Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Seamless roaming

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    265 Posts 9 Posters 90.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • QinnQ
      Qinn @johnpoz
      last edited by

      @johnpoz Yep, I didn't know how they work, from what I read now the moment you "adopt" a new one it will grab the settings, as I said I am on a steep learning curve.....😅

      https://community.ui.com/questions/Adding-a-second-AP-to-my-house-do-I-need-to-configure-it-to-make-it-all-one-big-coverage-area/21f75032-b55d-4a1d-b696-c6b8c425f377

      So you recommend setting channels manually, I will, thanks. I must say I am beginning to get the Unifi feeling 😇 and beginning to get used to the look and feel of the controller, hope it stays as rock solid as it is now...

      btw first I used a static IP for the NanaHD and got an alert, then I set it to DHCP with a reserve IP on pfSense and this alert disappeared are you formiliar with this?

      Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
      Firmware: Latest-stable-pfSense CE (amd64)
      Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        Not sure what alert you got, I use static on all 3 of my AP.

        As to static vs auto channels - thats up to you.. I just set them, its pretty much a set it once and forget it thing.. You only have 2 so if you want to run 80 vht you really only have 2 choices ;) 36 and 149..

        For 2.4 you only have 1,6 and 11 to choose from... What is in the area.. Pick 2 that are least use in any neighbors.. Its not like you have 20 AP in a building and your trying to make sure you have least amount of interference between all your APs..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

        QinnQ 1 Reply Last reply Reply Quote 0
        • QinnQ
          Qinn @johnpoz
          last edited by

          @johnpoz

          Where can I set the static ip in this menu I can only see LAN and the ip of my gateway, eg pfSense

          1.png

          The only way it is mentioning is in devices, you'll see the ip and the setting dhcp.

          ip.png

          dhcp.png

          Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
          Firmware: Latest-stable-pfSense CE (amd64)
          Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator
            last edited by

            Yup you set it on the device directly..

            static.jpg

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.7.2, 24.11

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              BTW - your way behind on firmware ;)

              The latest beta is
              5.17.0.11742

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              QinnQ 1 Reply Last reply Reply Quote 0
              • QinnQ
                Qinn @johnpoz
                last edited by Qinn

                @johnpoz You use beta, do you recommend it? and why is there a LAN with dhcp, as there are no ports to connect?

                Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                Firmware: Latest-stable-pfSense CE (amd64)
                Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  Yeah I have always run the beta.. This is my home network.. I have no issues with some of blip or something - but in the years been running unifi.. I don't recall really ever having anything that was of any real issue.. There have been some beta's where the speed wasn't as fast as other firmware releases.. But they normally correct in the next update, etc.

                  I run the beta controller as well.. 5.14.9 currently.

                  The one thing nice about running controller on VM, is just take a snapshot before update.. And if goes south, just restore the snap and back to where you were.

                  why is there a LAN with dhcp, as there are no ports to connect?

                  Yah lost me - not understanding what your asking there? Oh the controller run multiple things, switches and their USG (router) which can provide for dhcp and other networks. Notice the USG required next to that ;)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  QinnQ 1 Reply Last reply Reply Quote 0
                  • QinnQ
                    Qinn @johnpoz
                    last edited by Qinn

                    @johnpoz Oeps missed that, there are some other settings that are for other gear, like DPI (deep packet inspection), it is on by default and as I don't have a unifi security gateway I will turn it of.

                    Strange thing I have ra0 to ra4 and ra4 is ra4 e2:63:da:40:11:6c element-64e46abdc079e335 11 ? So although I have mesh/uplink disabled ?

                    Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                    Firmware: Latest-stable-pfSense CE (amd64)
                    Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      @Qinn said in Seamless roaming:

                      element-

                      You can turn those off - those are for adoption of specific unifi gear, like their new plug and stuff.. If you don't have any of that gear you can turn those off. Just delete them if you have already unchecked the setting.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      QinnQ 1 Reply Last reply Reply Quote 0
                      • QinnQ
                        Qinn @johnpoz
                        last edited by Qinn

                        @johnpoz I can't remove the element wlan, maybe it's gone after a reboot of the device or do you have a ssuggestion?

                        Firefox_Screenshot_2020-06-03T16-08-32.253Z.png

                        Btw tommorow I am busy, friday more time, one question, when I adopt the second nanoHD what will it do with the ip address as I now have set it static?

                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                        Firmware: Latest-stable-pfSense CE (amd64)
                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          Huh? The static IP is per AP, by default the AP will come up with dhcp.. If you want to set it static then you would have to set it per that AP..

                          This should help in removal of the element ssid
                          https://community.ui.com/questions/SSIDs-named-element-xxx/3de45b45-83bc-4480-a066-68f404029ae7

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                          QinnQ 1 Reply Last reply Reply Quote 1
                          • QinnQ
                            Qinn @johnpoz
                            last edited by Qinn

                            @johnpoz Thanks will try it friday, got to move now, "grazie mille" 👍 👍 for all the explaining and your time, super...I am beginning to like unifi

                            Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                            Firmware: Latest-stable-pfSense CE (amd64)
                            Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                            JeGrJ 1 Reply Last reply Reply Quote 0
                            • JeGrJ
                              JeGr LAYER 8 Moderator @Qinn
                              last edited by

                              @Qinn Just to chime in quickly from the left field: I'd also advise to reconsider the need for 4 (or more) SSIDs as every SSID you use slows down the bandwith of your WiFi so the less you use, the more you get on your devices. If you do it "right", all you need are one or two SSIDs anyway. One running Radius based VLANs (perhaps together with freeradius on your pfsense) and one for those old/dumb devices, that don't work with AES-Enterprise WiFi (User/Pass instead of shared key). :)

                              Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                              If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                              QinnQ 1 Reply Last reply Reply Quote 2
                              • QinnQ
                                Qinn @JeGr
                                last edited by

                                @JeGr Thanks for the hint, I will reconsider.

