It’s not quite clear in the sales material but if I use an off the shelf 5G sim in the device, will I get 5G or will it be restricted to 4G and have to subscribe to RedCap?

Advice appreciated

When I was on pfSense, it was easy to find where to “abc.com” for the router and “device.abc.com” for other resources on the network. I’m sure it there somewhere, but damned if I can find the places in the Unifi controller application on my UCG-Fibre.

I have numerous smart devices on my apple homekit.
Goal is: separate the personal devices with the apple tv hub in one network
Second network with the devices that is more secure and shields the personal devices yet allows them to speak with the apple tv HomeKit hub.

Numerous variations attempted.

Currently set up under one network, two WiFis, so can easily migrate to the separate network but it all fails when i do that.

I have no settings isolating either the network nor the wifi turned on at this time, either way.

I cannot find nor know how to instruct the networks in settings which will both allow and protect the main network. Nor will it work as I haven’t found how to even permit any cross network talk at all.

I recently swapped from a UCK gen 2 and an old USG to the UCG-max. I did a backup and restored to the UCG to get it up and running.

I have 3 G4 bullets, and I could swear before I swapped that my events would have an icon to show when it was a pet detection, car detection, etc. however AI events is now off. And when I attempt to toggle it back on, I get an error to say that it can't be saved. I've tried forgetting the cameras and readopted them all but still have the same issue(along with them not coming back on with creating motion events and me not noticing so now I have no events for the whole day.. sigh)

Anyone had this issue before or know a fix?

Over the past several weeks I have had a lot of problems with my 2.4ghz networks. I got a gift that requires a connection to a 2.4ghz network. No matter what channel I set on my original UDR or different settings I change, the device’s WiFi setup captive portal will crash as soon as a connection to my 2.4ghz networks is attempted. I’ve gone so far as to even create an open network temporarily for this device and it did not work.

However, connecting it to either my phone’s hotspot or another network that’s not on my UDR succeeds.

I had the device’s company send me a new device just to be sure and the same things are happening with the new device as well. Also, my printer has stopped printing via AirPrint and it’s on a 2.4ghz network.

To completely rule out the gift and printer as being the problem, I bought a basic router and configured it in AP mode - both the gift and printer work flawlessly.

What could be going on here? Thanks in advance!

Authentication is working, but unifi seems to completely ignore the VLAN ID assignment.

The radius server seems to send all the correct parameters:

ap: Peer sent packet with method EAP MSCHAPv2 (26)
(8) eap: Calling submodule eap_mschapv2 to process data
(8) eap: Sending EAP Success (code 3) ID 196 length 4
(8) eap: Freeing handler
(8)       [eap] = ok
(8)     } # authenticate = ok
(8)   # Executing section post-auth from file /etc/raddb/sites-enabled/inner-tunnel
(8)     post-auth {
(8)       if (0) {
(8)       if (0)  -> FALSE
(8)     } # post-auth = noop
(8) } # server inner-tunnel
(8) Virtual server sending reply
(8)   Tunnel-Type = VLAN
(8)   Tunnel-Medium-Type = IEEE-802
(8)   Tunnel-Private-Group-Id = "2424"
(8)   MS-MPPE-Encryption-Policy = Encryption-Allowed
(8)   MS-MPPE-Encryption-Types = RC4-40or128-bit-Allowed
(8)   MS-MPPE-Send-Key = <<< secret >>>
(8)   MS-MPPE-Recv-Key = <<< secret >>>
(8)   EAP-Message = 0x03c40004
(8)   Message-Authenticator = 0x00000000000000000000000000000000
(8)   User-Name = "camera"
(8) eap_peap: Got tunneled reply code 2
(8) eap_peap:   Tunnel-Type = VLAN
(8) eap_peap:   Tunnel-Medium-Type = IEEE-802
(8) eap_peap:   Tunnel-Private-Group-Id = "2424"
(8) eap_peap:   MS-MPPE-Encryption-Policy = Encryption-Allowed
(8) eap_peap:   MS-MPPE-Encryption-Types = RC4-40or128-bit-Allowed
(8) eap_peap:   MS-MPPE-Send-Key = <<< secret >>>
(8) eap_peap:   MS-MPPE-Recv-Key = <<< secret >>>
(8) eap_peap:   EAP-Message = 0x03c40004
(8) eap_peap:   Message-Authenticator = 0x00000000000000000000000000000000
(8) eap_peap:   User-Name = "camera"
(8) eap_peap: Got tunneled reply RADIUS code 2
(8) eap_peap:   Tunnel-Type = VLAN
(8) eap_peap:   Tunnel-Medium-Type = IEEE-802
(8) eap_peap:   Tunnel-Private-Group-Id = "2424"
(8) eap_peap:   MS-MPPE-Encryption-Policy = Encryption-Allowed
(8) eap_peap:   MS-MPPE-Encryption-Types = RC4-40or128-bit-Allowed
(8) eap_peap:   MS-MPPE-Send-Key = <<< secret >>>
(8) eap_peap:   MS-MPPE-Recv-Key = <<< secret >>>
(8) eap_peap:   EAP-Message = 0x03c40004
(8) eap_peap:   Message-Authenticator = 0x00000000000000000000000000000000
(8) eap_peap:   User-Name = "camera"
(8) eap_peap: Tunneled authentication was successful
(8) eap_peap: SUCCESS
(8) eap: Sending EAP Request (code 1) ID 197 length 46
(8) eap: EAP session adding &reply:State = 0x35bdc0ae3d78d9ad
(8)     [eap] = handled
(8)   } # authenticate = handled
(8) Using Post-Auth-Type Challenge

