@scottalanmiller said in First Look Ubiquiti Unifi UXG Pro: The new, unreleased Unifi UXG Pro just arrived here at the NTG Dallas offices. Woot! It's dual power supply, dual WAN, dual LAN, touch screen LCD and up and running! More details as we get to play with it. DAMN IT!!!

He asked - what's the difference between USG/EdgeRouter/some other firewall.

@Dashrender said in Remote VoIP Phone Unifi Network: @JasGot said in Remote VoIP Phone Unifi Network: What are your routers? Ubiquiti? Can you disable SIP ALG on them? (sometimes called SIP transformation on other routers) He mentioned CONNTRACK - I know that's on USGs.. not sure if it's called that on ER's? OK the ER does have CONNTRACK. https://community.ui.com/questions/EdgeRouter-Infinity-conntrack-tuning/efc51d58-8464-41f5-b10e-f7d0fb10968b All routers have a conntrack table..

@JaredBusch said in Unifi Point to Point: @NashBrydges said in Unifi Point to Point: UBNT has also recently released a Unifi based option. Haven't tried those though. https://store.ui.com/collections/unifi-network-routing-switching/products/unifi-building-to-building-bridge Yes, These are a great solution that fill a very comman gap IMO. So many building to building links are done with products that were designed for much longer ranges, simply because there was never a solution designed for the smaller ranges. So those look interesting for sure and could be an option. I got to see the site and there are quite a few trees between the buildings so this may not work. It might be better fore to just blanket the area from a single focal point.

Yeah i'm happy with Unifi and do what i have too to get it working especially at the price point they come in at

@Romo said in Unifi USG VPN from Behind NAT Firewall: Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision. One reason I hate these units.

@DustinB3403 said in Unifi port blocking on specific networks: @Dashrender said in Unifi port blocking on specific networks: he's talking about ports - not URLS.. not sure that Pi-hole fixes this, unless he said the wrong word earlier. I specifically mean to block ports on a specified wireless network, had I meant URL's I'd be using my pihole. Assuming wifi - 192.168.1.x LAN - 192.168.2.x You configure the router to not allow said ports on network 192.168.1.x

Not sure anyone mentioned HostiFi. You can get a free account for a single site. https://hostifi.net

In theory, you could even update the firmware on the UAP, in the future, by pre-downloading it on a device that presents it via a URL and then join that device to the aloha network. But that would be excessive amounts of work. Possibly the app could do it on an iPhone/Android device with LTE that is also joined to the aloha wifi.

OK late to the thread. We use a cheap travel router for this purpose. GL.iNET GL-MT300N think we paid $25 for it. Supports up to 4 SSID's and can do VLAN's though we only use 1. We can actual do wifi to wifi bridging with it. We use it for these wifi Sapling clocks that need to connect to a pre-provided WPA2-PSK ssid for initial setup. This is the newest version: https://store.gl-inet.com/collections/travel-routers/products/gl-mt300n-v2-mini-smart-router Can get these on Amazon now for $25

Just wanted to report back say this little switch was the perfect item for my need. It has been installed for over a month now and I have been very pleased with it. Not that it is doing anything special, it just does its job! We are using it indoor and we mounted its own little bracket to a single gang wall plate, then installed the wall plate, then attached the switch to its bracket. It makes for a clean install where there once was an ethernet wall jack. Everything about it is Unifi, so if you are familiar with the Unifi System, this runs like any other Unifi switch.

The scanning software can't tell you where it is getting the issue?

@JaredBusch said in Unifi AP AC EDU with FreePBX ...: @Dashrender all of the IP phones I have worked with can handle multicast natively. That's good - I guess, and makes it even more weird that Ubiquiti didn't have their devices supporting it out of the gate.

@manxam said in USG to EdgeRouter VPN: Interesting. The last time that I looked at the GUI (as we typically use CLI for VPN), it didn't give the option of DH group like so : Wonder in what version this changed? It has had it for as long as I recall. At least 1.5. The CLI has had it 100% of the time since release at version 1.2.0

@scottalanmiller said in 10Gb/s Firewall Choice for Colocation: @bnrstnr said in 10Gb/s Firewall Choice for Colocation: Looks like the ER‑8‑XG could also be a good fit if you prefer the EdgeRouter series over the Unifi stuff. Also slightly less expensive, and better performance. https://www.ui.com/edgemax/edgerouter-infinity/ And ordered... we should have it on Monday. From the only vendor offering prime?

