Видео

In my country they would ignore your stuff even if connection points were there easily and you told them to use them...

Great job! A quick question though, where is the udm pro in the network, like is it the house router or cloud key gen 2? And how to access the udm pro? I understood the configuration part, just wanted to know the exact flow on how the camera is accessed like from the house router to the camera?

33:00, you set 80 MHz but your AP use channels in the same 80MHz channel block actually causing interferences, that is why you rarely use 80 MHz, there is only 1 80 MHz non DFS block allowed to use in Europe and only 5 with DFS.

"Simple"

Hi, thank you so much for this series! I’m trying to follow this one now, but it seems like UniFi has made some changes to the interface. When creating the firewall rules “Source Type” no longer has a “Port/IP Group” option, only “Object”, “Network” or “IP Address” now. Also, instead of “Create Port/IP Group”, now there is “Create Object”...but that pop up menu doesn't have the option to select Port Group, IPv4 Address/Subnet, or IPv6 Address/Subnet. I’m not sure how to proceed…? Thanks in advance!

Great video! Your instruction style is just what my brain needs for this sort of stuff. I would love if you could circle back to this, demonstrating the new zone-based firewall setup released in version 9.

If only the pricing was more competitive for AU, we are forced to pay a minimum of $450aud for a viewport. Another way that you forgot to mention is the protect app is available on most named brand TVs and is a much cheaper option compared to the 2 options you have given.

I am currently in the process of network design phase of our new house. Just about everthing you mentioned in your video I have implemented. On my design I use different color cat cables for phone, ap, cameras and wired network and poe use. This helps the installer at the end of the project to properly wire the network rack up.

First, thank you for this instructional guide! My home network, in fact, now uses a Ubiquiti router, Firewalla firewall, and a Ubiquiti switch and AP. There is one feature, however, for which I could use some advice. Background. I spend quite a bit of time doing volunteer work at a local K-12 school. And a few years ago, I discovered the school's old Sonicwall firewall had died without warning (who knows how long ago). Wanting to correct the problem asap, I borrowed a Firewalla Gold firewall I had recently purchased for home use and pressed it into service. The good news is that I quickly fell in love with Firewalla's wide range of content filters. They allowed me to quickly build a series of easy-to-understand rules that applied to everyone (e.g., no porn), as well as create graduated levels of access (e.g., lots of restrictions for our youngest students, a few added privileges for our high school students (RUclips), and even more access to our teachers). One notable limitation, however, is Firewalla's reliance (imho) on individual devices or groups of devices to set rules. While not a show-stopper, this limitation does open up a few small cracks in our defenses as teachers are encouraged to borrow from a stack of spare laptops if the one assigned to a child develops any issues. I had hoped Firewalla's new User Profile Rules would eliminate this dependency, but it appears it is simply another way to group individual devices specified in advance under a single rule. So, my question. Is there a way to tie a Firewalla rule to a username created and enforced by a domain controller (Active Directory running on a Windows 2021 Server in this case). This would allow the same set of rules to be enforced no matter which device the student might use. Thanks in advance.

I’ve only watched 5 mins 30 secs but just wanted to let you know that I needed this last week when I tried to transition from ISP modem (plus digital voice), to ISP modem (plus DV) + Unifi hardware. I got it all wrong and failed. I have a good feeling I needed this video! So glad YT put it up as a suggested to watch tutorial! Edit: oh I was hoping you would keep the old modem/router in the hardware setup, but you assigned it as a bridge. I don’t have that option with my modem because it has DV and not option to set as a bridge.

Thank you for these videos! Quick question. How would I be able to see my reolink cameras on the reolink app if the camera network is on a VLAN and I am out of the house?

Hey Tim, I love your Tutorials and I have used your firewall/VLans your way...love it!!!! Will you make a video similar to the New Zone-Based Firewall? Should we just change to Zone based firewall and how to adjust accordingly or should we start all over? ;) Love to hear your input ;)

As I can understand this is something like L7 Filtering. Isn't it recourse intensive for such a device ? What's the bandwidth after filtering is applied ? What if somebody uses a VPN inside the network to reach to restricted content ?

From Cyberpower support: Any UPS with an expansion slot for a network card are all compatible with RMCard, RCCard, and RWCard.

One note on the PiHole DNS portion for anyone dealing with the same issues as me where devices in other VLANs could not connect to the PiHole even though you had all your firewall rules set properly. My Pihole was configure to Allow only local requests (on admin/settings.php?tab=dns). I couldn't get devices on other VLANs to use the PiHole and it was driving me crazy. Once I changed it to "Permit all origins", everything started working. Amazin video BTW. There are so many other videos that are very short and do not explain things as well as you did. Taking the time and even providing the PDF was awesome. Thank you!!!

I'm upgrading from a UCK Gen2 Plus, just like your video, but in my case, the UDM Pro Max updated to 4.1.13, but my UCK is at 4.1.11. Would I run into any issues because of the OS version difference??

Great video. Still can’t believe you use a keystone and patch cable on AP installation where I usually just direct rj45 it. And not do a keystone patch panel on the rack 😂 great video nonetheless and looking forward to the next one.

Just ordered a UDM-Pro and other equipment to upgrade my network. It will be here tomorrow!

