Unifi Network Update 7.5.187 : One WIFI SSID To Rule Them All

In this video I take a look at the new Unifi Network Application update 7.5.187 ( Currently release Candidate use with caution) This update brings a really cool feature PPSK or Private Pre-shared keys
One note you cannot use PPSK with WPA3
UniFi Network Application 7.5.187 release notes:
community.ui.com/releases/Uni...
▶Ubiquiti USA Affiliate Link:
store.ui.com?a_aid=MacTelecom
▶Ubiquiti EU Affiliate Link:
eu.store.ui.com/?a_aid=MacTel...
▶ Hire us on our website
mactelecomnetworks.com/
▶ Watch my VLOG channel:
/ @mactelecomvlogs
▶ Join our Discord Channel:
/ discord
------------------------------------------------------------------------------------
Affiliates I use:
▶ VOIP.MS
www.voip.ms/en/code/Mactelecom
▶Canadian Amazon Store front:
www.amazon.ca/shop/mactelecom...
▶USA Amazon store front:
www.amazon.com/shop/macteleco...
▶NordVPN:
go.nordvpn.net/aff_c?offer_id...
------------------------------------------------------------------------------------
▶ Find us on social media:
▶ Instagram:
/ mactelecomnetworks
▶ Facebook:
/ mactelecomnetworks
▶ Twitter:
/ mactelecomn
▶ TikTok:
/ mactelecomnetworks
▶ Linkedin:
/ cody-maccallum-29311b6b
▶ Twitch:
/ frozil3
0:00 Intro
1:07 how to get the new update
1:26 adding PPSK to a WIFI network
3:04 Testing PPSK networks
4:25 Other new updates
5:44 Final thoughts

[@MactelecomNetworks]

If you're planning on buying any Ubiquiti gear and want to support me use the affiliate links below :) ▶Ubiquiti USA Affiliate Link: store.ui.com?a_aid=MacTelecom ▶Ubiquiti EU Affiliate Link: eu.store.ui.com/?a_aid=MacTelecom

[@joshs5435]

Thanks Cody!! This is such a cool new feature!! This can help with the ssid limit on the APs!!! Thanks again!!

[@johnheller2311]

Hey Cody. Thanks for posting the PPSK information. I've been playing with it this week and it has a heck of a lot of possibilities, both for home use and commercial networking

[@RandonBrown]

Awesome. Thanks for demonstrating PPSK. Good stuff.

[@DIYglenn]

Heeeeell yeah!! I've been waiting for this. Did a reinstall on my Unifi setup yesterday and got this update - but didn't notice that!!

[@hamadico]

Thank you Alta Labs for forcing ubiquiti to push this feature out quickly.

[@rhb.digital]

haha I thought the same :D

[@0bsmith0]

Maybe one day Alta Labs will be a consideration, but lots of things to work on including locally hosted controller.

[@JasonsLabVideos]

YES !! NICE! Finally !! Thanks for doing a video on this Cody !

[@briccimn]

Thanks Cody for the review!

[@strauss-2478]

Love it! Thank u very much!😊

[@LAWRENCESYSTEMS]

Great video and those are some welcome features!

[@MactelecomNetworks]

Thanks! Ya I’m really glad they brought them. Next up HA

[@Timi7007]

Finally! This is awesome 👍🏻

[@GunMD]

PPSK looks cool. Thanks for the video.

[@CRK1918]

This is very good, especially for apartments. My apartment has used this technology, but it's from different manufacturers.

[@BenGillam]

Nice to see new dashboards. Used enough of their router/firewalls previously to put me off them for life.

[@johntankard]

I have used this recently in early access. I noticed that my u6 pro access points could not get above 300mbps when enabled. When I joined a standard wifi network my speeds were back to 600/680mbps.. I wonder if speed issues have been solved in RC?

[@dyshuk]

This is pretty awesome but for those who have I guess you'd still need a separate SSID for IoT devices that only support 2.4 Ghz (and turning off 5 radio)

[@michaels8336]

Was thinking this, initially had issues with iot devices and made an iot network which was 2.4 only and never in the past 3 years had any issues with iot since

[@aurulz2779]

@dyshuk, I had the same thing. My main wireless network was set to only 5GHz. With this update, I turned on the 2.4GHz and migrated IoT PPSK to the wireless network. It's been perfect for these few days. Great feature!

[@Crombam]

Hey Cody, there is a similar feature under Radius which I use. I will create various users and appoint them to a specific VLAN. This works with one single SSID as well and based on your user credentials you are set for the network indicated. Only one SSID broadcasted.

