*** Official Ubiquiti Discussion Thread ***

Got my VPN set up as well, and a firewall rule so it blocks traffic to my PC if the VPN goes down, that firewall rule took me a while to figure out.

Got an IoT network setup with plenty of firewall rules blocking intervlan communication and access to the UDM gateways.

Edit: none of my smart tvs can see me NAS now and i cant figure out the firewall rule i need to allow just the nas or better still just Plex.

Had to put the TVs on the main Lan for now I can't figure it out. It's not a firewall issue either so don't know what it is.
 
Last edited:
My phone wouldn't connect at all today just says "IP configuration failure"

Resorted to setting a static IP on the phone and it's connected straight away.
Any ideas?

Also interesting in the logs shows my smart plugs trying to connect to the gateway. I have certain ports blocked. Wonder why it's trying to connect to those.
 
Last edited:
My phone wouldn't connect at all today just says "IP configuration failure"

Resorted to setting a static IP on the phone and it's connected straight away.
Any ideas?

Also interesting in the logs shows my smart plugs trying to connect to the gateway. I have certain ports blocked. Wonder why it's trying to connect to those.


Duplicate IP on the network.
 
A few ways that could happen.

1) Another device had that IP set statically, DHCP server unaware as it’s not got an active lease/not excluded from the pool.
2) Cheap IoT device not complying with standards and ignoring lease duration.
3) Rogue DHCP server.
1. Maybe, though I do have my DHCP set to 10.0.0.50 - 10.0.0.254. All my static stuff is below that.

2. All my IOT stuff is on 10.0.10.0 so shouldn't be an issue.

3. Not sure what could cause that. Maybe I'll reset the Dream Machine when it's a convenient time.

Not really an issue having my phone fixed, 10.0.0.15 at the minute.
 
Had the Gateway Ultra delivered yesterday and set it last night. Its a nice little form factor, sits on my desk easily and powered from a USB adaptor. Easy to transfer from the UDR and restored the network config, re-adopted the AP's and configured the new U6-Mesh and was up and running very quickly. UI is very quick, haven't managed to overload it yet, unlike the UDR and everything seems to be very stable. Running multiple isolated networks and all seems to be working perfectly.
 
Had the Gateway Ultra delivered yesterday and set it last night. Its a nice little form factor, sits on my desk easily and powered from a USB adaptor. Easy to transfer from the UDR and restored the network config, re-adopted the AP's and configured the new U6-Mesh and was up and running very quickly. UI is very quick, haven't managed to overload it yet, unlike the UDR and everything seems to be very stable. Running multiple isolated networks and all seems to be working perfectly.

I've just ordered the Express but also looking at getting the Ultra as the WAN and just using the Express as the AP since it is handy having it powered by type-c for the campervan. Pretty sure the Ultra will adopt the express as it can work in a AP mode.
 
You are the product.
It's trying to connect to random IPs on my main LAN that don't even have a client, so it's clearly random.
Plus I now use 10.0.0.# so it can't be any remembered IPs from my old network using 192.168.1.#

Should have done this ages ago to tidy things up.
Bit of a learning curve though, my Samsung S95B just would not connect at all last night after being fine for a day.
It then just started working.
 
You monitored any HikVision, they are quite chatty too :D

That's not surprising, but I was surprised that Texecom (a well known UK security manufacturer) devices such as its SmartCOM and predecessors try to make connections to all sorts of places and not just for the NTP time sync they suggested, including a Chinese university probably where some student wrote the code for the underlying device Texecom purchased.

I politely pointed this out some time back but got replies such as its been security tested and passed. They are confusing it being secure to communicate with their cloud service and it communicating elsewhere not for their purposes. Not tested recent firmware for their devices as all my CCTV/Security devices are extremely well locked down to their own VLANs without internet.
 
Back
Top Bottom