|
Captain Foo posted:Ubqt makes very good bridge gear, beyond that..... What's wrong with their WAPs? Also I have an EdgeRouter Lite and I'm happy with it.
|
# ? Oct 26, 2014 15:29 |
|
|
# ? Jun 11, 2024 14:46 |
|
Captain Foo posted:MAC filtering is not security at all; make sure the WPA2 PSK is strong. Thanks Ants posted:Oh god I've fallen for it again - I've purchased an Ubiquiti product assuming that the claimed features on the website are accurate. Turns out that "advanced firewall policies" means inbound port forwarding and literally nothing else. No control of outbound, no control of traffic between subnets, no QoS, no service groups to make it easier on the eye when you have more than 5 rules.
|
# ? Oct 26, 2014 16:24 |
|
Nah it's their UniFi security gateway thing. Totally devoid of any features. They realise this and there's a way to set it up in the CLI and export those settings, put them on the controller VM and then deploy them back down to the devices, but gently caress that.
|
# ? Oct 26, 2014 16:28 |
|
As much as I love Ubiquiti products, their marketing department is always way ahead of all their other departments. They will start selling hardware months before the software side of things is caught up. More often than not, the software will be in Alpha status when the hardware starts shipping. They have done this with virtually every product they have produced.
|
# ? Oct 27, 2014 15:07 |
|
adorai posted:I don't trust WPA2 alone for our wireless bridges, and I further encrypt the datastream with IPsec. My comment was mostly pointing out that MAC filtering isn't worth anything
|
# ? Oct 27, 2014 23:10 |
|
stevewm posted:As much as I love Ubiquiti products, their marketing department is always way ahead of all their other departments. They will start selling hardware months before the software side of things is caught up. More often than not, the software will be in Alpha status when the hardware starts shipping. Other vendors are not perfect, and they push enterprise features out long before they are ready in many cases. How responsive they are to polishing up issues is what counts. I don't think of ubiquiti as enterprise, but maybe small business, or small msp/isp. They are also cheap.
|
# ? Oct 28, 2014 00:07 |
|
The delta between Ubiquiti's claimed features and the features at launch is hundreds of times greater than any other vendor though. Some cheaper kit will launch with features that are half-working, and then get patched up. Ubiquiti launch with the features missing, don't say when they are going to be added in, and then take ages to do it. The UAP-AC launched 18 months ago, and it still can't handle the fast roaming feature that is advertised in their literature. It wouldn't even function without v3 of their controller, which exited beta a full year after the product launched. Being first to market doesn't mean poo poo when it's an unusable product.
|
# ? Oct 28, 2014 00:13 |
|
Yeah I'm really surprised at how bad the new unifi ac series are. I did like the n pro series a lot. Then again I'm more dork prosumer. If I was running things for business class I would probably bite the bullet. Which vendor do you guys like for smaller office deployments. And if there is a 2 storey factory needing wifi who would you use?
|
# ? Oct 28, 2014 12:14 |
|
quote:if only because it has to meet PCI requirements (although I'm pretty sure to be honest, there's not anything to meeting PCI with this - just WPA2 and a MAC filter, This is very very wrong. Have a look at the questions in the SAQ D for merchants. https://www.pcisecuritystandards.org/security_standards/documents.php?category=saqs
|
# ? Oct 28, 2014 15:14 |
|
So I'm just browsing some internet shopping site in China. This looks awfully like the ubiquiti unifi PRO N series http://detail.tmall.com/item.htm?sp...11566434&is_b=1 But the price is 199 RMB = 20 bucks per AP. It's like peanuts
|
# ? Nov 11, 2014 17:32 |
|
The innards of the UniFi devices are just Linux on MIPS and an Atheros chipset doing the wifi. It wouldn't surprise me that you can create similar hardware very cheaply. All of their magic is in the McGlockenshire fucked around with this message at 23:27 on Nov 11, 2014 |
# ? Nov 11, 2014 22:25 |
|
Ubiquiti stock has been getting hammered. You can lie to customers about product releases but Wall Street is out of fucks to give.
