I've been testing the new UniFi AirWire, and so far the results have been a bit underwhelming compared to my existing Wi-Fi setup.

My setup:

• Access point: UniFi U6 Enterprise with a 2.5 GbE uplink
• Distance: Approximately 15 meters (50 ft) from the AP
• Obstacles: Thick stone walls and two doors between my PC and the AP
• Existing Wi-Fi adapter: Intel Wi-Fi 7 BE202 with an external antenna
• Testing: iPerf3 throughput measurements

Here are my results:

Moving the AirWire closer to a doorway made a huge difference, nearly doubling the throughput. However, even with enhanced mode enabled and external power connected, it still falls short of my existing Intel Wi-Fi adapter.

One thing worth mentioning is that I haven't tried relocating the Intel Wi-Fi antenna closer to the doorway. I don't currently have the necessary extension cables, but that would probably be a more apples-to-apples comparison.

I wasn't necessarily expecting miracles given the thick stone walls, but I was hoping the AirWire would at least match or outperform my existing setup.

Has anyone else tested the AirWire against a decent PCIe Wi-Fi adapter with external antennas? I'd be interested to hear how it performs in similar challenging environments.

Hi,

I have a UniFi USW 48 PoE switch connected to Aruba ClearPass, where EAP-TEAP authentication consistently times out in Access Tracker.

MAC authentication works without any issues. I have the same EAP-TEAP configuration running on Aruba switches at other sites, and everything works as expected.

The issue only occurs at the site using the UniFi switch. Has anyone experienced similar issues with EAP-TEAP authentication on UniFi switches?

I have had a few people mention the doorbell is running very hot when touched.

Not got anything to measure it with but doesn't seem normal considering it's a cloudy grey day with no direct sunlight.

Anyone else have same issue?

I’m manage about 20 unifi sites. Onboarding a new client and they have a watchguard gateway that I can’t chuck just yet so I went with a Cloudkey+, first time using it, though I had an original cloudkey a long time ago.

Part of the onboarding was replacing their decrepid wifi, added the APs, a few new switches, all goes smoothly.

Then reboot the Cloudkey and all devices showup as managed by another. So I ssh in and factory reset and readopt. Make sure to do a backup, and reboot to test. Same thing, restore from backup, and nothing is adopted after restore.

Several fruitless hours with Claude later. I throw in the towel and open a ticket.

Their solution worked:
ssh to the Cloudkey and

echo "is_default=false" >> /data/unifi/data/system.properties

I guess something glitched in the initial setup, but there probably should be more checks than one flag in a system config before the device db gets reset on boot.

Does any of you with UDM Pro enrolled in Early Access have got Network 11 update yet ?

Hey all,

I have a UniFi Travel Router Long Range (UTR-LR) bound to my home UniFi site. At home I only use it wired: it sits on Ethernet and runs a WireGuard tunnel. I don't need it to broadcast any Wi-Fi.

The problem: once it's bound to the site, it clones my home SSID (same name, same password). My Mac mini sees one network and joins the strongest radio, which is usually the UTR because it's closer. So my Mac mini ends up on the travel router instead of my real home APs.

What's missing, as far as I can tell:

- No option to turn off Wi-Fi broadcasting on the UTR (a wired-only mode while keeping WireGuard running).

- No option to give the UTR its own SSID name while it stays bound to the site. The only workaround I've found is to create an extra SSID on my home network first, just so the UTR can clone something with a different name. That's ridiculous.

What I'd like (either one would fix it):

1. A simple "Wi-Fi broadcasting on/off" toggle on the UTR, or

2. The ability to rename the UTR's SSID independently, so it doesn't clash with my home network.

Has anyone found a way to do either of these? Or is there a setting I'm missing (like excluding the UTR from "Broadcasting APs")?

Running the latest firmware. Thanks!

Has anyone successfully changed the screen settings on the UTR? I can’t get any setting to stick on it. I’m thinking it’s a bug, but I’m not sure.

I have a two-story 3300 square-foot house. Wood and drywall mostly, no concrete walls. I might have overdone it with the access points, but I have three of them. One is upstairs and it’s in a good central location. The other two are on the first level and are kind of an opposite corners of the house. One also needs to extend out into the backyard.

