4 ms·

I know nothing about this particular product, but I would not buy anything from UniFi where you will be sad if it becomes essentially useless for any remotely n

by amluto 1y ago

I know nothing about this particular product, but I would not buy anything from UniFi where you will be sad if it becomes essentially useless for any remotely nontrivial use case. In recent days, I've encountered at least the following issues: - Removing a fixed DHCP address from a device that is no present requires switching to the old UI. - Gateway network traffic by client is flat-out broken. - My particular combination of hardware does not support UniFi's speedtest. Dunno why. They don't care. - Doing almost anything temporarily disruptive to the network resuts in long-lasting disruption as the controller re-adopts everything. - Per-port switch settings are janky. They often result in the settings page and the actual applied settings not being in sync. And sometimes the port I want to configure is missing. (Seriously, the ports will be in numeric order except one is skipped. So maybe I have port 1, 2, 3, 5, 6, 7, and 8. Traffic is passing on port 4 just fine, but there is no port 4 as far as the UI is concerned. - Network ACLs are a serious mess and often simply don't work, although I admit it's been a little while since I've re-tested this issue. (The ones above are all things I've encountered very recently.) I'm sure I'm forgetting something. UniFi is... sort of featureful but not actually impressive.

pharos92 1y ago
90% of the product effort goes into out-appleing apple on their website
- Andrex 1y ago
  If that's the goal I think they succeeded, I could barely browse it on my old laptop.
q3k 1y ago
Also add to this that they tend to randomly (soft-)EOL products. I've already been bitten by this twice (first by their early CCTV systems, then by their EdgeRouter series of devices). Don't buy Ubnt unless you're ready to replace it by something else when things go wrong.
- InTheArena 1y ago
  The Edge Router line has been what, 5 years old since any major update? But these are still being supported. The CCTV stuff was replaced, again 5+ years ago, but I have been using Unifi switches, and Unifi protect for ~10 years now, and have not had a problem. Unifi Protect also supports ONVF now, which means it supports third party cameras, which was part of the reason people didn't like protect originally.
  - kuschku 1y ago
    > The Edge Router line has been what, 5 years old since any major update? Where's the replacement for those anyway? From what I can tell, the new unifi routers don't even officially support SSH or Serial login, nor do they support the typical configure/commit/abort procedure, nor do they officially support loading/backup up config files, nor running custom cronjobs (which I need as German ISPs require even on FTTH a 24h reconnect, and if you don't schedule one, they'll schedule one for you)
    - zettabomb 1y ago
      I believe UISP stuff is intended to be the replacement for the Edge line. Haven't tried it yet, but my impression is that it's more similar to the Unifi line in terms of interfaces.
    - InTheArena 1y ago
      They do support SSH and well beyond feature parity with the edge switches (finally). But yes, they are UI driven not text driven.
      - kuschku 1y ago
        How does it have feature parity if I have no ability to change the entire configuration programmatically, on reaction to certain changes? My ISP requires a reconnect every 24h, assigning a new IPv4 and IPv6 prefix after every reconnect. That means after each reconnect I need to update DNS entries via RFC 2136, update the IPv6 range for VPN clients, and reconfigure my DECT basestation with the new IP addresses. Currently I've got scripts as part of the config bundle that use the vyatta configure CLI to update the configuration after every reconnect, which also run on a crontab timer. How would I support this use case on UnifiOS?
tills13 1y ago
I mean it's a case of use the right tool for the job. For consumer, it's overkill. For pro-sumer, it's perfect, imo. You can start pushing the boundaries, here, but most will not for residential. If you are pushing the boundaries, you are probably savvy enough to roll your own solution or get into the actual, hard-core enterprise stuff. For small businesses, it's similar to pro-sumer. For enterprise, use something else. But honestly, you could make it work for any of these, 99% of the time. I fall squarely into pro-sumer and my setup has been flawless for me. It's got all the bells and whistles I could ever need while not being too overkill nor really that expensive in the grand scheme of things. I am planning on switching over from Synology to a UNAS for the integration with Identity. It sounds like you are the exception for pro-sumer.
- iosjunkie 1y ago
  Agreed 100%. Perfect prosumer / small business setup.
- phil21 1y ago
  Unifi is what you swap over to once your time becomes more scarce and money more plentiful. At least in all the cases of my peer group. It's far less customizable, and can be maddening sometimes if it doesn't Just Work(tm) - debugging it can be a giant pain. You will also be paying the Ubiquiti tax. I simply redesigned my overly complex home network to be much more boring, and am okay with that. I don't want to tinker with my home IT stuff much these days - I want it to just work, and changes to be easy. I've found Unifi Network and Unifi Protect to have come a long way in the past 3-4 years. They still drop hardware duds and software bugs here and there, but overall it's been a rather decent experience for the most part. I understand all the core level technology and configuration bits, but I simply do not have the desire to ssh into switches or whatever to configure a new port these days. Then open source NVR story is also just horrible even today. It's also great for remote installs for other non-technical people/orgs I help out with. One dashboard I can just click on and go take a look to figure out whatever problem they may be having. And a new setup takes hours vs. days.
  - tills13 1y ago
InTheArena 1y ago
1)It's been forever since I have used the legacy interface, so I google'd it it went away in 7.3, which was 2+ years ago, so it seems you may be on a very very old version of Unifi US. I'm running 9.5.18, and I can confirm that option no longer exists (or is needed) 1) Also on the current version, to remove a DHCP client you can click on Client Devices / DHCP, and remove there. I just tested that as well. 2) Gateway traffic by individual client, ip, zone, etc works fine, in my experience, but I am also using Policy Engines, which I don't believe is supported on the version you are using. Policy engines can apply QoS, security, or routing to any object - ip, subnet, any sort of logical grouping. 3) I agree that it used to have a lot of problems with re-adopting, but it's been a while since I have seen that - the only time I ever see a re-adopting screen is after a OS re-install. 4) Network ACLs where replaced with policy again, but again, that's pretty new - you may be running a old version.
- Macha 1y ago
  The legacy UI settings are available in Network > System > Interface in my UDM SE running Unifi Network 9.4.x
rcdemski 1y ago
I don't know answers to all of yours but the couple I do know... - The fixed DHCP addresses are found under Client Devices. Click the Globe icon above the search box (To the right of the binoculars) to get the DHCP blade. All fixed reservations are listed, even for offline devices. -For ACLs I've had great success with their new object based model that I believe came in Network 9.3. Settings > Policy Engine > Objects I'm curious which devices you're using for both the gateway and switching equipment.
- amluto 1y ago
  > The fixed DHCP addresses are found under Client Devices. Click the Globe icon above the search box (To the right of the binoculars) to get the DHCP blade. All fixed reservations are listed, even for offline devices. This was almost the first thing I tried. It says "No Connected Clients" "Add new clients to see their usage and application data." For fun, I added a made-up client using that UI and there are still no clients. Oh, and the dialog to add a client doesn't ask which "network" to add it to, which is one of several examples of UniFi internal schema not matching reality. (Have fun trying to track down a client that has recently existed on two different VLANs. UniFi clearly has some fundamental architectural problems here.) > -For ACLs I've had great success with their new object based model that I believe came in Network 9.3. Settings > Policy Engine > Objects Huh, cute. This one is aware of VLANs. I wonder if it actually works well -- given the number of times I've seen UniFi misapply various security rules, I'm skeptical, but it would be handy if it actually works. It would be extra nifty if it worked seamlessly across wired and wireless networks.
psyclobe 1y ago
Haters gonna hate
nerdsniper 1y ago
What would you recommend instead?

