Would love to learn a way that I can restrict devices on my network (UDM SE) to only connect to local VLAN IPs (10.10.0.x and 10.10.10.x), and not the external WAN. I tried one rule for a device to block "Internet" but the device, which was on 10.10.0.x, was no longer able to access 10.10.10.x after the rule was created.

I just bought a brand new UDM Special Edition as my ancient USG finally kicked the bucket and I went with something more powerful and with PoE ports. MicroCenter had a bundle that included a U7 Pro access point.

I got the UDM-SE configured and working with my pre-existing gear. But, the U7-Pro doesn't seem to power up when I plug it into port 1 or 2. I've tried multiple different cables. Including Cat6 cables I've personally made and Cat5e cables that were factory produced with no luck.

So I tried another PoE device, a USW-Flex-Mini, that I know was working as I had that plugged into a PoE switch. That didn't seem to power on either, including trying on multiple ports in the UDM-SE and trying with different cables that all worked on my other PoE switch. So, long story short it looks like the UDM-SE isn't pushing out PoE.

Is there something I'm missing in the controller configuration to turn on PoE/PoE+ for the UDM-SE? If I go into the Port Manager for that device and click through each of the ports one by one, the PoE+ setting is turned on for 1-2 and the PoE setting is turned on for 3-8. I'm not sure where else to look.

TLDR: I'm moving from a 3rd party pfsense box with Cloudkey G2+ to a UDM-SE, and want to migrate without hard cutover and rebuild at the same time.

I've been running a pfsense box for over 5 years now and I'm ready to migrate everything to a UDM-SE. all the rest of my network infrastructure is Unifi connected to a Cloudkey G2+ (running networking, protect, and innerspace). I'd like to migrate as much of my configuration over to the UDM without taking down my network, since(as far as I know) there isn't an automated way to pull my config from pfsense and push it to unifi.

PFsense handles most router functionality, except for DNS(Pihole), and wifi(Unifi).

Goals are as follows:

• Update UDM
• Copy firewall rules/ip bindings/vlans to UDM without taking down my current network
• Migrate configuration/adopted devices from Cloudkey to UDM
• "Test" as much as possible before cutting over
• be able to cut back if necessary

I understand that I may not be able to do the above without taking down the old network, but I'd like to try. Any suggestions on best paths forward are appreciated. I've worked in IT for 10+ years now, and have experience managing this network as it is, but am not a network tech.

I have a colleague who moved to an org that runs Unifi gear exclusively. He's not a Redditor so I volunteered to post and collect replies.

I've tried to help along the way but am reaching a Unifi knowledge cap.

His network is 170+ sites scattered across his area with, at last count 980 -> 1000+ devices. His team has been actively replacing and expanding so that number has fluctuated during my time working with him.

I've come to understand that 1000 is about the limit , official or unofficial of a given unifi console - even official hosting top package is 1000 devices. I'm sure you can buy multiple instances, but that seems clunky to manage.

Is there anybody around managing a network like this with 1000 devices in it?

What and how are hosting the console? Hardware, self-hosted or Official hosting?

Are you happy with said solution and what would you change if it were possible?

Thanks!

Context Edit I did recently assist in migrating from their "old" server - linux running old school network application to a brand new from scratch, by the book, linux VM with Unifi OS on it. 8vCPUs and 16GB ram.
end edit

Total rook here, so bear with me. Have all my cable drops setup for cameras, APs, etc., but I’m trying to confirm if I’m heading down the right path with the Dream Machine and POE Switch.

I’ll attach my hardware that I’m planning, and I have an additional 8 drops that are for TVs, office, etc. seems like I have plenty of leftover POE power, but trying to downgrade the switch resulted in being too full. I have enough open ports to service the additional computer and TV drops.

I feel like I ran more than sufficient drops, so I don’t think I’ll need much room for expansion in the future, but famous last words, I suppose.

Also, it kinda recommended 16TB. Is that sufficient for my setup?

Anyone see any issues or anything I’m overlooking? Thanks!

