2022 Complete Unifi Setup Guide

what's up guys jack here with mts and this is the 2022 complete unifi setup guide [Music] now if you're unfamiliar with ubiquity they use something called software-defined networking or sdn and for the sake of simplicity that basically just means that we have a central controller that manages all of our devices to create a simple management interface for all of our networking equipment which provides a single pane a single place for you to change all of your settings things get synced across devices port profiles get synced vlans everything it just makes management much easier now at the heart of any unifi network is the controller and for the controller you have a number of options you can self-host the controller on any pc mac or linux computer ubiquiti makes the software freely available for download you can also use one of their hardware appliances such as the cloud key gen 2 or the cloud key gen 2 plus at 179 and respectively but we're going to be using a dream machine pro se which handles a number of these functions for us including our controller the second thing we have in pretty much any network is a router or what is taking those packets those bits of information and sending them where they need to go what is giving each device its address so that way things know how to communicate again that's being handled by our dream machine pro se here the third thing that we're going to need is a switch or what's going to be sending our network signals to all of our devices that again handled by our dream machine pro se and that also includes four poe ports now poe is power over ethernet which basically just means that you can have power and data running over a single cable so when i go to plug in an access point i don't need to run two separate cables i can run it all over one cable if you don't have a poe switch you can use something called a poe injector which basically just takes a regular network signal injects power into it and then gives it to you on a cable so that way you don't have to have a poe switch i would recommend heavily having a poe switch because managing poe injectors just becomes a pain in the butt when you get more than two now one of the nice things about having a poe switch is that you can remotely reboot devices if a device isn't behaving or isn't responding to your commands you can go into the controller software select the port on the switch and hit reboot or cycle poe what that does is it will kill the poe power on that port and then re-enable it effectively power cycling these devices without you having to go down to your mechanical room and fumbling around with all of your cables going i think this is the right po we unplug this it just makes things so much easier again that is being taken care of by our dream machine pro se now along with our udm pro ses built-in switch i'm also going to be setting up a 5 port little desktop switch from ubiquity the usw flex mini now this is a little five port gigabit managed switch that gets its power either via the included usbc power adapter or through poe on the first port from our dream machine or any other poe switch that we have now the fourth thing that we're going to need is some form of access point which takes our wired network signal and converts it into wi-fi for all of our devices such as phones tablets laptops little nintendo switches xyz to all connect to and for that i'm going to be using a u6 lite and a u6 professional now because our dream machine pro se has an nvr or network video recorder built into it i'm going to be setting up a couple little security cameras from unified's protect lineup the first one being a g3 flex this is a little 1080p camera that just gets its power from poe and a g3 instant which gets power from the included usbc wall adapter but you can also get an 802.3af poe adapter for it as well but this is a wi-fi only camera it will not send its data over the network cable it will only get power from it but again i'm just going to be using the included usbc wall adapter now you don't have to go with all of the gear that i have here you could swap out these security cameras for whatever best fits your needs say you need a nice bullet camera right above your garage or at like the main entrance to your office building but you can substitute one of these cameras for the g4 bullet or really anything else from ubiquiti's lineup need more switch ports just add a different switch in the adoption process is the same the configuration process is the same for all of these devices so mix and matches your needs see fit now along with swapping out or adding additional cameras and switches you can do the same thing with your access points ubiquity has a number of access points for just about any use case need some outdoor wi-fi well go with their mesh pro series or their regular mesh outdoor access points you can also use their pro access points the u6 professional or the apac pro outdoors so long as it's not directly being rained on and you have the rubber stoppers in place now the dream machine pro and dream machine pro se vary in three main ways the first being that the pro s e four of the front panel gigabit ports are poe so that we could power up devices such as access points and security cameras without needing an external poe switch the second being that the rj45 wan port on the pro se is 2.5 gigabit rather than just gigabit on the regular udm pro the third difference being that the udm pro se has 128 gigs of internal storage that you can use for unifi protect recordings versus the dream machine pro requiring a hard drive in order to do recordings now i would recommend