DNS DOH is a great addition. It's the one killer feature that pihole doesn't have. Might give DNS shield a try when the new firmware releases & compare it to my pi4 pihole, see if I notice a difference. Great summary as always!
Pihole with cloudflared...it's in their official docs and works great for DoH with many different providers (not just cloudflare). I run two piholes for redundancy on two physically different devices for now with NextDNS DoH (using cloudflared). It would also be nice if the UDM-SE had the ability much like pihole to be a local dns server for my custom domains for ssl certs (for internal services). My wishlist for the UDM-SE is long if you can't tell. haha As it stands you can't put custom URLs in the UDM-SE atleast for DNS Shield, so it's pretty useless for my case.
I can't say I'm a big fan of the way Ubiquiti implemented shadow mode. I think the implementation should've been similar to VRRP so a user doesn't have to physically disconnect any consoles.
“Currently, Shadow Mode operates as a “Warm Spare,” meaning some manual intervention is required, however this will become fully automated in an upcoming release”.
The unifi has its quirks and issues but I think you can argue that from a value for dollar/ease of use perspective, Ubiquiti really is miles above anything else.
With your intense "Insider" contacts with these guys, could you please tell them that "Design Center" needs to do "Multi-Level" layouts. Not all of us are doing single level installs. I can even map out my own house . . . Your efforts will be greatly appreciated!
@@MactelecomNetworksthey do but they also do not. I think what bob means is that Wifi signals only show horizontal coverage but not vertical, which sucks to be honest
I may different VLANs to different NextDNS profiles. As such I'll keep using the CLI agent, but for those with a single profile it would be ideal to do it in the UI.
@@Nuuki9 well I’m on Reddit and someone has said there is no option to add individual profile details. Therefore it just goes directly to NextDNS. The options are: • Nextans • Nextdns-ipv6 • Nextdns-ultralow UI should really allow us to assign profile ID.
Has Anyone Else Experienced Security Issues with VLAN Configuration on UniFi Switches since this release ? When we assign a native VLAN to a port and set the "Tagged VLAN Management" to block ALL, the 'Block all' setting seems to be ignored. In our tests, we connected multiple endpoints, each set manually with a VLAN ID that should have been blocked. Surprisingly, these devices were still able to connect. We also tried the "custom" setting, but encountered the same issue where devices could connect to VLANs not specified in the list. We're wondering if this could be related to the "network override" feature. We're planning to test this on a previous firmware version for confirmation. Has anyone in the community experienced anything similar or have any insights on this issue? Any advice or suggestions would be greatly appreciated. Looking forward to your feedback. Best regards,
So with the app for users to access the doors, does that only allow them to open the doors when they are close to the reader, or can they unlock the door anytime from any location? Thanks for the content!
How does DNS Shield compare to Unbound on a Pi-hole? Am currently running 2 Pi-hole devices that sync for HA. Wound be great to be able to eliminate them and simplify my network.
DNS DoH support is awesome, but I can't add any manual entries? It only lets me choose from their list :( I use NextDNS, which is supported, but I have no way of directing it to use my profile :(
Hello! I have a big problem with IPSEC routing and VPN. When I close the VPN to the SAP environment on AWS, only the Firewall (Ubiquiti UXG Pro) pings the remote gateway. No host below UXG can ping the other side. Can anyone help me ?
Hi there, thanks for the excellent and timely vid! I haven’t been able to find any information about VLAN Magic yet. Do you know how the feature works for WiFi devices? Does it allow you to have multiple VLANs on the same SSID and password, without having to use Private Pre-Shared Keys (PPSK)? Have you happened to had a chance to test it?
Does the new local Unifi Identity work with the Windows Unifi Identity App? I would like to use the app to connect to the UDM Pro WireGuard VPN server instead of using the native WireGuard GUI.
I am a little hesitant to enable DNS Shield as it disables the WAN DNS which could be problematic if the DNS servers on the Shield fail due to an outage and while the DNS from your local ISP (Bell or Rogers) continue to work with not much interruption.
The likes of google & Cloudflare both having outages for their DNS is very unlikely. You can set it to manual and have more resiliency than just 2 DoH providers. Plus ISP DNS is just horrible and usually slow.
I‘m researching if it is finally possible to use the native NFC function of my iPhone for UniFi Access, as this is the most convenient way. Stating in this 3 year ongoing thread it should be possible but I can’t get it to work. Now with it to be free it should work or?
