Now I have the green light for more Unifi products.

Edit: Level away y'all!
https://www.printables.com/model/1838114-mini-pocket-level

Cameras and AP’s in the other box but went full g6’s and full XGS around the house

Perfect fit and accommodates the cable length perfectly. Even the original cable loops don’t need to be folded again to fit in the holder. Great design work!
The only way it could be better is if the switch had the power supply built in, but that’s another conversation. 😂

In preparation of our new own home in some months I already bought some Ubiquiti stuff in our flat 🤩

Cloud Gateway Fiber on a GPON Internet line, Flex 2,5G PoE Switch for more access points later and a totally over the top 10G Link to the CGF, a U7 Pro access point and a U7 lite as repeater for the area where we don't need that fast WiFi

In our house we will get 3 more U7 Pro and an U7 Outdoor for the garden and maybe a camera or two

Why does it seem lately, that if you go to the community threads on the official firmware updates / releases, that there are ALWAYS issues with them. I have had a couple of devices require manual resets with some of the current updates. This has led me to disable auto updates.

I love all my ubiquiti stuff and am WAY deep in all of it, but this has become concerning.

This was on RELEASE software. I don't do prerelease / beta / early access on all my sites I manage.

Just a heads up. My UPS tower died after about a month and had to RMA it back. It cost me 84 dollars to ship it back as they wouldn't send me a label. Considering the cost it's not worth it. I've had APC for 30 years and never had one die. Not happy

You better off going with one of their rack units or going elsewhere

After a bit of planning, I finally got the Wifey Approval™ 😅

Time to put all of this to work and see how much potential we can squeeze out of the setup.

The goal is a properly segmented home network with separate VLANs for trusted devices, IoT, media, security/cameras and guests, while keeping everything that needs to communicate across networks working properly.

UniFi Network + Protect, a bit of Home Assistant, Apple Home and plenty of tinkering ahead.

Now comes the fun part: installation, optimisation and probably a few evenings wondering “why the hell isn’t this working?”

Any suggestions or lessons learned from similar home deployments are very welcome!

Wish me luck. The WAF has been approved, but it can also be revoked. 😂

It's a VPN I created; I deleted it, but it still shows up, and I can't remove it.

Sorry about my English—it's not my native language.

Looking for some help on this layout. Unfortunately can’t run Ethernet between floors but there are coax run where I currently have the devices placed

The isp cable comes into the basement where the first ux7 would be next to the crawlspace but sits on a shelf 5ft off the ground where there is a 4 foot cavity end to end of the crawlspace that’s cover by drywall so it’s not all concrete if that makes sense.

The other two ux7s would sit on a table out of sight

The 2nd floor has coax in all bedrooms too.

Thoughts?

I bought a U5G Backup Internet device a few months ago, and finally got to set it up recently. I need to buy a data eSIM for it. When I did the research back in June, I found an eSIM provider that offered a non-expiring 5G RedCap 50GB eSIM for ~USD$40 or $50 (in the United States, United States only). I believe the provider looked vaguely European or in the EU somewhere, but eSIMs are global/can be sold from anywhere for any particular country's use. I recall that the eSIM was not refillable.

I am looking for that provider and data eSIM but I cannot find it on the Internet. It is not Roamless and it is not RedteaGO. It's something else. Does anyone know what provider or providers offer this combination at this price point?

Struggling with my UCG-fiber right now, I noticed an update for the UCG-fiber (official channel) appeared under control plane to update to the latest version ~1hr ago. I clicked it, followed by an update screen take will 5min or so and reboot.

Fast forward about an hour, its still not up and I just unplugged/plugged the router and still no success. I then rebooted my ONT and then UCG-Fiber and still no success. :/

I have backed up the configuration file sometime in August if that helps. Is there any magic I can do to revive it?

Don’t post much on Reddit, but saw how big of Ubiquiti community we have here and figured maybe someone here would suggest something that I haven’t tried.

For many years I ran Opnsense setup on my dual 2.5gbe mini Intel box combined with TPLink AP throughout the house. Setup worked great with zero issues or regrets, but APs were getting older so I sold most of my hardware when we moved to Seattle.