on a pro se also using a hard drive because 128 gigs gets filled up very quickly as soon as you start dealing with high resolution security cameras i happen to have the pro here but through some movie magic we're going to pretend like this is the pro se but with that being said let's go ahead and get everything connected and jump into the controller setup so the first thing that we're going to do is get everything cabled up and connected now this is where we run into the first difference between my setup and your setup and that's going to be how does your internet service provider or isp hand off your internet connection to you most commonly that will be done over just a standard rj45 cable and if so you can just plug that right into the front port on the dream machine pro or pro se but in some cases you might have your internet connection handed off to you over fiber this is generally going to be done if you have a faster than one gigabit internet connection i only have a gigabit internet connection but again for the sake of demonstration i'm going to be using the sfp port and that's going to be plugged in right up here and we can tell by the little indicator light right here that we are getting network activity we also don't have the dream machine telling us please connect to the internet the next thing that i'm going to do is plug in all of these devices so i'm just going to grab some network cables right here plug them into the first four ports on our dream machine and we can see the lights on the devices as they're booting up now i'm gonna go ahead and connect the g3 instant last because this camera has a really really annoying chime that it plays anytime it's not adopted to a controller so just to save my ears i'm going to plug this in last but now that we have everything all cabled up we can jump into the initial configuration of our dream machine pro getting that online getting our devices adopted before we then move over to the computer for the more advanced configuration now i've jumped into the unifi controller app here on my phone and we can see that it's found our dream machine pro again i'm simulating that this is an se but in reality this is a dirty machine pro so i'm going to click on set up it's going to connect to the device and then we're going to be prompted to enter our unify account just a quick little side note whenever you first adopt whatever unify os console you're running one of the first things that will have you do is sign in to your ubiquity single sign-on account or sso account now what that'll do is tie your dream machine cloud key or anything like that to your ubiquity account and allow you to use their remote cloud access to it now i'm already signed into the mobile app which is why it didn't ask me to do that however your mileage may vary we're going to name the device i'm just going to call this last year i called this goodbye 2020. i'm going to say hope for the future that's what i'm going to call this and i'm going to disable analytics and improvements next it's going to test our internet connection speed to see what our isp is capable of giving us again i have a symmetric gigabit fiber line so we should be seeing anywhere between 900 to 1000 megabits per second now that speed test was a little bit slow i have a feeling it was just a fluke with this speed test that this guy just ran i'm gonna go ahead and run another one once we get into the advanced configuration options using the computer but for now i'm just gonna let this device finish updating okay so a bit of an odd thing happened i updated the dream machine pro s e here well this is just the pro and all of a sudden my sfp module stopped working with it now i can go ahead and fall back to using rj45 but not exactly a good sign now this is pretty common in the industry for different manufacturers to have different standards that they use for sfp plus stuff so if you run into this issue maybe make sure you get the ubiquiti specific sfp plus modules for now i'm going to go ahead and swap out my fiber connection to the internet with rj45 now that i've swapped out my fiber connection for rj45 i have a connection to the dream machine pro se here through the mobile app now rj45 is generally much less of a headache to deal with than fiber and sfp because different manufacturers have different intercompatibility options for sfp rather than rj45 which is pretty much just a common standard plug it in and it's gonna work so now that we have a connection to the app we're gonna go ahead and adopt our devices we can see that we have the u6 pro here ready for adoption i'm gonna hit adopt device we have our u6 light and i'm gonna hit adopt device and our usw flex mini is missing from the list i'm gonna go ahead and try and figure out why that is okay so our usw flex mini just popped up on the list i just gave it the old unplug it and plug it back in and it seems to be working so we're gonna go ahead and adopt this as well now with all of our devices adopted i'm gonna go into our udm pro se here hope for the future and scroll down to see its lan ip address 192.168.0.1 and that's the ip address that we're going to use to manage the udm pro se so i'm going to go ahead and take that address plug it into my web browser on my desktop so we can manage the advanced settings of all of these devices to get our network really configured and dialed into the way we want it now that we're at the computer we can dive into the advanced configurations of our unifi controller now this website that i'm at right now is unifi.ui.com which will show you a list of all of your unifi os consoles that's all your cloud keys if they're up