies with features enabled.
Multi-gig internet you actually want to use	Not this box: 2.5 GbE WAN feeds 1 GbE LAN ports with no aggregation, under a 1 Gbps inspection ceiling. Step up to a gateway with multi-gig LAN.
Cameras / Protect on the roadmap	The Ultra never runs Protect. Add a Protect host or choose a console that includes it.
Multiple sites	One Ultra per site, each its own controller — fine; or a different hosting model if you want one pane of glass (out of this box's scope).

First-week troubleshooting rungs

“No internet detected”: cable in WAN (not LAN) → ISP box reboot order (ISP box first, then Ultra) → connection type/PPPoE credentials from pre-flight.
Internet at the Ultra, chaos on the LAN: the 192.168.1 collision, exactly as pre-flighted — change one side.
Everything slow since enabling security: measure with IPS on/off; PPPoE lines see the footnote in real life. Data first, settings second.
APs never appear: power first (Ultra ports have no PoE), then the adoption guide.
Old printer/POS “vanished”: it's on the old range — your static inventory from pre-flight is its map home.

FAQ

Can I restore my old controller's backup onto the Ultra?

UniFi's backup/restore flow supports migrating a Network backup to a new console — take the backup from the old controller before decommissioning it, and match application versions as the restore flow directs. (Cross-version restore requirements have shifted between UniFi OS releases; verify in the current backups documentation at migration time rather than trusting any guide's version numbers — including ours.)

Does it replace my modem?

No — it's a gateway/router/controller. The ISP's modem/ONT stays; the Ultra takes over routing, firewall, and Wi-Fi management behind it.

Is “set up in minutes” true?

The wizard is quick; honesty adds first boot (~minutes), firmware updates, and your pre-flight. Budget an hour for a careful swap and spend the change on verification.

Sources

Ubiquiti — UCG-Ultra datasheet (ports, platform, IDS/IPS rating with its iPerf3/DHCP/PPPoE footnote) · Ubiquiti Help Center — setup flows, local vs account administration, backups · Ubiquiti store tech-specs (device/client guidelines, Network-only applications — read via authorised mirrors; ui.com direct fetch was unavailable at research time, noted per this site's verification rules).

Verification note: specifications were confirmed against the official datasheet on 20 October 2026. The automatic-LAN-renumbering claim and auto-NAT rescue stories were searched for in Ubiquiti's documentation and NOT found — this guide plans for the collision manually and flags the folklore explicitly.

Did this guide work for you?

Your reaction tells us whether this guide solved the problem it promised to solve.