@scottalanmiller

It's ok. That's not my favorite by far, but it's what was in the fridge, so it worked.

We've been able to Default the remaining APs and they are adopted. We have one that is being stubborn, while it 'pings' it's not reachable. Suspect an issue with the AP itself. One just lost the heartbeat, but, it was found and adopted.

All in all, four of the six are running and good to go. lot better than where we started.

Thanks

@Dashrender said in EdgeMAX EdgeRouter software release v1.9.0:

I used to do VLANs for broadcast storm reasons.. but as I've sense learned, if you have broadcast storms, you have another problems you need to solve anyway... and the VLANs probably won't save you, the switches will still be swarmed and might be brought to their knees anyhow... so, yeah.. today, if I need more than 250 devices in a network, move from /24 to /23 or even /22.

Migrating an existing network though - kinda a huge pain in the ass.

Definitely true. But to bring this full circle, the person in question wants to setup VLAN for learning how to implement them and how they work, and that is awesome.

@Mike-Davis said in ubnt guest wireless or separate VLAN?:

My understanding of how Ubiquiti handles guest mode is that it drops packets destined for internal networks. What I don't know is like I think some others were getting at - what if the user tries to go to another local subnet outside the subnet their on. I guess I'll just keep the VLAN thing.

My understanding is that it totally drops those packets too. In some ways, that makes it more secure than a VLAN because just hijacking a physical switch is not enough to grab the packets.

Did you end up putting in a support ticket? Pretty unfortunate you haven't received a reply yet as to whether you should or not. Hopefully it's fixed soon.

@JaredBusch

Good to know. I'm planning on starting this later this week. If I can get this working, I'm going to replace a PFSense firewall with an ERX or lite. Right now, this is the only thing that I dont have setup for ERX yet.

@fuznutz04 said in EdgeMAX Alpha release v1.8.5alpha1:

@JaredBusch said in EdgeMAX Alpha release v1.8.5alpha1:

@fuznutz04 said:

@JaredBusch said:

@fuznutz04 said:

@JaredBusch said:

@fuznutz04 what type of OpenVPN? Site to site? I have wrote up that process before back when I was learning EdgeOS originally. I can update it and make it clean.

No, I was looking to set it up as a server so I can remote in via the OpenVPN client. Basically, secure access to my home network when I need it. Right now, my experience with Open VPN is limited to the package available for PFSense. I'd like to do the same on my ERX.

I have that setup also. both as a certificate based and as a password based. at different sites. I really need to make new documentation anyway.

You would be hailed as "the man" if you produce that content and share it. 🙂

It is already on the ubnt forum. buried somewhere in posts I made 2 years ago there.

Just needs updated and reposted.

Hey Jared,

Any update on this new guide? I'm getting ready to replace a PFSense router with an ERX and the only thing holding me back is a working OpenVPN solution for the ERX.

I've been working on IPSEC VPN issues that are client affecting and have not had time to revisit the OpenVPN process.

@coliver said:

Do VPN connections get created/torn down with every communication? Or are they persistent until the device disconnects?

Normally neither. They are normally persistent until a certain amount of time, then they tear down when idle. Might be hours or days. That way they don't remain absolutely forever, but normally a very long time.

Don't ask me.. it's what he told me - so I just walked away and really didn't put any more thought into it.

But his thought was that you can't acquire the AP over wireless.

He has a greenfield setup.

But in thinking more about it... he's going to have to plug into the network no matter what for at least the first AP. After that he should be fine all wireless.

@gjacobse said:

I was informed that he is about 20' from the router on Wireless, but that TWC is to be onsite today to setup / move the equipment and then he will be within 5' of it.

Just hope it's not to close and overloads the wireless radio's.

@brianlittlejohn said:

@gjacobse said:

@JaredBusch
Ah very possible - Yea,.. I have a Samsung for the WiFi Analyzer as well. Wished there was on on the iOS but that is more on Apple than developers. Apple doesn't allow access to the network Stack ( last I heard).

I used to have a great one on iOs until Apple blocked access.

That was infuriating to me. One of the reasons I switched to Android 4 phones ago.

OH - sigh!

Yeah yeah - fine.

UBTN is username cap sensitive...

annoyingmuse no more? i'll have to fire up some of these again and play with the VPLS/MPLS configs. whoop

@gjacobse said:

@DustinB3403
That is our plan... of course it appears that we need to take a look at the Server DHCP Scope as well.

Of course, don't want to try and overlap.

@Jason said:

@Dashrender said:

@Jason said:

@Dashrender said:

the problem with moving it is that the APs only want to talk to the device that activated them. At least by DNS name if not by IP. So if you restore to a new machine with a different IP, you'll have to change DNS at least, if not manually reset all APs and import them again.

I'm pretty sure you can telnet or SSH into them and change it. Pretty sure I've done it before.

Yeah I suppose, I tried today but it would not accept my password. I should try again when I'm not under the gun.

Jason, do you understand that it is the same password you use for the controller?

No, It's been a while since I've used them but it was under settings on the controller you set a device password. otherwise it's likely just ubnt/ubnt for the user/pass of the AP.

Yeah I saw that are, on phone now, and I recall seeing my username in there, but the password was started out.

@Jason said:

Nevermind. #faceplam. forgot to go into configure mode first..

I may or may not have done that more than once.

Connected again after defaulting the NVR again.

I have the cameras 'adopted' but they are showing disconnected still....

@johnhooks said:

@JasonNM @JaredBusch I wasn't saying I had one or wanted one. I just wondered how the new AP's compared to the old ones in terms of range.

Range is just important to consider in different context. The range of the AP isn't the same as the useful range, which is determined by the AP, the client and the environment together.

MPLS capable - that will be interesting!

If it is a very specific ad that is an issue, you might want to consider blocking it manually either via IP at the router or via DNS or something similar.