Ah I found it, they moved it under the other SSIDs now in the blacklist regions.

@scottalanmiller said in I thought I had a lot of gear at home but WTF?!?: @tonyshowoff said in I thought I had a lot of gear at home but WTF?!?: @scottalanmiller said in I thought I had a lot of gear at home but WTF?!?: The thing with this network is that it's focused on the gadgets, not the tech. From a tech side, it's pretty weak and the author doesn't really even know the stuff that he has... I'm glad I wasn't the only one who noticed, there were a few times were I was like "..that's not what that means/does/is" Definitely someone not very familiar with it. Appears not to have learned to much on that side of things even after having installed and presumably used it. Sounds like I should have read the entire thing instead of just glancing at a few highlights.

@dbeato said in ubnt CloudKey - refused connection: @bbigford said in ubnt CloudKey - refused connection: option but honestly I just haven't explored it yet for a multi-client setup. I have one Unifi Controller with 70 Customers and they have each their own login and can manage it from their end. This one is not hosted on Vultr but rather in AWS but it is working well. Moving to Vultr though very soon. Yeah, I've worked with a single instance managing 200+ customers. Easy, especially when you can adopt a new AP before taking it on site.

So we didn't figure out a good explanation for the exact issue. We did discover that the customer left devices plugged into the modem forcing Cox into DHCP instead of static causing all kinds of issues. So we got it fixed, but the error is weird.

@dustinb3403 I see Polycom has some higher end models now. Nice and colourful.

@jaredbusch said in Unifi Video: I recently discovered Wyze. https://wyzecam.com These are fucking awesome. That is an awesome find.

@ccwtech said in Unifi 5.7 on Ubuntu 18.04: Scott, why did you go with Ubuntu vs. Fedora? (Asking for a friend) Because it's the official OS of the product. Absolutely no reason to use Fedora here. Unifi only supports Ubuntu and Debian, and Jared and I have opposite views here. Ubuntu is the business product of the Debian family, Debian is the hobby project that is used as the basis for it. Debian is great, I love the project and they do great work, but it doesn't have primary vendor support, you are at the mercy of a hobby project. Ubuntu uses that basis and turns it into a production ready release with vendor and market support options. Ubuntu isn't Fedora, but it's still extremely good.

@penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: @penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: Controlled migrations have lots of tools and options. But a downed controller has pretty much no option except to default the APs and readopt. You will not even be able to SSH into the APs if you cannot log into the controller and get the device admin password for the site. @JaredBusch is right. If you lost the controller it is a reset process. I recently went through something similar, however, it was the fact that our ISP at a location I manage decided to change out there cable modem and in doing so changed them from a static IP to a dynamic IP. Which is fine and easier for me but they didn't tell the client that they might have to reconfigure their equipment and didn't even bother to make sure they had internet. Switch cable modem and left. Client calls me and I get there and well the Ubiquiti Secure Gateway wasn't working because it was set to use a static IP on the WAN side. I was mad. So I had to reset the Ubiquiti Secure Gateway. Now here is the kicker, it would show up in my controller once I set the inform address but for some reason at least on the smaller USG's is that you had to ssh into them and set the inform address. Click on adopt in the controller and then while it says adopting in the controller run the inform command in ssh again. If you didn't do that it would be adopted but say disconnected. It was a long night until I found those instructions. Grrrr. I hate the USG. Such a piece of crap. I know, I wasn't the one that put it in, it is this one: https://www.ubnt.com/unifi-routing/usg/ They have the newer USG that are bigger. Are those any better? https://www.ubnt.com/unifi-routing/unifi-security-gateway-pro-4/ https://unifi-xg.ubnt.com/usg-xg-8 It is better hardware under the hood, but it is still UniFi. UniFi is shit on a router.

@tim_g said in Use DHCP option 43 on Windows Server to tell UniFi devices how to find the controller: @jaredbusch I see, so just setting option 43 on whatever DHCP server you use is all you need. Nothing hardware specific is required on the network. Correct