@gjacobse said in Help troubleshooting L2TP over IPSEC VPN connections.: jeeze,.. that is a sad state to think that we have nbeen fighting this for that long,... @JaredBusch @scottalanmiller Can a cron be set to restart the ipsec every 24 hours? Yes.

Interestingly if I press download the URL is https://fw-download.ubnt.com/data/unifi-controller/242f-debian-v5.8.28_2batag-5.8.28-11052-5cedfbea2cca434a82f19db77124e9c6.deb

It turns out that the outlet that I had the switched plugged into via a powerstrip had one always on outlet and the other was switched. So whenever they would leave they would turn off the lamp connected to the switched outlet...and their network switch. Good times. I moved some things around and the switch is now on a UPS and off that switched outlet.

There is also an "I can't even thread" that is updated regularly. Maybe it is time to add that as its own category.

@ccwtech said in Unifi 5.7 on Ubuntu 18.04: Scott, why did you go with Ubuntu vs. Fedora? (Asking for a friend) Because it's the official OS of the product. Absolutely no reason to use Fedora here. Unifi only supports Ubuntu and Debian, and Jared and I have opposite views here. Ubuntu is the business product of the Debian family, Debian is the hobby project that is used as the basis for it. Debian is great, I love the project and they do great work, but it doesn't have primary vendor support, you are at the mercy of a hobby project. Ubuntu uses that basis and turns it into a production ready release with vendor and market support options. Ubuntu isn't Fedora, but it's still extremely good.

@penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: @penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: Controlled migrations have lots of tools and options. But a downed controller has pretty much no option except to default the APs and readopt. You will not even be able to SSH into the APs if you cannot log into the controller and get the device admin password for the site. @JaredBusch is right. If you lost the controller it is a reset process. I recently went through something similar, however, it was the fact that our ISP at a location I manage decided to change out there cable modem and in doing so changed them from a static IP to a dynamic IP. Which is fine and easier for me but they didn't tell the client that they might have to reconfigure their equipment and didn't even bother to make sure they had internet. Switch cable modem and left. Client calls me and I get there and well the Ubiquiti Secure Gateway wasn't working because it was set to use a static IP on the WAN side. I was mad. So I had to reset the Ubiquiti Secure Gateway. Now here is the kicker, it would show up in my controller once I set the inform address but for some reason at least on the smaller USG's is that you had to ssh into them and set the inform address. Click on adopt in the controller and then while it says adopting in the controller run the inform command in ssh again. If you didn't do that it would be adopted but say disconnected. It was a long night until I found those instructions. Grrrr. I hate the USG. Such a piece of crap. I know, I wasn't the one that put it in, it is this one: https://www.ubnt.com/unifi-routing/usg/ They have the newer USG that are bigger. Are those any better? https://www.ubnt.com/unifi-routing/unifi-security-gateway-pro-4/ https://unifi-xg.ubnt.com/usg-xg-8 It is better hardware under the hood, but it is still UniFi. UniFi is shit on a router.

I updated all the sites that could be rebooted mid work day already. The rest will happen this evening.

@bbigford said in Does any one have a EdgeRouter 4 online and can test L2TP: Any insight on maybe why that worked? I've had issues with the default group on another manufacturer, but I wouldn't think 14 was default. It worked prior to changing to DH 14 on my iPhone. I had to add a proposal with DH 14 for Windows 10 to work.

@dbeato said in UNMS 0.12 rc2 released yesterday: @bnrstnr said in UNMS 0.12 rc2 released yesterday: DHCP stuff being in there for the EdgeRouter devices, but I also don't see it in the added features list. Regardless, it's pretty useful for me. It was there before. Yes, it has been there since at least version 0.10.0

I just updated today, not sure if I see any issues yet.

Did you use the Libreswan or Strongswan setting in your previous post?

@smitherick said in EdgeOS 1.10.0 final is released: Cheers to UNMS. Yeah, we are using it now, great stuff.

