EXa and Unifi

[kidpressingbuttons]

Is anyone on a EXA connection with a Unifi Gateway Pro?

 

If so did you remove their router and replaced with the gateway or have you figured out a workaround?

[PotNoodleTech]

You should be able to run the gateway in between your network and the exa router if for example you do not have any kind of access to the exa router to make any configuration changes?

 

Maybe @richbrowncardiff can confirm as he's done a lot of gateway stuff with a few different models of Unifi

[richbrowncardiff]

You should be able to run the gateway in between your network and the exa router if for example you do not have any kind of access to the exa router to make any configuration changes?

 

Maybe @richbrowncardiff can confirm as he's done a lot of gateway stuff with a few different models of Unifi

 

Hi all.

 

Yes it have it working! (after way too many attempts)

 

My network in a nutshell > (1) USG-XG-8 (also an edgerouter infinity as a backup in case I have an issue with the XG) (long story) all interfaces goto an (2) Xg-16 switch this then hits the (3)"Core" aggregation switches the Wan port of the USG-XG-8 goes into my sophos Lan port on a separate subnet 192.168.x.x/30 giving 2 ip's one is for the "Lan" on my sophos and the other is the "Wan" on the USG the gateway at all times is my sophos box. I'm using google Public DNS in the USG DNS fields and I then created an allow all firewall rule on the USG after it was successfully provisioned as its behind my sophos box to keep all of my lan to wan stuff working as it should (without the rule on usg all my external facing stuff inlc vpn stopped working)

 

If you need any help feel free to PM Me and will do what I can to help.

[kidpressingbuttons]

OK good to hear- I currently have the draytek router and a storm shield. Would it be possible to put the Gateway in between the router and my network?

have tried and not had much luck as of yet...

[richbrowncardiff]

Yes, You can you need to put the config as follows > 1. USG Lan Uplink (Switch) > 2, Wan port on USG to your router lan port / firewall (On a separate subnet I would suggest) than your router. So you could setup a 2 ip address subnet (/30) to give you 2 separate from your main network addresses 1 would become the static wan ip on the USG and the other a static Lan address on the router so your setting up in essence a "Private" ip range for the router to talk to your USG.

 

Two key things to remember with the unifi stuff is the controller is King you need to ensure the controller contains all required networks before trying to provision the USG and also set the ip of your gateway (and disable dhcp on it or your present dhcp server) if your USG is on the latest firmware put a cable into a pc and direct to the ln port 1 on the usg and browse to 192.168.1.1 put the config in there then once saved and the controller is all setup plug the usg into the network if all ok you should be up and running within 1-2 hour incl testing. Once the USG is provisioned it will want to become the router for the lan. As I dont know your experience i'm trying to keep it as simple as I can so sorry if it comes across like i'm being too or not too techie!

 

if you need help let me know but please be aware if it goes wrong (mine did several times) it will bring your network to a halt until its removed! its a very nice bit of kit but in my situation at least it became quite complex as I have a very big network which has to have 99% uptime so I did alot of testing and break fix before actually bringing it into the network fully

 

Hope that helps

[kidpressingbuttons]

sorry mad week!

 

So how would i go about setting up the private ip range? I can change ip settings within the controller but then wouldnt that affect the rest of the network?

[kidpressingbuttons]

actually just figured that bit out... my current network is on 10.43.**.** so should I set up an ip range on 10.44.**.** on lan port 2 then connect that to the router? Or should I change my ip range on my network?

[richbrowncardiff]

Hi Sorry had a mad few weeks to say the least. yes you can you then tell the router to use that as the next hop from 0.0.0.0/0

 

hope that helps.