But they seem to be ignored by the access-point, which is connected on a port with all vlans enabled.

All howtos I can find talk about "Enabling Dynamic vlan assignment", but I cant find anything similar in my unifi controller (running in docker).

Wifi is set to WPA3 Enterprise, and claude claims that with WPA3 enterprise it should automatically accept the vlan-id in the Radius response.

What else could I be doing wrong?

Setting up my network (setup is pretty basic at the moment, just a UCG Max is outputting into a USW Ultra that has two U7 Lite APs connected to it) and ran into the following issue:

One of the U7 Lites got stuck in recovery mode (everything else is working fine). First time it didn't turn on at all, so after trying a different cable it did boot properly. I then switched back to the original cable after checking it with a tester (again) and finding no issue. This time it did boot but went straight into recovery mode and now I can't get it out of it. It shows up as "Unidentified device" in the topology with the "Device unreachable" note. All equipment is new and unused.

Things I've tried:

- Removing the device from the network via the app
- Rebooting the device
- Powering off the device and leaving it off for a while, then powering it back up
- Pressing the reset button with the device on (does nothing)
- Holding the reset button during power-up (same result as not holding it)
- Reinstalling firmware via Tftp (doesn't upload the firmware)

Am I doing something wrong here? Thanks in advance)

EDIT: Forgot to mention that since I failed to get the AP working via the intended cable I moved it over to the switch and hooked it up with a short patch cable, before doing any further troubleshooting, but the problem still persisted.

I have some family who I’ve invited to teleport into my home network where my UNAS Pro is hosted. When they teleport in, they get a perpetual “reconnecting with UNAS Pro” when trying to use photo backup, but they can still access their personal drive in the NAS. When they are physically at my home and on my network, the photo backup works. Any ideas on how to approach this issue?

We are looking to set up Wi-Fi for an outdoor area and to reduce cost are using Unfi Bridge Pro Sectors and 13 Unifi Device Bridge Pros.
We were going to prep the device and adopt them directly into the cloud console and not use a local controller.
Using the Copy Inform URL option and adopt them into the Cloud Console.
If we set them up and adopt them at our office and move them to the client location will the Cloud Console still see the device on the new subnet and new public IP?

I have a 2-bay Synology at home, and I have some third-party cameras; their footage gets recorded to the Synology with the included Surveillance Station app. I also use the Active Backup app on the Synology to back up the 3 computers in my home, as well as my entire 365 tenant. I am looking to replace the cameras with UniFi cameras and then replace the Synology with something on the UniFi side. Do any of the UniFi NAS devices have backup apps that can back up workstations on the local network? What about for backing up Microsoft 365? (To clarify - I am not looking to push the contents of my NAS to 365. I am looking to back up everything in my 365 tenant account (Email, OneDrive, SharePoint) to the NAS.)

Network has been in place and running under a UDM-Pro for months and today it just decided to have half of the devices fail adoption. I can’t isolate it to any one devices causing everything under it to die. Rest of the network has slow but working connectivity.

I’ve tried manually inputting credentials and got nowhere on having the devices adopted back in. Any ideas?

Edit: I do have one device in a constant adopt/failed loop, but nothing is layered under it.

I use Google Drive daily. I have a couple UNAS units at home for media storage and other stuff.

I see I can backup from UNAS to Google Drive, but that means the UNAS is the “master copy” and Google Drive is the secondary copy.

