Hi all, I have some Unifi gear from my previous setup I want to use with my Swisscom IB connection: a Security Gateway (USG) and an access point (UAP). The UAP works straight away when plugged directly to the IB, no issues there. The problem arises when I try to connect the USG in between. I am aware the IB does not support bridge mode, so I guess something is conflicting with the default USG settings. The IB is at the default setting of 192.168.1.1, nothing changed from defaults. I reset the USG to factory settings. I connect it to the ethernet port of the router, and can’t get internet connection. I tried SSHing into the USG and changed its default LAN IP to 192.168.1.2 to make sure it doesn’t conflict with the IB, but it didn’t help. I assume this is the problem, as I’ve found lots of posts in German about this topic, but they are proposing conflicting solutions (“change the IP of the IB!!”, “no, change the IP of the USG!”, “no, the USG won’t work with an IP different to 192.168.1.1!!”) and I can’t speak German and google translate is not giving very useful translations. Can someone advise what is the easiest way to accomplish this simple scenario? [ IB ] ——> [ USG ] ——–> [ UAP ] Thanks in advance Axel

@axel_k If you cant manage to change the network settings on the USG, leave it as it is. Change the IB network to 192.168.2.1 or whatever you like and connect the USG gear to a LAN port on the IB. Use the DMZ feature on the IB (enable expert mode on and look at the network tab => DMZ). Choose the USG in the pull down list and all should work fine. Now you have on the USG side a double NAT setup. if you want to run SWTV on the USG side, you need to setup igmp and make some firewall rules afaik. @Tux0ne and @BurningRoli are the experts regarding USG and TV. edit: SWTV can be connected directly to the IB and it will still work.

Hi @mabu1 , thanks for the reply. Will try that tonight. Just to clarify: I should attach the USG to the IB from the USG’s WAN port right? So, USG WAN port => IB LAN port (2.5gb/s red one, for example).

@axel_k Yes exactly, IB LAN to USG WAN. But I would recommend to use a 1 GBit link. Heard about some issues with the 2,5 GBit link here in the german part of the community.

@mabu1 Happy to report I got it working following your advice. For future reference, this is what I did: 1. Put IB on 192.168.0.1, network mask 255.255.0.0. Set DHCP range in IB to 192.168.0.101-192.168.0.254 2. Add static DHCP route for USG in IB configuration, give it 192.168.1.1 3. Factory reset USG, connect to IB 1 gbps LAN port 4. Put USG in DMZ in IB config 5. Restart AP, adopt USG. Now the Unifi wifi is working fine and giving devices IPs in the 192.168.1.x range, whereas the IB wifi is also operational and giving devices IP in 192.168.0.x range. Once I can confirm everything is 100% OK with the unifi wifi I will turn that one off. Thanks for the help!!

@axel_k Sorry, I didn’t mentioned to have static dhcp on the IB port for the USG. But you figured it out.

Dear @axel_k , Dear @mabu1 , The description on how to solve the connection of an USG to an IB seems very promissing. I will try it in the coming days. I tried it already once and I gave up. can you confirm that this should work with both USG models: Ubiquiti USG: UniFi Security Gateway Pro 4 Ubiquiti USG: UniFi Security Gateway Thank you for your great help!

@SumSum I don’t see any problem why it should’t work with a USG-PRO-4, hence it is working with a USG. Please keep in mind ipv6 could be a bit of a hurdle with the combination IBx and USG.

Hello @SumSum with the USG-Pro-4 you can use it to replace the internet-box.

Hello @Biorn1950 , When you say replace the internet box, you mean replace the functions of the internet box? I have a 10Gb fibre to the home (FTTH) were would I connect it if not on the Internet Box?

@SumSum with 1Gbs FTTH you can connect the usg4pro directly to the fiber OTO while the sfp receiver.

IB with USG (Unifi Security Gateway)?

Biorn1950

@mabu1 With swisscom 1Gbs FTTH is P2P over fiber and 10Gbs FTTH is P2MP over fiber

« Vorherige Seite