Unifi Protect Installation and configuration
Вставка
- Опубліковано 15 лип 2024
- This is part 2 of our on site camera job. In this video we run a few cables, mount some Unifi g4 bullet cameras and then I show you the configuration
Amazon affiliates for gear I use:
Brady BMP21 plus labeler:
amzn.to/3kq0KkK
Vertical cable I-Punch tool:
amzn.to/3XxO6yu
Vertical cable cat 6 vmax keystones:
amzn.to/3Xk9xUa
Monoprice 6 inch slim patch cables:
amzn.to/3CQyRsH
▶ Hire us on our website
mactelecomnetworks.com/
▶ Discord Channel:
/ discord
▶ Find me on Twitch
/ frozil3
▶Contact me on email:
cody@mactelecomnetworks.com
------------------------------------------------------------------------------------
Affiliates I use:
▶ VOIP.MS
www.voip.ms/en/code/Mactelecom
▶Canadian Amazon Store front:
www.amazon.ca/shop/mactelecom...
▶USA Amazon store front:
www.amazon.com/shop/macteleco...
------------------------------------------------------------------------------------
▶ Find us on social media:
▶ Instagram:
/ mactelecomnetworks
▶ Facebook:
/ mactelecomnetworks
▶ Twitter:
/ mactelecomn
▶ TikTok:
/ mactelecomnetworks
▶ Linkedin:
/ cody-maccallum-29311b6b
0:00 Intro
0:26 runing cables
1:47 putting RJ45 end on cable and mounting camera inside
4:15 unmounting old cameras and mounting Unifi cameras
5:09 looking at the finished network rack
6:18 Creating a camera network and assigning vlans to ports
7:55 Creating firewall rules for the camera network
11:14 Locking port to camera mac address
11:53 camera high frame rate mode and detection zones
13:19 giving people access to your cameras
13:37 Final thoughts - Наука та технологія
Another great video, thank you. Just placed an order at Brady for a printer! I appreciate you showing the make and model of tools you use.
Great! You create very nice and neat jobs, well done!
brillant ! this is exactly how to do it. kudos for some firewall rules and the macadress lock, very clever
We ran cable in 12 drop bundles to multiple classrooms in a school using a 1/10th-scale RC Car it made simple work running it down the long hallways. We keep track of it by attaching a small flashlight to the top of the car.
I actually saw someone on Instagram do this its genius lol
Excellent work and detail!
Thanks for watching 😀
Great work , very clean job
Thanks
Great video and good job.
Great job! 👍🏻
Thanks Cody!
Great video!!!. I thought you will use the scissors as the crimping tool too, lol. I just realized why every time I am doing wiring near a network/wiring/low-voltage expert they look weird at me, I just realized I do the wiring the other way: brown, white-brown..... that way when I use the crimping tool I use the lock pointing up which makes more sense to me, but it seems you guys (network experts) do it the oposite/right way, now I am screwed up because I learned the "wrong" way like 25 years ago and keep doing my wiring that way, lol.
Nice neat setup, like the firewall rules you setup as well, didn’t know about the MAC address either, changing all my clients to lock those down, not that someone is going to climb 25 feet up a ladder just to get to the cable, we’ll maybe… I always disable ports that are not in use.
IMO the mac filter is completely useless because if you have access to pull the camera down then you are able to look at the mac and spoof it. the mac filtering would just stop people that don't have a clue what they are doing and we don't worry much about them.
Brady has the same type of labels but with a longer transparent part, don't know if they fit your machine, but they will last longer as the printed text will be covered by the transparent part.
Good job showing folks how to do these things. Side note.. the "pull string" you cut is there for a reason. When you strip the outer sheath of the cable, there is always a possibility of a nicking the cable, not matter how careful one tries to be. The string is there for you to pull down the sheath, using the string as a cutter to take off more outer sheath and thus remove the possibility of terminating a nicked cable as you have gone down below the initial cut.
Ah come on, no one does that, a quick check of the cable and experience is enough
@@paulfin100 Sure I get it... and I didn't do it for many years until it was explained to me. Now do it on every cable I terminate.. takes like 5 extra seconds. I agree is most likely not needed but when you are making a video about doing a wiring job and terminating cable, at least do it for the one cable you record :)
I was not an expert when I started my business 25 years ago, today I have enough experience that I consider myself an expert and I had never ever messed up a wire cutting them either using the crimping tool blades or any type of blades; can you show us a video of yourself performing the modular plug installation to see how you are able to pull and remove the skin with the "pull string", I do not think my pinch pressure will be able to pull down the string to cut the sheath.