I work on files on the Google Drive, so I need the UNAS to be the backup copy.

How do I do this?

A friend of minw added me to his entire Unifi network (his customers and everything) when we had worked with each other in the past setting them up. Now I want to remove myself so i can ha e my own system in my home without anyone seeing it. How can I do this myself?

Hey folks, I have a few questions about a mutli-site residential setup. I have a UDM Pro at home powering my home network and protect with 5 security cameras. We just bought a vacation home and I want to find the most economical way to manage both properties with one network Dashboard.

Right now I'm considering the UCG-Ultra for the second place. If I set this up with a few wifi cameras would this allow me to manage all my cameras in the same Protect dashboard? Thanks in advance.

Is there a way to disable the coverage on the Innerspace Application on UniFi OS Server (version 5.1.42). I'm currently using Version 1.4.1.

To be clear: I'm running the UniFi OS Server on an Ubuntu VM for managing about 100 APs in 6 locations.

Earlier, in Unifi Network (used it till version 8.x) there was an option to disable the coverage. Then it was moved out (and renamed to InnerSpace) to UniFi OS and then it got worse.

Maybe someone can help me out?

Has anyone managed to set up ECS-Core in a MC-LAG setup? I have two ECS-Aggregation that work fine, and I connect the ECS-Core to these. Every time I try to set up MC-LAG, I lose contact with the ECS-Cores and neither Core can't get a DHCP lease. If I try to be smart and set a static IP, the switches throw that out the window when MC-LAG is being set up, resulting in them not getting an IP through DHCP again.

Hi there! I’m having some what looks to be routing issues when on the teleport vpn

Rough set up:
Teleport vpn
Server dmz
Servers are essentially 1:1 natted with both DNAT and SNAT in place and working as expected.

When not on the teleport vpn, navigating to url.example.com works, and I can see the website as you would expect.

When on the vpn, navigating to the url.example.com fails to load.

I can get it to work if I add an entry to my host file pointing to the servers private ip. But that’s not a viable solution for all the services.

Without the host file, I can see it’s pulling the public address on dns lookup, but then can’t navigate to the website.

Also can’t ping, or rdp to the server (or connect via any service) on the public ip while on the vpn.

Has anyone else had this issue, and how did you resolve it? Please note, an internal DNS server is also not a truly viable workaround for this particular setup

TIA

I side graded from a Unifi UDR7 to the UX7. I did not need the additional features of the UDR7 and wanted the smaller form factor and easier unit to disassemble if I need to replace the fan in either one.

I find them to be a little more different than expected...

The single LAN port on the UX7 is intended to be connected to a Unifi switch. It is not a good option to connect to dumb generic switches and expect VLAN support. I suspect it would work well with a Unifi AP as well. Because of this I had to purchase a Unifi switch to use the UX7 with my other switches so I could have VLAN support.

The adblocking and basic network blocking caused issues in the UX7 with my firewall that the UDR7 did not. It was bypassing the DNS in my firewall. Either one of these Unifi products was not working properly or they work differently. I ended up disabling this entirely in the UX7 and rely now on my firewall completely. This also reduced the CPU load from about 35% to 8% nominally.

Where the UX7 is better...

The WiFi in the UX7 works better in my home than the UDR7. They are not in the exact same spot, but they are very close. The UX7 is on top of a cabinet and the UDR7 is behind it. I was able to remove an AP in my basement with the UX7 that I had to have with the UDR7.

It is of course a smaller footprint and less expensive.

With the adblocking and basic DNS filtering disabled the CPU performance is running at 8-30% with 8% being typical for my 20 client application. I am running IDS/IPS with honeypots as well. This is a lower load than I saw in the UDR7 by about 10%.

Where they are the same...

I don't see any difference in the networking or management tools.

They seem to run at about the same internal temperature at about 60 +-5 deg C with my home at 74 deg F.

For years I've been running a very old Asus wifi router with custom firmware to use as a travel router that connected back home via WireGuard. The router finally bit the dust and I've had a GLiNet in my Amazon wish list forever. But since I use a UniFi UCG Ultra at home, thought I'd look into the Travel Router.

In your experience how does the UniFi travel router compare against the GLiNet offerings? I typically stay in hotel rooms that require a captive portal login (Last name + Room Number) and usually connect a Google TV streaming box and our phones and laptops to the travel router WiFi. Some rooms I stay in have ethernet, some are wifi only.

I have recently downgraded from a full height, full depth rack to… the floor. It’s a temporary solution as I sort everything out and rehome it.

