New Idea

New client event class for notifications - New client connected

Submitted by - a week ago
Status: New Idea

Hello,

 

I'd like to suggest to add a couple new type of client events for notification usage:

 

- new client connected(wired)

- new client connected(wireless)

 

These event should be activated when a device get connected the first time in a corporate network(on a switch or an ap) so we could receive an alert or an email(or just log the event). For instance this event could provide a quick notification if somebody sniffed your home wpa password and got in.

USG Realtime traffic graph

Submitted by -
Status: New Idea

So, I know it has been mentioned in other places (Specifically I have included a link to the forum topic) but I would like to create a new idea request specifically for realtime bandwidth activity. 

 

I have ran into several occasions where clients are limited in bandwidth and will call about slow speeds. I would like to be able to see at a glance what the current usage is and, if possible, who is using it. Right now I would settle for just a graph showing the last ~15min - 1hr.  

 

As it stands now, I am going to have to figure out some option of monitoring this. Sadly, in my own home, I am going to be replacing the USG with a PFsense box. It was either this or put in an edgerouter X as a transparent monitor and I would rather keep the device chain smaller.  The USG will sit on the shelf as I wait hoping this will be implemented. :-)

 

I hope the images below will spell out better what I and others like me would like to see. Ubiquiti makes wonderful products and I hope you all will see the potential in this suggestion and implement it. 

 

Looking at the controller I beleve these stats are already gathered so I would hope it wouldn't be too difficult to create a graph on the dashboard showing these stats.

Selection_001.jpg

 

 

 

This is ultimately what I would love to see. I am able to see at a glance what the traffic is and who my "top talkers" are. 

soIQU.png

 

 

I would even be OK with just simply something that keeps a live update. 

Tomato_Firmware_-_Bandwidth_Real_Time.PNG

 

I also have included a link to a couple forum topics discussing this further. Hopefully they might provide more insight as well.

https://community.ubnt.com/t5/UniFi-Routing-Switching/USG-Realtime-Activity-Monitoring/td-p/1902798

https://community.ubnt.com/t5/UniFi-Routing-Switching/USG-Real-Time-Bandwidth/td-p/1605341

 

 

Thank you for your consideration.

Full Switch Port Mirroring

Submitted by - a week ago
Status: New Idea

Enterprise grade switching gear can mirror all switch ports to a one port. This allows a network engineer to send all port traffic to a single device for monitoring.  

 

On the Unifi Switch line only one port can currently be monitored.

 

This only came to my attention when I was deploying Security Onion (SO) on my network and I wanted to mirror my routers LAN traffic to SO. Because I had my pfSense router setup with multiple ports and vLans I had to completely change my configuration to get around this limitation.

 

If these switches are supposed to be prosumer, small business, or medium business devices they should have the ability to mirror more than one port.

 

This could be implemented using the port configuration or switch profiles and fill a gap with these switches.

USG Firewall Monitor

Submitted by -
Status: New Idea

Having the ability to watch what the firewall on the USG is doing would be a great feature. Maybe place a tab for it under events?

Request: USG - real WAN uptime for PPPoE connection

Submitted by - 3 weeks ago
Status: New Idea

As discussed with your online support, the WAN uptime shown in the Unifi Controller Dashboard / App is not the real uptime for the WAN connection since the last reconnect. It's just the time since the last heartbeat/ping to ping.ubnt.com  was missed.

 

Of course I could change the ping server but:

 

Especially for PPPoE connections: the real WAN connection time since the last reconnect would be much more helpfull for WAN uptime.

Give visibility into WAN IPv6 connectivity

Submitted by -
Status: New Idea

The UI does not give any visibility into whether the USG Gateway was able to obtain any IPv6 prefixes from the upstream provider.

 

This should be visible in the WAN section:

 

Screen Shot 2018-03-15 at 11.09.44 PM.png

 

Similarly, there were no events around obtaining or losing DHCPv6 leases from the WLAN.