@@androjesus On regular indoor rated cable you can wrap it around your fingers and pull down and it will cut the outer sheath. On direct burial and harder outer cables, I make a small snip on the outer sheath to get it started...then pull the string down that cut.
Beautiful cats. Mine are all strays so I have none that have any type of pedigree but they are all great companions.
Thanks! I love animals I’d take in a few strays if I could
We have a big project we are planning in North Eastern Pennsylvania and so I am glad to gain some insights from watching your work. However, how would we purchase 30+ cameras, UNVR Pro, etc from Ubiquiti who is iffy when it comes to item stock? Keep up the amazing work!!
Thanks.
Boss man always does easier job. I know that feeling
😂
You know you can save your fingers by geting RJ45 jacks that allow you to push the cable straight through it so you are guaranteed none of the cables slip back and you have to re-crimp it or stress your fingerings our holding the cable in place so you can crimp it properly. I used to do like you until I got the straight through ones save to save my 60 year old fingers from more damage. :)
Great video, it helped me a lot! Any tips for the firewall rules blocking the UNVR from reaching the AP's for auto-adopt bridge devices? My logs are full of dropped connections, should I open ports or let it be? Thanks!
What a great video. I have been using Unifi's APs for several years but I am new to the cameras and I am getting ready to install some but I have a few questions. Do I need the NVR or can I run the cameras without it? Also what would happen if you locked the device to MAC address and the device went offline?
Hi - love (and share) your OCD with cabling and also a big fan of ubiquiti kit. Just wondering, reviews I have seen say the thin patch cables should not be used for PoE as the thinner copper can have heat issues due to higher resistance. Have you seen this at all in your installations?
Sweet thx
Thanks for watching
invest in a dart gun that shoots pull string, it saves lifting tiles every 15 feet.
Great Job again, and a very good explanation of the Firewall Rules.
May I asked a question about the Rules...
I have a Network for all Security-Stuff, including Access and Cameras. I am using a UDMPro, I don't have an UNVR. I also have a Network for NAS and for Guests.
When I following your steps with the Firewall Rules, all Cameras went to offline, also the UA-Pro. The UA-Hub stays online. Where is my Failure? I know this may be a hard question because of not seeing all of my installation-steps.
Greetings, Michael
Is it worth using the Motion Zone in addition to the Smart Detection Zone?
when setting up cameras do they need to be on a separate network or can they stay on the main network?
You all missed the NFPA 70 (or in the US we call it the NEC), Class 2 cables (which POE lines would be classified as, and section 725.130(A) cables above a suspended ceiling must be supported at regular intervals). Section 645.5(D)(5)(c) also requires Information Technology Wiring (aka network cables), be secured to the building structure in a way that prevents them from being damaged. I also didn't see if you penetrated a firewall as well, and that also requires a listed penetration coupling. And as a final thought, I didn't see if your network cable is plenum rated or not (it's required in the US in most districts as the flammability rating of the jacket is different for plenum, hence the higher cost). Just my 2 cents.
It’s all strapped up with jhooks, when going through a wall we added what we needed for the fire rating
Also yup it’s plenum rarely ever use riser
What do you use to cover the empty holes on the patch panels?
What were the main advantages of going from the Hikvision to Unifi system ?
I like your work on this. I was just looking into camera security and why. Have you done a more detailed video on the camera security and why you set the firewall rules like that?
Thanks for the good videos. I am also interested in getting a deeper understanding and justification of the firewall rules. Is this in another video or could it be a topic for a new video?
Hey Michael and Consecrated tech,
I am planning on doing a video that breaks down the firewall rules
@@MactelecomNetworks that would be awesome!! The last dark security news I saw was that Unifi cameras could possibly be seen on places like Shodan. wikes!
How long did it take you to acquire all those cameras?
Amazing job bro. Do you have any recommended resources and guides to review for help with security settings? You were blowing through all those different settings for securing the camera network like it was 1+1 lol, but I only understood about 1/6th of what you actually did there. I've done basic networking for a while, but I'd like to get more familiar with Unifi tech. Also, with Cisco, they have their different certifications for different categories of networking and products, does Ubiquity do the same?
Same exact setting but with explanations: ua-cam.com/video/UGBobTInIBc/v-deo.html
hi,I bought a g5 flex but when connected to the udm pro it doesn't appear.. I tried using a poe injector and it didn't work either, any suggestions? thanks
Great Job Cody! Question... For that amount of camera's how many TB of hard drives do you put in the install and how long of a record time does it give you?
