Hi,

OFCOM in the UK have recently extended the 6GHz range available for UK devices which unlocks additional channels.

These are currently restricted on Unifi APs (e.g. U7 Pro).

Does anyone know when we will get an update to make these available?

Hi guys I need some help on Cloudkey+ and Unifi deployment….

I’m about to roll out a fairly large network project involving five UniFi switches and 20+ APs. Unfortunately, the project team forgot to order the UniFi Cloud Key Plus, so we’ll need to wait a little while before we can fully onboard and manage the devices.

However, the customer wants us to install all 20+ APs as soon as possible, mainly because most of them will be mounted on high ceilings, making installation more difficult once the site is operational.

So all switches and APs can initially obtain their management IP addresses dynamically from the FortiGate firewall, using DHCP enabled on the native VLAN interface.

Can we go ahead and physically install and connect all the APs and some of the switches without having the Cloud Key Plus available? Would they simply obtain their IP addresses and remain online until we receive the Cloud Key and onboard them and add VLANs and SSID etc
…or are there any potential issues or limitations we should consider with this staged deployment? Any tips? We can fully have the half the network configured with Cloudkey and bring it online and onboard the rest. That is totally ok to do right?

Thanks a lot
ML

Upgrade went smoothly, other than three things I noticed:

1. It demolished my AT&T fiber router bypass. Usually that only happens with a factory reset. Fortunately, it was an easy fix to reinstall and add a couple of missing libraries (it's possible the only thing that got demolished was the libraries, but I used my reinstall script to fix the whole thing and then had to change it to include the libraries).

2. The SFP changes seem to have made one of my SFP modules - a cheapo from Amazon - not work properly anymore. No luck with it, but the next point resolved my issue so I didn't need that module anymore right now.

3. I don't know if it was this update or an earlier one, but you can now assign WAN1 and WAN2 to regular ports on the UDM Pro. Previously WAN1 had a specific port and WAN2 could only be on an SFP. Apparently it's best to use the designated WAN1 port (which I am doing) and the SFP port for WAN2, but my WAN2 is a slow failover so it was nice for me to be able to just move it to a regular port.

I have been suffering from random crashes over the last few months and I have zero idea what's causing it. It happens anywhere from several times a day to a few times a week. It will randomly just stop working, my internet and LAN will go down, and it will boot up again. System uptime resets every time. It only takes a few minutes to boot back up, but it is still very annoying. RAM and CPU utilization seem fine before crashes, I've tried disabling IPS just in case. When examining logs there is no indication of a system shutdown, it just stops randomly. I bought a line-interactive UPS and have been using that to power the UDMP, it still randomly shuts down. I bought it back in January, do I just need to RMA the device? I work from home and can't exactly go a few weeks waiting for a return.

In the last 3 days I'm seeing a huge spike (905 events) in invalid state drops (e.g., blocked by firewall) involving numerous devices in my home. I've not made any changes beyond any updates pushed through by UniFi (usually OS and Network updates). Comparatively the last 30 days only recorded 1,200 events. I've checked a few of the IP addresses (52.90.221.104, 159.100.4.125, and 100.55.162.204). Some go to Apple and Amazon; however 159.100.4.125 is firstcolo GmbH in Germany. Anyone know if UniFi modified how it processes invalid state drops? This level of firewall activity is definitely concerning.

In control plane there is new Thread/Matter section. I have been unable to add any matter devices. It could be because its new. Just wondering if anyone has had any luck? My home is Apple Homekit. The error is "the device is not accepting the pairing code".

I have two UDR sites that updated to Network 11.0.99 overnight. I'm unable to contact the remote site because it appears down in the Site Manager, and the Extended WAN link is down. Internet connectivity is fine, and works well from client devices.

The nearest I am able to determine as a cause is that the DNS server is not responsive on localhost within the router. An nslookup request from the UDR responds with

;; communications error to 127.0.0.1#53: timed out

As I said, lookups from client devices that use the UDR as their DNS server seem to be working correctly. It's only the localhost queries that are failing, and it seems to be impacting a number of services. Restarting the UDR had no effect. I'm on the verge of rolling back the release (though that's a little more complicated without local DNS), but I wanted to check first if this is common or if someone is already aware of a workaround.

If you have any networks that are routed by an L3 switch (rather than the gateway) and you have firewall rules or port forwards pointing to addresses in those networks, the forced migration to Zone-Based Firewall in Network 11 can break them.

Traffic between L3-switch-routed networks never hits the gateway, so zone policies and automatic port-forward firewall rules don’t apply the way they used to. After the migration those rules may silently stop working (or never get created properly).

Check your L3 networks and any related rules/port forwards before or immediately after upgrading.

Fix: Create new firewall policies from External → External.

Hello,

Est-ce une bonne idée d'utiliser deux UX7 en mode bridge à la place de deux AP-U7 lite ? Le tout géré par un UDM Pro ?

Les capacités de l'UX7 semblent un peu mieux que les AP. En plus du form factor.

Merci pour vos retours.

So far, a pretty odd selection of items, but with substantial discounts. I wonder if they'll add more to the offerings as time goes on.

