This is a ridiculously long video - I have added timestamps to the video description (and seek bar on some platforms) - feel free to skip to the parts that interest you. Buy the UDM-Pro on Amazon (Affiliate): UK - amzn.to/3euoq2i US - amzn.to/3h4pgEy
I swear I surprise myself every time with the length! I basically ramble into a camera for a few hours then the final length ends up being a fun surprise while editing.
Thanks as always for your network videos. Learned so much more about the udm pro from your content than any other video I've seen. Your in depth assessment is much appreciated and will very much influence my own network when I get it up and running.
I have a Unifi setup at my parents house and as I live on a different continent I find that having the remote management can actually be pretty useful, especially as Unifi don't offer a SSL VPN as an option (I live in China and other kinds of VPN's just get blocked instantly by the great firewall), I really wish they would offer one (and from my research so does /r/ubiquiti The new UI is great, but I agree it's lacking too many features, simple stuff like setting your internet connection speed wasn't there when I last used it, even though they have a fancy visualisation graph which was always maxed out as the default was something stupid like 2mbps. Great video though btw, I always like seeing your setups :)
Would’ve been better to spend the money on the 24 port POE switch (non-pro) then get the udmp later especially as you aren’t getting rid of the cloud key anyway.
Probably not for me to be honest since it wouldn't really make a difference over my existing setup except for letting me manage PoE vs using the external unmanaged injector. Going for the pro switch with a UDM would give me a 10gbit uplink to the UDM for better inter-vlan performance. I also just wanted to try the UDM out and make a video on it.
At least the pro would give some sort of performance improvement, for me, over £300 to replace a perfectly good PoE injector and get back 1U of rack space I don't really need for anything else doesn't seem like a particularly big benefit.
@@camerongray1515 have just bought the 24 poe (non pro). Got £70 on eBay for the UniFi 60w I was using, just need to sell the gen 1 24 port switch and that should account for over half the cost of the new switch.
Another great video. New to Unify but long time in networking installaing and designing most of the major brands in the market. With my new home I thought I would see what Unify is all about and decided to purchase a couple 8 Port POE lite, a 24 POE and 2 WIFI 6 Lite. I got these over a month a go and now just getting to the setup. Was going through the intial setup for controller, and it appears Unify requires java 8 which has security concerns. Is there a way around this for Mac Big Sur users that have 11.3.1 installed? It would make sense for a company that had this data breach taking additional measures to further secure their application and requirements so home users and businesses are less volunerable. I really do not want to have to setup a VM just for managing these devices. Any suggestions is greatly appreciated.
Needing Java 8 is definitely annoying, personally I'd run the controller in a VM or on dedicated hardware like a Raspberry Pi. While you can technically run it on a regular workstation, it's definitely designed to run on a dedicated OS install so I'd rather not run it on my main machine due to the dependencies and services it runs. You'd also need to take care to backup and restore the controller config if you ever moved to a new Mac or you'd have to set it up again from scratch, this is why I'd rather just keep it on a dedicated device.
I'm not using a Pi personally since the UDM has a built in controller and in other environments I run it in a VM on servers but you'd be fine with either a 3B+ or 4. I ran it years ago on an original model B, absolutely go for something better nowadays but it clearly doesn't need much if it was fine on that. I'd also recommend getting an "industrial" SD card as these are designed for heavier use than a cheap one designed for photos - I've found the UniFi controller to be pretty tough on SD cards so using a durable one is probably a good idea.
MAN! every time u have to put a patch panel between 2 witches. NOT on top to bottom of them. Try It. YOU will see how better is. ... and one more. If you want your rack to look good. Turn around POE Switch - and can make little rearrange on patch panel cable.
While that is true for two switches, I only have a single switch. The other device is a PoE injector which is patched in between the switch and patch panel for certain connections that require PoE therefore it it better in its current location, otherwise cables would have to hop over the patch panel to go between the switch and the injector.
hi Cameron, Thanks for this video. Very helpful. Out of curiosity, would you be able to use a regular sfp cable between the sfp port of the switch and the sfp port of the usg/udm? Perhaps there is a way to configure usg sfp port as LAN1? Solution figured out: You have to first disable the LAN port on the usg/udm. Then it let's you configure WAN2 to LAN1. This is hidden until you disable. Then apply settings, unplug LAN ethernet, then plug in sfp port, and then magic happens.
My ISP is Vodafone in the UK and I currently have FTTC Fibre 2 connection (as FTTD is still not available in my area), Ive been running 4x Ubiquiti AP's for a few years just hung off the crappy Vodafone Router and I have Unifi Controller running on a computer. I would like to upgrade to a UDM Pro SE and retire the software controller and I'm wondering if I can get rid of the Vodafone router too and use the UDM Pro SE. Do you think this is possible?
Those labels are just pieces of paper that slide inside a plastic holder on the patch panel. I used the table tool in Microsoft Word to create the exact size grid to line everything up. If you need adhesive labels then you could either use printer label paper or a label printer such as the one I featured in a recent video on my channel
Cameron, would there be any downside to using the FSP+ port on the UDM pro to link to the switch? I know the switch isn't 10 gb but wouldn't the only effect be freeing up a port on the UDM pro? just thinking about this for my network
There wouldn't be any real downside other than the cable being more expensive. Only thing to take care with that I've heard from others is that with a DAC cable you'll need to manually set the port on the UDM to 1gbps as the autonegotiation apparently has issues with a 1gbit switch over a DAC cable
Hi Cameron, I have BT broadband at home, through a DSL connection like you. However I have one of BTs WiFi routers which they send you with the subscription. How would I change this to just a modem which I could then connect to the UDM Pro - taking an Ethernet out of the lan port on the existing router doesn't seem ideal.
It really comes down to the particular connection you have, if it's a VDSL2 connection like mine (which it would be if you have a 36mbps or 80mbps plan) you could just get an Openreach modem like mine from eBay pretty cheaply, connect it to the UDM and set up the WAN port for PPPoE with your PPPoE username and password. If your connection is ADSL (under 24mbps) or G.Fast (over 80mbps) you'd need a suitable modem although I don't really have any particular recommendations for those.
These are designed for use worldwide and in business settings where connections beyond 1gbps are available, it's not something I need personally of course but it makes sense for Ubiquiti to include it. As for the uplink to a switch - this can make sense even with a sub 1gbps internet connection as you may have LAN traffic that needs to traverse between different VLANs, at this point the traffic will need to go via the router so having a 10gbps uplink can be worthwhile.
@@camerongray1515 Ahhh right, that summed it up, Im new sub, as you're videos have been helping me, im getting a rack setup soon in my Loft (attic) for USA viewers lol.
I can't see why you can't but unless your modem has a 10gbit port I can't see a reason to. In my case, the modem only has a 10/100 port so chances are it wouldn't even work with a 10g Base-T SFP+ module
@@camerongray1515 okay I'm not a huge Network guy. That's sorta why I bought the equipment, so I could learn. AND future proof and whatever. But I have a 1200 Mbps down connection so I planned on using the 10g wan port with an sfp from ubiquiti plugged into it. But seeing no one else using that is stressing me out a bit making me think I'm missing something. My modem does have a 2.5g Ethernet port that it'll be plugged into..
If your modem has a 2.5gbit port I'd probably wait and get the UDM-Pro SE which natively has a 2.5gbit WAN port. You may be able to use an RJ45 SFP+ module but you'd need to find one that definitely supports 2.5gbit which might be a bit fiddly. The other option would be to get a small switch that has both a 10gbit SFP+ port and a 2.5gbit port and put it in between the UDM Pro and your modem
@@camerongray1515 wow. You were right. The ubiquiti SFP I bought didn't support auto negotiation down to 2.5. Ah man. Well I ordered a new one that had great reviews from people trying to do the same thing as me.. you saved me a lot of headache man. I really appreciate your help.
I just let UA-cam auto place them, in fact, on this video I removed a couple that got in the way of the timelapses. I don't want to fiddle with them too much in case it negatively impacts the performance of the video.
You can turn that off dude you can disable cloud access to your stuff dude it's in there it's in the main settings of the router you just disable cloud access you can't access that network controller from the cloud
I turned off remote access later in the video, my concern isn't about it existing, it's just that I don't like that it enables it by default and especially don't like the fact that logging into a Ubiquiti account is enforced. This isn't really about the remote management, it's about the fact that by requiring a login during the setup process, the device is inherently tied into Ubiquiti, so if Ubiquiti drop support, go out of business or stop running the servers that handle that login process, the device could essentially be useless if it was ever factory reset.
I saw on twitter someone with an OG Unifi AP that's now "EOL", you can't adopt it to the controller anymore or configure it if it's already there. It's just a brick basically. You need to self host an old version of the controller to use EOL UBNT devices and prevent it from updating, but that also means you won't be able to use newer devices on that controller at the same time I suspect. Thankfully the Unifi AP can run OpenWRT. I imagine the UDM-P will just stop receiving updates when it's EOL as it's got it's own controller but if they're heavy handed enough to stop older devices working on newer controllers I'm not so sure.
