Sometimes these videos are long winded but you did such a good job delivering so much information and the other methods as well without making this boring or hard to watch. Absolutely amazed. I have adhd and can't focus on long videos but again, your video held my attention the entire time. I learned so much thank you.
Been following your tutorials for UDM Pro, and they are the best, most informative... thanks a million. I hope that one day, will make a video explaining all those Firewall rules in more details.
This is a clean setup. Every aspect has been touched upon to the extent of being relevant. UniFi controller and its suite of products are the need of the hour. Threat detections and alerts are important. That has been covered in this video upto bare minimum not to overwhelm the average user who is technically inclined but does not have deep understanding of networks.
Enjoy your videos, just a tip, when showing your screen is better to disable your cam HUD so we can get the whole screen and not get some stuff blocked by your webcam feed.
Well thank you ,as you’ve taught me a lot . I thought it was overkill , but my rack looks far better with keystone panels . I learned a lesson, don’t purchase 48 jack keystone panels,as there harder to work on as you upgrade . I wasted some money , but it’s all a learning curve .
Great video, well done . Love your keystone plates below and above the switch , as it certainly makes for a clean look . I was going to use this ugly looking tray that protrudes from the front of the rack which has the Ethernet cables coming out of the fingers , but now I want to send it back and go with your idea. My only concern was Poe going threw an extra connection,as I have to add the keystone jack , but I suspect it won’t be an issue . I have the UMD pro and a unifi 24 port switch ,but it’s for my home . I also have a 6’ tall 1” wide network rack ,as I wanted it to look professional when it’s all said and done . I just wish I seen your video yesterday before I ordered my other parts . Liked and subbed , thanks
Thanks for this video Cody. I started my networking journey thbak to you. I'm currently doing my whole house renovation and have gone down the unifi path. I was thinking about restricting the camera cat6a cables somehow but did not know how. Now I do! Thanks dude. Ref the Cat6 keystones. Will these work with shielded Cat6a cables? Iv seen some keystones advertised as shielded so not sure what I should go for? I love the idea of these keystones and the tool. As I'm in the UK ordering these and finding out they won't work would be abit if a pain. If anyone else reading this can chime in as well. That would be appreciated.
Geez your costing me money lol. Although my application is a home install , I just really like the way your setup looks . Could have saved money by not going with Leviton cat6 extreme keystones , and went with the brand you showed, but oh well
While adding the cameras to the camera wlan it seems like you're adding the wrong ports. Either that or then the ports 1-4 don't align on the image of thr front of the switch at 26:25
Hi Mate ,Thanks for the great tutorial . I have a stumbling block though. I have set up 3 vLANs on the UDM Pro and applied the ‘ Allow LAN to All vLANs ‘ ( Source = LAN , Destination RFC1918 ) firewall rule to the main LAN , I can access the other vLANs via ping etc from the main LAN , but when I try to access my Apple TV or wifi speakers ( which is on IoT vLAN ) , using iPhone apple remote or Roon remote , I don’t see those devices. Only when I’m on the IoT network , I'm able to see the other IoT devices . My desire is to control the devices in other other vLAN from my Main LAN devices. Any kind of help would be greatly appreciated . Cheers . Emmany .
I do not hold any current certification I had my ccna routing and switch and almost completed my ccnp. If you’re new to netwoking cisco ccna is a great starting point or comptia network plus
What do you use when running the cable from either the wall or the ceiling into the rack and patch panel. Do you just leave a hole in the wall or ceiling? I’m looking for a nice clean look coming out of the wall or ceiling into my rack.
I'm using the UDM SE v3.0.18. @ 24:38 Lan Local doesn't exist anymore. What are gateway rules done under in v3.0.18 now that Lan Local has been removed by Unifi?
Hello. Great video. Short question, did you not forget to activate "Layer 2 Isolation" at 21:20? My understanding is that this prevents communication between the client devices. That makes a lot of sense, especially in a guest wifi.
