Uap Pro Teardown

Unifi UAP Pro

The Unifi UAP Pro is an 802.11a/b/g/n/ac dual-band access point capable of 450-1300 Mbps speeds. I got it to put into my homelab, but I also wanted to see what was under the hood.

One of the first things I did when I received my Unifi UAP Pro was take it apart. The construction quality of Ubiquiti products is really impressive. The UAP Pro is held together by clips nested inside below the outer lip that you can find by prying at it with a spudger. You can use multiple plastic spudgers to get a toe-hold by jamming them in until you get the first clip unhooked. After that, it’s pretty simple to pop the rest of the clips off. Below are high resolution, focus-stacked photos I took of the internal board.

Top of Unifi UAP Pro board

Some things of interest here:

Bottom of Unifi UAP Pro board

Most interesting thing (to me) is the big fat Macronix MX25L12835FMI-10G flash chip, probably used to hold firmware.

If you want to reverse the firmware, you luckily don’t need to dump the flash or intercept traffic as you can download it directly from Unifi’s website. I’d like to poke at those interesting looking open serial ports to see what they actually are, and if they offer more secrets than what is available through their interface. Looking forward to hacking this one up a bit in the near future and seeing what it is capable of.

Written on November 14, 2019