Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Locked thread
Internet Explorer
Jun 1, 2005





Captain Foo posted:

Ubqt makes very good bridge gear, beyond that.....:gonk:

What's wrong with their WAPs? Also I have an EdgeRouter Lite and I'm happy with it.

Adbot
ADBOT LOVES YOU

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

Captain Foo posted:

MAC filtering is not security at all; make sure the WPA2 PSK is strong.
I don't trust WPA2 alone for our wireless bridges, and I further encrypt the datastream with IPsec.

Thanks Ants posted:

Oh god I've fallen for it again - I've purchased an Ubiquiti product assuming that the claimed features on the website are accurate. Turns out that "advanced firewall policies" means inbound port forwarding and literally nothing else. No control of outbound, no control of traffic between subnets, no QoS, no service groups to make it easier on the eye when you have more than 5 rules.

Back to the reseller it goes...
What product are you referring to? If it is an ERL, most of the advanced stuff really has to be done CLI. The GUI is good if you are looking to just replace a Linksys router, but if you want to take advantage of the real power of EdgeOS you need to get familiar with the CLI.

Thanks Ants
May 21, 2004

#essereFerrari


Nah it's their UniFi security gateway thing. Totally devoid of any features.

They realise this and there's a way to set it up in the CLI and export those settings, put them on the controller VM and then deploy them back down to the devices, but gently caress that.

stevewm
May 10, 2005
As much as I love Ubiquiti products, their marketing department is always way ahead of all their other departments. They will start selling hardware months before the software side of things is caught up. More often than not, the software will be in Alpha status when the hardware starts shipping.

They have done this with virtually every product they have produced.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

adorai posted:

I don't trust WPA2 alone for our wireless bridges, and I further encrypt the datastream with IPsec.
What product are you referring to? If it is an ERL, most of the advanced stuff really has to be done CLI. The GUI is good if you are looking to just replace a Linksys router, but if you want to take advantage of the real power of EdgeOS you need to get familiar with the CLI.

My comment was mostly pointing out that MAC filtering isn't worth anything

Partycat
Oct 25, 2004

stevewm posted:

As much as I love Ubiquiti products, their marketing department is always way ahead of all their other departments. They will start selling hardware months before the software side of things is caught up. More often than not, the software will be in Alpha status when the hardware starts shipping.

They have done this with virtually every product they have produced.

Other vendors are not perfect, and they push enterprise features out long before they are ready in many cases. How responsive they are to polishing up issues is what counts. I don't think of ubiquiti as enterprise, but maybe small business, or small msp/isp.

They are also cheap.

Thanks Ants
May 21, 2004

#essereFerrari


The delta between Ubiquiti's claimed features and the features at launch is hundreds of times greater than any other vendor though. Some cheaper kit will launch with features that are half-working, and then get patched up. Ubiquiti launch with the features missing, don't say when they are going to be added in, and then take ages to do it.

The UAP-AC launched 18 months ago, and it still can't handle the fast roaming feature that is advertised in their literature. It wouldn't even function without v3 of their controller, which exited beta a full year after the product launched.

Being first to market doesn't mean poo poo when it's an unusable product.

caberham
Mar 18, 2009

by Smythe
Grimey Drawer
Yeah I'm really surprised at how bad the new unifi ac series are. I did like the n pro series a lot. Then again I'm more dork prosumer. If I was running things for business class I would probably bite the bullet.

Which vendor do you guys like for smaller office deployments.

And if there is a 2 storey factory needing wifi who would you use?

jre
Sep 2, 2011

To the cloud ?



quote:

if only because it has to meet PCI requirements (although I'm pretty sure to be honest, there's not anything to meeting PCI with this - just WPA2 and a MAC filter,

This is very very wrong. Have a look at the questions in the SAQ D for merchants.

https://www.pcisecuritystandards.org/security_standards/documents.php?category=saqs

caberham
Mar 18, 2009

by Smythe
Grimey Drawer
So I'm just browsing some internet shopping site in China. This looks awfully like the ubiquiti unifi PRO N series

http://detail.tmall.com/item.htm?sp...11566434&is_b=1

But the price is 199 RMB = 20 bucks per AP. It's like peanuts

McGlockenshire
Dec 16, 2005

GOLLOCKS!
The innards of the UniFi devices are just Linux on MIPS and an Atheros chipset doing the wifi. It wouldn't surprise me that you can create similar hardware very cheaply.

All of their magic is in the marketing software anyway.

McGlockenshire fucked around with this message at 23:27 on Nov 11, 2014

Stugazi
Mar 1, 2004

Who me, Bitter?
Ubiquiti stock has been getting hammered. You can lie to customers about product releases but Wall Street is out of fucks to give.