to date and your unified dream machines however if you are running the self-hosted version of the unifi controller you're going to want to either go to the controller's ip address or you're going to want to go to networks.unifi.ui.com and i'll have all these links down in the description however if you have plugged your computer directly into the dream machine pro i would recommend going to the ip address of it and that's that ip address that we found earlier 192.168.0.1 however for this i'm just going to be using unifi.ui.com because my computer's on a different network so we can go ahead and get into our hope for the future i'm just going to click on network and we're brought to the dashboard page of our unified dream machine now we can see the four ports we have populated right here with all of our devices as well as our internet connection right here on the rj45 port which is pretty nice about the new gui it'll show you exactly which port things are plugged into we can come down here and go to our unifi devices so this is all of our access points switches cameras all that stuff and i'm going to go ahead and start renaming our devices so that way they have more of a friendly name so the u6 pro this is going to go in the living room so i'm going to call this living room access point cool hit apply u6 light settings device name i'm going to call this garage this is going to go in the garage scroll down hit apply changes and the usw flex mini i'm going to put this behind my tv so i'm going to go over to settings and rename it to tv switch now that we've given more of a friendly name to all of our devices we can go in and start configuring our networks and we're going to be creating a couple of vlans now if you're not familiar with a vlan it's essentially a separate network from your main network with selective communication between the two or multiples you can have like 4 000 plus vlans that's crazy but so the reason why we would use something like a vlan is one for security and two for congestion now network devices are pretty chatty they like talking to each other hey do you have this ip address yes i do have this ip address hey who's the router i'm the router things like that and that's normally not a problem on a home network however if you're deploying something like ubiquity or unify it's probably because you have more devices or are in need of more than what a simple isp router can provide to you so we're gonna try and deal with that congestion now congestion on a network is not linear it does not linearly increase as you add more devices it actually increases exponentially because all of the devices like talking to each other as well so we're going to use some vlans just to simplify our lives a little bit so we're going to go into settings and it wants us to create a wi-fi network first however we're not going to do that just yet we're going to go over to networks and create a new network and i'm going to call this our iot network or internet of things so this is where all of our little smart plugs smart tvs those things the things that are generally less secure than something like a desktop or a phone if you've seen all like the big chromecast hacks or printer hacks those types of things this is making sure that if one of those devices gets compromised it doesn't have access to the rest of our network where our computers phones tablets those types of things are so i'm just going to call this iot we're going to disable auto scale the network and i'm going to change this ip range from 192.168.107.1 with a net mask of 24. that's going to give us 254 usable ip addresses or 253 then we're going to come down to advanced configuration and click on manual and vlan id now i'm going to change this vlan id to 107 just because that's the iot standard vlan id that you use and we're going to want to make sure that mdns is enabled or multicast dns now what this is going to do is allow the devices that are on our main network to discover the devices that are on the iot network which is important for things like apple tvs and chromecasts because if the device was on just a completely separate network we wouldn't have the ability to cast from our phone or our tablet to the tv enabling mdns or multicast dns allows that communication to work so we're gonna go ahead and leave that enabled and i'm gonna click on add network all right our iot network's been created the next thing that we're going to do is create a guest network for any guests that come over to my house now if a guest comes over and they have a virus on their laptop i don't want that to be able to jump onto the devices on my network so we want to make sure that that is segregated from my network i want the guests devices to be their own thing all they need is internet access they're not going to have the ability to control my chromecasts they're not going to have the ability to talk to anybody else on the network they are just getting the internet so we're going to go ahead and create a new network i'm just going to call this guest net i'm going to disable auto scale network and i'm going to change this network to a dot 10. so we're at 192.168.10. then i'm going to come down to manual i'm going to change this vlan id to 10. i generally try and have my vlan id be the same as whatever this is and so we're also going to apply guest policies by creating a guest network now what guest policies do is it basically tells the devices hey you're alone you can't see out to any other devices on the network the only thing you can see is the internet so say i have billy's iphone and jimmy's tablet those two devices can't talk to each other even though