@dashrender said in UniFi Product stream:

@scottalanmiller said in UniFi Product stream:

@travisdh1 said in UniFi Product stream:

@wirestyle22 said in UniFi Product stream:

@scottalanmiller said in UniFi Product stream:

@travisdh1 said in UniFi Product stream:

@wirestyle22 said in UniFi Product stream:

@travisdh1 said in UniFi Product stream:

@wirestyle22 said in UniFi Product stream:

@travisdh1 said in UniFi Product stream:

I forget off the top of my head which device it is,

The UniFi Access system consists of four elements:

UA Controller: The control center for your Access system, hosted on the UniFi Dream Machine Pro (UDM-Pro). Your UA controller is easily upgradable and offers a host of features that simplify access policymaking as well as personnel, space, and device management.

UA-Hub: A secure I/O hub that authenticates inputs registered by your Access readers (UA-Pro & UA-Lite), push buttons, and sensors. Your UA Hub can also control door locks, alarms, and motorized door openers.

UA-Pro and UA-Lite: The Access system's card or motion reading devices that unlock doors with a swipe of an NFC card or NFC-enabled mobile phone. Please refer to the Current and Future Access Modes section below for more information on current and future access methods.

UA-Card: A NFC card that is specific to your Access system and encrypted with a special algorithm that cannot be replicated, unlike other NFC cards. Your Access system will support any NFC card, so you can retain your current access cards.

It was the Dream Machine Pro I was thinking of. The reviews I've seen all say that if you have to buy a Dream Machine Pro just for the access control that you're better off going with the competition who's overall price will be lower.

That applies if you aren't planning on using the other stuff the Dream Machine is capable of. It's a single device that can manage all of your AP's, Security Cameras, Door Access and soon VoIP. Depending on the use I would think it would be worth it provided you are getting the functionality you want out of it.

That's sounding like a great product for the home, I'll have to keep my eye on them.

It's really not. Think of your home like a business. This is a product for a business that has confused itself with a home.

Sounds like it's not a product for business

It is not, probably not even a serious house product, just something that looks neat to play with (expensive toy.)

What even makes it look neat? To me, being junk, makes it far less interesting than normal gear. Like you are used to a Ferrari and then someone comes along with this Yugo. Yeah... not interesting, at all. Not even as a gadget, because there's nothing special, just crappier versions of what we already use.

Normal people see SPOG and just love it.. one ring to rule them all - that's what makes it 'neat'
neat doesn't make it good or worth while.

Like humans with rings of power. So lame.

@Dashrender said in Soft Phone issues:

HP sure in the heck isn't local in Omaha, they hire contractors to go to businesses to replace motherboards, etc for the onsite component.

NTG got much of its early business being those "local" guys for HPE, Dell, etc.

And funny enough... even being the "local guy" meant that our Rochester, NY guys covered like eight states. When those big companies are sending their "local guy", they are driving hundreds of miles much of the time unless you are in a huge city.

@Romo said in Unifi USG VPN from Behind NAT Firewall:

Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision.

One reason I hate these units.

@manxam said in USG to EdgeRouter VPN:

Interesting. The last time that I looked at the GUI (as we typically use CLI for VPN), it didn't give the option of DH group like so :

alt text

Wonder in what version this changed?

It has had it for as long as I recall. At least 1.5.

The CLI has had it 100% of the time since release at version 1.2.0

@WrCombs - did you reset the AP before using the AP? If no, that's why you couldn't find it.

Also, I'm not sure if the app can find an AP via non associated wifi or not - I'm guessing it must be able to, as home users wouldn't typically have a way for their cell phone to be attached to the physical network since you're just now trying to install wifi in the home.

@JaredBusch said in EdgeOS 2 released:

It is now showing up in my UNMS for installation.

5dd53458-79ff-494e-8308-8c98c721e611-image.png

I have had a couple systems on 2.0.1 for a few weeks with no issues.

But it had to be done manually. Showing up in UNMS is new to me.

Upgrading now.

d049c01f-e361-4e09-8b35-7e042814f9ad-image.png

@mroth911 said in locking down network:

so basically I am helping with my church/School , they need to connect to apple/android store. youtube. but social media sites locked down and p2p networks and anything inappropriate for k-12.

So OpenDNS is doing the trick for now., However there is no cherry picking, and certain users need the ability to connect to facebook as well. Posting via webpage what is going on in school etc.

Thats the situation at hand.

They received a letter that someone on the network was downloading from BitTorrent. and it broke digital media anti-piracy law. etc. So they are naturally freaking out.