by amluto 1y ago

pharos92 1y ago

90% of the product effort goes into out-appleing apple on their website

Andrex 1y ago
If that's the goal I think they succeeded, I could barely browse it on my old laptop.

q3k 1y ago

Also add to this that they tend to randomly (soft-)EOL products. I've already been bitten by this twice (first by their early CCTV systems, then by their EdgeRouter series of devices). Don't buy Ubnt unless you're ready to replace it by something else when things go wrong.

InTheArena 1y ago
The Edge Router line has been what, 5 years old since any major update? But these are still being supported. The CCTV stuff was replaced, again 5+ years ago, but I have been using Unifi switches, and Unifi protect for ~10 years now, and have not had a problem. Unifi Protect also supports ONVF now, which means it supports third party cameras, which was part of the reason people didn't like protect originally.
- kuschku 1y ago
  > The Edge Router line has been what, 5 years old since any major update? Where's the replacement for those anyway? From what I can tell, the new unifi routers don't even officially support SSH or Serial login, nor do they support the typical configure/commit/abort procedure, nor do they officially support loading/backup up config files, nor running custom cronjobs (which I need as German ISPs require even on FTTH a 24h reconnect, and if you don't schedule one, they'll schedule one for you)
  - zettabomb 1y ago
    I believe UISP stuff is intended to be the replacement for the Edge line. Haven't tried it yet, but my impression is that it's more similar to the Unifi line in terms of interfaces.
  - InTheArena 1y ago
    They do support SSH and well beyond feature parity with the edge switches (finally). But yes, they are UI driven not text driven.
    - kuschku 1y ago
      How does it have feature parity if I have no ability to change the entire configuration programmatically, on reaction to certain changes? My ISP requires a reconnect every 24h, assigning a new IPv4 and IPv6 prefix after every reconnect. That means after each reconnect I need to update DNS entries via RFC 2136, update the IPv6 range for VPN clients, and reconfigure my DECT basestation with the new IP addresses. Currently I've got scripts as part of the config bundle that use the vyatta configure CLI to update the configuration after every reconnect, which also run on a crontab timer. How would I support this use case on UnifiOS?

