UniFi Home Network Setup: What to Buy First

Buy the gateway (UniFi calls it a console) first. For most houses that means a Cloud Gateway Ultra ($129), then one access point, then a PoE switch sized by watts rather than ports. A small apartment can start with a UniFi Express 7 (from $199), a gateway and Wi-Fi 7 access point in one box.

Prices throughout are US Ubiquiti Store list prices, checked in October 2026.

Most first UniFi builds go wrong in the same two places: buying a switch by its port count instead of its power budget, and buying an access point before working out where it will physically go. Neither mistake is expensive to avoid on paper and both are expensive to fix once the cable is in the wall.

This is a buying order, not a shopping list. The point is to decide what constrains your build before you decide what brand-new model to put in the cart.

How a UniFi network fits together: four roles

A managed UniFi network separates four roles, although a cloud gateway can combine several in one purchase.

• The controller is the UniFi Network application: it adopts devices, applies configuration and collects statistics.
• The gateway routes, does NAT, provides DHCP and enforces firewall and inter-VLAN policy. A UniFi cloud gateway also hosts UniFi Network; a third-party router can provide routing separately.
• The switch carries VLAN tags and, if it is a PoE model, delivers power to access points and cameras over the same cable as data.
• The access point provides the Wi-Fi connection to the wired network.

A small deployment can use an existing router and power an AP with a compatible injector. For centralized management, UniFi Network can run on a CloudKey or a self-hosted system instead of a cloud gateway. You therefore do not need to replace a functioning router merely to manage UniFi APs.

The controller manages; the gateway forwards

Ubiquiti’s self-hosting documentation confirms that adopted APs and switches keep functioning if the Network application stops. The application is needed for configuration changes and complete statistics, so plan a host that remains available. A controller outage and a routing outage require different checks.

The gateway owns the subnet and firewall configuration in a basic cloud-gateway design. With a third-party gateway, configure the VLAN ID, subnet and DHCP there as well as declaring the matching network in UniFi. Creating a VLAN alone does not define which other networks it should reach: choose isolation and permitted services explicitly.

Buy the console first, and size it by device count

Console capacity is published as a device count and a client count, and those two numbers are what actually box you in later.

Ubiquiti’s spec pages carry the hardware figures (Express 7, Dream Router 7, Cloud Gateway Max). The store also shows a surcharge-inclusive price beside each list price: the Cloud Gateway Ultra listed at $129 read $142 with it. Four things follow.

First, a one-box start now means the Express 7. The original Express manages four UniFi devices, its spec page says updates continue on UniFi Network 9.0 and points 9.1-and-later users to the Express 7, and the US store listed it as sold out in October 2026. The Express 7 manages 30+ devices but has a single 2.5 GbE LAN port for any wired AP or switch. Protect camera management is a separate application requirement.

Second, the Cloud Gateway Ultra has no PoE output at all. If you buy it and then buy a PoE access point, you also need either a PoE switch or an injector. This surprises people who assume a “gateway” powers the things plugged into it.

Third, the Dream Router 7 is the one console here that powers an AP, and only one. Its single PoE port has a 15.4 W budget: enough for a U7 Lite at 13 W maximum or a U6+ at 9 W, but not a U7 Pro, which is a PoE+ device drawing up to 21 W.

Fourth, compare the published IDS/IPS rating with the intended inspected traffic load. The Ultra is rated at 1 Gbps, the Express 7, Dream Router 7 and Cloud Gateway Max at 2.3 Gbps, and the Dream Machine Pro at 3.5 Gbps. These are vendor specifications, not a guarantee for every workload; Ethernet port speeds remain separate limits.

How much does a starter UniFi home network cost?

A one-box UniFi network costs $199 for a UniFi Express 7. A gateway, an eight-port PoE switch and two Wi-Fi 7 access points cost $436 at October 2026 US list prices, before tax, shipping, the store’s surcharge and cable. Each build below is sized so the PoE arithmetic closes.

Choose between the last two rows by where the internet connection enters. If the modem or ONT lives in a garage, cupboard or basement, a radio built into the gateway is wasted there; the Ultra build costs $58 more but puts both radios on ceilings where people actually use Wi-Fi.

