Видео

Good call out. I don't see many antennas installed these days (or RG6 for that matter), but yes... either pre run those cables or make sure your conduit to the attic space can accommodate those runs if that is a route you are going to go with!

Coax! A must... for future affordable Local TV. I still have 6 Coax cables in my old house. (Bright-house (Spectrum) installed years... ago). The old Coax is still in use as my primary OTA antenna to my Tablo HDMI DVT/4 box in the media center and one in my home office. Free Local OTA HDMI TV on any video type device with a local IP address. The signal/picture is GREAT. Primary purpose is for Hurricane season if we lose power and no internet (Summer of 2004 and 2005). StarLink Mini is in our future. More toys. We may soon drop RUclips TV as they are getting as bad as the cable companies, because the OTA broadcasters keep charging them more each year for local TV rebroadcasts. We started with RUclips TV for $29/Month and here it is a few years later and we are up to $72/Month, for the same package. A few years ago the OTA broadcasters made $11 Billion dollars a year for rebroadcast fees. Ridiculous. All the re broadcasters need to get together and boycott the OTA broadcasters all at one time, which would put a nice dent in their $11B annual ripoff. Unfortunately, their contracts expire at different times, smart OTA broadcasters. I believe program selecting should be "Ala Carte" Why pay for programming that no one watches, but is part of a package deal. Enough! Keep the Coax

Is there a reason that the AP is on the Staff VLAN? If it were me, I would put the AP on the default VLAN so it gets an IP 192.168.1.x like your PC. The port on the PC can be set to block all (access port) and the AP should be set as Allow All (Trunk) If you have WiFi networks on that are on different VLANs, (ie. guest WiFi, Staff WiFi, Default WiFi...) then you will need the AP to be in trunk mode so it can communicate all the VLANs to your connected devices. But the AP's local IP address (called the Native VLAN) would be best served on the default VLAN.

That is a good call out. I have heard that from other users as well. My UDM Pro is pretty quiet though...

I need to do a separate video on this. The short answer is no. Unifi isn't going to work like the Orbi, however, depending on the level of parental control, there are definately things you can do in Unifi to help with the parenting aspect. Personally, I use a device called Firewalla for my parental controls. There is no subscription and it is pretty easy to use once you learn the interface. I have a firewalla purple on my main VLAN where my kids devices are at and I can do all sorts of things to control them. (similar to circle but without the expensive subscription.) I plan on doing a parenting video very soon and will cover both Unifi and Firewalla.

@@ethernetblueprint Thanks for the reply! Yes, I saw the Firewalla in your network and thought you might be using it for parental controls. I'd be very interested in a video of how you layer the Firewalla on top of the UniFi. Thanks!

Wholeheartedly, agree, here! I’d much rather have a cable that is just sitting there and not used (not connected to a switch so I don’t need a larger switch) than wish I had more cables for that neat new toy that I find five years from now!

This is a very fair statement. I can't disagree. I think if there are areas that it would be impossible to get a cable to at a later date, then your advice would be the best route... But if you put in the tubing to be able to add cabling later, that could also be a solution.... This tip comes from me being in so many houses where the home owner got talked into pulling cabling EVERYWHERE and 85% of the time, most of it sat abandoned. However, it is fair to say that 100% depends on the person in the home. I appreciate you commenting and sharing your opinion. It gives the other viewers something to think about. Cheers!

@@ethernetblueprint Wholeheartedly agree about the tubing! That's probably my favorite of your tips. I wish I had the foresight to put tubes in when the house was being built rather than retrofitting 10 years later. When my house went up, CAT5 was hard to find and even CAT5e wasn't even in anyone's dreams yet. I now have CAT6 in most places but there are still a few rooms that I can't easily rewire. Too late for me, but your tips are GOLD for those who are/will be building! Thanks!

@@ethernetblueprint The tubing to the attic and demarcation is excellent advice, thank you for pushing that out!