Hi, I’ve configured my network based on this video and for some reason firewall rule that blocks inter-vlan routing prevents AirPlay from working. Could you clarify on what additional firewall rules are needed in order for AirPlay to work? Tv is on IoT network, and Mac is on main network. Thanks!
Hi I’m new to this. I’m trying to do my set up with just a Switch Enterprise 8 PoE (in place of where you have your UDM Pro), and I don’t have an extra switch. Do you have a second switch in your rack in anticipation of having to need more ports? Or is there another reason I might need it? I fully realize you would normally have a router and a switch, but with the UDM Pro or the Switch Enterprise 8 PoE I thought it was smart enough to do everything I need without needing an another switch.
Just a question. Why not run the WAN connection from ISP equipment to back of patch panel, then patch it in like rest of the connections straight down on port 22 Specially if you made that connection a RJ45 coupler so would be easier to adjust length of the cable from back of panel to ISP connection? Just a thought. Its how I did mine, till I can ditch the ONT Fiber to ethernet and connect Fiber to SFP port. Then still would like to use a Patch port to look clean.
Is there a way to connect mobile phone data to UniFi network? I want to setup this for back up when internet goes out and we can still process payments
Can the firewall rules be exported and imported to other UNIfi devices? For example, I'm deploying multiple UDM-PRO. I would love to be able to export rules from my production unit to all the additional units I deploy.
Can you add pfsense netgate and how would you do that? Do you need a 10G fibre ethernet to work with this or can home ethernet work as well? also do you have videos on core nodes with 100Gbps
At 7:55, are you using (2) patch panels to segment them vertically adjacent to the switch ports so that you don't have to connect longer patch cables? Thanks.
OMG! That was great information, but way too fast to follow for configuring my first network. Do you have another version on the actual setup that runs a little slower? 😳
Hey , I have a bunch of UDM pro small business config videos but probably the same speed I talk fast. You can click on the video and change the speed setting to be slow :)
A lot of small businesses don’t have I.T staff who manage the network. With WPA 3 enterprise you need to setup a radius server with usernames and passwords for every person connecting to that network. The better way now imo is to use Unifi UID
Hey @mactelecom, do you no longer make a management network for just all devices and possible servers that you wouldn't want people on the LAN to try to get to?
Hi mate, for larger networks (or even smaller ones) do you worry about resiliency and how do you go about achieving it? Example, should your UDM Pro or switch fail (or you needed to take offline for maintenance etc) your customer would be offline; this is one concern which is keeping us from deploying a UDM Pro into some of our customers, especially those that are a number of hours from us.
For large networks i recommend getting an Aggregation switch or 2 of them between the L2 switches which will provide you better FT. The UDM Pro for me is not ready for the large network world due to lack of support as they require you to enter a web base ticket or refer to the user based forums, some updates pushed tend to cause headaches ex. internet drops after updating the firmware and limited inventory. I use the UDM Pro for small client sites and larger sites i use Fortinet just for added comfort. Now, if your large network can deal with periodic impacts then UDM Pro is good. I am waiting to get the UXG-Pro or ER-8-XG to test in a live large production environment
@@bc5891 Thanks for your response B C and apologies for the delay in mine; yep, I agree, we also use Fortinet for our larger sites. Would be interested to hear your experience with the UXG-Pro.
19:10 you should trim down the scope using SOPs since you are doing this for other businesses/clients as i am more than certain they will not be connecting that many devices to the network. I would go with .50 to .100 for each vlan. You should then standardize the IP ranges for static devices across all client base ex. Printers starting at .20, onsite domain controllers standardized to .10 and .11 or .12 if you like even numbers. Then follow the same method for servers ex .13. You can adjust as needed on the fly should they need a larger scope. The security camera system should be vlan with no route to other vlan or internet since the cameras do not require internet access as the UDM controls that part. The web filter built into the UDM is ok but in no way perfect so for my clients I usually point them to my cloud Pi server which is updated daily, more secure and branded with my business details. Just something to consider since you seem to be doing well on the small business side. Come up with your own SLA " Service Level Agreement" and SOP " Standard Operating Procedure" for what you will be delivering. Anything else is considered extra meaning more $$ for you!