Nitr0
Aug 17, 2005

IT'S FREE REAL ESTATE

caberham posted:

So I'm just browsing some internet shopping site in China. This looks awfully like the ubiquiti unifi PRO N series

http://detail.tmall.com/item.htm?sp...11566434&is_b=1

But the price is 199 RMB = 20 bucks per AP. It's like peanuts

Ubiquiti had a really bad case of counterfeit products recently. It really doesn't take much to create a knock off Ubnt device. They tried to counter this by putting some checks into firmware but I dunno if they got all that worked out.

caberham
Mar 18, 2009

by Smythe
Grimey Drawer

Stugazi posted:

Ubiquiti stock has been getting hammered. You can lie to customers about product releases but Wall Street is out of fucks to give.

It's a conspiracy I bet. They are tanking the stock on purpose for investment! Fixing up the next product batches would still make them popular because Enterprise wifi still costs a bajillion dollars.

I just want someone to fix zero hand off for consumers without relying on proprietary poo poo

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

caberham posted:

I just want someone to fix zero hand off for consumers without relying on proprietary poo poo
Even without zero hand off, minimum rssi values make for extremely limited reassociation times, and only really interrupt real time datastreams like voice.

Complaining about a lack of zero hand off seems fairly petty when there is a nearly equivalent solution.

Cpt.Wacky
Apr 17, 2005
What's a good Ubiquiti product for a wireless bridge between two buildings about 100 feet apart? Line of sight is clear and 100 megabit is enough bandwidth. I'm open to any other brands that are similarly priced and available fairly quickly.

stevewm
May 10, 2005

Cpt.Wacky posted:

What's a good Ubiquiti product for a wireless bridge between two buildings about 100 feet apart? Line of sight is clear and 100 megabit is enough bandwidth. I'm open to any other brands that are similarly priced and available fairly quickly.

My go to has always been a pair of Nanostation Loco M5's. They are around $65 USD

At 100 feet you will likely end up with -40 to -30 signal which is too hot. Turn the output power down all the way on both sides. Ideally you want it around -50.

I have several pairs in use and they achieve around 95Mbps real throughput at -50 signal.

Thanks Ants
May 21, 2004

#essereFerrari


Loco M5, every time.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

confirming m5

Partycat
Oct 25, 2004

I think I posted about this before, but, I am trying to run some wireless for a charity LAN event. About 150 people. I'm running omni internal antenna radios at low power but really these are a/g and performance takes a nose dive with the amount of broadcast/multicast traffic that exists out in that sort of environment. I'd like to segment the networks reasonably but what type of traffic am I going to want to proxy between wired and wireless? I know gaming used to be LAN-broadcast based but I feel like that's no longer a huge obstacle, just not sure. Hoping maybe someone has experience with this sort of thing.

nexxai
Jul 17, 2002

quack quack bjork
Fun Shoe
For those who want an updated interface to manage their UniFi APs with, Ubiquiti released v4.2.0 of their controller software back in October. NOTE: Your APs will stay at v3.2.5 until a future update (coming soon, according to download page).

They haven't updated the official download page yet, but their devs have posted in their forum the links: http://community.ubnt.com/t5/UniFi-Routing-Switching-Updates/UniFi-4-2-0-is-released/ba-p/1052757

Thanks Ants
May 21, 2004

#essereFerrari


nexxai posted:

Ubiquiti...coming soon

:roflolmao:

nexxai
Jul 17, 2002

quack quack bjork
Fun Shoe
:f5:

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'


:stonklol:

Partycat
Oct 25, 2004


We have no $$$ so I'm trying to make the best of it. APs were 20$ each.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

what's the space like? How many aps do you have?

Partycat
Oct 25, 2004

Captain Foo posted:

what's the space like? How many aps do you have?

It is old casino space, maybe a few thou square feet linear, with columns throughout. I ran half a dozen centered along the row about 30 ft apart, and had pretty good rssi. SNR is questionable which is why I would like more radios, the noise floor of 150 PCs is stupid. But mDNS and broadcast from gaming, netbios shares, etc really tore it up. Not sure what is best.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

Partycat posted:

It is old casino space, maybe a few thou square feet linear, with columns throughout. I ran half a dozen centered along the row about 30 ft apart, and had pretty good rssi. SNR is questionable which is why I would like more radios, the noise floor of 150 PCs is stupid. But mDNS and broadcast from gaming, netbios shares, etc really tore it up. Not sure what is best.

