Unifi Network Complete Setup 2023

In this video I do a complete Unifi network setup. I do the initial installation, networks, WIFI networks , Firewall rules, Traffic management, Unifi VPNs and much more
▶Ubiquiti USA Affiliate Link:
store.ui.com?a_aid=MacTelecom
▶Ubiquiti EU Affiliate Link:
eu.store.ui.com/?a_aid=MacTel...
Unifi Client VPN video:
• Unifi VPN Client routing
▶ Hire us on our website
mactelecomnetworks.com/
▶ Watch my VLOG channel:
/ @mactelecomvlogs
▶ Join our Discord Channel:
/ discord
------------------------------------------------------------------------------------
Affiliates I use:
▶ VOIP.MS
www.voip.ms/en/code/Mactelecom
▶Canadian Amazon Store front:
www.amazon.ca/shop/mactelecom...
▶USA Amazon store front:
www.amazon.com/shop/macteleco...
▶NordVPN:
go.nordvpn.net/aff_c?offer_id...
------------------------------------------------------------------------------------
▶ Find us on social media:
▶ Instagram:
/ mactelecomnetworks
▶ Facebook:
/ mactelecomnetworks
▶ Twitter:
/ mactelecomn
▶ TikTok:
/ mactelecomnetworks
▶ Linkedin:
/ cody-maccallum-29311b6b
▶ Twitch:
/ frozil3
0:00 Intro
0:57 Unifi console and switch comparisons
2:55 Network topology
5:20 Initial setup of the UDM Console
7:12 Adopting Unifi devices
7:36 Creating networks and WiFi Networks
14:07 Adding vlans to switch ports
17:30 Firewall Rules
28:33 Security Insights
29:26 Unifi VPNs
29:51 Teleport VPN
30:52 Wireguard vpn
32:56 OpenVPN configuration
34:06 VPN firewall rules
36:42 Client VPN with NORDVPN
38:21 Site Magic VPN
39:35 Traffic Rules
42:26 System settings
43:27 Unifi OS backup and restore
44:17 System log
45:05 WiFi Insights
45:55 Helpful planning tools
46:43 Final thoughts

[@MactelecomNetworks]

If you're planning on buying any Ubiquiti gear and want to support me use the affiliate links below :) ▶Ubiquiti USA Affiliate Link: store.ui.com?a_aid=MacTelecom ▶Ubiquiti EU Affiliate Link: eu.store.ui.com/?a_aid=MacTelecom

[@BrandonTan]

Hi Cody, I am in need of Unifi Express for my home network. Could you assist? Thanks

[@kristopherleslie8343]

:)

[@rvdejoode]

Haha wow! Just finished my first pre install of my UDM SE. Wanted to dive into the advanced setup today with your older videos, what are the odds you would upload a new guide today. Thank you! :)

[@neuroticepisode5208]

We need a 2024, the way to set up ports and vlans is way different, please 😢

[@greghao]

it's still annoying that design center doesn't accommodate multiple floors since signal travels, you know, in all directions =_=

[@MactelecomNetworks]

Hopefully one day ☝️

[@ngreed]

Thanks for taking the time to make this video! Great resource! Its so much better when the video is as long as it needs to cover the subject, as opposed to trying to fit it into a certain predetermined time.

[@tylercgarrison]

Most of my firewall experience is in pfsense but i recently did a full ubiquiti deployment and needed some help understanding firewall rules. Unifi is basically inverted from how pf does this, ie all blocked vs all allowed. This video was the perfect resource to make sure I had a good understanding of how to configure things properly! Thanks for the great video, cheers!

[@tomasezequiel]

You saved hours of research and thanks to you I could set up my home network. Great job! Greetings from Poland

[@AnNotuZ50]

Thank you! I was waiting for this to drop! Woo!

[@TatteredRoads]

I’ve been patiently waiting for your update! Thank you soo much, learn a lot from you!

[@doctorbah]

Amazing video; thank you, thank you, thank you!!! Just got my UDM Pro up & running as a result!

[@EfremPanagiotou]

thanks for your work. Just tweaked my uds-se for the second time using your videos. Keep up the good work

[@davidweiner3365]

Thanks for the step by step instructions on firewall rules for the VLANs, it was exactly what I was hoping to learn.