Buy the switch for its power budget, not its ports

This is the single most common sizing error, and the specifications make it obvious once you look at the right line.

The UniFi Lite 16 PoE has sixteen gigabit ports. Only eight of them are PoE+, and the total PoE budget across the whole switch is 45 W. Eight PoE+ ports each capable of 32 W do not add up to 256 W of usable power; they add up to 45 W, shared.

Compare that with the Pro 24 PoE: 24 gigabit ports, of which 16 are PoE+ at up to 30 W and 8 are PoE++ at up to 60 W, on a 400 W total budget, with two 10G SFP+ uplinks.

Price does not track power either. In October 2026 the store listed the Lite 16 PoE at $199 and the Pro 24 PoE at $699, while the $109 Lite 8 PoE has the larger budget of the two Lite models: 52 W across four PoE+ ports.

Now put real load against it. A U7 Pro access point draws up to 21 W. Three of them is 63 W, which already exceeds the Lite 16’s entire 45 W budget even though only three of its eight PoE ports are in use. A U7 Lite or U6 Pro at 13 W would total 39 W for three APs, leaving 6 W before delivery losses and expansion.

Two rules fall out of that:

1. Add up worst-case draw, not typical draw. Datasheet maximums are what the switch has to be able to satisfy simultaneously.
2. Leave headroom. Cameras, doorbells, and a second AP arrive later, and cable length and quality both eat into delivered power.

Use the PoE budget and switch planning worksheet to separate compatible powered ports from available watts. The UniFi sizing planner provides an initial estimate; substitute each chosen device’s published maximum when checking the final budget.

Access points: fewer and better, placed properly

Coverage figures on Ubiquiti datasheets are ideal-condition numbers: 140 m² (1,500 ft²) for the U7 Pro, U6 Pro, and U6+; 115 m² (1,250 ft²) for the U7 Lite. Real walls, especially anything with foil-backed insulation, brick, or a metal stud frame, take large bites out of that.

At October 2026 list prices the U7 Lite is $99, the U6+ $129, the U6 Pro $159 and the U7 Pro from $189. The cheapest is also Wi-Fi 7; it gives up rated coverage and the U7 Pro’s 6 GHz radio, as the other three run on 2.4 and 5 GHz only.

Access-point placement also needs a channel plan. Ubiquiti’s optimization guide distinguishes low-density homes from environments with overlapping APs: channel width and transmit power should follow the environment rather than a single maximum-performance preset. An added AP can create more interference if its configuration overlaps poorly with existing radios.

Practical starting points for a house:

• Start with the rooms that need coverage and suitable mounting positions. A central ceiling location is a planning candidate, not a guarantee that one AP will cover an entire floor.
• Skip the AP entirely in the first pass if you bought a console with a built-in radio and you are testing whether coverage is even a problem.
• Match the uplink. The U7 Pro and U7 Lite both present a 2.5 GbE port. Plugged into a gigabit switch port, that 2.5 GbE is capped at 1 Gbps, which is fine for most homes but is a spec you paid for and are not using.

How many of those access points the switch can actually power, and whether the faster uplink port earns its price, is worked through in UniFi access point PoE budget and switch planning.

Ubiquiti recommends 20 MHz on 2.4 GHz, with 5 GHz width depending on density: its examples use 80 MHz for low-density homes and 40 MHz for denser deployments. Supported 6 GHz operation adds another band, but clients still need suitable signal strength and compatible radios. Wider channels do not remove the need to review placement and airtime use.

A sane buying order

1. Console. It determines your device ceiling and whether you have PoE at all.
2. One access point, if the console has no radio, or if it has one and coverage is clearly short.
3. PoE switch, sized from the actual draw of the devices you now own plus the ones you have already decided to buy.
4. Everything else — cameras, more APs, a second switch for a distant room.

Buying in that order means each purchase is made with a real constraint in hand rather than a guess. It also means the network is functional after step one or two, so you learn what your coverage problem actually is before spending money on it.

How to set up a UniFi home network once it arrives

Set it up in the order you bought it: gateway, then Wi-Fi, then wired devices one at a time. Ubiquiti’s How to Set Up UniFi guide works from the UniFi mobile app or a web browser.