Thanks for a great video. I have a very similar setup, but I've not done any firewall rules. I have a network laser printer that I want everyone to be able to access and also a PC with data that I want staff lan/wifi and LAN to be able to access. Can you show how to setup firewall rules for this please. Printer is 10.0.1.100, data PC is 10.0.1.200
Everyone will have access to the laser printer since it’s in the same LAN subnet. Just add the IP address of the laser printer to the other laptop/PCs. You can always test it by pinging the laser printer on the other pc/laptops.
You don't need a DAC cable a Cat 6 will work. If you want the connection to be 10Gb between the switch you either want a DAC cable or use copper SFP+ modules
Cool video, you make the connector part look easy. Is there any magic to making custom Ethernet cables? I redid my home network a while ago with cables and connectors off of amazon and neutered my network. I used Navepoint cat5e cable and cheap connector kit that came with 100 rj45 connectors, crimp tool, wire stripper, and cable tester. spent hours making those cables and all of my 100mbps devices would only connect at 10mbps. I replaced it all with premade cat6 cables to get proper connections again and still dying to know what i did wrong.
No trick to making custom cables just depends on how many cables you will need. Your fingertips will suffer if you are running cables like i have. You should checkout GearIT CAT6 patch cables on Amazon. I have a few thousand GearIT CAT6 cables at various client sites and here at my home office. Zero issues! 10/100 network connections usually point to network port on the device, your switch port speed or your network cable you ran in the house. With CAT5e you will get a max of 1Gbps connection, CAT6 1Gbps to 10Gbps "short runs", CAT6a 10 Gbps, CAT7 10Gbps, and CAT8 40Gbps. Also, for home network you will want to use CAT6 cable. Later CAT8 or CAT9 will most likely be the new way as internet providers are boosting speeds up to 100 Gbps.
I am looking for someone to build my small business wireless internet network. What is the name of the profession that I will be looking for? IT network designer? I don't know where to start to find someone.
Sometimes these videos are long winded but you did such a good job delivering so much information and the other methods as well without making this boring or hard to watch. Absolutely amazed. I have adhd and can't focus on long videos but again, your video held my attention the entire time. I learned so much thank you.
Been following your tutorials for UDM Pro, and they are the best, most informative... thanks a million. I hope that one day, will make a video explaining all those Firewall rules in more details.
This is a clean setup. Every aspect has been touched upon to the extent of being relevant. UniFi controller and its suite of products are the need of the hour. Threat detections and alerts are important. That has been covered in this video upto bare minimum not to overwhelm the average user who is technically inclined but does not have deep understanding of networks.
Hello. Just want to tell you that you do an amazing job explaining the process of setting up Unifi products.
Thank you
Enjoy your videos, just a tip, when showing your screen is better to disable your cam HUD so we can get the whole screen and not get some stuff blocked by your webcam feed.
I recommend if you have fiber to get the ISP to provide a SFP fiber adapter straight into the UDM Pro. It works perfectly.
Hey I have SFPs I just need to get a long fiber cable to connect back to my network rack
Well thank you ,as you’ve taught me a lot . I thought it was overkill , but my rack looks far better with keystone panels . I learned a lesson, don’t purchase 48 jack keystone panels,as there harder to work on as you upgrade . I wasted some money , but it’s all a learning curve .
Amazing. So helpful. Thank you!
excellent cable management!
Love your setup guides. So cool 😎
Thank you
Excellent step by step guide .Thanks so much for this video.
