@gjacobse I'm setting one up in our lab today and as a basic SMB router with VPN capabilities its OK. Compared to an ER-L I'd probably stick with the EdgeRouter.

Thanks for the suggestions, help and talking it through...it is always something simple and overlooked.

@scottalanmiller said in Basic Ubiquiti Network:

@eddiejennings said in Basic Ubiquiti Network:

@jaredbusch said in Basic Ubiquiti Network:

@eddiejennings said in Basic Ubiquiti Network:

The Dream Machine looks interesting, but I'm not inpressed with it also being an 8-port switch.

I have not looked at it yet, but are they fixed switch ports, or assignable? The ER-X is an example of this.

The documentation I've seen doesn't tell me much. It seems like the switch ports create just a plain layer 2 switch. They aren't assignable interfaces like the old EdgeRouter Lite's eth0, 1 and 2.

I believe that to be true.

The old ER Lite were software bridged only and not something you ever wanted to do. Horrible performance killer.

The ER-X and ER-4 have an actual switch chip. You don't have to make each port use it, but it is there.

So you could make eth0 be WAN and eth1 through eth3 be members of switch0

@scottalanmiller that is edgeos syntax.

My guess would be yes. Most of those released 2015-2016. We've since seen their 3rd gen products released around 2018 with the HD products, and now the UAP6 devices are starting to trickle out. Doesn't really make sense to keep promoting the older stuff.

https://help.ui.com/hc/en-us/articles/360012192813#faq-device-gen

I moved a test AP to 4.3.28.11361 yesterday. No issues experienced. I moved some additional ones this AM, and still no issue with DHCP like with the 4.3.24.x version

@scottalanmiller said in First Look Ubiquiti Unifi UXG Pro:

The new, unreleased Unifi UXG Pro just arrived here at the NTG Dallas offices. Woot! It's dual power supply, dual WAN, dual LAN, touch screen LCD and up and running!

More details as we get to play with it.

DAMN IT!!!

He asked - what's the difference between USG/EdgeRouter/some other firewall.

@Dashrender said in Remote VoIP Phone Unifi Network:

@JasGot said in Remote VoIP Phone Unifi Network:

What are your routers? Ubiquiti?

Can you disable SIP ALG on them? (sometimes called SIP transformation on other routers)

He mentioned CONNTRACK - I know that's on USGs.. not sure if it's called that on ER's?

OK the ER does have CONNTRACK.
https://community.ui.com/questions/EdgeRouter-Infinity-conntrack-tuning/efc51d58-8464-41f5-b10e-f7d0fb10968b

All routers have a conntrack table..

@JaredBusch said in Unifi Point to Point:

@NashBrydges said in Unifi Point to Point:

UBNT has also recently released a Unifi based option. Haven't tried those though.
https://store.ui.com/collections/unifi-network-routing-switching/products/unifi-building-to-building-bridge

Yes, These are a great solution that fill a very comman gap IMO.

So many building to building links are done with products that were designed for much longer ranges, simply because there was never a solution designed for the smaller ranges.

So those look interesting for sure and could be an option.

I got to see the site and there are quite a few trees between the buildings so this may not work.

It might be better fore to just blanket the area from a single focal point.

Yeah i'm happy with Unifi and do what i have too to get it working 🙂 especially at the price point they come in at 🙂

@Romo said in Unifi USG VPN from Behind NAT Firewall:

Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision.

One reason I hate these units.

@DustinB3403 said in Unifi port blocking on specific networks:

@Dashrender said in Unifi port blocking on specific networks:

he's talking about ports - not URLS.. not sure that Pi-hole fixes this, unless he said the wrong word earlier.

I specifically mean to block ports on a specified wireless network, had I meant URL's I'd be using my pihole.

Assuming
wifi - 192.168.1.x
LAN - 192.168.2.x

You configure the router to not allow said ports on network 192.168.1.x

Not sure anyone mentioned HostiFi. You can get a free account for a single site.

https://hostifi.net

In theory, you could even update the firmware on the UAP, in the future, by pre-downloading it on a device that presents it via a URL and then join that device to the aloha network.

But that would be excessive amounts of work.

Possibly the app could do it on an iPhone/Android device with LTE that is also joined to the aloha wifi.