I think I have it figured out.. when I'm back on that network I'll get a screen shot. Hope to spend the afternoon testing it, have a few other pieces of gear to setup for it.

@mattbagan said in Looking for stock of the EdgeRouter 4: @JaredBusch ubnt has them in their store now https://store.ubnt.com/collections/routing-switching/products/edgerouter-4 I ended up purchasing from DoubleRadius.

@jaredbusch said in Yet another UBNT EdgeMax vs Unifi: @scottalanmiller said in Yet another UBNT EdgeMax vs Unifi: @thwr said in Yet another UBNT EdgeMax vs Unifi: My bad. A colleague told me about an EdgeMax AP, but I think he referes to airMax: Oh, the consumer stuff. AmpliFi is the consumer model of this. The AirMax line if for the WISP market to install in subscriber homes. Still consumer, but different. Oh okay, I forgot that there was a WISP model.

@jaredbusch I have it up and running. (DNS) Even my guest WIFI on a VLan is now getting DHCP addresses. Everything is working great now.

@dashrender said in Ubiquiti publicly rolls out UNMS Beta: @scottalanmiller said in Ubiquiti publicly rolls out UNMS Beta: @dashrender said in Ubiquiti publicly rolls out UNMS Beta: @scottalanmiller said in Ubiquiti publicly rolls out UNMS Beta: @dashrender said in Ubiquiti publicly rolls out UNMS Beta: @scottalanmiller said in Ubiquiti publicly rolls out UNMS Beta: @dashrender said in Ubiquiti publicly rolls out UNMS Beta: @scottalanmiller said in Ubiquiti publicly rolls out UNMS Beta: @dashrender said in Ubiquiti publicly rolls out UNMS Beta: @scottalanmiller said in Ubiquiti publicly rolls out UNMS Beta: https://en.wikipedia.org/wiki/Software_release_life_cycle Beta literally means it's not reached candidacy for release yet. RC is still not released, but is what they might consider for release once tested. Notice Beta is in the middle of the "non-released" period. These are as the terms have always been used, even going back to the early 1980s and, I assume, long before that. Release being such a structured term that it is nearly impossible to define released without using the term released itself. While I'm sure this has no baring in reality - for me release is a point but the public can get support for the thing. That's not quite accurate. There is no reason that something unreleased can't offer support. How else do you really do your testing, get feedback, and so forth? It's an expectation that anything that the public can get would get some amount of support most likely, because otherwise, what is the purpose of the public nature of the testing? Perhaps I should have added the words "expect to" to the support portion. As you said with the other thread, There should be no expectation of support for the product that was still in beta. So, here is a question then, does Microsoft ever release software? Because nothing that MS makes comes with support. What about Debian Linux, is it ever released? Expect <> free. But free software has all the same release guidelines as commercial software. And MS products aren't normally free. Again - what does cost have to do with anything? As I also said - you'd all probably disagree with me. Because you mentioned it in the post I quoted. Please highlight the part where I mentioned costs. Same thing I quoted and you responded to.

@jaredbusch said in Notorious Short-seller labels Ubiquiti Networks $UBNT as FRAUD: @zachary715 said in Notorious Short-seller labels Ubiquiti Networks $UBNT as FRAUD: Additionally, the Cavs aren't publicly traded, therefore there aren't necessarily shareholders who are pushing him to make the Cavs as profitable as possible. Not public, does not mean there are not shareholders. Just that they are not traded on a public exchange. Haha I knew when I typed that someone would say that. I almost spent extra time clarifying, but didn't. Yes there are possibly other shareholders/part-owners involved. Those few individuals can scrutinize the ownership/financials all they want for their company. (If they want to sell, it's probably a bit more convoluted than just hitting up ETrade.) The general public has no view into that info though and it's mostly irrelevant to them. In the case of UBNT, it just applies to a wider audience since there are many more investors that they're relying on to keep happy and keep the company's value as high as they can.

