Nerdy Drunk - ubiquiti

edgerouter-general

Anonymous (anonymous@undisclosed.example.com) — 2022-10-18T14:34:55+00:00

Ubiquiti EdgeRouter General ubiquiti edgerouter Traffic Monitoring Site-to-site VPN monitoring between Site1 (198.51.100.2) and Site2 (203.0.113.2). Site1 (198.51.100.2) monitors for Site2 traffic. ubnt@Site1-EdgeRouter:~$ sudo tcpdump -i eth0 -n '(src 203.0.113.2 or dst 203.0.113.2) and (udp port 500 or udp port 4500)'

edgerouter-internet-load-balancing

Anonymous (anonymous@undisclosed.example.com) — 2023-10-26T17:12:17+00:00

Ubiquiti Edge Router Internet Load Balancing When configuring internet load balancing on an edge router you can also configure a script to be run when there is a transition on an interface. This is helpful if you find that site-to-site VPN routes don't correctly stay in the load balancing route tables or you want to receive a status update on the transition.

edgerouter-openvpn

Anonymous (anonymous@undisclosed.example.com) — 2022-07-21T10:41:39+00:00

Ubiquiti EdgeRouter OpenVPN ubiquiti edgerouter openvpn routing In this example the network 192.168.1.0/24 on eth1 needs access the internet across an ExpressVPN connection and be unable able access the internet when the ExpressVPN connection is down. The network 192.168.1.0/24 also needs to be able to access the networks on eth2 and eth3 regardless of the status of the ExpressVPN connection.

start

Anonymous (anonymous@undisclosed.example.com) — 2023-01-30T18:03:37+00:00

Ubiquiti The following pages are related to Ubiquiti;

uisp

Anonymous (anonymous@undisclosed.example.com) — 2023-01-30T18:04:13+00:00

Ubiquiti UISP ubiquiti uisp docker Let's Encrypt SSL Certificate When attempting to renew the Let's Encrypt SSL certificate I received an error message similar to the following. Traceback (most recent call last): File "/usr/bin/certbot", line 5, in from certbot.main import main File "/usr/lib/python3.8/site-packages/certbot/main.py", line 2, in from certbot._internal import main as internal_main File "/usr/lib/python3.8/site-packages/certbot/_internal/main.py…

unifi-cloudkey-backup

Anonymous (anonymous@undisclosed.example.com) — 2022-07-21T10:41:39+00:00

Ubiquiti UniFi CloudKey Backup ubiquiti unifi QNAP * Enable home folders or make a new share * Add a new user NEWUSER and add to the administrators group * Enable SSH and allow your new user CloudKey * SSH to CloudKey as admin user ssh ADMINUSER@IPORNAMEOFCLOUDKEY

unifi-cloudkey-upgrade

Anonymous (anonymous@undisclosed.example.com) — 2022-07-21T10:41:39+00:00

Ubiquiti UniFi CloudKey Upgrade ubiquiti unifi Migrate Devices From Cloud Key Gen 1 to Cloud Key Gen 2. * Check inform address on all “disconnected” devices. * Check “unifi” dns entry on all DNS forwarding devices (DCs, firewalls). * If controller name doesn't match everywhere (email alerts) rename the controller and then rename it back.

unifi-tls

Anonymous (anonymous@undisclosed.example.com) — 2023-02-06T10:57:33+00:00

Ubiquiti UniFi TLS ubiquiti unifi TLSv1.2 and TLSv1.3 /usr/lib/unifi/data/system.properties unifi.https.ciphers=ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES128-GCM-SHA256 unifi.https.sslEnabledProtocols=TLSv1.3,TLSv1.2 sudo systemctl restart unifi

usg-dhcp

Anonymous (anonymous@undisclosed.example.com) — 2022-07-21T10:41:39+00:00

Ubiquiti USG DHCP Options ubiquiti usg edgerouter To test the configuration, SSH to your USG and set the DHCP server global parameters to associate the DHCP option code to an alias and define the option codes type (int, string, bool, etc.). set service dhcp-server global-parameters "option mitel-125 code 125 = text;" set service dhcp-server global-parameters "option mitel-43 code 043 = text;"

usg-radius

Anonymous (anonymous@undisclosed.example.com) — 2022-07-21T10:41:39+00:00

Ubiquiti USG RADIUS ubiquiti unifi usg radius l2tp The new UniFi controller GUI doesn't always allow you to enable RADIUS for the whole network. The following link provided the information needed to enable this so the remote client VPN could successfully authentication users off the embedded RADIUS server.