I love Ubiquti products, but having installed a USG Pro-4, I'm left disappointed in the lack of basic DHCP and DNS settings that are available. Yes I know, I can probably achieve what I want to in the command line, but I shouldn't have to. The idea of UBNT gear is that it's easy to use.
What's missing are namely:
- The ability to specify (and view an entire list) of statically assigned IP addresses. I shouldn't have to click on each individual device to specify a static IP or check if one has been set.
- The ability to set hostnames for devices that don't specify one (or use a hardcoded IP). I should be able to create my own static DNS entries for devices that hostnames cannot be set for. In addition, the handling of hostnames for devices with static IP's (hardcoded in the device itself) seems broken. I shouldn't have to get an IP from DHCP to be able to browse to it by DNS name.
If you want an example of how it should be done, take a look at pfSense, OPNSense or even Windows services.
So, I know it has been mentioned in other places (Specifically I have included a link to the forum topic) but I would like to create a new idea request specifically for realtime bandwidth activity.
I have ran into several occasions where clients are limited in bandwidth and will call about slow speeds. I would like to be able to see at a glance what the current usage is and, if possible, who is using it. Right now I would settle for just a graph showing the last ~15min - 1hr.
As it stands now, I am going to have to figure out some option of monitoring this. Sadly, in my own home, I am going to be replacing the USG with a PFsense box. It was either this or put in an edgerouter X as a transparent monitor and I would rather keep the device chain smaller. The USG will sit on the shelf as I wait hoping this will be implemented. :-)
I hope the images below will spell out better what I and others like me would like to see. Ubiquiti makes wonderful products and I hope you all will see the potential in this suggestion and implement it.
Looking at the controller I beleve these stats are already gathered so I would hope it wouldn't be too difficult to create a graph on the dashboard showing these stats.
This is ultimately what I would love to see. I am able to see at a glance what the traffic is and who my "top talkers" are.
I would even be OK with just simply something that keeps a live update.
I also have included a link to a couple forum topics discussing this further. Hopefully they might provide more insight as well.
Thank you for your consideration.
Sometimes we find ourselves in the position of remotely looking for a device that should be on the LAN but isn't there now. It would be helpful to see a history of some kind in the client, in the events, or in the Insights list. Something like this:
Even if we only saw the history on Insights when it's on the WIRED screen, that would be helpful. The event history shows the APs which a wireless client was last connected to which is helpful at times, so this would basically be the equivalent. I know it current shows which LAN.
Any one of these three by itself would be helpful in that situation. I don't know which would be easiest to include, but it seems (to me and I'm no dev) like one should be simple - probably with the event log one being simplest.
If somebody has another method to accomplish this, I'd be grateful.
USG Pro / UNIFI as L2TP VPN Client
Anyone know when UBNT UniFi team will enable L2TP VPN CLIENT support?
I can see that UBNT already enabled PPTP VPN Client support but unfortunately lot of current VPN providers don’t support PPTP due to security issues.
My requirement is to get USG connected to the VPN rather than each of my PCs.
If anyone can comment on when this feature coming that will be a huge help....
I already tested the PPTP VPN client and it’s working as a charm but UBNT can improve it by supporting for VPN host / DNS names as currently I need to get the IP of the PPTP VPN server.
When I'm comparing between Meraki Security Devices and USG, I realised a very important feature which USG lacks, which is the support for USB Cellular Stick.
I believe that the support for USB Sticks are crucial for:
1. Deployments that relied on cellular data as their primary connection.
2. Mission critical deployments which use cellular data as their failover.
Other than that, I don't see the reason for UBNT to not support USB Cellular Stick because even a cheap $40 mini router from TP-Link supports this function.
Suggestions on how to deploy support for USB Cellular Stick.
I would suggest UBNT add another option called "USB Cellular Stick" under the USG > WAN > Connection Type.
In the "USB Cellular Stick" Option, I would suggest putting "Country" and "Carrier" with preset settings like the ones shown below:
When we select the preset settings, please show the username and password of the preset settings in a blurred out column below so that we know which APN is used with the preset settings (Some Carriers have multiple APNs).
