Showing posts with label ubiquiti. Show all posts
Showing posts with label ubiquiti. Show all posts

07 September 2025

GiGaPlus GP-S25-0802P Review

My Netgear JGS516PE PoE switch died. It was still providing PoE, however, it was not routing and all the lights were lit up amber. As a temporary solution, I was able to set up one AP on a PoE injector and plug in the Switch Flex Mini using USB-C. This allowed me to get the network up and running while looking for a replacement.

Since newer wireless access points are coming with 2.5Gbps port and requiring PoE+, I wanted the replacement switch to support those 2 things as well as preferring a rack mountable solution.


Options


Decision

I went with the GiGaPlus because it wasn't much more expensive than the used Netgear and came with significant upgrades. It also was not managed so it has less of an attack vector and you don't have to worry about firmware updates from a smaller company.


My Experience

My original unit worked well and as expected until I tried switching the uplink to sfp+ using a 1 meter Sodola DAC cable. Then I started getting weird behavior like slack taking forever to load. I then tried speed tests and was not getting my expected speed and having large swings in speed during the test. I thought it might have to do with flow control, so I tried switching that on, but it did not help. I then tested the other sfp+ and these issues all went away.

Armed with this information, I contacted support. They asked me to test with iperf instead of an external speed test. I did this and sent them the results which were even worse than the external speed test. They then confirmed it was defective and asked if I wanted my money back. I then replied asking if they wanted their unit back and if they would provide a shipping label. I never received a response. I waited a few days and then went through Amazon returns as I was still in the 30 day return window.


Review

Pros:

  • Low cost
  • Provides everything I need now and future expandability
  • 2 x 10 Gbps SFP+ ports
    • One for Uplink
    • One to Daisy Chain or connect to server
  • Plug and play with no configuration necessary
  • Forwards VLAN tagged traffic (No ability to add/modify tags though)

Cons:

  • No management interface
    • cannot see how close to PoE budget max you are
    • no ability to cut power to a port without unplugging
  • LED Status Lights are rather lacking
    • Power LED and Ports 9 and 10 activity are on the far right
    • No light to indicate which ports are supplying PoE
    • Green light indicates 2.5 Gbps
    • Orange light indicates 1 Gbps / 100 Mbps / 10 Mbps
    • No light indicates no connection
  • The original unit only had one functional sfp+ port, the replacement works perfectly

Other Thoughts:

  • Support is only via email and only responded once a day to my emails likely due to the time difference
  • I would make sure that everything works in the 30 day Amazon return period so that you can go through Amazon returns instead of support.


Appendix

Research

Flow Control


08 December 2023

Migrating from Unifi USG-3P to UDM Pro

Decision

As my USG-3P was getting on in age and no longer getting updates, I have been shopping around for a replacement. Below were the main competitors for me.

UXG-Lite:

  • Price: $129 (plus tax and shipping)
  • WiFi: None
  • Unifi controller: No
  • CPU: Two A53 cores at 1 GHz
  • Memory: 1 GB of DDR3L
  • Storage: N/A 
  • IPS/IDS max throughput: claimed 1Gbps (subject to third party verification)
  • Unifi Protect: No support
UDR:
  • Price: $199 (plus tax and shipping)
  • WiFi: 6 (however, this was to be deployed in my basement so not much help)
  • Unifi controller: Yes
  • CPU: Two A53 cores at 1.35 GHz
  • Memory: 2 GB of ?DDR3L?
  • Storage: 128 GB SSD
  • IPS/IDS max throughput: ~700Mbps
  • Unifi Protect: would need a SD card
UDM Pro:
  • Price: $379 --Black Friday $279-- (plus tax and shipping)
  • WiFi: No
  • Unifi controller: Yes
  • CPU: Four A57 cores at 1.7 GHz
  • Memory: 4 GB of DDR4
  • Storage: 16 GB eMMC
  • IPS/IDS max throughput: ~3.5Gbps
  • Unifi Protect: Hard drive slot
  • Bonus: LAN + WAN SFP+ ports for 10Gbps networking

To me the extra money was worth it to get the UDM Pro for the Black Friday price of $279, but I would probably not for $379. It just seems like a much more capable product that provides the option to expand later (>1Gbps networking, Unifi Protect).