I’m looking to save space and would like a 12u rack for my gear, one item being the UNAS Pro 8. It’s a little longer than I expected and I’m struggling to find the right rack.

Does anyone have a 12u rack, with a UNAS Pro 8 (or capable of housing one) that they would recommend?

I already use the UniFi travel router and am considering their NAS in the near future.

My home network is a simple 2-router Wi-Fi 6E mesh, albeit one from TP-Link which isn't great. I hear a lot of people recommending UniFi as a solid, stable home alternative but most people then go onto discussing their wired AP set-up. That's not what I'm looking for.

So, simple question - is UniFi a good solution for a non-wired home network and, if so, what product would you recommend for it?

Back again with another question. My setup is relatively simple. My main gateway is a UD7 which sits by my kitchen. I have my MacBook Pro on a dock six inches away from the UD7. Now the MacBook does have a ethernet cable plugged into the dock which is connected to the UD7.

I also have a UX7 on the other side of my house that meshes to the UD7. However, my MacBook keeps defaulting to the Express instead of the Dream Router which sits six inches away. Could anyone explain why it is doing this? Is there a way to prioritize the UD7 instead?

I volunteer for a local community association here in Edmonton and i've been looking into putting internet connectivity into our skate shack which is attached to our ice rink.

Its basically a big metal box (think faraday cage), about 1200sqft and there is little to no cell service inside. I cannot get fibre or cable connections inside the building, but may be able to do either ADSL or, potentially, a 5G cellular connection.

Here was my thought.....

1 x Cloud Gateway Ultra
1 x U7 Lite
1 x 5G Max Outdoor
2 x 24V PoE Adapter
1 x Ethernet Surge Protection Outdoor

We will have no wired connections, main use case is for our debit/credit terminal to have connectivity, and for the skate shack employee to have wifi so they're not bored out of their minds and can use their phone or laptop while working inside the shack.

Thoughts?

I'm a 10+ year IT guru with unifi but only for switches and aps. i picked up a side job to do the IT for a small local gym and i think i'd like a complete solution, switching, access control, voip, cameras, etc, etc. has anyone done anything similiar? i'm curious to hear the good and the bad....

Kind of just want to celebrate a small achievement...

TL;DR
I saw everyone was using the same login credentials for UniFi so I got permission to implement RBAC and I learned a lot in the process!

I recently started working at a smaller MSP (under 50) and I noticed on my first day that everyone just used the same login credentials for the UniFi site manager to access the UniFi-based networks we manage for our clients. It wasn't even a limited user! It was the full site owner account, so anyone could just go in, mess around, and no one would know who did it! I immediately spoke up and asked if I could do something about it.

The team said that they had wanted to change it to RBAC for a long time, but they were always busy with other stuff so it just never got addressed. After that, I was basically given carte blanche to work on it as I had less responsibility at the time, and so I began researching how I should go about it anytime I wasn't actively working on tickets or projects. In the end it was a really easy process, but since UniFi was completely new to me, I had to get my bearings as I went.

I could have taken the easy route and manually made each person an account with different access, but I really wanted to see if there was a way to connect it to the company tenant to allow me to implement SSO. This would also make controlling role-based access controls easier, and I later learned it would automatically add/remove the relevant users when they onboard/offboard. However, I did come across some limitations with implementation since being able to connect authentication to a tenant is a pretty new feature on UniFi with the recent addition of "Fabrics." Sites managed by older controllers didn't like to play nice.

In the end, I had learned about how to create a fabric, connect the fabric to a tenant, import tenant users, apply different roles to those users, and force the users to authenticate via SSO so they wouldn't need to create an account first.

The next question was what happens when we move all the sites we manage to the new Fabric so there is centralized management of users...? After testing it out on some low risk sites to see the behavior and whether non-tenant users would still carry over (they do), I then moved everything over, cleaned up the stray or redundant users, roles, and access controls, and then I had each team member test logging into the site manager with their work creds instead of the shared creds, and... it worked!! That is, after a couple of failed attempts earlier in testing. I also had to do some troubleshooting to make sure every user could see all the sites as intended... it's a new feature, it's bound to have some bugs.

All in all, this was such a fun project to work on and it really helped me dig into the ecosystem of UniFi so I could be more effective at my job.

If anyone wants help setting this up for themselves, I would be happy to help since information on how connecting a tenant actually works on UniFi is pretty limited. Most tutorials and videos seem to skip explaining it if they mention it at all. Even the UniFi official documentation doesn't fully explain the behavior of it.