they're on the same network which is exactly what we want for a guest network i'm also going to disable mdns because i don't want them to have communication with my chromecasts or anything like that everything else looks good i'm going to go ahead and click on add network now we're going to go ahead and create one more network we're going to create a network for our cameras now because these cameras are going to be outside that's an outside ethernet connection that's the ability for somebody to tap into that camera line and get access to our full network and we don't want that we want the cameras to really only be talking to the nvr or the dream machine so we're going to set up a vlan for our cameras i'm going to go ahead and create new network we're going to call this cameras disable auto scale the network we'll just set this to 2 actually i'll change this to 20. come down to manual here changes to vlan id and disable mdns and we're good to go now that we have all of our networks set up it's time to create our ssids or wi-fi networks that go along with all of our wired networks so i'm going to go over to wi-fi and by default it's putting us on the lan network and so this is going to be the network or the wi-fi network that all of my devices are going to connect to that's going to be on our main lan i'm going to go ahead and call it mts and for password i'm just going to go with password and all of the other settings actually are pretty good right out of the box so i'm not going to bother changing any of these i'm just going to click add wi-fi network next we're going to create our iot wi-fi network for all of our little smart plugs chromecast smart tvs whatever is to connect to create wi-fi network i'm going to call this mts underscore iot and for password i'm going to go with again password but password iot just again for testing don't make your password something like this and for network we're going to select iot now what this network setting does is it means that any device that we connect to our iot wi-fi network is going to get dumped onto our iot network the actual back end network and so i'm going to change these settings here a little bit i'm going to go to manual and i'm going to disable 5 gigahertz i've had issues with smart devices in the past not having the ability to see a combined ssid so a combined ssid is when you have your 2.4 gigahertz and your 5 gigahertz names the same so they appear to your devices as just one network however i've had some issues with smart devices not liking that if they can't actually connect to five gigahertz so i generally make iot networks 2.4 gigahertz only and all these other settings look good i'm gonna go ahead and click on add wi-fi network and for guest wi-fi mts guest and i'm just going to make the password welcome guest and so i'm going to put them on the guest network or guest net and all of these settings look good so i'm going to go ahead and click on add wi-fi network and just like that we have all of our main networks and wi-fi networks set up however our iot network and our main network can still communicate we haven't told them that they can't now on most networking equipment the default rule is to block traffic or have no rules set up at all except for with ubiquity their default policy is to allow traffic between all vlans so we need to tell it to not do that so we're going to go ahead and come into firewall and security firewall rules lan we're going to click on add we're going to say lan in description block iot from lan we're gonna click on reject or drop all traffic from the network iot to the destination network lan and that should be it save changes now we're going to create one more rule that's just going to be a block lan from iot drop all packets from network lan to destination network iot and apply changes and last but not least we need to create the firewall rules for the camera network so that way it can't talk to any other network so we're going to create new rule lan in block cameras from lan we're going to click on drop network cameras to network lan and hit apply and we have to do the same thing for our iot network as well so lan in block cameras from iot drop network iot or cameras from network iot and that should be all of our lan rules that we need now we just blocked all traffic from our iot network and our lan network so they can't talk to each other at all except for with mdns now there is some traffic that i want to allow through i have a plex server set up on my main network and i want devices on my iot network specifically my apple tvs to be able to see my plex server so if you know the port i do it's 32400 that's the default port plex uses if you don't know what port your application uses generally a simple google search will be able to tell you so the little casa smart wi-fi plugs they use port 9999 plex uses 32 and minecraft servers generally are on two five five six five a unified controller for instance is on port 8443 and port 8080. so if you know the ports you can have the networks communicate so i'm going to go ahead and open up the iot network to be able to see my plex server with that i'm going to do create new port and ip group and i'm just going to call this port and ip group plex and i'm going to plug in the details of 32400 so i'm going to go ahead and put in plex and 32 400. click on add and hit apply changes now if we come over to profiles we can see we have our plex port and count one so to apply this rule to our iot network we're going to go ahead and create new rule i'm going to change this to lan in description allow plex on iot before predefined rules and our source the source is