Ubiquiti Dream Machine direct to 10gb s fiber

  • I have a Unify Dream Machine and would like to connect it directly to the fiber network without using Interbox 4, thus avoiding double NAT.

    I read that this is only possible with approved modems from Swisscom, but I have great doubts about which approved modems are also suitable for the Unify Dream Machine.

    Is there anyone here who has experience with this and can help me with the process?

    Thank you in advance

    Show original language (German)
      • Solutionselected by Tajdk

      On the subject of Unifi and double nat, you can now switch this off with the current firmware even with an upstream router

      https://youtu.be/hSmrcHbl03U?si=3r4w1tNhKgX16eJm

      And because it fits the topic, a second one that questions the whole thing 😉

      https://youtu.be/5X3h_MjW7EY?si=QIUHpbjJ4OJZyQga

      But I didn’t turn it off on my IB3-UDMpro combination because, as @Werner already pointed out, I haven’t noticed any deterioration in the ping values, I have a blue TV and the analog landline telephony is still fixed is part of our household.

      And DDNS and VPN also work so easily, both externally and internally.

    @Tajdk

    You can do it if you really want to, but objectively speaking it has more disadvantages than advantages.

    What exactly bothers you about a double or multiple NAT, as is always used in a professional environment anyway?

    If you actually have something that wouldn’t work with a double NAT, we could certainly help here.

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche AbhÀngigkeiten zur Swisscom

    Hello, and thank you for your answer.

    I don’t have any problems with double NAT. However, I would rather avoid having so many devices.

    I already have a 10GB RJ45 SFP+ for my Unify and it works fine.

    If, as you write, there are major problems if you go straight, then I would like to stick with the current solution.

    The problem is that at 10 gbs my router can’t do bridge mode, only dmz.

    Best regards

    Thomas

    Show original language (German)

    @Tajdk

    Read through the thread here, it fits your question well 😉

    [https://community.swisscom.ch/t5/Router-Hardware/UDM-Pro-als-Router-ohne-Bridge-Modem-erneuter-Aufruf/m-p/848891#M49921] (https://community.swisscom.ch/t5/Router-Hardware/UDM-Pro-als-Router-ohne-Bridge-Modem-erneuter-Aufruf/m-p/848891#M49921)

    Ok, I just saw that you’re writing about the Dream Machine, without pro.

    Show original language (German)

    @Tajdk

    The only real difference between a router cascade with double NAT and a single router connected directly to the ISP’s backbone is approximately 0.3 to 0.6 milliseconds higher latency, which is still within the measurement uncertainty and can be completely ignored.

    But what is lost if you do without a provider CPE is the clear separation of responsibilities between pure Internet access and operation of the internal network, which then brings clear disadvantages in any troubleshooting and also in possible support issues, because in the specific example you are now completely You’ll never be able to tell the difference without an Internet box, it’s Swisscom’s fault or it’s your own fault.

    In a cascade it is always clear, because either the upstream Internet box is running correctly or it is not.

    Another special topic in the UniFi environment is blue TV, which can always be operated directly on an Internet box, or “tagged” through a downstream network via VLAN, but then forces you to do the problems that occur very frequently in the UniFi environment without an Internet box Actually solving multicast problems directly within the UniFi network.

    Conclusion: If at all I would only consider connecting directly to an FTTH provider with my own router if there were no additional provider services, such as: B. Landline or blue TV should be operated, so really only for naked Internet.

    This is probably not the case for you, otherwise you probably wouldn’t have subscribed to blue Internet at all 🙂

    Show original language (German)

    Hobby-Nerd ohne wirtschaftliche AbhÀngigkeiten zur Swisscom

    On the subject of Unifi and double nat, you can now switch this off with the current firmware even with an upstream router

    https://youtu.be/hSmrcHbl03U?si=3r4w1tNhKgX16eJm

    And because it fits the topic, a second one that questions the whole thing 😉

    https://youtu.be/5X3h_MjW7EY?si=QIUHpbjJ4OJZyQga

    But I didn’t turn it off on my IB3-UDMpro combination because, as @Werner already pointed out, I haven’t noticed any deterioration in the ping values, I have a blue TV and the analog landline telephony is still fixed is part of our household.

    And DDNS and VPN also work so easily, both externally and internally.

    Show original language (German)
    12 days later

    or multiple NAT, as is always used in a professional environment anyway?

    Wha
.Huh? What professional environment are you talking about here, professional curling?

    NAT is a crutch for a very specific problem and always only brings disadvantages. NAT should be avoided whenever possible.

    Show original language (German)