I’ve been playing around with broadcast powers of each of the access points. At first, it was just maximum for each of them. I adjusted all of them to low and things seem to be a little bit better. Especially some IOT devices on the fringe of the house.

I went outside of the backyard and low power doesn’t seem to really cut it for reaching the very back section where people will be sitting.

Lots of recommended approach to tuning levels? I do have a Wi-Fi man scanner if that helps.

I'm trying to get my UDR7 working directly with my Bell Canada connection using PPPoE, without success.

I've been troubleshooting this for a while and I'm basically stuck, even AI can't figure it out. so I'm hoping someone familiar with Bell PPPoE + UniFi can point me in the right direction.

Initially, I tried configuring PPPoE on the UDR7 using my existing Bell credentials. The connection would not work properly, so I contacted Bell. They provided me with a new PPPoE username and password. With the new credentials, the UDR7 now successfully establishes the PPPoE connection and receives a WAN, Public IP address. So authentication appears to be working.

Current problem ? The strange part is that I seem to have partial connectivity. From my Mac in terminal connected to the UDR7:

I can ping 1.1.1.1

• I can ping other IP addresses
• I can resolve/ping domains
• But normal web traffic does not work
• Websites will not load in Safari/Chrome/etc.
• Other applications that require normal Internet connectivity also don't work properly

Current UDR7 configuration

WAN:

• Connection type: PPPoE
• Bell username/password: confirmed working
• MTU: 1492 (or auto)
• UDR7 receives a Public WAN IP
• IPv4 enabled, IPV6 Disable

I have not intentionally configured anything unusual on the firewall. (Other device does the same on the network)

I also previously tried using the Bell Giga Hub with DHCP instead of PPPoE. That gives me Internet access, but obviously creates a double NAT, which I am trying to avoid.

I've gone through the usual troubleshooting:

• Confirmed the Bell PPPoE credentials with Bell
• Confirmed the UDR7 establishes the PPPoE session
• Confirmed the UDR7 receives an IP address
• Tested DNS
• Tested ping to external IPs
• Tested ping to domains
• Changed DNS servers, including 1.1.1.1
• MTU change

MSS have been change to 1492, 1432, no change

At this point I'm trying to avoid randomly changing settings and would really appreciate someone who has successfully run Bell Canada PPPoE directly on a UniFi Dream Router/UDM telling me what their configuration looks like.

There is also Advance DMZ, but not looking to go that way right now.

Thanks!

Any one have a clean setup for UHF(rfid) for gate , with stickers on windshield, they don’t want plates readers.

*on unifi system.

Any help would be appreciated.

New unifi network 11 allows wifi uplink as WAN!!!!!! Unfortunately only some devices with built in wifi work but its the one major feature I've been waiting for

I am trying to setup Frigate NVR mobile app. When trying to connect to the server it says it requires https port 8971. I can’t figure out how to change this. It used to be that you could change it in system.properties. But that was when there was a desktop application. I am using a UDM Pro and access it through the web on my Windows PC and don’t have a system.properties file that I can edit. Anyone have any ideas?

I just picked up a USW PRO 48 switch from Facebook marketplace that the guy said he couldn't get to boot. It runs the typical boot procedure on the screen with the time remaining and everything, eventually gets stuck on "it is taking a little longer" and then turns into a device requires restart screen. I've tried the reset pin multiple times, power cycling etc. I tried pinging it from my laptop but I cant even get a connection to it I think because it is failure to boot properly. Fan does run when powered on.

Any ideas?

Why my UGC Ultra, doesnt have the version 6 , And why we are still in the Version 5, we need the version 6 for the Network 11 to work

I just added a unifi drive for our stack at work. I have all our employees setup with network access through unifi identity for 1 click wifi and 1 click VPN. I just installed a UNAS Pro, can I not give access from the same people list in the network console in the drive console, even though I can do cameras?

I cannot get the UniFi WiFi Uplink to work with my Huawei Router. IP / DHCP conflicts.

It works perfectly with my iPhone.

