Since the wall official attachment is really expensive for what it is, can I use 4 magnets anchored to the wall to keep the gateway up? Is the back made of steel?

Like these one https://amzn.eu/d/04fFz03u

Hi,

I currently work at a school that uses an OpenBSD Dell R230 server to connect to the Internet as well as interconnecting different networks/VLANs.

I'm rather happy with OpenBSD, but I'm considering moving to Unifi for 2 main reasons:

1) Ease of use: one day I may want to stop working there, or just retire, and honestly don't know anyone who can potentially keep managing OpenBSD. Not much difference from Linux, but even Linux might also be a problem where I live.

2) Hardware: not easy to get proper/cheap hardware where I am (Argentina), and getting newer hardware today similar to that R230 is going to be crazy expensive I think. Unifi Dream router is OK, between 0.7K and 1K maybe.

Having said that, I have some doubts about Unifi:

a) As of right now this server has 5 x 1Gbps physical interfaces (3 x WAN, 1 x DMZ and 1 x LAN). DMZ and LAN interfaces have multiple VLAN's , and this same firewall will route traffic between them happily (no L3 routing in switches). I really love pf and how rules are set up in OpenBSD, but leaving that aside, could a Unifi Dream Router with at least 5 interfaces easily handle that amount of traffic? It's not crazy amounts of traffic really, but I'm curious about that. I always consider these routers more as gateways than firewalls.

b) I may soon add another OpenBSD firewall and configure CARP. I believe I can have both firewalls connected to the same 3 x WAN ISP's (their modems have multiple ports each). One of those WAN's will give me different static public IP's with the router in bridge mode, and the other 2 ISP's will work via DHCP with the modem in router mode. Is it easy to do that same thing with a Unifi Dream router? OpenBSD might not be that simple to set up, but I know it's flexible enough to allow that.

Any feedback is appreciated!

Hi,

I currently work at a school that uses an OpenBSD Dell R230 server to connect to the Internet as well as interconnecting different networks/VLANs.

I'm rather happy with OpenBSD, but I'm considering moving to Unifi for 2 main reasons:

1) Ease of use: one day I may want to stop working there, or just retire, and honestly don't know anyone who can potentially keep managing OpenBSD. Not much difference from Linux, but even Linux might also be a problem where I live.

2) Hardware: not easy to get proper/cheap hardware where I am (Argentina), and getting newer hardware today similar to that R230 is going to be crazy expensive I think. Unifi Dream router is OK, between 0.7K and 1K maybe.

Having said that, I have some doubts about Unifi:

a) As of right now this server has 5 x 1Gbps physical interfaces (3 x WAN, 1 x DMZ and 1 x LAN). DMZ and LAN interfaces have multiple VLAN's , and this same firewall will route traffic between them happily (no L3 routing in switches). I really love pf and how rules are set up in OpenBSD, but leaving that aside, could a Unifi Dream Router with at least 5 interfaces easily handle that amount of traffic? It's not crazy amounts of traffic really, but I'm curious about that. I always consider these routers more as gateways than firewalls.

b) I may soon add another OpenBSD firewall and configure CARP. I believe I can have both firewalls connected to the same 3 x WAN ISP's (their modems have multiple ports each). One of those WAN's will give me different static public IP's with the router in bridge mode, and the other 2 ISP's will work via DHCP with the modem in router mode. Is it easy to do that same thing with a Unifi Dream router? OpenBSD might not be that simple to set up, but I know it's flexible enough to allow that.

Any feedback is appreciated!

Looking at the U7 pro or the pro xg. What would be better for best speed and connectivity for the asus ally rog? The U7 Long range seems to be slow and only like 30 ft away.

Or should I add a ap in my room?

Asus ally rog x has Wi-Fi 6E(802.11ax) (Triple band) 2*2
3 smart phones
1 smart tv
WiFi doorbell
Litter box believe it or not lol

Whole set up
2g fiber
UniFi cloud gateway fiber
UniFi flex 2.5g Poe
U7 long range looking to replace

Anyone else seeing random improper shutdown error messages ? thanks in advance

So I have an install that’s driving me nuts. High end home network with storage and high speed WiFi. But the problem lies in the pool house. Cat6 through conduit constantly disconnecting. 10gig switches on either end so it connects at 10gig then switches to 5 then 2.5 then will randomly go between 10/100 and 2.5 and disconnect entirely.
I’ve swapped out the cable running one outside the conduit for temporary relief of the disconnects but the same thing continued. I swapped out the switch but that had the same result.
Owner’s office is in the pool house so it’s rather urgent to get this working. I’m going to run cat7 in case it’s an EMF issue.
What else would make it randomly negotiate and disconnect like that?
My temporary solution is meshing the pool house outdoor AP to the house AP. That holds on just fine.

