2021 Complete Unifi Setup Guide

hey what's up guys welcome back to mts my name is jack and this is the 2021 complete unifi setup guide if you don't know much about ubiquity they use what's called software-defined networking or sdn meaning there's a centralized controller that tells all devices what to do so you have a centralized easy management interface for everything so to run ubiquiti's controller software you have a range of options you can self-host it on your own computer or server you can also host your controller up in the cloud using something like hostify or really any other cloud hosting provider now ubiquity of course has their own dedicated hardware devices to run the controller such as the cloud key gen 2 or the cloud key gen 2 plus now the cloud key gen 2 plus also has a hard drive bay and that hard drive bay can be used to run their nvr solution called unifi protect they also have an all-in-one device called the unified dream machine and that's a little pill looking device and that's got your access point your switch your controller and your router all in it so it's really nice for like if you just want to set up something easy in your home or like give it to like mom and dad that way they can have you know a more robust wireless solution than just you know whatever their isp provides them now building off of the dream machine ubiquity released the dream machine pro which is going to be the core of our network that we're going to build out today the dream machine pro has dual lan ports so you can either use 1 or 10 gig sfp or gigabit rj45 it also has a 10 gig lan port and 8 more gigabit lan ports which are all managed because this is a managed switch this also runs our controller software unifi protect it's got a hard drive bay which i already have populated with a drive now for most homes eight ports would be fine but with our access points and cameras and all of that stuff we're gonna need poe poe is power over ethernet so it sends your power for all of your devices over the ethernet cable itself so something like your cameras or your access points will work without having to run separate power to them and the udm pro doesn't have any poe ports so what we're going to do is supplement that with our usw 16 poe gen 2 switch now the gen 2 switches have a little touch screen on them as well as the udm pro and you can use that for some cool features like you know changing the brightness or checking port status or checking you know the names of some devices that are plugged into ports if they're a recognized device in the unified controller it features two one gig sfp ports 16 lan ports with eight of them being able to ride poe now this is great for wired networking but not all of our devices have a wired network jack nor is it always convenient to run a cable so we're gonna need something for wi-fi ubiquity has a range of wireless access points you can get anything from the apac light mine i have done a shell swap on so i've put all the guts of my apac light into this old apple airport base station from the year 2000 i just think it's really cool makes it kind of more desk friendly but so you can get the apac light this handles 2x2 mimo with a maximum throughput speed of 200 megabits per second to any connected device now stepping up from that you can get the unifi long range access point the apac lr i don't recommend that access point it's not much of a step up over the apac light and for just a little bit more money you can get such a better access point and that being the apac pro now the apac pro has 3x3 mimo the apac pro is what i installed the most of i've deployed over 250 of these guys and they work phenomenally i've deployed about another hundred of the apac lights that was before i really found out about the pros or thought the pros were something worth buying so learn from my mistake install the pros they're great you can also step up to one of ubiquity's slightly newer access points the nano hd this is a 4x4 mimo access point and with it being called the nano hd that hd stands for high density this guy would be great for a small business or everybody in a waiting room these guys are fantastic they're super small they're the same size as the apac light which mine's been made slightly bigger by the shell swap but still this is a fantastic access point and i love these guys now you can't always mount an access point to the ceiling say you're doing something on the first floor of a house where you can't you know run cables up to the ceiling or really you just need a desktop-based access point that's where the flex hd comes in this is essentially the same thing as the nano hd but crammed into a cylinder so this guy's really nice and small and compact you can fit on a desk nicely and again it's basically the same thing as the nano hd so this is a high density access point now ubiquity does have some new wi-fi six stuff in the works i know they've released the wi-fi six version of the apac light i still really wouldn't recommend that access point the one that i'm really waiting to be able to recommend currently is not out of early access so i can't really tell you guys about it and it's really cool but it's not really something that's worth waiting for wi-fi six isn't gonna make a massive difference in your home unless you have something like multi-gigabit internet now configuring this for home use the access points that i'm going to use is going to be an apac pro this is going to handle everything upstairs so for the downstairs area of the house i'm going to use the unifi flex hd now this is typically going to be because i'm not going to have access to run wires to the ceiling in the first floor of the house it's really easy to run wires up in the ad i can just plop one of these guys up there now my family does a lot of entertaining we have guests over all the time and our backyard sees a lot of use so for providing wi-fi out there we're gonna use the ap ac mesh pro now the mesh pro is a pretty beefy access point for outdoor use i've deployed a bunch of these guys and i haven't had an issue with them they're weatherproof and they have dual network jacks so you can pass through the first thing to do with our setup is to configure the dream machine pro now for starters we need to give it a wand