[@jakelong8660]

Yes. Been waiting this.

[@JasonsLabVideos]

Awesome Video Cody !! I see some light at this tunnel !

[@karimhoury]

You absolutely nailed it, good job man!

[@Tester2468]

Great insight on how to configure a Unifi network. I finally got my cameras on a separate network for security purposes.

[@El3andro]

Great video! Im currently setting up a UDM SE and a UDR, this video will help me a lot

[@RobertoFabrizi]

Thank you Cody, I look forward to the follow up on firewall rules and vlan part!

[@mvrck-pb5pk]

Great stuff!

[@kreyzor]

Perfect timing just what i need!

[@Traumatree]

The equipment seems nice and their visual are great, but the way to configure them is a real nightmare, especially the firewall rules which must have been designed by someone who doesn't understand how access control works. And network security is the big thing for anyone now, that's the reason I replace Unifi networks for Fortinet since the last 4 years... The fact that the UDM "firewall" allows inter-vlan routing by default is not good - that tells me that this firewall is more a pimped layer-3 switch with a fancy interface than a real firewall that block everything by default, and thus secure your network without you having to go through all segment and block them. Great video still.

[@DavidWX877]

Great video, helped me setup a vlan for my cameras!

[@Vijaythalapathy28]

Thank you so much bro for this. Really appreciated it. This going to help for my summer house build. Love you bro. ❤️🙏🏽

[@AndrewLongtine]

Perfect Timing! 😃

[@mammothkiwi]

Really great guide. I used it for adding a new vlan for IOT and it works great

[@markhokanson2401]

I love all of your videos, they are very informative and I appreciate all the great content that you make. ...that being said for demo videos like this where I'm assuming a lot of folks are following along with the video step-by-step with the management console open on one side of the screen and the video on the other side...you go CRAZY fast. I'm constantly having to pause and rewind. Might just be me, and maybe I'm a noob, in which case feel free to ignore.

[@eyefly001]

No some of us are slow! Just click the settings button in the video window, then you can change playback speed.

[@alinconstantingoga]

Thanks Cody for this tutorial. I am waiting for the new one for this year :) Greetings from Romania !

[@jeevandewee]

I learned allot from your video. Thanks allot!

[@artashs9062]

I like the way you explain. I have a project, which I am going to use Ubiquiti system, except cameras. I will use your link to buy products, and most probably will contact you to help setting up the firewall. Anyway thank you for the videos, I learn a lot.

[@Registered55]

Thank you so so much, and you increased to nearly an hour, a big thank you for this, you speak so fast, I'm happy this time around you spread it out longer..... for myself, I actually slow the video down by 25% 😅

[@MactelecomNetworks]

I try and slow my speaking but always forget sorry 😂 thanks for watching

[@dspiral]

Love this!

[@xVertigo101]

I use Aggregation for my OS2 fiber links to remote building switches, it works really well. I currently have a OS2 fiber going across the side of the house, then ariel to a woodshed followed by going ariel to a guest building until I can get some conduit out there and power. The power I'll be using is low voltage, the guest building is manly just a small room, upstairs storage and Internet access. Hopefully the ariel fiber is ok until I get the conduit next spring, it's not even armored fiber just standard LC to LC OS2 indoor / outdoor use fiber I got off amazon.

[@gonxme4]

Thanks for the new video!!

[@pe1pqx321]

Hi Cody, Thank you for your time to put together this tutorial. I saw you used Network version 7.5.162 and not 7.5.176, at least I thought I was this. The WiFi meshing setting has been moved to the 'systems' page from the WiFi settings page. Just to let you know. I might need to redo my setup here....

[@ASM1981]

Great presentation to the Network setup, quick notes here, I had created the block inter-VLAN rule before but that created some issues with the mDNS traffic like Apple AirPlay, AirPrint, and so on, I ended up blocking inter-VLAN traffic per VLAN basis, but thank you very much and keep up the good work.

[@zacharydowning4647]

Does mDNS Traffic traverse VLANS without an mDNS relay on each VLAN?

[@SneakieGargamel]

Can you explain more what you did? I got the same issue.

