Thank you for everything you do Cody I am just going back on all your videos doing a rewatch as I have 8 weeks indoors as I have broken my arm in 4 places when I slipped on black ice yesterday on the motorbike
@d3adpool75
3 жыл бұрын
Great timing i was going to get into this over my weekend. Thank you very much for the great video
@justintemp
3 жыл бұрын
Thanks Cody, much Anticipated video 👍📹
@mikelehrer228
3 жыл бұрын
You mentioned Possible Videos that people would like to see. I would like a Video on how to have a disaster plan for UniFi Controller Backup and recovery. Example, main controller is on CKG2 or CKG2+ and it does its backups and every week I pull a copy off and save off. Then if my physical controller failed, what would I do to bring up a copy of the Controller running on a Windows PC as an example and then load the backup and get access while the hardware is repaired or replaced.
@J1nxMC
3 жыл бұрын
I've done a couple of PC-Controller to physical migrations which are pretty much the same. I took a backup of the current config, went through the initial setup of the CK then once the controller was loaded I restored the config from the backup. The only one thing I needed to ensure was the same is the IP address. Worked like a charm. It's even easier if it's from CK to CK as your CK backs up to your Ui account, which you can restore straight from during initial setup. Hope this gives you an idea of the process.
@Thegamershow
3 жыл бұрын
Would love to see a video on how to create 2 separate networks on a single controller, each one would have it own ip range and communicate with the internet but are segregated from each other, but add a rule to only allow a few devices to communicate between the two networks (a phone on one network can communicate with an iot device on the other network).
@MactelecomNetworks
3 жыл бұрын
Hey I’ve already done that in my firewall videos but I’m going to re-do for this series. Probably come out Wednesday .
@Thegamershow
3 жыл бұрын
Would be awesome to have an instruction video on how to add an SSL to UniFi.
@MactelecomNetworks
3 жыл бұрын
Ya I’ve been looking into that. It’s a little difficult within UDM pro
@hammondgrange8384
3 жыл бұрын
Where in the GUI can you see the currently connected users as well as where are you able to see who has been connected via VPN previously.? These would be a minimum security requirement before letting users log on via VPN to make sure you can keep tabs on what's going on.
@pieterjdw
3 жыл бұрын
Nice. Would like to see how to install WireGuard on USG
@MactelecomNetworks
3 жыл бұрын
not sure its possible at the moment
@ShahramVazirnezami
2 жыл бұрын
Thanks for the video, I have setup a dynamic ip and I can access my server with the domain name, when setting up the vpn I can connect using the ip address but if fails when I use the domain name. I have a usg and using the latest controller. Any suggestions? Thank you
@jackdenenberg1788
3 жыл бұрын
Thanks for the video! I'm wondering if I missed something as I can connect remotely and get to the internet over the VPN connection yet I can't connect of ping anything on the main LAN network.
@merchmerch7430
3 жыл бұрын
Windows computers needing VPN (L2TP) access need a registry tweak.
@caboose2016
3 жыл бұрын
With this setup. If my home network is a 192.168.1.x network and the site I'm remoting from is also a 192.168.1.x network, how do you get to devices that share similar ip address locally and vpn connection?
@hardtimes4521
3 жыл бұрын
I can only connect to the VPN if I am on the same network. If I am on my phone LTE provider I can't!
@AlSalernoPhotography
3 жыл бұрын
I'm using 6.2.25 and followed all of your videos to setup Remote User VPN but nothing connects. My entire LAN and WAN is Ubiquiti hardware so it should all be setup automatically with these new wizards correct?..So frustrating.....I miss my old MacServer with VPN on it..it was easier than PONG!
@lkfng
3 жыл бұрын
I followed your procedure and it does not work. I am using controller version 6.6.26. Upon connecting with my devices I receive the message "Server not responding". Please help!
@Thegamershow
3 жыл бұрын
Great job!
@acur8ly
3 жыл бұрын
Thanks for creating this video. Where would you go to manage the established VPN connections on the controller? I have looked at the Insights > Remote user VPN but it never lists any connections.
@DTHCoCo
3 жыл бұрын
You are the man
@ryanpwhite36
3 жыл бұрын
Hi Cody, awesome video. Is it possible to create a split tunnel VPN (I don’t want all traffic going over the VPN to save bandwidth at the office) with Unifi?
@judgezee9371
3 жыл бұрын
have this currently setup but main problem is when 1 user connects they are able to access shared drives. The moment another user connects they cannot access the shared drives or even ping gateway/server. Ideas?
@AndreasBodin
3 жыл бұрын
When creating the Remote User VPN network, I'm not able to select WAN. Are you using both WAN and WAN2 ports? In my case (USG Pro 4) , I only have my ISPs connection to the WAN port. Running version 6.0.45.