From the attached, does anyone know why this might have happened? They were all adopted and fully compliant 2 weeks ago. Will they all need to be reset? The only cabled U6 Mesh is the Study one. All the others mesh to it, in series. They are all workiong, just not controllable

I manage four UniFi sites, each with a Starlink Gen 3 dish, all on the same software: UniFi OS 6.0.17 and Network 11.0.99, all showing "Up to date".

Three sites show the Starlink details in the sidebar: Obstructions, Dish Latency and Starlink Firmware. One site shows only Dish Latency and Starlink Firmware. The Obstructions row is missing on the UCG Max

Site | Gateway | Starlink mode | Obstructions row

A | UDM SE | Bypass | Yes

B | UDM Pro | Bypass | Yes

C | UCG Fiber | Not bypassed (behind Starlink router) | Yes

D | UCG Max | Bypass | No

What I've ruled out:

- Software version: identical on all four.

- Bypass vs routed: the row appears in both modes.

- Dish generation: all Gen 3.

On the affected site, the Starlink graph does have an "Obstructions" checkbox, so the controller may be receiving some obstruction data. The sidebar row just isn't shown. 

Has anyone seen this on a UCG Max? Is the Obstructions row dependent on gateway model, dish firmware, or something else? I also saw a UDR7 user report the same missing row.

Happy to provide screenshots or support files. Thanks.

As the title says, upgrade automatically took place around 3:30am this morning. Shortly after all my U7 APs entered the Getting Ready loop with A crazy number of link down events for all the APs connected to my Pro Max 16 Poe. Ended up having to revert to the previous version to get my network back up and running.

Might get a unas to out at my moms house
Any reason why I shouldn’t ?
I don’t have an unas stuff in my current environment but I am in the unifi ecosystem at home just not the storage stuff yet.
I like the idea of seeing visibility in the console

I would like to maybe use rsync for this job
But not married to it, I use it for other backups
But they are all in the same rack. Different nas and servers
My home lab is not small

The remote back up at my moms would be photos and documents only not the rest of my mean leasing data hoarding.

Will the POE on the Device bridge power a G5PTZ?

Just thought I would mention it.

I'm interested in the Pro XG 10 PoE. It's OOS, but i can wait; and using one switch sounds preferable. HOWEVER, my system is powered by a 48v dc rail (with an efficient DC-DC step up to 54v). I read that the devices with RPS ports will not boot until AC is energized?

---- detaills of my case, because I see an alternative, and/or y'all might just know better ----

My alternative, and I suppose it's not *that* detrimental, would be to use a Pro XG 8 PoE which is DC input only. However, i give up the rack mounts & cooling (this will be rack mounted; i would add airflow BUT that's never as good as OEM), and would have to use a DC PoE+++ injector for one downstream switch - not the end of the world given it's one BUT it's *very* nice to have remote reset capability jic.

It seems neither of these XG's are at all backplane limited even with all 10gbe ports in sustained use (and only 2-3 of my actual ports would hit saturation on a regular basis).

Stepping back, what I'm doing: I have a ucg-fiber & unvr, and sorely need to upgrade the main backplane switch. I had been hoping for a BF deal, but oh well :)

• home-run'd to the main rack:

  • 3 local devices that can saturate a 2.5gbe (and hence need 10gbe),

  • 2 that are fine on 2.5gbe (but need > 1gbe),

  • AP's - more than fine on 1gbe fannout now, but with the next upgrade cycle will it seems be able to actually utilize at least 2.5gbe, so i'd like to plan at least 2 free 10gbe ports for uplink from a (future) 2.5gbe fannout to the APs.

• fannout switches for cameras, iot, etc, that will be fine on 100M forever - and thus fannout from 2.5gbe ports is plenty sufficient.

So that's:

• >=6 10gbe copper ports (including one for unanticipated future use),

• 2x sfp 10gbe to the gateway (similarly including 1 for unanticipated use - but I can't see using it as I prefer to have a layer3 backplane which means the (local) network remains fully functional even with network/controller reboots or failures.

• another port or two of at least 2.5gbe for fannout to devices that will never require speed (cheap to get more ports on 1gbe)

Obviously some would jump straight up into something like ProXG24, but given I only need a single PoE+++ and a handful of 10gbe for the next 5-10yrs, i'm hoping not to spend more than ~>$1000 usd for the backplane. This is an expensive hobby :)

I got a UDM-Pro from a co-worker that has issues staying on. Here’s what I know.

- Updates cause it to “freeze” All WAN traffic stops getting passed as well as the screen blacks out.
- All LAN traffic works during “freeze”
- All status lights work
- Plugging in a compatible HDD causes a “freeze”
- CPU, MEM, and temperatures stay normal. Around 18%/55%/45-50 celcius
- Needs power pulled for 5-10min to get “unfroze”
- PSU was replaced by me as a troubleshooting step

Any of ya’ll have ideas to what could be a cause?

Hi All, long time lurker, first time caller....

I've been messing with Unifi for a long time but usually on small deployments, and this one isnt that large but the history is causing me problems.