Requirement for online access and UniFi account is simply ridiculous - what the actual f**k?! A strange crap like this is the reason why I happily stick with a Mikrotik network products in this price segment for semi-professional installations.
55:50 If you have really a fiber connection to your provider is 16.5 ms very bad. I have around 70 km over air to my fiber provider with 2 till 4 ms - where mean 4 ms is *bad time* . My provider stay direct at the international internet exchange connect station - so fun fact that Google NY is faster as the national Google exchange knots. Your next international internet exchange connect station should be London, England, UK - they connect directly to your provider. But here Unifi tests only to your provider hardware - then 16.5 ms shows that you use a very slow VDSL2 (or ADSL2) connection only. Typically VDSL2 connection should be 10 ms till 12 ms - not more. Problems can be too old hardware - also your bridge (You can't use a Modulator/Demodulator [short modem] for raw digital connections!), the bridge at your provider, or your bad double cable between. Typical VDSL2 connections are maximum 2 km short. As DIY worker you can replace it with a Cat5a or better cable till the outside connector - mostly this are old telephone lines. This helps in 85% ...
It's not a fully fibre connection, it's a VDSL2 fibre to the cabinet connection. I have since moved to a G.Fast connection which is still FTTP and a type of DSL but is much faster due to more advanced equipment in the cabinet and the copper line between my property and the cabinet is only around 50m.
The DC power connection on the back. You mention you could use a UPS on the AC side and supply the DC side with power so you can do maintenance on the UPS. I think the DC port is designed so it can be supplied power from a UPS on that port. It makes a lot more sense to do this, as you don't have to invert the power to AC first, only for the power circuit in the UDM to rectify this to DC again (when powered by battery). You would get a lot higher efficiency by keeping it all just on DC (using a DC-DC converter) which means the UPS would be able to supply the devices for longer. Then you can use the AC connection for backup purposes in case you need maintenance on the UPS. I suspect you would need a Ubiquiti UPS for this to work though, but that would also fit in with their "eco-system". Another benefit of having the power supply externally is that you don't have the heat production inside the UDM itself. It would keep it a lot cooler.
That's true although as you say, it would need to be a UniFi UPS which isn't currently available. With a separate AC output UPS you'd get the same result by connecting it to eithee the RPS or the internal PSUs, while I haven't tested it, chances are that power will be drawn from both the internal PSU and the RPS whenever both are operational.
Perfect! I’m thinking about doing the same upgrade, from USG + US8150W + UCKG2+ to just a UDM Pro to simplify things. Shame it doesn’t have any PoE capability tho…
Woo! Almost all the way though, do I need such a box? Heck no! But it's one of your videos so... I wonder why it is called Dream Machine? If it had a built in Dreamcast now that would be a reason to buy 😄😄🌱🌱
Always enjoy your videos! Especially when I’ve got a USG Pro myself, been thinking if the upgrade was worth it. IPS and IDS would be nice as I can’t do that at the minute without a huge sacrifice on my 1G connection! Keep up the videos, even the movie long ones 😁
I think if you want a bit more control look at the mikrotik stuff , its not as fancy and they dont have a high end celling or wall AP , but its much more flexible . I switched myself from unifi to mikrotik and i could not be more happy.
I definitely like MikroTik stuff and use it in some situations. I feel that you do sometimes need to be a bit careful of their specs as they can be a bit misleading (for example their switches that advertise L3 features that are actually handled by the main CPU which is linked to the switch chip at 1gbit) but they can be a pretty solid option. In my particular setup here I really don't need loads of features, it's more about having something simple and reliable. I did actually consider moving to MikroTik however as you said, their AP options are extremely limited so I'd have still needed another vendor for that and there aren't many options out there for decent, affordable APs that can use a local controller.
in reguards to the cage nut sizes, oddly almost all gear i get in the use comes with the M6 cage nuts and screws, and then it will usually have 10-32 or 12-24 screws separately i think for round hole comm racks, maybe ubiquity just sends the one imperial size so the screws work in the common round hole racks?
While a larger cabinet is obviously an option, it would be a pretty disruptive process to replace it without really giving me much benefit. It's tight but everything fits fine, it doesn't waste cupboard space and once I get a PoE switch I can free up 1U of space by removing the injector.
Where would you recommend for similar super slim patch cables in the UK? I don't mind making the longer ones but I'm far too lazy to make 20 odd short ones 😂
But surely in the same way you can VPN in to see the network you can vpn in to see protect? Or port forward to access Protect remotely? I don't own unifi so I'm not sure but I don't see why it would be different.
You can definitely use the web interface for Protect over a VPN like that, the issue comes with the mobile app as it uses the remote access to set up the connection - you can't connect it to the NVR using an IP address. Unfortunately the web interface isn't great on mobile so I'd really need the app to get a decent experience. Hopefully they'll eventually add a way to connect to an NVR based on IP in which case I'd happily move the NVR onto the UDM.
Refreshing to hear you say this is for Small Business / High End home use. Too many reviewers claim this is Enterprise Networking kit (I'm looking at you TechFlow) - it's isn't - no network engineer working in an enterprise environment would even look at Ubiquiti.
I watch a lot of Lawrence Systems videos and they love Ubiquiti... switches and APs, and may deploy these where they best fit, but they would never deploy Ubiquiti routers for their enterprise customers for the very reason Cameron explained in this video
Hi Cameron, how hot does the temp get on the UDM Pro for you? Rack does seem very tight with limited airflow, is that a problem? I have a relatively empty rack and my UDM is still showing 54oC
Mine is running with a CPU temperature of 43c currently. It's not something I've ever had an issue with, the datasheet rates it operating in environments with ambient temperatures of up to 40c, networking equipment is generally designed to be packed into warm environments and is usually pretty resilient.
I briefly mentioned it later on when talking about remote access. The UniFi protect app needs remote access enabled, even if you are on the same local network. However, it is only possible to enable/disable remote access globally to the device so if I were to want to use UniFi Protect with the app on the UDM, I'd need to also enable remote access to my UniFi controller which is something I don't want to do from a security perspective. Therefore running them on separate devices is the only real option for me until Ubiquiti allow me to add a UniFi Protect device to the app based on IP address rather than it using their cloud services.
I am just starting to get into networking so I REALLY enjoyed this video. Thank you. Don;t rack setups get super hot though? I keep seeing videos with these closed in wall mount cases and I see no A/C whatsoever directed on the devices. Has cooling really come that far in recent years?
When it comes to heat, it comes down entirely to what equipment is installed. Electronic equipment turns almost all the power it uses into heat so you can almost look at the wattage and compare it to other things that produce heat. This wall cabinet probably only draws around 50w so you're essentially dealing with the heat output of a 60w incandescent light bulb. So not a huge deal in a cabinet of that size. The UDM Pro has a rated operating temperature of up to 40c so it's not going to get anywhere close that. Generally when you see small cabinets such as this, they're only being used for things like switches and routers which don't draw much power. These cabinets are often shoved in cupboards and corridors around buildings where it would be extremely impractical if they all required air conditioning. Servers on the other hand draw a lot more power so this is where cooling becomes more of a concern. The rack in my office only contains a couple of low power servers and a switch so even at full load you're still at under 200w of heat which is easy to deal with. On the other hand, in datacentres and server rooms, you can easily have 20+ servers in a single rack with a single rack feasibly drawing 2-4kW easily. So if you imagine reach rack as being equivalent to an electric heater, and you pack dozens of them into a single room, that's when you start needing serious air conditioning!
@@camerongray1515 Thank you so much for the in-depth answer. I actually started college recently for an associates in Networking, but I am still in Academics and haven’t started learning the actual stuff yet. I am so looking forward to it. Right now all I can do is build desktop PCs, which isn’t saying much for skill at all. It is my hope that I can learn and get out of trucking and into a career around computers. Anyway, thanks again for the answer. So routers and switches = not heat intensive, but if I decide to toss a server in the mix for NAS, then prepare for heat. Makes sense for sure.
It's a regional difference, in the UK, the network device is almost always pronounced as "rooter" in the same way that we'd pronounce the word "route" as "root" when talking about either network routes or travel directions. Here, "rowter" would be used to refer to the woodworking tool.
Spends first part of the video complaining about it ;) I don't really see why everyone is piling to UniFi gear, I'm sure they are great appliances but I'd rather go the server route to be honest and build what I want.
UniFi gear is great but it's often overhyped as the "ultimate most extreme network ever." I really like it but you're absolutely paying more and sacrificing some advanced features for simplicity and ease of use. The reason I'm currently using UniFi at home was to get experience of going the pre-made appliance route after years of self-build routers (which is also what I tend to work with professionally). That said, UniFi does have a very good place thanks to its simplicity - I've been able to recommend people to get UniFi equipment who have very limited networking knowledge and they've been able to buy it and get it set up without any help from me. On the other hand if I'd recommended they build a PFSense router and then separate APs and switches then I can guarantee that I'll end up being dragged in constantly to support them with it.