[@Polkster13]

I just went into the mDNS settings under Global Network Settings and added all of the appropriate VLANS to this list. No issues with with AirPlay or AppleTVs being accessed outside the VLANs they are in.

[@jeffDM_Dodge]

Thank you Cody for producing an excellent resource for Unifi Network versions setup each year! Questions: 1. 2:56 - What is the drawing program you use for network diagrams? 2. Is there a way to document/print out (old school) the network/firewall setup settings so that you can "see" if you have missed anything for each new setup? Thanks again for all that you do!😊

[@ezekialsa]

Draw io

[@benjaminloehner257]

Thanks, wanted to ask the same.

[@02semiata]

@@ezekialsa its lucidchart

[@Sfalcons]

Thank you for sharing this video.

[@juswalte]

Great explanation of setup and how to isolate vlans and I like the added trick of blocking local gateway access. Able to do all the firewall rules I need following your logic.

[@djmagicisland]

Awesome video lots to digest 👍

[@KenS-ky6ff]

Thanks for another thorough and professionally done video. We can always count on you to do things right!!!! One question I have for your firewall rules concerns the "Drop invalid state" rule. Under the "Rule Applied" options you left it at "Before predefined rules" shouldn't that be changed to "After predefined rules"? Shouldn't "Drop, All" rules be at the end of the operation orders? Thanks again for all your hard work and professionalism.

[@ThinkGreek88]

Hey cody.. love your vids. Started planning my network for the new house with unifi bc of ur vids. I'm new in networking and your vids helped me alot. Thanks for that!! Can you please do a vid. On how to setup a nas ( in my case DS224+ ) with firewall and rules?

[@loganackley7456]

So I have watched multiple videos from multiple people and yours are always spot on and the best. I am having an issue with having an IoT network be accessible by other networks. Some devices work others do not. I really am struggling with Apple AirPlay. I have Apple TVs as well as TCL TVs in our building that have AirPlay 2. I can see all IoT devices from my staff, childcare, and guest networks but when I go to actually connect it errors out. I've been trying to nail this down for about a month now and am tearing my hair out. Would you be willing to do a video showing firewall rule setup for these types of applications?

[@jigjigainternational5449]

Thank you a lot

[@pbear06]

I don't understand why you need to create this group of gateways 24:30 since the LAN local (and you say it yourself) is for the UDM (= the UDM's gateways). I mean, you just have to create your rule (25:03) with destination any. No ? I tried and it works, I cannot ping any gateway's ip of the UDM.

[@caseypries7559]

Thanks a lot for this video. You clearly have a much better understanding of the ubiquiti firewall than I do. When I get home I'm going to see if I can make mine work. Attempting to block all traffic except RDP and File Sharing between my webserver VLAN and the Main LAN has been challenging for me. We'll see how it goes!

[@MactelecomNetworks]

Wow thanks so much that was very kind. Let me know how your config goes :)

[@caseypries7559]

@@MactelecomNetworks it worked! In just a few minutes with your video I have the webserver isolated from the rest of the LAN. I can RDP into it from the default LAN and browse it's shared files but I cannot ping anything from the server itself so I think I'm in good shape now. To me their firewall is strange to use. In my mind one should block everything at the start and then start punching holes through it as needed. Anyway, thanks again, I really appreciate it!

[@romankiss3793]

THANK YOU!!!

[@retireecaf]

GREATTTT video ! Thanks a million! Quick question, I have both G4 and Wyze cams. Would you assign all cameras to your Cam network or IoT ? Just curious...

[@ttan9342]

Great video, thanks Cody. In regard to the VPN Client. Do you know if there is a limit of how many connections you can have at a time? Just wondering if that is the issue of the UDM or my VPN (I use ProtonVPN).

[@ggojmic]

Thanks for the video. You really are a networking expert. Congratulations! You can tell me where I'm wrong: I own a UDM Pro and a USW Enterprise 24 PoE switch. I have configured 5 VLANs and OpenVPN server on the UDM Pro. As an OpenVPN client I can access all VLANs if I don't have L3 enabled on the switch. When I enable the L3 function on the switch for a specific VLAN, I can no longer access that VLAN from OpenVPN. From the local network I can access all VLANs.