Initial Impressions

Positives:
  • Shipping box contained lots of air pillows
  • High quality foam protecting the device in device packaging
  • Build quality is superb
  • Slide out foam screw holder was a nice organizational touch
Negatives:
  • Single use plastics used to wrap:
    • UDM Pro itself
    • Rack mount ears
    • Instructions, really????

Installation

Background:
  • This guide was written using Unifi Network 8.0.7
  • USG-3P network address is 192.168.1.1
  • Unifi controller is hosted at https://192.168.1.2:8443
Requires:
  • Internet connection
  • Laptop with an ethernet port or a PC that can be hardwired
  • 2x ethernet cords (Only 1 is needed if you have an already hardwired PC)
Here are the steps that I used:
  1. Create a backup from your current Unifi controller on a laptop
    1. Navigate to https://192.168.1.2:8443
    2. Settings -> System -> Backups
    3. Click on `Download`
    4. Select number of days (I chose 7)
    5. Click `Download`
  2. Connect a LAN port on your current network to the WAN port on UDM Pro
    • This is to provide it with internet access
  3. Power on the UDM Pro
  4. Allow it to update (this took several minutes)
  5. Connect a laptop to the LAN port on the UDM Pro
    • May be helpful to disable WiFi on laptop
  6. Setup Wizard on UDM Pro
    1. Navigate to https://unifi/ (for me https://192.168.0.1 also would have worked)
    2. Login with your Unifi account
    3. Do NOT restore from Backup, skip this step
    4. Finish the setup Wizard
  7. Update the Network Application
    • You want it to be >= Unifi controller Network version
  8. Restore the backup
    1. Network -> Settings -> System -> Backups
    2. Click on `Restore`
    3. Select the backup you created above
    4. Click on `Restore`
    5. UDM Pro will restart
  9. UDM Pro web UI will become unresponsive
    • At this point I used the touch screen to reboot the UDM Pro
    • However, this could be unnecessary and may possibly be resolved by forcing the laptop to get a new DHCP address
  10. Ensure your restore happened correctly
    1. Navigate to https://192.168.1.1
    2. Check that the network settings are correct and that your access points are there (but they won't be connected)
  11. Swap out the USG-3P for the UDM Pro
  12. Migrate the Access Points from Unifi controller to UDM Pro
    1. Navigate to https://192.168.1.2:8443
    2. Settings -> General
    3. Click on `Export Site` on the bottom
    4. You can save the export file, but we won't be using it
    5. Click continue on the `Export Site` dialog
    6. Click continue on the `Migrate Site` dialog (no action needed)
    7. Type in the IP address of the UDM Pro (192.168.1.1)
    8. Select the Access Points to migrate
    9. Click `Migrate Devices`
    10. Check in another tab/window that they migrated to the UDM Pro
    11. Click on `Remove Devices`
  13. Done!
All in all, it took me about 1.5 hours, but this included unboxing, attaching the rack mount ears, mounting in the rack, and some research. The good news is that the network downtime was less than 5 minutes!


Overall Impressions

Positives:
  • The migration went smoothly, once I pieced together what needed done
  • Network performance is great
  • IPS has already started blocking network scans
Negatives:
  • Will not fit in a 12" rack that is flush mounted
    • AC plug is very far to one side and almost didn't have enough clearance for the 2x4 supporting my network rack, wish it was more centered
    • Possibly could be resolved by a 90 degree power connector
  • There doesn't seem to be a way to manage the screen
    • It will go into a screensaver mode during the day and turn off at night
    • However, I cannot find settings to change the times for this behavior
    • Update 2024-01-04:
      • To change this you have to set the local account as "Super Admin" on https://unifi.ui.com -> UDM Pro -> OS Settings (At the top looks like a UDM Pro with a gear icon on the bottom right) -> Admins & Users
      • Then you can update it https://192.168.1.1/console-settings
      • I set night mode to start at 10:01 PM and end at 10:00 PM thus keeping the screen off for most of the day
Other thoughts:
  • Lack of detailed official documentation on migration process
  • Topology is wrong because I have a non-Unifi switch and there isn't a way to manually fix

