At my mothers home there is a gateway Ux with latest OS 4.0.21 and network 9.0.120 for this device.

This device did always connect to my home via a VPN.

Since yesterday the VPN won't connect anymore.

This Problem started after I did Update to OS 6.0.12 and network 11.0.89

Does anyone seen same issue or have any solution?

UniFi Network 11.0.83 added something a lot of people have been asking for: Network Lists can now pull IP and domain lists from an external URL and refresh them on their own. That means you can feed threat intelligence straight into your UniFi gateway, with no scripts, cron jobs or extra box.

We put together a setup guide for using this with Q-Feeds.

What you need

• UniFi Network 11.0.83 or later on UniFi OS 6.0.10 or later
• A Q-Feeds API token (the Community edition is free)

How it works

1. Go to Networks > Network Lists > Create New
2. Create a list with Type IP, Source Dynamic, and paste the Q-Feeds malware IP feed URL with your token
3. Create a second list with Type Domain for the malware domains feed
4. Set both to refresh every 24 hours
5. Add zone-based firewall policies that block traffic to and from those lists

That's it. The gateway downloads the lists itself and alerts you if an update fails.

A few honest notes

• UniFi refreshes these lists every 24, 48 or 72 hours, so you get fresh data once a day. Plus and Premium give you more indicators, not faster updates on UniFi.
• Domain blocking only works for clients that resolve DNS through your gateway. Devices with their own DNS server or DNS over HTTPS can get around it.
• If your gateway struggles with the list size, add &limit=100000 (or lower) to the URL. You'll keep the newest indicators.

Full guide: https://qfeeds.com/knowledge-base/unifi-setup/ More info: https://qfeeds.com/unifi-integration/

This feature is brand new, so if you try it we'd like to hear how it works on your hardware (UDM, UCG, UXG and so on), especially how large lists hold up. Questions welcome in the comments.

I've been testing the new UniFi AirWire, and so far the results have been a bit underwhelming compared to my existing Wi-Fi setup.

My setup:

• Access point: UniFi U6 Enterprise with a 2.5 GbE uplink
• Distance: Approximately 15 meters (50 ft) from the AP
• Obstacles: Thick stone walls and two doors between my PC and the AP
• Existing Wi-Fi adapter: Intel Wi-Fi 7 BE202 with an external antenna
• Testing: iPerf3 throughput measurements

Here are my results:

Moving the AirWire closer to a doorway made a huge difference, nearly doubling the throughput. However, even with enhanced mode enabled and external power connected, it still falls short of my existing Intel Wi-Fi adapter.

One thing worth mentioning is that I haven't tried relocating the Intel Wi-Fi antenna closer to the doorway. I don't currently have the necessary extension cables, but that would probably be a more apples-to-apples comparison.

I wasn't necessarily expecting miracles given the thick stone walls, but I was hoping the AirWire would at least match or outperform my existing setup.

Has anyone else tested the AirWire against a decent PCIe Wi-Fi adapter with external antennas? I'd be interested to hear how it performs in similar challenging environments.

Hi,

I have a UniFi USW 48 PoE switch connected to Aruba ClearPass, where EAP-TEAP authentication consistently times out in Access Tracker.

MAC authentication works without any issues. I have the same EAP-TEAP configuration running on Aruba switches at other sites, and everything works as expected.

The issue only occurs at the site using the UniFi switch. Has anyone experienced similar issues with EAP-TEAP authentication on UniFi switches?

I have had a few people mention the doorbell is running very hot when touched.

Not got anything to measure it with but doesn't seem normal considering it's a cloudy grey day with no direct sunlight.

Anyone else have same issue?

I’m manage about 20 unifi sites. Onboarding a new client and they have a watchguard gateway that I can’t chuck just yet so I went with a Cloudkey+, first time using it, though I had an original cloudkey a long time ago.

Part of the onboarding was replacing their decrepid wifi, added the APs, a few new switches, all goes smoothly.

Then reboot the Cloudkey and all devices showup as managed by another. So I ssh in and factory reset and readopt. Make sure to do a backup, and reboot to test. Same thing, restore from backup, and nothing is adopted after restore.

Several fruitless hours with Claude later. I throw in the towel and open a ticket.

Their solution worked:
ssh to the Cloudkey and

echo "is_default=false" >> /data/unifi/data/system.properties

I guess something glitched in the initial setup, but there probably should be more checks than one flag in a system config before the device db gets reset on boot.

Hey all,

I have a UniFi Travel Router Long Range (UTR-LR) bound to my home UniFi site. At home I only use it wired: it sits on Ethernet and runs a WireGuard tunnel. I don't need it to broadcast any Wi-Fi.