 

Support 802.1ae MACSec for future hardware

Submitted by -
Status: New Idea

there is a request in the Unifi Wireless Feature Requests though my understanding is that this change would need to occur in both the switches and the APs and thought it might get more attention in these requests

 

Reference Beta Discution if you have access:

https://community.ubnt.com/t5/UniFi-Routing-Switching-Beta/Looking-to-secure-public-Switch-Ports/m-p/2351693/highlight/true#M21041

 

Reference Unifi Wireless Requests:

https://community.ubnt.com/t5/UniFi-Feature-Requests/MACSec-802-1AE/idi-p/1795867

note that search does not cross-search to the other feature request forums so you will only learn of the other request if you go to the effort of asking for it as a new idea (then the idea subject will cross-search)

Network Tools/Utilities such as Ping/Telnet/TraceRoute/IPScan/Traffic Monitor

Submitted by -
Status: New Idea

I would like to see the ability to have access to network tools such as the as Ping/Telnet/Traceroute/IPScan/Traffic Monitor from the GUI. Mikrotik has a large selection of utilities available in the GUI and Ubiquiti should also implement some of these in case techs don't have access to a desktop on site to run such utilities. 

 

Screen Shot 2018-04-16 at 9.25.02 PM.png

Show blocked STP paths in topology

Submitted by -
Status: New Idea

Is there a chance to add STP blocked paths in the topology view just to see how all switches are (purposely) interconnected.

 

The blocked path could have another colour or something like that. It would be nice if it was there even when blocked and not just shown when for example one other connection bewteen two switches (in a ring with three or more switches) become disconnected.

Request: DPI-Source/destination detail

Submitted by -
Status: New Idea

I'm kind of surprised I didn't find this elsewhere.  

 

While the catagories of DPI are all well and good, it's somewhat irrelevant when you don't know WHERE the traffic is going.  

 

Can you please expose that level of detail to the controller.  Given that this information is already being looked at, I assume that it's somewhat trival to add a couple of tables to track client/server relationships and related information.

 

For example, I have a VM host that has 11GB up and down of unknown traffic.  Even if that did fit into a catagory, I don't know where that traffic is going to/coming from.  This fits directly into a lot of security products in the same vein...while you might allow HTTP traffic to the world, if someone is abusing that, how do you know what to block?  

 

The source/destination should be IP to keep it simple with an optional field for URI information and/or internal host name.  

 

So either from within a paritcular catagory, we have something like...

 

<SRC IP> <hostname or nodename> <DST IP> <hostname or nodename> <destination URI> <rest of the stats as they are now> <connection time>

 

Once this information is presented, it expands the possibility of adding more searchable/sortable stats.  

 

While I appreciate the additional load this may present to the UCK, but even then, it should be minimal as it's really only adding a few additional tables, assuming that information isn't already there and just not exposed, but for those of us running our own HW, it's a moot point.

 

So please add this sooner than later as this is a bit of detail that I believe is very important to getting the most out of a DPI tool. 

Topology map - connection color based on utilization

Submitted by -
Status: New Idea

I could be a great addition, if it was possible to enable colors og the connections in the Topology map, based on their utilization percentage.

 

This would be an easy way of visualizing bottlenecks in the infrastructure.Capture.PNG

Unifi Switch downlink icon to complement uplink icon?

Submitted by -
Status: New Idea

In the controller, you can see at a glance which port the switch considers its "uplink" by looking for the white "^" on the interface.  Why not have a corresponding "v" on interfaces that are connected to downstream unifi switches?  The controller clearly already has this information, and this would be extremely handy when chasing a data flow across the LAN...

Show DEVICE and PORT temperatures and PoE powers history realtime and statistics as a curve

Submitted by -
Status: New Idea

 

I could not find from Unifi GUI any PORT specific temperature. Only generic temperature is available. Still port specific temperature is available in CLI. So the data exist. How can I show port specific information from the GUI?

And if it is possible too see (or add) a stat button for temp it should be possible to add a stat button also for PoE power. I would really like to see how much my PoE cams, PoE powered Rasberry, SIP phones, ... consume power in the long run. Not just now.

All the Port temperature and PoE Watts and Volts/Amps data exist but probably are not recorded in the database for statistical purposes. Now we just need to see be able to see them. But how?

This should be very easy and fast to implement. When Unifi save a line to the record in database of including TX, RX, ... data at the same line just add three extra columns; PoE Watts and Volts, and Temperature. Do not need much more data space. Then only add 2 extra buttons and queries for the buttons. Thats it. Everything else is there already.

Maybe like this: Screenshot (20).png.jpg

In phase 2 later it would be interesting to add a new option to Settings -> "Statistics".

There you could select what data (tx, rx, poe, temp, fan speed,  ...) admin wants to save to the database for statistical purposes by devices or device types. That is because if the thole setup is very large and every data is not interesting thus admin can save space at disk and make the processing of the database lighter and maybe faster.

