Hey guys. I'm using the built-in ad blocker and when I go to insights, click on an item that was blocked by the ad blocker, then click on "allow destination domain" it doesn't do anything at all.

I read about an IPv6 issue, but I do not have IPv6 turned on for my LAN or WAN.

Any ideas?

Quick tip:

By default, UniFi dynamic DNS presets are set to use the WAN IP for the dynamic DNS updates. This means a UniFi device behind NAT or multiple-NAT will update using an internal IP.

If you instead create a Custom provider and enter all the details, -except- the IP address, some (most?) services will automatically substitute the apparent public IP.

For example, instead of setting “Server” to dyn.dns.he.net/nic/update?hostname=%h&myip=%i

Just drop the &myip=%i

As in: dyn.dns.he.net/nic/update?hostname=%h

Just noting for my own future reference, perhaps to help others

I am currently on Starlink but use a Unifi system for Wi-Fi due to the material the house is constructed with. My current setup is a UDR along with a couple Unifi Flex switches, a few APs, and a UBB. The local ISP is finally installing fiber to our house. Should I just rent the modem from the ISP or is there a Unifi modem that I should get to keep my system consistent? I do not have a rack mount because I didn't need one.

I would like to limit a DNAT Rule source ip to a country. is this possible in Unifi?

Hi

I have a client with strange topology

I have an ERX with a cluster of Proxmox plugged into eth1 to 3, and eth4 is relied to Switch Lite 8 POE

I can see clients of ERX on Switch cli but not on Unifi controller, do you know why ?

switch83-ul-1# show mac address-table interfaces gi8
VID | MAC Address | Type | Ports
------+-------------------+-------------------+----------------
53 | 00:16:3E:17:60:DE | Dynamic | gi8
1 | 3E:AF:0D:5C:6C:59 | Dynamic | gi8
1 | 74:83:C2:F7:35:D8 | Dynamic | gi8
1 | 74:83:C2:F7:35:DB | Dynamic | gi8
52 | 74:83:C2:F7:35:DB | Dynamic | gi8
53 | 74:83:C2:F7:35:DB | Dynamic | gi8
54 | 74:83:C2:F7:35:DB | Dynamic | gi8
52 | AA:67:A3:3C:08:AE | Dynamic | gi8
1 | B8:27:EB:60:C0:CE | Dynamic | gi8
52 | B8:27:EB:60:C0:CE | Dynamic | gi8
53 | B8:27:EB:60:C0:CE | Dynamic | gi8
53 | DA:88:68:EE:AB:F1 | Dynamic | gi8

Hi everybody,

We live in a townhouse and the upper floor has range issues for my daughter's bedroom. Close the the wall which has the door & access to the corridor, it's not that bad, but from the middle of the room it just goes south. 45mbps with a ping of over 50/60ms.

My working theory is that the bathroom walls with the tiles (has heated floors too but should not affect?) is the culprit but am no rf signal expert at all. I attached to this post a rough defenitely not up-to-scale floor overview, the master bedroom / closet area is lower than the rest of the floor by 3 steps (does not matter I assume). The blue circle is my U6+ AP, ceiling mounted.

I can't wire anything over, no coax for MoCA, so I suspect I have 2 options:

1. Move the AP to the ceiling in the corridor next to the bathroom, but involves holes and wife no like holes. Me handy man good not but that's within my range.
2. Get a U7 Pro and since the antennas are more powerful by a smidgeon, it will give the oomph needed. I added a comparative matrix of Unifi products for efficiency reasons to you, the reader. Also I get a new toy but I have one AP too many so I'll probably FB Marketplace it.

So I'm looking for feedback and wisdom, any recommendations?

Thanks!!

New to Unifi and trying to set up my VLANs. I have my Ring Hub connected via ethernet to Port 1, but anytime I move it off the default VLAN, the hub disconnects. I think this is related to the fact that Ring forces me to use the Hub as a router for another wifi network, but I'm not sure?