                                Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                Firmware: Latest-stable-pfSense CE (amd64)
                                Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by johnpoz

                                  To chime in on that as well - if you really really want to get fancy.. You might even be able to get by with just 1 ssid.. where you assign vlans based on mac of the devices.

                                  Maybe just 2 if you want a enterprise auth ssid, and for those iot devices and such just use psk, I did a test a while back they first came out with the dynamic vlan support, and I did get it to work based on mac for psk devices..

                                  I was thinking at one time to go down this path.. But haven't gotten back to it ;) Lots of devices - all working, segmented out how I want.. Haven't found the motivation to change it all up just to drop a couple of ssids ;)

                                  While sure the fewer the ssids the better if your looking to max tweak your setup.. A couple of extra ssids not going to be a big difference in overall performance ;)

                                  Here this might help
                                  https://help.ui.com/hc/en-us/articles/360015268353-UniFi-USG-Configuring-RADIUS-Server

                                  You can use freerad on pfsense for this vs using the radius server of usg..

                                  I currently use 4 ssids = 4 different vlans
                                  1 wpa2-enterprise with eap-tls auth, this is for my trusted devices. My phone, Wife's phone, my laptop, my tablet, etc.
                                  2 wpa2-psk for iot devices, thermostat, alexa devices, smart bulbs, the like
                                  3 wpa2-psk for roku/tv stuff. My harmony remote, tv, roku sticks
                                  4 wpa2-psk for guest devices.. Even setup QR code on a business card I can give guest so they can just scan the qr code with their phone and get on.. Zero reason for them to type out the very long and complex psk ;)

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                  QinnQ 1 Reply Last reply Reply Quote 0
                                  • QinnQ
                                    Qinn @johnpoz
                                    last edited by

                                    Thanks guys and thanks john, for now I will stay on 4 ssids = 4 different vlans ;)

                                    @johnpoz First things first reporting back, I tried the link to remove the element ssid using the classic settings, alas no avial. Then the new settings and deleted it, worked like a charm.

                                    Second, I have encountered a strange problem and after more than 2 hours I just can't quite put my finger on it. I have 2 nodes each none connected to a different wireless bridge, both of the same vendor, both with the same firmware version. They are in different vlans, until I switched over from Engenius to UniFI the both worked like a charm. With UniFi one is connected to the AP and the other one not. It doesn't seem to be related to the wireless bridge, because when I switched the wireless bridge that could not access the vlan to the other vlan it connected, I have no idea why it cannot access the one vlan an no the other?

                                    btw is see this

                                    Channel     Auto(8(6,+1) HT40
                                    

                                    What channels are these?

                                    Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                    Firmware: Latest-stable-pfSense CE (amd64)
                                    Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by johnpoz

                                      @Qinn said in Seamless roaming:

                                      Auto(8(6,+1) HT40

                                      Yeah that is horrible setup.. HT40 is not a supported option on 2.4... I would HIGHLY suggest you set 20 VHT on your 2.4 even if some clients and vendors say they support this.. It is not a standard that is supported and it will and does cause all kinds of issues.. And also use of anything other than 1,6 or 11 on 2.4 is just pointless.. Even if some auto config says hey lets use channel 8.. It's Borked!! with 2.4 the only channels that do not overlap are 1,6 and 11..

                                      channel.jpg

                                      I have no idea why it cannot access the one vlan an no the other?

                                      Your going to need to give a bit more detail on how exactly you have this setup.. What are you rules on the vlans you created? How you have it actually wired up, etc. etc..

                                      These wireless bridges? How do you have them connected? What make/model of these devices? You have them connecting to your AP ssids? and then what wired devices hanging off them?

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                      QinnQ 1 Reply Last reply Reply Quote 0
                                      • QinnQ
                                        Qinn @johnpoz
                                        last edited by Qinn

                                        @johnpoz Thanks I will change this setting to HT20

                                        After 4 hours I found it 🙏

                                        High Performance Devices (Beta): Connects high performance clients to 5 GHz only
                                        

                                        ... the above feature was enabled in the vlan that the wireless bridge could not access, once removed it can access

                                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                        Firmware: Latest-stable-pfSense CE (amd64)
                                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by

                                          Do these devices support 5ghz? That is something like band steering.. Trying to push clients to 5ghz.. but sure there could be problems with that depending on the client.

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                          QinnQ 1 Reply Last reply Reply Quote 0
                                          • QinnQ
                                            Qinn @johnpoz
                                            last edited by Qinn

                                            @johnpoz What do you say about the transmit power, auto, high or manual? btw no the wireless bridge only supports 2.4 and never enabled this on on that vlan, strange...

                                            Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                            Firmware: Latest-stable-pfSense CE (amd64)
                                            Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.