Any suggestions how to fix the issue.

I have external RADIUS working on my Unifi APs on a Windows NPS server. Standalone Windows 2025 Sever, no AD. Usernames put a device on a specific VLAN.

Problem is, the usernames/passwords can be shared and untrusted devices can join this SSID. I need to make sure only approved devices can connect. The device is prompted to accept the SSL cert after successfully authenticating.

I could enable MAC Address Filtering. Is that sufficient? Other than that, what else should I do?

TLDR: I’m running BGP over PPPoE on a UCG Fiber. DHCPv6 mode keeps requesting a prefix I can’t turn off, and Static mode adds a broken IPv6 default route on eth4 that kills everything until I delete it by hand. Looking for fixes for either.

My setup is a UCG Fiber on a PPPoE WAN. I’ve got my own ASN and a /48 from my ISP, and I’m peering with them using an uploaded FRR config (multihop eBGP over the PPPoE link, announcing just the /48). My ISP told me to make sure prefix delegation is off on my account.

The first problem is that I can’t turn it off. The WAN IPv6 settings only give me DHCPv6 (delegation size Auto, or fixed with /48 as the smallest) or Static. PD is off on every LAN, but odhcp6c still runs with -P 0 on ppp0 and keeps asking for a prefix. Nothing ever gets delegated, it just keeps asking.

What makes me suspect it matters is that with DHCPv6 on the WAN my BGP session sat in Active with no reply on TCP 179. On Static it came up in seconds, and I saw that twice. A MikroTik on the same account, which only requests an address, also connected fine. I can’t prove the PD request is the cause, but it fits.

The second problem is Static mode. It adds this route:

default via fe80::<peer link-local> dev eth4 table 201.ppp0 proto static metric 1

It’s bound to the physical port, not ppp0, and the peer is only reachable over ppp0. So IPv6 dies and BGP drops. It beats the working default dev ppp0 on metric, and it comes back after every reboot, reprovision or config upload. Deleting it with ip -6 route del default via fe80::... dev eth4 table 201.ppp0 fixes it until the next time. Typing the gateway as fe80::...%ppp0 gets rejected, and so does leaving it blank.

In DHCPv6 mode the default route is fine (dev ppp0, proto ra), so it’s only Static that does this.

For now I’m running a little loop that deletes the route every 10 seconds, which works but feels like a hack. I haven’t tried adding ::/1 and 8000::/1 routes on ppp0 in that table to override it.

A few questions:

1. Is there any way to stop odhcp6c requesting a prefix on a PPPoE WAN, like a hidden setting or a config that survives provisioning?
2. Has anyone got the Static IPv6 gateway to bind to ppp0 instead of the WAN port?
3. What’s the best way to run a boot script on UniFi OS that survives firmware updates?
4. Has anyone else done BGP over PPPoE on a UCG Fiber and hit this?

The documentation is far from clear here. I realize that there is a RJ-45 POE++ port and a SFP+ slot on the unit. we would prefer running 10Gb over the RJ-45 from our switch as running fiber to the locations we want to use them will be very difficult at best. (small conduits and lots of bends).

If we must use fiber to get the 10Gb throughput we need then can the the POE++/RJ-45 port use the existing Shielded Cat-5E cable we have installed or do we need to upgrade that to Cat-6/Cat-6a cable for the unit to work properly? (i am assuming that if the fiber is used for data transport then the only thing the copper port is used for is to provide power to the unit.

Constructive thoughts on this please.

Hello,

I am hoping someone might be able to answer some questions I have regarding a project I am working on.

I have a site that is currently using a Cloud Key Gen 2 with Access control on it. This houses all of the door readers and users and their respective cards as you would expect it to have. I have been working on a project to get all the sites I manage into the same UID Enterprise workgroup, so that user credentials can work cross site when they travel between sites.

This site was unfortunately set up without being put into the UID workgroup, so all of the user credentials are in the cloud key console already. I am trying to understand the order of operations I need to take to complete the following:

\- Switch the main console from the cloud key to an Enterprise NVR, bringing over all of the data that it had associated with it (door readers, users, cards, etc)

\- Associate the NVR with the UID Enterprise workgroup

From what I have read, since the users are already in the cloud key console, I would basically have to remake every user and re scan their cards, as UID doesnt support transferring subsequent consoles' users after the first one. Since I am moving things to the NVR, would it be best to try and remake everything?