Hey Franklin,
For this install I installed 4x TB drives I believe it gives them about 23 days of recording running 24/7
@@MactelecomNetworks What does the NVMR plug into? Why use the NVMR instead of the single Bay in the UDM with a larger hard drive? Is the NVMR in a RAID config?
@@cloudmike it plugs into the switch just a rj45 port but will be pluggin into the dac soon.
so the UDM Pro or SE can only hold so many cameras, once you pass that limit you need to move to the UNVR, Also more space and hard drive redundancy
I missed part of it, the cameras are on differnet vlan, but how does someone view them? with my network and cameras (not ubiquiti) if the 3rd octet is not the same, my camera apps wont view them. Is the only way to see the cameras is to log in to Router?
Koodi creating those mystroys rules you went turbo slow down. video doesn't need to match the speed of network you creating Gracias.
Is it just me or do the vandal domes look way better on those ceiling tiles?
I know you guys aren't security focused, but if you have two cameras that close together 4:45 they should point towards each other to prevent a blindspot between the two.
When you fished the cable in the ceiling, did you run on top of the grid or through the proper hangers to keep cable off of grid?
They had jhooks already installed
You should use the push through jacks soooo much easier
Silly question that you might have had already but, how long at the small patch cables and where do you get them? Thanks for all the videos!
They are 6-inch cables. Monoprice SlimRun Cat6
They're Monoprice cables and you can get them on Amazon.
@@LouSasshole_ do they support PoE+ well?
Why I can’t de cameras Icon on my switches ports ?
I'm the lazy guy who just restarts the whole switch in such case. Due to the reestablished link IP refresh works great. :D
I install Protect cams professionally as well and was wondering how you guys mount the bullet cameras to cieling tiles?
Not sure how they would do it but I would buy some square metal junction box covers and use self tapping screws through the tile with the plate on the back of the tile. That being said I don’t use bullet cams on ceiling tiles, or even unifi cams in general, and don’t necessarily recommend bullet cams for indoor ceiling installations as dome, mini dome, and turret cams are much better suited.
@@ryderholland On the rare occasion I use a bullet camera inside I use a 2ft piece of wood so it fits between the grid and is not just hanging off the tile
Dear TP-Link, I want all the functions of Unify in Omada :p Great Video
😂
How do you typically calculate your POE budget? Trying to determine what switch I’ll need. Possibly 5 cameras and an access point. Runs are less than 50 ft I’d guess.
Look at the camera specs. If it pulls 4 watts and your switch can do 150 watts then you could do 30 cameras relatively easy.
What kind of grommet is that?
Nice setup, but why not using the UDM PoE ports?
No need to have enough capacity on the switch
Hi, I am wondering how would you get a wireless unify camera to communicate with the unvr if you have intervelans blocked?
You could create a SSID/wireless network on the same VLAN as your cameras. The NVR can also be placed either on the same VLAN or have access to all VLANs
With Unifi Protect ViewPort out of stock what it seems like years. What alternative do you use for viewing live feed on Monitor or TVs?
They have come back into stock a few times this past few weeks (at least in the US), just gotta be quick enough to grab some. I snagged three for some upcoming client projects
Also back in stock in Europe last week, but just for some hours before they're sold out again.
Can you connect a UniFi UDR to a Bell Giga Router directly? Or do you need another solution?
With the Ethernet cable you can
T568B, the redundant standard that no-one really adopted. Check your patch leads, guaranteed they're A standard.
Hardware is easy with Ubi gear, but the software part is a black hole for me. What courses I should finish to have a such knowledge about the networks? I'm not an IT person, but somehow manage to run UDM pro at Home. 🙂 Good job man!
Hey,
So if you're just getting into networking maybe look at the comptia network plus this will give you basic knowledge of how networks work
I was SHOCKED to see you don’t use pass through connectors, as soon as I used one once, I just can’t go back. Of course I’m old enough my eyes suck at close up stuff.
because they are bad for poe runs
@@ctopedja why’s that? Same crimping style and force and no chance of any conductors being partially into the connectors. I’ve been using them for a couple years now without issue but if there is a legitimate reason, I want to know so please let me know.
