Unifi Network - Replacing the USG with the UDM Pro
I finally replaced my old Unifi Security Gateway (USG) with a Unifi Dream Machine Pro (UDM-Pro). Now I can use features such as IDS/IPS but also Teleport VPN which uses WireGuard VPN to secure remote access connections. And it is now possible to use Unifi Protect. Very nice!
I have chosen a UDM Pro, and for example not a UDM SE because I connect the UDM Pro to a switch that does have LAN ports with PoE output. The switch and UDM Pro are connected via a 10G SFP+ cable, the first 10G connection in my house! It is a pity, however, that the firmware of the UDM Pro is somewhat behind the UDM SE.
Furthermore, I decided not to migrate the network but to rebuild it from scratch. So that I can revise all the settings I made in the (distant) past again, with that I also switched from the Unifi Network Application 6.x to 7.x.
I have also expanded the number of VLANs and WiFi networks, which I have described here. There I also describe my new and compact firewall setup.
Below I briefly describe the process I went through.
- I reviewed my device authentication credentials (SSH) which can be used to recover adopted device(s) if the migration is unsuccessful.
- I downloaded a backup of the network application (*.unf file).
- I made screenshots of the most important settings like the firewall and WiFi settings.
Turning on the UDM Pro
- Before turning on the UDM Pro I connected the UDM Pro to the internet by connecting a lan port to a switch (like any other device). I also connected my laptop to another LAN port to be able to approach UniFi OS on the UDM Pro.
- I turned on the UDM Pro and found out UniFi OS was running at
https://192.168.0.1. I created a new ui.com account (yes I did not use an ui.com account before) and ensured that the UniFi OS applications and UDM Pro firmware were up-to-date.
- Then I disconnected the UDM Pro from the switch so I could change the gateway IP address (Default network) to the IP address of the USG.
- The UDM Pro was now running on the USG’s IP address. In the old Unifi Network Application I made sure that all Unifi devices such as the AP and switches were ‘forgotten’ which would reset the devices to factory settings so I could reconfigure the network.
- Then I unplugged the USG and reestablished the connection between the UDM Pro and the switch.
- I restored internet by setting up a new WAN connection (optical fiber PPPoE in my case) on the UDM Pro.
- Within the new Unifi Network Application I could see the ‘forgotten’ Unifi devices and I adopted the devices.
Before I started configuring the networks/VLANs and more, I first added the client devices with MAC addresses and static IP addresses.
Fortunately, what I described above went without a hitch. I hope this is of some use to someone.
Forgetting and adopting could go wrong. In that case I would have done a
set-inform 'http://ip-of-controller:8080/inform' with SSH. But that was not necessary.
Read other notes
No comments found for this note.
Join the discussion for this note on this ticket. Comments appear on this page instantly.
Notes mentioning this note
- Unifi Network - Block Internet Access for Specific Devices
I have a number of devices that I no longer want to give access to the internet.
- Unifi Network - Setup Chromecast between VLANs
Fortunately, it is nowadays very easy to use the Chromecast within different networks/vlans. All you have to do is make...
- Unifi Network - Setup VLANs including IoT and access to Pi-hole
Here I describe which networks/VLANs and WiFi networks I have created. And how I configured the firewall and added a...