where the traffic is coming from or what network is making the request because our iot network is going to be making the request we need to change this to network iot and we're going to allow the destination to be port group port group plex so this is going to make sure that any device on our iot network will be able to connect to our plex server on our main network but nothing else and we're going to hit apply changes now that we have all of our firewall rules set up we need to go ahead and change the priority of them ubiquity works based off of highest takes priority meaning that the higher you are in the list of firewall rules the more priority you have therefore because we have our block rules above the allow rules everything's going to get blocked on our iot and lan network before plex is ever allowed to go through and we don't want that to happen so what we need to do is move this allow plex on iot to be above these other rules and we can do that by just grabbing it over here on the side and dragging it up to the top now that should be all of our firewall rules out of the way except for right now we're not taking advantage of one of the udm pro's key features and that is the traffic threat management so we're going to come up here to threat management and select detect and block hit apply one of the things that i forgot to mention is that you're going to want to change the system sensitivity for the threat management they have three built-in profiles low medium and high as well as custom where you can manually edit the threat categories such as blocking trojans dns user agents web servers icmp ftp really whatever you can think of and we're done we now have a completely managed and set up unify network that should be up and running so with that being said let's do a test i'm gonna run a speed test on my desktop here just to see what we're getting on our wired network ping of one millisecond i have a symmetric gigabit fiber line coming to my house so we can see we're getting about 900 meg down and let's see what our upload is and we're getting very similar numbers on our upload coming into the wi-fi settings on my phone we can see our networks mts mts guest and mts iot i'm going to click on mts type in the password which is just password so i've gone ahead and connected to our mts network and i'm just going to click on go now i am running an iphone 10 so i'm not able to fully take advantage of our wi-fi six access points but still 213 down plus 100 200 something up more than good enough for a phone now that we've made sure our wi-fi is working i'm gonna go ahead and get to setting up some vlan profiles on our switch now if we come over to devices you remember that i have this tv switch now my goal with the little five port flex mini switch is to put it behind my tv and have one port be the uplink and three ports that are on the iot network for my tv sound bar and playstation and then i want to have that fifth port be on my main lan for setting up something like an htpc whenever i do vr out in the living room so i'm going to come into our switch settings and go over to settings ports and i'm going to select port 2 and we're going to put it on iot and hit apply changes i'm going to do the same thing with port 3 iot apply changes ports iot and apply changes and then for the last one i'm going to make sure this is on my lan apply changes and just like that i now have all of the devices that will automatically be put on the iot network as soon as they get plugged in now that we've changed all the port settings on our tv switch it's time to do the same thing for our security cameras if you remember we plugged in that little g3 flex camera earlier and now that we have our own dedicated camera network we need to make sure that that camera goes on the camera network so because it's plugged directly into our udm pro se i'm going to come up to hope for the future settings ports the first port the flex camera is only 10 100 so it's very easily identifiable right here as this 100 megabit connection i'm going to change the port profile to cameras and hit apply changes now that we have all of our network settings fully configured it's time to set up unifi protect so we're going to come up to hope for the future our little biscuit up here and we're going to select unifi protect and this is the protect dashboard we don't see all the little ports populated in this dashboard but you can see the camera little stills of when it's detected motion i have the camera right behind me over here so we're going to come over to devices and we can see our little g3 flex and we can open up a little live view of it now let's change our unified protect settings so that way it's something that makes sense because by default ubiquity doesn't have any information on this camera it just shows the ubiquity logo or unify logo which kind of stupid so we're going to come over here to recording and recording quality max everything out 25 fps better image quality if you're using a lot of security cameras in a business environment you could probably drop this down to about 10 fps but because i only have a handful of cameras and a one terabyte hard drive i'm just gonna crank the settings on everything so image quality 100 frame rate 25 fps and i'm gonna tell it to always record by default it records on detections but i prefer to just always record and then alert me about detections so all these settings look good you can set up privacy zones so if there's something that you can't film say you have a camera outside and you don't want to film like the house across the street or the business across the street or especially like a highway