connection you can use the rj45 port for most installations but i happen to have a 10 gig sfp cable here so i can put that in and i'm getting my weighing connection over a 10 gig fiber line next we need to connect the udm pro to our usw 16 poe this switch doesn't support 10 gigs so i'm not going to bother using our 10 gig sfp plus port to connect it to this switch i'm going to use a simple cat6 patch cable so i'm just going to go from port 8 here to port 16 here that way my cables are nice and over to the side black matching cables for interconnecting devices now for connecting our access points i'm also going to use some short patch cables but you know these cables would be longer going to wherever these devices are going to be deployed so our first eight ports are our poe plus ports so i'm gonna start populating them with one for our access point our flex hd another one for our apac pro going into port two our mesh pro we can put this in port three and because our udm pro supports unifi protect i'm just gonna go ahead and throw on a g3 flex camera here and with our dream machine pro and the switch booted up the dream machine is now telling us to download the unifi app and you should know that you can also set up the udm pro through your web browser on your laptop or your desktop now launching the unifi app it says that new udm pro found so i'm just gonna go ahead and click setup but if this doesn't work you can also just click on the plus at the top right hand corner of the screen and it should find the device over bluetooth so it says connecting connected what do we want to name it all right let's go to i'm going to call it goodbye 2020. so i'm going to say that this is going to be a personal setup next great this is my ui.com account i can also choose a different account but i'm going to hit next face id great auto optimize my network sure hit on next update schedule every day i'm going to say every week on saturday at 3 a.m that sounds good starting it's going to do a speed test right now and tell us how fast our internet connection is we can see that we're hitting about 50 meg and i'm getting about 20 up 20 up is normal for me that 50 meg down i should be getting 100 i typically get 100 but my router's been acting weird which is why i'm going to be really happy to actually install the udn pro i did already have a script written for a very negative udn pro review because i have had awful experiences with this guy but with the new software update it's been perfect and i'm now ready to actually deploy this guy so we're going to go ahead and actually tell it right now what speeds i should be getting this way it knows you know kind of what my limits are and if anything happens where it drops below that range it should send me a notification or at least i can tell it to send me a notification so we're gonna hit next goodbye 2020 chicago time zone everything looks good here and it's gonna download the firmware update alright so the dream machine is now telling me that it is done with our setup and so we can go to unify slash home on our local network or unifi.ui.com to manage it over the internet with cloud connect someone hit go to dashboard face id connects now one thing i really should note to set up the udm pro you need to have an internet connection as well as to set up the regular udm you also need to set it up with your ubiquity single sign-on account you can't create a local account at the time of setup once you're done with the setup though you can go in and create a local account alright it says internet connection att u-verse so if we go over here to our devices page we can see the udm pro and all of our devices waiting for adoption so i'm going to go ahead and adopt the usw-16 poe we're gonna adopt the m pro adopt an upgrade apac pro adopt [Music] and our flex hd we're gonna adopt that all right so this should go ahead and update our devices and they should appear here in unified in the meantime i'm going to switch to using my computer so that we can go more in depth in the settings of unifi okay so we're here at a blank web page now what we need to do is go ahead and get into our network so i'm going to go to unifi.ui.com and this is going to take me to a page where i need to sign on with single sign-on and if you're unfamiliar with ubiquity single sign-on it's essentially their version of a cloud account so you use this through the store you know to buy things you can also use it for managing all of your networks all of your controllers and it keeps everything really simple so i'm gonna go ahead and get it logged in here okay so here we can see we have our goodbye 2020 this is our unified dream machine pro it says right here it also gives us our version 1.8.3 so if i look at the udm pro here you can also click on manage users and because you have to set up the dream machines with a single sign-on account what you can do from here is create admins add users that are local users so that we don't have to give out your single sign-on password to people so we can do here is we can create a new admin i always create a new administrator account for any network that i might not be the only one maintaining so that way anybody local can get into the controller because i'm sure as hell not going to be giving out my single sign-on information and i don't want to have to create new users for everybody that's going to maintain the device so i'm just going to create a local admin here at admin so we can change this to a local account access only and you need a first and a last name so let's go with local admin uh limited admin these guys uh limited admins can view and manage the controllers and stuff but super admins if you're doing something like unify access or their nvr solution unified protect they can go in and make changes to users permissions and all that stuff so we're going to make a super admin we're going to change it to local access only because they really want super admins to be signed in with uh with a ubiquity account so for local username administrator and local password let's do capital admin one two three four five cool we can add that user so now there is a local administrator but we can go back over here to our controller and we can launch unify network now unified network this is where you