Moving to Unifi USG from SonicWall

[AB_IT]

Hey All

 

Just planning for a deployment. Basically I work for a non-profit care home provider and we have head office where all the servers reside and a about 10 homes under our belt. I'm trying to work this out in my head but I'm struggling a bit. Basically we currently use SonicWall (Similar to Smoothwall) and have one at HO along with one in each home to connect each home to our IPSec Site to Site VPN. This allows all homes under us to be able to connect to the servers here at HO.

 

Our Unifi Controller is all pre-setup with the VPN settings etc... to connect to our Sonicwall but what I can't get my head around is as soon as I take out the current Sonicwall for Home A and replace it with the USG it won't be provisoned yet and won't have an active VPN connection to contact the Unifi Controller at HO to get the settings. Sorry I know it's confusing I'm trying to explain it as best I can.

 

So my thoughts are the VPN connection and IP address of the USG will need to be set before putting it into the network but how on earth am I supposed to do that. Both Smoothwall and SonicWall appliances tend to have a VGA port so you can hook up a screen and mouse and get the majority of the appliance setup before putting it into the network but obviously USG's don't work like that and need to communicate first with a controller in order to get the settings to do anything.

 

If anyone can help aleviate my concerns I'd really appreciate it.

 

Thank you

[MatthewL]

Some of our network uses Unifi for site to site, I configured all my kit in the office and then took it to site. I did have to get someone in the office to recreate the site to site VPN but it should just work if configured before you go to site.

 

I must admit I'm not keen on using the Unifi stuff but its cheap for our smaller sites. Routing was the next big headache too but your network is a lot more simpler that ours!

[AB_IT]

Cheers Matthew. I think I've figured it all out now except I have one issue. My controller is on a different subnet 192.196.91.1 and the USG Pro is currently on 192.168.63.1. I currently have my laptop connected to the 63 subnet and can ping the unifi controller fine from my laptop, the unifi controller can ping my laptop fine also but for some reason it won't reach the USG Pro, seems to be the only device on the network that won't communicate both ways?

 

Got any idea why? When I try to run a ping using SSH from the USG Pro I get the following and running it from the server I get a request timed out.

 

Linux ubnt 3.10.107-UBNT #1 SMP Wed Apr 8 20:43:58 UTC 2020 mips64 ___ ___ .__________.__ | | |____ |__\_ ____/__| | | / \| || __) | | © 2010-2020 | | | | \ || \ | | Ubiquiti, Inc. |______|___| /__||__/ |__| |_/ https://www.ui.com Welcome to EdgeOS on UniFi Security Gateway! ********************** WARNING! ********************** * Configuration changes made here are not persistent. * * They will be overwritten by the controller on next * * provision. Configuration must be done in controller. * ********************************************************Last login: Thu Jan 1 02:48:04 2015 from 192.168.63.56ubnt@ubnt:~$ ping 192.196.91.1connect: Network is unreachableubnt@ubnt:~$ ping 192.196.91.1connect: Network is unreachableubnt@ubnt:~$

[AB_IT]

Does anyone have any ideas? I'm ripping my hair out over this!

 

Edit: it actually won't ping any IP address outside of its subnet just always says network is unreachable.

Edited September 24, 2020 by AB_IT

[Davit2005]

Does anyone have any ideas? I'm ripping my hair out over this!

 

The devices are on 2 different networks? Have both devices got routes or ways to communicate to the other network a bit more info or diagram may be of help. Can you do a traceroute to the IP address and see what that comes back with?

 

I do not know USGs that well as I never use them to be honest but that sounds like some sort of routing issue, the fact it is giving network unreachable.

 

Not too sure whether following would help.

 

https://community.ui.com/questions/Manage-USG-from-other-network/be480490-ada9-4c6d-a879-2b33be16150c

Edited September 24, 2020 by Davit2005

[MatthewL]

Money on routing, might need to put a route in on your controller and the USG.

 

If you can post up a diagram that might be a help but routing caught me out on one the other week. Must admit they are the nicest of devices to work with at times.