1. Connect the WAN. Cable the modem or ONT to the default WAN port: the 2.5 GbE port on the Cloud Gateway Ultra, the 10 GbE RJ45 port on the Express 7, the SFP+ or one 2.5 GbE port on the Dream Router 7.
2. Reach the console. Connect from the UniFi app over Wi-Fi or Bluetooth, within 3 m (10 ft) for Bluetooth, or browse to the console’s IP address from a laptop on the same network.
3. Run the wizard. A UI account is optional, but Ubiquiti strongly recommends one because it unlocks additional features. Create the main Wi-Fi network and confirm a client reaches the internet.
4. Add the switch, then the AP. Connect the PoE switch to a gateway LAN port and the AP to a powered port, then adopt each in UniFi Network. An AP with no lights usually points to power, covered in UniFi access point not powering on.
5. Update, then segment. Bring firmware current through the official update workflow before adding VLANs and extra SSIDs on the native and tagged path described below.

What to plan now even if you build it later

Two decisions are cheap to make on day one and irritating to retrofit.

A management network. Decide early which VLAN your UniFi devices themselves live on. Moving adopted devices to a different management VLAN later can strand them mid-transition, and untangling that is the most common cause of a device that will not come back. If it does happen, UniFi adoption failures walks the diagnostic path.

Cable runs. Power over Ethernet means one cable per AP, but it also means the run has to terminate somewhere that has a PoE port free and budget left. Pull the cable to the ceiling location you actually want, not to the location that is convenient today.

Write down the native and tagged VLAN path

The switch translates the network plan into a port configuration. In a common design without a device Network Override, the AP uses the port’s native network for management, while additional SSID networks travel tagged. The following is an illustrative port plan, not a configuration to paste into every deployment.

Follow the full path, including intermediate switches. A tag permitted at the AP port but blocked upstream cannot reach its DHCP service. Ubiquiti also documents a specific failure when an AP Network Override uses the same VLAN as its directly connected port’s native network. Decide whether management is native or explicitly tagged and configure the entire path consistently.

If Wi-Fi association succeeds but no address arrives, inspect DHCP and VLAN tagging before adding another AP. If the AP itself is missing, check its management address and the application path. UniFi’s ports reference distinguishes TCP 8080 device communication from UDP 10001 discovery and UDP 3478 STUN.

Avoid changing every layer at once

Record the working port profile before moving a device’s management network, and keep a way to restore it. Review firmware and application compatibility through the official update workflow. Apply one change at a time so an adoption failure can be tied to the changed VLAN, host or software version.

Radio configuration needs the same discipline. Do not assume maximum transmit power or broadcasting every SSID on every band suits every floor plan. Use Ubiquiti’s guidance for the actual density, then review client connectivity before expanding the design.

What you do not need

• A separate CloudKey when your console already runs UniFi Network. The controller is not a fourth box in a modern cloud-gateway build.
• A 10 Gbps core in a house whose internet connection is 500 Mbps. SFP+ uplinks are for aggregating many gigabit ports or reaching a NAS at speed, not for making a single laptop feel faster.
• IDS/IPS-grade routing throughput you will never enable.

Specify the console by device count, the switch by watts, and the access points by where they will physically hang. Everything else on a UniFi datasheet is a detail you can revisit once the network exists.

FAQ

does unifi require a subscription

No. UniFi Network comes preinstalled on cloud gateways with no license fee, and Ubiquiti describes the network as license-free. The paid extra is CyberSecure, an optional threat-intelligence subscription that the UniFi Network 9.0 announcement priced at $99 a year, with an Enterprise tier at $499 a year.

should i buy the unifi express 7 or the cloud gateway ultra

Buy the Express 7 if the gateway can sit near the middle of the home and one box should cover it, since Wi-Fi 7 is built in. Buy the $129 Cloud Gateway Ultra if the modem sits at the edge of the house or you want four LAN ports; it has no radio, so budget for an access point.

how many unifi access points do i need for a house

There is no fixed count: start with one AP for the area that most needs coverage, mount it centrally on a ceiling, and add another after checking client signal. Ubiquiti rates ideal-condition coverage at 115 m² (1,250 ft²) for the U7 Lite and 140 m² (1,500 ft²) for the U7 Pro; brick, foil-backed insulation and metal studs cut that.