[@HPad2]

I have an issue with my UDM Pro with the blocking IoT stuff. Its been setup exactly as you've had it for awhile, but from my default network accessing cameras thats on my IoT network it takes SEVERAL tries to actually get access to the cameras. even in my logs it shows this "Reolink Parents Front 2K was blocked from accessing 192.168.1.3 by firewall rule: Block inter VLAN Traffic ." But 192.168.1.x should not be blocked. Its even always pingable. This may be a reolink issue since its showing the camera was blocked and not my PC thats trying to access it.

[@MJDigitalAT]

Thank you 🙏🏻

[@user-kj4nh3mg1g]

Great video it really covers 80% of major setup requirements. I'm struggeling with the network settings for the individual ports vs Firewall rules... If a Port is set for CAMera Network only , can IOTnetwork pass thru it because of FW rule ?? ... could you do a video on how to setup these ports vs FW rules?

[@davidthompson9359]

Thanks for the great video. I have the Unifi Dream Machine Pro I got awhile ago. I thought there was a build in firewall/IDS/IPS? It's been running fine, but today I had an issue and it seems that I was backlogged on the updates and it shut down some functions that needed to be updated and restarted. I can't find firewall or DHCP server options for wired networks. Is this something I still need to reinstall or was it a subscription that expired? One other thing, why doesn't the DM Pro pick up a Cisco switch connected to it? The SG-200 doesn't show up in any of the options in the DM.

[@justinknash]

@mactelecomnetworks Amazing video and content. Been waiting for this UniFi walkthrough. Thanks for posting. Curious have you done a video on the kit you use to make videos? Camera, mic, lighting, software?

[@MactelecomNetworks]

Thanks for watching. This would be the closest video I have to what you’re looking for Office and Network Rack Tour 2023 kzbin.info/www/bejne/p6jUgYSua7OjmNU

[@ronm6585]

Thanks.

[@1d9d5k6]

I'm very thankful for your updated video and did subscribe and like. You did an awesome job of showing the newer interface. VLAN ? ... I have 2 U6 Pros and an Amplifi Gaming Mesh System. I turned the gaming system into an IOT system and want to use VLAN since the Ampifi is VLAN aware. How do I get the Amplifi on a separate VLAN and use the DHCP from the UDMSE, not the Amplifi? 😱

[@ronsmith9420]

Thanks!

[@MactelecomNetworks]

Thanks so much for the super chat :)

[@DJZF93]

Wow finally

[@robersan]

HI !!!! Looking forward for a 2024 update. Many many changes since this excelent-at-the-date video . Thanks

[@JonnieF14]

Great guide, just got my first Unifi setup this past weekend and new to follow this guide. Of course they just pushed out a new update! haha. Also, was getting an error on the RFC1918 part. any clues?

[@jandrop6431]

With the new implementation of the traffic rules, I'm a little confused about when we need to use a firewall rule or a traffic rule. Could you make a video explaining this?

[@nellyandbert]

Would you recommend the SE over the Pro for a home network with U6e x2 install? Does the SE warrant the extra cost?

[@matthiasstratil3647]

Like always, great video! Thank you for all of them. The PING block out of a VLAN to the VLAN sec. gateway does not work on my end. It makes no sense that it's not working. Any idea? Maybe I try the old interface and see if I can get it to work there.

[@22illingworth]

This is an Awesome Video... Thanks so much for all your hard work on this Video. I have followed all the steps and now have a fully set up network. My only proble for now is SONOS. I think I have to be on the same WiFi Network as the Sonos products (currently moved to my IoT VLAN but my iPhone id connecting to a different VLAN/WiFi network. Any suggestions?

[@The808producer]

What about IPTV and VLAN taging special for IPTV ? :) I would like to connect TV BOX to my network gear instead of ISP provider modem (in bridge mode atm). What WIFI do you use for your home use ? On Default ?

[@yvonpauze5967]

Thank you Cody , verry much appreciate your lessons. But I ran into an issue, could you make a vid that explains how to share a printer between a few vlans or mayby point to were I can get instructions. My UDM is pretty much configure as you instructed but only Default vlan ca see and talk to the printer. I need to be able to share between three vlans including the Guest accouts. Any help would be great.

[@horaciohernandez3316]

I would also be interesting in this. I'm having the same issue. I have to switch to my IoT network in order to print. I want my main network to detect my printer in my IoT network.

