*** Official Ubiquiti Discussion Thread ***

WJA96 said:
Mikrotik recommend the antennae be set at 90 degrees from one another - the infamous rabbit-ears!

From what I can see, the antennae are at 90 degrees, which is what I would also have done, except I would have put one standing straight up and the other lying flat down. My understanding is that it is more important for the 5GHz than the 2.4GHz, but I don’t know why.
Click to expand...

Hey mate, just out of interest, do you have any switch level security for the external Ethernet? ie, to stop someone unplugging the cable from the AP and plugging into a laptop to get access to the network?

any ideas what can be done to make this more secure? ive enabled MAC ACL on the 1 port on my managed switch (Zyxel GS1900) but that is not very secure.
 
You could tag a random VLAN on the port and tell the AP to tag packets with the same VLAN, then set the untagged VLAN to something that doesn't go anywhere.

It's a bit security through obscurity but there's not much else you can do without 802.1x.
 
lmfy2k said:
Hey mate, just out of interest, do you have any switch level security for the external Ethernet? ie, to stop someone unplugging the cable from the AP and plugging into a laptop to get access to the network?

any ideas what can be done to make this more secure? ive enabled MAC ACL on the 1 port on my managed switch (Zyxel GS1900) but that is not very secure.
Click to expand...

On the VLAN it’s on, the CIDR block is severely restricted, DHCP is turned off and all fixed IP addresses are reserved. So it’s pretty locked down. And for physical security - no, I don’t have anything but apparently there is a simple locking device you can fit to the RJ45 ports - Portblocker.
 
Caged said:
You could tag a random VLAN on the port and tell the AP to tag packets with the same VLAN, then set the untagged VLAN to something that doesn't go anywhere.

It's a bit security through obscurity but there's not much else you can do without 802.1x.
Click to expand...
Not hugely secure if someone really wants to get it, it's just a tag in the header.
 
Yeah I think I acknowledged that by admitting it was just security through obscurity. Anything is, shy of physically locking the AP away in a plastic box or implementing 802.1x.
 
I'm having a weird issue.

My wife and sons mobile phones (one Android, one Iphone), has suddenly lost connection to my network. It sees the network but shows as connected with no internet. However it doesn't show in my controller software.

My phone (iphone), connects perfectly fine, as do all computers and other devices (Amazon Fire tvs, Alexa devices and Xbox).

I've ended up creating a second network which they can connect to and use the internet ok.

Any ideas what i can try as this whole second network isn't ideal.

Cheers
 
I seem to have lost one of them!

But the one that’s still up is on 3.9.27.8537

I don’t see an option to upgrade it so I assume it’s the latest.
 
Yeah, that's the latest. As I said, it was quite some time ago I had that problem so I would have been surprised if you were using firmware that old.

Have you tried to delete the network connection from the phone and then reconnect?
 
Yes, tried that.

It happened very briefly on my phone too but then seemed to fix itself quite quickly. I think i'll give it a few days and see if it sorts itself out!
 
When they're connected, can you go into the connection and check everything is there (IP, DNS, gateway etc.)?
 
Yeah everything was populated as expected (i assume you mean the AP)

As soon as a created a secondary "Test" network, the phones picked it up and connected to the AP straight away.
 
Marvt74 said:
Yeah everything was populated as expected (i assume you mean the AP)

As soon as a created a secondary "Test" network, the phones picked it up and connected to the AP straight away.
Click to expand...

Think he means on the phone, when your connected to Wifi, you can go into Wifi settings on the phone and it will show you IP details, need to confirm its getting everything from DHCP, my guess maybe DNS issues?
 
Yup, that's right @lmfy2k - just worth checking nothing has been adjusted by accident. You don't have pi hole or anything running do you / anything that's required the DNS manually setting?
 
No, nothing like that. Just a laptop running the controller software and a few HD's plugged in as a server. The whole thing has been running beautifully for about a month and then suddenly this.
 
You must log in or register to reply here.
Back
Top Bottom