@hobbit666 said in How to install the Ubiquiti UNMS on Debian 9.1: Haven't got enough EdgeSwitch out there yet to need central management Those are not in yet anyway. Soon

@zachary715 said in How to install the Ubiquiti UniFi Controller on Debian 9.1: @ccwtech said in How to install the Ubiquiti UniFi Controller on Debian 9.1: To update the Cloud Controller to the latest version on debian, is it just another apt-get install unifi -y If you added the repo per this guide, then it should just be (sudo) apt update && (sudo) apt upgrade -y) like any other system update Ok, thanks.

Just wanted to add @bj to this thread that I think a $100-ish Cloud Router from Mikrotik would blow most hardware away, including Ubiquiti, on pure performance. With the $50 and under models you are still getting 1 million PPS. The new cloud router series really has a crazy amount of power. This still coming from a pure PPS (packets per second) point of view. I think the cheapest cloud router has 12 to 16 cores That would only count for the core routers I am more familiar with (12 to 24 now) in the $500 range. Very poor marketing in the states but very popular with western country WISPS.

Grandstream has an NVR unit as well. http://www.grandstream.com/products/ip-video-surveillance/network-video-recorders/product/gvr3552

Not finished yet. Need an enclosure for the AP, the cable and final assembly.

@stacksofplates said in Ubiquiti vulnerability: @JaredBusch said in Ubiquiti vulnerability: @stacksofplates said in Ubiquiti vulnerability: @JaredBusch said in Ubiquiti vulnerability: None of that is the EdgeMax series. That is all the original wireless stuff before even the Unifi line. Yes it is all still currently available, but not nearly as horrible as that article is trying to insinuate. All that gear should be behind a router normally. Ya I was looking through it and noticed that. The tough switch was in there, but that's the only non bridge type device I saw. The tough switch has been a dead product for years. Ah didn't realize that. I've seen it for sale a few places, but never noticed they weren't produced any more. It might still be produced, but it has not been developed against at all.

@Dashrender said in Considering a New VPN: @JaredBusch said in Considering a New VPN: @scottalanmiller said in Considering a New VPN: @JaredBusch said in Considering a New VPN: @scottalanmiller said in Considering a New VPN: @JaredBusch said in Considering a New VPN: @scottalanmiller said in Considering a New VPN: @Carnival-Boy said in Considering a New VPN: Yeah, I need hub and spoke really. But that's not too difficult to setup on ZeroTier is it? ZeroTier doesn't offer hub and spoke at all. It's pure SDN / mesh. This is not true, ZeroTier has gateway functionality. https://www.zerotier.com/community/topic/5/bridging-ethernet-to-zerotier-virtual-networks-on-linux I was leaving that out for simplicity as he's not going to build custom Linux systems for this. Why? Because a single VM setup as a gateway means that ZT now meets all needs also. No different than replacing a router, etc. I've not used it, does it require you to change your IP range or can you keep what you have? The biggest recommendation is to make it inclusive of your LAN subnet so make life easier. I've not had the time to set it up on my lab yet. I use ZT in a number of places, but not using the gateway anywhere yet. Right, so being inclusive means that you did follow Scott's recommendation, only that you bent ZT to the current setup, instead of making a whole new IP setup with this in mind. Did that solve all of the Windows DNS issues? I have no idea WTF you are talking about. You are implying and inferring things that are not being discussed here.

@JaredBusch said in Unifi switch - tagged traffic issues: @Dashrender said in Unifi switch - tagged traffic issues: Found the problem - the uplink from my Unifi to my core switch, VLAN 2 wasn't allowed on the connection. Enabled VLAN2, problem solved. Aww the little things. on which switch. Also, reinforcing the issue with VLAN complicating things. The core switch, in my case an HP 2824. I don't disagree that VLANs can/do add complication. But in this case it was pre-existing complication that I had to work through, not remove at this point.

@Breffni-Potter exactly. There is a clear market for this, why is there any question why they provide a product where there is demand?

I found these guys on Amazon a few months ago looking for something else. I have not used or tried the products but looks like what you need. https://www.gl-inet.com/

Seems pretty clear that UBNT has gone public with this at this point.