--- title: "SD-WAN" description: "Hub-and-spoke SD-WAN on UniFi Site Magic. Every site rides two paths (fiber, cable, LTE or Starlink) back to your data centers, with no per-site license." url: "https://unifiedit.tech/services/sd-wan" lastmod: "2026-10-27" type: "page" --- VESSEL SAN FRANCISCO TORONTO SÃO PAULO LONDON HQ · MIAMI # Connect your sites globally. License-free. Hub-and-spoke SD-WAN on UniFi. Every site rides two paths (fiber, cable, LTE or Starlink) back to your data centers and fails over in seconds, with no per-site license. [Talk to an Engineer](https://unifiedit.tech/schedule-call) ## Why UniFi SD-WAN UniFi Site Magic is the SD-WAN built into the UniFi gateways you already own. $0 ### License-free UniFi SD-WAN uses your infrastructure and encrypts traffic with WireGuard VPN tunnels, so there is no license or subscription to renew. 1,000+ ### Sites Scale to thousands of sites, each homed to more than one data center over diverse paths. ### Diverse paths Deploy up to 4 connections per site, so a circuit, carrier or hub failure never takes a site offline. ## How SD-WAN works Build one step by step, then send a hurricane through it. ### Build your WAN $0 License cost Have questions? [Talk to an Engineer](https://unifiedit.tech/schedule-call) **Sites** 4 **Hubs** 1 **Paths** 2 **Tunnels** 8 TAMPA · DATA CENTER AUSTIN · DATA CENTER FORT MYERS ORLANDO MIAMI JACKSONVILLE DALLAS HOUSTON SAN ANTONIO EL PASO LUBBOCK AMARILLO MIDLAND CORPUS CHRISTI LUMEN AT&T ![Lumen](https://unifiedit.tech/assets/isp/lumen.png) AT&T Data center Site Map of Florida. A data center in Tampa connects to four sites over two carriers, Lumen and AT&T. Scale A thousand sites per hub group; add hubs to grow past it. Mesh groups for small estates, up to 20 sites. Security Centralized inspection and segmentation at the hubs. Redundancy Up to four active tunnels per spoke. Failover hubs can be added. Flexibility NAT for overlapping subnets, custom route advertisements, load balancing across hubs. ## What you save The recurring WAN cost you stop paying each year, after a business broadband line at each site. Pick a site count. vs MPLS · 100 Mbps $596,400 saved per year after broadband · 50 sites vs Metro Ethernet · 100 Mbps $92,400 saved per year after broadband · 50 sites vs EPL · 1 Gbps $385,800 saved per year after broadband · 50 sites Technology Saved with Site Magic, after broadband · 50 sites · per year Legacy recurring Install · per site UniFi Site Magic $0 / mo · license-free plus broadband, $141 – $307 / mo Baseline $0 $142 – $2,202 gateway MPLS 100 Mbps $1,135 – $1,670 / mo per site $596,400 saved $681,000 $0 – $2,000 Metro Ethernet 100 Mbps $295 – $792 / mo per site $92,400 saved $177,000 $0 – $2,000 EPL 1 Gbps $950 – $2,000 / mo per site $385,800 saved $570,000 $0 – $2,000 Site Magic replaces the private WAN, not the ISP, so every site still needs an internet line. Each saving is the low end of the circuit’s published range less a business broadband line at the same speed ($141 / mo at 100 Mbps, $307 at 1 Gbps), with no volume discount. Install excludes special construction at off-net sites. Sites that need a dedicated internet line instead of broadband save less; we price that per site. **Sources** - MPLS, 100 Mbps port and access: CALNET (State of California) contract catalogs, Aug–Sep 2026: [AT&T](https://calnetinfo.att.com/Uploads/Link/ATT_Catalog_B_DNCS_Category_20_Final_09102026.pdf) · [Verizon](https://www.verizon.com/business/r3s0u4c3s/public-sector/state-local/contracts/ca-wireline/calnet-ng/product-catalog/verizon-catalog-b-dncs-category-20-mpls.pdf) · [Granite](https://calnet.granitenet.com/Calnet/Content/pdfs/granite_Catalog%20B_DNCS_Category%2020.pdf) - Metro Ethernet, 10/100 port plus 100 Mbps CIR: CALNET contract catalogs, Aug–Sep 2026: [AT&T](https://calnetinfo.att.com/Uploads/Link/ATT_Catalog_B_DNCS_Category_23_Final_09102026.pdf) · [Verizon](https://www.verizon.com/business/r3s0u4c3s/public-sector/state-local/contracts/ca-wireline/calnet-ng/product-catalog/verizon-catalog-b-dncs-category-23-metro-ethernet.pdf) · [Zayo](https://www.crowncastle.com/pdfs/fiber-assetco-llc-dba-zayo-catalog-b_dncs_category-23-final-08132026.pdf) · [Granite](https://calnet.granitenet.com/Calnet/Content/pdfs/granite_Catalog%20B_DNCS_Category%2023.pdf) - EPL, 1 Gbps point to point: Lightyear quote data, Jan 2026: [Point-to-point fiber pricing](https://lightyear.ai/tips/point-to-point-fiber) - Broadband ($141 / mo at 100 Mbps, $307 at 1 Gbps, North America medians) and install (up to $2,000; $0 on the CALNET catalogs above): Lightyear, Apr 2026: [SD-WAN vs MPLS cost comparison](https://lightyear.ai/blogs/sd-wan-vs-mpls-cost-comparison) - Site Magic gateways: Ubiquiti US store, Oct 2026, surcharge included: [Cloud Gateways](https://store.ui.com/us/en/category/all-cloud-gateways) · [SD-WAN requirements](https://help.ui.com/hc/en-us/articles/16750417515159) ## How we migrate We move a legacy WAN to Site Magic in three phases. The overlay runs beside your MPLS, and nothing cuts over before it is validated. 01 ### Evaluate We inventory every circuit, carrier and routing dependency, map application flows, and decide whether SD-WAN is the right fit at all. Rollback is documented before anything is deployed. 02 ### Parallel overlay The overlay goes in beside the production WAN. Routing policy, segmentation and failover are validated on every tunnel while MPLS still carries the traffic. 03 ### Cutover coordination Sites move in coordinated windows by region or group. Each is validated live and documented before its circuit is disconnected. The MPLS bill ends when the last one goes. ## Talk to a network engineer. [Talk to an Engineer](https://unifiedit.tech/schedule-call)