Unifi UDM Pro

[NM2026]

Hi,

 

Has anyone installed a UniFi Dream Machine Pro on a school network where the internet connection is provided by LGfL?

 

If so, I’d be interested to hear about your setup and any issues or considerations you came across.

Many thanks,
Simon

[Chris_Cook]

I'm in the process of setting these up.

 

I've not got the site manager to work yet. I think that's getting blocked by the web filter and/or a firewall rule.

 

Installing apps such as protect is also blocked by default on the web filter, but can be unblocked.

 

As its a router/gateway, you will need to setup a stub network with LGFL for the outbound interface. It won't let you have the public interface on the same subnet as used internally. If you can't do that, or can't do that yet, it can work as a console for Unifi switches/Wi-Fi if you connect one of the internal interfaces to the LGFL router.

 

You will also want to turn off NAT or else everything on schoolprotect will show as coming from the same IP with the same policy.

[mukz]

We have it working here but depending on your use case i would not do it again - its just an additional overhead.
We have had it for a few years now.

[db12]

@Chris_Cookdid you manage to get anywhere with the Site Manager?

 

I'm also at a school that is going to UniFi and has its filtering through LGfL, and whilst I can connect the UDM to the internet using the WAN address LGfL gave me, I still can't get the Site Manager to work, meaning I have to be on site with an ethernet cable plugged in to configure anything.

[Boredguy]

@db12 to get my Unifi Servers/Cloudkeys/NVR's to be accessible via the Site Manager from offsite, we had to configure them on our firewall to have a public IP, and to have the correct ports open for it to function.

Main one was UDP Port 3478, but there is a list at Required Ports Reference – Ubiquiti Help Center for what you need open inbound/outbound

Edited October 19 by Boredguy