@@camerongray1515 Yeah makes sense. The only thing I was looking to buy from unifi was the wireless mesh systems and maybe a controller of some kind just to see when devices are taking the piss on my network. I'm finding it difficult to find a WiFi 6 system that I can monitor well in some webui or grafana for not crazy money. I have the tp link deco system at the moment and it's too locked down.
great video. i have a UDMPro, 24 port POE switch, and a couple Wifi6 AP's arriving tomorrow. soo excited to get it all set up. this video really helped me with what to expect
Great video Cameron. Didn't know about the backlink on the switch to the other SPF ports. This is reasons why I don't really like Ubiquiti routers yet, as an SDN, has very little configuration than a pfsense box
I used to really like ubiquiti gear, they still make some very good radios/antennas, but breaking changes in firmware that stop devices from being used in a way originally advertised and suffering abandonment with devices that still have years of useful life left mean I no longer use them. I switched to Mikrotik years ago and haven't looked back. Mikrotik is not without it's own issues and does come with a learving curve, but the one thing I really like is the unifed use of RouterOS across all but a small range of switches. Plus devices over 10 years old are still getting software/firmware updates along with access to features in current releases of RouterOS. Depending on the size of the network, almost any device can act as the Wireless controller for centralised managment, plus the core RouterOS is like a swiss amry knife when it comes to networking features. It's not a direct competitor for the UniFi gear based on features but I'll take the flexability and long term support any day.
Hi can you help me. I had a lease line fitted yesterday and BT left me with a ADVA FSP 150-GE102PRO. They said you have 1GB but now you need to get your own modem and configure it yourself. I have no idea what to buy to have internet.
You won't need a modem but depending on what you're using the connection for you'll likely need to connect the ADVA to some sort of switch or router. Likely a router assuming you just want to use it like a regular internet connection. You should be able to get the appropriate IP address configuration data needed to configure your router from your provider. Alternatively your provider likely offers a "managed" service where you'd pay extra to have them supply a router and manage it for you.
@@camerongray1515 thanks. I was looking for a router that had 6 POE+ ports and I can’t find anything. Am I missing something. A switch has no interface for me to enter their settings I can find is a dream machine pro and then another net gear switch which has 6POE+ ports to power my 4 ubiquti AC HD PRO access points which all required POE plus for power.
At that point you'd be better off going for a separate router and a suitable PoE switch for the APs. Either that UDM Pro and Netgear option or you could get a UDM Pro and UniFi switch which would probably cost a bit more but means that you'd be able to manage the switch through UniFi. I wouldn't get too hung up on a router with suitable ports, it's often better to have separate specialised devices than a single device that claims to do everything.
Hi Cameron, did you notice some performance increase on Protect not having Network running alongside on the CKgen2+ ? Thanks for the always great videos, can't wait for the second part of the overkill multiroom setup at your friend's place :p
Good luck if you've left auto-optimise on :) I had that on my self hosted controller for ages and all of a sudden a firmware update to APs meant that at 3am not every day, not even every week but every now and again (which I hated more than anything cause hard to diagnose) one or more APs would go into a strange state where clients were connected but had no network access. Sometimes powercycling them via PoE would work but 50% of the time I was having to factory reset them. Just something to watch for if you get hit by it.
As an IT Contractor in the UK We use the UDM Pro on multiple sites and are more than happy with how it works as its a fantastic product and in my opinion im perfectly fine not having it connect to a centralised cloud controller as we prefer to have more on site controllers and then backup to an external server. However cameron i will more than happily take your unifi security gateway pro off your hands to replace my dying usg 3p! one C to Another C : )
I have a similar set up to you and would like to upgrade my USG-Pro, so that I can get IPS with my 1 Gig connection, but I think I'll wait for the rumoured USG-Pro replacement rather than the UDP-Pro
I explained this in more detail in the video but with the new UniFi OS, you can only enable/disable remote access globally on a device rather than per application like it used to be. I need remote access enabled to use the UniFi protect app for my cameras but I don't want it enabled for my UniFi Network management therefore I need to run UniFi protect on a separate device (i.e. the CloudKey Gen2 Plus)
Liked the video and didn’t mind the length, thanks for pointing out the dream machine’s 8 ports share the 1gb to the router, I didn’t know that. The way you hooked up your switch above it, it’s still 1gb too right? Guess I need to get mine hooked together with the 10gb ports, have you? I see it’s been over a year now.
I haven't yet got around to uplinking it at 10gbit as I'd need to also upgrade the switch to something with SFP+ to be able to do that. It's not likely to be a huge benefit to me since the only time you'll notice a difference is if you have a lot of traffic flowing between VLANs of you have an internet connection >1gbps, without this there isn't really a huge reason to upgrade since any traffic between devices on the same VLAN will be handled directly by the switch and won't need to pass over the link to the UDM. As for the "switch" above - it's an 8 port PoE injector so it doesn't actually "uplink" to anything, cables from the switch below are just patched through it to the patch panel for devices that require PoE - basically imagine it as being 8 separate PoE injectors in a single box.
Cameron, I know you said it was going to be a rant on Ubiquiti about needing a profile for setup the unit but Bro…. You bring up a lot of valid points especially when you talk about setting these up for clients. Dude always enjoy your videos, keep them coming!
Only Ubiquiti can really answer why it has that limitation although I haven't but what sort of hardware does your ISP provide? Some sort of 2.5GBase-T ONT with an RJ45 connection? If the ISP's hardware doesn't support a 10gbit interface, you may be best off picking up a small switch that support both the 2.5gbit connection from your ONT and has a 10gbit SFP+ uplink then put this in between your ISP's equipment and the UDM Pro's WAN port.
Congratulations on purchasing your UDM ! As you don't really own it even though you purchased it (comply with our Ts&Cs NOW) you must log in to our spy servers and give us your personal information to use it! Unauthorised modification is strictly prohibited !
I’m very new to this so forgive my ignorance but the big rectangular plug on the back for external power supply, when I see other people who have a backup power thing in their racks where if the power does down it gives them time to be able to shut down their system safely, is that the port where an external power supply like that would plug into?
The device you're thinking of is a UPS which contains batteries to sustain power in the event of an outage. The port on this is for a UniFi RPS which is a redundant power supply, it doesn't contain any sort of batteries to keep the power on, it will still need some sort of AC feed, it's more intended to let you power the equipment from two different sources so if one circuit or supply goes down the equipment will stay up. Of course there's nothing stopping you plugging the equipment (or the RPS for that matter) into a UPS.
I actually just discovered this the other day while preparing for a future video where I'm setting up a backup WAN but needed a second RJ45 WAN port. I was all set up to use an RJ45 SFP module before I found it! Definitely a welcome improvement since for the vast majority of users, a pair of SFP+ LAN ports to uplink to switches is likely significantly more useful than an SFP+ WAN port.
Looks like you re-entered the network data. I thought you could restore previous backup and restore to save steps with WI-FI, networks, vlans and such which saves time. Did you try that?
You definitely can restore it from a backup, I just chose not to because I wanted to set it up from scratch again as my previous config was pretty old and messy.
Yeah the 200£ second power input to cover your RCD ops moments, agreed not worth it - be easier for a small UPS to cover the few mins for you to flip the RCD back.
Interesting video ! I think uniFi had/has a Pretty Good product line I Hate The Account BS To But I just Use a Couple of Ap's & I Have a Controller on one of my home Server'sI I Thought about Getting a USG Pro & Or a udm Pro But Decided To Just Keep Using PfSense An Even UniFi Cant Compete With That & I Was Wondering What You Thought About PfSense Vs UniFi/Usg Pro Ext! I Think It Would Be Interesting To Hear !
I feel that more feature packed router options like PFSense, VyOS, EdgeRouters, Cisco, Juniper, Mikrotik.etc serve a different use case to a device like a UDM or USG. If you need advanced features or a large amount of flexibility then those conventional routers are likely a better option although the downside is that they are more complex to manage than the UniFi options. If you just want something extremely set and forget that is quick to manage then a UDM/USG is an excellent choice but I wouldn't use them where I need advanced routing features beyond NAT, basic firewalling, DHCP server, DNS forwarder.etc. I talked about this towards the end of the video but where I'd see the UDM/USG as ideal is in high end home settings or small businesses/hospitality settings who otherwise would be fine with the features offered by a basic "all in one" router but just want something a bit more robust/higher performing. In a more advanced office where you may need to terminate a bunch of VPN tunnels, do dynamic routing or have multiple routers in a high availability setting, you'd almost certainly outgrow a UDM/USG very quickly. In particular, The UDM would be great if I was setting a network up for someone who wants something reliable and good performing where they aren't hugely technical but want to be able to run it themselves day to day - say someone with large home where they want multiple APs but they really don't care about fancy network configuration although they may want to, for example, have a isolated IoT, CCTV and guest networks. I'd be fully confident in putting in a UDM with some UniFi Switches and APs, giving them a tour of the UniFi web interface or mobile app and let them handle everything themselves with maybe some minor support over the phone/messaegs. The same person would probably have an absolute nightmare trying to manage a more conventional network where they have to log into several different devices and manually configure VLANs and trunks through the network and I don't really fancy trying to talk someone through changing PFSense/managed switch settings over the phone!