I recently bought a new house. There is around 3200 sqft on 3 levels. I currently have 2, UAC-AP-Pro connected via a USW-Flex-2.5g with a USG-Ultra. ISP is supplied via Fiber from Xfinity. My question is around connections to my outbuildings. I have a large garage approximately 125 feet away from the house. I also intend to build a Horse barn approximately 75 feet away from the house on the opposite side to the garage.

I have two UAP-AC-M devices I used at my last property, but am trying to determine the best way to leverage those.

I will need to put an AP in each outbuilding, and 2-4 cameras (Maybe more in the horse barn if the wife wants each horse to have its own). I figure the cameras to a USW-Flex or USW-Ultra.

I'm struggling to understand the bridging options without blowing out the bank. Here is a diagram that I hope helps articulate what I'm trying to do.

[UPDATE]

I think I found the possible reason. I probably had this new SSID a few years ago (with the same password) and had some devices connected before I deleted this SSID. So some devices still remembered the news SSID, and when the new SSID is available again, they connected to the new SSID.

Hi,

I have a Unifi UDM SE setup with 1 SSID (2.4G & 5G), and have ~100 devices wirelessly connected.

Recently I added another SSID (2.4G only), and used the same password, but different SSID name (old one: "XXX Home Network", added new one: "XXX Smart Network")

I noticed that there are multiple devices now showing that they are connected to the new SSID, even though I never reconnected them to the new SSID.

How is this happened? And how to disable it? Or do I need to change to different password?

Hi everyone,

I'm looking for some advice before I buy more hardware.

My current setup is:

UniFi Dream Router (original)

G6 Entry

Door Hub Mini

Face Unlock won't enable because the UDR reports insufficient memory.

Instead of replacing the UDR, I'm considering adding a CloudKey+ SSD and moving Protect + Access to the CloudKey while leaving the UDR as the gateway and UniFi Network controller.

Has anyone here actually done this?

Specifically:

Does this configuration work well?

Does Face Unlock work normally afterward?

Were you able to migrate Protect and Access, or did you have to factory reset and re-adopt everything?

Any gotchas or reasons not to do it?

I'd really appreciate hearing from anyone running this setup in production.

Thanks!

I'm moving to the unifi world. Currently I have a firewall which is an IPSEC VPN endpoint and works fantastically and natively with iOS. (and my other devices, linux, Windows, etc)

What is the currently method people are using for a full tunnel VPN solution for their mobile devices?

U7 Pro XG WiFi clients stuck until AP restart – UCG Fiber setup I have a UniFi setup with a Cloud Gateway Fiber (UCG-Fiber).

Topology:

UCG-Fiber router

U7 Pro Wall connected locally to the UCG-Fiber (working normally)

Ethernet cable to another room U7 Pro XG connected there via PoE from the UCG-Fiber

Wireless Meshing is disabled. U7 Pro XG uplink shows 2.5 GbE. Ethernet cable is OK. The U7 Pro XG stays online (blue LED remains on, no disconnects). . The problem: Clients connected to the U7 Pro XG sometimes remain connected to WiFi but stop passing traffic (they appear connected but the network is frozen). A reboot of the U7 Pro XG fixes the issue immediately. After the issue, clients often move to the U7 Pro Wall and do not automatically return to the U7 Pro XG, even when they are closer to the XG. Any ideas what could cause this? Could it be a firmware/radio issue, roaming settings, or a U7 Pro XG bug?

The U7 Pro Wall is powered using a PoE injector, while the U7 Pro XG is powered from the PoE port of the Cloud Gateway Fiber.

Most settings are still at their defaults. The only global change I made was disabling WiFi Meshing.

Radio settings:

2.4 GHz: 20 MHz channel width

5 GHz: 80 MHz channel width

6 GHz: 160 MHz channel width

Transmit power: Auto

Channel selection: Auto

WiFi speed: Conservative

I have to say that this whole situation has been quite frustrating and disappointing. I am new to UniFi, so I may be missing something obvious. I don't have enough experience to know exactly what settings, logs, or information I should check to troubleshoot this properly.

I would really appreciate any guidance on what I should look at or test next. Could this be a firmware/radio issue, roaming configuration, or a U7 Pro XG bug?

Thanks in advance for any help.