drop UDP 5353 at the AP if possible

the spyder
Feb 18, 2011
Some time ago I was complaining about the issues our main site was having with the Ubiquiti AC AP's we were using. We were dropping users, had poor signal, and Apple devices just plain did not connect. After being told there was yet again, still no budget to replace them, decided to update the controller/AP's one last time. (This was a month or so ago, after their last stable release just came out.) Everything works. And I mean everything. AP to AP handoff works. Apple devices work. We have great signal in all our offices. I'm half pissed that it took this long to release a fix and half amazed that everything just works.

the spyder fucked around with this message at 21:11 on Dec 18, 2014

KS
Jun 10, 2003
Outrageous Lumpwad
About to buy wireless for a large production facility. 160K+ sqft. I need to blanket the place for mobile users and such, but I also have one area with 40 VDI workstations that will be streaming video. I don't want to have to wire them unless wireless proves it can't handle it, because they're on carts and mobility matters.

I'm choosing between a pair of 2504s and Cisco APs vs Meraki, and I'm open to suggestions beyond that. 802.11AC regardless. Dual SSID. I was assuming the Cisco setup would be running HREAP (Local MAC?) to dump traffic to local VLANs rather than tunneling it all back to the controllers. I've heard Meraki has some seperate wizardry for guest wireless.

I've used Cisco's setup before and my impression was that it was solid but management sucks. Do they still require the WCS software to run on a 2003 VM? Considering other options because I don't really want to pay for a pair of 2504s if I don't have to, and because spiffy management would be nice. But it has to just work.

Please enlighten me. Different vendors are pushing different solutions.

KS fucked around with this message at 23:19 on Jan 7, 2015

adorai
Nov 2, 2002

10/27/04 Never forget
Grimey Drawer

Partycat posted:

I think I posted about this before, but, I am trying to run some wireless for a charity LAN event. About 150 people. I'm running omni internal antenna radios at low power but really these are a/g and performance takes a nose dive with the amount of broadcast/multicast traffic that exists out in that sort of environment. I'd like to segment the networks reasonably but what type of traffic am I going to want to proxy between wired and wireless? I know gaming used to be LAN-broadcast based but I feel like that's no longer a huge obstacle, just not sure. Hoping maybe someone has experience with this sort of thing.
Not to get too goony here, but your local ham radio club might be able to help out. If it's a single event, they might even have some nicer radios they can lend to you.

Ahdinko
Oct 27, 2007

WHAT A LOVELY DAY

KS posted:

About to buy wireless for a large production facility. 160K+ sqft. I need to blanket the place for mobile users and such, but I also have one area with 40 VDI workstations that will be streaming video. I don't want to have to wire them unless wireless proves it can't handle it, because they're on carts and mobility matters.

I'm choosing between a pair of 2504s and Cisco APs vs Meraki, and I'm open to suggestions beyond that. 802.11AC regardless. Dual SSID. I was assuming the Cisco setup would be running HREAP (Local MAC?) to dump traffic to local VLANs rather than tunneling it all back to the controllers. I've heard Meraki has some seperate wizardry for guest wireless.

I've used Cisco's setup before and my impression was that it was solid but management sucks. Do they still require the WCS software to run on a 2003 VM? Considering other options because I don't really want to pay for a pair of 2504s if I don't have to, and because spiffy management would be nice. But it has to just work.

Please enlighten me. Different vendors are pushing different solutions.

HREAP is now called Flexconnect, and WCS is now Prime Infrastructure.

Prime will run on a VMware VM, or a physical Cisco appliance.

We're running 5505's in SSO in our larger setups, and a lone 2504 for anything less than 50 AP's. I think you can keep throwing SSID's at it until you get to like 16 or something.
I don't really use Prime to manage it, actually I'm not even really sure what it does for wireless other than making some pretty heat maps that I display on a TV to make it look like things are happening. Sometimes it tells me when someone is using the microwave too. Using Prime to manage my switches is a godsend though as I can deploy a bit of config to 200 switches in the click of a button.

For the AP's themselves, I've been using 3602E's for warehouses and 3602i's for office space. You can get a drop in module for them to do 802.11ac but if you're buying for a new environment it'd make more sense to buy 3700 AP's.

I do all wireless management at the WLC and I quite like it. Bulk changes are pretty easy, you can make changes per WLAN, per AP group or per AP. You get alot of cool features with these controllers (mainly speaking about the 5505 here but theyre very similar to the 2504's) and AP's like fast roaming, qos, cleanair, containment (which floods rogue AP's with connect/disconnect packets until they crash. Possibly illegal but pretty cool)

In my eyes, Meraki is not an enterprise product. Its got great value for stuff like retail where you have lots of sites with 0 IT presence because you can just buy it, get the serial number from your supplier and have it sent straight to site, as long as anyone there can plug a network cable into it, it'll come up and configure itself. But for larger, corporate stuff, its mainstream Cisco every time.