@@waynenocton because they crimp at the edge of connector and sometime imperfections happen and you have piece of copper wire that's under V touching inside of socket its in and causes short to ground, don't happen that often but just chance of it happening is enough for me to never use passthrough for anything POE related
I have a UDM SE and I don't see the MAC Address List in the port manager. Do I need enable it somewhere?
unfortunately the UDM SE switch does not have mac address list its only on certain switches
Do the cameras have MAC addresses printed on the device itself? I'd imagine so. So a MAC lock in that case is only useful if someone doesn't know to spoof a MAC
That right there is an excellent point that I did not think of
Just scratch off the MAC address with a blade or use a black sharpie to cover it up.
You kinda blew through the explanation on "Latency Video" and what it does. Could you make a more in depth video on exactly what that does and the pros and cons of using it? Thanks.
There’s really not much to it. It just loads your cameras faster
Hi, What brand are those small patch cables you used?
Monoprice SlimRun Cat6 (6-inch)
@@andibyts You don't have issue with Poe on these cables? I heard these are so slim they could not support Poe
@@nicolasarnold4944 i use them with poe for my accesspoints had no problems so far
How can I also put 2x G3 Instant's that are using WiFi on a the same VLAN (22) as my 2x G4 Bullet's? Do I have to create a new dedicated WiFi network for the G3 Instants?
Hey,
Yup you would have to create a wifi network and have it associated with your camera vlan
@@MactelecomNetworks Thanks. Also, instead of all the custom firewall rules for the camera network, can I just make the network type Guest Network?
What exactly do the first two firewall rules?
I’ll explain that in an upcoming video as well as what the lan_in, Lan_out and lan_local do
Can you explain some of the security settings a little more in-depth? When you start discussing what you're doing, you're talking at a walking speed, then you switch to plaid speed especially when talking about making the rules. Some of it can be followed, you need to pause and rewind it multiple times to do so. Can you explain why you're doing some of the drop, block, and allow settings? Then you create a port group RFC1918 add a bunch to it without explaining what they are; as I have never watched any of your other videos to see if it is explained elsewhere.
Hey,
I have this video ua-cam.com/video/P2OPlU62cBk/v-deo.html on firewall rules. It is a bit older but I will be updating it shortly with the new user interface
ua-cam.com/video/UGBobTInIBc/v-deo.html
Explained as he sets it up
How far can you run ethernet cable for camera before it cant deliver the power anymore?
100m is that max that you should do
So every 100 i put a repeater?
What patch panels are these?
These are ubiquiti keystone patch panels
Nice! Surprised you can get them up in Canada
Love the video. However rather than a by-the-job speed lets pretend you're hourly and the client (us) actually is wanting to know some why behind the what. Thanks, love it nonetheless
Why a camera network?
to separate it from the default network, gives us a security boundary
If someone is able to get to these Cameras physically they could also spoof thier MAC adress to match it to the unplugged Cam
Yup 👍 someone else mentioned that didn’t even cross my mind.
@@MactelecomNetworks Well thats why you have them on a seperate network unable to communicate to the others.
To Prevent this you could give out static IP Adresses and disable DHCP so the attacker would need to snoop the cable to know what IP to use aswell
Just scratch off the MAC address with a blade or use a black sharpie to cover it up.
@@runuphill The MAC adress can be accessed by plugging it in to your PC... I dont think you know what you are talking about here
why are you using a bullet in a hall and not flex? seems over cost over kill.
Anything g3 does not have smart detections. Also the customer bought these I just installed
@@MactelecomNetworks gotcha. Although I don't think having smart detections in a hallway would matter. I install a lot Unifi equipment but always wondering what others do and why. Thanks for reply.
Mac and port security is not secure at all, most of the times the MAC address is written on the device and can just be cloned on your laptop.
Then scratch off the MAC address with a blade or use a black sharpie to cover it up.
Was really disapointed that you just run cable in a drop ceiling and don't secure it up like we are supposed to. Your racks are clean when set up, but the cabling in the ceiling you should be securing up and not just laying on tiles.
There’s jhooks in the ceiling that we laid out cable in I wasn’t going to put my dslr camera up there though
Getting a gopro so I can show in ceiling
Can you please post more non-unifi videos? It’s been 25 videos and 3 months
Planning on it what are you looking for specifically ?
@@MactelecomNetworks loved your Pfsense video. Also much more NAS content too! And virtualization! Although I think you mostly specialize in Networking
@@UltralifeTech I’m working on a Synology active backup for business video as we speak.
I will incorporate more PFsense as well. As for vms I need to get a server 😂 but it’s on the list