I did this exact thing

Hi! Absolutely love this series! So, I think I fall into the category your briefly talked about at the end. I have a Reolink NVR with 4 POE cameras. Are you saying that I should make rules 5 and 6 for my camera network for my situation?

Definitely the best video to understand VLANs and set up your Dream Machine ... Thanks so much !!!!🤩

I just migrated from G2 plus to udm pro max and swapped the drive over. All the recordings are still there on new pro max.

Cloud Gateway Max vs Dream Router

Thanks for the video, I've been on the fence for a bit on getting one. Im currently using 2x eero pro6e's but had been interested in going with Ubiquiti APs. The docker addition seems really neat.

Again, very helpful videos. Question regarding my cable modem with static non-changeable IP of 192.168.100.1... My networks in include these VLANs with profiles and firewall rules per video 6: Default 192.168.1.1 (desktop, laptops, NASs, misc network equipment, i.e., access points and switches) IoT Network 192.168.20.1 (smart devices, sprinkler controller, printers, light switches, etc.) Guest Network 192.168.99.1 What is normal practice regarding a cable modem with fixed IP address... 1) do nothing, leave as is, or 2) create a network with VLAN ID of 100 for 192.168.100.1? And then create firewall rules for the VLAN 100 that are similar the IoT rules? 3) other... Thanks

Unifi says you can use your lidar equipped phone to scan and upload a floor plan but doesn’t explain how. Do you have any insight into that?

The key that you can use to detach the AP also works to remove the HD sled on the Cloud Gateway Max, FYI. My gateway max didn't come with a key.

Extremely satisfied with this setup. Everything works great and looks great! Thanks again!

So i am able to use this as NVR for Hikvision?

hope you dont get any voltage issues using those ez rj45's. ez's have been known to sometimes touch ends when terminated. some of the bigger equipment guys WONT warranty products if ez's are used and the gear gets fried in a POE situation. but to each his own...

Screw Tesla and Elon. Many much better EVs

Hi Tim, have learnt a lot from this series…just wondering if you are going to do an update to this series with the new zone based firewall configuration?? Cheers fella 👍

If you are going to tell people to run cable or conduit that penetrates an exterior wall then you need to warn/inform them about drip loops, grounding, fire code and rodents. You shouldn't just run the wire without understanding what your doing.

Newest version 4.1.13

Great video. Saved me a lot of time looking up to learn what the various tech jargon meant. I'm a network engineer but I don't deal specifically with wireless networks so I had to bone up the technologies. We are moving from an city apartment to a house and I'm going from my old Google wifi setup, which works fine in an apartment, to a Unifi environment in the house. This video was super helpful in explaining the differences in the varying levels of APs.

I want this one... but first i need a house...

Thank you for the information, very informative. Currently have the Dream Machine SE but the Controller part of the router does not appear to be the same as it looks in the video. Is there additional software or configuration so it appears more user friendly such as the one in the video?

For the Firewalla Gold Plus you need to tether two of the 2.5gb ports together thru link aggregation to achieve 5gb speeds. It has four 2.5 ports. This isn’t a big deal but it then requires a switch to then share out the connection. The Pro would relieve the need for the switch.

Thank you so much. I really appreciate the work you put into the careful and clear description.

Home network? Sure, all you have to do is skip a couple of dinner-dates a year and love power and simplicity, but for a small office the costs are minimal and amount to little compared to other costs like rent, software, server hardware. Home options are fairly cheap in the $200 range, small office in the $1,000 range.

Any plans on releasing a new video with zone-based firewall rules?

Ok, now show us a solution for not drilling on already made houses!

I'm also wondering, in the bridge mode you suggested, what happens to the firewall rules already applied on the UDM? Do we keep them, change them, get rid of them?

Using a patch panel is not about a cable going bad we have cables 20+ years old with no issie. Its about neatness and ease of changing things around while keeping a nice neat loook

Thanks for the videos...very helpful. Printer/vlan question.... Our network is comprised of a uxg pro, about six switches, seven access points, two synology nas (unifi network application in a synology container), smart tvs and wall switches, door locks, printers, laptops, etc. Currently has three vlans: default, iot, and guest. Currently the default has laptops, printers, smart phones, and nas'. IoT has tvs, wall switches and other similar devices. Should the printers be on their own vlans, or okay to be on the default network? Thanks

This is great protection device for sure, but how can we keep this protection when the kids are outside the home network?

Thanks for the info, can you recommend more in depth reading for us if we want to know more? I do enjoy your channel. I hope to get a small business and home install and support business going again.

Great Video...just what I need. I will have to go back to video one and what the whole series...Keep up the great work....LIKEd and Subbed.

This is excellent content, was wondering if you plan on doing a follow-up now that UniFi Network 9 Zone-Based Firewall upgrade is available? I'm curious how your configuration will migrate using the Zone-Based approach.

Great video - Love the content. I totally would've had a patch panel in the rack and terminated to that though. Personal preference I suppose but it's cleaner and would save a U of space in the rack. I also wouldn't bother with a power strip if you are going to have a UPS. The UPS will have outlets available and avoids another wasted U of space. Unifi is the only way to go after having used it now. Of course the cable or telco installer did the fastest way, you have to be there when they install to "help" them make the right choices, but it should be easy enough to remedy if you want to (it probably is just aesthetic though).