if your camera like faces a road you don't want to be triggering motion detections by all the cars just driving by so you can set up a privacy zone and that is essentially a little mask where the camera will not record it will basically just black it out however i don't need a mask so i'm just discard the changes the next thing that we're going to do is change our overlay settings because this unify logo here is not very useful so under settings we're going to change our overlay information disable the logo because that's stupid enable the camera name and time because that's actually useful information and hit apply changes i'm also going to disable the status light i don't like having status lights on my cameras because say it's an area that gets a lot of foot traffic if somebody wants to rob me well they see the light on the camera all the time and then the one day that the light is off on the camera hey it's probably down so good opportunity so i don't like to give out any more information than i have to with my cameras so the status light gets turned off you also have the ability to disable the microphone permanently now disabling the microphone permanently will deactivate the microphone but in order to reactivate it you will have to manually reset the camera that is going up to it and holding the reset button if you want to get that microphone back on now this is done generally for one reason and that is some jurisdictions do not allow for recording of audio in security cameras because it violates people's privacy so make sure you're just kind of up to speed on the laws of security cameras in your area and i'm also going to go ahead and rename this g3 flex 2 bedroom because this is just going to be a camera that's going to keep an eye on who comes in and out of my bedroom the bathroom in my bedroom of this apartment is actually the bathroom that you're expected to use if you're just like a guest coming over so i want to make sure people don't walk down my little hallway into my room they're just using the bathroom so i'm going to keep this here in my bedroom now that we have our g3 flex set up let's go ahead and set up our little g3 instant now our g3 instant is a little wi-fi camera and it's just gonna go on our main wi-fi network i could put it on the iot network if i wanted but i'm just gonna put it on the main lan i don't have a problem doing this and i don't have a problem with it not being on its own vlan because it's a wireless device people aren't gonna be able to use that camera to easily jack in their laptop well easily jacking their laptop to my cameras and get access to my whole network so with that being a wi-fi camera likely inside my home it's fine to just be on the main network now i've gone ahead and plugged in my little g3 instant camera and pretty soon it's gonna boot up and you'll get to hear the uh there [Music] yeah this doesn't go away but we can see our webpage here has already found the g3 instant so i'm gonna go ahead and click on it and hit adopt device and hopefully it'll shut up all right now that our little g3 instant has been updated we're gonna go ahead and change the settings on it as well so recording again always recording quality image quality 100 motion detection settings i want one second of motion to be required in order to count it as motion we're going to tell it to record 10 seconds before 10 seconds after and apply changes we're also going to come over here to our settings uh disable the status light and change our overlay information i'm gonna call this living room and hit apply changes now i forgot to change our motion settings on the g3 flex camera so i'm going to go ahead and do that now go to bedroom recording motion detection settings 1 and 10 and 10 apply changes now this really doesn't matter because i am recording all the time however if you have a number of cameras you might want to conserve disk space and not record 24 7 so then these settings become very important so that way you make sure you get you know the person driving up make sure you get the person you know after they've walked by the camera just recording and just like that unifi protect is set up we have a camera system and a network system all ready to go and now that we have everything set up we can manage our network and view our recordings remotely using the unifi network and protect apps on our phone or by using unify.ui.com as well as the hostname of the controller but anyway guys thank you all for watching if you enjoyed this video go ahead and drop a like if you really liked it want to see more of me in your subscription feed but then you can go ahead and get subscribed i'll have links down in the description to all the products that i talked about in this video as well as the tools and cabling that i use when i'm doing these jobs in these installations while you're down there go ahead and drop a comment let me know what you thought about this guide is there anything i could have included or what would you have done differently after watching this if you found any of this to be a little bit too daunting for you i do offer network consulting as well as full remote configuration you can visit my website millermediastl.com and click on the get started button but anyway guys thank you all for watching and i will see you in the next one [Music]

Channel: Miller Technical Services

Views: 483,787

Keywords: tech, unifi, ubiquiti, computer, it, av, production, server, installation, review, camera, miller, technical, services, jack, jack miller, miller technical services, network, networking

Id: kGBFkIzf6x0

Length: 35min 29sec (2129 seconds)

Published: Sun May 15 2022