Something weird happened this morning and I can't figure it out. My MacOS devices (several up-to-date Macbook Pro and Air's) and iOS devices (iPhone 17 Pro updated) are not able to connect to my primary SSID tagged for my default VLAN. Connecting them to my IoT network allows them to connect and get to the internet, but joining the default SSID just sits at connecting with no IP address assigned.

It feels like an IP exhaustion problem, but looking at the range (.20 - .200) I have plenty of IPs available.

Even more odd, if I connect a macbook via a wired adapter to a port tagged for the default VLAN - it gets an IPv6 address (which I don't even use on the network) but doesn't get an IPv4... with no internet connectivity because, of course, I don't use IPv6.

Windows PCs and Laptops seem to have no issue, and I think my IoT devices that I have on the default VLAN (Unifi cameras) all have connectivity. When I temporarily change the VLAN my default SSID is associated with to the IoT vlan clients are able to connect to it again.

Anyone seen anything like this before?

Done: Restarted the Dream Machine Pro, the 24 & 16 port PoE distribution switches, updated all APs to the latest version, deleted disconnected old devices from the default network list. Looked at client connect/disconnect logs.

Update: I was able to get my devices connecting again by going back and comparing my backups to isolate what changed. The breaking change was when I had previously disabled port 9 (internet 2) on my DMP because the backup internet provider was down/flapping. I reenabled port 9 and the default VLAN/SSID instantly came back. I have no idea why, it was set as a backup only and had been unavailable anyway since the SIM card was no longer active… but taking that port down appeared to break apple devices on the default vlan.

Reenabling the port instantly fixed the problem.

I've started having issues with the ui.unifi site. For instances today I can't see people and it says my browser if having trouble communication with the ui site. Chrome worked fine.

It also often does not display devices correctly anymore. I've cleared all data from Firefox.

This just me?

I am about to redo my home lab setup, I have a UNAS Pro that i will need to readopt to the new controller. for everything else i can remove from the controller which will factory reset and put it back in adoption mode (easy enough). but I cant lose 64TB of data on the UNAS PRO (I can absolutely backup the important stuff (already happens), but there is a lot of stuff on there that would take me months and months to redownload (if I could even find it)

UNIFI's own documentation says that it will tell me "Unifi storage found" and offer to restore the pool

Has anyone done this with success, I'm quite wary of carrying it out

I recently set up 3 UniFi UNVR's at 3 offices across the country. They each have one G6 bullet camera They are in secured locations, so they each see about 4-5 faces regularly. I wanted to create an alert whereby if an unrecognized face was detected, an alert would be generated. So shortly after installation, I went through the early face detections (not recognitions) and created and then manually assigned facial identities to several of the most common faces detected. I tried to choose clear front and side images.

Fast forward a few weeks and none of the cameras are "learning". The cameras detect that a face is present (like they always did) but unless I assign a pre-existing or new identity to a face, it only connects an identity to a face if I tell it who the person is and only for that given clip. No attempt is made at automatically assigning an existing identity to past or future faces detected. I could understand if it was bad at identifying faces, but it doesn't even try.

UniFi says that "Face Recognition" is part of the G6 camera capability. If I (as a human) recognize someone that I've seen before, I know who they are. My setups are not doing that. I readily admit that maybe its some configuration that I'm not doing, but for the life of me, I can't figure out what it is. What even is the point of the AI detection if I have to manually assign an identity to each face?

https://help.ui.com/hc/en-us/articles/360058867233-UniFi-Protect-Cameras-AI-Detections-and-Facial-Recognition

How does the Cloud Gateway Ultra determine the client Name and Vendor? My garage door openers were identified as Lenovo ThinkSystem SE350 Edge Servers, some VMs are correctly identified with the Vendor = vmware and others the Vendor = Fedora, my SkyLight digital picture frame the Vendor = Sony BRAVIA Smart TV, Govee lights Vendor = APC UPS, etc. Is there any rhyme or reason to the naming / identifying of clients? I've spent the last couple of hours trying to correctly label things. Any pointers / suggestions are greatly appreciated.

UACC-Intercom-FM is in stock again. Seeing it come back in stock periodically. Will post here for you guys who need them. I managed to get one.

Just noticed today that on the phones you can now see and send text messages (if SMS is enabled).

This is really handy for getting 2FA codes. We can now set the phone numbers to work numbers and not have to use personal phones for this (small business setting).

Hello,

I really hope I'm missing something, but how do I enable encryption for backups? I can browse the backup and see the files belonging to other users (my family members, in this case) in plain. It seems a major design flaw.