@@camerongray1515 Well I Would Totaly Agree With The Trying to walk someone through PfSense Over The Phone That Would Be A Real Pain I Would Bet & I watched all the video but just missed a min or to i guess ! But I am a Pc/Server tech Nerd/Enthusiast & Just Like To Learn PfSense Has A Hell of a Learning Curve But Once you Get It Then Theirs no going Back..I Had Trouble with a port for Years be for Finnally Getting It Sorted out..& Yes I Said Years To Sort Out like 2-3 But I am just a fan of pfsense But I Kinda Wanted to Get a USG Pro Just To Try To See What was What But I Relly Want Control Over All My Devices Like 6-8 ipads/phones & Craptop & Then Like 5 Servers 3 are Dual Xeon And 3 medium to Hi end Gaming pc's from a X99 to a Ryzen 9 So I dont Think my Dell R210 II with a Quad core Xeon & 8Gb of Ecc ram+ 64Gb ssd Is Really To Overkill..lol. + a Fuw Other Goodys so i Run a pretty Distinct Network & That Still Dont Include my 10Gb Network with a 24 port Sfp+ Switch An I Also Use a isolated IoT Network & a Guest Network !An Again I Realize I Am Not a Normal User Either ! ..Cool Video btw !
Hi Cameron, thanks a million for this video. I own a UDM and curiously I have an "issue" that also seems to happens to you: in min 00.58:19 you can presumably see your WAN IP address (which you blurred), which I guess has the typical IPv4 format (00.00.00.00). BUT, in min 01:01:00 in another menu your WAN IP address has a complete different format. Do you know why it is this way? Are they two different addresses or the same address written in two different formats?
@@pineappleroad After some research, yes, that one is an IPv6 address. Whether or not it's the same IPv4 address converted to IPv6 "format" or a secondary IP address (some ISP provides two IP at the same time) I couldn't say. In my case it was that my carrier was providing me an IPv4 address as well as a IPv6 one. Cheers Pineapple!
I've always wanted the UDM pro but could never justify the cost...i do hate that i *have to* register an account though, i feel like Ubiquiti is going to know too much about the networks out there.... almost Google, Microsoft, and Apple level of overlord... but maybe one day i can convince my boss to splurge and get this so i can properly setup our small office
I've just bought a UDM pro, but as far as I can see, the ubiquiti UI account is only required for the initial setup. Once that's done, you can set up a local admin user, and in theory never have to use the UI account again? I'm also led to believe that you can opt out of the sending of logging info to Ubiquiti, so they shouldn't be able to get too much info off you?
As far as I'm aware with the newest firmware version you can once again set it up without an account. The issue with requiring an account for setup of any product (not just UniFi) is that you are then tied to the manufacturer to set that device up. If the manufacturer were to go out of business, close their cloud service down or chose to no longer support a device, you could end up in a situation where it would be impossible to set up the device that you own after a factory reset.
It's from fs.com, think it's made by a company called ONV but branded as an fs.com own brand product - I made a video about it here: ua-cam.com/video/o3LG_E2Dml8/v-deo.html. Very happy with it, only downside is that it's unmanaged so can't control outputs or read data from it.
It's a router rather than just a switch so for the power available, £300 is a very reasonable price compared to alternatives. The built in switch is just a bonus extra, my perception of the value wouldn't change even if it only had a single gigabit LAN port, you'd almost always connect something like this to a larger switch.
It's VDSL2 so gets 76mbps down, 20mbps up. It's not all about raw internet connection speed, using decent equipment allows fast LAN transfers and overall stability/reliability.
Great video. Loving the setup. Currently rebuilding my own cabinet ATM. Noticed the earth cable - where is this connected from going to the door frame? Thanks
It just runs between the door and the main cabinet to ensure they are both bonded. In some situations, the rack may need to be earthed in which case that cable will ensure both the cabinet and door are electrically connected. However, in my situation there is no need for me to explicitly bond the cabinet to earth, this would only be needed in certain environments around interference protection or if it was housing some sort of electrical gear with exposed single insulated wiring, but it's not required for basic networking hardware in a domestic install. I've seen bonded racks in datacentres, but never for a small wall comms cabinet in homes/offices.
@@camerongray1515 Okay. My new cabinet arriving this week. I saw in the details, it has an earthing cable but I don’t have anything earthed ATM and when I saw you had used an earthing cable, I was Hmmm. Just connect the door to main cabinet frame?
Only came across your Channel today. I’m based West of Scotland and use UniFi for everything. How are you finding your UDM Pro, now that you’ve had it for a good few months? I see you had a few bug bears. 😂
The original earth cable was there from the factory. The UniFi kit is good, just need to be aware of the limitation of the UDM as a router, for me that has mainly been the inability to add static entries to the DNS resolver but if you're expecting to do any sort of advanced routing or running VPN servers/clients you may run into limitations. Feature wise you'd be best to view it as a very good quality home router rather than comparing it to higher end enterprise routers.
Depends what you're doing really, it would work fine as long as you're aware of the 1gbps link - so if you had a separate switch linked over 10gbit or you were doing inter VLAN routing, traffic from your APs would be constrained to the integrated switch's 1gbps uplink. Although if all you're doing is connecting out to the internet over a connection 1gbps or less you'd be fine. Also just bear in mind that the integrated switch doesn't support PoE so you'd need external injectors.
Sure it's DSL although it's VDSL2 which is around 76mbps down, 20mbps up and up until recently (when my cabinet was upgraded to support G.Fast at around 300mbps down) was the fastest connection I could get in this area. There's more to a network than just the raw internet speed, I have all of this largely for stability and reliability - I want my devices to be wired wherever possible to reduce the amount of devices fighting for WiFi bandwidth and want a system that's overall stable and reliable. Even a lot of small-medium offices will have sub-100mbps connections, yet that doesn't mean they don't need decent networking hardware.
It's fairly common in the UK, even the 300mbps G.Fast service is basically DSL. Although it's fibre to the cabinet - fibre to a DLAM in the distribution cabinet in the street and then DSL into the property so it's able reach higher speeds than ADSL where the DSLAM is further away in the telephone exchange.
If I was buying it now I'd probably go for the SE (although I'd need to wait for it to be out of early access as they do not allow people to produce videos on early access products). As for upgrading to it from my standard UDM, it could maybe be worthwhile from the perspective of being able to produce a video on it to recoup some of the costs but it's probably not worth it for me otherwise (the only benefit it would give me would be the built in PoE ports). I'll see in the future but I can probably see myself moving to a different platform entirely rather than moving to a UDM Pro SE
This is a ridiculously long video - I have added timestamps to the video description (and seek bar on some platforms) - feel free to skip to the parts that interest you.
Buy the UDM-Pro on Amazon (Affiliate):
UK - amzn.to/3euoq2i
US - amzn.to/3h4pgEy
Just out of interest how many devices do you have in total on the network?
Is it a home or business environment?
Just a home network, probably around 20 devices at most but not all in use at the same time
I’m waiting for the day a Camerongray video exceeds the runtime of the Lord Of The Rings Trillogy Extended Edition 🤞
I swear I surprise myself every time with the length! I basically ramble into a camera for a few hours then the final length ends up being a fun surprise while editing.
@@camerongray1515 lol I'm just as bad tbh
Brilliant video as always, glad to see the OR modem still going. I bought one after your original network tour and it's been brilliant.
Fancy seeing you here!
Requiring a UI account is the very reason why my company ditched all ubiquiti gear. It sucks because aside from that, it has been flawless.
Unifi stuff has always been awful. Laggy, buggy and totally insecure.
Thanks as always for your network videos. Learned so much more about the udm pro from your content than any other video I've seen. Your in depth assessment is much appreciated and will very much influence my own network when I get it up and running.
I was terrible at I in school, but this stuff still really interests me. Very tempting to do what you've done and build my own home network
Top video. So refreshing to have someone other than a bubblegum youtuber talk about real world application of this product!
If the icon is wrong then select “Report wrong icon”. It will then allow you to select a different icon.
I have a Unifi setup at my parents house and as I live on a different continent I find that having the remote management can actually be pretty useful, especially as Unifi don't offer a SSL VPN as an option (I live in China and other kinds of VPN's just get blocked instantly by the great firewall), I really wish they would offer one (and from my research so does /r/ubiquiti
The new UI is great, but I agree it's lacking too many features, simple stuff like setting your internet connection speed wasn't there when I last used it, even though they have a fancy visualisation graph which was always maxed out as the default was something stupid like 2mbps.
Great video though btw, I always like seeing your setups :)
Would’ve been better to spend the money on the 24 port POE switch (non-pro) then get the udmp later especially as you aren’t getting rid of the cloud key anyway.
Probably not for me to be honest since it wouldn't really make a difference over my existing setup except for letting me manage PoE vs using the external unmanaged injector. Going for the pro switch with a UDM would give me a 10gbit uplink to the UDM for better inter-vlan performance. I also just wanted to try the UDM out and make a video on it.