Does anyone have a recommended list of steps that they would recommend? Or know of where I can find a detailed list of what steps I should take? I honestly dont know how to proceed with this without major downtime for the site regarding their access control.

If there is anything I left out that might need more clarification, please let me know.

Title. I’m looking for a good router that isn’t overkill.

I have gigabit fiber running into an ATT BGW320 router/modem that I’m planning on putting into passthrough. I have multiple IoT devices that I would either like to put on its own VLAN or just use the 2.4 GHz. I also would like to put my wife and I’s computers on their own network where they will be wired, but our laptops have wireless access as well, and also add a separate guest network.

I know most, if not every, router supports VLAN, but I would like to be steered in the right direction in terms of my needs and reasonably priced.

Thank you!!

EDIT: Just bought a DR7. Thanks yall!

Trying to get the Unifi OS local RADIUS to work. On multiple Windows 11 laptops, I type in the username/password and it just keeps asking for the login over and over.

SSID is setup as WPA2/WPA3 Enterprise. Network is set to Native Network (same VLAN to manage APs).

I have following VLANS setup under Networks:

Name: VLAN5-PUBLIC ID=5, VLAN101_WIFI ID=101

I know the VLANs work, works when I use WPA3.

Under local credentials, I have:

username: test password: test, VLAN 101, Tunnel Type 13, Tunnel Medium Type 6

How do I figure out why it keeps prompting me to enter my user/pass when I know I'm typing it in correctly?

Hi,

Is there a guide online on how to MAC spoof? I’ve been struggling with my UTR in a few airports over the last weeks.

I’m on iPhone which I understand has a built in renewing MAC each time it connects to a new network?

Thanks

'm running a UDM Pro with UniFi Network 10.6.101 and using UniFi's native encrypted DNS functionality with NextDNS over DNS-over-HTTPS (DoH).

Recently, after tightening my DNS firewall rules to redirect/block unauthorized DNS traffic, I noticed NextDNS logging a blocked TXT request for resolver.dnscrypt.info approximately every 60 seconds.

NextDNS categorizes it under Block Bypass Methods.

I started investigating because I couldn't figure out why the UDM would repeatedly query a DNSCrypt-related domain when my configured upstream is NextDNS over DoH.

Here's what I've found:

• The UDM is running UniFi's native /usr/sbin/dnscrypt-proxy, listening on 127.0.0.1:5053.
• The proxy is configured with my NextDNS DoH profile.
• Packet captures show resolver.dnscrypt.info (TXT) followed milliseconds later by nonexistent-zone.dnscrypt-test (A).
• Additional queries for various DNS record types, including DNSSEC-related requests, appear around the same time.
• The diagnostic queries were observed on loopback port 5053, but not on the other monitored local DNS ports (53, 1053, 20178–20201).
• Running strings /usr/sbin/dnscrypt-proxy confirms that both diagnostic domain names are embedded in the native binary.
• Nothing relevant appears in /var/log/dnscrypt-proxy.log.

Example packet capture:

127.0.0.1:56868 > 127.0.0.1:5053
TXT? resolver.dnscrypt.info.

127.0.0.1:46569 > 127.0.0.1:5053
A? nonexistent-zone.dnscrypt-test.

My questions:

1. Is this expected behavior from UniFi's native dnscrypt-proxy implementation?
2. Why would it perform DNSCrypt-related discovery or diagnostic queries when configured exclusively for DoH?
3. What's responsible for triggering these queries approximately every 60 seconds?
4. Could NextDNS blocking the TXT query be causing repeated tests or retries?
5. Has anyone else noticed this behavior with UniFi's native encrypted DNS?

DNS resolution otherwise appears to be working normally. I'm not necessarily looking to disable anything; I'm trying to understand what's generating the requests and whether they're expected.

Curious if anyone familiar with UniFi's DNSCrypt Proxy implementation has encountered this.