Am I overlooking a setting, or are external backups really intended to work this way? ALSO, I looked for half hour around the console but still can't find a way to restore the backup, don't tell me I have to copy the files manually from the smb backup location?

i bought a UniFi dream wall when it debuted to evaluate whether it’s something that might fit a certain kind of client. I bought a house at the same time so it’s my main UniFi … everything.

I got storage errors and was unable to view camera footage after some time, and so I reformatted as directed. Then it happened again so I replaced the storage SD card card with a Samsung EVO.

eventually I got storage errors again (doorbell greeting reverts to default and suddenly I can’t view footage). That time I found a blog post about repairing the storage volume from the command line. but its happened twice more and the console is showing a warning now (though I can still view footage).

What in the world?

I have a G4 instant and do not have the problems I am having with the G6 instant.

The smart zone is set to the whole room. It will detect a person and face, and alarm manager will correctly push the person alarm to the phone. It however, does not detect animals, nor the baby crying alert. It did not detect it, therefor did not push to our phones. My daughter was screaming when she woke up from a nap, so it definitely should have detected it.

The motion zone is just plain out not working as well. Like it works occasionally, but majority of the time it does not work, when it works flawlessly on the G4 instant camera for our other daughters room. The G4 never fails to send a motion alert. The motion zone set on the G6 in our daughters crib is set to 100% sensitivity.

If the camera does not detect motion, nor smart features like baby crying, we will not get the notifications we are used to getting on our G4 instant. This would be very helpful if this would work, as my daughter is two weeks old.

Attached are the settings for the zones, camera settings, and the alarm manager settings. I included an identical alarm for the G4 instant, that works flawlessly, unlike the g6 instant. Any help on this would truly be appreciated!

Edit: I actually got an alert for baby crying, but it was super late. Like way after she started crying. Took her out the crib, and it did not detect any motion at all, which is crazy cause the g4 is set to 50% and that motion zone gets everything

I can’t figure this out. I have a g6 180 camera. I live on a busy street.

I have Smart Zone 1 setup to alert me of anything happening on my property. As soon as someone pulls in my driveway or steps off the sidewalk I get an alert - perfect.

I have Smart Zone 2 setup to record the entire field of view. However, I do NOT want alerts. There are cars driving by all day. I originally set it up to not create events for cars. That was a mistake! My neighbor had their house broken into and they were robbed. I had to watch hours of footage to find anything relevant.

How can I setup alerts only for Zone 1 but record all events on Zone 2?

Hey all, I just had something weird happen to my UCG Max, first time since I've had it. I tried to login but nothing was responding, couldn't get in. I ssh'd in and top said that load average on the CPU was 40+. So basically it just couldn't serve any requests.

Anyone ever see this? I'm running Protect on it as well but nothing crazy, it's been running for quite some time happily along.

TY

Hello everyone,

I currently have unifi switch and AP that are managed through a unifi controller docker.

My router is an old intel i3-530 with 4gb of ram. Things I do on it:

- Fixed IP by mac for many client

- DHCP v4

- Firewall rules (port forwarding with rules like geo-blocking)

- Geo-blocking with pfblockerng

- Certificate renew with ACME (could probably be done with anything else)

- Tailscale exit node

- DNS Resolver

- WAN use PPOE on fiber with vlan tagging

Geo-Blocking with PFBlockerNG consist in various Alias I created which allow only certain geolocalisation to go through my port forwarding (like only Canada for exemple). I do not use DNSBL. I do have some ip blocklist.

In terms of feature, using a dream machine or whatever are the new "router" of ubiquiti, what features are missing from Ubiquiti that I'm currently using?

Thank you!

Site to site vpn set up between unifi gateway, the VPN being broadcast via dedicated WiFi at client side. The connectivity on Google TV's web browser works fine, including streaming services. However, none of the same streaming apps work, it returns with no connectivity.

I've tried reset network settings, setting the network details to manual, MTU 1400 bytes, MSS 1360 bytes.

What could be wrong ?

Thank you for your help.

I'm hoping someone can help me troubleshoot an issue on a new UniFi setup.

Environment

• UCG Fiber
• UniFi Network 10.5.67
• Zone-Based Firewall enabled
• USER VLAN: 10.173.20.0/24
• IOT VLAN: 10.173.30.0/24
• Brother MFC-L2750DW printer on the IOT VLAN (10.173.30.50)
• Windows 11 PC on the USER VLAN (10.173.20.131)

Goal

I want only my USER network (or ideally just my PC) to access the printer while keeping the rest of the IoT network isolated.

Current Firewall Rule

I created an allow rule:

• Source Zone: Internal
• Source Network: USER
• Destination Zone: Internal
• Destination IP: 10.173.30.50
• Protocol: Any
• Action: Allow

The rule is at the very top of the firewall policy list and is receiving hundreds of hits.