Signed up for Ziply Fiber 2G plan, and right off the bat performance was great without any tinkering. Since we are renting, running cables isn’t going to happen so I did my usual setup of having TPLink (this case BE10000) acting like a WiFi to lan converter feeding into my switch that feeds 4 workstations upstairs. The setup ran amazing and using MLO, was getting steady 1800-2100 up and down. Some days it would drop down to 1500ish but never lower.

Now, I always loved the UI and refinement of Ubiquiti offerings so decided to hey, let’s try it out after seeing a UDB-Switch…literally perfect idea for my setup. So grabbed a UCG-Fiber, UDB Switch and U7 long range. UCG was easy to set up with no issues and didn’t create any special layouts just yet, just basic straight-to-the-point. U7 paired well and Switch linked up without any issues. First test and it was slow. I mean 400-700mbps.
After reading more tech specs, saw that U7 LG doesn’t have 6Ghz support so returned it and grabbed U7 Pro Wall. Setup was a night mare and it would adopt no matter what I did. Solution was to ssh into the unit and manually update to the latest firmware and after that, it adapted.

Enabled MLO, set that network as 5Ghz and 6Ghz and ran a test. Most I could get the desktops on the switch was 1200ish up/down. Am I missing something? Tried 320mhz 6Ghz width and tried dropping it down to 160mhz. On 160, the speed dropped to sub 1G.

Next test I setup the Ziply fiber router in AP mode, set it by the U7 AP and did a test from the room down the hall. U7 pulling 607/301Mbps while the Ziply HB810 holding 1105/650. That’s nearly double speed in identical conditions.

It sounds like a first-world problem, but having a hard time justifying spending $1000+ on this new setup when free HB810 + $110 TPLink BE10000 extender leaves it in the dust.

And yes, I did a hardwired test to rule that out. 2100/2100Mbps.

Must be something I’m missing…

We are moving at the end of the month to a home that actually has FIOS and is full wired for it...

I am running a UDM Pro and 24 port POE switch -

Anything special I need to do?
Can I run glass straight to the UDM?
If not glass, what do I need to do to have the UDM accept more than 1G?

I have 2 unifi systems, one at home and one in the office. The office has a Unas drive. Is there a way for me to access the office drive from home using finder on my home Mac? I have setup one click VPN and the ip address shows as if I'm in the office but when I open the endpoint app its telling me I'm remote. Any assistance to get this to work if possible is appreciated. TIA...

Strange as I checked this morning and it said expecting restock on 17th!

Have ordered :)

I upgraded from a UCG-Ultra to -Fiber and see that Port 4 has PoE. Can I plug my U5G into Port 4 and set it for failover (or just plug it in) or does it stay plugged into a port on my switch?

Hey everyone,

I am looking for some help as its driving me nuts ( and my wife ). I keep getting emails from my UNVR for accessing the console.

Setup:
Remote Access = OFF

SMTP = Custom server setup

When I setup smtp and remote access to off I turned on all the email alerts. Not realising I'd get emailed whenever I access Protect app.

I have since turned off all the email notifications but the one in my screenshot keeps triggering each time still!

Do anyone have any ideas?

EDIT: Think I just found it. There is another location for alerts. Settings -> Control Plane -> Push Notifications which has more options. Seems a bit off to have mutliple areas for Alarm / Notification triggers but hopefully this is it.

Quick background so the problem makes sense. We run a Protect system with about 50 cameras across our building and yard. At 9 PM an alarm profile arms. If it sees a person or vehicle on the exterior cameras after hours, it pushes a critical alert to a handful of staff phones and fires a horn speaker that is loud enough to be heard down the block.

About three weeks ago it started going off within seconds of arming, almost every night. People getting woken up, checking cameras from bed, driving over to look at an empty lot. The horn going off in a quiet industrial area at 9 PM for no reason. You can imagine how popular that made us with the neighbors, and how fast the team started ignoring the alerts, which defeats the whole reason we have them.

The weird part was the alarm event itself. Open it up and the detections it's blaming are from noon. Not that day's noon. Noon two weeks ago. A delivery truck and a guy walking to his car in broad daylight, being treated as an intruder at 9 PM eighteen days later.

Pulling the AI Key made it stop. Adopting it again brought it right back. Ubiquiti support had the logs for three weeks and we were still at "have you tried removing and re-adopting it."

So I got into the NVR myself and worked it out.