tills13 1y ago

I mean it's a case of use the right tool for the job. For consumer, it's overkill. For pro-sumer, it's perfect, imo. You can start pushing the boundaries, here, but most will not for residential. If you are pushing the boundaries, you are probably savvy enough to roll your own solution or get into the actual, hard-core enterprise stuff. For small businesses, it's similar to pro-sumer. For enterprise, use something else. But honestly, you could make it work for any of these, 99% of the time. I fall squarely into pro-sumer and my setup has been flawless for me. It's got all the bells and whistles I could ever need while not being too overkill nor really that expensive in the grand scheme of things. I am planning on switching over from Synology to a UNAS for the integration with Identity. It sounds like you are the exception for pro-sumer.

iosjunkie 1y ago
Agreed 100%. Perfect prosumer / small business setup.
phil21 1y ago
Unifi is what you swap over to once your time becomes more scarce and money more plentiful. At least in all the cases of my peer group. It's far less customizable, and can be maddening sometimes if it doesn't Just Work(tm) - debugging it can be a giant pain. You will also be paying the Ubiquiti tax. I simply redesigned my overly complex home network to be much more boring, and am okay with that. I don't want to tinker with my home IT stuff much these days - I want it to just work, and changes to be easy. I've found Unifi Network and Unifi Protect to have come a long way in the past 3-4 years. They still drop hardware duds and software bugs here and there, but overall it's been a rather decent experience for the most part. I understand all the core level technology and configuration bits, but I simply do not have the desire to ssh into switches or whatever to configure a new port these days. Then open source NVR story is also just horrible even today. It's also great for remote installs for other non-technical people/orgs I help out with. One dashboard I can just click on and go take a look to figure out whatever problem they may be having. And a new setup takes hours vs. days.
- tills13 1y ago

InTheArena 1y ago

1)It's been forever since I have used the legacy interface, so I google'd it it went away in 7.3, which was 2+ years ago, so it seems you may be on a very very old version of Unifi US. I'm running 9.5.18, and I can confirm that option no longer exists (or is needed) 1) Also on the current version, to remove a DHCP client you can click on Client Devices / DHCP, and remove there. I just tested that as well. 2) Gateway traffic by individual client, ip, zone, etc works fine, in my experience, but I am also using Policy Engines, which I don't believe is supported on the version you are using. Policy engines can apply QoS, security, or routing to any object - ip, subnet, any sort of logical grouping. 3) I agree that it used to have a lot of problems with re-adopting, but it's been a while since I have seen that - the only time I ever see a re-adopting screen is after a OS re-install. 4) Network ACLs where replaced with policy again, but again, that's pretty new - you may be running a old version.

Macha 1y ago
The legacy UI settings are available in Network > System > Interface in my UDM SE running Unifi Network 9.4.x

rcdemski 1y ago

I don't know answers to all of yours but the couple I do know... - The fixed DHCP addresses are found under Client Devices. Click the Globe icon above the search box (To the right of the binoculars) to get the DHCP blade. All fixed reservations are listed, even for offline devices. -For ACLs I've had great success with their new object based model that I believe came in Network 9.3. Settings > Policy Engine > Objects I'm curious which devices you're using for both the gateway and switching equipment.

amluto 1y ago
> The fixed DHCP addresses are found under Client Devices. Click the Globe icon above the search box (To the right of the binoculars) to get the DHCP blade. All fixed reservations are listed, even for offline devices. This was almost the first thing I tried. It says "No Connected Clients" "Add new clients to see their usage and application data." For fun, I added a made-up client using that UI and there are still no clients. Oh, and the dialog to add a client doesn't ask which "network" to add it to, which is one of several examples of UniFi internal schema not matching reality. (Have fun trying to track down a client that has recently existed on two different VLANs. UniFi clearly has some fundamental architectural problems here.) > -For ACLs I've had great success with their new object based model that I believe came in Network 9.3. Settings > Policy Engine > Objects Huh, cute. This one is aware of VLANs. I wonder if it actually works well -- given the number of times I've seen UniFi misapply various security rules, I'm skeptical, but it would be handy if it actually works. It would be extra nifty if it worked seamlessly across wired and wireless networks.

psyclobe 1y ago

Haters gonna hate

nerdsniper 1y ago

What would you recommend instead?