[@farmeunit]

Not really the same thing since you need an account or certificate.

[@twin0137]

@@farmeunit Not correct. You only need an account for WPA-Enterprise, with Radius you only need to create a user/pw based on the devices MAC-adress.

[@farmeunit]

@@twin0137 Which isn't the same thing. This is simply a password with no user authentication or machine authentication. You wouldn't have the machine or the user because they aren't part of the organization.

[@El3andro]

Interesting! There is this new vendor which tries to compete with Unifi. They released their new APs with this PPSK feature a few months ago and people started to get interesting. Unifi now hits back and offers the same feature. Software upgrades are easy to do, no more reason to leave Unifi.

[@JoeBlac]

I've been running PPSK on my near-peer ecosystem for a couple of months, been great. Decluttered the SSIDs from seven to one.

[@SpiderSato]

do you know if I can delete the others SSID`s after put then in the main SSID ?@@JoeBlac

[@El3andro]

@@JoeBlac I'm running 7 Wifis in parallel and 2 of them have MAC Address validation activated. Since this can't be changed with PPSK for single Wifi networks, I'll keep all of them. I also think it's easier for users to use separate Wifis because one Wifi for all could confuse them

[@JoeBlac]

@@SpiderSato Yes, delete the other SSIDs after making sure any important wireless clients successfully connect to the 'master' SSID with their PPSK first.

[@JoeBlac]

@@El3andro Yeah, the UniFi implementation is pretty basic at this stage. With Omada, you optionally assign a VLAN and/or MAC to each key so you can issue network, group, and unique keys. Eg, guest network can have a single key (perhaps changed daily or weekly); wireless printers can share a key on a 'peripherals' network while handheld label printers use a unique key; IoT devices can be grouped by a per-vendor key; and laptops and phones have unique keys. Keys are pushed out to APs, so access is still available if the controller goes down. The latest Omada update added an inbuilt RADIUS server, though I haven't look at that yet.

[@Agamerfr0zed]

Looking forward to the general release.

[@tgreen420]

Finally! I've been waiting on either Unifi or Omada to do something like this

[@JoeBlac]

Omada has had PPSK for a while now and it's a bit more granular than the per-network keys shown here. The latest Omada update added an inbuilt RADIUS server, giving yet another access option.

[@MCC0NN377]

Pretty cool, sucks you cant use this with WPA3 though. So basically have to sacrifice security for convenience

[@seidmadur]

I gave it a try and installed it Today with 3 network on the same SSID. I have an U6-Enterprise that mesh to an U6-Pro. The U6-Enterprise seems to be resetting/rebooting multiple times per hour since. I unplugged the U6-Pro to see it might be related to the meshing.

[@---GOD---]

Very cool

[@Akshun82]

Yesss, finally!

[@ronm6585]

Thanks.

[@kevinsanderskk]

Hey, quick questions. Was recently watching your 2023 setup guide. The PPSK seems like a cool feature update, however, when configuring the Guest Wifi, that is the location where speed limit profiles are being applied. When using PPSK, I don't see a way to setup that speed limit on the guest network VLAN. Am I missing something and there is a way to do that?

[@xVertigo101]

Awesome! Does this allow me to still use guest Hotspot without a password?

[@jensjensen1182]

PPSK is a step in the right direction. Now, if they would only add the posibility to assign VLAN based on MAC adress - like Meraki does. The downside to PPSK is the iOS feature to "share passwords". So if I have a private VLAN and a guest VLAN, and a guest connects to the SSID, then your iOS device would share the private VLAN password and not the guest.

[@JacksonCampbell]

Password share is not confined to iOS.

[@jensjensen1182]

@@JacksonCampbell So e.g. Android has the same feature as iOS? - when a guest here at my place connects to my wireless, a message pops up on my iPhone asking, if I wan't to share my password (for the SSID) with the - and then the name of the device, that is trying to access the network..

[@jakobknudsen1009]

Now we only need shared settings across multiple sites. 👍

[@tcass]

So this is (sort of) similar to what UID offers. If you had to choose between PPSK and UID, which route would you go?

[@jeffm2787]

So they are playing catch-up with the competition.

[@RobinMoran]

Awesome addition. If there is only 1 SSID, is it possible to control the bandwidth of the individual VLANS? also, does having 1 SSID improve WiFi throughput to a device or is it the same or worse?

[@farmeunit]

Fewer SSIDs is better. 3 or less is recommended.

