Unifi Security Gateway - First Time Setup
Вставка
- Опубліковано 10 вер 2024
- In this video, I go over how to configure a Unifi Security Gateway for the first time. If you are unsure how to setup this device, just follow the steps in the video to get it running.
There is also a mobile app version of the controller software you can use instead of the PC-based controller, but I don't go over that in this video.
I don't go into any advanced setup or security features in this video (more videos on this coming). This video is just to show how to setup the device and add to the Unifi Controller software. I go through a few common menus for familiarity, but I don't go very deep into customization.
Device Overview: 00:25
Plugging in and booting up: 03:18
Accessing USG through web-browser: 04:46
Unifi Controller installation: 06:18
Configuring Unifi Controller: 08:00
Controller Overview: 10:51
Device-specific settings through controller: 14:28
Ending rambling: 16:56
It has been years I have installed the USG on a project. Now a new customer wants this to be installed on their tiny office, thankfully I came across your video! Thank you.
I like how you go straight to the point, makes your video so much better than others that I've seen. Great job!
Crisp. Thorough coverage in a short span with a low-key vibe, helpful visuals, and no filler. Thank you!
Toasty, your videos are my official Ubiquity training tool. No time wasting you just get to the point and quickly. I am getting a USG DM-Pro to replace ISA2006 for my company. Thank you. for your tutorials!
This may be the first time I have ever commented on a UA-cam video. I am doing so because this dude is awesome and needs to know if. PERFECT initial product tour/config video thanks
Thank you!
Beautifully explained. Very clear. thank you
Hello sir. I am watching you from Greece and I want to tell you that you are very helpful with all those videos.
Your channel achieves something I wanted to do even in my own language.
To inform the people while you do something you like.
Sorry for my English ,keep up the good work!
Definitely looking forward to your video regarding a more in depth configuration.
Thanks for taking the time to educate us. Happy New Year and stay safe.
I'm just in the process of taking the first steps into purchasing my first Ubiquiti network devices. I'm not that knowledgeable with networking and this has been a great starting point for me. Just subbed to you 👍
I own one of these, cloudkey, 5 Unifi AP's and while I find this device works just fine I prefer my Netgate SG-3100. I have to say it is kind of nice having the full eco system working with the USG , Switches and AP's. For most home users or small business it would be fine.
Thanks for explaining this as if you were explaining it to a 5 year old, perfect. Cheers.
Thanks mate! Needed! Apparently my unit got the wrong power supply, if it does that and console led is blinking, get the product replaced and it will work!
great job
Thank you for simplifying set up
very good video, thanks for the concise and detailed overview
Great and solid video - great information. Just subbed you.
Good job,easy to understand
Great run through and very clear
Great Video, Thanks....... Waiting on the in depth videos
Great job thanks Toasty, learn't a lot .
Great video! To the point!! Thank you
Hi Toasty, I'm planning to migrate from an edge router x to a usg. My current network is on 192.168.1.1/24 network. What do you think is the right thing to do?
Personally, I would consider the Dream Machine instead of the USG if you are looking to move to a Unifi device. However, I'm still partial to the Edgerouter and personally prefer it to the Unifi devices anyways.
The right way to go about it will largely depend on your network requirements and expectations.
and I click finish it didnt go to the next step. no errors as well.
Thanks for your video, but I am having a problem at an early stage. When you start the device in the browser, it conveniently states that "...Gateway is connected to the Internet" but I cannot work out how to make my device connect, no matter what WAN settings I enter. I thought this should be my router IP but that doesn't work? Could you advise please? Is it relevant that top LED is solid blue i.e. seemingly adopted?
Great video!!! Thanks for the info!!
I have a Spectrum Modem that the USG does not connect to so there is no internet and I can’t proceed. Top Settings bar is RED. I need to know how to tell the USG to look for an IP address coming from the Spectrum modem. I have IPv4, Submet, Default Gateway from spectrum modem. That’s it. Don’t have DNS since it’s not given. How do you configure USG to look for the Spectrum Modem data?
I set up the SuperAdmin as a local acct as you did in this video but later enable the remote access for the UNIFI account.
