Yeah i'm happy with Unifi and do what i have too to get it working especially at the price point they come in at

@Romo said in Unifi USG VPN from Behind NAT Firewall: Also add the changes to a config.gateway.json file in the controller to changes directly made on the USG don't get deleted on next provision. One reason I hate these units.

@DustinB3403 said in Unifi port blocking on specific networks: @Dashrender said in Unifi port blocking on specific networks: he's talking about ports - not URLS.. not sure that Pi-hole fixes this, unless he said the wrong word earlier. I specifically mean to block ports on a specified wireless network, had I meant URL's I'd be using my pihole. Assuming wifi - 192.168.1.x LAN - 192.168.2.x You configure the router to not allow said ports on network 192.168.1.x

Not sure anyone mentioned HostiFi. You can get a free account for a single site. https://hostifi.net

In theory, you could even update the firmware on the UAP, in the future, by pre-downloading it on a device that presents it via a URL and then join that device to the aloha network. But that would be excessive amounts of work. Possibly the app could do it on an iPhone/Android device with LTE that is also joined to the aloha wifi.

OK late to the thread. We use a cheap travel router for this purpose. GL.iNET GL-MT300N think we paid $25 for it. Supports up to 4 SSID's and can do VLAN's though we only use 1. We can actual do wifi to wifi bridging with it. We use it for these wifi Sapling clocks that need to connect to a pre-provided WPA2-PSK ssid for initial setup. This is the newest version: https://store.gl-inet.com/collections/travel-routers/products/gl-mt300n-v2-mini-smart-router Can get these on Amazon now for $25

Just wanted to report back say this little switch was the perfect item for my need. It has been installed for over a month now and I have been very pleased with it. Not that it is doing anything special, it just does its job! We are using it indoor and we mounted its own little bracket to a single gang wall plate, then installed the wall plate, then attached the switch to its bracket. It makes for a clean install where there once was an ethernet wall jack. Everything about it is Unifi, so if you are familiar with the Unifi System, this runs like any other Unifi switch.

The scanning software can't tell you where it is getting the issue?

@JaredBusch said in Unifi AP AC EDU with FreePBX ...: @Dashrender all of the IP phones I have worked with can handle multicast natively. That's good - I guess, and makes it even more weird that Ubiquiti didn't have their devices supporting it out of the gate.

@manxam said in USG to EdgeRouter VPN: Interesting. The last time that I looked at the GUI (as we typically use CLI for VPN), it didn't give the option of DH group like so : Wonder in what version this changed? It has had it for as long as I recall. At least 1.5. The CLI has had it 100% of the time since release at version 1.2.0

@scottalanmiller said in 10Gb/s Firewall Choice for Colocation: @bnrstnr said in 10Gb/s Firewall Choice for Colocation: Looks like the ER‑8‑XG could also be a good fit if you prefer the EdgeRouter series over the Unifi stuff. Also slightly less expensive, and better performance. https://www.ui.com/edgemax/edgerouter-infinity/ And ordered... we should have it on Monday. From the only vendor offering prime?

Ah I found it, they moved it under the other SSIDs now in the blacklist regions.

@scottalanmiller said in I thought I had a lot of gear at home but WTF?!?: @tonyshowoff said in I thought I had a lot of gear at home but WTF?!?: @scottalanmiller said in I thought I had a lot of gear at home but WTF?!?: The thing with this network is that it's focused on the gadgets, not the tech. From a tech side, it's pretty weak and the author doesn't really even know the stuff that he has... I'm glad I wasn't the only one who noticed, there were a few times were I was like "..that's not what that means/does/is" Definitely someone not very familiar with it. Appears not to have learned to much on that side of things even after having installed and presumably used it. Sounds like I should have read the entire thing instead of just glancing at a few highlights.

@dbeato said in ubnt CloudKey - refused connection: @bbigford said in ubnt CloudKey - refused connection: option but honestly I just haven't explored it yet for a multi-client setup. I have one Unifi Controller with 70 Customers and they have each their own login and can manage it from their end. This one is not hosted on Vultr but rather in AWS but it is working well. Moving to Vultr though very soon. Yeah, I've worked with a single instance managing 200+ customers. Easy, especially when you can adopt a new AP before taking it on site.

So we didn't figure out a good explanation for the exact issue. We did discover that the customer left devices plugged into the modem forcing Cox into DHCP instead of static causing all kinds of issues. So we got it fixed, but the error is weird.

@dustinb3403 I see Polycom has some higher end models now. Nice and colourful.

@jaredbusch said in Unifi Video: I recently discovered Wyze. https://wyzecam.com These are fucking awesome. That is an awesome find.