This is something I want to setup and walk away.. I am just doing this to help them.

Blocking Bittorrent without an application level firewall isn't that easy. Talking to the tracker happens via DNS, but talking to the other clients normally is just via IP address.

You could block all non needed outbound ports - but again, I think Bittorrent can work over port 80 and 443, so not really that helpful.

I upgraded to 1.10.7 2 weeks ago. Pulling the trigger on 1.10.8.

@JaredBusch said in Yealink VoIP Phone Powered by Ubiquiti ER-X PoE:

@scottalanmiller said in Yealink VoIP Phone Powered by Ubiquiti ER-X PoE:

Anyone tried this combination? Does the power output on the one PoE port of the UBNT ER-X properly power the PoE input on a Yealink phone? We are specifically looking at the T42S.

The ERX should work if the power injector that you’re passing through is one design for the phone and not the fixed voltage unifi

The ER-X models have warnings in the manual that you need a different power source than the included wall wart if you're going to provide PoE to a device. At that point, just use passthrough from a compatible phone adapter.

@JaredBusch already nailed it.

@dbeato said in ubnt CloudKey - refused connection:

@bbigford said in ubnt CloudKey - refused connection:

option but honestly I just haven't explored it yet for a multi-client setup.

I have one Unifi Controller with 70 Customers and they have each their own login and can manage it from their end. This one is not hosted on Vultr but rather in AWS but it is working well.

Moving to Vultr though very soon.

Yeah, I've worked with a single instance managing 200+ customers. Easy, especially when you can adopt a new AP before taking it on site.

@Mike-Davis said in daisy chain Ubiquiti AC Pros?:

@DustinB3403 said in daisy chain Ubiquiti AC Pros?:

This is why you don't use pre-made cables.

What does it cost to have fiber terminated? $150/hr? Since this is in the mountains, I'm guessing the nearest city is 1.5 hours away, so drive time on top of that. I'm just guessing at the labor since I haven't ever had it quoted.

Right, so if oyu are confident that premade will pull in quantiy, then by all means go with it.

The good thing about fiber, is that it doesn't matter if you coil up the left over.

@gjacobse said in UBNT: UniFi Controller Issue:

Follow up, controller is running again under Win10.

I’ll address a Linux system in the future at some point and move over so it can run full time.

Worth it if you have a hypervisor running somewhere with enough extra resources for it - otherwise, in a home environment - not worth it.

@jaredbusch said in Ubiquiti ER3 to ER4 Upgrade?:

@scottalanmiller said in Ubiquiti ER3 to ER4 Upgrade?:

@mroth911 said in ubiquiti Er3 to 4 Upgrade?:

Can I just back up my er3 and upload it to the 4

I believe so.

I have never tried, but it should handle it because it only bring the /config folder in, and nothing in the hardware of the 3 vs 4 is all that different.

To clarify, I have migrated from ERL to ER4 a couple times. But I manually migrate. I don’t try to restore the old config.

@gjacobse said in Help troubleshooting L2TP over IPSEC VPN connections.:

jeeze,.. that is a sad state to think that we have nbeen fighting this for that long,...

@JaredBusch @scottalanmiller
Can a cron be set to restart the ipsec every 24 hours?

Yes.

Interestingly if I press download the URL is
https://fw-download.ubnt.com/data/unifi-controller/242f-debian-v5.8.28_2batag-5.8.28-11052-5cedfbea2cca434a82f19db77124e9c6.deb

It turns out that the outlet that I had the switched plugged into via a powerstrip had one always on outlet and the other was switched. So whenever they would leave they would turn off the lamp connected to the switched outlet...and their network switch. Good times. I moved some things around and the switch is now on a UPS and off that switched outlet.

There is also an "I can't even thread" that is updated regularly. Maybe it is time to add that as its own category.

@ccwtech said in Unifi 5.7 on Ubuntu 18.04:

Scott, why did you go with Ubuntu vs. Fedora? (Asking for a friend)

Because it's the official OS of the product. Absolutely no reason to use Fedora here. Unifi only supports Ubuntu and Debian, and Jared and I have opposite views here. Ubuntu is the business product of the Debian family, Debian is the hobby project that is used as the basis for it. Debian is great, I love the project and they do great work, but it doesn't have primary vendor support, you are at the mercy of a hobby project. Ubuntu uses that basis and turns it into a production ready release with vendor and market support options.

Ubuntu isn't Fedora, but it's still extremely good.