Very well explained
Thank you
great video. thanks!
Nice job. Thank you so much..
Thank you for the video
My USG stopped functioning. Installed my spare and can not get it to adopt. It sees the internet but will not adopt (Pending adoption for hours) in the controller. Any ideas? Thanks Jim
Mine has done this a few times in the past. I had to try multiple times to get a firmware update to take on the device, but after many resets it finally did and the issue was resolved. The older devices seem to suffer from this issue more than newer ones.
you can use a poe splitter or like a device from TP-linkTL-POE10R Splitter if you can to get rid of the power brick of the USG and use POE from your switch , from my testing USG uses around 8 watt or around 12v 700 miliAmp.
I can get one used for a good price, is it still worth it? From my understanding, this is years old already, would that be outdated?
looking forward to your next in depth video. Are you planning to cover some basic segmenting for IoT and stuff like that?
I plan on going over basic segmenting in a future video.
Very informative Video- thank you, I have this usg and a US-8-150 switch-- Have a new isp, states 300mps speed- running a 4 wap mesh system, regardless of user group limits- I only see maybe 110 MB at the closest wap. which goes down to 1- 2 MB at the furthest wap. Is there something holding up 300 MPS from leaving the usg and switch?
Toasty I have a unifi gateway that's showing offline under devices page...it is connected correctly, devices are able to connect to the internet through it....just not sure what could be causing it to show up offline. Anything to look out for would be greatly appreciated.
A good place to start would be to connect to the USG using SSH and make sure it is able to talk to your Unifi controller.
Once you are logged into the command-line, you can run "ping :8080/inform". This will tell it to contact and connect to the controller.
hi Toasty, can i connect to the USG or USG pro for the first time through the LAN anc change the DHCP range and then connect to internet? reason is my sisp suplies the range 192.168.1.x/24 and therefore want to change to a different range of IPs
Yes, you can change the LAN DHCP range prior to connecting to the internet if there is an overlap.
Hi! I got everything to work but the moment I unplug the USG from my computer it disconnects. I am still able to use the internet. I’m very much a novice so I’m going to need the USG for dummies explanation please.
do you know anywhere to help with setup i cannot co0nnect to the internet cause my fios modem has the same ip address as the USG, im a toal nube and need help, thanks
If your FIOS modem has the same IP then you will need to change your USG's network to something different. The WAN IP of your USG can be in the same network as your modem, but your LAN needs to be set differently.
You should be able to forward all traffic to your USG through the modem using the "DMZ" setting.
Hello, I would like to ask you. Where Can I change password for USG ubnt user. I have Public IP and I need to change it. Thank you
Changing user account information is done under settings > Admins. However, by default, web access via the WAN interface should be disabled due to default firewall rules.
My internet works but my USG-3P shows as offline. I am unable to review what is on my network and so on. Any suggestions how to get it online?
Are you able to hit the USG-3P directly? You may need to reconnect it to the controller. Try using the same device with the same IP address as you did when you first set it up. If this is not possible, you may need to console to the USG and update the inform settings to point it to your new controller's location.
If your controller still has all your settings you can also do a factory restore on the USG and re-adopt it all over again.
@@ToastyAnswers thanks for your quick reply. I finally realized I had to upload the settings from the computer controller to the cloud key. Now my cloud key takes the place of the software controller and I can better use my UniFi phone app. It was probably mentioned many times but in IT lingo; l needed it in football terms, if you will. An IT guy set it up for my business and now that I’m out of state the new IT guy was never able to figure out how to get the white light from blinking on the cloud key. It took me 2 and a half days to figure it all out with help from your videos and others, thanks.
Can somebody help me, we have currently Unifi controller in DC in HQ with DHCP server. my boss purchased UsG and want to mount on Branch Site with DHCP server also. my question is, how can i adopt the UsG on existing controller and i want also to transfer the VLANS on UsG, the DHCP for the users are currently on DHCP Server.
The branch USG will need to have some way to communicate back with the existing controller (via VPN, Public access, Etc...). I'm not 100% sure how to do this with a USG, but there should be some way to configure an "inform-address" to point the USG towards the existing controller.