Other than that, please add a "Custom" settings option under the Username and Password for the APN settings so that we can use custom APNs when the situation requires it.
Personally, I don't think that the Connection Mode and Authentication Type have to be included.
Supported USB Cellular Sticks.
I would suggest UBNT to support only the mainstream USB Sticks since the USG isn't meant to be a cellular modem/router. I'll leave the supported USB Stick list from Meraki and other vendors below for reference:
Lastly, I would suggest UBNT to include a USB port for USB Cellular Stick on the next revised version of USG-3P so that the USG-3P can be deployed as a teleworker gateway.
I'm fully aware that IPv6 can be configured from the CLI now but UniFi is a SDN product which means that all if not most features should be able to be configured from the controller. not from the CLI.
I'm suggesting that UBNT include the IPv6 Settings under WAN settings for USG like as shown below. (Sorry, my drawing isn't very good)
In the IPv6 Connection Type, the following should be included:
1. Native IPv6
2. Tunnel 6to4
3. Tunnel 6in4
4. Tunnel 6rd
5. Static IPv6
Other than that, the following options in the picture should alse be included:
I don't know how Asus did it, but their routers are smart enough to get the right prefix without my intervention, I wish USG will have this feature too.
I wish UBNT will include full IPv6 support into the controller ASAP that is easy to setup without much technical knowledge.
The UI does not give any visibility into whether the USG Gateway was able to obtain any IPv6 prefixes from the upstream provider.
This should be visible in the WAN section:
Similarly, there were no events around obtaining or losing DHCPv6 leases from the WLAN.
I could be a great addition, if it was possible to enable colors og the connections in the Topology map, based on their utilization percentage.
This would be an easy way of visualizing bottlenecks in the infrastructure.
Can support be added for updating DDNS when a WAN connection fails?
Currently, when WAN1 fails over to WAN2, DDNS is not updated. This is true even if the same DDNS settings are entered in both WAN sections.
Additionally, if DDNS is manually updated when WAN2 becomes active, DDNS is not updated again when WAN1 is restored. This I believe to be a bug, but the restoral of WAN1 should trigger an update to DDNS as well, even if WAN2 is still active.
This would apply to failover WAN only and not load-balanced connections.
Please and thanks.
I'd like to suggest to add a couple new type of client events for notification usage:
- new client connected(wired)
- new client connected(wireless)
These event should be activated when a device get connected the first time in a corporate network(on a switch or an ap) so we could receive an alert or an email(or just log the event). For instance this event could provide a quick notification if somebody sniffed your home wpa password and got in.
I'm kind of surprised I didn't find this elsewhere.
While the catagories of DPI are all well and good, it's somewhat irrelevant when you don't know WHERE the traffic is going.
Can you please expose that level of detail to the controller. Given that this information is already being looked at, I assume that it's somewhat trival to add a couple of tables to track client/server relationships and related information.
For example, I have a VM host that has 11GB up and down of unknown traffic. Even if that did fit into a catagory, I don't know where that traffic is going to/coming from. This fits directly into a lot of security products in the same vein...while you might allow HTTP traffic to the world, if someone is abusing that, how do you know what to block?
The source/destination should be IP to keep it simple with an optional field for URI information and/or internal host name.
So either from within a paritcular catagory, we have something like...
<SRC IP> <hostname or nodename> <DST IP> <hostname or nodename> <destination URI> <rest of the stats as they are now> <connection time>
Once this information is presented, it expands the possibility of adding more searchable/sortable stats.
While I appreciate the additional load this may present to the UCK, but even then, it should be minimal as it's really only adding a few additional tables, assuming that information isn't already there and just not exposed, but for those of us running our own HW, it's a moot point.
So please add this sooner than later as this is a bit of detail that I believe is very important to getting the most out of a DPI tool.