@@camerongray1515 yeh I know, the pro version is a huge price hike mind. Your rack will certainly benefit from dumping that POE injector though.
At least the pro would give some sort of performance improvement, for me, over £300 to replace a perfectly good PoE injector and get back 1U of rack space I don't really need for anything else doesn't seem like a particularly big benefit.
@@camerongray1515 have just bought the 24 poe (non pro). Got £70 on eBay for the UniFi 60w I was using, just need to sell the gen 1 24 port switch and that should account for over half the cost of the new switch.
Another great video. New to Unify but long time in networking installaing and designing most of the major brands in the market. With my new home I thought I would see what Unify is all about and decided to purchase a couple 8 Port POE lite, a 24 POE and 2 WIFI 6 Lite. I got these over a month a go and now just getting to the setup.
Was going through the intial setup for controller, and it appears Unify requires java 8 which has security concerns. Is there a way around this for Mac Big Sur users that have 11.3.1 installed? It would make sense for a company that had this data breach taking additional measures to further secure their application and requirements so home users and businesses are less volunerable. I really do not want to have to setup a VM just for managing these devices. Any suggestions is greatly appreciated.
Needing Java 8 is definitely annoying, personally I'd run the controller in a VM or on dedicated hardware like a Raspberry Pi. While you can technically run it on a regular workstation, it's definitely designed to run on a dedicated OS install so I'd rather not run it on my main machine due to the dependencies and services it runs. You'd also need to take care to backup and restore the controller config if you ever moved to a new Mac or you'd have to set it up again from scratch, this is why I'd rather just keep it on a dedicated device.
@@camerongray1515 Thanks Cameron. Any flavor of Raspberry Pi you using that is working well?
I'm not using a Pi personally since the UDM has a built in controller and in other environments I run it in a VM on servers but you'd be fine with either a 3B+ or 4. I ran it years ago on an original model B, absolutely go for something better nowadays but it clearly doesn't need much if it was fine on that. I'd also recommend getting an "industrial" SD card as these are designed for heavier use than a cheap one designed for photos - I've found the UniFi controller to be pretty tough on SD cards so using a durable one is probably a good idea.
I had some ideas about home network systems
The new Dream Machine Pro SE turns the 8 ports into POE. Its always out of stock though..
MAN! every time u have to put a patch panel between 2 witches. NOT on top to bottom of them. Try It. YOU will see how better is.
... and one more. If you want your rack to look good. Turn around POE Switch - and can make little rearrange on patch panel cable.
While that is true for two switches, I only have a single switch. The other device is a PoE injector which is patched in between the switch and patch panel for certain connections that require PoE therefore it it better in its current location, otherwise cables would have to hop over the patch panel to go between the switch and the injector.
hi Cameron, Thanks for this video. Very helpful. Out of curiosity, would you be able to use a regular sfp cable between the sfp port of the switch and the sfp port of the usg/udm? Perhaps there is a way to configure usg sfp port as LAN1?
Solution figured out: You have to first disable the LAN port on the usg/udm. Then it let's you configure WAN2 to LAN1. This is hidden until you disable. Then apply settings, unplug LAN ethernet, then plug in sfp port, and then magic happens.
My ISP is Vodafone in the UK and I currently have FTTC Fibre 2 connection (as FTTD is still not available in my area), Ive been running 4x Ubiquiti AP's for a few years just hung off the crappy Vodafone Router and I have Unifi Controller running on a computer. I would like to upgrade to a UDM Pro SE and retire the software controller and I'm wondering if I can get rid of the Vodafone router too and use the UDM Pro SE. Do you think this is possible?
very practical information thanks video👍💯
just bought a patch panel what size labels are the ones you use they look very clean , any advice on what to buy would be great
Those labels are just pieces of paper that slide inside a plastic holder on the patch panel. I used the table tool in Microsoft Word to create the exact size grid to line everything up. If you need adhesive labels then you could either use printer label paper or a label printer such as the one I featured in a recent video on my channel
@@camerongray1515 nice thanks for the reply just want it to look neat like yours cheers 👍
Cameron, would there be any downside to using the FSP+ port on the UDM pro to link to the switch? I know the switch isn't 10 gb but wouldn't the only effect be freeing up a port on the UDM pro? just thinking about this for my network
There wouldn't be any real downside other than the cable being more expensive. Only thing to take care with that I've heard from others is that with a DAC cable you'll need to manually set the port on the UDM to 1gbps as the autonegotiation apparently has issues with a 1gbit switch over a DAC cable
Hi Cameron,
I have BT broadband at home, through a DSL connection like you. However I have one of BTs WiFi routers which they send you with the subscription. How would I change this to just a modem which I could then connect to the UDM Pro - taking an Ethernet out of the lan port on the existing router doesn't seem ideal.
It really comes down to the particular connection you have, if it's a VDSL2 connection like mine (which it would be if you have a 36mbps or 80mbps plan) you could just get an Openreach modem like mine from eBay pretty cheaply, connect it to the UDM and set up the WAN port for PPPoE with your PPPoE username and password. If your connection is ADSL (under 24mbps) or G.Fast (over 80mbps) you'd need a suitable modem although I don't really have any particular recommendations for those.
what's the point of a 10G uplink in the UK? Scotland/UK doesn't have 10GB broadband... highest is 1GB?
These are designed for use worldwide and in business settings where connections beyond 1gbps are available, it's not something I need personally of course but it makes sense for Ubiquiti to include it. As for the uplink to a switch - this can make sense even with a sub 1gbps internet connection as you may have LAN traffic that needs to traverse between different VLANs, at this point the traffic will need to go via the router so having a 10gbps uplink can be worthwhile.
@@camerongray1515 Ahhh right, that summed it up, Im new sub, as you're videos have been helping me, im getting a rack setup soon in my Loft (attic) for USA viewers lol.
Why does no one put a dac into the 10g wan port and run rj45 to their modem?
I can't see why you can't but unless your modem has a 10gbit port I can't see a reason to. In my case, the modem only has a 10/100 port so chances are it wouldn't even work with a 10g Base-T SFP+ module
@@camerongray1515 okay I'm not a huge Network guy. That's sorta why I bought the equipment, so I could learn. AND future proof and whatever.
But I have a 1200 Mbps down connection so I planned on using the 10g wan port with an sfp from ubiquiti plugged into it. But seeing no one else using that is stressing me out a bit making me think I'm missing something. My modem does have a 2.5g Ethernet port that it'll be plugged into..
If your modem has a 2.5gbit port I'd probably wait and get the UDM-Pro SE which natively has a 2.5gbit WAN port. You may be able to use an RJ45 SFP+ module but you'd need to find one that definitely supports 2.5gbit which might be a bit fiddly. The other option would be to get a small switch that has both a 10gbit SFP+ port and a 2.5gbit port and put it in between the UDM Pro and your modem
@@camerongray1515 wow. You were right. The ubiquiti SFP I bought didn't support auto negotiation down to 2.5. Ah man. Well I ordered a new one that had great reviews from people trying to do the same thing as me.. you saved me a lot of headache man. I really appreciate your help.
Too many adverts
I just let UA-cam auto place them, in fact, on this video I removed a couple that got in the way of the timelapses. I don't want to fiddle with them too much in case it negatively impacts the performance of the video.
You can turn that off dude you can disable cloud access to your stuff dude it's in there it's in the main settings of the router you just disable cloud access you can't access that network controller from the cloud
I turned off remote access later in the video, my concern isn't about it existing, it's just that I don't like that it enables it by default and especially don't like the fact that logging into a Ubiquiti account is enforced. This isn't really about the remote management, it's about the fact that by requiring a login during the setup process, the device is inherently tied into Ubiquiti, so if Ubiquiti drop support, go out of business or stop running the servers that handle that login process, the device could essentially be useless if it was ever factory reset.
I saw on twitter someone with an OG Unifi AP that's now "EOL", you can't adopt it to the controller anymore or configure it if it's already there. It's just a brick basically. You need to self host an old version of the controller to use EOL UBNT devices and prevent it from updating, but that also means you won't be able to use newer devices on that controller at the same time I suspect. Thankfully the Unifi AP can run OpenWRT. I imagine the UDM-P will just stop receiving updates when it's EOL as it's got it's own controller but if they're heavy handed enough to stop older devices working on newer controllers I'm not so sure.
Requirement for online access and UniFi account is simply ridiculous - what the actual f**k?! A strange crap like this is the reason why I happily stick with a Mikrotik network products in this price segment for semi-professional installations.
55:50 If you have really a fiber connection to your provider is 16.5 ms very bad. I have around 70 km over air to my fiber provider with 2 till 4 ms - where mean 4 ms is *bad time* . My provider stay direct at the international internet exchange connect station - so fun fact that Google NY is faster as the national Google exchange knots.