Further, to be able to better control the temperatures of the switch there should be an option where the user can select the default fan speed. That is the speed the fan runs if the system does not need more cooling. Now speed is stopped until cooling is needed.

Maybe like this:

 kuva.png

 

[Hardware] New USG's based on EdgeRouter ER-4 and ER-6P (with PoE)

Submitted by -
Status: New Idea

Right now there two amazing EdgeRouters are launched, the EdgeRouter 4 and EdgeRouter 6. Both perform great for an affordable price in a compact and energy efficient form-factor. It would be very nice if we could have those routers with UniFi software, using them as USG's.

 

The routing performance is impressive:

Routing performance USG USG-PRO-4 ER-4 ER-6P
1518 bytes throughput 3 Gbps 4 Gbps 4 Gbps 6 Gbps
1518 bytes pps 240,000 320,000 320,000 490,000
64 bytes throughput 512 Mbps 1.2 Gbps 1.8 Gbps 1.8 Gbps
64 bytes pps 1,000,000 2,400,000 3,400,000 3,400,000

 

If you compare the features you see that the ER-4 and ER-6 would be great additions.

 

Features USG USG-PRO-4 ER-4 ER-6P
CPU Dual-core 500Mhz Dual-core 1GHz Quad-core 1GHz Quad-core 1GHz
Power conspumption 7W 40W 13W 16W
Gigabit RJ45 3 2 3 5
Gigabit SFP 0 2 1 1

 

The ER-6P's five gigabit RJ45 ports can deliver 24 and 48 volt PoE, with 60 watt max. That's perfect to power up to 5 access points (AC Pro / AC IW Pro / AC Mesh Pro). It would be the perfect set-up for a small unifi installation: Just the USG-6P and 5 access points, plus the SFP for uplink.

 

I think a USG-4 and USG-6P would be amazing additons to the current USG line-up. If priced the same as the EdgeRouter versions it would be killer routers.

 

Line-up USG-4 USG-6P
MSRP $149 $179
CPU Quad-core 1GHz Quad-core 1GHz
Power conspumption 13W 16W
Gigabit RJ45 3 5
Gigabit SFP 1 1

10gb link on every switch model

Submitted by -
Status: New Idea
A couple of 10gb switch ports on every switch model to support a full 10gb back bone

Built OpenVPN Support for Client access

Submitted by -
Status: New Idea

I would like to see OpenVPN server support in the UI.

Show DHCP client lease info for WANs

Submitted by -
Status: New Idea

Should display the info in 'show dhcp client leases' in the controller. 

[USG] choice to select Routing mode or NAT mode

Submitted by - 3 weeks ago
Status: New Idea

Hi,

 

It would be interesting if there is a feature to choose the routing mode or NAT mode in the GUI. Could it happen?

 

Thanks

Warning for actions that will cause disruption

Submitted by -
Status: New Idea

Today I needed to change the NTP servers in the USG/UniFi software. Doesn't seem like too big a deal, I change them all the time on a Linux server, restart the NTP service, no disruptions. However, today when I changed them in UniFi, it caused the USG to re-provision or re-start (not sure which) and all of my users lost connectivity for 30-60 seconds or so. VPNs dropped, etc.

 

I'm not really upset about NTP servers requiring a restart. Had I known that, I could have easily done it another time. But can't we get some kind of warning that the change we're saving will cause disruption on the USG? Of course, I could just do all changes to the UniFi system off-hours, but that is greatly restrictive. I would be happy to put off making a change that I knew was going to require a restart, but as of now, I just change a setting and hold my breath.

 

I think a really easy and slick way to do this would be to just queue any changes made in the UniFi software. On the "devices" screen, or even the dashboard, some sort of "Apply" button could let us know that there are pending changes that will require a disruption. Pressing this button will apply all of the changes made since the last time they were applied. If there are no pending changes, the "Apply" button could be greyed out, or just not there.

 

This relatively simple change would allow us to queue up multiple changes throughout the day, and we could apply them off-hours, or issue a warning to employees.

 

Much less guesswork, and a great deal fewer complaints from users.

Feature Request: PVST/MSTP

Submitted by -
Status: New Idea

Any chance we can get PVST support (Per VLAN Spanning Tree). It doesn't mke sense to block a whole switchport these days. Especially if you don't always trunk all VLAN's.