Ubiquiti EdgeMAX Discovery
The Infracast EdgeMAX plugin connects to Ubiquiti EdgeRouter and EdgeMAX devices over SSH and reads the device's interfaces, routing table and LLDP neighbors. EdgeMAX is separate from UniFi: UniFi controllers use the UniFi connector.
Requires an On-Prem Relay
EdgeMAX devices sit inside your network and are reached on their management addresses. On the hosted platform, EdgeMAX discovery requires an on-prem relay, and the form cannot be submitted without one.
- In Infracast, open Connectors → Relay and install a relay on a host that can reach the devices over SSH. The install command installs the relay together with its plugins.
- Open Connectors, choose Ubiquiti EdgeMAX, and pick the relay.
- Enter the device addresses (comma separated), the SSH username and password, and the SSH port if it is not 22. Run discovery.
Credentials go to the relay with the job and are masked if the job is viewed.
Read-Only Credentials
Create a dedicated user with the operator level, which can run show commands but cannot change configuration:
configure
set system login user infracast level operator
set system login user infracast authentication plaintext-password 'YourSecurePassword'
commit
save
exit
Infracast runs show commands and never enters configuration mode.
What Gets Discovered
| Category | Data Collected |
|---|---|
| Device Identity | Hostname, model, firmware version |
| Interfaces | Name, addresses, state |
| Routes | Destination, next hop, protocol, interface |
| Neighbors | LLDP neighbors, linked to the device |
NAT rules and firewall policy are not collected from EdgeMAX devices in this release. A path that crosses an EdgeMAX router shows the routing hop and marks the firewall decision as not read, never as allowed or blocked.
Troubleshooting
The relay does not report the ubiquiti-edgemax plugin
Re-run the relay's install command. It installs the relay and its plugins as one set that must match the server's build.
Authentication failure
Check the username and password with ssh infracast@<device> from the relay host, and that the account has at least the operator level.