[@RobertoCarlos-tn1iq]

Cody u da man.

[@andyhey4576]

Well done, Cody.

[@larryhitz007]

Great and complete from the ground UP. I did not see the detailed setup in your AP's that support 6E like your 6E IW.

[@MactelecomNetworks]

Hey thanks for watching. I didn’t do any WIFI 6E configuration in this video. I do have some video on the inwall and enterprise ap though . I currently don’t even use the 6ghz

[@toggenation]

Thanks for this. The only thing that I couldn't get working is denying VPN remote subnets access to the Unifi Gateway Console (HTTP,HTTPS,SSH) but I noticed your post on Reddit mentions it isn't currently possible to block this on the Unifi. This seems to be a multi-year problem but I have raised a support call with Unifi to ask if there is an expected fix soon or a work-a-round.

[@tenofive9791]

Hi, I'm just starting with Unifi equipment and your video was very helpful. I noticed that you created three Wi-Fi networks. Which network do you and your family connect to on a regular basis? The Guest network? Or is it possible you did not include your own WIFI network in this video? Would you create a WIFI network for the Default network or do you only access the Default network on a wired computer? Thanks.

[@ItsPayTime]

Thank you

[@jensibsen6046]

Thank you for a fantastic video 🤩 So annoying that the UDM does not support multiple sites administration/setup. How to handle this with an UDM, when having clients (on different locations/sites) without USGs (or UDMs)?

[@kevinroche3967]

I have a question unrelated to this video but if you could help I would appreciate it. My question is On this Monday 1-15-2024 I am installing a new sliding glass doors and was wondering if there is a Unifi automatic door lock that I could install? If yes then what would you recommend? I will also run network cable to the new door while it is being installed and buy the Unifi lock setup after. Thank you

[@mathiass568]

Hi Mac thx for your walk thourg of needed settings. could you do a extended versioner where set up firewall setting for PLex, HomeAssistent, google home devices?

[@ecl1pz]

Nice content! I still use the legacy interface to change the default LAN name. You can't do it in the new one.

[@VyasaSpan]

I'm curious if the the caution explained at 23:39 by Cody still applies in 2024?? I'm currently setting up my UDM Pro SE, but I will use a different subnet for my the UniFi camera's + Protect if I get some eventually. For my future IOT subnet I will user another subnet and did the same steps as described in this video.

[@teddymutterperl5492]

Mac - can you do a video with a full factory reset of the OS Console and then setting everything back up. This would be very helpful. Thanks!

[@user-md3mi3rl7g]

Why does the UI changed on the video when viewing the firewall at 22:52?

[@andrieswilhelmusroesch4667]

Hi There, can you perhaps make a video on how to replicate an DMZ network on a UDM SE if possible?

[@wouldyouohwait]

Please do a video with diagrams outlining In/Out/Local! It's hard to grasp and seems counter intuitive! :)

[@riteshdhawan8383]

Yes, even I found it confusing. Its similar to what is done in Azure cloud and called as NSG rules. But they were understandable but these arn't. I couldn't figure out the direction of the trafic and got confused.

[@mikemonkhouse5184]

For devices such as cell phones. Do you join those to the IoT network so Chromecast and airplay will function or is there a better way to do this?

[@gponcho1]

HI Got a question for you CODY. I just got the UDM Pro and i have Bell Giga Hub 3 GB up and 3 GB down. How can I get the UDM Pro to work with the Giga Hub at the full 3GB? What I found was to use the 10GB from the UDM Pro to the 10 GB of the Giga hub but what other connections do I need to do. Maybe that can be a show for you since there seems to be a lot of people asking the same question. Please let me know if I should Return the UDM PRO and get the UDM Pro SE instead to make it work or if the UDM Pro will work fine and do the job.

[@GeoPhilips]

This is a great video as a beginner to Unifi. But I haven’t seen any videos deal with game consoles like the Xbox. They need multiplayer access to the Internet but also need remote streaming access from phones, tablets etc

[@Josh-Fletcher]

Awesome video, this was very helpful and easy to follow. However, I am having one issue when trying to block traffic to the gateways for a vlan that is assigned to my USW-XG for routing; they are still able to pass and I do not see anything in the log that the rule is being applied at all. Is it not possible?