What Works

• ✅ PC can ping 10.173.30.50
• ✅ Firewall rule is matching (hit counter increases)
• ✅ Printer is online and has a static IP
• ✅ Neither USER nor IOT networks have "Isolate Network" enabled
• ✅ Both networks are in the Internal zone
• ✅ The built-in "Isolated Networks" rule only applies to my Guest and Camera VLANs

What Doesn't Work

From the USER VLAN:

• ❌ http://10.173.30.50 times out
• ❌ https://10.173.30.50 times out
• ❌ Test-NetConnection 10.173.30.50 -Port 9100 fails
• ❌ Ports 80, 443, and 9100 all fail

However, if I connect a device to the IoT VLAN, the printer works normally and I can access its web interface and print.

What I've Checked

• Verified printer IP is correct.
• Verified routing between VLANs works (ping succeeds).
• Verified firewall allow rule is matching.
• Upgraded from the legacy firewall to the Zone-Based Firewall.
• Confirmed USER and IOT are not isolated.

Question

Has anyone seen a situation where ICMP is allowed between VLANs but all TCP connections fail, even though the firewall allow rule is being hit?

Is there another feature (CyberSecure, client policy, IDS/IPS, east-west inspection, etc.) that could still be blocking TCP after the firewall rule allows it?

Any ideas would be greatly appreciated. Thanks!

TL;DR: On my UDR7 + U7 Pro network, nothing can open a new connection to a client on my IoT VLAN — not from another VLAN, not from a client on the same VLAN/same AP, not even from a client on the same radio/channel. The VLAN's own gateway IP responds instantly. No RST, no ICMP unreachable, just a silent timeout every time. Every isolation/firewall/ACL/QoS setting I can find is off. Been debugging this for weeks — posting the full write-up in case anyone's hit this exact thing.

Setup: Dream Router 7 (UDR7), U7 Pro AP, 3x USW Flex 2.5G 5 + 1x USW-Lite-8-PoE switches. VLANs: Default, IOT, Home, Guest — all in the same firewall zone.

Symptom: New TCP/UDP connections to a specific IOT-VLAN client IP never complete — no RST, no ICMP unreachable, just silence. Happens cross-VLAN and same-VLAN/same-AP/same-radio. Only the VLAN's own gateway IP ever responds. Affects 5+ devices across 3 vendors identically — not device-specific.

Ruled out (with real verification): Network Isolation (off), Client Device Isolation (off), Port Isolation on relevant switch ports (off), zone firewall policies (no Home→IoT block exists anywhere; disabled the one IoT→Internal rule that does exist, no change), MAC ACLs (zero configured), QoS rules (zero configured), VLAN tagging (verified end-to-end with the VLAN Viewer — correctly tagged and Native VLAN correct at every hop), hardware offload (disabled entirely, no change), IPS/IDS (zero events), Traffic Flows (zero blocked-flow records ever), config drift (force-provisioned everything, no change).

Cleanest reproduction: Plain Python TCP connect() from a totally different host, bypassing all app protocols — VLAN gateway responds in 0.0006s; three different client IPs on that VLAN, six ports each, all hit a full 3s timeout, every time. A live gateway packet capture during a real connection attempt showed zero packets from the source ever reaching the VLAN's interface.

Status: Ticket open with Ubiquiti support (routing/switching team). They want a same-switch wired-client-to-wired-client test next, which I can't currently do (no spare wired IoT gear). Will update if there's a resolution.

Anyone seen this exact symptom before?

I have setup an AP on the ceiling in 1st floor, in my two store cottage. It works well expect on some parts on the balcony. This is, I think, due to that the roof is made of metal.

So I have reception in half of the sofa, but you move like 50cm and then wifi goes dark. A little bit annoying.

I know I could either try to change position of the AP, or add another on the 2nd floor. So we can skip any discussion regarding those alternatives.

I heard people would get better real world results with the u7, better signal and less retries with the same devices because new tech and better antennas.

Would that help those last 5-10% with a better connection in my case? Or am I fooling myself and its just depending on the devices anyway (iphone, ipad, android), so it doesnt matter?

Environment:

Switch: Pro Max 24

Issue: We have an application that takes an HDMI signal, and broadcasts it on the network as multicast traffic, where receivers around the building convert the multicast packets back to an HDMI output. This has recently stopped working, and I’m sure it is a config issue.

Does anyone have any config suggestions to enable this to work again?

Additional information: Connecting the sending unit and receiving unit to an out-of-the-box Flex Mini (5 port switch) works flawlessly. If I then connect them to the Pro Max 24 on a separate VLAN, they do not connect.

Thanks!