@ccwtech said in Unifi 5.7 on Ubuntu 18.04: Scott, why did you go with Ubuntu vs. Fedora? (Asking for a friend) Because it's the official OS of the product. Absolutely no reason to use Fedora here. Unifi only supports Ubuntu and Debian, and Jared and I have opposite views here. Ubuntu is the business product of the Debian family, Debian is the hobby project that is used as the basis for it. Debian is great, I love the project and they do great work, but it doesn't have primary vendor support, you are at the mercy of a hobby project. Ubuntu uses that basis and turns it into a production ready release with vendor and market support options. Ubuntu isn't Fedora, but it's still extremely good.

@penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: @penguinwrangler said in Connect Ubiquiti APs to a New Controller: @jaredbusch said in Connect Ubiquiti APs to a New Controller: Controlled migrations have lots of tools and options. But a downed controller has pretty much no option except to default the APs and readopt. You will not even be able to SSH into the APs if you cannot log into the controller and get the device admin password for the site. @JaredBusch is right. If you lost the controller it is a reset process. I recently went through something similar, however, it was the fact that our ISP at a location I manage decided to change out there cable modem and in doing so changed them from a static IP to a dynamic IP. Which is fine and easier for me but they didn't tell the client that they might have to reconfigure their equipment and didn't even bother to make sure they had internet. Switch cable modem and left. Client calls me and I get there and well the Ubiquiti Secure Gateway wasn't working because it was set to use a static IP on the WAN side. I was mad. So I had to reset the Ubiquiti Secure Gateway. Now here is the kicker, it would show up in my controller once I set the inform address but for some reason at least on the smaller USG's is that you had to ssh into them and set the inform address. Click on adopt in the controller and then while it says adopting in the controller run the inform command in ssh again. If you didn't do that it would be adopted but say disconnected. It was a long night until I found those instructions. Grrrr. I hate the USG. Such a piece of crap. I know, I wasn't the one that put it in, it is this one: https://www.ubnt.com/unifi-routing/usg/ They have the newer USG that are bigger. Are those any better? https://www.ubnt.com/unifi-routing/unifi-security-gateway-pro-4/ https://unifi-xg.ubnt.com/usg-xg-8 It is better hardware under the hood, but it is still UniFi. UniFi is shit on a router.

@tim_g said in Use DHCP option 43 on Windows Server to tell UniFi devices how to find the controller: @jaredbusch I see, so just setting option 43 on whatever DHCP server you use is all you need. Nothing hardware specific is required on the network. Correct

What WPA2 security mode are you using? Make sure it is AES not TKIP. Also a known-good USB wireless adapter is handy to keep around for times like this.

@360col said in schedule time per client not possible: Opps this was meant as a reply to the Unifi Schedule thread. No idea why it became a separate topic Can someone fix up this or close this thread. Thanks. Probably because you tried posting it as below:

@mike-davis said in Unifi Time Schedule: Ah, maybe the best approach would be to have two SSIDs. One on a schedule and one on all the time. Then only allow devices you want to connect to the all on SSID. This is what I have done in the past for myself and my friends/family. I setup a SSID for parents and then sometimes a SSID for each child. That way the parent can turn off the internet for one child and not bother the other children. Of course I always think that the punishment imposed by the children on other children for everyone losing internet because of the actions for one is a great way to get them to behave.

@jaredbusch said in Ubiquiti STUN Communication: @dbeato said in Ubiquiti STUN Communication: @jaredbusch said in Ubiquiti STUN Communication: @dbeato said in Ubiquiti STUN Communication: @jaredbusch said in Ubiquiti STUN Communication: @dbeato said in Ubiquiti STUN Communication: @jaredbusch said in Ubiquiti STUN Communication: @dbeato said in Ubiquiti STUN Communication: @mike-davis said in Ubiquiti STUN Communication: I'm hosting my unifi controller on vultr and I didn't have to make any port changes that I remember. So you didn't open any of those ports I listed? You do not normally need them. What don't you normally need them? 8080 and 8443 at a minimum correct? Correct. But I opened the 8880 and 8843 for HTTP and HTTPS for Guest Hotspot portal. Usually not needed for others but in this case it was needed. https://help.ubnt.com/hc/en-us/articles/115000871247-UniFi-Social-Media-Guest-Authentication#controller setup https://help.ubnt.com/hc/en-us/articles/115006809068-UniFi-Guest-Portal-Customization-Hotspot-System#comparison https://help.ubnt.com/hc/en-us/articles/205202640-UniFi-Guest-Portal-Promotional-URL-Automatic-Redirection With regards to STUN though, you believe is not needed then? Should not be as your controller is not behind NAT. There is not point to STUN unless NAT is involved. https://en.wikipedia.org/wiki/STUN How can it mark your post as the solution? Tell @scottalanmiller to do it because that is a glaring whole in this plugin. Has been reported, but unactioned for years now. Hey @scottalanmiller can you mark Jared's post with Wikipedia on it for the solution. I cannot for the life of me mark it as a solution.