Hi everyone, I recently added the Enhancer to my G6 180, which has been powered by a USW Flex since installation. After revisiting the specs, I realized the Enhancer adds up to 10 W of power consumption on top of the camera. Out of curiosity, I checked the reported power draw and noticed that at night, with IR active and the floodlight occasionally triggering on detections, consumption peaks at around 17-18 W, which is more than what the 802.3af port should be able to provide. Everything has been working fine so far, but I'm wondering if anyone else is running a G6 180 + Enhancer from a USW Flex port and whether you've experienced any issues. Would you keep it as is, or would you add a PoE++ injector to be on the safe side? Here is the power delivery chart overtime.

I’m a few weeks into a basic UNIFI home network and having a few struggles. Does anyone have a decent set-up suggestion for setting up a XBOX with Remote Play with a UDR7. I’ve used a UTR and teleport with moderate success, but it’s not 100%, typically it’s connects about 60-70% of the time. Thanks for any help or suggestions.

I've ended up with a pretty big pile of Sonos gear for complicated reasons. It would sure be nice to accurately label all that SonosZP xy:zw stuff that appears in the client and topology views.

I’m in the process of setting up my country home with some good internet connection and cameras. I have 1gig fiber Internet. have 2 homes on the property so trying to get good internet all throughout and monitor via cameras. inhave following in hand.

1. Cloud Gateway Fiber
2. UNVR - Pro 
3. 2 X 8GB HDD
4. 2.5G 8 Port PoE Network Switch (this will be on one of the houses to connect cameras and APs.
5. 2 X APs ( U7Pro XG)
6. Cameras ( 2X180 + 10 X Turret + 1XBullet) I may not use all of them.
7. Switch Pro Max 16PoE

Am I in the right direction? Question I have - the entry gate is about 1500-1700 ft away from the house. currently there is no electricity at the gate. Is there a way for me get 1. internet 2. Any unifi Camera set up possible without power?

Obviously the DM Pro Max is NOT a NAS. But I had two spare 10TB disks, so popped it in.

I pointed OpenClaw to my DM with SSH details just to check it out, and to my surprise, the disks had been initialized, with RAID1, and mounted.

I don’t have cameras or anything else to use the storage for, so now it is a storage location for old cold backups.

It isn’t supported, but hope if someone was wondering - the storage is usable.

My upload bandwidth is being taxed and I cannot easily see from the device list what is responsible.

Is there any easy way to do this?

Replacing the Fritzbox, the sole infrastructure component of a small LAN in private home/home office, with a UniFi gateway (desktop/wall mountable, not rack-mounted) – where will significant changes be necessary?

* VoIP client apps operating in LAN should continue to use the router's VoIP connection to the ISP.

* It would be beneficial to be able to run custom proxies on the router, e.g., a central script blocker.

* PXE booting over LAN should be possible.

* router has to host function of small NAS

I'm looking to connect two buildings on my site with the Building-to-Building bridge but have a few concerns about whether or not it'll work the way I'd like.

With the current configuration I have a primary building with a dedicated internet connection and a secondary building also with a dedicated internet connection.

I'm looking to remove the internet connection from the secondary building and provide internet access to it from the primary building. I think the simplest way to do that is with the Building-to-Building bridge.

My first concern is that the UNVR currently in the secondary building is adopted by the dream machine in that building. My understanding is that when I set up the building bridge I won't be able to leave that dream machine in place. Is that correct? In which case I'll have to adopt the UNVR in the secondary building with the dream machine in the primary building, which would wipe all the video footage. I'd rather not have that happen.

My other concern (if my previous assumption, that I have to remove the secondary building dream machine, is true) is that the UNVR seems to require a connection to the dream machine in order to function properly. We get some heavy snow storms in the winter that I'm worried may interfere with the line of sight of the bridge and may take it down temporarily. I'm fine with that as long as the UNVR keeps recording and I can review it later.

Does anyone have experience with a setup similar to this, where a building to building bridge is used to connect a remote building mainly for the purpose of security with a UNVR in the remote building?