Your next international internet exchange connect station should be London, England, UK - they connect directly to your provider. But here Unifi tests only to your provider hardware - then 16.5 ms shows that you use a very slow VDSL2 (or ADSL2) connection only. Typically VDSL2 connection should be 10 ms till 12 ms - not more. Problems can be too old hardware - also your bridge (You can't use a Modulator/Demodulator [short modem] for raw digital connections!), the bridge at your provider, or your bad double cable between. Typical VDSL2 connections are maximum 2 km short. As DIY worker you can replace it with a Cat5a or better cable till the outside connector - mostly this are old telephone lines. This helps in 85% ...
It's not a fully fibre connection, it's a VDSL2 fibre to the cabinet connection. I have since moved to a G.Fast connection which is still FTTP and a type of DSL but is much faster due to more advanced equipment in the cabinet and the copper line between my property and the cabinet is only around 50m.
The DC power connection on the back. You mention you could use a UPS on the AC side and supply the DC side with power so you can do maintenance on the UPS.
I think the DC port is designed so it can be supplied power from a UPS on that port. It makes a lot more sense to do this, as you don't have to invert the power to AC first, only for the power circuit in the UDM to rectify this to DC again (when powered by battery). You would get a lot higher efficiency by keeping it all just on DC (using a DC-DC converter) which means the UPS would be able to supply the devices for longer. Then you can use the AC connection for backup purposes in case you need maintenance on the UPS. I suspect you would need a Ubiquiti UPS for this to work though, but that would also fit in with their "eco-system".
Another benefit of having the power supply externally is that you don't have the heat production inside the UDM itself. It would keep it a lot cooler.
That's true although as you say, it would need to be a UniFi UPS which isn't currently available. With a separate AC output UPS you'd get the same result by connecting it to eithee the RPS or the internal PSUs, while I haven't tested it, chances are that power will be drawn from both the internal PSU and the RPS whenever both are operational.
Omg cant understand what you talk about :)
Perfect! I’m thinking about doing the same upgrade, from USG + US8150W + UCKG2+ to just a UDM Pro to simplify things. Shame it doesn’t have any PoE capability tho…
did the same upgrade, but with the udm pro se - keeping my us8150w - the se has lite poe features, enough for nvr and 2,5 gb wan uplink
Woo! Almost all the way though, do I need such a box? Heck no! But it's one of your videos so... I wonder why it is called Dream Machine? If it had a built in Dreamcast now that would be a reason to buy 😄😄🌱🌱
Always enjoy your videos! Especially when I’ve got a USG Pro myself, been thinking if the upgrade was worth it. IPS and IDS would be nice as I can’t do that at the minute without a huge sacrifice on my 1G connection! Keep up the videos, even the movie long ones 😁
I think if you want a bit more control look at the mikrotik stuff , its not as fancy and they dont have a high end celling or wall AP , but its much more flexible . I switched myself from unifi to mikrotik and i could not be more happy.
I definitely like MikroTik stuff and use it in some situations. I feel that you do sometimes need to be a bit careful of their specs as they can be a bit misleading (for example their switches that advertise L3 features that are actually handled by the main CPU which is linked to the switch chip at 1gbit) but they can be a pretty solid option. In my particular setup here I really don't need loads of features, it's more about having something simple and reliable. I did actually consider moving to MikroTik however as you said, their AP options are extremely limited so I'd have still needed another vendor for that and there aren't many options out there for decent, affordable APs that can use a local controller.
in reguards to the cage nut sizes, oddly almost all gear i get in the use comes with the M6 cage nuts and screws, and then it will usually have 10-32 or 12-24 screws separately i think for round hole comm racks, maybe ubiquity just sends the one imperial size so the screws work in the common round hole racks?
Get a bigger cab, a couple of 1U Linkbasic cable managements and use standard 1m patch leads.
While a larger cabinet is obviously an option, it would be a pretty disruptive process to replace it without really giving me much benefit. It's tight but everything fits fine, it doesn't waste cupboard space and once I get a PoE switch I can free up 1U of space by removing the injector.
Where would you recommend for similar super slim patch cables in the UK?
I don't mind making the longer ones but I'm far too lazy to make 20 odd short ones 😂
But surely in the same way you can VPN in to see the network you can vpn in to see protect? Or port forward to access Protect remotely? I don't own unifi so I'm not sure but I don't see why it would be different.
You can definitely use the web interface for Protect over a VPN like that, the issue comes with the mobile app as it uses the remote access to set up the connection - you can't connect it to the NVR using an IP address. Unfortunately the web interface isn't great on mobile so I'd really need the app to get a decent experience. Hopefully they'll eventually add a way to connect to an NVR based on IP in which case I'd happily move the NVR onto the UDM.
Refreshing to hear you say this is for Small Business / High End home use. Too many reviewers claim this is Enterprise Networking kit (I'm looking at you TechFlow) - it's isn't - no network engineer working in an enterprise environment would even look at Ubiquiti.
I watch a lot of Lawrence Systems videos and they love Ubiquiti... switches and APs, and may deploy these where they best fit, but they would never deploy Ubiquiti routers for their enterprise customers for the very reason Cameron explained in this video
Hi Cameron, how hot does the temp get on the UDM Pro for you? Rack does seem very tight with limited airflow, is that a problem? I have a relatively empty rack and my UDM is still showing 54oC
Mine is running with a CPU temperature of 43c currently. It's not something I've ever had an issue with, the datasheet rates it operating in environments with ambient temperatures of up to 40c, networking equipment is generally designed to be packed into warm environments and is usually pretty resilient.
I may have missed it somewhere in the video, but how come you are still using the cloudkey gen 2+, when the udm-pro has unifi protect built in?
I briefly mentioned it later on when talking about remote access. The UniFi protect app needs remote access enabled, even if you are on the same local network. However, it is only possible to enable/disable remote access globally to the device so if I were to want to use UniFi Protect with the app on the UDM, I'd need to also enable remote access to my UniFi controller which is something I don't want to do from a security perspective. Therefore running them on separate devices is the only real option for me until Ubiquiti allow me to add a UniFi Protect device to the app based on IP address rather than it using their cloud services.
I am just starting to get into networking so I REALLY enjoyed this video. Thank you. Don;t rack setups get super hot though? I keep seeing videos with these closed in wall mount cases and I see no A/C whatsoever directed on the devices. Has cooling really come that far in recent years?
When it comes to heat, it comes down entirely to what equipment is installed. Electronic equipment turns almost all the power it uses into heat so you can almost look at the wattage and compare it to other things that produce heat. This wall cabinet probably only draws around 50w so you're essentially dealing with the heat output of a 60w incandescent light bulb. So not a huge deal in a cabinet of that size. The UDM Pro has a rated operating temperature of up to 40c so it's not going to get anywhere close that. Generally when you see small cabinets such as this, they're only being used for things like switches and routers which don't draw much power. These cabinets are often shoved in cupboards and corridors around buildings where it would be extremely impractical if they all required air conditioning. Servers on the other hand draw a lot more power so this is where cooling becomes more of a concern. The rack in my office only contains a couple of low power servers and a switch so even at full load you're still at under 200w of heat which is easy to deal with. On the other hand, in datacentres and server rooms, you can easily have 20+ servers in a single rack with a single rack feasibly drawing 2-4kW easily. So if you imagine reach rack as being equivalent to an electric heater, and you pack dozens of them into a single room, that's when you start needing serious air conditioning!
@@camerongray1515 Thank you so much for the in-depth answer. I actually started college recently for an associates in Networking, but I am still in Academics and haven’t started learning the actual stuff yet. I am so looking forward to it. Right now all I can do is build desktop PCs, which isn’t saying much for skill at all. It is my hope that I can learn and get out of trucking and into a career around computers.
Anyway, thanks again for the answer. So routers and switches = not heat intensive, but if I decide to toss a server in the mix for NAS, then prepare for heat. Makes sense for sure.
Just got the UDM Pro SE today. Super excited!
Nice video. But a little bit much talking for my taste. 😀
Take a drink every time you hear the word “rooter”
It's a regional difference, in the UK, the network device is almost always pronounced as "rooter" in the same way that we'd pronounce the word "route" as "root" when talking about either network routes or travel directions. Here, "rowter" would be used to refer to the woodworking tool.
Spends first part of the video complaining about it ;) I don't really see why everyone is piling to UniFi gear, I'm sure they are great appliances but I'd rather go the server route to be honest and build what I want.
UniFi gear is great but it's often overhyped as the "ultimate most extreme network ever." I really like it but you're absolutely paying more and sacrificing some advanced features for simplicity and ease of use. The reason I'm currently using UniFi at home was to get experience of going the pre-made appliance route after years of self-build routers (which is also what I tend to work with professionally). That said, UniFi does have a very good place thanks to its simplicity - I've been able to recommend people to get UniFi equipment who have very limited networking knowledge and they've been able to buy it and get it set up without any help from me. On the other hand if I'd recommended they build a PFSense router and then separate APs and switches then I can guarantee that I'll end up being dragged in constantly to support them with it.