Dude that was amazing! Thanks a lot
Keep up the good work
Would like to see where the equipment was mounted and how you ran the cables.... good video
Great video, makes me what to move to Unifi gear for my home 🙂
Wow really giving the Guests some blazing speed lmao 10down2up gosh they'll be flying
The guest don’t need a lot of speed the can still do some streaming, check all social media and email at this speed
Lovely Work Bro Its a real world scenario
Great Video - Helped out with a challenge I had at a customer location. Keep bringing these detaied videos.
Thanks for producing this video,
I enjoy watching the network implementation content. You get a little bit of everything. Keep making great videos!
Much needed
Great tutorial..
You're a T568A man?! And here i thought you seemed like a nice guy 😂
Great video, well done . Love your keystone plates below and above the switch , as it certainly makes for a clean look . I was going to use this ugly looking tray that protrudes from the front of the rack which has the Ethernet cables coming out of the fingers , but now I want to send it back and go with your idea.
My only concern was Poe going threw an extra connection,as I have to add the keystone jack , but I suspect it won’t be an issue .
I have the UMD pro and a unifi 24 port switch ,but it’s for my home . I also have a 6’ tall 1” wide network rack ,as I wanted it to look professional when it’s all said and done .
I just wish I seen your video yesterday before I ordered my other parts .
Liked and subbed , thanks
Always great content. Thanks
Thanks for this video Cody. I started my networking journey thbak to you. I'm currently doing my whole house renovation and have gone down the unifi path. I was thinking about restricting the camera cat6a cables somehow but did not know how. Now I do!
Thanks dude.
Ref the Cat6 keystones. Will these work with shielded Cat6a cables? Iv seen some keystones advertised as shielded so not sure what I should go for?
I love the idea of these keystones and the tool. As I'm in the UK ordering these and finding out they won't work would be abit if a pain.
If anyone else reading this can chime in as well. That would be appreciated.
Geez your costing me money lol. Although my application is a home install , I just really like the way your setup looks .
Could have saved money by not going with Leviton cat6 extreme keystones , and went with the brand you showed, but oh well
Type B is used worldwide not just USA, I personally don't know anyone using Type A
While adding the cameras to the camera wlan it seems like you're adding the wrong ports. Either that or then the ports 1-4 don't align on the image of thr front of the switch at 26:25
Hi Mate ,Thanks for the great tutorial . I have a stumbling block though. I have set up 3 vLANs on the UDM Pro and applied the ‘ Allow LAN to All vLANs ‘ ( Source = LAN , Destination RFC1918 ) firewall rule to the main LAN , I can access the other vLANs via ping etc from the main LAN , but when I try to access my Apple TV or wifi speakers ( which is on IoT vLAN ) , using iPhone apple remote or Roon remote , I don’t see those devices. Only when I’m on the IoT network , I'm able to see the other IoT devices . My desire is to control the devices in other other vLAN from my Main LAN devices. Any kind of help would be greatly appreciated . Cheers . Emmany .
Thanks for the video. Do the Unifi devices come with a DAC cable or is there one that you recommend?
We couldn't create the Cameras as a Guest network instead?
Thanks for producing this video. Curious if you personally hold any Ubiquiti certs or any professional network related certs?
I do not hold any current certification I had my ccna routing and switch and almost completed my ccnp. If you’re new to netwoking cisco ccna is a great starting point or comptia network plus
What do you use when running the cable from either the wall or the ceiling into the rack and patch panel. Do you just leave a hole in the wall or ceiling? I’m looking for a nice clean look coming out of the wall or ceiling into my rack.
Hey Cody I love the channel ... I'm new to Ubiquti , but i was wondering why do you always use an aggregation switch, instead of one L3 switch
I'm using the UDM SE v3.0.18. @ 24:38 Lan Local doesn't exist anymore. What are gateway rules done under in v3.0.18 now that Lan Local has been removed by Unifi?