The problem: once it's bound to the site, it clones my home SSID (same name, same password). My Mac mini sees one network and joins the strongest radio, which is usually the UTR because it's closer. So my Mac mini ends up on the travel router instead of my real home APs.

What's missing, as far as I can tell:

- No option to turn off Wi-Fi broadcasting on the UTR (a wired-only mode while keeping WireGuard running).

- No option to give the UTR its own SSID name while it stays bound to the site. The only workaround I've found is to create an extra SSID on my home network first, just so the UTR can clone something with a different name. That's ridiculous.

What I'd like (either one would fix it):

1. A simple "Wi-Fi broadcasting on/off" toggle on the UTR, or

2. The ability to rename the UTR's SSID independently, so it doesn't clash with my home network.

Has anyone found a way to do either of these? Or is there a setting I'm missing (like excluding the UTR from "Broadcasting APs")?

Running the latest firmware. Thanks!

Has anyone successfully changed the screen settings on the UTR? I can’t get any setting to stick on it. I’m thinking it’s a bug, but I’m not sure.

Does any of you with UDM Pro enrolled in Early Access have got Network 11 update yet ?

I have a two-story 3300 square-foot house. Wood and drywall mostly, no concrete walls. I might have overdone it with the access points, but I have three of them. One is upstairs and it’s in a good central location. The other two are on the first level and are kind of an opposite corners of the house. One also needs to extend out into the backyard.

I’ve been playing around with broadcast powers of each of the access points. At first, it was just maximum for each of them. I adjusted all of them to low and things seem to be a little bit better. Especially some IOT devices on the fringe of the house.

I went outside of the backyard and low power doesn’t seem to really cut it for reaching the very back section where people will be sitting.

Lots of recommended approach to tuning levels? I do have a Wi-Fi man scanner if that helps.

I'm trying to get my UDR7 working directly with my Bell Canada connection using PPPoE, without success.

I've been troubleshooting this for a while and I'm basically stuck, even AI can't figure it out. so I'm hoping someone familiar with Bell PPPoE + UniFi can point me in the right direction.

Initially, I tried configuring PPPoE on the UDR7 using my existing Bell credentials. The connection would not work properly, so I contacted Bell. They provided me with a new PPPoE username and password. With the new credentials, the UDR7 now successfully establishes the PPPoE connection and receives a WAN, Public IP address. So authentication appears to be working.

Current problem ? The strange part is that I seem to have partial connectivity. From my Mac in terminal connected to the UDR7:

I can ping 1.1.1.1

• I can ping other IP addresses
• I can resolve/ping domains
• But normal web traffic does not work
• Websites will not load in Safari/Chrome/etc.
• Other applications that require normal Internet connectivity also don't work properly

Current UDR7 configuration

WAN:

• Connection type: PPPoE
• Bell username/password: confirmed working
• MTU: 1492 (or auto)
• UDR7 receives a Public WAN IP
• IPv4 enabled, IPV6 Disable

I have not intentionally configured anything unusual on the firewall. (Other device does the same on the network)

I also previously tried using the Bell Giga Hub with DHCP instead of PPPoE. That gives me Internet access, but obviously creates a double NAT, which I am trying to avoid.

I've gone through the usual troubleshooting:

• Confirmed the Bell PPPoE credentials with Bell
• Confirmed the UDR7 establishes the PPPoE session
• Confirmed the UDR7 receives an IP address
• Tested DNS
• Tested ping to external IPs
• Tested ping to domains
• Changed DNS servers, including 1.1.1.1
• MTU change

MSS have been change to 1492, 1432, no change

At this point I'm trying to avoid randomly changing settings and would really appreciate someone who has successfully run Bell Canada PPPoE directly on a UniFi Dream Router/UDM telling me what their configuration looks like.

There is also Advance DMZ, but not looking to go that way right now.

Thanks!

I am trying to setup Frigate NVR mobile app. When trying to connect to the server it says it requires https port 8971. I can’t figure out how to change this. It used to be that you could change it in system.properties. But that was when there was a desktop application. I am using a UDM Pro and access it through the web on my Windows PC and don’t have a system.properties file that I can edit. Anyone have any ideas?

Any one have a clean setup for UHF(rfid) for gate , with stickers on windshield, they don’t want plates readers.

*on unifi system.

Any help would be appreciated.