@@camerongray1515 Yeah makes sense. The only thing I was looking to buy from unifi was the wireless mesh systems and maybe a controller of some kind just to see when devices are taking the piss on my network. I'm finding it difficult to find a WiFi 6 system that I can monitor well in some webui or grafana for not crazy money. I have the tp link deco system at the moment and it's too locked down.
great video. i have a UDMPro, 24 port POE switch, and a couple Wifi6 AP's arriving tomorrow. soo excited to get it all set up. this video really helped me with what to expect
Great video Cameron. Didn't know about the backlink on the switch to the other SPF ports. This is reasons why I don't really like Ubiquiti routers yet, as an SDN, has very little configuration than a pfsense box
I used to really like ubiquiti gear, they still make some very good radios/antennas, but breaking changes in firmware that stop devices from being used in a way originally advertised and suffering abandonment with devices that still have years of useful life left mean I no longer use them. I switched to Mikrotik years ago and haven't looked back. Mikrotik is not without it's own issues and does come with a learving curve, but the one thing I really like is the unifed use of RouterOS across all but a small range of switches. Plus devices over 10 years old are still getting software/firmware updates along with access to features in current releases of RouterOS. Depending on the size of the network, almost any device can act as the Wireless controller for centralised managment, plus the core RouterOS is like a swiss amry knife when it comes to networking features. It's not a direct competitor for the UniFi gear based on features but I'll take the flexability and long term support any day.
Hi can you help me. I had a lease line fitted yesterday and BT left me with a ADVA FSP 150-GE102PRO. They said you have 1GB but now you need to get your own modem and configure it yourself. I have no idea what to buy to have internet.
You won't need a modem but depending on what you're using the connection for you'll likely need to connect the ADVA to some sort of switch or router. Likely a router assuming you just want to use it like a regular internet connection. You should be able to get the appropriate IP address configuration data needed to configure your router from your provider. Alternatively your provider likely offers a "managed" service where you'd pay extra to have them supply a router and manage it for you.
@@camerongray1515 thanks. I was looking for a router that had 6 POE+ ports and I can’t find anything. Am I missing something. A switch has no interface for me to enter their settings I can find is a dream machine pro and then another net gear switch which has 6POE+ ports to power my 4 ubiquti AC HD PRO access points which all required POE plus for power.
At that point you'd be better off going for a separate router and a suitable PoE switch for the APs. Either that UDM Pro and Netgear option or you could get a UDM Pro and UniFi switch which would probably cost a bit more but means that you'd be able to manage the switch through UniFi. I wouldn't get too hung up on a router with suitable ports, it's often better to have separate specialised devices than a single device that claims to do everything.
Hi Cameron, did you notice some performance increase on Protect not having Network running alongside on the CKgen2+ ? Thanks for the always great videos, can't wait for the second part of the overkill multiroom setup at your friend's place :p
Good luck if you've left auto-optimise on :) I had that on my self hosted controller for ages and all of a sudden a firmware update to APs meant that at 3am not every day, not even every week but every now and again (which I hated more than anything cause hard to diagnose) one or more APs would go into a strange state where clients were connected but had no network access. Sometimes powercycling them via PoE would work but 50% of the time I was having to factory reset them. Just something to watch for if you get hit by it.
As an IT Contractor in the UK We use the UDM Pro on multiple sites and are more than happy with how it works as its a fantastic product and in my opinion im perfectly fine not having it connect to a centralised cloud controller as we prefer to have more on site controllers and then backup to an external server. However cameron i will more than happily take your unifi security gateway pro off your hands to replace my dying usg 3p! one C to Another C : )
I have a similar set up to you and would like to upgrade my USG-Pro, so that I can get IPS with my 1 Gig connection, but I think I'll wait for the rumoured USG-Pro replacement rather than the UDP-Pro
Why still use a cloudkey when you have a UDM PRO ?
I explained this in more detail in the video but with the new UniFi OS, you can only enable/disable remote access globally on a device rather than per application like it used to be. I need remote access enabled to use the UniFi protect app for my cameras but I don't want it enabled for my UniFi Network management therefore I need to run UniFi protect on a separate device (i.e. the CloudKey Gen2 Plus)
Liked the video and didn’t mind the length, thanks for pointing out the dream machine’s 8 ports share the 1gb to the router, I didn’t know that. The way you hooked up your switch above it, it’s still 1gb too right? Guess I need to get mine hooked together with the 10gb ports, have you? I see it’s been over a year now.
I haven't yet got around to uplinking it at 10gbit as I'd need to also upgrade the switch to something with SFP+ to be able to do that. It's not likely to be a huge benefit to me since the only time you'll notice a difference is if you have a lot of traffic flowing between VLANs of you have an internet connection >1gbps, without this there isn't really a huge reason to upgrade since any traffic between devices on the same VLAN will be handled directly by the switch and won't need to pass over the link to the UDM. As for the "switch" above - it's an 8 port PoE injector so it doesn't actually "uplink" to anything, cables from the switch below are just patched through it to the patch panel for devices that require PoE - basically imagine it as being 8 separate PoE injectors in a single box.
Fantastic video.
We are all a bad influence on your bank balance! We want you to get more network kit for more vids of this kind!
Cameron, I know you said it was going to be a rant on Ubiquiti about needing a profile for setup the unit but Bro…. You bring up a lot of valid points especially when you talk about setting these up for clients.
Dude always enjoy your videos, keep them coming!
They are @ss-Holes for requiring ui account for setup. This is very upsetting.
I would have placed the patch panel between the UDM Pro and the POE injector
You can report wrong icons and change them to what ever you want, i love my UDM Pro
i have a UDM PRO and My ISP can Upgrade My Connection to 2.5Gb bat The SFP+ WAN2 Port is Only 1Gb or 10Gb why cant I negotiate to 2.5Gb or 5Gb
Only Ubiquiti can really answer why it has that limitation although I haven't but what sort of hardware does your ISP provide? Some sort of 2.5GBase-T ONT with an RJ45 connection? If the ISP's hardware doesn't support a 10gbit interface, you may be best off picking up a small switch that support both the 2.5gbit connection from your ONT and has a 10gbit SFP+ uplink then put this in between your ISP's equipment and the UDM Pro's WAN port.
Congratulations on purchasing your UDM ! As you don't really own it even though you purchased it (comply with our Ts&Cs NOW) you must log in to our spy servers and give us your personal information to use it! Unauthorised modification is strictly prohibited !
The announced and SE model which is has everything we wanted from the start....
I’m very new to this so forgive my ignorance but the big rectangular plug on the back for external power supply, when I see other people who have a backup power thing in their racks where if the power does down it gives them time to be able to shut down their system safely, is that the port where an external power supply like that would plug into?
The device you're thinking of is a UPS which contains batteries to sustain power in the event of an outage. The port on this is for a UniFi RPS which is a redundant power supply, it doesn't contain any sort of batteries to keep the power on, it will still need some sort of AC feed, it's more intended to let you power the equipment from two different sources so if one circuit or supply goes down the equipment will stay up. Of course there's nothing stopping you plugging the equipment (or the RPS for that matter) into a UPS.
I've been setting up a UDM Pro recently, and it looks like you _can_ configure both SFP+ ports to be LAN, reconfiguring Port 8 for the backup WAN.
I actually just discovered this the other day while preparing for a future video where I'm setting up a backup WAN but needed a second RJ45 WAN port. I was all set up to use an RJ45 SFP module before I found it! Definitely a welcome improvement since for the vast majority of users, a pair of SFP+ LAN ports to uplink to switches is likely significantly more useful than an SFP+ WAN port.
This video is mental. Thanx!
Looks like you re-entered the network data. I thought you could restore previous backup and restore to save steps with WI-FI, networks, vlans and such which saves time. Did you try that?
You definitely can restore it from a backup, I just chose not to because I wanted to set it up from scratch again as my previous config was pretty old and messy.
Yeah the 200£ second power input to cover your RCD ops moments, agreed not worth it - be easier for a small UPS to cover the few mins for you to flip the RCD back.
£200
Someone get this man faster internet for this beautiful network!
Interesting video ! I think uniFi had/has a Pretty Good product line I Hate The Account BS To But I just Use a Couple of Ap's & I Have a Controller on one of my home Server'sI I Thought about Getting a USG Pro & Or a udm Pro But Decided To Just Keep Using PfSense An Even UniFi Cant Compete With That & I Was Wondering What You Thought About PfSense Vs UniFi/Usg Pro Ext! I Think It Would Be Interesting To Hear !
I feel that more feature packed router options like PFSense, VyOS, EdgeRouters, Cisco, Juniper, Mikrotik.etc serve a different use case to a device like a UDM or USG. If you need advanced features or a large amount of flexibility then those conventional routers are likely a better option although the downside is that they are more complex to manage than the UniFi options. If you just want something extremely set and forget that is quick to manage then a UDM/USG is an excellent choice but I wouldn't use them where I need advanced routing features beyond NAT, basic firewalling, DHCP server, DNS forwarder.etc. I talked about this towards the end of the video but where I'd see the UDM/USG as ideal is in high end home settings or small businesses/hospitality settings who otherwise would be fine with the features offered by a basic "all in one" router but just want something a bit more robust/higher performing. In a more advanced office where you may need to terminate a bunch of VPN tunnels, do dynamic routing or have multiple routers in a high availability setting, you'd almost certainly outgrow a UDM/USG very quickly.