Look up "Layer 3" adoption methods for the USG for more information on how this is done.
Nice to see you checking out Unifi. I won't be going for the USG, it's dated and throughput is poor with DPI on etc.
Seriously considering the UDM though, awesome price of kit for SOHO. Shame it doesn't have WiFi 6.
Then there's Mikrotik.... Tough choices out there.
Would love to see you cover the Unifi Dream Machine and the Mikrotik hEX S. Two wildy different solutions for routing that are both impressive in their own rights.
You are correct with the USG. Get the UDM instead if you are considering it.
I'd like to check out the Mikrotik devices at some point. I've read a lot about them, but never actually messed with them.
@@ToastyAnswers Me too. Looking at the hEX S and the ac3 at the moment.
Love RouterOS being fully open on all products
I’ve got 2 UniFi networks , home and work. I just put a usg at home. My ISP modem passes out dhcp along with the usg, is this an issue and what are the downsides and best practices?
It depends on how this is setup. If the ISP modem is connected to the "WAN" port of the USG then there isn't much of an issue other than "Double NAT". This will still work, but isn't the most optimal.
If the ISP modem is a part of the "LAN" of the USG then you have two DHCP servers on the same network which is not something you want. Machines will grab IPs from the two DHCP servers seemingly at random. If they're configured differently, then only half the PCs will work. If they're configured the same you run the risk of duplicate IP addresses since the ISP modem has no way of knowing what addresses have been leased by the USG. (Each should check for addresses in-use prior to issuing an IP, but sometimes this doesn't work as planned).
Best practice would be to either get rid of the ISP device routing functionality entirely, or place the USG in a DMZ from the ISP device.
Hi, thanks for all the great videos!. I’m new to Unify architecture. I’ve inherited a site that has both a USG and a WAP.
When I start up the unifi controller that is on the windows server, it indicates it’s “initiating the controller” and then eventually times out.
There’s also a unify Discovery app installed that will locate both of the above devices and over to the right of the USG line item is a manage button. If I click on it, it will come back and indicate that it’s managed by another device/controller. Is this indicating the other app - unify controller installed on the system - is configured to manage it or does it mean that some other unify controller is connected to the environment. I dont believe there are any other instances in the office of the unifi controller and not certain, but I dont believe it was managed from the cloud.
I guess this begs the question, can you manage a given device from different unifi controllers or is it “associated/adopted" with one specific controller?
How do I go about gaining control of these devices without resetting the devices?
I’m able to SSH into the USG. Is there a setting or cmd I can execute via SSH to reestablish or rehome to the unifi controller app on the server?
Any assistance would be greatly appreciated
older USG in 2020/2021 ? why not UDM pro ?
Cost. I couldn't justify getting a UDM since I wouldn't be using it in my network. The USG has a lot of overlapping features.
As my internet access speeds have climbed over the years I have to replace my non wireless Netgear routers numerous times. Currently my router supposedly can handle 500+ Mbs with most security features activated and I use it on a 300 Mbs connection.
In your video you were mention a 85 Mbs limit on this device in some cases so this must be a home device. I presume their Pro products have much higher band width for those people or businesses with high speed 1Gbs+ connections.
What would be their high band width security gateway products?
The pro products do offer much more throughput. I will be touching on this in the security setup video I am making, but the Dream machine is advertised as having 850Mbps throughput with IDS/IPS turned on while the Dream Machine Pro is capable of 3.5Gbps (according to the spec sheets).
The security gateway is a much older model and isn't really designed for high-bandwidth connections while using all the security features. This is due to the older hardware.
I'm not sure how much throughput the Security Gateway Pro has, but it is also an older piece of equipment. The Dream machine line is the "current" area you would want to be looking.
Suggestion; Please use zoom-in for the demonstrations.TY
Can I adopt a USG in an already active Unifi Controller?
Cause it keeps showing adoption failed everytime I adopt it...
You can, but you can only have one USG/UDM per "site". You will need to create an additional site in the controller in order to adopt a second "gateway" device.
@@ToastyAnswers I don't have a USG in my controller yet...
All adopted devices are just the APs, but when I go and try to adopt the new USG it keeps saying adoption failed but shows on the dashboard that the gateway is the USG...