|
# ? Nov 12, 2014 04:12 |
|
caberham posted:So I'm just browsing some internet shopping site in China. This looks awfully like the ubiquiti unifi PRO N series Ubiquiti had a really bad case of counterfeit products recently. It really doesn't take much to create a knock off Ubnt device. They tried to counter this by putting some checks into firmware but I dunno if they got all that worked out.
|
# ? Nov 12, 2014 04:36 |
|
Stugazi posted:Ubiquiti stock has been getting hammered. You can lie to customers about product releases but Wall Street is out of fucks to give. It's a conspiracy I bet. They are tanking the stock on purpose for investment! Fixing up the next product batches would still make them popular because Enterprise wifi still costs a bajillion dollars. I just want someone to fix zero hand off for consumers without relying on proprietary poo poo
|
# ? Nov 12, 2014 04:47 |
|
caberham posted:I just want someone to fix zero hand off for consumers without relying on proprietary poo poo Complaining about a lack of zero hand off seems fairly petty when there is a nearly equivalent solution.
|
# ? Nov 12, 2014 05:17 |
|
What's a good Ubiquiti product for a wireless bridge between two buildings about 100 feet apart? Line of sight is clear and 100 megabit is enough bandwidth. I'm open to any other brands that are similarly priced and available fairly quickly.
|
# ? Nov 24, 2014 19:26 |
|
Cpt.Wacky posted:What's a good Ubiquiti product for a wireless bridge between two buildings about 100 feet apart? Line of sight is clear and 100 megabit is enough bandwidth. I'm open to any other brands that are similarly priced and available fairly quickly. My go to has always been a pair of Nanostation Loco M5's. They are around $65 USD At 100 feet you will likely end up with -40 to -30 signal which is too hot. Turn the output power down all the way on both sides. Ideally you want it around -50. I have several pairs in use and they achieve around 95Mbps real throughput at -50 signal.
|
# ? Nov 24, 2014 19:34 |
|
Loco M5, every time.
|
# ? Nov 25, 2014 00:05 |
|
confirming m5
|
# ? Nov 29, 2014 17:58 |
|
I think I posted about this before, but, I am trying to run some wireless for a charity LAN event. About 150 people. I'm running omni internal antenna radios at low power but really these are a/g and performance takes a nose dive with the amount of broadcast/multicast traffic that exists out in that sort of environment. I'd like to segment the networks reasonably but what type of traffic am I going to want to proxy between wired and wireless? I know gaming used to be LAN-broadcast based but I feel like that's no longer a huge obstacle, just not sure. Hoping maybe someone has experience with this sort of thing.
|
# ? Dec 1, 2014 18:01 |
|
For those who want an updated interface to manage their UniFi APs with, Ubiquiti released v4.2.0 of their controller software back in October. NOTE: Your APs will stay at v3.2.5 until a future update (coming soon, according to download page). They haven't updated the official download page yet, but their devs have posted in their forum the links: http://community.ubnt.com/t5/UniFi-Routing-Switching-Updates/UniFi-4-2-0-is-released/ba-p/1052757
|
# ? Dec 1, 2014 19:10 |
|
nexxai posted:Ubiquiti...coming soon
|
# ? Dec 1, 2014 21:04 |
|
|
# ? Dec 1, 2014 21:19 |
|
Partycat posted:a/g
|
# ? Dec 2, 2014 00:03 |
|
We have no $$$ so I'm trying to make the best of it. APs were 20$ each.
|
# ? Dec 2, 2014 00:52 |
|
what's the space like? How many aps do you have?
|
# ? Dec 2, 2014 04:10 |
|
Captain Foo posted:what's the space like? How many aps do you have? It is old casino space, maybe a few thou square feet linear, with columns throughout. I ran half a dozen centered along the row about 30 ft apart, and had pretty good rssi. SNR is questionable which is why I would like more radios, the noise floor of 150 PCs is stupid. But mDNS and broadcast from gaming, netbios shares, etc really tore it up. Not sure what is best.
