{"access-port":{"t":"Access port","d":"One VLAN only, untagged. Fine for a printer. Wrong for an AP that serves multiple SSIDs."},"adopt":{"t":"Adopt","d":"Bring a new UniFi device under your UniFi app so you can manage it. Until then it shows Pending Adoption."},"aux":{"t":"AUX","d":"Extra Door Hub relay for a door operator (dry) or a siren or chime (powered 12V). Not for the main lock."},"backup-wan":{"t":"Backup WAN","d":"A second internet line, like UniFi 5G Backup or Starlink, that the gateway switches to when the main line drops."},"basic-protection":{"t":"Basic Protection","d":"RAID 5 with 3 or more drives. Protects against 1 drive failing."},"bpdu-guard":{"t":"BPDU Guard","d":"Port setting for client ports. A spanning tree message (BPDU) from a switch that should not be there shuts the port, and an admin has to re-enable it."},"broadcast-storm":{"t":"Broadcast storm","d":"What a loop does: the same traffic copies itself around the loop again and again until links fill up and devices drop off."},"client-isolation":{"t":"Client isolation","d":"WiFi setting that stops guest clients from talking to each other. Keep on for Guest."},"com":{"t":"COM","d":"Common side of the LOCK relay pair. It lands with NC or with NO, not both."},"debug-console":{"t":"Debug Console","d":"Built-in browser shell on the console."},"device-bridge":{"t":"Device Bridge","d":"A pair of UniFi radios that replaces a network cable between two buildings or spots."},"device-ssh-settings":{"t":"Device SSH Settings","d":"Network setting holding the SSH login an adopted device uses. Factory default devices use ui / ui."},"dhcp-option-43":{"t":"DHCP Option 43","d":"DHCP option that hands devices the Network host address so they adopt across VLANs."},"door-attendant-receiver":{"t":"Door Attendant / receiver","d":"User assigned to get the door call. Not on the list means no Unlock for that door."},"door-attendant":{"t":"Door Attendant","d":"The smallest Access admin role that can see, talk to and unlock a door for a visitor. Enough for a shared reception phone."},"door-hub":{"t":"Door Hub","d":"The Access controller at the door. It wires the lock, door sensor, exit button and reader."},"door-position-sensor-dps":{"t":"Door position sensor (DPS)","d":"A contact on the door and frame that tells the hub whether the door is open or closed."},"doorbell-call-receiver":{"t":"Doorbell Call receiver","d":"Who a reader rings when a visitor presses the doorbell. Set in Access, Interface Designer, Doorbell Call for that reader."},"dry":{"t":"DRY","d":"LOCK mode with no power from the hub. An outside supply can run a non-12V lock, up to 30V DC at 1 A."},"early-media":{"t":"Early media","d":"A SIP feature that carries audio and video before the call is answered. Without it a SIP phone can ring with no intercom video."},"factory-reset":{"t":"Factory reset","d":"Clears the camera so it isn't adopted anywhere."},"fail-safe":{"t":"Fail-safe","d":"A lock that needs power to stay locked, like a maglock. Wire it to LOCK NC and COM."},"fail-secure":{"t":"Fail-secure","d":"A lock that needs power to unlock, like most strikes. Wire it to LOCK NO and COM."},"flex-budget":{"t":"Flex budget","d":"USW-Flex downstream totals by input: AF 8W, AT 20W, BT or 60W injector 46W (set Power Source to PoE Injector)."},"free-egress":{"t":"Free egress","d":"Leaving without badging out."},"gateway-zone":{"t":"Gateway zone","d":"The router itself, which answers DHCP and DNS. Block a network's zone from the Gateway and its clients get no IP or DNS."},"high-quality-period":{"t":"High-quality period","d":"Recent footage stays full quality. Older footage is kept at low quality."},"hot-swap":{"t":"Hot swap","d":"Replace a drive while the UNVR stays on."},"ids-ips":{"t":"IDS/IPS","d":"The gateway checks traffic for known attacks and blocks them. Turning it on lowers how fast the gateway can route, so each model lists an IPS throughput."},"inform":{"t":"Inform","d":"Device check-in URL to the Network application, usually controller host on port 8080, path /inform."},"injector":{"t":"Injector","d":"A box that adds PoE power to a cable. Too weak a class, like an AF injector on a loaded Flex, is a common field mistake."},"ir-range":{"t":"IR range","d":"How far the camera's built-in infrared night light reaches. Past it the night image goes dark fast."},"isolate-spokes":{"t":"Isolate Spokes","d":"Site Magic Hub and Spoke setting. Each spoke site reaches the hub but not the other spokes."},"line-of-sight":{"t":"Line of sight","d":"A clear straight path between the two bridge ends, with no roof, wall, or trees in the way."},"lock":{"t":"LOCK","d":"The Door Hub's main lock relay, with NO, NC and COM terminals. Set it to POWERED for 12V from the hub, or DRY for no power."},"lockdown":{"t":"Lockdown","d":"Access emergency mode that overrides credentials so doors stay locked. An admin can still unlock one door remotely."