I would like to see the ability to have access to network tools such as the as Ping/Telnet/Traceroute/IPScan/Traffic Monitor from the GUI. Mikrotik has a large selection of utilities available in the GUI and Ubiquiti should also implement some of these in case techs don't have access to a desktop on site to run such utilities.
Right now there two amazing EdgeRouters are launched, the EdgeRouter 4 and EdgeRouter 6. Both perform great for an affordable price in a compact and energy efficient form-factor. It would be very nice if we could have those routers with UniFi software, using them as USG's.
The routing performance is impressive:
|1518 bytes throughput||3 Gbps||4 Gbps||4 Gbps||6 Gbps|
|1518 bytes pps||240,000||320,000||320,000||490,000|
|64 bytes throughput||512 Mbps||1.2 Gbps||1.8 Gbps||1.8 Gbps|
|64 bytes pps||1,000,000||2,400,000||3,400,000||3,400,000|
If you compare the features you see that the ER-4 and ER-6 would be great additions.
|CPU||Dual-core 500Mhz||Dual-core 1GHz||Quad-core 1GHz||Quad-core 1GHz|
The ER-6P's five gigabit RJ45 ports can deliver 24 and 48 volt PoE, with 60 watt max. That's perfect to power up to 5 access points (AC Pro / AC IW Pro / AC Mesh Pro). It would be the perfect set-up for a small unifi installation: Just the USG-6P and 5 access points, plus the SFP for uplink.
I think a USG-4 and USG-6P would be amazing additons to the current USG line-up. If priced the same as the EdgeRouter versions it would be killer routers.
|CPU||Quad-core 1GHz||Quad-core 1GHz|
Manual Workaround: UPDATE 1/25/2017:
I have a couple of networks where I will never replace the router (for one I can't - it's provided as part of the environment) but I would still like to have stats in the controller.
I would like to see a pass through mode for the USG where it passes traffic with no NAT, no firewall rules, no DHCP, etc. Just analyzes traffic.
Even better - a monitor mode where I could feed a USG a mirror of the port that goes to my exising router so I don't have to have latency of the USG in the packets path. Use it as a sensor, basically.
I think you guys would sell a boatload of USGs if you supported this!
EDIT: It appears to be on the roadmap: https://community.ubnt.com/t5/UniFi-Routing-Switching/USG-Feature-Roadmap-January-2017-update/m-p/1792230#M31948
In Progress / Near Future
- DPI support in passthrough mode or on monitor interface
Is there a chance to add STP blocked paths in the topology view just to see how all switches are (purposely) interconnected.
The blocked path could have another colour or something like that. It would be nice if it was there even when blocked and not just shown when for example one other connection bewteen two switches (in a ring with three or more switches) become disconnected.
As the subject suggests.
Please add support to bring down devices gracefully. Weather USB or LAN.
Easier would probably be over USB ??? Would be a useful feature...
- SpicySpice on: DHCP & DNS servers need significant work
- tyler_fulginiti on: USG Pro / UNIFI as L2TP VPN Client
- JLSRR-NETWORK on: 4x QSFP+, 12x SFP+ item similar to ES-16-XG
- Stubbs on: USG or Controller (UCK) USB Port or LAN to support UPS Uninterrupted Power Supply(s)
- UBNT-cmb on: Ability to use WAN port 1 and 2 with 2 different links at the same time
- UBNT-cmb on: Firewalling, Port Forwarding, and Routing DDNS
- energyservices on: Option: Auto populate Local WAN IP field for manual IPsec tunnels
- andyc on: New client event class for notifications - New client connected
- EdgyNet on: Full Switch Port Mirroring
- dumiller on: NBase-T switches
- Allow block incoming connections for vpn
- DHCP & DNS servers need significant work
- Send alert / show notice when DHCP pool or has a set or less number of addresses left
- Add description for DPI programs/services
- USG Pro / UNIFI as L2TP VPN Client
- LAN2 as failover for LAN1
- Confiurable IPv6 Router Advertisement Interval
- 802.1x Control Direction
- Config tree for USG and USW in the controller
- Port disabled with poe off