Ubiquiti has a weird way of doing "dhcp reservations." Under the Unifi Network application, you can add a device before its connected to the network as long as you know the hardware MAC addr for the port it's using for communication on the network. Unifi Network -> Client Devices -> Computer/Phone/Tablet icon in the top right of that page -> Modal window should pop-up asking for the MAC addr, alias, fixed IP if you want to add one, and local dns record.
@@TallPaulTech ubiquiti is a bit quirky sometimes especially in the UI..... sometimes for the worst. I never really used that feature since my network doesn't change too often but I do use the reservation feature just so I have certain devices with a static ip.
Sometimes ISPs cache the mac address of the modem device which may affect the service coming up with new hardware. Maybe try powering off the old router for 30 mins then swapping out the hardware or even clone the mac address if you can.
@@TallPaulTech Yeah it sucks, especially with Ubiquiti tying to "auto" setup the incoming WAN. Looking at the video, nugget has the standard TPlink Archer V1500xxx modem router that iiNet & TPG give out. You can put it it into bridge mode but it's a bit of a fuck around... You need to delete all the WAN interfaces inside the TPlink then create a bridge mode WAN interface. Once done, you need to go back into Unifi and manually setup a PPPoE WAN connection with a VLAN tag of 2. With iiNet there is no connection password but Unifi insists on a password when you create the PPPoE connection, so you can just populate the password field with "password" just to shut it up. I'm reasonably sure TPG connections work the same way. When set to bridge mode that TPlink Archer is extremely reliable and mine never missed a beat.
I got the details from his old router, and of course the reset happened. I just couldn't be fucked looking at it properly there in the noise, so I'll go back out of hours.
As someone who bought into the Unifi ecosystem, I always thought it a good quality bit of kit that just worked. But as of recent the only thing I've wanted to do is nuke unifi and put linux on it. Absolutely sick of the configuration options that either don't exist or just don't do anything.
Yeah, it kind of seems like plenty of gloss, but when you start scratching the surface it shows its weaknesses. This is why I like OPNsense because it's to the point, without flash, and made with language that a network guy would use
It used to work but then there was an update - welcome to the modern world of tech! :) I wonder if there is a way to force the Unify APs into a mixed mode / compatability mode - I've seen issues with older machines connecting to more modern APs when I had settings in dd-wrt to use wide-channels for better performance. Also, "got shit here, shit over there" is the very definition of the internet and modern networking ;) Keep fighting the fight man!
There's a whole heap of reasons why old machines struggle with modern Wi-Fi standards. 802.11ax is another one (HE in the capture), but I didn't find a way to disable this either in the config.
Looks like that Aruba went down on some Sheila on her rags haha, beside the silly licencing I thought those were solid units to put openwrt on?! Guess this install was just to offload free gear to your mate. BTW can we put the BYD on the dyno?
Their logic for the firewall rules is a fucking nightmare. You need a catch all permit rule at the top that matches established sessions for the thing to even be stateful. Rules for the wireguard clients have to be set as LAN-OUT.
I use Ubiquiti at home with Starlink as my local ISPs don't want to give me fiber, so I'm locked behind CGNAT. Which means I lose all VPN options unless I set up a tunneling service with an VPS which I then gotta pay for as well. It has teleport VPN which routes via their cloud, I hate cloud stuff like this but in this case it's the only option and it works so I can't complain. I'll soon have an apartment in a different country which means I will have a chance to try the site to site VPN / SDWAN features. Hope that's gonna work as I need at least one public IP for that.
Thanks for introducing LibreNMS, that looks like just the kind of tool I need.
Ubiquiti has a weird way of doing "dhcp reservations."
Under the Unifi Network application, you can add a device before its connected to the network as long as you know the hardware MAC addr for the port it's using for communication on the network.
Unifi Network -> Client Devices -> Computer/Phone/Tablet icon in the top right of that page -> Modal window should pop-up asking for the MAC addr, alias, fixed IP if you want to add one, and local dns record.
Okay, I'd have never guessed that up there. I clicked it, and the popup for MAC/Device alias came up, but the Fixed IP Address box isn't tickable.