|
# ? Dec 2, 2014 04:25 |
|
Partycat posted:It is old casino space, maybe a few thou square feet linear, with columns throughout. I ran half a dozen centered along the row about 30 ft apart, and had pretty good rssi. SNR is questionable which is why I would like more radios, the noise floor of 150 PCs is stupid. But mDNS and broadcast from gaming, netbios shares, etc really tore it up. Not sure what is best. drop UDP 5353 at the AP if possible
|
# ? Dec 3, 2014 20:24 |
|
Some time ago I was complaining about the issues our main site was having with the Ubiquiti AC AP's we were using. We were dropping users, had poor signal, and Apple devices just plain did not connect. After being told there was yet again, still no budget to replace them, decided to update the controller/AP's one last time. (This was a month or so ago, after their last stable release just came out.) Everything works. And I mean everything. AP to AP handoff works. Apple devices work. We have great signal in all our offices. I'm half pissed that it took this long to release a fix and half amazed that everything just works.
the spyder fucked around with this message at 21:11 on Dec 18, 2014 |
# ? Dec 18, 2014 21:08 |
|
About to buy wireless for a large production facility. 160K+ sqft. I need to blanket the place for mobile users and such, but I also have one area with 40 VDI workstations that will be streaming video. I don't want to have to wire them unless wireless proves it can't handle it, because they're on carts and mobility matters. I'm choosing between a pair of 2504s and Cisco APs vs Meraki, and I'm open to suggestions beyond that. 802.11AC regardless. Dual SSID. I was assuming the Cisco setup would be running HREAP (Local MAC?) to dump traffic to local VLANs rather than tunneling it all back to the controllers. I've heard Meraki has some seperate wizardry for guest wireless. I've used Cisco's setup before and my impression was that it was solid but management sucks. Do they still require the WCS software to run on a 2003 VM? Considering other options because I don't really want to pay for a pair of 2504s if I don't have to, and because spiffy management would be nice. But it has to just work. Please enlighten me. Different vendors are pushing different solutions. KS fucked around with this message at 23:19 on Jan 7, 2015 |
# ? Jan 7, 2015 23:16 |
|
Partycat posted:I think I posted about this before, but, I am trying to run some wireless for a charity LAN event. About 150 people. I'm running omni internal antenna radios at low power but really these are a/g and performance takes a nose dive with the amount of broadcast/multicast traffic that exists out in that sort of environment. I'd like to segment the networks reasonably but what type of traffic am I going to want to proxy between wired and wireless? I know gaming used to be LAN-broadcast based but I feel like that's no longer a huge obstacle, just not sure. Hoping maybe someone has experience with this sort of thing.
|
# ? Jan 8, 2015 01:22 |
|
KS posted:About to buy wireless for a large production facility. 160K+ sqft. I need to blanket the place for mobile users and such, but I also have one area with 40 VDI workstations that will be streaming video. I don't want to have to wire them unless wireless proves it can't handle it, because they're on carts and mobility matters. HREAP is now called Flexconnect, and WCS is now Prime Infrastructure. Prime will run on a VMware VM, or a physical Cisco appliance. We're running 5505's in SSO in our larger setups, and a lone 2504 for anything less than 50 AP's. I think you can keep throwing SSID's at it until you get to like 16 or something. I don't really use Prime to manage it, actually I'm not even really sure what it does for wireless other than making some pretty heat maps that I display on a TV to make it look like things are happening. Sometimes it tells me when someone is using the microwave too. Using Prime to manage my switches is a godsend though as I can deploy a bit of config to 200 switches in the click of a button. For the AP's themselves, I've been using 3602E's for warehouses and 3602i's for office space. You can get a drop in module for them to do 802.11ac but if you're buying for a new environment it'd make more sense to buy 3700 AP's. I do all wireless management at the WLC and I quite like it. Bulk changes are pretty easy, you can make changes per WLAN, per AP group or per AP. You get alot of cool features with these controllers (mainly speaking about the 5505 here but theyre very similar to the 2504's) and AP's like fast roaming, qos, cleanair, containment (which floods rogue AP's with connect/disconnect packets until they crash. Possibly illegal but pretty cool) In my eyes, Meraki is not an enterprise product. Its got great value for stuff like retail where you have lots of sites with 0 IT presence because you can just buy it, get the serial number from your supplier and have it sent straight to site, as long as anyone there can plug a network cable into it, it'll come up and configure itself. But for larger, corporate stuff, its mainstream Cisco every time. When you say mobile users, setting up a guest network is simple enough but if you want stuff like BYOD then I'd get an ISE too. If this is just a requirement that will only ever be in that one facility, get the 2504. If you have multiple large offices, or you can see your AP count rising above 50, use this as an opportunity to get two 5505's and run the lot from that. Ahdinko fucked around with this message at 12:31 on Jan 8, 2015 |
# ? Jan 8, 2015 11:12 |
|
adorai posted:Not to get too goony here, but your local ham radio club might be able to help out. If it's a single event, they might even have some nicer radios they can lend to you. I upgraded to BSAP-1800 N radios. I don't know about that port blocking since I am running them in Bluesocket's "Edge-To-Edge" mode, basically offloading to the local network instead of trying to funnel it through the controller. We'll see how it does. I am in the local ham radio club as a technology/computer guy and, well, no they don't have anything nearly that cool.