Research that I found:

11 April 2022

Ubiquiti network setup

I wanted to follow the common security guidance of having 3 wireless networks/VLANs: Normal, IOT, and Guest

  • Normal would contain the TV, printer, computers, and google devices for casting to TV
  • IOT would contain the smart outlets, garage door sensor, and other smart devices
  • Guest would be just for visitors

Ubiquiti has a nice easy default for isolating a guest network, so I just used that.

However, I needed to add a rule to prevent the IOT and Normal networks from comunicating, because applying a similar isolation policy to the IOT network prevented the Belkin smart switches from communicating.


Add the networks

Settings -> Networks -> Add New Network

  • IOT
    • Network Name: IOT
    • Advanced
      • VLAN ID: 2
  • Guest
    • Network Name: Guest
    • Advanced
      • VLAN ID: 3
      • Device Isolation: True

Add the wireless network

Settings -> WiFi-> Add New WiFi Network
  • Add a 2.4 GHz and a 5 GHz wireless network for each of the new networks

Add the firewall rule

I followed this guide, but the screens have changed in newer version: https://help.ui.com/hc/en-us/articles/115010254227-UniFi-USG-Firewall-How-to-Disable-InterVLAN-Routing

Settings -> Traffic & Security -> Global Threat Management -> Firewall -> Create New Rule

  • Type: LAN In
  • Description: Isolate IOT from LAN
  • Enabled: True
  • Rule Applied: Before Predefined Rules
  • Action: Drop
  • IPv4 Protocol: All
  • Source
    • Source Type: Network
    • Network: IOT
    • Network Type: IPv4 Subnet
  • Destination
    • Destination Type: Network
    • Network: LAN
    • Network Type: IPv4 Subnet


17 May 2020

Installing Ubiquiti Unifi Security Gateway

I just received my new Ubiquiti Unifi Security Gateway and here are the steps that I used to go about installing it.

Update the USG

  1. Downloaded the latest firmware onto my laptop https://www.ui.com/download/unifi-switching-routing/usg
  2. Plugged the USG into power and waited for it to finish booting
  3. Performed a Factory Reset to ensure no hiccups
  4. Attached a Laptop to LAN1 (also disabled laptop wifi)
  5. Copied firmware over to USG (if on windows you can use WinSCP)
    • scp UGW3.v4.4.50.5272448.tar ubnt@192.168.1.1:UGW3.v4.4.50.5272448.tar
    • password: ubnt
  6. SSH into the USG and run the update
    • ssh ubnt@192.168.1.1
    • password: ubnt
    • sudo syswrapper.sh upgrade UGW3.v4.4.50.5272448.tar
    • The system will the print some output and then reboot

Configure the USG

Warning 1: Despite the USG having 2 LAN ports, 1 is disabled out of the box, so you will not be able to have both a laptop and a Unifi controller plugged in at the same time without a switch or hub.

Warning 2: It seems that any change no matter how small seems to trigger a USG reboot. So you will want to have it completely configured before inserting it into your network.

Configuring Dynamic DNS for no-ip.com

  1. Settings Gear on bottom left navigation bar -> Services -> Dynamic DNS
  2. Click: CREATE NEW DYNAMIC DNS
    • Internet: WAN
    • Service: noip
    • Hostname:
    • Username:
    • Password:
    • Server: dynupdate.no-ip.com
  3. Got these settings from: https://www.noip.com/support/knowledgebase/how-to-setup-ddns-ubiquiti-edge-router/

Configuring Networks

You can change various settings for the LAN and WAN under Settings Gear -> Network

Inserting into the Network

Plug your modem into WAN1 and your switch into LAN1 and enjoy!

Results

This allowed me to repurpose the ASUS router as a WiFi bridge to replace the Linksys E2000 which upgraded me from N300 to AC1300, which gave me a real world doubling of speed ~5MB/s to ~10MB/s.