},"loop-protection":{"t":"Loop Protection","d":"Port setting that spots a loop on its own, even behind a switch that does not speak STP, and blocks the port. The port stays blocked until an admin re-enables it."},"managed-by-other":{"t":"Managed by Other","d":"Devices list state. Another instance of UniFi Network owns the device, including the same console after a factory restore. Fix: restore a backup, factory reset and re-adopt, or reassign in the mobile app."},"max-draw":{"t":"Max draw","d":"The most watts a device can pull, from its datasheet (IR on, at boot). UniFi PoE budgets use this, not the quieter live reading."},"mdns-proxy":{"t":"mDNS Proxy","d":"Gateway setting that passes device discovery between networks, so a phone on one VLAN can find a TV or printer on another. Auto, or Custom with the networks you pick."},"mesh":{"t":"Mesh","d":"Site Magic layout where every site links straight to every other site. It can't NAT overlapping subnets."},"native-vlan":{"t":"Native VLAN","d":"The untagged VLAN on a switch port. UniFi device management usually rides here. Set as Native VLAN in Port Manager."},"nc-com":{"t":"NC/COM","d":"Fail-safe pair. Unlock opens the relay and drops power so a maglock releases."},"no-com":{"t":"NO/COM","d":"Fail-secure pair. Unlock closes the relay and applies power so a strike unlocks."},"passive-poe":{"t":"Passive PoE","d":"Power sent on the cable with no handshake. It's always on when enabled, so only plug in devices made for it."},"pending-adoption":{"t":"Pending Adoption","d":"Devices list state for a device that has checked in and is waiting for you to click Adopt."},"pixel-density":{"t":"Pixel density","d":"Pixels on the target per meter or per foot. The IEC 62676-4 bands: Identify 250, Recognize 125, Observe 62, Detect 25 pixels per meter."},"poe-plus":{"t":"PoE+","d":"802.3at. Up to 25.5W to the device."},"poe-plus-plus":{"t":"PoE++","d":"802.3bt Type 3. Up to 51W to the device."},"poe-availability":{"t":"PoE Availability","d":"The total PoE power the switch can share across its ports."},"poe-budget":{"t":"PoE budget","d":"Every device's max draw added up, compared with what the switch or injector can supply. Go over it and devices lose power."},"poe-class":{"t":"PoE class","d":"AF (about 15W), AT (about 30W), BT / PoE++ (higher). UniFi budgets on documented max draw, not quiet daytime watts."},"poe-output":{"t":"PoE output","d":"A port on the UDB-Pro that powers a PoE device, here the camera. It only runs with PoE+ coming in."},"point-to-multipoint":{"t":"Point to multipoint","d":"One radio serving many bridges at once, like the UDB-Pro-Sector."},"powered":{"t":"POWERED","d":"LOCK power from the hub: 12V DC, up to 1 A. Do not add a second 12V supply."},"recipient-number":{"t":"Recipient Number","d":"On a SIP doorbell call, the extension the reader dials. For a Talk phone in Third-Party PBX mode it is that phone's extension."},"recording-destination":{"t":"Recording destination","d":"The NVR the camera records to. Picked on the phone during adoption."},"recording-retention":{"t":"Recording Retention","d":"A limit on how long recordings are kept. Not a promise."},"remote-unlock-via-endpoint":{"t":"Remote Unlock via Endpoint","d":"Access setting. When off, Endpoint receivers can talk on a call but cannot unlock."},"repair":{"t":"Repair","d":"Rebuilds the protected storage onto the new drive. Things run slower until it finishes."},"request-to-exit-rex":{"t":"Request to exit (REX)","d":"A button, motion sensor, or panic bar that unlocks the door from the inside without a credential."},"root-bridge":{"t":"Root bridge","d":"The switch every other switch measures its paths from. The lowest STP priority wins, so set the core switch to 0."},"rstp":{"t":"RSTP","d":"Rapid Spanning Tree, the faster form of STP. On by default. It blocks the second path of a loop, and the Ports page shows that port as blocked."},"set-inform":{"t":"set-inform","d":"Device SSH command that tells a UniFi device where its Network host is, e.g. http://192.168.1.10:8080/inform."},"sonosnet":{"t":"SonosNet","d":"The speakers' own wireless network. It runs its own spanning tree you cannot configure, and a speaker that is wired and on SonosNet can bridge two wired segments into a loop."},"stp":{"t":"STP","d":"Spanning Tree Protocol. Switches find a second path between them and block it, so traffic cannot circle forever."},"stp-edge":{"t":"STP Edge","d":"Marks a port as a client port, where only end devices plug in. Pair it with BPDU Guard."},"stp-priority":{"t":"STP priority","d":"A number per switch. The lowest becomes the root bridge. Core 0, the next layer 4096, then add 4096 per layer."},"stun":{"t":"STUN","d":"UDP 3478 helper for remote adoption and remote management. Not the adoption path itself: adoption needs TCP 8080 to the Network host."},"super-encoding":{"t":"Super Encoding","d":"Makes each day of recording smaller."},"tagged-vlan-management":{"t":"Tagged VLAN Management","d":"Port setting for which VLANs ride tagged (802.1Q): Allow All, Block All, or Custom. Guest and IoT SSIDs need their VLANs tagged on the AP uplink."