This is a valid point. That is one way to do it sure. Simple and fast. It will create a single Isolate rule in the FW rules. (FW Rule it Creates) Isolate IPv4 Traffic From Selected Subnets To Any Local Subnet, Drop, LAN In, All, 192.168.X.0/24, Any, (4 Networks), Any, 60001 If you needed to allow other VLANs to communicate with your IOT network, you could simply add your "allow" rules above this rule and they should communicate. I simply wanted to point out how to make FW rules from scratch to accomplish to same thing so it helps people learn how the rules work.

@@ethernetblueprint Thanks!

This guys f*cks. Also, if you want to future proof for 10GB and above another way is to just run SM fiber and have converters on tap. I'm prepping to run Cat6a through my house but I'm only running it for some of my IoT devices that I want to run with POE. The rest of the connections will be SM fiber with a bunch of fiber-to-copper conversion boxes in storage. It costs a bit more and you have to be WAY more careful throwing fiber through walls but it pretty much gets rid of any future limitations on speed. I work with enterprise networks so this is overkill for 99.9% of people so I don't think anyone will ever do this besides me. Running fiber to specific spots in your home allow you to run more ethernet without having to run it back to your MDF. You're able to utilize smaller switches and if you're a nut like I am you can have failover to another main switch inside the house. Your attic plywood idea is one I've been wondering about for weeks now. Just closed on a house a month ago and had a water leak that dripped for days straight in the attic. Ceiling fell in. I got it fixed and literally the next day I almost fell through it. Thanks for the idea. I'm heading to Home Depot. lol As far as the video, my opinion on the amount of network drops is alittle different. Once you close those walls it becomes a hassle to run more copper. I'd just run extra copper to certain points in the house that I think I might need them and leave them there unterminated. If you don't use them then they're out of sight. If you need them you know where the extra is spooled at and instead of a 60ft run you now have a 16ft pull and some holes to drill.

Thanks for the reply. Everyone is a little different when it comes to their planning. If this video gets people thinking about it (even if it is different than what I suggest), then it did its job. Doing nothing is FAR WORSE than over planning. I appreciate you taking the time to make your suggestions. One thing, I will add is that Cat6 will do 10Gb up to 55M/165ft which most home pulls are under that distance (obviously the size of the home and location of the closet play a role in this) so you may not have to upgrade to 6A to get 10Gb networking. Every run in my home is under that distance with my head end in the basement... Not saying your idea is wrong or bad, but wanted to throw this out there. Love your permenant Fish string idea. So smart. Thanks for watching!

Thanks for weighing in. I don't think there is necessarily a right or wrong method. Everyone has different needs (take your SM fiber runs for example - you are right, that is overkill for most of us) Thanks for giving the viewers something to think about here.

@@YunqTab Lets say that if a person installs CAT6 (new residence or remodel) opposed to Fiber based on their current needs, the positive side of this is, if they did not staple in the CAT6 (inside the walls) it can become a future fish for a Fiber upgrade. The only location in my house where I believe a future Fiber cable will be needed is in the living room media center and yes I left a fish in the wall just in case. Although I currently have a 50' fiber that runs from my UI USW Pro 24 switch in the utility room to a hidden location in the house where the UNVR is located to handle recordings from my 12 UI outside cameras. This house was built in 1957 so the plaster walls made most of the CAT6 pulls a challenge. At 75 I would say that I do not have to worry about any future technology breakthroughs. Enjoy

@@ethernetblueprint I loved the video man. I’m going through planning myself right now and it gave me some insight. I develop enterprise networks all the time and I must say my home network is just as much as a hassle. LOL

Fixed was a bug on the mobile device trying to connect

Glad you were able to diagnose this issue! Good job!

Thank you for watching!

I bet it was. I also bet you were glad to have the drops afterwards!

@@ethernetblueprint yep, I’m pretty happy with them. Also added 2 lines for WAP’s so that has really helped.

WAPs are the best way to get internet (IMHO) - nice job!

