Carsten
Looking for people who also use Ubiquiti UniFi devices. Looking for recommendations to replace a a mix of Linksys and TP-Link and other network things. Mainly eveything needs to be setup behind my existing internet router from the provider. Thanks
#UniFi #Ubiquity #IsItWorthIt
Nov 22, 2024 at 11:46amWeb
Show threadLucas Janin 🇨🇦🇫🇷Nov 22, 2024

@cblte Nice move! It depends on your needs. Please share more details.

But, I will consider replacing your provider router to get the full Unfi experience.

Show threadCarstenNov 24, 2024
@lucas3d I will when I have more. Still waiting for a better deal until the end of the month. Will keep you guys updated.
Show threadMarkus G 🇪🇺Nov 23, 2024

@cblte Some ideas from my setup: behind my ISP-provided FritzBox I have an Edgerouter-X. The FB is configured to see the ER-X as exposed host. The ER-X does the filtering and NATing and also serves as Wireguard peer/server. The FB‘s wifi is disabled. Wifi is handled by Unifi APs. A Raspberry Pi 5 runs the controller application. Some Unifi switches complete the picture.

#unifi #ubiquity #fritzbox

Show threadCarstenNov 24, 2024

@Elephant Hello Markus. Thank you for your insights. I am planning a similar setup. Except that the Gateway Ultra is probably doing all the stuff that your pi5 is doing right now.

Wondering if I need Tailscale then in the future? Or if I can access things through a domain name then.

Show threadMarkus G 🇪🇺Nov 25, 2024
@cblte Yes, the Gateway Ultra seems to cover what my Pi and my ER-X are currently doing. It also supports Wireguard so you can make use of that. If your ISP-provided router is a FritzBox you can use their auto-updated DNS entry, otherwise you can look at any of the many DynDNS providers. I use my own domains the DNS entries of which I update with a script when an IP change was detected. I have a true IPv4 connection so I do not have to struggle with a more complex IPv6 situation.
Show threadCarstenNov 27, 2024
@Elephant Unfortunately I do not have a FRITZ!Box. So I think I still have to open port 80 and 443 for port-forwarding to reach the internal network. Which is fine. I guess.
#as a reliable dyndns I am using DeSec.io and a small perl script or go app. Need to check that.