22 October 2019

WiFi Upgrade

As I was having trouble getting wireless signal from the family room in my home to the bedroom at the far end, I figured it was time for an upgrade. My existing wireless router was a refurbished Asus RT-AC66R that I purchased in 2013.

I had been researching different mesh systems like Netgear Orbi, Eero, Google, Asus AX6100, and the upcoming Asus AX6600. However, I noticed that 2 wall jacks that I thought were phone jacks were in fact ethernet jacks! One is in the kitchen and the other in the master bedroom. I tracked the lines down and found that they terminated in a wiring box in our basement. This changed my approach from thinking that I would need to use wireless mesh and could instead use hard lines. I also planned on adding 2 jacks to the tv cabinet in the family room for the tv and playstation.

Because I would want to mount an access point in the kitchen and bedroom, I would need something relatively inconspicuous. This led me to the easily mountable Ubiquiti Unifi series of access points. After doing extensive online research, I decided to go with Unifi.

Here are a list of parts that I needed:

PriceQuantityPartLink/Location
156.992Unifi nanoHD Access PointsMicrocenter
79.991UPS with 5 battery backup outletsBest Buy
26.991TRENDnet 8 port patch panelAmazon
14.991LAN tester for RJ45Microcenter
12.9915 pack of 5 foot ethernet cablesAmazon
7.991Right Angle ethernet cableAmazon
6.991100 mount points for zip tiesAmazon
4.461Wall plate with angled keystoneAmazon
2.992Cat6 keystonesMicrocenter
2.991Keystone surface mountMicrocenter
2.99110 pack of Blank KeystonesMicrocenter
FreeEthernet cableDonated by my brother
480.34    Total before tax

My brother, brother-in-law, and I installed 2 cables up into my family room where there was an already existing hole running along the existing cable lines. However, it turned out that despite being a cat 5e jack in the kitchen only 2 of the 8 wires were actually connected. I just had to install the other 6 wires. The bedroom jack was wired correctly, but I swapped out the faceplate for one with angled connectors since it was behind our bed. This would reduce the chance of the ethernet cables getting pinched and ruined. All the cables were then connected to the patch panel in the basement.

I then installed the kitchen wireless access point and configure it with the installed Unifi Controller on my server (see: installing-unifi-controller-on-ubuntu). I then went about switching all my devices to the new wireless network name. Afterwards, I was then able to move the Asus router downstairs and turn of the wireless. It will still handle the routing for now.

The wireless performance of the one Unifi nanoHD was so great that I decided to return the second. This lowered the total cost of the project so far to 323.35. The improvement of the wireless was likely 2 fold: 1. an improved wireless signal and 2. a more central location.

The 2.4GHz performance is still so-so, but that is more due to the amount of interference from the more than 20 networks in range.

Future improvements I am considering are:
  • network rack and shelf to place all the equipment on instead of the simple shelf that I am using
  • PoE network switch
  • Unifi Security Gateway (router)


23 September 2019

Installing Unifi Controller on Ubuntu 16.04

Here are the steps that I had to do to get Ubiquiti Unifi Controller software installed on Ubuntu 16.04


  1. Add the gpg key:
    • sudo apt-key adv --keyserver keyserver.ubuntu.com --recv 06E85760C0A52C50
  2. Add the repo:
    • echo 'deb http://www.ui.com/downloads/unifi/debian stable ubiquiti' | sudo tee /etc/apt/sources.list.d/100-ubnt-unifi.list
  3. Update Sources:
    • sudo apt update
  4. Install the software:
    • sudo apt install unifi
Unfortunately, this resulted in JAVA_HOME not found errors in /usr/lib/unifi/logs/server.log. This is because the unifi software requires Java, but it couldn't find it. I tried to point to the Java 9 path, but that just resulted in errors like: /usr/lib/unifi/data/keystore (Permission denied). Apparently, the software only works with Java 8. To resolve this issue, I installed Java 8 and restared unifi with the following commands:
  • sudo apt-get install openjdk-8-jre
  • sudo service unifi restart
Then head over to https://localhost:8443 to complete the setup