Hello. Great video. Short question, did you not forget to activate "Layer 2 Isolation" at 21:20? My understanding is that this prevents communication between the client devices. That makes a lot of sense, especially in a guest wifi.
Yup that would also be a good idea
Hi, I’ve configured my network based on this video and for some reason firewall rule that blocks inter-vlan routing prevents AirPlay from working. Could you clarify on what additional firewall rules are needed in order for AirPlay to work? Tv is on IoT network, and Mac is on main network. Thanks!
Cody, maybe a dumb question but why did you choose for the 10. network instead of B or C?
Which topology is this?
Hi I’m new to this. I’m trying to do my set up with just a Switch Enterprise 8 PoE (in place of where you have your UDM Pro), and I don’t have an extra switch. Do you have a second switch in your rack in anticipation of having to need more ports? Or is there another reason I might need it?
I fully realize you would normally have a router and a switch, but with the UDM Pro or the Switch Enterprise 8 PoE I thought it was smart enough to do everything I need without needing an another switch.
Just a question. Why not run the WAN connection from ISP equipment to back of patch panel, then patch it in like rest of the connections straight down on port 22 Specially if you made that connection a RJ45 coupler so would be easier to adjust length of the cable from back of panel to ISP connection? Just a thought. Its how I did mine, till I can ditch the ONT Fiber to ethernet and connect Fiber to SFP port. Then still would like to use a Patch port to look clean.
Hey mactelecom how do you configure PPPoe on udm pro to your client via Poin to point,thanks
568A? I always use 568B
Depends where you live in the world. Also doesn’t matter just make sure to use a standard
Is there a way to connect mobile phone data to UniFi network? I want to setup this for back up when internet goes out and we can still process payments
Can the firewall rules be exported and imported to other UNIfi devices? For example, I'm deploying multiple UDM-PRO. I would love to be able to export rules from my production unit to all the additional units I deploy.
Can you add pfsense netgate and how would you do that? Do you need a 10G fibre ethernet to work with this or can home ethernet work as well? also do you have videos on core nodes with 100Gbps
At 7:55, are you using (2) patch panels to segment them vertically adjacent to the switch ports so that you don't have to connect longer patch cables? Thanks.
Thats correct and I like the small slim patch cables
what ones do we use in the uk for the keystones
OMG! That was great information, but way too fast to follow for configuring my first network. Do you have another version on the actual setup that runs a little slower? 😳
Hey ,
I have a bunch of UDM pro small business config videos but probably the same speed I talk fast.
You can click on the video and change the speed setting to be slow :)
@@MactelecomNetworks okay, thank you very much. There’s a lot to absorb.
@11:50 Sad Chris noises
Bahahah no don’t avoid crosstalk solutions Chris is great. But awesome comment 😂
Can I ask, why not WPA-Enterprise over Personal? Not super concerned about that part of security? Just curious. I'm learning
A lot of small businesses don’t have I.T staff who manage the network. With WPA 3 enterprise you need to setup a radius server with usernames and passwords for every person connecting to that network.
The better way now imo is to use Unifi UID
Hey @mactelecom, do you no longer make a management network for just all devices and possible servers that you wouldn't want people on the LAN to try to get to?
I’m still confused. If I want to remotely monitor my UniFi network from anywhere….Do I need a subscription?
No, just register an account and load a controller! all free
Hello,
I know it could be a stupid question but I’ll try: how can I access web interface of udm pro via port 8000 instead of port 80? ☺️
I actually don’t think there is a way to change the web interface port
Hi mate, for larger networks (or even smaller ones) do you worry about resiliency and how do you go about achieving it? Example, should your UDM Pro or switch fail (or you needed to take offline for maintenance etc) your customer would be offline; this is one concern which is keeping us from deploying a UDM Pro into some of our customers, especially those that are a number of hours from us.