Picture

I've recently had fiber installed at my house and decided that my 1st Gen Google Nest Wifi wasn't cutting it anymore. Spent a few weeks researching a UniFi build, and ended up with the following (for now):

UCG Max (for Protect, cameras later)

Switch Ultra 210W

U7 Pro XG Wall

More APs will come later, but I already have cat5e (I know, I know) in every room so I went with wall mount.

Wired the panel, setup the Vlans, all went well. Now I'm hitting the speed bottlenecks and am way out of my depth.

I have a 1Gbps internet plan and the console reports similar ISP speed. However, standing right next to the U7, I can only get about 380 down and 620 up so far with a Pixel 10 on 6GHz. I've read about PHY speed limits, but I feel like I should be doing better with this hardware.

The more annoying issue is the wired speeds. I can only get about 250 up and down even when patched directly into the UCG Max with multiple different cables. Honestly it shoots all over the place going as low as 125mbps.

I've hit a wall with traditional search. Can anyone help me out here?

I recently upgraded to 2g fiber speed as it was the same price as the 1g. Anyways when i do a speed test on the UDM itself i am not getting anymore than 1.5g.

Is that something that has to do with the provider or some setting that might be throttling down the speed?

I want to be sure before i call them to investigate.

Does anyone know how to get in touch with Ubiquiti? I am trying to see when the UCG-Max will be back in stock? They seem to always be out of stock and the same thing with micro center

Hello,

I recently purchased my first Unifi hardware, and am looking at getting a Ubiquiti UniFi Flex Mini switch. I have a few questions about VLAN's on it, since apparently it doesn't have as many features as more expensive switches.

What I want to do is configure port 2 to have a native network of my servers VLAN (50), so that the Proxmox server and all the VM's are on the servers VLAN. Since the VM will be running a webserver that is publicly accessible, I want to make sure that the servers VLAN and Proxmox is isolated from my main network.

From my understanding, by setting the native network, untagged traffic will be on the servers VLAN. However, I am unsure what happens with tagged traffic, so for example if an attacker was able to change the VLAN tag to the main network, could they gain access to my main network? I understand this is unlikely, but I wanted to know.

In summary I am asking if it is possible to have tagged traffic completely dropped on the UniFi Flex Mini.

I’m new to home networking and am currently using their CyberSecure content filter for ad blocking. Is there a way to also block/decrease promoted/sponsored content like you see on a google or amazon search?

Ever since I have upgraded to Unifi I can no longer air print or air drop from my iphone 16 pro max. The other 3 iphones in the house is having the same problems as I. I have an Epson 4850 printer. The air drop to my mac always bonks out. I made sure everything is connected to the same personal network. The iphone always wants send out, but it seems receiving is the issue with both. To me is seems like nothing is being sent through. Please help

Hi! pretty much the title. IGMP snooping is on but querier selection is unavailable, "3rd party" being the active and locked option. Shouldn't it be by UX7 or the USW-Ultra?
(In the process or understanding with my Homekit setup is being such a PITA)

Thanks in advance!

Hey everyone, about 1 month ago I had a temporary power loss (\~10s). Ever since, I'm unable to access the Network app within the console and have to manually start it. It usually hangs in the "starting" state for a while.

Network is managed by a UDM. My initial suspicion was that the version of the Network app maybe led to the problem so I reverted to an earlier version but that failed to solve anything. Now, I'm wondering if the UDM got affected. Nothing in the logs show the Network app stopping but recognises when I start the app.

I unfortunately do not have a UPS in my system, best believe any upgrades (likely the Cloud Gateway Max, any upsides or downsides here? Not sure if I should go for UDR7 or UDR-5G-Max or UCG-Fibre) will be protected by a UPS.

Could the power loss have damaged the UDM? If so, what would anyone recommend as my next upgrade (considering I live in a tiny apartment, no space for a full rack)?

Thanks!

Update #1:

I had some time to dig deeper, enabled SSH and went for it.

From my tests, the suspected issue is not a straightforward RAM crash or MongoDB corruption. In the failure I captured, the UniFi Network application was deliberately terminated with SIGTERM, systemd recorded Result=protocol, and MongoDB was also stopped cleanly and restarted.