When you say mobile users, setting up a guest network is simple enough but if you want stuff like BYOD then I'd get an ISE too.

If this is just a requirement that will only ever be in that one facility, get the 2504. If you have multiple large offices, or you can see your AP count rising above 50, use this as an opportunity to get two 5505's and run the lot from that.

Ahdinko fucked around with this message at 12:31 on Jan 8, 2015

Partycat
Oct 25, 2004

adorai posted:

Not to get too goony here, but your local ham radio club might be able to help out. If it's a single event, they might even have some nicer radios they can lend to you.

I upgraded to BSAP-1800 N radios. I don't know about that port blocking since I am running them in Bluesocket's "Edge-To-Edge" mode, basically offloading to the local network instead of trying to funnel it through the controller. We'll see how it does.

I am in the local ham radio club as a technology/computer guy and, well, no they don't have anything nearly that cool.

deimos
Nov 30, 2006

Forget it man this bat is whack, it's got poobrain!
Anyone here have any experience with open mesh? I was looking at them for a restaurant to provide two SSIDs and the features seem impressive.

Thanks Ants
May 21, 2004

#essereFerrari


The amount of diagnostic tools available on the Aerohive system is mind-boggling sometimes. VLAN probe has dramatically increased the quality of my arguments with people who are supposed to be provisioning ports.

Captain Foo
May 11, 2004

we vibin'
we slidin'
we breathin'
we dyin'

Thanks Ants posted:

The amount of diagnostic tools available on the Aerohive system is mind-boggling sometimes. VLAN probe has dramatically increased the quality of my arguments with people who are supposed to be provisioning ports.

Vlan probe is great but I wish you could do multi-ap testing, I believe it also doesn't work if a vlan is not dhcp

SlayVus
Jul 10, 2009
Grimey Drawer

deimos posted:

Anyone here have any experience with open mesh? I was looking at them for a restaurant to provide two SSIDs and the features seem impressive.

I used one in my family's restaurant. I have little network experience and it was pretty easy to setup and trouble shoot. Used it for limiting each person's connect speed. Had customers each agree to the default TOS that come coded into the welcome page. It's been a while since I looked at it, but I believe they are managed through OM's website, so remote management. The secured SSID I used for the TVs and personal laptops of the owner that didn't have a limited speed.

I had mine setup behind a sonic wall tz200 as my router to separate the POS and the Wi-Fi from each other. I had it ceiling mounted with the ceiling cover in the middle of the restaurant, provided great coverage.

I had a OM2P-HS with a POE adapter. One unit was more than enough for the restaurant, it was pretty small though with a 80-90 seating capacity. It didn't see a lot of use though. Most people came to eat. Or should I say didn't come at all because her restaurant failed because of no customers.

Edit:
I forgot about this, just my first unit PoE's port was DoA. RMA was about 2 weeks long.

SlayVus fucked around with this message at 19:10 on Jan 14, 2015

Thanks Ants
May 21, 2004

#essereFerrari


A big selling point for a restaurant is probably that OpenMesh is one of the cheapest AP systems I've seen that supports Facebook Wi-Fi login for the guest network.

Twerk from Home
Jan 17, 2009

This avatar brought to you by the 'save our dead gay forums' foundation.
I figured I should post my dumb question about using long-distance wireless bridges in a home network here because you guys actually use UBNT stuff.

Twerk from Home posted:

My brother in law just moved into a new house, and the fastest internet he can get at any price is 18Mbit. He lives 2.6 miles away and we can get line of sight to my house, where I get 105mbit Comcast for $35. Would we be insane to try to use cheapo UBNT wireless backhaul to connect our two houses, and supplement his slow internet with a line from my house? This sounds like a fun thing to set up, we're not afraid to buy flagpoles if we have to mount the dishes somewhere really high, and I'd be willing to dedicate about $400 to this science project, including getting a router that can support 2 WAN connections if needed.

Which one of these should I be looking at, or some other hardware entirely? The ultimate goal would be 50+mbit over a 2.6 mile connection in a flat, flat city (Houston).

http://www.ubnt.com/airmax/nanobridgem/

Adbot
ADBOT LOVES YOU

Thanks Ants
May 21, 2004

#essereFerrari


Try these http://www.ubnt.com/airmax/nanobeam-ac/

  • Locked thread