I just wrote about this in a comment to someone else. I tell people that fiber is only for people who NEED the speed and have the pockets to match the speed. I'm running a few lines of SM to my office and to all of my TVs because I'm hosting a few PLEX servers, 4K encoders/decoders, and some mini PCs. Most device NICs aren't running over 1GB so it's a waste to run it to multiple areas as a just in case. If you have a fairly large house and you're expecting to hit the limits on CAT distance yes run a few strands. Expect to spend more money getting SFPs, converter boxes, and NICs capable of 2.5/10GB speeds.

Nice call out. Everyone will have an opinion on the best way to do it and none of them are wrong. The important thing is that people are planning and talking about it. It sucks to do after the walls are up!! As far as Cat7 and Fiber, I think they overkill for most everyone out there unless you are are like the commenter below (@YungTab) that has a plan and the equipment to utilize it. You can run standard Cat6 and get 10Gb speeds in your home. If you have cable distances that will be over 165ft (most homes don't), then run Cat6A to those locations which can do 10Gb speeds up to 330ft. A safe bet would be to spend a little more and just run Cat6A everywhere to cover your bases. It is a bigger cable though and can be tougher to work with. For Cat7 and Fiber, I just don't see the benefit to spend the extra money for "most users", unless you have a specific need for it) That is just my opinion though.

I don't have experience with UK gear. Sorry you had a bad experience.

Great add. Thanks for watching!

Thanks for the reply. 1) The FW rules and the switch port tagging work together to allow or block access. By setting the "block all" setting at the port level, you ensure that the device connected can only communicate on that network. Trunk ports really only come into play with VMWare like servers, switch to switch communication, AP communication... any device that hands out and communicates on multiple VLANs while plugged into a single port. Most of your devices (PCs, IOT Devices, Printers) should be set to Block all and just communicate on the single network. Your Synology may be an exception to this if you have it communicating on different VLANs at the same time. Then leaving it on the allow all port would be best. 2) It is really up to the user. Pros and Cons to both. If you block everything and choose to just allow the ports that need open, if you add a technology into the home (plex server for example), you would have to go open those ports for it to work. If you allow most ports to be open, but just block access to the local device on ssh, https and http, then it can make it easier to add other technologies down the road (IMO) 3) DNS can be tricky. I have my synology on my IOT VLAN and sometimes my PC will get to my files by DNS name and other times not. I don't think is a FW rule that is stopping it. I think it is the fact that Unifi DNS isn't the best. You may be better served to use an outside DNS to avoid some of the finicky issues like this... Its kind of trial and error. Sorry I can't give you a better answer. Hope this helps!

I love it for a home. Powerful, versitile and can do storage for Unifi Protect. Great unit. I wish it was an option when I created that video. I haven't gotten to play with one yet, but from what I have seen, it will run what you listed there just fine...Even with faster than 1 Gig internet. I plan on doing a video on it soon, but need to buy one first.

Good question. You can migrate your data and devices to any new UDM product that you buy. I created this video to show how it’s done. Seamless Migration from Cloud Key to UDM Pro ruclips.net/video/fTeOS8WXJR8/видео.html When I created this video, the protect cloud archiving wasn’t available from UniFi so if you want to keep your camera recordings, you may need to look into that some.

@@ethernetblueprint great watch that thanks seems easy. I wonder why they don't have VDSL ports on any router. How would you compare these to draytek vigors like the 3910/3912 for some businesses 50-500 employees. Thanks

I can't say. I have heard of that tech, but don't know much about them. That isn't a typical brand we see here in the US. (in the midwest at least)

I appreciate the suggestion. I personally have never used any layer 3 routing so I’d have to do my homework on that one. I have had that suggestion before too so I may need to look into that.

I’m so glad to hear that. I love helping others. Best of luck with your move from Eero.

You can definitely use In-walls, yes. I love that type of AP. I would say that “in general” their coverage isn’t quite as good so you may need a couple more of them. You lose some of your signal towards the wall behind the AP. However, the layout of the home usually drives coverage.

