With T56 series here the 48s dropped down to $170 range, everything else has gotten even cheaper.

The t56a is the cost that Yealink 48s was a month ago, and it is android. About $199.

I got Ubiquiti phones in to test and have updated them a couple times. At last pass they still couldn't park or use BLF reliably.

I can't imagine leaving Yealink.

@stacksofplates said in Ubiquiti vulnerability:

@JaredBusch said in Ubiquiti vulnerability:

@stacksofplates said in Ubiquiti vulnerability:

@JaredBusch said in Ubiquiti vulnerability:

None of that is the EdgeMax series.

That is all the original wireless stuff before even the Unifi line.

Yes it is all still currently available, but not nearly as horrible as that article is trying to insinuate.

All that gear should be behind a router normally.

Ya I was looking through it and noticed that. The tough switch was in there, but that's the only non bridge type device I saw.

The tough switch has been a dead product for years.

Ah didn't realize that. I've seen it for sale a few places, but never noticed they weren't produced any more.

It might still be produced, but it has not been developed against at all.

@Dashrender said in Considering a New VPN:

@JaredBusch said in Considering a New VPN:

@scottalanmiller said in Considering a New VPN:

@JaredBusch said in Considering a New VPN:

@scottalanmiller said in Considering a New VPN:

@JaredBusch said in Considering a New VPN:

@scottalanmiller said in Considering a New VPN:

@Carnival-Boy said in Considering a New VPN:

Yeah, I need hub and spoke really. But that's not too difficult to setup on ZeroTier is it?

ZeroTier doesn't offer hub and spoke at all. It's pure SDN / mesh.

This is not true, ZeroTier has gateway functionality.
https://www.zerotier.com/community/topic/5/bridging-ethernet-to-zerotier-virtual-networks-on-linux

I was leaving that out for simplicity as he's not going to build custom Linux systems for this.

Why? Because a single VM setup as a gateway means that ZT now meets all needs also.

No different than replacing a router, etc.

I've not used it, does it require you to change your IP range or can you keep what you have?

The biggest recommendation is to make it inclusive of your LAN subnet so make life easier. I've not had the time to set it up on my lab yet.

I use ZT in a number of places, but not using the gateway anywhere yet.

Right, so being inclusive means that you did follow Scott's recommendation, only that you bent ZT to the current setup, instead of making a whole new IP setup with this in mind.

Did that solve all of the Windows DNS issues?

I have no idea WTF you are talking about. You are implying and inferring things that are not being discussed here.

@scottalanmiller for the sake of this thread, the link shows both ERL and ERPro

@JaredBusch said in Unifi switch - tagged traffic issues:

@Dashrender said in Unifi switch - tagged traffic issues:

Found the problem - the uplink from my Unifi to my core switch, VLAN 2 wasn't allowed on the connection.

Enabled VLAN2, problem solved.

Aww the little things.

on which switch.

Also, reinforcing the issue with VLAN complicating things.

The core switch, in my case an HP 2824.

I don't disagree that VLANs can/do add complication. But in this case it was pre-existing complication that I had to work through, not remove at this point.

@JaredBusch said in Ubiquiti switches: UniFi vs EdgeMax:

@coliver said in Ubiquiti switches: UniFi vs EdgeMax:

@thwr said in Ubiquiti switches: UniFi vs EdgeMax:

Mh, is the EdgeSwitch able to run a VPN tunnel on its own? I need to connect a "remote" office to my server room. The office is in the 3rd floor, my server room in the basement and I need to run through a "public" patch room (primary cabling junction for the building).

Like:
3rd floor "remote" office -> fiber -> public patch room -> fiber -> my Serverroom (basement) -> Office

I doubt it has the ability to configure a VPN that seems like an edge device is needed for that.

It does not. That would be the router's job.

Yeah, could have been. Probably the same software behind the scenes etc.

@Breffni-Potter exactly. There is a clear market for this, why is there any question why they provide a product where there is demand?

I found these guys on Amazon a few months ago looking for something else. I have not used or tried the products but looks like what you need.
https://www.gl-inet.com/

Seems pretty clear that UBNT has gone public with this at this point.

I have 26 devices and no problems... I know JB has had some issue with updates but he can update it manually.

Yup, and cheap enough to swap while someone else is trying to fix something is huge. I'll take two devices that I can swap when one dies for a total price of $600 long before I'll take one of $3,000 that fails "a little less often" but can take a day for someone to repair!

@Kelly said in Ubiquiti now available retail:

Just so we're clear on terms, firewall vs UTM, the difference you all are noting is access rules vs packet inspection?

All firewalls do access rules and FAIAP packet inspection. Anything less and it is just a router.

@Dashrender I saw it before... I was prepared.

@JaredBusch said in Unifi AP refusing to upgrade:

@Dashrender said in Unifi AP refusing to upgrade:

@brianlittlejohn said in Unifi AP refusing to upgrade:

Did yall notice that the new update has the ability to export and import individual sites instead of the entire config?

didn't JB post about that a week or so ago?

Nope.

I must have just read it in a released then.

@art_of_shred said in Thoughts on a Ubiquiti/Cisco comparo?:

This is just a project. What's the line? "Not my circus, not my monkeys"?

I think it goes "not my circus, not my Sonicwall".

Yeah, WTF?

Are you connecting a permanent IPSEC tunnel with some other network you do not control?

@JaredBusch said in Ubiquiti on the Evolution of Home Wifi Part 1:

@coliver said in Ubiquiti on the Evolution of Home Wifi Part 1:

@Dashrender said in Ubiquiti on the Evolution of Home Wifi Part 1:

lol

Can't wait for the smart contact lens.... or a brain to machine interface.

large_vTXgUgB4KyntDSUezLljcm1Ol6Ns.jpg

Yep pretty much...

@bransona said in MS-CHAP on Ubiquiti EdgeRouter:

@scottalanmiller is correct. I have Edgerouter 2.0.9 and it STILL requires PAP in the Windows policy. Under Config Tree, there is no way to make the router use MSCHAP or MSCHAPv2 instead of PAP (cleartext). I went to notify Ubiquiti hoping they can potentially have this included in another firmware release soon, but Ubiquiti Support was apprised of this 5 years ago! https://community.ui.com/questions/Encrypted-Radius-Supported/7857b119-91d8-4365-8c2a-8c21de0937a4

Yup it has been a big issue for a while now on the EdgeSwitches too.