[@OPiaDasCriptos]

I have a question: If I have a UDM-SE at the headquarters with several Wifi networks configured with PPSK, VLAN, etc. And then just buy a Unifi 6 and install it at the branch directly on the operator's modem, making the adoption via L3 with the set-informxxxx command, will this adopted Unifi be able to transmit the wifi networks as it happens at the head office? with VLAN's, PPSK, etc? I'm asking because I've been stuck with this for weeks and I can't get the VLANs to work on a Unifi adopted via L3, the device doesn't even receive DHCP, but if I create a simple network on the UDM-SE, with "Default", the branch's Unifi broadcasts this network running smoothly and broadcasting the local DHCP IP

[@sygad1]

What is the advantage over multiple SSIDs, it just appears to be an alternative method

[@domadox]

Yeahhhhh!!!!

[@davidwright6105]

I am trying to digest this. So you make your networks using vlans but when you make wifi networks, you only make one and input the password for whichever vlan network you want to join. Is this correct.? What are the benefits to this setup?

[@glanoe]

the biggest problem with trying to do one SSID for LAN and Guest networks is the Advanced Features are done at the SSID level and not the PPSK level so you cant have Client Isolation enabled for the Guest PPSK and not for the LAN. This makes it a dealbreaker for me as I want my Guest and IoT networks to have client isolation enabled.

[@daillengineer]

your firewall rules still apply

[@glanoe]

between networks and to/from the internet yes but client isolation stops wireless devices from knowing eachother exist. I have a ton of IoT devices so dont want one being able to be an attack platform to hit another device.

[@daillengineer]

@@glanoe you don’t know you can have firewall rules to have client isolation?

[@glanoe]

nope, i've not found that one yet. I cant see how the firewall would do that though since the devices are on the same subnet and thr traffic may not even go near the gateway to apply the rules if the clients are connected to the same AP or even an AP on a downstream switch.

[@jtodd76]

I saw in your video you said you had Wi-Fi phones? I have a client that would like to have cordless phones on their UniFi system but not sure of the best option since unifi currently doesn't have cordless phones. Any suggestions? Currently I have them set up using a grandstream Wi-Fi phone system (not DECT) but one of the updates caused issues with transferring calls and I had to revert back to the previous version of the app and haven't been able to update since

[@zzbloop]

PPSK looks like a great idea and I'd love to use it BUT since WPA3 and 6Ghz is not supported it's like a dead end technology.

[@firemedic3087]

I'm not able to see my splash screen on the guest network when using PPSK. How did yours come up?

[@islandsnow]

Can you explain why your camera wifi didn’t work after you created the ppsk SSID? And why would this be advantageous over the old way. If you only have 1 SSID you cannot selectively hide SSID’s so I want to know why you’d use ppsk

[@RuivoM]

Problem is that it works for wpa2 only which makes it a no-go for wpa3 wlans.

[@klankowski]

how does this affect the AP limits to 4 or 8 SSID?

[@DIYglenn]

It's in Official now, and I did test it a bit. Seems to work fine, but for a lot of my IoT devices (2/3 of all devices) they didn't reconnect the network before I disabled PPSK again... Does PPSK require support in the clients?

[@dennisvanmierlo]

There is one important thing missing with PPSK; MAC filtering per PPSK. For example: when an new iPhone user - one that has never been connected to the SSID before - is close by a connected iPhone to the same SSID, iOS wants to share that password to the other iPhone, because of the same SSID. Another example is when users know the password and share it. That bypasses the assigned network for which I provided the password, one that is different than the other user has shared without me knowing.

[@lanealucy]

What's the minimal hardware needed for this setup?

Hey Cody, when you do PpSK for Guest network, is there still a possibility to limit the bandwidth?

[@bigbigzac4598]

This is awesome, but still no Wireguard client, I wonder if/when they will finally turn it on. It's already baked into the kernel. There's no reason not to enable it as a feature.

[@petepan69]

As soon as I activate PPSK my U6 Pro keeps restarting every few minutes while U6 Lite and U6+ devices seem to be working. Seems like I have to wait for some bugs to be ironed out.

[@AinzOoalG0wn]

do i understand this correctly, that because of the single SSID, whenever u want to change between networks, you must MANUALLY insert the different corresponding password to login, compared to the old method which is click on the other ssid with a saved password to login. so seems to me this new feature downside is u have to RETYPE manually the password, when switching between networks ya? Or is there a solution to this? 🤔

[@bluearcherx]

does this reduce interference from having multiple SSIDs or does that matter?