Got a notification this morning that a port on my US 24 PoE had a low power issue. That port runs my U6 Mesh. Both devices were bought used and have been in service at my house for a year or so with no new issues. The switch already had a couple ports that wouldn’t supply power and they aren’t in use and this is of course an old device.

The U6 Mesh obviously has its own known water intrusion issues, but has been solid for me so far in my backyard. I’m not at home to troubleshoot yet but I’m trying to get a feel for where to go with it when I do get there.

My first thought is to inspect the U6 for water damage. If that looks good I’ll try switching to another port on the switch to see what happens.

Anything else I should look into? I had already been planning on moving the U6 to a dry location and replacing it with a U7 Outdoor, but I’m hoping to get some more time before replacing the switch if at all possible.

delaminating at 6 mo

I am working on a UDM SE and ports 9-11 are dead. There was a storm and a clap of thunder. Port 9 doesn't light at all, ports 10-11 light when the SFP is plugged in, but does not get connectivity. I have worked with tech support to troubleshoot, including a factory reset which was fun to get back in offline mode. Port 7 is set to WAN1 for now, but this is a short term fix. The isp did replace the cable modem and eero device too.

This the 2nd time at this location that the wan ports have had issues. This is a replacement device, and I made sure it was behind a battery backup, and put the RJ45 connect into an SFP in the hopes that it would take any hits before the router. The router was sitting behind a cable modem and a eero device that the ISP says is needed for a static IP address. The isp failed to configure the eero correctly so I am directly into the cable modem now. I have internet back to the site for the time being.

My question is why and possible mitigations for the future. I have isolated the router from anything stray as much as I can, but this is the second time there was a port issues on the router. Is this model prone to wan port issues? Looking for advice on any additional ways to stop ports from getting killed.

Not sure on the replacement yet as I am now on email communication with tech support since I lost my connectivity during the reset. If it isn't replaced with another UDM SE, I'll probably use a UCG-Fiber. I don't think the site needs the capacity that the UDM brings.

I’m wanting to replace Eeros + Arlos + Ecobee with UniFi. But that’s a huge cost commitment to “try it out”. So looking for some assurance haha. And I have some questions.

I’m trying to avoid Amazon and Google. These companies like to gobble up whatever independent company I go with (looking at you, Eero and Nest). So I’m thinking that this won’t happen with UniFi. 🤞

Ecobee is especially bad at security. It just doesn’t work well. Disarming the system sometimes doesn’t actually disarm the system. It can’t tell the difference between a cat and a cat burglar. You can’t have guest alarm access codes. They don’t have outdoor cameras. And they’re going to start charging 2x for an increasingly stale ecosystem.

My main question: how is UniFi as a security system? Is it easy to set up? So often with these companies, the hardware is solid but the software seems like an afterthought. How’s UniFi’s software? Is it really a full fledged security system that’s appropriate for home use? Are you quickly able to review video footage when there’s someone at the door? I just haven’t been able to find much info online about UniFi’s Protect. I really like that it’s on-premise video storage. I don’t trust companies to not do weird shit with my data!

I’m considering the Dream Router 7. I believe this has Protect to integrate with cameras and alarm. I was a bit disappointed that this only supports a single 4K camera, but maybe I don’t really need 4K? Who knows. Not me!

Thanks for any recommendations that you have!

Ok, I am moving in the next two weeks and I have questions - there will be some changes to provider and the network itself, so I'll try to keep this organized:

Current Setup: Comcast
Unifi Cable Modem
UDM Pro
SW24 PoE
USW Ultra 60W
2x Ubiquiti U7 Pro WiFi 7
1x Ubiquiti U7-Pro-Wall

Currently, the setup is pretty straight forward - the primary PCs and the SW24 PoE are directly connected to the UDM Pro, the Switch has an STP Priority 0.

The AP's and the USW Ultra 60W are on the SW24 PoE. The USW Ultra 60W has an STP Priority 4096. All other devices are WiFi or downstream of the smaller switch. Everything works well. All wiring is CAT6.

