A VPN lets your team reach the office network securely from home, a client site or a hotel, as if they were sat at their desk, without exposing anything to the open internet. The Dream Machine has this built in, and as a team that sets up secure remote access for businesses every week, here is how we approach it. Menu names shift between firmware versions, so we have kept to what you are setting up and why.
First, decide what you actually need
There are two common jobs, and they are different. Remote user access lets individual staff connect back to the office from wherever they are. Site-to-site links two offices together so they behave as one network. Most businesses start with remote user access, so that is the main focus here.
Step by step
- Pick your method. In the UniFi Network app, open Settings → VPN. The easiest is Teleport (a one-tap VPN through the UniFi app); for a traditional client VPN, use the VPN Server option (WireGuard, OpenVPN or L2TP).
- Enable the VPN server. Under Settings → VPN, create your VPN Server and choose the type, or for Teleport, generate an invite link.
- Create users. Add each person in the VPN server’s settings with strong, unique credentials, or send them a Teleport invite for their device.
- Limit what they can reach. Under Settings → Routing & Firewall, add rules so remote users reach only the networks and systems they need, not the whole network. Least access keeps you safe if a device is lost.
- Link offices if needed. For two sites, set up a Site-to-Site VPN under Settings → VPN between the UniFi gateways.
- Secure and maintain it. Keep firmware current, remove users the moment they leave, and review who has access periodically.
- Test from outside. Connect from a phone on mobile data or an offsite laptop and confirm you can reach what you should, and nothing you should not.
The rule that matters most is least access: give each remote user a route only to what they need. A VPN that drops everyone onto the whole network is convenient right up until a laptop is lost or an account is compromised.
Stuck at any step? VPNs are one of those jobs that are simple when they work and baffling when they do not, and you do not need to be a network engineer to get them right. We set up secure remote access for businesses every week, so if a connection will not establish or access is not scoped properly, one call and we will take it from here.
Frequently asked questions
Does a UniFi Dream Machine have a built-in VPN?
Yes. It includes several VPN options built in, from UniFi’s easy Teleport to standard WireGuard, OpenVPN and L2TP client VPNs, plus site-to-site for linking offices, so you do not need separate VPN hardware.
What is UniFi Teleport?
Teleport is UniFi’s simplest remote-access VPN: you send an invite link, and the user connects back to the office with one tap through the UniFi app, with nothing to configure manually. Great for quick, secure staff access.
Can I link two offices with a UniFi VPN?
Yes. A site-to-site VPN between two UniFi gateways joins the offices into one secure network, so staff and systems at each site can work together as if on the same network.
Is a VPN secure enough for remote work?
A properly configured VPN with strong credentials, current firmware and least-access rules is a secure, standard way to enable remote work. The security comes from the configuration, limiting access and managing users, which is exactly where we add value.
How Synergy Max helps
Remote access is easy to switch on and easy to leave too open. We set it up properly on your UniFi network, the right VPN method for how your team works, access scoped to what each person needs, and a tidy process for adding and removing users. Just set the Dream Machine up? See our first-time setup guide, and if anything is misbehaving, our UniFi troubleshooting guide helps.