@barbatrukko
3 жыл бұрын
Hi, I can't use port 1812 becouse is used by ISP provider.... i can change external port?
@GerhardAEUhlhorn
3 жыл бұрын
„The L2TP VPN server is not responding“ (translated from german). This is always the problem with Unifis VPN. It’s on my site and it’s the same on other sites I know. My UDM-Pro is behind the router of the provider and it is set as DMZ. So all ports are forwarded to the UDM.
@CaptainDickei
3 жыл бұрын
I have the same problem. With my iPhone on LTE it connects, but not with the windows vpn client.
@GerhardAEUhlhorn
3 жыл бұрын
@@CaptainDickei My problem was, I think, that I was using the FRITZ!Box as modem and as PBX with a trick at the same time. The FRITZ!Box was connected to the WAN port of the gateway but was reachable for the phones from inside the LAN. The Gateway was the only LAN client in the FRITZ!Box LAN and was in the DMZ. I think that the VPN access was not routed to the Gateway. Now I have a dedicated modem outside of my may LAN (connected to the WAN port) and the FRITZ!Box as a PBX inside my LAN. Now it’s working fine.
@lxy4564
3 жыл бұрын
Have you got this working with 6.0.45 controller? I heard people said the new controller doesn't work if you have the new UI enabled?
@rafitorres15
3 жыл бұрын
Thank you Cody! Great video! May I ask how do you setup VPN in Unifi and be able to connect to internet? Currently after setup I can connect remotely to my local network, however not to the internet while Unifi VPN is on, is this possible with Unifi?
@MactelecomNetworks
3 жыл бұрын
Hmm that’s a strange issue you should have internet access unless you have firewall rules blocking it
@SKILLSPORTSPREP
3 жыл бұрын
Have you tried pinging outside resources versus checking internet through your browser?
@rafitorres15
3 жыл бұрын
@@SKILLSPORTSPREP yes, with my cellphone’s internet I turn on Unifi VPN, then I can get into my network like Plex, synology server, and Unifi software - all 3 off remote access, however if I open Safari to surf the net on my cellphone while connected to Unifi’s VPN I get no access to the internet....I can’t figure out why....
@rafitorres15
3 жыл бұрын
@@MactelecomNetworks I literally started from scratch with the Unifi software on 6.x.x and used your firewall suggestions in your previous video and VLANs for Staff, IoT and Guest. It’s doing the most important thing which is to connect to my Network remotely via VPN, but I cannot use the internet while connected to UNIFI’s VPN. I don’t know what else to do....
@ewhilton
3 жыл бұрын
@@rafitorres15 Are you able to ping an external IP address from the cell phone while connected to the Remote VPN? If both the HTTP and PING fail, its likely the firewall rules like Cody mentioned. If the PING works, but your not able to browse external pages in Safari, it's likely a DNS issue. In the example Cody has around 2:08, where the Name Server is set to Automatic, you could try 8.8.8.8 and then see if your able to browse. I don't see a way for manually add the DNS server in iOS for the L2TP connection type. As well, check that your private NAT IP address from your wireless carrier on your phone (example 10.X.X.X) is not in the same subnet as your private remote VPN address, as this could give you problems as well.
@procekim
3 жыл бұрын
How do I change countries?
@antoinedurand737
3 жыл бұрын
Hi Cody, if I create a VPN like this will I be able to print remotely on my business printer from my home ? I suppose I would have to do an allow rule because the printer is on the main LAN and the VPN would have a separated VLAN ?
@MactelecomNetworks
3 жыл бұрын
Hey you will be able to print. Also you’ll have to make firewall rules to NOT allow the VPN to networks as it will have access to everything. I have a video on VPN and firewall rules
@antoinedurand737
3 жыл бұрын
@@MactelecomNetworks Thank you Cody ! I’ll check that video
@olofdieckhaus
3 жыл бұрын
What is the average speed you get from an iPhone connected? I only get intermittent speeds of approx 15-25 mbit when I tunnel everything through VPN from phone and run a speed test.
@MactelecomNetworks
3 жыл бұрын
Those speeds seem about right. The unifi VPNs are not that fastest
@michalsz2
3 жыл бұрын
Hello, I'm able to connect to VPN from the client machine but I can access any devices on remote network, Cant even ping the UDM ,Any ideas?
@merchmerch7430
3 жыл бұрын
Windows computers needing VPN (L2TP) access need a registry tweak. And some settings on the vpn settings after creating the win built in vpn
@fj5492
3 жыл бұрын
Will this slow down the whole network ? I want to just vpn into my windows computer.