I can't create new networks, which was supposed to be the reason for the USG, so that I can separate the guests' subnet from the main subnet...
Hi, this device does not support wifi, so, we must connect for example wifi device like ac unifi pro to the USG then other wifi devices in the network can connect winlessly connect to the Internet right??
This is correct
@@ToastyAnswers another question is on the ac unifi pro getway we must set USG ip address, then wifi devices can connect wirelessly to the Internet?? Right
Do you need the Controller - I am using this as a router/firewall - all I need to do is set a static Wan address and gateway and a static local IP and DHCP range?
You need the controller to configure the device. Past that, you don't need it to continue operations (unless you are using guest portal or RADIUS).
@@ToastyAnswers Thanks, your video was great - my Unifi software didn't have the option to go back to the old interface, and I must say it took me a while to figure out where everything was - not overly intuitive - I would love an updated video on this.
It is in the works. I'm slowly updating my older videos. I will say, I have a video that goes over the different software versions and how to switch between the new and old interfaces (Unifi Controller - Version Overview). That may answer some of your questions related to that. I get pretty annoyed at the differences between each major release.
So this device can be used for e.g Parental control, device block, time scheduling? Or do i need another AP to control device block, time scheduling etc?
I believe it can, but this is not something I have setup before. I'm second guessing myself if these features are independent of APs.
Can I connect modem -> gateway -> uni wap?
In the chart shows the switch in between.
Thank u!
Yes, you can do this. Most of the time a "gateway" device (or home router) has a switch built-in.
Hey mate
Thanks for the awesome video. Question, is there a way to reverse engineer getting the config file from the router? Reinstalled windows and wiped the old config.
Unfortunately, I'm not aware of a way to pull an existing configuration for later use. I've only ever recovered an installation using an existing backup of the database. If this data doesn't exist, I don't know of a way to recover.
So is the EdgeRouter X just a torture device for beginners?
Thanks for this video by the way.
I guess, in a sense, you could debate it being a torture device. I'd call it more of a "window into enterprise networking" for a beginner especially if you are dealing with the command-line. I kind of cover this in my Edgerouter vs. UDM video... they're both great devices but aimed at very different people and use-cases.
For example: Comcast offers their Modem/Router combination. Is this USG needed in order to add an ubiquiti access point?
No, you can install APs without a UDM/USG. The controller software is independent of any device.
What needs to be done to the ISP router? DHCP off? Obviously, wifi off. Anything else? Thanks!
Preferably, the ISP router should be placed in either bridged or pass-thru mode. If your router doesn't support this, then placing the USG in the "DMZ" zone is the second-best option.
Aside from that, most features such as DHCP and Wifi should be disabled (unless you have no other wireless option, then you may want to leave this on).
What issues would I face placing the USG behind an additional router?
Mainly, just double-NAT. Check out this video for more details. It uses an ER-X as the example, but the same concept applies.
ua-cam.com/video/HLYIQhOecN0/v-deo.html
The unifi controller is a lot like how cisco deals with their old ASA products. you had to download their software to connect to their interface. Of course, unless you used the CLI.
And the CLI on those was a complete beast. I agree, it is pretty much the same because you can configure the USG through CLI as long as you never connect it to a controller. At that point the configurations are overwritten.
I have a similar setup and want to make sure my DNS is set properly. So I'll be looking out for your next video and hoping you mention it. I would assume you'd want the first DNS option to be the USG itself, before it has to reach out to public DNS like Google or OpenDNS. I see options in "Networks -> LAN -> DHCP Name Server" as well as "Networks -> WAN -> DNS Server". Just making sure I have everything set properly.
I actually just recorded a video that I should have mentioned this in. It really depends on your setup and if you have any need for special DNS configurations. Using the USG itself isn't a bad option since it forwards the DNS requests onward to the configured DNS server.
The Options under DHCP Name Server are the configurations that will get pushed to EVERY client via DHCP. If you set these to public servers, the clients won't bother querying the USG itself for DNS entries and will go directly to the public DNS servers. If this is set to the USG itself, then it will forward on the requests to the servers configured in the WAN -> DNS Server section.