@@TallPaulTech ubiquiti is a bit quirky sometimes especially in the UI..... sometimes for the worst. I never really used that feature since my network doesn't change too often but I do use the reservation feature just so I have certain devices with a static ip.
2:54 when i dont know where the cable goes to. i disconnect and see who screams first
Sometimes ISPs cache the mac address of the modem device which may affect the service coming up with new hardware. Maybe try powering off the old router for 30 mins then swapping out the hardware or even clone the mac address if you can.
TPG requires vlan 2 for the Wan
Well shit, that's just silly. I'll have a go though and see next time I'm out there.
Yep, same with iiNet
@@TheAVJedi If true, then that squats to piss
@@TallPaulTech Yeah it sucks, especially with Ubiquiti tying to "auto" setup the incoming WAN. Looking at the video, nugget has the standard TPlink Archer V1500xxx modem router that iiNet & TPG give out. You can put it it into bridge mode but it's a bit of a fuck around... You need to delete all the WAN interfaces inside the TPlink then create a bridge mode WAN interface. Once done, you need to go back into Unifi and manually setup a PPPoE WAN connection with a VLAN tag of 2. With iiNet there is no connection password but Unifi insists on a password when you create the PPPoE connection, so you can just populate the password field with "password" just to shut it up. I'm reasonably sure TPG connections work the same way. When set to bridge mode that TPlink Archer is extremely reliable and mine never missed a beat.
Those link lights on the Unifi routers are bloody bright!
power cycle the nbn ntu (that's a cable tv /HFC network modem)
likely need a phone call to his isp for the pppoe details
I got the details from his old router, and of course the reset happened. I just couldn't be fucked looking at it properly there in the noise, so I'll go back out of hours.
As someone who bought into the Unifi ecosystem, I always thought it a good quality bit of kit that just worked. But as of recent the only thing I've wanted to do is nuke unifi and put linux on it. Absolutely sick of the configuration options that either don't exist or just don't do anything.
Yeah, it kind of seems like plenty of gloss, but when you start scratching the surface it shows its weaknesses. This is why I like OPNsense because it's to the point, without flash, and made with language that a network guy would use
This is one of many reasons I fell for Mikrotik.
@@dennisolsson3119 Like bitches who smile
You've done all the inside pen testing for the crooks. Nice
It used to work but then there was an update - welcome to the modern world of tech! :)
I wonder if there is a way to force the Unify APs into a mixed mode / compatability mode - I've seen issues with older machines connecting to more modern APs when I had settings in dd-wrt to use wide-channels for better performance.
Also, "got shit here, shit over there" is the very definition of the internet and modern networking ;)
Keep fighting the fight man!
There's a whole heap of reasons why old machines struggle with modern Wi-Fi standards. 802.11ax is another one (HE in the capture), but I didn't find a way to disable this either in the config.
Nice install. Did that Beacon frame you showed from the Ubnt have "US" shown as the country code?
Yep. You can see it there czcams.com/video/mlO5crleqU0/video.html
Could that be why the older client didn't show the SSID of the network?
Looks like that Aruba went down on some Sheila on her rags haha, beside the silly licencing I thought those were solid units to put openwrt on?!
Guess this install was just to offload free gear to your mate. BTW can we put the BYD on the dyno?
Nothing's free in this world. As I said, the NVR is something he can use.
Can you make a vid about how to chock such traffic(wifi) using wireshark? Same for Bluetooth etc
chock?
Their logic for the firewall rules is a fucking nightmare.
You need a catch all permit rule at the top that matches established sessions for the thing to even be stateful.
Rules for the wireguard clients have to be set as LAN-OUT.
I use Ubiquiti at home with Starlink as my local ISPs don't want to give me fiber, so I'm locked behind CGNAT. Which means I lose all VPN options unless I set up a tunneling service with an VPS which I then gotta pay for as well. It has teleport VPN which routes via their cloud, I hate cloud stuff like this but in this case it's the only option and it works so I can't complain. I'll soon have an apartment in a different country which means I will have a chance to try the site to site VPN / SDWAN features. Hope that's gonna work as I need at least one public IP for that.
If only IPv6 was everywhere
@@TallPaulTechStarlink has ipv6 setup properly but most people have no clue how to use it.
Could have sworn ipv6 wasn't a thing when I first got Starlink. I should try that then.