@PriscoPellegrino
3 жыл бұрын
Great video but my vpn is not working on unifi with my iphone.i did all the config that you done on video
@MactelecomNetworks
3 жыл бұрын
Make sure your not connected to the wifi of your network that the VPN is on
@PriscoPellegrino
3 жыл бұрын
@@MactelecomNetworks i tried with my phone with no wifi
@j.schipper5182
3 жыл бұрын
@@PriscoPellegrino Did you do the RADIUS setup in the classic or new settings? I did it first in the new settings but it seems the bug is still not fixed with the new settings which is unchecking the Clients checkbox in the RADIUS server section (you can only check this in the classic settings). Only fix is to SSH into the UDM and execute some commands as described in this post and this will re-enable the Clients checkbox. I also needed to delete the already created user and setup another name otherwise it was still not working for me. community.ui.com/questions/USG-L2TP-issue-Authentication-Failed/17ecd602-5c95-4b35-8dd6-7fcacbfd892c
@bntambridge
3 жыл бұрын
@@j.schipper5182 Thanks for this. Had this problem too
@KyleRiley721
3 жыл бұрын
For an android user what is the IPSEC Identifier? Would that be the name of the network you created for the Remote User VPN (L2TP)?
@KyleRiley721
3 жыл бұрын
EDIT: I figured it out. If you are using an android then you leave "L2TP Secret" and "IPSEC Identifier" blank it should work. Willie Howe does this on the USG with an Android phone and configures it pretty much the same way Cody does. kzitem.info/news/bejne/0KqbmY6saYqVrIo&ab_channel=WillieHowe
@MactelecomNetworks
3 жыл бұрын
Hey just seeing this now. Glad you found it. I don't have an android so wouldn't have known
@Refugado
3 жыл бұрын
@@KyleRiley721 I'm trying to set up my android phone. It is working on Apple (IOS) but not on Android. I left those fields blank and by the time I'm connecting it asks for credentials.. After inserting the credentials it fails. Did you manage to establish the connection on your Android?
@KyleRiley721
3 жыл бұрын
@@Refugado Yes. You need to make sure you have radius set up with a user and password as well as your preshare key. Double check your WAN IP as well.
@Refugado
3 жыл бұрын
@@KyleRiley721 On my case it is working on Apple’s IOS and today I tested successfully on a Win10 PC. Still no luck with the Android phone. I guess my config are OK as I can connect on some platforms. Tried on 2 different Android phones and it fails on both :/
@justintemp
3 жыл бұрын
Is this how you view your cameras when away from the local network?
@MactelecomNetworks
3 жыл бұрын
Hey yes this can be done. But Unifi protect won’t work this way. Will release a video on that in a week or two
@justintemp
3 жыл бұрын
@@MactelecomNetworks thanks Cody, I'm looking for a solution for non unifi cameras such as hikvision so will give this a try. I have the classic version of the controller, holding off updating as heard there's issues
@tomazraboteg9625
3 жыл бұрын
you do not need to expose Radius to Public (do not Portforfward that!).. Radius is only needed for local Auth on UDM!
@MactelecomNetworks
3 жыл бұрын
Doesnt work without the 1812 rule
@tomazraboteg9625
3 жыл бұрын
@@MactelecomNetworks than it is something else.. L2TP/IPSEC only need 1701,500,4500 ... You should never expose your Radius Server to internet.. I do not have UDM so I cant say (mostly use Mikrotik, PfSense.. UBNT only for WiFi) .. Radius Auth in principle it works like this: User dials in and sends Auth - UDM than asks Radius if this user is OK and Auth is OK - If OK you get the log in.. So maybe you need a local UDM firewall rule -- localhost allow to 1812 and 1813.. If it is not working without 1812/1813 ports than that is some bug in Unifi OS... None of the other vendors need that..
@MactelecomNetworks
3 жыл бұрын
@@tomazraboteg9625 community.ui.com/questions/USG-VPN-with-L2TP-use-which-ports/ed5c3029-0c72-46cf-92dd-ec9b38a55502 Community post it’s a little older. Either way good to know.
@tomazraboteg9625
3 жыл бұрын
@@MactelecomNetworks As said must be some weird thing in UBNT.. I personally would not expose my radius server .. I have multiple deployments ( PFsense - IKEv2 - Radius, L2TP with Radius - Mikrotik, IKEv2 - Radius - Mikrotik, SSTP with radius - Mikrotik). None needs 1812 open to Internet.. If you sniff traffic (wireshark) you will probably see the client does not send 1812 requests.. but I must say I am I bit puzzled by the UI-Team response... Instead of wireshark log all traffic from VPN client and check logs after connect.. There should not be any going to 1812.. But more importantly than ports can UDM support multiple users behind same public IP (Mikrotik does not, PfSense does!).. If you are in hotel and your users wnat to connect to VPN . they all come from the same Public IP.. This scenario is problematic in Mikrotik (thus change to IKEv2 or SSTP)
Пікірлер: 66