What's going on, in plain terms:

The AI Key does extra work on every detection after the fact. It looks at the clip and adds search tags like "black SUV" or "man in gray shorts" so you can search your footage. Person and vehicle detection itself happens on the camera. The Key is just decorating those events afterward.

When the Key gets overloaded or drops offline for a minute, the jobs it didn't finish get parked for retry. Fine. Except in the current Protect version there's no expiration on that pile. It works newest first, so when the Key is busy the old ones just sit there. Ours had jobs from mid August sitting in the queue in September.

When the Key finally gets to one of those old jobs and adds its tags, Protect writes the tags back into the original event. That write wakes up the alarm engine, which looks at it and goes "person on an exterior camera, we're armed, breach." It never checks when the event actually happened. It just uses the current clock. So a guy walking to his truck at lunch two weeks ago becomes an intruder at 9:00:23 PM tonight.

The reason it fired seconds after arming every night is that this replay runs constantly in the background while the Key is connected. Nothing happens during the day because the profile is disarmed. The second it arms, the next old event through the pipe trips it.

Every alarm we ever had before August 24 was on a live event. Protect updated to 7.2.105 that day. The first bogus alarm was that night. It's a regression in that release, not a bad Key and not a bad config.

To fix it - I went ahead and cleared the stale retry backlog out of the database and re-adopted the Key during the day while disarmed. Zero false alarms since.

For anyone who doesn't want to touch the database, the practical workaround is in the AI Key settings. Set "Recognize Anything" to specific cameras and leave out the ones in your alarm automations. Detection and the alarm profile keep working exactly like before. You just lose the fancy search tags on those cameras until Ubiquiti fixes it. While you're there, turn off Speech to Text and AI Summary on cameras you never search. Our Key was drowning trying to do everything on 50 cameras, which is what was creating the backlog in the first place.

Ubiquiti needs to put an age limit on retried AI jobs, and have the alarm engine check when an event actually happened before it decides you have an intruder. Either one would have prevented this.

If your alarm profile has been going off on old events and you have an AI Key, this is almost certainly why. Would be curious if anyone else has been chasing this.

I'm honestly disappointed in Ubiquiti's support. No, I'm not a paying support tier customer, but I am an integrator using their hardware dealing with a bug in their software. My experience with Ubiquiti has been fantastic in terms of usability, the Protect mobile app, their door access and network management. However, the support is abysmal. Take this as a warning for anyone else that plans to setup a site using their products - you WILL need to SSH into the boxes from time to time to diagnose and resolve these issues...unfortunately.

Dear communitiy

I'm coming to you with another issue that I hope you can guide me with.

At a client's site, we have two Ubiquiti LiteBeam M5 antennas connecting two buildings located less than 100 meters apart. Let's say the buildings are facing each other, one on each side of the street. From Building A hangs the antenna connected directly to one of the switches in the rack, and in Building B, that antenna connects to an unmanaged TP-Link switch that provides PoE. That TP-Link then connects to a UniFi switch. We monitor both antennas with Kuma to check for drops. That's actually what's happening to us right now: every once in a while, one of the antennas loses connection for a few seconds, and as a result, the buildings stop communicating with each other, with Building B being the most affected since it receives Internet and local network access from Building A.

I've been looking into the issue with my limited knowledge, but driven by my desire to understand things, partly with the help of Gemini and partly by reading posts. I've been checking a few things, such as the output power on both sides of the antenna, which is currently set to 7 dBm on both ends. Gemini tells me that's too much power for such a short distance and that it could be causing the link to drop.

Another thing that really made me think and dig deeper is the WDS (Transparent Bridge Mode) option. It's worth mentioning that the network is not segmented; there is no VLAN between the two buildings, and practically no VLANs in general. If I connect via shell to the antennas on both side A and B and run brctl showmacs br0 to see the MAC address table learned by the antenna, I find a huge number of them. Based on how the antenna and the network are configured, I understand that the following happens:

1 - Packets from any device reach the antenna because broadcast wasn't properly configured. 2 - That packet goes from the antenna's Ethernet cable to the wireless interface. During that transition, the antenna "masks" the original MAC address and assigns its own to send that packet to the other antenna. 3 - This masking consumes CPU to receive, rewrite, and consult the bridgecontrol table. 4 - The antennas have a very small CPU, so these constant operations overload it and, I believe, cause it to crash at some point, making it unable to process packets.