[@adrianfalk_]

Is there anyway to use this with the UID One click wifi? Instead of having a seperate network for the uid, if you understand me

[@SnowBob302]

Had anyone had any experience with the iPhone 15 and WiFi 6E? I have the In-Wall enterprise and am getting constant dropouts on the new phone. I’m wondering where the issue may be. I’ve tried to turn off band steering to let the iPhone decide but it didn’t help.

[@andrewhaynes5537]

The industry needs to find a way to use this feature on WPA3, otherwise this is a dead end and we will have to go back to lots of SSIDs.

[@MuhammadRehanSaeed]

What is the advantage of this versus offering an additional Wifi SSID in Guest mode?

[@marc3793]

Standard APs are limited to 4 SSIDs and Enterprise 8. So this would allow you to access more networks without hitting the limit. It will also mean less airtime usage for beacons if you reduce the number of SSIDs you use, which is cool.

[@DethpickleDave]

This is interesting. So PPSK can get you to multiple networks on one SSID just based off the password used. But, I'd still need to keep a separate SSID for one that is 2.4GHz only versus my main SSID? I'm thinking about all the problems I've had with IoT devices that require 2.4 only. I've had issues whenever I managed to connect them to a mixed network - they'd randomly disconnect.

[@SpiderSato]

some devices only connects on 2.4GHz. we still have to use a dedicated SSID 2.4GHz for IOT. could be better

[@DethpickleDave]

@@SpiderSatoBummer. Kinda figured though. Thanks.

[@JelleRevyn]

Didn't even know PPSK existed, looks very cool. Just wondering, when the netwerk application is offline (for whatever reason). Are you still able to connect to the netwerk. In other words, is the configuration (password a,bc, goes to network a,b,c) saved on the AP or does it need the controller?

[@xph4ntomx]

On the AP

[@ronaldvargo4113]

Hi Cody, did you retry mix ppsk and wide open SSID's? I would really like to keep my guest wide open and leverage the login portal for access while my other 3 networks would have the PPSK vlan assignment. I am only using cloudkeys / counsels, and this would be great for some of my clients.

[@Sean_Cockrell]

You can't have an open network that uses PPSK, PPSK needs to use a key to determine the vlan your device joins. You would need 2 networks, one open for your guests and one using PPSK. Or if you using Radius (WPA2 enterprise) and NPS you can achieve this with 1 SSID.

[@DanielLorey]

It would be great if the pre shared key could somehow specify the security protocol too. Having 1 SSID falls down if you use WPA3…. It’d be cool to have an IoT password that also allows clients to connect via WPA2 etc. Probably not technically possible so don’t mind me 😅

[@HansMatthe]

PPSK does not work in WPA3

[@ThinMethod2758]

Can you do an updated video on the UID one click VPN? There has been an update on UID and your old tutorial doesn't seem to work anymore. The setup process also looked different. With Teleport VPN it works flawlessly but UID VPN on Windows results in no internet connection (in global and intranet mode no connection into my local subnet at home) Teleport VPN works fine, so it must be a config problem of some sort. Thanks in advance

[@uktricky]

Like the new feature of the PPSK and a single SSID but how could I have multiple VLAN's and still use a single PiHole DHCP Server (I really don't like static address assignment in Unifi) - Should add that my PiHole is running in a Docker container on a Raspberry Pi. So ideally I want IOT devices in VLAN10, Guest in VLAN20, Kids in VLAN30, Adults in VLAN40 for example 10.1.10.x, 10.1.20.x etc. Any ideas or am I stuck?

[@haydndup]

Are you to able to assign multiple passwords to the same vlan?

[@Neubs-xv8tw]

Can we for one of the pre-shared keys connected to say an IOT network, use only 2.4 for that specific vlan?

[@nick-dogg]

I was wondering the same thing!

[@sygad1]

+1, this is essential for my smart switches and most of my IoT equipment

[@radiusdesk7173]

For those who have older Unifi hardware that does not support this PPSK feature, all is not lost. We have recently added PPSK support for OpenWrt based hardware in RADIUSdesk (many Unifi hardware can be flashed with OpenWrt). Our PPSK has the options 'with RADIUS' or 'without RADIUS' and is completely open source. kzbin.info/www/bejne/g5nPfImrobOBeac

[@kc0eks]

Tried this out (the different Pam for different vlan) and it killed my bandwidth.

[@francismori7]

Will this fix issues with ethernet profiles disabling passthrough POE on a IW6?!

[@MactelecomNetworks]

Nope don’t think so

[@nick-dogg]

Is there a way to configure a certain PPSK/VLAN to connect to only to 2G and 5G?

[@MactelecomNetworks]

I don’t believe so

[@pbear06]

It does not work with WPA3. I prefer the other solution there was before (and they promised to bring back) where you can set a vlan per wireless devices.