[@sushilswami3633]

Hi Cody, thanks a lot for your complete guide for Unifi network installation. I have setup my network following your video (+Chris - Crosstalk Solution) and it works great. Could you please do a video on inter-vlan printing for AirPlay (iOS) devices. With my current firewall settings my iPhone (IoT network) cannot print on Office network printer (AirPlay enabled). Thanks

[@EmergencyMedicalTrance]

I have my wireguard VPN and rules set up exactly the same as you did but I can still ping my cameras, and my wifi and all its devices. I can ping my nas fortunately, but the only thing it blocked was my two PC's. I'd like to lock it down a bit more. Any suggestions?

[@BrandonTan]

hi Cody, do we need to turn on IGMP snooping for the IOT vlan ? Thanks !

[@carstenmichels]

Any advices for homekit usage with unifi network? I got everyday since i use the UDM SE disconnects from my netatmo and eve cameras.... Before that I had no problems

[@rcorrea26]

Cody are you using ADMZ for your bell gigahub or bypassing ?

[@droneforfun5384]

Amy news when a upgraded UDM will arrive? Looks like UDM is a great unit, but it is 4yrs old. Se is 2yrs old now.

[@kristopherleslie8343]

Can't wait for 2024!

[@nunyabusiness2127]

Nice work as always! G3 Flex cameras are 1GbE max. Why do your G3 Flex cameras show up as 10GbE at 7:30?

[@AINAKLS]

Is your IoT Wi-Fi your main Wi-Fi you use for all your devices? Say, smartphone, thermostat, smart switch, etc? Im trying to figure this out by setting a Wi-Fi network for my main network, guest, and camera while comparing your video. Thanks!

[@LordGooben]

Early this time :)

[@vuilnisbakjes]

Thanks! Great guide and keep rockin'🤟

[@MactelecomNetworks]

Thank you so much for the super chat :)

[@louiem5985]

This is what I was looking for the new version.. One part I don't see many showing is how do you reset all your device at once to start out fresh. I need to do this after a power outage screwed up my configuration settings. I had to restore everything back but I rather reset everything and reconfigure everything again. is it possible to reset everything at once or what is the proper steps . Do you start with the camera, AC points, switches router and then UDM pro?

[@mathwizmf2013]

How would I go about offloading some of the firewall inter-vlan / subnet routing rules to a L3 UI switch (like a switch pro PoE)? If I remember correctly, these switches allowed access across subnets even though firewall rules were setup to block the traffic (i.e. the switch allowed the traffic prior to it hitting the rule located on the UDM SE). This was a problem for me in the past when hanging an AP off of a switch pro. The port profile needed to allow connections on that port to all networks / SSIDs, and the switch allowed the traffic across those subnets even though the UDM-SE blocked it (when the AP was connected to the UDM-SE, the firewall rules worked correctly). I think that in the past these rules needed to be applied to ACLs, which needed to be implemented via the SSH command line? Is this still the case or is there an easier approach? I'd love to see an updated video on that, specifically addressing these common IoT / NoT / Camera network routing rules. Unless I'm trying to go about this the wrong way lol.

[@mathwizmf2013]

Update: Apparently they no longer use the wildcard mask - the netmask (non-inverse) worked! Now if only I could make it persist through a reboot... I tried to use your older video as reference when trying this, and it isn't working for me: kzbin.info/www/bejne/h6W5dKyCZtRlbJI I've come across a few older posts saying they can't get the ACLs to work in the Unifi Forum (I'm running Network version 7.5.176). I'm using a UDM-SE and USW-Pro-24-PoE. The only way I can successfully block inter-vlan traffic when connecting to my USW is by setting the router for the network as my UDM SE and setting the firewall rules there. I cannot get the ACL to block inter-vlan traffic. This is driving me absolutely nuts. Any help or insight would be greatly appreciated!

[@attilahagen]

Hi Cody, Thank you for your effort to put together this tutorial. I did the Guest network accordingly, but when trying to connect it says: couldn't get IP address. Why is it?

[@GrahamWerle]

@mactelecomnetworks can you do an updated video of this in the new UI as well as talk about allowing WireGuard vpn server traffic to other subnets