r/UNIFI

Hi everyone,

I'm currently planning my first home network rack for our new house and wanted to get some feedback before I start ordering everything.

Current (potential 😅) setup:

• 1× Cloud Gateway Fiber
• 1× Switch Pro Max 24 PoE
• 2× U7 Pro XG
• 2× G6 Pro Bullet
• 1× G6 Entry + PoE Smart Chime
• 1× UNVR G2

The house will have around 16 hardwired Ethernet runs (Cat7), two floors,
reinforced concrete ceiling. I'm planning to use the UniFi ecosystem for networking, cameras, and door access. Is there anything important I'm overlooking

Besides patch panels, keystones, rack accessories and HDDs for the NVR (will get everthing later) do you think ill need a USP fpr example?

Any recommendations, lessons learned, or things you wish you had done differently on your first rack build are highly appreciated!

https://preview.redd.it/svhukz2i6zah1.png?width=502&format=png&auto=webp&s=3dc3b029ebf0410d177f4de326c794ef605762bf

Suddenly WifiMan on my Apple devices does not see that I am connected to a Unifi AP anymore. Any idea what is wrong??

I have just migrated my uos server to Linux zorin os it works in the browser but I would like desktop app is there anyway to get one.?

I have a UCG ultra running 3 SSIDs each with their own network.

One network is solely for kids’ devices, Using the Policy Engine, I have traffic and firewall rules set to block the YouTube App as well as a separate rule with all the YouTube domains blocked.

Recently our Sony Bravia TV started ignoring the rule, allowing YouTube to stream, the SmartTube app on the same TV continued to time out. Disabling IPv6 on the network from the UCG restored the YouTube block to that TV.

Do policy engine rules not apply to IPv6 connections?

Was trying to use the design center to test my layout but I keep getting told I am connecting incompatible ports? Wondering if design center doesn't know/let you remap ports from wan to lan possibly?

What I am trying to determine is if everything could be 10 gig uplink to UCGF. Will power the poe switches with external power supplies.

1. At&T fiber 5 gig into UCGF port 6 sfp (map WAN) (to start will be Sfp Ethernet transceiver but eventually gpon)
2. 1 Flex 2.5g to UCGF port 5 (map LAN)
3. 1 Flex 2.5g to UCGF port 7 (map LAN)

Realize I won't get 5 gig on anything downstream but At&t only now gives 1gig or 5gig as options for service it appears now.

Hopefully this kind of post is OK here.

I'm looking to jump in to the Unifi ecosystem for a few reasons:
* My WiFi system sucks. It's a Linksys Velop. It was easy to set up but it's fairly old and seems not well supported anymore
* I'd like to create VLANs to separate IoT devices from the rest of the network
* I just found out that my area offers 5gb internet. I'd like to get that at some point but I'd want to upgrade the rest of my infrastructure to 2.5gbe.

My house has cat-6 wired to many places but they're not generally optimal areas to place access points. I suspect I'll need two access points downstairs. Upstairs I should be able to run new ethernet and put a ceiling AP somewhere central.

Aside from that if I understand correctly I'll need Unifi PoE switches (and a cloud gateway?). The main switch in my network closet is a basic 8 port. It's not enough to connect all of the ethernet drops I have in the house. I may need a second switch in there. Unfortunately the "network closet" is really just a fairly small panel on the wall. Not large enough for a rack mount switch or anything like that.

Fiber comes to the outside of the house to a gateway that converts the fiber to ethernet. That wire goes into my network panel. I'd have to check what I have available outside. Maybe I can stick the cloud gateway there.

With all of this background what am I missing? Additionally, can I start these upgrades piecemeal? This stuff is expensive and I'd like to upgrade a few devices at a time. I'd imagine I'd start with a cloud gateway, then some switches where it makes the most sense. Eventually adding the APs. Does this make sense?

Hi

Wondered if anyone has any experience of throughput for a UCG-Max running PPPoE and IDS/IPS?

ISP is CityFibre in the UK, so stuck with PPPoE, via a VLAN tagged over RJ45 ONT.

I can only find that IDS/IPS on the Max is about 2.3 gbps, and that PPPoE will degrade that number, but not any idea of whats actually achievable…

I’ve been using the UTR weekly going between offices and have had zero issues connecting and even using Teleport.

I travelled this week to several different hotels and used different airlines. What I discovered was that many of these locations block the use of encrypted DNS services. After I turned off the encrypted DNS I was able to connect just fine through the captive portals.

I’m just wondering if this is the cause of a lot of people’s connection issues.

I know there are better travel routers out there. But for my use case it works great and the form factor is what sold me.