[@andrasvarga-fekete4398]

Hi Cody, thanks for the video. PPSK requires WPA2 to be used, and from what I know it is much easy to attack a WIFI with WPA2. From security standpoint what is your opinion, is it better to have WPA3 Enterprise with radius server? Thanks

[@farmeunit]

WPA3 is better, but not as well supported by clients.

[@andrewenglish3810]

Sorry, your adding the password from your PPSK key or the actual password for the WiFi network that you previously setup?

[@MactelecomNetworks]

Just enter passwords. So I connect to deloris ( wifi network) depending what password I put it will depend on what network it puts me on

[@andrewenglish3810]

@@MactelecomNetworks So does this mean then in short one could disable the SSID's of their other networks and use their main SSID to access anyone of their other networks?

[@johnheller2311]

@@andrewenglish3810 Yes you could have 20 different VLANS each with completely different configurations and rules. Then you tie them all the a single WIFI SSID. The PPSK configuration will match the VLANS via what password you type

[@SpiderSato]

@@johnheller2311thank for the explanation. That means no more a lot of SSID’s and hidden SSID’s through out the air.

[@JRDN97]

My U6 pro access point keeps restarting when using this function, anybody else having these issues?

[@petepan69]

Yes. Same issue here. My U6 Lite and U6+ don’t have this issue.

[@derek400004]

Cisco has been having this feature for YEARS now, and the implementation is a lot more advanced too (like ability to specify channel, wireless security, port security, vlan and other details)

[@BenRabidou]

Cool?

[@slam5]

But this is small biz/soho stuff and it is different price point, that is for sure.

[@ItsManuelAbeledo]

It's also 10x more expensive.

[@barilkobart]

PPSK is useless without bandwidth profiles. Bandwidth profiles are on the SSID NOT on the pre shared key! Think about Camera or Guest VLANs

[@dominickcaruso]

How does PPSK protect against Apple users from sharing password of a wifi SSID they are connected to? ie -- What if an employee accidentally accepts or shares passkey to a user that is a guest?

[@tramcrazy]

Some similar systems have single use PSKs instead or ones that lock to a MAC address on first use. Seems like UniFi is missing this but this update is a good start

[@simonthornroos752]

Has anyone been able to update 7.5.187 on a selfhosted unifi controller? I cannot find the latest update at the website or by apt get.

[@hufartd]

Got it using Glennr script for my pi controller,

[@simonthornroos752]

its available now :)

[@GabrielKozsar]

Unifi Network app needs custom DNS entries asap ,a 10year old Draytek has it.

[@bcm50]

Better question is who is using unifi dns lol, ever heard of your own dns server? Almost every professional environment uses custom dns for AD reasons, etc

[@simdevils]

@@bcm50 LOL its your choice if you want to use your own but there shouldnt be an excuse for Ubiquiti to not include it.

[@johnheller2311]

You can set up custom DNS on each WAN connection, or you can hand out custom DNS on each VLAN DHCP server.

[@GabrielKozsar]

@@johnheller2311 That is not what i meant. Not custom DNS servers but entries.

[@GabrielKozsar]

@@bcm50 What if i use UDM and dont have a server? Not every site uses AD. Sites using L2L VPN tunnels need to reach resources(or IPs) behind the tunnel using DNS instead of IP.

[@user-zr7kz4vs7c]

will this work if i only have unifi ap, with my unifi controller is on my Raspberry Pi?

[@AdamMiarka]

Yes, but your router must still support setting up VLANs. I'm currently using just U6-Pro APs with a Firewalla Purple and it's working well.

[@user-zr7kz4vs7c]

@@AdamMiarka great thanks a lot. can u create two ppsk key for two different device that connects to the same iot vlan

[@aschmid9886]

does this work with unifi UID?

[@MactelecomNetworks]

Probably not as of yet

[@materix251]

Good but not support WPA3

[@patti4832]

Finally I can reduce the amount of channels used

[@myship8477]

You re getting scruffy brother lol

[@MactelecomNetworks]

Hopefully 😂 I have alopecia so it falls out all the time

[@myship8477]

@@MactelecomNetworks explains the ball cap :)

[@MactelecomNetworks]

@@myship8477 it’s mostly all grown back in but now the cap is a signature 😆

[@woswasdenni1914]

this sounds like a very very very very bad idea to be used in the wild in anything larger than a household. and even there its questionable

[@MactelecomNetworks]

What’s so wrong with it?

[@craigcoffman69]

Overpriced JUNK, don't believe the hype. (Verified User)