* Official Ubiquiti Discussion Thread *

The_Max_Sti · 27 Mar 2019 at 07:29

Sure did..
NAS <- Switch -> VMware -> VM (Vm is using vmxnet3 network)

ChrisD. · 27 Mar 2019 at 08:49

The issue definitely appears to be on the fibre cards then, can you test them in something else?

TJM · 28 Mar 2019 at 00:25

My Netgear R7800 is going on the fritz (random drops of all ethernet connections; cannot be resolved through wipes or updates) so I'm either going to replace it with an AC-86U or something else. Which Ubiqiuiti gear would suit a 1Gbps symmetrical connection? I don't need any fancy features.

ChrisD. · 28 Mar 2019 at 07:39

Access point?

The_Max_Sti · 28 Mar 2019 at 18:08

ChrisD. said:
The issue definitely appears to be on the fibre cards then, can you test them in something else?

OK tried in a different card same speeds so guess its the fiber SFP+'s then. Thats a shame.. Seems im going to have to try to get some proper intel ones to test with.

DIABLO · 28 Mar 2019 at 18:27

TJM said:
My Netgear R7800 is going on the fritz (random drops of all ethernet connections; cannot be resolved through wipes or updates) so I'm either going to replace it with an AC-86U or something else. Which Ubiqiuiti gear would suit a 1Gbps symmetrical connection? I don't need any fancy features.

As Chris stated i guess you just want a WiFi access point? Since you mentioned you're getting a new Router.

TJM · 31 Mar 2019 at 20:12

DIABLO said:
As Chris stated i guess you just want a WiFi access point? Since you mentioned you're getting a new Router.

Sorry, I wasn't clear - I'll either get an all-in-one like the AC-86U or a separate router and wireless access point if it the kit is more stable and in the same price range.

ChrisD. · 1 Apr 2019 at 07:55

Separate is always going to be better, so if you can afford it then do it.

Kol · 1 Apr 2019 at 19:11

Chaps - vlans. Can I request some assistance? So, my set up is current USG>US8, off which is an AC-lite and a US8-60w in at the back of the house which feeds another AC-lite.

I was reading about vlans a while back, so decided I'd like to segregate my smart switches/plugs. So I thought I'd followed the guides on the ubnt and got everything nicely.

My main network is running perfectly (192.168.0.x) so I then proceeded with the following:

- Create a new network, set the vlan to 20, set the dhcp server to 192.168.20.6 > 192.168.20.254 and saved it.
- Create a new wireless network, ticked use vlan, 20 and saved that.

I connected the smart switches to that ssid and they've resolved with ips in the .20.x range. So seems to be working.

The problem is, the devices on .0.x can see .20.x devices. I've not yet touched the firewall, it's all as default out of the box/reset a while back when I decided to start from scratch.

I'm guessing I've missed an obvious setting somewhere or do I need to create a firewall rule which blocks cross communication? I assumed that was automatic.

Without looking like a complete amateur, is it solved by simply going into Routing & Firewall > Firewall > Action = Drop > Source = Network (IoT) > Destination = Network (LAN)?

EDIT - tried the above under LAN IN and it seems to have worked.

zom247 · 1 Apr 2019 at 20:03

I have the Edgerouter X and have just been to the Shields Up site to check it's security. It shows ports 80 and 443 as open, I followed the wizard setup and I thought that incoming on these ports would have been blocked. Have I set the firewall up incorrectly? I seem to be forgetting more about networking each day

SupraWez · 1 Apr 2019 at 20:06

Port forwarding or management of the device?

Sin_Chase · 1 Apr 2019 at 21:55

Sounds like web management enabled from the outside.

ChrisD. · 2 Apr 2019 at 07:33

My USG also has 80 and 443 and I'm not sure why, there's no port forwarding.

Edit, it's the network, LAN, UPnP LAN setting. If it's on both 80 and 443 are open. If it's off, Plex complains, so I will manually put in a rule for Plex port forward.

the-evaluator · 2 Apr 2019 at 07:55

Kol said:
EDIT - tried the above under LAN IN and it seems to have worked.

Yep, that'll do it.

I've added an additional rule in my setup so that nothing in VLAN2 can reach anything in VLAN1 but I've allowed VLAN1 to reach VLAN2 so that I can ping devices in VLAN2 to check if they're up.

ChrisD. · 2 Apr 2019 at 08:46

ChrisD. said:
My USG also has 80 and 443 and I'm not sure why, there's no port forwarding.

Edit, it's the network, LAN, UPnP LAN setting. If it's on both 80 and 443 are open. If it's off, Plex complains, so I will manually put in a rule for Plex port forward.

Found the culprit, it was my QNAP NAS. Settings now adjusted.

You can see port forwarding statistics under insights.

Kol · 2 Apr 2019 at 09:00

the-evaluator said:
Yep, that'll do it.

I've added an additional rule in my setup so that nothing in VLAN2 can reach anything in VLAN1 but I've allowed VLAN1 to reach VLAN2 so that I can ping devices in VLAN2 to check if they're up.

Awesome - thanks. So the second rule, LAN in and simply reverse everything (so LAN > IoT) and instead of drop that should be accept?

Cheers!

the-evaluator · 2 Apr 2019 at 09:15

That's what I thought it would be, but no. You need to create a rule that's above the drop rule that has the following settings - accept, all protocols, states - established & related. Source & destination - any.

Kol · 2 Apr 2019 at 09:29

the-evaluator said:
That's what I thought it would be, but no. You need to create a rule that's above the drop rule that has the following settings - accept, all protocols, states - established & related. Source & destination - any.

Great - thank you mate. Really appreciate that.

Mark M · 3 Apr 2019 at 07:23

Kol said:
Chaps - vlans. Can I request some assistance? So, my set up is current USG>US8, off which is an AC-lite and a US8-60w in at the back of the house which feeds another AC-lite.

I was reading about vlans a while back, so decided I'd like to segregate my smart switches/plugs. So I thought I'd followed the guides on the ubnt and got everything nicely.

My main network is running perfectly (192.168.0.x) so I then proceeded with the following:

- Create a new network, set the vlan to 20, set the dhcp server to 192.168.20.6 > 192.168.20.254 and saved it.
- Create a new wireless network, ticked use vlan, 20 and saved that.

I connected the smart switches to that ssid and they've resolved with ips in the .20.x range. So seems to be working.

The problem is, the devices on .0.x can see .20.x devices. I've not yet touched the firewall, it's all as default out of the box/reset a while back when I decided to start from scratch.

I'm guessing I've missed an obvious setting somewhere or do I need to create a firewall rule which blocks cross communication? I assumed that was automatic.

Without looking like a complete amateur, is it solved by simply going into Routing & Firewall > Firewall > Action = Drop > Source = Network (IoT) > Destination = Network (LAN)?

EDIT - tried the above under LAN IN and it seems to have worked.

Great timing thanks as I need to do this next week.

silvagti · 3 Apr 2019 at 12:53

I have an old ISP fibre hub (802.11n) and I'm considering buying a Ubiquiti access point in order to upgrade to 802.11ac and improve my wireless signal. Which would be the best access point for me?

Would your recommend either of these?

Ubiquiti Networks UAP-AC-LITE WLAN Access Point

Ubiquiti Networks UAP-AC-LR 2.4-5 GHz 802.11ac Dual-Radio Long Range Access Point

Is it worth the extra for the UAP-AC-LR? Any gotchas or other things I should bear in mind?

*** Official Ubiquiti Discussion Thread ***

* Official Ubiquiti Discussion Thread *