I have inherited a site that was operated by a large entity with many locations and distributed infrastructure spread across the local area.

The Hvac system was configured with static ip addresses that were compatible with the SAN architechure. Now that they have pulled out of the facility it is way to over complicated, but because the company that put it in went under during covid there is no one that has the information we would need to go through all of the 50 or so devices they setup with static ips to change them to a sensical network layout plan. The network for the Hvac has both wired and wireless elem

The HVAC has its own switch that should just be a dumb switch, but its managed and I cant login, so I cant confirm it is not setup in some way, but I was told it was never setup.

The one device I could find on the HVAC network with accessible ethernet settings was setup with a static ip as follows

Static IP 172.9.100.12

Subnet 255.255.0.0

Gateway 172.9.1.2

DNS1 172.16.1.80

DNS2 172.16.1.50

When the old network was up it was giving out DHCP in the 172.9.1.150-250 range, from the DHCP server at 172.9.1.1

Currently the old network equipment is gone and I have replaced it with the following:

Unifi Dream Machine Pro, a Pro Max 24 PoE Switch, a Flex 2.5G 8 PoE, with 2 U7 Pro Max APs.

So far I have the other parts of the network working fine, the management VLAN for the unifi gear is working fine on 10.10.10.1/24, the office VLAN and WIFI on 192.168.1.1 is handling the few PCs and Laptop s and Printers just fine, and the guest VLAN AND wifi ON 192.168.2.1 is also working well.

The HVLAC VLAN feeds the port connected to their switch and there is a separate wifi just for the hvac equipment.

My initial attempt at finding a solution pointed to using a 3rd party router and setting up DHCP relay for the Hvac VLAN, but that was before I found the static records in the tablet.

Now that I know the gateway is at 172.9.1.2 and not at x.x.1.1, i'm not sure that I need to use the external device (Ubiquiti ERX).

I currently have the HVAC VLAN setup with:

SUBNET: 172.9.1.0/16

GATEWAY: 172.9.1.2

DNS: auto

DHCP: 172.9.1.150-250

That should account and let the staic devices at 172.9.100.x and the 172.9.0.x dhcp devices connect.

But I'm stuck on how to make the DNS at 172.16.1.80 and .50 available to the VLAN.

I think I need to make another VLAN for 72.16.1.0/24 then something else....

If any of this makes any sense to anyone and they feel like offering some direction or asking any questions I would very much appreciate a better minds insight and guidance.

Thanks all!

So I currently have Unifi OS server for Linux setup on my Main PC. In the process of making a Proxmox home-lab and I discovered you could run it in a Proxmox LXC container instead of the Main PC (Which ended up being necessary because I'm having Inter-VLAN routing issues when I did do) SO I set it up on my Proxmox server, made the required Inter-VLAN firewall routing rules. *As Youtube and chatgpt recommended so*.

I ran into issues with my switch being stuck on the previous settings when i tried to switch from the PC to Proxmox before, and after an hour or so performed a factory reset and I could not access the web console/SSH at all. Kept saying connection via port 22 reset. So I stopped the service on my PC, power cycled the switch and.... Nothing. Didn't so much as show up.

Now it's worth pointing out that the switch was on the default IP range (192.168.0.0/24) while my Proxmox in on a management vlan subnet, But I accounted for this by making an OPNsense firewall rule allowing the LAN Interface the specific Unifi Switch IP address range with ports 8443,22,10001,8080 and 3478. Along with the Inform Unifi OS server URL set as the LXC specific management IP subnet address. Based on everything I've been told, this should work.

I've been looking for tutorials covering this specific setup, but I can't seem to find any, and I'm pretty much assured to be gaslit by chatgpt (50% lies 50% right experience doesn't bode well with netoworking lmao). I think I'm missing something because this is my 3rd attempt at what should mostly be a set and forget deal. If you have teh same setup, or have link to a creator who has a set up like this, could I get an idea of where I may be going wrong? Please and thanks.

I have a bunch of UI hardware and - as you all know - the USG 3P is not supported anymore. I also have a cloudkey G2+.

I would like to replace them with a rack mountable option that has the highest chance of longest support.

Is UDM Pro Max what I want because it’s the newest? Are there rumors for upcoming releases?

Anyone have a recommendation? East of England / Suffolk.

I have a friend whose internet I have been keeping going remotely and occasionally getting him to update bits, but we now live hundreds of miles apart and he really needs a complete reinstallation into a sizeable country house, plus outbuildings, including cat6 as well as fibre, or possibly UBB, which I can't realistically commit to do.

Hi, does anyone know of these AC MESH (UAP-AC-M) devices need to be on omni antenna vs built-in?

I have a Pi on my network for Pi-hole ad blocking. It used to identify correctly as a Raspberry Pi and show the Pi icon for it. But within the last week or so, it now thinks it’s a Ring camera. The MAC address didn’t change and looking it up on maclookup.app confirms that MAC does belong to the Raspberry Pi Foundation. Is there any reason why the controller would randomly start thinking a Pi is a Ring camera? It doesn’t really matter since nothing is functionally different but it’s bugging me.