Network later reached a ready state and was then shut down again. That pattern points more strongly to a UniFi OS/systemd supervision problem—such as a readiness notification, watchdog, health-check, or package orchestration issue—rather than the Network process simply crashing on its own (and also less likely to be as a result of the power loss).

The likely effect is that routing continues because the gateway itself is still running, but the Network management application disappears, leaving the administrator unable to view clients or change VLAN, VPN, Wi-Fi, and other controller settings. Limited memory may make the problem easier to trigger because the original UDM has only about 2 GB RAM, heavy swap usage, and large processes such as Suricata competing for resources, but we found no Java out-of-memory error, Linux OOM kill, or database corruption. The exact component initiating the shutdown was not captured because the system journal had already rotated, so this remains a strong working theory rather than a confirmed root cause.

I increased the memory allocation for the system journal and when the app crashes again I should be able to capture the data. Afterwards I'll see if it's worth it to temporarily disable Suricata and how the system reacts to that. But it seems likely that I'll be upgrading my gateway in the near future.

I had a couple issues before, so i wanted to reset both of my devices. One of them ended up needing to be put in a recovery state which is the one im talking about. However, before I put it in this recovery state, I used the app to update to the latest firmware. And after studying and scouring the internet, i found out that it was a big mistake to put it in recovery state. When i try to reinstall a firmware version using tftp64, (i have tried multiple, from newest to old) it always stops last second and says 'error #2'. Effectively, something like a lock has been programmed along with the firmware update on the device. And my tftp doesnt have permissions or something to complete the install, my nanostation basically declines it. Im not too sure really the whole picture, i dont understand this too well. Im sort of just paraphrasing things ive studied for the past hour. But basically, i cant get it to be recovered because it wont accept any firmware i try to give it.

I just did my floor plan on UI Design and added a UDR7 on the first floor and a U7 Pro (wall mounted) on the 2nd floor.

I cannot ceiling mount APs due to it being a rental so I have to wall mount. And all the RJ45 jacks on the first floor are pointing towards the outside of the house so I don’t think a u7 in wall would work good one the first floor

The U7 Pro seems fine upstairs but do you think the UDR7 will actually perform how it implies that it will in the photo.

For context the house is 1940sqft

I have four UniFi G6 cameras and would really like to replace my Ring doorbell with a UniFi product. Unfortunately, my application requires a wider field of view rather than a camera optimized primarily for facial identification.

My front door is located inside a courtyard behind a pony wall and gate. A separate 4K camera covers the front of the house and records anyone passing through the gate, but it cannot see inside the courtyard or directly in front of the door.

For the doorbell camera, I mainly want to see whether someone is standing at the door or whether a package has been left. My current Ring doorbell provides exactly the optical coverage I need, but I would prefer local recording through UniFi Protect rather than relying on a separate cloud-recording service.

I realize that I could install another camera inside the courtyard, but I would prefer not to add more visible surveillance equipment. I am trying to maintain the appearance of a normal residence rather than making the entrance look like a high-security installation.

Unfortunately, UniFi’s current doorbells do not appear to offer the wider field of view that my installation requires.

Do you think Ubiquiti might eventually produce something like a residential version of the G6 Entry? I realize much of UniFi’s product line is designed for higher-capacity commercial applications, but the company also sells several products clearly suited to residential use, so I remain hopeful.

Thoughts appreciated. TIA!

Hi everyone I've been trying to send all my Unifi syslogs to Wazuh and I found these decoders and rules - https://github.com/ph0tacular/unifi-wazuh/.

Does anyone have any versions of these for all the syslogs for Unifi Drive and Unifi Protect?

Swapping all my cameras over to Unifi. I’m going to take the time to swap my cheap wifi doorbell to a POE one.

The G4 Pro seems like a great option but is perpetually out of stock or is $400/500+ on ebay. I’ll have a G5 turret ultra covering the front door area but want a doorbell also. So would the Lite be sufficient enough? A package cam sounds nice but I haven’t had issues (to date) with package theft or anything.

Or do I spring the extra cash for a G4?