maintain everything in unify so we can see our download real time usage our upload in real time we can see our system up time of two days and 22 hours and 51 minutes if you cannot tell by that information i'm recording this a couple days later then my first part of the video and we can view our traffic of all of our clients so if i go to wired so if i go to wired here we can see that it's all wired if we go over to wireless it says we have no clients that are active on the network oh this is cool looks like it's giving us a little graphic showing us what ports have uh activity going down there based on what's plugged into them so we can see port 8 in our 10 gig weigh-in so we can go ahead and come over here to devices and we can see all of our devices here we have our udm pro our usw16 poe our mesh pro access point our apac pro and our flex hd we also have that second apac pro that i added just you know to kind of simulate if this was for a small business versus a house now the dream machine pro is a little bit intense for a house but i know in my area at t started rolling out gigabit fiber to the home for 50 bucks a month so with gigabit internet now being more readily available i can see a lot of people doing something like the udm pro now if we come in here we can click on add and adopt our apac pro our second one now again you don't need two apc pros for a house i mean really two access points for a house my size is perfect i have a third one just my basement because i'm crazy so it's provisioning our access point now so that means it's essentially giving it all of its settings so the wi-fi network to be broadcasting and all of the other settings such as radio strength and all that but if we come over here to clients we can see we have mini me that is my laptop and we have our g3 flex camera which we'll get into in just a moment on how that's useful for us what we can do is we can come over here to our settings though and do some more advanced configuration let's get rid of this pop up and i'm going to go to the classic settings because i prefer them so we can change our site name here to something you know more friendly so i'm just going to call it uh mts something easy and we have our wireless uplink all of our settings down here we can automatically upgrade the device's firmware then we can come down here and apply our changes and you can also see our provider capabilities so this essentially we can tell it to alert us if our throughput speed is not what we want it to be and we also have our ssh stuff so i can disable ssh but i can also re-enable it and then we can see our led options in our screens so if we come up here to wireless networks we haven't created a wi-fi network yet you can go ahead and create a wi-fi network through the app if you need to get your computer online in order to be able to manage these settings but on my computer already has an internet connection so i was able to go ahead and create our wireless network here on the controller page so i'm gonna go to create a new wireless network we're just gonna call this one mts and we can enable the wireless network wpa enterprise wpa personal sorry and let's create a password for this so i'm just going to call this this is password1 cool and we can put it on our lan network that's our main internal network we can also apply guest policies to this network that becomes more useful if we create a new network called mts guest cool we can make this an open network or we can make it wpa2 personal and we'll just call it let's make the password welcome mts now i'm going to put this on our lan for right now and i'm going to apply guest policies now some of the things that guest policies add is it adds client isolation and some tighter security controls and you can go in and create a guest user profile that all the guest policies apply to some of the other things you can do with the guest policies you can go in and set bandwidth caps so you can say that all the guests only get you know a maximum of say 20 meg down and two up so somebody that's staying with you or over at your house isn't essentially downloading all of the torrents of every movie that they want to add to their plex library eating up your internet bandwidth so we can apply our guest policies and coming down here to the advanced options we just take this box we can say whether we want it to be on 2.4 gigahertz and 5 gigahertz we can also do fast roaming and prevent our ssid from being broadcasted that's great for if you're doing a hidden network and i'm just gonna go down here and click on save and we have our guest network we can also come over here to our new networks and create a new network so we can call this one our guests network interface land vlan we're going to give it vlan 20. okay we have subnet we're going to make this 192.168.1. or actually i'm going to make this a dot 2.2 slash 24. our mts is gonna be our domain name update dhcp range boom that populates it all for us with all of our ip addresses that we're gonna get click on save boom now we can come over here to our wireless networks again go to mts guests and we can change this one to use our guests network now because we have guest policies applied our guests can't see any other devices on the network so if your buddy comes over with his phone and tries to get on your wi-fi and he's on the guest network he's not going to be able to see something like your phone or your computer now we can go one step further than that to strengthen our network by going to routing and firewall click on firewall we're going to do plan in we can go this block guess block guests from maine cool so we're gonna do ipv protocol all uh logging we don't need any of this stuff but we need a network so for our network our guests network is not going to be seeing any of our main network save perfect and now we can create another rule here that's going to do block lan from yes [Music] this is already set to drop what we're going to do is we're going to do network lan network guest network and now with these two firewall rules anything that happens on one network stays on that network so say you have a guest come over and they have a virus on their computer it's not going to affect or jump to any of your computers because it's on a physically separated