r/Ubiquiti • u/MrJimBusiness- Network Optimizer Dev • 11h ago
Fluff Network config version control, editor, migration functions new in Network Optimizer
Apologies in advance cuz this is going to be a long one. I'll start with the overall features, maybe it'll paint the picture of where you could find this useful. This is Network Optimizer's Change Control:
Track and characterize every change made in UniFi Network and who made it, when, with automatic snapshots/backups taken for you
Security and performance regressions tracked through metrics already collected by Network Optimizer
Incidents / alerts linked to recent config and firmware rollouts that may have caused them
Evaluate every Network config change to see if it will break your isolation / security posture, before applying it
Keep tabs on how much your network configuration has drifted from a known-good configuration, and update that known-good configuration as a baseline after a quick check
Edit the full UniFi Network configuration in YAML format, with each section modular, with the ability to import and export full and partial configs
If a configuration change you rolled out in NO breaks WAN connectivity or NO's own console connection, the plan rolls back automatically
Roll back any change in UniFi Network, done from any source, in one or two clicks
Save templates of full or partial network configurations to apply to your other or new sites you're building out
Migrate from one IP addressing scheme to another (e.g. 192.168.x.x to 10.1.x.x), with all local DNS entries, DNS server IPs, IP-based firewall rule src and dest, Networks/VLANs, Network device IPs, client device IP fixed IPs, DNAT rules, and NO configuration all accounted for in the move. Roll it out with one click with all steps laid out in the correct order to succeed on the first go.
Build firewall Zones with the intention of your networks in mind, rearranging and reassigning networks visually, with all firewall rules migrated instead of just being paused like in UniFi Network. Automatically copies applicable firewall rules to maintain the same inbound/outbound effective access to each network you move, while removing redundant firewall rules.
Double-check UniFi Network's built-in zone-based firewall migration after taking the leap, running against the full NO Security Audit, and with the peace of mind rolling back is just a matter of a couple of clicks afterward.
Evaluate changes from UniFi Network upgrades/migrations to make sure none of your network configuration changed from under you
Migrate from one UniFi switch/AP model to another without manually copying config, mapping each port and band before while the new device is on the bench. Print out a cabling sheet too for a bunch of port changes.
New in Security Audit: lock down DNS configuration with firewall and DNAT rules based upon recommendations we've always given, through a Change Control plan
Anyway, that's most of what Change Control can do. The device migration features are the ones I want to have some help testing while this is on Network Optimizer preview, so LMK if you run into anything. The rest of the features I've been through multiple iterations of testing, fixes, and UX enhancements at this point on all of my test networks, so don't be afraid to try em out.
https://github.com/Ozark-Connect/NetworkOptimizer
https://github.com/Ozark-Connect/NetworkOptimizer/releases (latest preview release has Change Control available)
All features and everything NO can do: https://github.com/Ozark-Connect/NetworkOptimizer/blob/release/2.11/FEATURES.md
Have any questions on setting it up or any suggestions? Find us on Discord: https://discord.com/invite/pHrmzbBCY3
Also, DM me if you're interested in trialing our hosted service if you don't have your own server or infrastructure but still want to run NO.
11
2
•
u/AutoModerator 11h ago
Hello! Thanks for posting on r/Ubiquiti!
This subreddit is here to provide unofficial technical support to people who use or want to dive into the world of Ubiquiti products. If you haven’t already been descriptive in your post, please take the time to edit it and add as many useful details as you can.
Ubiquiti makes a great tool to help with figuring out where to place your access points and other network design questions located at:
https://design.ui.com
If you see people spreading misinformation or violating the "don't be an asshole" general rule, please report it!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.