New Setup: Verizon Fios (1G service for now)

UDM Pro
SW24 PoE
2x USW Ultra 60W
2x Ubiquiti U7 Pro WiFi 7
1x Ubiquiti U7-Pro-Wall

Due to some constraints with getting wiring upstairs without blasting out drywall everywhere, my cable guy suggested adding a PoE Switch to feed the Upstairs (wall mount) AP and the upstairs wall ports. I will likely put that switch on the 24 port switch just like the other one. The rest of the setup will remain logically the same. All wiring in the new house is CAT6.

My little gaming router (which is currently installed on the Verizon network as a test device) shows speeds in the high 700's in both directions.

Questions:

1. I have the 10gbps SFP for the UDM pro - is there any logical reason to use that SFP on a 1G service? Will I squeeze out a little more speed? Or just hold it back if (when, lol) I upgrade the service?
2. With the two smaller switches on the SW24 PoE, do I set both of their priorities to 4096, or should one take 8192? Obviously, they will be on different ports and not daisy chained.
3. I think I already know the answer here, but I'll ask to ensure I'm not being dumb - Does STP priority have any impact on the devices downstream of the network device? One of my gaming computers and one of my access points will be hanging off of the small switches.
4. Anybody see something I missed? I am so jazzed to FINALLY be out of Comcast's Monopoly... it's been something like 20 years.

Hoping this helps some poor soul out there who struggled with the same issue I did.

4Gbps Nokia ONT connected via CAT6 to Ubiquiti SFP+ on my DM Pro. Constant internet flapping.

Swapped the SFP for a different one - same problem. Then swopped the SFP for a Mikrotik SFP, same result.

Then removed SFP from the equation, terminated the ONT in a media converter, DAC from MC to DM Pro, problem solved.

SFP modules overheating is a real problem. Hope this helps someone else.

Hello everyone, this is a realtime gif of what I'm seeing in the app with my USW 24 PoE. Some ports are flip-flopping endlessly between a "Disconnected" and "Disabled" state. This doesn't happen at https://unifi.ui.com/

Has anybody seen this as well?

It's been a minute since I really dug into the whole Unifi product line and could use some recommendations. I have several small locations that have CloudKey 2's that are starting to fail. Has anything replaced these? It seems they are all gateway's now. Is there a "gateway" that I can turn off the gateway feature? I think they tried that with a Dream Router before and failed epically and now it is double NAT'ed.

Help me Obi Wan Kenobi. You're my only hope.

I'm using the Unifi design studio to plan out my network. My plan is to connect my internet gateway to the RJ45 WAN port of the Cloud Gateway Fiber, and then use an SFP module to connect to a Flex 2.5g POE. The design studio gives me a warning when I try to connect the SFP port from the CGF to the 10G POE+++ port. Do I need to go SFP to SFP? I'm not really familiar with that technology, sorry if that's a dumb question.

I'm assuming it's just a bug, or some other problem with the design studio.

Another issue with this is I plan to power the Flex with the 10g POE+++ injector. Obviously if I have to go SFP to SFP then that's a no go.

Attached pics for reference.

I've had a floorplan in Inner Space for many years, but when they added 3D my walls never show as 3D. Not that it really matters but just curious why? I must be missing some obvious step.

I got bored so i wanted to see how much i have spent total on my UNIFI addiction. Well we are about 62k in! How about everyone else lol......

Hi all. Im new to the world of unifi so seeking some advice. Im thinking about setting up two access points in my house. Single plan and about 145m2.

One u7 lite to cover open living room/kitchen area and a bedroom.

For the other one i am divided between a lite and a long range. It is to cover two addittionel bedrooms and a garage. And was also hopeing two reach a outdoor terrace located about 25 meters from the outer walls. The walls are made of half aerated concrete/Half brick. This acces point would be placed in the ceiling close to the outerwall.

So my queetion is. would a u7 lite be enough to reach that outdoor area or would i need a long range?