richbrowncardiff

Using the Xg is quite a challenge in our place. YouTube seems to be excessively restricted with safe search on. Any idea how / if I can allow more through? We don’t use google apps so no accounts although logged in with a personal account as a test and can’t override

The IP helper has been on both (tried both) physical and virtual, Just so i'm clear so if i connect eth2 give it the gateway IP same as vlan now and put vlan ID onto the physical port with no ip on the vlan then put the helper on the physical interface it should work?

@FN-GM Many thanks for your help not working yet though. Do I need to add an additional static route so the interface "see" each other ? I can see traffic on the interfaces but they dont get dhcp. Its really strange as traffic is passing and with the stacked approach all is ok but when I separate them out it stops working. I must be missing something

Thanks yes thats right. I did but thinking about it now now you've said it I guess I need to add the helper to all ports not just the perceived "incoming" port. Doh ! thanks will give it a go sure it will work then.

Hi All, quick question on routing... I have an edge router 8-pro so far setup (working well) Eth0 Lan 192.168.1.1/22 gateway 192.168.1.1 several vlans setup on this interface we will say vlan 20 = 192.168.16.1/21, vlan 21 = 192.168.24.1/21 vlan 30 - 192.168.4.1/23 and vlan 40 = 192.168.6.1/23 etc eth 7 out to Internet router what I would like to do is move the vlans from Eth0 to their own physical interfaces to improve performance. when I do this I can ping each gateway fine but clients don't get their ip addresses from dhcp. the dhcp relay is set on eth0 then on each of the vlans such as eth0, eth0.20, eth0.21 etc The default route is 0.0.0.0/0 next hop wan ip. i'm obviously missing something when I change vlans to individual interfaces but can't see where I'm going wrong any ideas ? Many thanks

Thanks Yes your right, Tested and working. Cheers

Hi All, Over half term installing our Sophos box and new connection. So far mostly all good in testing but one thing I can't seem to find simply is how to quickly block a url on the XG appliance. The in built categories are ok but obviously we need to add urls to a block list as and when required. any advice much appreciated.

Thanks All great ideas. Like the idea of the remove group from share script will give it a go!

Thanks I did think of this but its going to get messy as the amount of data grows. agree about AD login hours but it means I would need to create 5k accounts. This is all to do with Controlled assessments. I will go back to the drawing board I think.

Hi All, I'm looking to see if anyone knows of a way to give timed access to a shared folder ? thanks in advance !

We are 100% unifi and love it. 76 Ap's 46 switches and performance is very very good. I used to have constant complaints and now have 0! I have 1800 students and 200 ish staff. wifi used by 800-1000 concurrent users no issues thats along side the 800+ wired devices being used at the same time. i'm a massive fan.

I have the same tester and it does report port / switch info on unifi switches no tinkering needed

Thanks all, Decided upon sophos in the end. from initial testing very pleased. Time shall tell but so far so good.

Great thanks all ! I wont use the free stuff as i have to cover myself and if i'm paying for something i have backup if its needed!

Ok great thanks what spec VM's do you Run ? How many clients ? I will have 2k clients and 1gbps internet connection.

Hi All, What UTM do you use ? Been looking at Smoothwall, Checkpoint, Watchguard, Barracuda and Sophos. Does anyone use Sophos as a VM ? Waiting for Costs but "should" be cheaper than a hardware appliance Cheers

I will be using Dovestones Ad Toolset

I know this is an old thread but I am having these issues on 2016 anyone find a solution ?

wanted to update this thread I want to thank @Al_NetSupport for resolving my issues with DNA and ensuring School was performing better for us. I have decided to Buy Impero for the Classroom management in the end as although the technical issues have been resolved with Netsupport we found that after a trial Impero worked better for us in the classroom so We are now using Both DNA and Impero for their respective jobs and will continue to do so as it works best for us.

@AJWhite1970 Here you go https://www.msdist.co.uk/product_Ubiquiti-UniFi-Switch-48-Port-56W-Managed-Gigabit-Ethernet-Switch.php I use these Guys all the time and they are great, in Stock too

Not at the moment as i'm in discussion with Netsupport. In general i will say performance.

Hi All, Who is using Impero on here ? has anyone left netsupport in favor of impero ? not wanting to start a debate just wanted to see what the split is like. I'm considering a move to impero for a various reasons. thanks in advance.

I have a Full Unifi setup (42 Switches in total) + 76 AP's and use an edge router pro-8 it flies! Use Fireworks and MicroTik SPF & SFP+ mods. I have found them to be very reliable. I had 3 switches which were getting to hot and RMA'd them no issues at all since thankfully. Been installed since Feb great setup for a Big School (2000 users) I was a bit hesitant to start with but so far no complaints at all. looking at the unifi roadmap I feel very re-assured as later this year they are going to start lifetime warranty on the new line of XG & HDproducts ! https://community.ubnt.com/t5/Ubiquiti-Announcements-and-News/UniFi-The-Beginning-of-The-Higher-Market-Disruption/ba-p/1919286

Have setup a FW rule to accept DNS and DHCP on the firewall to the Public VLAN interface and it seems to work so real test will be when i have 1000+ people connected to it on monday! thanks all. just 1 final question... I have currently set the vlan on the main lan uplink (eth7)but would like to move it to its own physical interface how would l go about this ? Move lead, move vlan from Eth7.20 to Eth5.20 and set the ip range on the physical interface ? then setup a static route from eth5 to eth7 ?

No i dont get anything when connected direct to the port on smoothwall. - - - Updated - - - thanks @ADMaster i will look into firewall rules didnt think of that