Good video as usual 🤘🏻 merry Christmas to you and your beloved ones! One thing I want to add or to mention: you could do the same with pihole&unbound or adguard(&unbound). You should also lock/disable the dns section within the network adapters via windows policy. Otherwise they are able to bypass the dns service
Another option is to block all DNS traffic not bound for your specified DNS IP addresses (and if you want to get really tricky you can reroute all DNS traffic to your specified IPs.
Merry christmas! Do you know if Unifi is going to support in the future multiple VLANs through the WAN interface? I have Internet, IPTV and VOIP from my ISP segregated in three VLANs but only can set up one VLAN in WAN port.
Do you have to use 'Routes' if it's all on the same WAN? I have a block of static IP's and just set the IP in 'Internet Source IP' in the VLAN seems to work fine? Merry Christmas!
Forgot to ask you whether or not you had any issues with PPPoE pass through with the GigaHub and your UDM-SE? Last time we spoke, you were still just using the Pro.
How to get it working the other way around: I have multiple WAN IPs on my UDM pro. One VLAN connected to VLAN80. Port forwarded on that IP, however, all connections seem to follow that forwarding. Would love to have multiple servers, servicing the same ports, but for different WAN IPs.
Hi. I'm doing the same with WAN2 for several VLANs / Devices. But one thing what doesn't work is, that when WAN2 lost it's connection it automatically jumps back to WAN1 - that 'not' what I want. Is there any way or rule, to stop this. I want it to stay on WAN2.
2:12 That's weird I don't have internet source IP when I create networks on my UDM SE. Both my WANs are DHCP so presume that's the reason? Nice video. Thank you for sharing 🙂
Hello is it possible to send another static IP from from isp provider to at specific port in my UDM My UDM has IP lets say 212.115.87.220 (i have 5 static IP form my ISP povider) but i have to send another staic IP 212.115.87.221 to another client (eg router) who i patched on port 8 in the UDM is that possible :??
This just layer 3/4 filterrimg so simple DoH will pass thru. Ubiquiti isnt any good at content filter. Today L7 is needed. IPS? Without deepssl you'll see only what is unencrypted where most of traffic nowadays is encrypted;)
When I grow up, I wanna be like Cody.
as always - invaluable content Cody - keep up the great work
Good video Cody. Thanks for sharing.
Good video as usual 🤘🏻 merry Christmas to you and your beloved ones!
One thing I want to add or to mention: you could do the same with pihole&unbound or adguard(&unbound). You should also lock/disable the dns section within the network adapters via windows policy. Otherwise they are able to bypass the dns service
Another option is to block all DNS traffic not bound for your specified DNS IP addresses (and if you want to get really tricky you can reroute all DNS traffic to your specified IPs.
great job as always
Well explained, thanks!
Very nice and informative.
Merry christmas! Do you know if Unifi is going to support in the future multiple VLANs through the WAN interface? I have Internet, IPTV and VOIP from my ISP segregated in three VLANs but only can set up one VLAN in WAN port.
DNS filter is really really good ! Strong too !! Good video Cody !
Do you have to use 'Routes' if it's all on the same WAN? I have a block of static IP's and just set the IP in 'Internet Source IP' in the VLAN seems to work fine? Merry Christmas!
This is the way I’ve done it too
DPI is a nice feature as well.
Good video.
Forgot to ask you whether or not you had any issues with PPPoE pass through with the GigaHub and your UDM-SE? Last time we spoke, you were still just using the Pro.
Hi. Great video. Is it possible to have HA with two UDM SE so when one fails the other takes over, even if the connection states are lost.
Hey,
Yup it is Ubiquiti calls it shadow mode and I demonstrate it in this video
czcams.com/video/-O5v41grrFc/video.html
How to get it working the other way around: I have multiple WAN IPs on my UDM pro. One VLAN connected to VLAN80. Port forwarded on that IP, however, all connections seem to follow that forwarding. Would love to have multiple servers, servicing the same ports, but for different WAN IPs.
Hi. I'm doing the same with WAN2 for several VLANs / Devices. But one thing what doesn't work is, that when WAN2 lost it's connection it automatically jumps back to WAN1 - that 'not' what I want. Is there any way or rule, to stop this.
I want it to stay on WAN2.
2:12 That's weird I don't have internet source IP when I create networks on my UDM SE. Both my WANs are DHCP so presume that's the reason? Nice video. Thank you for sharing 🙂
I also don't have the chance to select WAN2 within networks. Even when connected to two different WAN networks.
You might have to scroll down. I saw it at the bottom of the screen.
would it be similar if a small office has a fiber /30 ip
Hi There Mac, What's that software you use for the schematics ? Looks very nice.
Hey,
It’s lucidcharts
Hello is it possible to send another static IP from from isp provider to at specific port in my UDM
My UDM has IP lets say 212.115.87.220 (i have 5 static IP form my ISP povider) but i have to send another staic IP 212.115.87.221 to another client (eg router) who i patched on port 8 in the UDM is that possible :??
This just layer 3/4 filterrimg so simple DoH will pass thru.
Ubiquiti isnt any good at content filter. Today L7 is needed. IPS? Without deepssl you'll see only what is unencrypted where most of traffic nowadays is encrypted;)