|
# ? Jan 12, 2015 03:58 |
|
Anyone here have any experience with open mesh? I was looking at them for a restaurant to provide two SSIDs and the features seem impressive.
|
# ? Jan 13, 2015 05:16 |
|
The amount of diagnostic tools available on the Aerohive system is mind-boggling sometimes. VLAN probe has dramatically increased the quality of my arguments with people who are supposed to be provisioning ports.
|
# ? Jan 13, 2015 22:13 |
|
Thanks Ants posted:The amount of diagnostic tools available on the Aerohive system is mind-boggling sometimes. VLAN probe has dramatically increased the quality of my arguments with people who are supposed to be provisioning ports. Vlan probe is great but I wish you could do multi-ap testing, I believe it also doesn't work if a vlan is not dhcp
|
# ? Jan 14, 2015 16:40 |
|
deimos posted:Anyone here have any experience with open mesh? I was looking at them for a restaurant to provide two SSIDs and the features seem impressive. I used one in my family's restaurant. I have little network experience and it was pretty easy to setup and trouble shoot. Used it for limiting each person's connect speed. Had customers each agree to the default TOS that come coded into the welcome page. It's been a while since I looked at it, but I believe they are managed through OM's website, so remote management. The secured SSID I used for the TVs and personal laptops of the owner that didn't have a limited speed. I had mine setup behind a sonic wall tz200 as my router to separate the POS and the Wi-Fi from each other. I had it ceiling mounted with the ceiling cover in the middle of the restaurant, provided great coverage. I had a OM2P-HS with a POE adapter. One unit was more than enough for the restaurant, it was pretty small though with a 80-90 seating capacity. It didn't see a lot of use though. Most people came to eat. Or should I say didn't come at all because her restaurant failed because of no customers. Edit: I forgot about this, just my first unit PoE's port was DoA. RMA was about 2 weeks long. SlayVus fucked around with this message at 19:10 on Jan 14, 2015 |
# ? Jan 14, 2015 17:05 |
|
A big selling point for a restaurant is probably that OpenMesh is one of the cheapest AP systems I've seen that supports Facebook Wi-Fi login for the guest network.
|
# ? Jan 14, 2015 20:30 |
|
I figured I should post my dumb question about using long-distance wireless bridges in a home network here because you guys actually use UBNT stuff. Twerk from Home posted:My brother in law just moved into a new house, and the fastest internet he can get at any price is 18Mbit. He lives 2.6 miles away and we can get line of sight to my house, where I get 105mbit Comcast for $35. Would we be insane to try to use cheapo UBNT wireless backhaul to connect our two houses, and supplement his slow internet with a line from my house? This sounds like a fun thing to set up, we're not afraid to buy flagpoles if we have to mount the dishes somewhere really high, and I'd be willing to dedicate about $400 to this science project, including getting a router that can support 2 WAN connections if needed.
|
# ? Jan 16, 2015 21:38 |
|
|
# ? Jun 11, 2024 14:46 |
|
Try these http://www.ubnt.com/airmax/nanobeam-ac/
|
# ? Jan 16, 2015 22:10 |