For large networks i recommend getting an Aggregation switch or 2 of them between the L2 switches which will provide you better FT. The UDM Pro for me is not ready for the large network world due to lack of support as they require you to enter a web base ticket or refer to the user based forums, some updates pushed tend to cause headaches ex. internet drops after updating the firmware and limited inventory. I use the UDM Pro for small client sites and larger sites i use Fortinet just for added comfort. Now, if your large network can deal with periodic impacts then UDM Pro is good. I am waiting to get the UXG-Pro or ER-8-XG to test in a live large production environment
@@bc5891 Thanks for your response B C and apologies for the delay in mine; yep, I agree, we also use Fortinet for our larger sites. Would be interested to hear your experience with the UXG-Pro.
19:10 you should trim down the scope using SOPs since you are doing this for other businesses/clients as i am more than certain they will not be connecting that many devices to the network. I would go with .50 to .100 for each vlan. You should then standardize the IP ranges for static devices across all client base ex. Printers starting at .20, onsite domain controllers standardized to .10 and .11 or .12 if you like even numbers. Then follow the same method for servers ex .13. You can adjust as needed on the fly should they need a larger scope. The security camera system should be vlan with no route to other vlan or internet since the cameras do not require internet access as the UDM controls that part. The web filter built into the UDM is ok but in no way perfect so for my clients I usually point them to my cloud Pi server which is updated daily, more secure and branded with my business details. Just something to consider since you seem to be doing well on the small business side. Come up with your own SLA " Service Level Agreement" and SOP " Standard Operating Procedure" for what you will be delivering. Anything else is considered extra meaning more $$ for you!
Thanks for a great video. I have a very similar setup, but I've not done any firewall rules. I have a network laser printer that I want everyone to be able to access and also a PC with data that I want staff lan/wifi and LAN to be able to access. Can you show how to setup firewall rules for this please. Printer is 10.0.1.100, data PC is 10.0.1.200
Everyone will have access to the laser printer since it’s in the same LAN subnet. Just add the IP address of the laser printer to the other laptop/PCs. You can always test it by pinging the laser printer on the other pc/laptops.
Any concern about POE over the SlimRun cables?
Nope
Do you need to have the DAC cable or will cat6 from the UDM into the router/switch work just as good?
You don't need a DAC cable a Cat 6 will work. If you want the connection to be 10Gb between the switch you either want a DAC cable or use copper SFP+ modules
@@MactelecomNetworks thanks for the reply , could you still use it even if you didnt have 10Gb connection? love your channel btw, its really helpful.
Cool video, you make the connector part look easy. Is there any magic to making custom Ethernet cables? I redid my home network a while ago with cables and connectors off of amazon and neutered my network. I used Navepoint cat5e cable and cheap connector kit that came with 100 rj45 connectors, crimp tool, wire stripper, and cable tester. spent hours making those cables and all of my 100mbps devices would only connect at 10mbps. I replaced it all with premade cat6 cables to get proper connections again and still dying to know what i did wrong.
No trick to making custom cables just depends on how many cables you will need. Your fingertips will suffer if you are running cables like i have. You should checkout GearIT CAT6 patch cables on Amazon. I have a few thousand GearIT CAT6 cables at various client sites and here at my home office. Zero issues! 10/100 network connections usually point to network port on the device, your switch port speed or your network cable you ran in the house. With CAT5e you will get a max of 1Gbps connection, CAT6 1Gbps to 10Gbps "short runs", CAT6a 10 Gbps, CAT7 10Gbps, and CAT8 40Gbps. Also, for home network you will want to use CAT6 cable. Later CAT8 or CAT9 will most likely be the new way as internet providers are boosting speeds up to 100 Gbps.
I am looking for someone to build my small business wireless internet network. What is the name of the profession that I will be looking for? IT network designer? I don't know where to start to find someone.
Τ568Α?
I use T568A
I have watched a couple of your videos now, but I just can't anymore, please less eye-contact, it's too much.
Nah go elsewhere