Email me at tim@ethernetblueprint.com. I ran a business doing that very thing and I’d be happy to share my experience with you.

Is the AP connected to the IOT VLAN on the switch?

You are so welcome. I hope it helped.

I’m so happy to do it. Thank you for watching.

Well, LAN out Rules can be used for VLANs too but would be setup differently than these to achieve the results you’re looking for. WAN Rules are for allowing or blocking access from the internet. Then there are the IPv6 rules (the ones we were setting are IPv4) which are a different type of IP addressing. That may require its own video to explain that.

I like a mgmt VLAN. I use one in my home but that is difficult to explain to super newbies and didn’t want to complicate things. I give my mgmt VLAN the same access as my Default network for the most part.

@@ethernetblueprint That's what I ended up doing. Thanks very much for this guide - it helped me understand the actual theory.

You are welcome! Thanks for watching. I am glad it helped.

I do see your point. We did set up protect on our UDM which is the NVR. Sorry for any confusion.

I hope you found it helpful.

I am fully up to date and I have not experienced this at all.

Thanks for watching and for the compliment. I’m happy to share.

Email me at tim@ethernetblueprint.com. I usually respond pretty quickly.

Hey, that’s great. Congrats. Glad I could help. Thanks for watching.

Can you send me an email? Might be hard to answer all this in the comments… tim@ethernetblueprint.com

I want to make sure we are talking about the same things. You’d like clarification on the UniFi Controller itself and the apps that can be installed on a controller (ie. Protect, Network, Talk…) is that correct?

@@ethernetblueprint Yes, u r right.

I will see what I can do.

Wow. Thanks a lot. That is super kind of you. Appreciate you watching.

Thanks so much. Appreciate you watching.

(Sorry for the delay) Yes. The UDM SE has an 8 port managed Poe switch. So yes. That would work great without having to buy and additional switch.

Glad you like it! Cheers!!

It truly is my pleasure. Thanks for watching.

@@ethernetblueprinthow do i contact you directly pls

You can email me at tim@ethernetblueprint.com

No...It just needs to have internet access. So yes, you can look on your way home (just be careful while driving) ;)

Remote viewing works and it uses a reduced bitrate unless you switch it to HQ for the live view

By the way, great series so far.

I did not know that. Thanks for sharing. I don't have any tablets in the home - never liked using them much. I appreciate you letting the viewers know.

And thank you for watching!

Great. That is what we are shooting for here. Thank your for watching!

It has been my pleasure. This series was a lot of work but I enjoyed making it. On the down side, Unifi has released new products after many of these videos were created so they may be missing some of the newer devices, but that is how it goes I guess. Let me know if you ever have questions. I am here to help!

A couple of things here.... So the Cloud Gateway max may not be the right router/gateway for you. I would maybe just look at the cloud gateway ultra and then adding the cloudkey+ to that for Unifi protect part. The reason I say that is because the Max offers storage for cameras (just not much at the moment - Up to 2Gb by August 2, 2024) and 2.5Gb networking... However, with setup you mentioned, you won't be taking advantange of any of that so the router may be overkill. The switches you listed are 1Gb switches... So, from a router standpoint, I would maybe look at the Gateway Ultra ($129) which will handle all your network needs and then add the CK+ for your camera needs. Secondly, I don't think you have enough POE with the devices you list out here. The 8 Port Lite only has 4 ports that delivery POE+ and you list out 6 devices that require it (7 if you drop the ASUS and get another AP)... The Flex mini doesn't have any POE so it won't be able to power the devices.... You may need to look at the 8 port Ultra 60W switch ($159) to ensure you can power all of your devices. As far as your ASUS router, you may be able to use it if it has an AP mode, however, you will lose visibility (in Unifi) of the devices connected to it and would need 2 seperate systems to manage your devices. Personally, I don't know if I would do that. Thats my 2 cents... Hope it helps!

@@ethernetblueprint thank you so much for the reply. I will take a look into the equipment you mentioned. Have a great day.