Basically, the WAN -> DNS Server section is where the servers used by the USG itself reside. If clients are set to point to the USG, then it will use the servers contained here for forward lookups. If the clients are set differently, then this is bypassed entirely.
Dude this machine is bringing me to tears keeps limiting my download to 25mbps and doing hard reset changes nothing. Anyone have any advice on how to actually hard reset to default settings
Holding the Reset button for roughly 10 seconds should reset it back to factory defaults.
Just got one of these a few months ago. Its probably going EOL soon I hear...
Might be good to show people more in depth rather than this is just where I did that.
No wonder the price is going down on these preowned devices.
Thank you for the info!! I have one USG 3 on my network setup but i have 400 mbps download service and I don't know if its possible to take advantage of the full connection with this piece of hardware do you have any info?
You won't be able to take full advantage of your connection if you are using any of the security services. The USG3 maxes around 80Mbps when using security services.
The UDM or UDM Pro would be able to support that connection speed (800Mbps and 3.4Gbps respectively).
Toasty, do you know if it supports static /31 IP for the WAN?
From what I've seen... it doesn't fully support a /31 mask and you have to do a bit of a workaround. However, disclaimer, I have not tried this for myself so I can't say for sure if this is true.
Do you think they will be USG will be replace by UDM?
I don't think the USG has much life left. The UDM is basically a replacement for this device.
10 out 10 my problem is it did not go blue :( even rebooting the gateway any pointer IN Devies screen its got a orange light
Hi, I am so happy that you help to everyone with your video. I have question, could I use eero AP’s to work with Ubiquiti Security gateway?
Absolutely.
I have a cloud key gen 2 controller
hi, would it preferable to goi the edge router way or the usg way for a simple home network set up?
For simplicity, the USG (UDM) is probably the better option. However, if you like to tinker with your networks then you may prefer something like an Edgerouter or similar.
Thank for your comment I only get 30 mbs so I’ll thinking this should be good enough, thanks for the vids, very good regards Steve
Hi. What differents are between this unifi USG and edgerouter ?
There are a few. I actually plan on making a video to address this.
After creating a wifi. Does that mean if i connect an AP it i will have wifi signal ?
Yes, the wireless settings will be pushed to a Unifi AP once it is adopted to the controller.
Very helpful video. I have read somewhere that when QoS is enabled it limits throughput to only 30-40mbps. Do you know if this is true? I have bad buffer bloat and so I need to enable QoS but if it's true this would limit the bandwidth I may need purchase an Edge Router instead that has a higher throughput with QoS enabled.
I'm not sure of the exact limit of QoS on this device, but QoS does typically reduce the throughput of a device drastically. The Edgerouter has a very big performance impact while using QoS as well. However, I'm not sure how the two compare.
Can you just use an existing controller, such as a cloud key instead of having to install it?
Yes, if you already have a controller setup there is no need to install a new one.
Nice vid, thanks for sharing! May I ask what whiteboard software are you using in this video and are there any better alternatives that you might have come across later on?
The whiteboard application is just the built-in Windows ink. They actually changed it a bit in a fairly recent update, and I don't really care for the new version. However, I haven't found anything better or more convenient.
@@ToastyAnswers I appreciate you taking the the time to answer my question. Thank you!
I sometimes get lost in the Controller (running on a Cloudkey) where I am not sure I am changing the settings that are specific to the device or globally. Have you done a series of videos on how to navigate the Controller to manage multiple Unifi devices, particularly explaining what parts of the Controller are managing what particular Unifi device?
I am relatively new to Ubiquiti gears, especially with the Controller. Even now, I am not clear on in what situation should I use the EdgerouterX and when I should use the USG. The USG is more expensive, but paradoxically, the Edgerouter X seems to have many more advanced features as a router/gateway. Am I correct to think that the USG should be used as an edge device that is the separator between the Internet and the LAN while the EdgerouterX should be used as a router within the LAN to bridge and route between multiple LANs? The Edgerouter seems to have such granular control over how each eth is used: multiple VLANs, multiple DHCP servers, etc. These are the things that the USG seems not to have. Basically, you should do a video that goes into details on the differences between the Edgerouter family and the USG.