Hi,

Wondering if anyone has any experience of the U7 Pro XGS vs the U7 Pro XG specifically on the 4x4 vs 2x2 antenna, not for speed, but signal quality/range.

Im in a UK brick walled house, and currently have another brand with 5ghz 4x4 and they penetrate the brick fairly well.

Wondering if the change to 2x2 on the XG will make much of a difference to SNR?

Hi, just bought a UX7 and need a repeater or extender with ethernet out for a wired device at the other end of a 5000 sq foot 2 storey house. Does not need to be fast. But I am hoping for something in the Unifi ecosystem. Any suggestions?

Unifi has been out of stock with rack mounted UPS' for quite some time now. I'm actively in the middle of a multi-facility upgrade to an all Unifi ecosystem. UPS isn't as critical for now, but I'd like to get something in within the next 60 days.

Curious what this group finds to be an acceptable alternative? Ideally, I wanted the UPS and power control integration natively with Unifis system. But that seems to perhaps not be an option in the time I want.

Let me know what you have found to be an acceptable alternative in terms of something comparable. Some key items we needed to address:

- Graceful shutdown (of course)
- Ability to spin back up key endpoints when power returns (assuming it still has battery)
- Ability to powercycle plugs remotely

Thanks in advance.

Hi all,

I've just taken out a subscription for the CyberSecure dataset to restrict certain sites from my kids, I know there are probably better and cheaper options, but just wanted something that was easy to manage - seems I was wrong here.

It seems to work for one network, but not others.

I created a VLAN (192.168.8.0/24 default) for my sons PC and other wired devices that he has in his room. The gateway for this is the default 192.168.8.1, and I presume DNS is the same as it was just left at default. DHCP settings are default for this VLAN too.

I created a new 'CyberSecure->Content Filter' group and added his VLAN ID to this group and set the restrictions.

The Unifi SSL cert is installed on his PC and everything appears to be working as expected.

However, my main network (192.168.1.0/24), is a Windows Domain. The DC is at 192.168.1.2, DG is at 192.16.1.1 and this DC also manages DHCP. IPv6 is disabled.

I created a new 'CyberSecure->Content Filter' group and add restrictions and a few random machines (not networks) into it (which have had the Unifi SSL cert to) for test purposes, and set restrictions.

Machines on this network seem to ignore the restrictions, as an example all gambling sites load without being blocked.

This is what I've checked / changed so far:

Disabled IPv6 on both Cloud Gateway Fiber and endpoints

Encrypted DNS is set to Off on the CGF

The CGF Intternet network uses 8.8.8.8 and 1.1.1.1 for DNS

All of the devices on the 192.168.0.0/24 network use the DNS address of the DC (192.168.1.2)

The Forwarders of the DNS settings on the DC has been set to 192.168.1.1 and 'Use root hints if no forwarders are available' is unchecked. And there are no 'Conditional Forwarders'

I tried to block DoH and DoT, which made Google blocked!

Ad Blocker on the CyberSecure->Protection tab appears to work as do incoming Country Restrictions.

I feel like I'm banging my head against the wall with this, so any help would be appreciated.

I bought a new Unifi 30W injector that does not work with my U7 Lite and U7 Mesh. I looked up the compability and understood it should work. Am I wrong or is it doa?

Before this evening I was using a UCG Fiber that ran the Network and Protect software. I bought an NVR and managed to migrate my Protect software settings to the NVR.

Prior to the installation of the NVR, when I was viewing the network, on the upper left there were tabs for Network and Protect. Now when I log into the UCG, there is only a tab for Network and the protect is only accessible via a login to the NVR, where I see a Protect tab. It does not seem to be possible to switch between the two without opening a second window and authenticating again.

Is this proper behavior or did I screw up my UCG -> UCG + NVR migration.

Thanks in advance.

Hi all.

I work in lighting in the film industry and own roughly 15 Unifi devices. All are setup with my UCG ultra.

We are slightly unique in that devices are always moving to different locations and are not always connected back to the UCG. It hasn’t been a problem until now where I need setups in two complete different physical locations, both with AP’s. Currently testing and the AP will flash every few seconds until I plug it back into UCG when it will perform as normal.

Is there a solution where I can have two or more APs that I can roam between without the need for a controller/ucg ultra?

Thanks.

What are the pros and cons of using STP with the doorbell lite and using an ethernet surge protector (shortest possible run inside the house) inline before the switch?

Does the doorbell even support/utilize a shielded connector?

How about having the surge protector inside the house (bolted to a floor joist in the basement below the first-floor door with the doorbell?

Have the doorbell and chime. heading out tomorrow to pick up more CAT-6 for the run. All plenum to the patch panel, or pick up an ETH-SP-G2, short outdoor-rated STP with appropriate shielded RJ45?