I just picked up a USW PRO 48 switch from Facebook marketplace that the guy said he couldn't get to boot. It runs the typical boot procedure on the screen with the time remaining and everything, eventually gets stuck on "it is taking a little longer" and then turns into a device requires restart screen. I've tried the reset pin multiple times, power cycling etc. I tried pinging it from my laptop but I cant even get a connection to it I think because it is failure to boot properly. Fan does run when powered on.

Any ideas?

Why my UGC Ultra, doesnt have the version 6 , And why we are still in the Version 5, we need the version 6 for the Network 11 to work

I cannot get the UniFi WiFi Uplink to work with my Huawei Router. IP / DHCP conflicts.

It works perfectly with my iPhone.

Any suggestions how to fix the issue.

I have external RADIUS working on my Unifi APs on a Windows NPS server. Standalone Windows 2025 Sever, no AD. Usernames put a device on a specific VLAN.

Problem is, the usernames/passwords can be shared and untrusted devices can join this SSID. I need to make sure only approved devices can connect. The device is prompted to accept the SSL cert after successfully authenticating.

I could enable MAC Address Filtering. Is that sufficient? Other than that, what else should I do?

I just added a unifi drive for our stack at work. I have all our employees setup with network access through unifi identity for 1 click wifi and 1 click VPN. I just installed a UNAS Pro, can I not give access from the same people list in the network console in the drive console, even though I can do cameras?

Title. I’m looking for a good router that isn’t overkill.

I have gigabit fiber running into an ATT BGW320 router/modem that I’m planning on putting into passthrough. I have multiple IoT devices that I would either like to put on its own VLAN or just use the 2.4 GHz. I also would like to put my wife and I’s computers on their own network where they will be wired, but our laptops have wireless access as well, and also add a separate guest network.

I know most, if not every, router supports VLAN, but I would like to be steered in the right direction in terms of my needs and reasonably priced.

Thank you!!

EDIT: Just bought a DR7. Thanks yall!

The documentation is far from clear here. I realize that there is a RJ-45 POE++ port and a SFP+ slot on the unit. we would prefer running 10Gb over the RJ-45 from our switch as running fiber to the locations we want to use them will be very difficult at best. (small conduits and lots of bends).

If we must use fiber to get the 10Gb throughput we need then can the the POE++/RJ-45 port use the existing Shielded Cat-5E cable we have installed or do we need to upgrade that to Cat-6/Cat-6a cable for the unit to work properly? (i am assuming that if the fiber is used for data transport then the only thing the copper port is used for is to provide power to the unit.

Constructive thoughts on this please.

Hello,

I am hoping someone might be able to answer some questions I have regarding a project I am working on.

I have a site that is currently using a Cloud Key Gen 2 with Access control on it. This houses all of the door readers and users and their respective cards as you would expect it to have. I have been working on a project to get all the sites I manage into the same UID Enterprise workgroup, so that user credentials can work cross site when they travel between sites.

This site was unfortunately set up without being put into the UID workgroup, so all of the user credentials are in the cloud key console already. I am trying to understand the order of operations I need to take to complete the following:

\- Switch the main console from the cloud key to an Enterprise NVR, bringing over all of the data that it had associated with it (door readers, users, cards, etc)

\- Associate the NVR with the UID Enterprise workgroup

From what I have read, since the users are already in the cloud key console, I would basically have to remake every user and re scan their cards, as UID doesnt support transferring subsequent consoles' users after the first one. Since I am moving things to the NVR, would it be best to try and remake everything?

Does anyone have a recommended list of steps that they would recommend? Or know of where I can find a detailed list of what steps I should take? I honestly dont know how to proceed with this without major downtime for the site regarding their access control.

If there is anything I left out that might need more clarification, please let me know.

Trying to get the Unifi OS local RADIUS to work. On multiple Windows 11 laptops, I type in the username/password and it just keeps asking for the login over and over.

SSID is setup as WPA2/WPA3 Enterprise. Network is set to Native Network (same VLAN to manage APs).

I have following VLANS setup under Networks:

Name: VLAN5-PUBLIC ID=5, VLAN101_WIFI ID=101

I know the VLANs work, works when I use WPA3.

Under local credentials, I have:

username: test password: test, VLAN 101, Tunnel Type 13, Tunnel Medium Type 6

How do I figure out why it keeps prompting me to enter my user/pass when I know I'm typing it in correctly?

New unifi network 11 allows wifi uplink as WAN!!!!!! Unfortunately only some devices with built in wifi work but its the one major feature I've been waiting for

Hi,

Is there a guide online on how to MAC spoof? I’ve been struggling with my UTR in a few airports over the last weeks.

I’m on iPhone which I understand has a built in renewing MAC each time it connects to a new network?

Thanks