Ubiquiti

[bmwmike]

I have a couple of unifi devices after generally good reviews here and elsewhere. Personally i've been on the fence about them, having had a few noddy issues that were largely down to bugs.

That said, a couple of devices in and i'd been considering a UDM Pro to replace my BT FTTP router. But, turns out it requires a Ubiquiti account "cloud" connection to setup? That kills it for me, especially considering their apparent fibbing about the extent of the breach:

https://krebsonsecurity.com/2021/03/whistleblower-...

Is it true the UDM and UDM Pro require a cloud account, can anyone confirm? I am still within the amazon return time for the switch i just bought.

Thanks

[megaphone]

I believe once you have set them up with a UI account you can then switch on local access.

I just set-up a Unifi controller on a Raspberry Pi, can't really see the point of a Dream Machine unless you really want a nice pretty all-in-one. I'd rather use the separate switches and APs.

Also you cannot replace you BT router as it doesn't have a 'modem' mode. The white BT Openreach modems will work, plenty on ebay for £10.

Edited by megaphone on Wednesday 31st March 10:26

[bmwmike]

megaphone said:

I believe once you have set them up with a UI account you can then switch on local access.

I just set-up a Unifi controller on a Raspberry Pi, can't really see the point of a Dream Machine unless you really want a nice pretty all-in-one. I'd rather use the separate switches and APs.

Yeah thinking the same, i just liked the idea of ditching the BT router, because I prefer not to use any ISP supplied equipment. That said, i've had far more silly issues with the unifi stuff than the BT stuff, and according to that article by Krebs the BT gear is probably more trustworthy.

[megaphone]

Also you cannot replace you BT router as it doesn't have a 'modem' mode. The white BT Openreach modems will work, plenty on ebay for £10.

[markiii]

to replace the internet side consider an Openreach DSL NTE and PFsense as the frewall

[bmwmike]

megaphone said:

Also you cannot replace you BT router as it doesn't have a 'modem' mode. The white BT Openreach modems will work, plenty on ebay for £10.

I've got FTTP, so the white box stays, but the BT router can easily be replaced. Its just a router with a WAN port afaik.

[megaphone]

bmwmike said:

megaphone said:

Also you cannot replace you BT router as it doesn't have a 'modem' mode. The white BT Openreach modems will work, plenty on ebay for £10.

I've got FTTP, so the white box stays, but the BT router can easily be replaced. Its just a router with a WAN port afaik.

Sorry, didn't see you had FTTP, then personally I'd get a USG and run the controller on a Pi. USG is a bit long in the tooth, I expect it will be replaced soonish, again plenty on ebay if you don't mind used.

That's of course if you want to keep everything in the same Unifi ecosystem, if not you could go with a different router. As above PFsense, Draytek are good, or even an Edgerouter.

Edited by megaphone on Wednesday 31st March 10:35

[bmwmike]

Thanks. I doubt i'll buy any more ubiquiti stuff, and may return the managed switch I just bought as its within the returns window.

[Mattt]

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

[LooneyTunes]

Mattt said:

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

UXG will, but it’s been in Early Access for about a year now with no sign of general release!

[bmwmike]

LooneyTunes said:

Mattt said:

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

UXG will, but it’s been in Early Access for about a year now with no sign of general release!

Probably blocked up fixing all the vulns

[Mattt]

LooneyTunes said:

Mattt said:

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

UXG will, but it’s been in Early Access for about a year now with no sign of general release!

And it costs more than a UDM Pro with less features.

All because “I need an external controller” - no you don’t in the vast majority of cases.

[LooneyTunes]

Mattt said:

LooneyTunes said:

Mattt said:

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

UXG will, but it’s been in Early Access for about a year now with no sign of general release!

And it costs more than a UDM Pro with less features.

All because “I need an external controller” - no you don’t in the vast majority of cases.

At EA it was more expensive, but no general release pricing announced yet? Tbh, although there can be merit to single purpose devices, I don’t give a stuff about separate controller and wouldn’t use any of the extra features in UDMP. I don’t however especially fancy having to migrate config from a current controller to a UDMP (if there was a way to do this then I’d probably have bought a UDMP by now) which I understand essentially requires reconfiguring everything.

[troc]

I migrated from an external controller (cloud key 2+) to my udmp without any serious issues I seem to recall.

https://help.ui.com/hc/en-us/articles/360008976393...

[rxe]

UDM does not make a lot of sense unless you are running Protect.

If you are running protect, then it is a cheap high capacity video server - but I think it still only has one HDD slot, which is a bit st.

[HiAsAKite]

latest on Ubiquiti in relation to the recent breach: https://www.theregister.com/2021/04/01/ubiquiti_da...

Feels like if you just use offline hosted controllers etc, you should be ok, but may be worth changing/updating passwords to cloud based services.

Sadly its "almost" just a matter of time these days before an organisation gets breached in one form or another.

(and before you ask - yes I have some ubiquiti kit)

[LooneyTunes]

troc said:

I migrated from an external controller (cloud key 2+) to my udmp without any serious issues I seem to recall.

https://help.ui.com/hc/en-us/articles/360008976393...

Interesting, thanks. It’s been a while since I looked at UDM and didn’t realise that could be done.

[markiii]

rxe said:

UDM does not make a lot of sense unless you are running Protect.

If you are running protect, then it is a cheap high capacity video server - but I think it still only has one HDD slot, which is a bit st.

latest OS seems to not allow you ti make Protect accessible remotely unless you make teh whole box reachable.

same with the Cloudkey 2+

i'd go UNVR for Protect and keep it separate from the network controller personally

[colin79666]

Mattt said:

USG won’t handle FTTP speeds with any features enabled eg DPI or IPS.

DPI is fine but slows to 85Mpbs with IDS or IPS. I’ve got a USG but if I was doing it again I think I’d go for a pfsense router. Ubiquiti switching and APs are reasonable but their routing is a bit weak. It is nice having the pretty graphs with all being in the same management system but a few weeks in you hardly ever look at that while missing basic features like being able to view firewall logs in the GUI annoy you always.