The USG is an odd duckling. It seems to be a device that is the only member in its own family. There are multiple Edgerouter models, but only one USG.
I don't have a dedicated video for navigating the controller, but I think I go the most in-depth with my "Unifi Complete Network Setup" or "How to Optimize a Unifi Network" videos.
For comparing the Edgerouter to the USG (UDM), I have a video which is kind of an overview on the differences between the two devices. Link is below.
ua-cam.com/video/mStyKU4S8cs/v-deo.html
Both the Edgerouter and USG are meant for the network edge, but they both have different strengths/weaknesses. It is more of a matter of what you hope to accomplish and what your needs are as to which device is ultimately used.
Thanks for this video. Do you know if there is an app (Android) that can be used to manage the USG?
There is a Unifi App for Android. I've personally never actually used the mobile apps, but I know you can get things off the ground using them. Since the USG is tied into the controller I don't see why the mobile app wouldn't work. There may be some features that are missing.
What are the advantages/disadvantages of this device vs the EdgeRouter-X?
This device is a bit more user friendly and integrates with the Unifi line of devices. However, it does lack some advanced features and customization. There are quite a few differences, and I would compare the spec-sheets, but this was made as more of a bundled device with security features for homes and small businesses, where the Edgerouter is more of a specialized device which only includes a basic firewall.
They are fairly similar, but the fact that this is managed through the Unifi Controller instead of through UNMS or the device itself as well as the inclusion of advanced security features is the main difference.
I have this gateway and I am stuck. Looking for professional help. Glad to pay.
Is this a good think now or is to obsolete ?
It is a bit obsolete, but the configurations are similar to the UDM which is why I opted for the USG instead. I would buy the UDM instead now days.
Thanks for your video :-) Could you guidle me how to change wan2 port into lan port :-) thank you
I'll try to work this into one of my future videos, but you need to create a network under "Settings -> Networks" and assign it to the second LAN port. The configuration under this network section is what determines if the second port is LAN or WAN.
Can this adblock?
Not really. It can filter traffic categories, which may block some ad sites but it is not designed specifically with ad blocking in mind.
Hej fellas, thanks for the nice and informative video. I am in the process of installing my home network, we have a 1000/100mbit net, could this be a chokepoint? Also I would like to install PIA on this, has anyone tried that, does that limit speed a lot? It did on the computer, thats why im asking. Or just an alternative DNS is already better? Thank you in advance and stay safe!
With a 1000/100 connection this would definitely be a chokepoint. The UDM Pro would be the better option for a connection of that speed.
I've seen where you can setup PIA, but this isn't something I've tried personally. I would imagine it would limit the speed quite a bit, especially with that fast of a connection.
An alternative DNS would help, but that would be entirely different to an actual VPN.
@@ToastyAnswers Great thank you, I was just hoping to seperate the switch and the USG but great thank you I look at it.
Why did they take away so many settings in the new interface? I can't even change the LAN IP address?????? WTF
EDIT: I found it. Things are pretty hidden. I had to toggle (Auto Scale Network). Would you do videos on the new interface?
I have a re-work of some of my older videos on the way which will include the new interface. For the record... I hate it as well.
Hi mate , great vid , subed and liked .
Any chance of a video showing how to adopt and configure a usg into an existing home network with a none Unifi router ?
There are lots of issues involved with this procedure which could do with your clear and precise instructions. Thank you
If you are talking about using two different routers, then I do plan to do something similar to this in the future.
The controller won’t see my usg or switch. Neither one. I’m running a Mac. This should be simple plug and play hardware. Come to find out- they got zero tech support you can reach. Absolutely unacceptable user experience for a product like this.
Dude, drop your audio level, way too hot on the voice-over.
Yeah, I messed this one up in the audio department...
If you're not fully invested in the UniFi universe, the Netgate SG-3100 is a much better choice.
I'm glad i didn't buy this useless pointless ubnt crab before watching this video
Hate Java. That might be a game-ender for me.
(((((((( where is edge os????((((((((((wtf
Thanks great video!
Nice video! thank you