network so we can also do is come in here to threat management now threat management is really cool so we can do is we have two different modes intrusion detection system and intrusion prevention system so i'm gonna go in and do prevention system and apply the changes now we can also do is we can also come in here and change all of our settings here for like mobile malware botnet stuff more malware sql say you don't want any or imaps say you don't want anybody having sql or nobody we should be telnetting into your network turn on telnet a bunch of stuff like that so we can just apply our changes here and now we have a much more secure and much more unified network and we have easy control over everything now because we just set up all of our wi-fi networks i can go ahead and pull out my phone and let's see if we can find our wi-fi network so i just went ahead and joined our mts network using the password we set up this is password one i'm gonna go ahead and run a speed test right now and see what our speeds are looking like looks like we're getting about 70 80 up or down 76 78 down keep in mind also all these access points are right now set up in my basement and i'm on the second floor of my house so they're making it through two floors and we're still getting 77 by 20. so that's pretty good i'm gonna go ahead and run a speed test on the computer here and see how that differs looking at about 85 86 87 oh okay we're jumping up there a little bit and we should be getting about 20 up so yeah essentially we're getting our almost our full speed over wi-fi and i want to also point out that performance is incredibly impressive because right now all of these access points are sitting right on top of each other down into my basement so there is a lot of interference happening we have four access points right on top of each other each broadcasting two ssids so that's pretty impressive that two stories up i'm still able to get the full internet speed on my phone so now let's get into unifi protect if you remember we have that g3 camera set up downstairs so i can come up here to the unified logo come over here to protect and we can get started now i already have a hard drive that i put in there and we can go to our devices add devices we can see our g3 flex let's call it the basement cam camera's obvious add devices and we can see that it is adopting and we should be getting our real-time feed coming up here shortly all right so now that the camera's done updating we can come in here and look at our live view we can switch from 720p to 1080p full hd let's do that and this is my music setup down in the basement you can kind of see the mesh pro access point right here my drum kit looks pretty good but we can also come in here to our camera settings and we can turn on and off the microphone we can change the brightness and all the manual settings of our camera and if we come into general what we can do is we can turn on and off the status light i like to turn off the status light because say i accidentally unplugged my camera or whatever i don't want the camera to be like oh hey i'm not recording hey i don't see motion i don't want to give anything away that the camera might not be working so i'm going to turn off the logo as well and i'm also going to add the camera name and the time we're going to click on apply changes and very shortly we should see our live view update and now it says our time stamp and the basement which is pretty nice so we can close out of this and go over to recording now i have it set to record 25 frames per second at 100 image quality and motion events so i like to record 10 seconds before the motion event and 10 seconds after the motion event a motion event is essentially anytime a camera sees motion and i'm going to say it's going to take about two seconds to classify an event as motion that way you know a fly going right in front of the camera is not going to trigger it and i wanted to all you can also change it to when to record so you can say it'll only record on motion events so anytime it sees motion it'll start recording it'll save 10 seconds before it sees motion and 10 seconds after it sees motion but i like to just log motion events i like to record the cameras always because i've got a one terabyte hard drive with one or two cameras being used so i'm gonna say always and you can go in and add privacy zones privacy zones are essentially different areas of the screen that are marked out that won't trigger a motion event but they also don't get recorded now a likely use for one of these cameras would be to be mounted outside of your house you could block off the street and the sidewalks that way really only anybody that's like on your property is going to trigger your motion events or depending on your state and county's laws you might not be able to record anybody's houses across the street you could use that to mask off and not record any of that we can come over here to our live view of our big cameras now i went ahead and turned out the lights down in the basement so you can see it's night vision performance i can't exactly make out the krk logo on this speaker but i can read line six i can tell that's a rolling drum and this would be good enough to capture just about anybody's face so for about 750 bucks we have a really robust solution that we can easily expand if we need it if we want to add a doorbell camera ubiquity has their own version of that if we want to add more cameras to the backyard the front yard wherever inside the house in the garage you can add that if we want to add in more access points say we're not getting coverage enough in the garage and you really want something out there throw up an apac light that'd be perfect for that and it's relatively inexpensive so that's really the power of ubiquity the ease of access the ease of management the cost and the scalability and with features like that it's really hard to not recommend them so i hope you guys enjoyed i hope you learned something if you did drop a like are you running ubiquity stuff let me know in the comments below i hope you guys enjoyed and i'll see you in the next one

Channel: Miller Technical Services

Views: 385,282

Keywords:

Id: xhmJxYllnWg

Length: 22min 23sec (1343 seconds)

Published: Fri Jan 01 2021