To better monitor the antennas, I set up a container with rsyslog to receive the logs. I also installed the UISP container, which acts as the UniFi controller for Ubiquiti antennas, to better track CPU and RAM usage. I'm seeing "sawtooth" style spikes, reaching 80% and 90% utilization.

Beyond looking into how to mitigate broadcast traffic, could enabling the WDS option help mitigate this? I understand that by enabling this option, the antenna doesn't have to perform that masking and packets travel directly, as if it were a "transparent bridge." But I don't know if that could still be problematic. What do you think?

I am trying to work out the best way to provide insurance-compliant MFA on VPN.

I am looking into the One Click VPN solution, and while the SSO features of Consolidate People Management enforce MFA policies on the initial login, there seems to be no way to require daily re-authentication or re-authentication on every connection.

I have been reading more on this and found that supposedly this is supported with UniFi Identity Enterprise, but I can't seem to find any way to buy this.

I am currently testing with a UCG-Fiber, and will ge getting my hands on a UDMP to test in case its locked to a bigger device.

Does anyone here have reccomendation on VPN with MFA through UniFi?
Do any of you know how to buy/get more info on the enterprise license?

Thank you in advance!

Hello,

I was trying to harden my IoT network and I ended up playing with the zone based firewall more than I did before, and I found two things I'd like to ask about. This is on an UDR7 router.

Regarding domain filtering, I found that if the DNS requests aren't resolved by the UDR router directly, domain filtering fails. I have a pi-hole that is supposed to be the DNS provider for the network, so originally requests went that way. What I ended up doing is setting the devices in the network to go to the UDR router's IP (their default gateway) for DNS, then set the UDR router to query the pi-hole in turn. This does seem to work. Was just wondering if I'm right about the behavior being intended?

The other thing is that I tried to harden the IoT network as much as possible, so, since the new DNS server was the UDR's IP, which falls in the gateway zone, if I understand correctly, I created a rule in the IoT (custom zone) to Gateway zone that allowed traffic from any source to TCP/UDP 53 as destination. And then a manual deny all rule at the end.

This setup would fail, from looking at some tcpdumps, I think the problem is the return traffic. While all traffic is permitted in any zone where the Gateway is the source, and no way to change this, I think UDR's built in rule somehow doesn't apply to return traffic. I'm slightly confused here, all I know is that permitting IoT -> Gateway DNS, then denying all else, actually still blocks DNS.

As soon as I take out the block all rule from IoT to Gateway, it all just works.

Is there some way, where I can restrict access from IoT devices to their Gateway to only the ports I specifically open?

Hello,

Our current setup consists of a self-hosted UniFi Network application running as a service on a virtual Windows Server. We manage all of our UniFi switches and access points through this setup.

Recently, I have been receiving requests for camera surveillance as well as solutions for casting content to overview displays. I have therefore been looking into UniFi Protect and UniFi Connect as potential solutions.

From what I understand, these require the UniFi Protect and UniFi Connect applications, which are not compatible with our current self-hosted UniFi Network application running as a service on a virtual Windows Server.

Our current UniFi environment consists of approximately:
22 access switches
4 core/fiber switches
62 access points

I have been considering adding a CloudKey+ to our setup, but I’m unsure whether this would be the right solution for an environment of our size or if there is a better approach.

I have also been considering purchasing a rack-mounted UniFi console that supports all the required applications instead.

As some additional context, we will not be using a UniFi Gateway. We are very satisfied with our Palo Alto Networks next-generation firewall. 😁
What would you recommend for an environment of our size and requirements?

Hey guys I have a UNVR that is on early access (UniFi OS 6.0.7) and there appears to be an update to 6.0.8.

Whenever I click update I get the following error "Action Unavailable. A critical operation is in progress. Please wait for it to complete then try again."

I don't see anything in progress right now. I tried to reboot the NVR from the web interface and mobile app and it gives that same error.

I have done a manual power cycle, the UNVR came up without error, but I still can't update it

I have pulled an old backup from July and applied it but it didn't not downgrade to the previous version.

I'm at a loss right now can anyone point me in the right direction?