},"teleport-adoption":{"t":"Teleport Adoption","d":"Adopts a camera at another location to the NVR at the main house over the internet. No VPN, no port forwarding."},"third-party-pbx-mode":{"t":"Third-Party PBX mode","d":"G3 phone setup that registers the phone as a SIP phone with a SIP server, here UniFi Talk, instead of as a native Talk phone."},"trigger-level":{"t":"Trigger level","d":"Which contact state counts as active. Open active (NC) or close active (NO)."},"trunk":{"t":"Trunk","d":"A port carrying the Native VLAN plus tagged VLANs. The right setup from switch to AP, or switch to gateway, when there are several networks."},"unauthorized-opening":{"t":"Unauthorized Opening","d":"Access status when the door opens while it's locked."},"unifi-endpoint":{"t":"UniFi Endpoint","d":"The phone app path for Access calls. Remote Unlock via Endpoint turns unlock on or off for that path."},"ups":{"t":"UPS","d":"A battery box that keeps the rack powered through a power cut. Size it for the console, switches, PoE and the modem."},"wireless-meshing":{"t":"Wireless meshing","d":"AP setting that lets an AP uplink over the air to another AP. With every AP wired, a wired AP can bridge two segments by air. Turn it off if no APs are wirelessly adopted."},"zbf":{"t":"ZBF","d":"Zone-Based Firewall. Rules are set between zones, like Internal, External, Gateway and Hotspot, plus custom zones such as IoT."}}
Try another way this breaks
Lab complete. No loops left, every port is up, and the office runs normally.
Loops gone
This run: all five loops at once. Stop the storms first, then bring the dead ports back.
The whole office slows to a crawl, then devices drop off and adoption fails.
Harden it
SW1 is the root at priority 0 and SW2 sits at 4096, with non-root uplinks marked Uplink. Client ports run and . is on every switch and gateway port. Replace bad cables so STP does not flap.
Hunt it down
Check the Ports page for high traffic or blocked ports. If STP did not catch it, unplug from the edge inward, starting with third-party switches and speakers on .
Glossary
Broadcast storm
What a loop does: the same traffic copies itself around the loop again and again until links fill up and devices drop off.
STP
Spanning Tree Protocol. Switches find a second path between them and block it, so traffic cannot circle forever.
RSTP
Rapid Spanning Tree, the faster form of STP. On by default. It blocks the second path of a loop, and the Ports page shows that port as blocked.
Root bridge
The switch every other switch measures its paths from. The lowest STP priority wins, so set the core switch to 0.
STP priority
A number per switch. The lowest becomes the root bridge. Core 0, the next layer 4096, then add 4096 per layer.
Loop Protection
Port setting that spots a loop on its own, even behind a switch that does not speak STP, and blocks the port. The port stays blocked until an admin re-enables it.
BPDU Guard
Port setting for client ports. A spanning tree message (BPDU) from a switch that should not be there shuts the port, and an admin has to re-enable it.
STP Edge
Marks a port as a client port, where only end devices plug in. Pair it with BPDU Guard.
SonosNet
The speakers' own wireless network. It runs its own spanning tree you cannot configure, and a speaker that is wired and on SonosNet can bridge two wired segments into a loop.
Wireless meshing
AP setting that lets an AP uplink over the air to another AP. With every AP wired, a wired AP can bridge two segments by air. Turn it off if no APs are wirelessly adopted.
A loop never shows a message on screen. Read the symptoms, check the Ports page, then pull cords from the edge inward.
Some loops storm the whole office. Others get caught and leave one dead port. Stop the storms first.
Clients off the gateway. Gateway switch ports do not support . Hang clients off one core switch.
Read a blocked port as a save. blocked the wall jack loop. Pull the patch cord and the port comes back.
Re-enable after . It catches loops behind switches that do not speak STP, and the port stays blocked until an admin re-enables it.
Speakers all wired or all wireless. Wired speakers run with and WiFi off, on one VLAN, then and on their ports.
off when every AP is wired.
Harden it. Core switch priority 0, next layer 4096, STP Edge and BPDU Guard on client ports, Loop Protection on every switch and gateway port, and no bad cables.
Office networks that stay up when someone plugs in the wrong cord. We design, wire and set them up.
UniFi network keeps dropping after a cable was plugged in
UniFi switch port blocked by Loop Protection
Access points drop out when Sonos speakers are plugged in
A teaching lab, not a quote and not a design for your site. Steps follow Ubiquiti's help articles on network loops and STP, switch settings, and best practices for Sonos devices. Menu names move between UniFi Network versions, and detection timing is not published, so none is shown. The status lines are lab labels.