In particular, The UDM would be great if I was setting a network up for someone who wants something reliable and good performing where they aren't hugely technical but want to be able to run it themselves day to day - say someone with large home where they want multiple APs but they really don't care about fancy network configuration although they may want to, for example, have a isolated IoT, CCTV and guest networks. I'd be fully confident in putting in a UDM with some UniFi Switches and APs, giving them a tour of the UniFi web interface or mobile app and let them handle everything themselves with maybe some minor support over the phone/messaegs. The same person would probably have an absolute nightmare trying to manage a more conventional network where they have to log into several different devices and manually configure VLANs and trunks through the network and I don't really fancy trying to talk someone through changing PFSense/managed switch settings over the phone!
@@camerongray1515 Well I Would Totaly Agree With The Trying to walk someone through PfSense Over The Phone That Would Be A Real Pain I Would Bet & I watched all the video but just missed a min or to i guess ! But I am a Pc/Server tech Nerd/Enthusiast & Just Like To Learn PfSense Has A Hell of a Learning Curve But Once you Get It Then Theirs no going Back..I Had Trouble with a port for Years be for Finnally Getting It Sorted out..& Yes I Said Years To Sort Out like 2-3 But I am just a fan of pfsense But I Kinda Wanted to Get a USG Pro Just To Try To See What was What But I Relly Want Control Over All My Devices Like 6-8 ipads/phones & Craptop & Then Like 5 Servers 3 are Dual Xeon And 3 medium to Hi end Gaming pc's from a X99 to a Ryzen 9 So I dont Think my Dell R210 II with a Quad core Xeon & 8Gb of Ecc ram+ 64Gb ssd Is Really To Overkill..lol. + a Fuw Other Goodys so i Run a pretty Distinct Network & That Still Dont Include my 10Gb Network with a 24 port Sfp+ Switch An I Also Use a isolated IoT Network & a Guest Network !An Again I Realize I Am Not a Normal User Either ! ..Cool Video btw !
Hi Cameron, thanks a million for this video. I own a UDM and curiously I have an "issue" that also seems to happens to you: in min 00.58:19 you can presumably see your WAN IP address (which you blurred), which I guess has the typical IPv4 format (00.00.00.00). BUT, in min 01:01:00 in another menu your WAN IP address has a complete different format. Do you know why it is this way? Are they two different addresses or the same address written in two different formats?
It appears as though the other one might be an IPv6 address, athough im not 100% sure
@@pineappleroad After some research, yes, that one is an IPv6 address. Whether or not it's the same IPv4 address converted to IPv6 "format" or a secondary IP address (some ISP provides two IP at the same time) I couldn't say. In my case it was that my carrier was providing me an IPv4 address as well as a IPv6 one. Cheers Pineapple!
the stars are your qr code for augmented reality view
I really enjoy all your content dude. Thanks for putting the time in to share these insights.
I've always wanted the UDM pro but could never justify the cost...i do hate that i *have to* register an account though, i feel like Ubiquiti is going to know too much about the networks out there.... almost Google, Microsoft, and Apple level of overlord... but maybe one day i can convince my boss to splurge and get this so i can properly setup our small office
I've just bought a UDM pro, but as far as I can see, the ubiquiti UI account is only required for the initial setup. Once that's done, you can set up a local admin user, and in theory never have to use the UI account again?
I'm also led to believe that you can opt out of the sending of logging info to Ubiquiti, so they shouldn't be able to get too much info off you?
As far as I'm aware with the newest firmware version you can once again set it up without an account. The issue with requiring an account for setup of any product (not just UniFi) is that you are then tied to the manufacturer to set that device up. If the manufacturer were to go out of business, close their cloud service down or chose to no longer support a device, you could end up in a situation where it would be impossible to set up the device that you own after a factory reset.
is it possible to share devices between normal and guest networks with the UDM-Pro?
Yeah, you can configure firewall rules to pass traffic between networks.
Hi Cameron - who makes your rack mount PoE injector? Are you happy with it?
It's from fs.com, think it's made by a company called ONV but branded as an fs.com own brand product - I made a video about it here: ua-cam.com/video/o3LG_E2Dml8/v-deo.html. Very happy with it, only downside is that it's unmanaged so can't control outputs or read data from it.
What network rack is this?
It's one of these: www.comms-express.com/products/datacel-6u-wall-mounted-data-cabinet-data-rack-390mm-deep/
Great video. Thank you for the work on this
Great video! Definitely excited to see a deep, low-level look into UnifiOS.
Has the PPPoE issue been resolved yet?
Do u not find its over kills 300 for a 8 port switch seems dear to me
It's a router rather than just a switch so for the power available, £300 is a very reasonable price compared to alternatives. The built in switch is just a bonus extra, my perception of the value wouldn't change even if it only had a single gigabit LAN port, you'd almost always connect something like this to a larger switch.
you have a link to your network rack ?
Best review of this, ever....
Now that was interesting thanks for the video :)
Great video! Thanks for the content! Great job!
So, dont get me wrong, but, all of this and you have a ADSL conection?
It's VDSL2 so gets 76mbps down, 20mbps up. It's not all about raw internet connection speed, using decent equipment allows fast LAN transfers and overall stability/reliability.
@@camerongray1515 Understood! Thank you!
Great video. Loving the setup. Currently rebuilding my own cabinet ATM. Noticed the earth cable - where is this connected from going to the door frame? Thanks
It just runs between the door and the main cabinet to ensure they are both bonded. In some situations, the rack may need to be earthed in which case that cable will ensure both the cabinet and door are electrically connected. However, in my situation there is no need for me to explicitly bond the cabinet to earth, this would only be needed in certain environments around interference protection or if it was housing some sort of electrical gear with exposed single insulated wiring, but it's not required for basic networking hardware in a domestic install. I've seen bonded racks in datacentres, but never for a small wall comms cabinet in homes/offices.
@@camerongray1515 Okay. My new cabinet arriving this week. I saw in the details, it has an earthing cable but I don’t have anything earthed ATM and when I saw you had used an earthing cable, I was Hmmm. Just connect the door to main cabinet frame?
Only came across your Channel today. I’m based West of Scotland and use UniFi for everything. How are you finding your UDM Pro, now that you’ve had it for a good few months? I see you had a few bug bears. 😂
The original earth cable was there from the factory. The UniFi kit is good, just need to be aware of the limitation of the UDM as a router, for me that has mainly been the inability to add static entries to the DNS resolver but if you're expecting to do any sort of advanced routing or running VPN servers/clients you may run into limitations. Feature wise you'd be best to view it as a very good quality home router rather than comparing it to higher end enterprise routers.
What is the speed of the BT modem that you are getting
It's a VDSL2 service so gets around 76mbps down, 20mbps up.
what about attaching just Access Points to the 8 ports?
Depends what you're doing really, it would work fine as long as you're aware of the 1gbps link - so if you had a separate switch linked over 10gbit or you were doing inter VLAN routing, traffic from your APs would be constrained to the integrated switch's 1gbps uplink. Although if all you're doing is connecting out to the internet over a connection 1gbps or less you'd be fine. Also just bear in mind that the integrated switch doesn't support PoE so you'd need external injectors.
Superb video Sir
How did you setup your dsl modem/router?
Did you set in bridge mode?
I have a basic modem with no router functionality so I connect to it through PPPoE.
@@camerongray1515 I tried this too but Im getting no internet connection.
So you have your modem set to PPPoE and then PPPoE on UDM too?
gotta respect this dude. such an overkill network for DSL internet.
Sure it's DSL although it's VDSL2 which is around 76mbps down, 20mbps up and up until recently (when my cabinet was upgraded to support G.Fast at around 300mbps down) was the fastest connection I could get in this area. There's more to a network than just the raw internet speed, I have all of this largely for stability and reliability - I want my devices to be wired wherever possible to reduce the amount of devices fighting for WiFi bandwidth and want a system that's overall stable and reliable. Even a lot of small-medium offices will have sub-100mbps connections, yet that doesn't mean they don't need decent networking hardware.
@@camerongray1515 wow that actually far better than i would have expected for DSL as you dont get anywhere close to those speeds in the stakes.
It's fairly common in the UK, even the 300mbps G.Fast service is basically DSL. Although it's fibre to the cabinet - fibre to a DLAM in the distribution cabinet in the street and then DSL into the property so it's able reach higher speeds than ADSL where the DSLAM is further away in the telephone exchange.
The udm pro SE is a nice upgrade
If I was buying it now I'd probably go for the SE (although I'd need to wait for it to be out of early access as they do not allow people to produce videos on early access products). As for upgrading to it from my standard UDM, it could maybe be worthwhile from the perspective of being able to produce a video on it to recoup some of the costs but it's probably not worth it for me otherwise (the only benefit it would give me would be the built in PoE ports). I'll see in the future but I can probably see myself moving to a different platform entirely rather than moving to a UDM Pro SE