Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Seamless roaming

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    265 Posts 9 Posters 91.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      You want the AP and the Controller in the same L2.. The problem with docker is there is normally a nat this going on.. Which are not the same L2..

      If your AP and controller on not on the same L2 then you need to use L3 adoption..

      example

      ash-4.3# docker network inspect bridge
      [
          {
              "Name": "bridge",
              "Id": "0f675293ee5c05dfffab0e87768f200646e3355732497445611ae250a0838719",
              "Created": "2020-06-26T05:22:38.90432023-05:00",
              "Scope": "local",
              "Driver": "bridge",
              "EnableIPv6": false,
              "IPAM": {
                  "Driver": "default",
                  "Options": null,
                  "Config": [
                      {
                          "Subnet": "172.17.0.0/16",
                          "Gateway": "172.17.0.1"
                      }
                  ]
      

      then ip masquerade is used to match up ports on the bridge network... This i not the same L2... if docker does put this in the same L2 then it amounts to running multiple L3 on the same L2 which could sure prove problematic for L2 adoption of the AP in your controller. Are your APs adopted by your controller?

      I would suggest if you want to use your controller in a docker, and L2 adoption is not working - to use L3 adoption..

      But yes generally speaking your controller and AP (managment ip) would be in the same network.. Unless your wanting to put your management IP of your AP on a vlan.. This vlan could be in the same L2 as your controller, or could be different - which again then you would need to use L3 adoption for your controller to manage your controller.

      My controller and AP all run on my native vlan (untagged) 192.168.2/24 - I then have a wifi SSID that is in this vlan, this is the vlan I connect my trusted devices to... And then I have 3 other vlans (ssids) on the AP that are in different vlans 192.168.6/24, 192.168.7/24 etc..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

      QinnQ 1 Reply Last reply Reply Quote 1
      • QinnQ
        Qinn @johnpoz
        last edited by Qinn

        @johnpoz Thanks. I finally decided to move the Synology 918+ over to the LAN, so it's in the same subnet as the two UAP-nanoHD's. Then granted the WLAN subnet access to it, installed docker and the container. It's running nicely for 2 hours.

        Firefox_Screenshot_2020-06-28T15-04-38.654Z.png

        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
        Firmware: Latest-stable-pfSense CE (amd64)
        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by johnpoz

          Nice.. Yeah I have added a couple dockers as of late as well ;)

          dockers.png

          I would be up for moving the controller to docker - but I also leverage that same VM as my linux box when wanting to do something I just ssh to it.. Also as vm its easier to just take snapshots when going some sort of update with controller - as mentioned I always running latest beta version..

          The updatetool is slick little tool for keeping plex ratings updated with the latest numbers from imdb (runs every 12 hours).. And getting the latest ombi (plex request system) beta up was just easier to do via docker..

          [INFO ] - 2020-06-28 11:23:03 @ ImdbPipeline.transformMetadata: 7670 item(s) need no update.
          [INFO ] - 2020-06-28 11:23:04 @ ImdbPipeline.transformMetadata: Transforming 4 item(s)
          [INFO ] - 2020-06-28 11:23:04 @ ImdbTransformer.updateMetadata: Adjust rating: 7.6 -> 8.0 for The Harvest (2)
          [INFO ] - 2020-06-28 11:23:04 @ ImdbTransformer.updateMetadata: Adjust rating: 9.0 -> 8.2 for Buffy the Vampire Slayer
          [INFO ] - 2020-06-28 11:23:04 @ ImdbTransformer.updateMetadata: Adjust rating: 7.5 -> 8.2 for Welcome to the Hellmouth (1)
          [INFO ] - 2020-06-28 11:23:04 @ ImdbTransformer.updateMetadata: Adjust rating: 7.5 -> 7.4 for First Date
          [INFO ] - 2020-06-28 11:23:04 @ ImdbTransformer.updateMetadata: (Set) Set IMDB Badge for: First Date
          [INFO ] - 2020-06-28 11:23:04 @ ImdbPipeline.transformMetadata: Transformed entries for 4 items(s).
          

          Glad you got it sorted..

          edit: Looking at the unifi controller dockers I see, I don't see any on the 5.14 beta line.. So for "me" that would be a reason to just stay with using vm.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          QinnQ 1 Reply Last reply Reply Quote 0
          • QinnQ
            Qinn @johnpoz
            last edited by Qinn

            @johnpoz From what I read here beta and docker can play well together https://www.reddit.com/r/Ubiquiti/comments/7tcyjr/unifi_beta_running_in_docker_on_synology/ maybe you wanne give it a try?

            btw you are using UAP/USW Firmware 4.3.19.11295?

            Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
            Firmware: Latest-stable-pfSense CE (amd64)
            Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              No my firmware is 5.20 told you always run the latest betas..

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

              QinnQ 1 Reply Last reply Reply Quote 0
              • QinnQ
                Qinn @johnpoz
                last edited by Qinn

                @johnpoz ....did not active the early access setting in my config, thus could not see any beta's. So your on UAP/USW Firmware 5.20.0.11910 ;) btw is there any relation between the firmware and the controller version?
                So could I use this beta firmware with the controller version (atag_5.13.29_13635) I have running on docker or do I need UniFi Network Controller 5.14.15, no idea if this one is available for docker?

                Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                Firmware: Latest-stable-pfSense CE (amd64)
                Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  You can run beta firmware with the stable controllers sure.. Its just sometimes you won't be able to do X that is in the beta firmware withou the beta contreoller.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                  QinnQ 1 Reply Last reply Reply Quote 1
                  • QinnQ
                    Qinn @johnpoz
                    last edited by

                    @johnpoz I see this Firefox_Screenshot_2020-06-30T09-44-44.362Z.png

                    any idea why?

                    Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                    Firmware: Latest-stable-pfSense CE (amd64)
                    Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Do you have a USG.. That is only available when you have 1 of their routers..

                      None of this stuff is going to show anything unless you have the stuff
                      nohide.png

                      Keep in mind the controller is meant to control like all of their stuff, not just AP..,

                      If you don't like seeing it just use your fav browser tool to hide it.

                      hide.png

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                      QinnQ 1 Reply Last reply Reply Quote 1
                      • QinnQ
                        Qinn @johnpoz
                        last edited by

                        @johnpoz you mean hide the elements? I would be nice if you could remove these widgets in the controller.

                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                        Firmware: Latest-stable-pfSense CE (amd64)
                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                        1 Reply Last reply Reply Quote 0
                        • JeGrJ
                          JeGr LAYER 8 Moderator
                          last edited by

                          Yes that would be really nice. Or if they would simply open up that speedtest stuff and just run it on the controller if there's no USG so you can just have some values there.

                          Anyway it is looking like this with one of their new UDMs:

                          598ea45d-a87c-4b86-9caf-63f73f63f1c6-image.png

                          So not really missing much, but it would be a really nice touch if they would support speed tests or speed displays via an API or external method. But as they of course like to sell their own gateways ;) I'm not counting on it :)

                          Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                          If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                          1 Reply Last reply Reply Quote 1
                          • DerelictD
                            Derelict LAYER 8 Netgate
                            last edited by

                            "Seamless roaming" has been a thing for like 20 years.

                            Put different access points up with the same SSIDs on the same layer 2 networks and have a cocktail.

                            Controllers can try to steer clients to different radios but it is ultimately up to the clients.

                            Kind of surprised Ubiquiti hasn't figured this out yet.

                            Chattanooga, Tennessee, USA
                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                            JeGrJ QinnQ JKnottJ 3 Replies Last reply Reply Quote 1
                            • JeGrJ
                              JeGr LAYER 8 Moderator @Derelict
                              last edited by JeGr

                              @Derelict said in Seamless roaming:

                              Put different access points up with the same SSIDs on the same layer 2 networks and have a cocktail.

                              AFAIR that's only "roaming" and yes, that's depending on the client only. Seamless roaming as I recall is an active process that requires APs and controller(s) to steer the client to another AP if he goes out of range of the last one. Last time I deployed WiFi that would require it (due to phones would be using WiFi / VoIP) that was not the same thing but perhaps I'm just old ^^

                              Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                              If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                              1 Reply Last reply Reply Quote 0
                              • QinnQ
                                Qinn @Derelict
                                last edited by

                                @Derelict they even introduced this.. Firefox_Screenshot_2020-06-30T11-56-26.032Z.png

                                Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                Firmware: Latest-stable-pfSense CE (amd64)
                                Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                1 Reply Last reply Reply Quote 0
                                • QinnQ
                                  Qinn
                                  last edited by Qinn

                                  Can anyone enlighten me what this option is/does? .... as I have no recollection that I enabled it?
                                  Firefox_Screenshot_2020-06-30T11-54-35.766Z.png

                                  Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                  Firmware: Latest-stable-pfSense CE (amd64)
                                  Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                  1 Reply Last reply Reply Quote 0
                                  • NogBadTheBadN
                                    NogBadTheBad
                                    last edited by NogBadTheBad

                                    Click on the (!) it's not enabled out the box AFAIK.

                                    https://help.ui.com/hc/en-us/articles/115006559827-UniFi-802-11-Basic-Supported-Rate-Controls#2

                                    Andy

                                    1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                    1 Reply Last reply Reply Quote 1
                                    • JeGrJ
                                      JeGr LAYER 8 Moderator
                                      last edited by JeGr

                                      The first one: (no need for such large pics, just cut them down :))

                                      That's client side fast roaming / BSS switching. If the client supports it (modern ones should) it can fade over the connection from one AP to another without loosing connection. That's fast / seamless roaming and that was intended like I said for VoIP or other continuous protocols that react badly to short disconnects.

                                      The second one is often due to automatic connection optimizing selected as most modern clients don't need to support all old (e.g. 802.11b) speeds like 1/6/11Mbps. If one doesn't need those it can speed up the radio/SSID as it's unneccesarry to send the appropriate beacons. That can improve the performance of 2GHz Wifi especially in zones with many overlapping ones. But if you have (stone age) old WiFi equip that only talks b or b,g standards, it can make them unable to connect.

                                      Also AFAIK your setting is indeed default with newly created SSIDs (or only when auto-optimizations are on, don't know exactly). The SSID / radio on the dream machine of my brother's looks the same and he doesn't know enough to configure it ;) So that seems pretty default to me :D

                                      Don't forget to upvote 👍 those who kindly offered their time and brainpower to help you!

                                      If you're interested, I'm available to discuss details of German-speaking paid support (for companies) if needed.

                                      1 Reply Last reply Reply Quote 1
                                      • QinnQ
                                        Qinn
                                        last edited by

                                        @johnpoz @Derelict @NogBadTheBad @JeGr Thanks guys!!

                                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                        Firmware: Latest-stable-pfSense CE (amd64)
                                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                        1 Reply Last reply Reply Quote 0
                                        • johnpozJ
                                          johnpoz LAYER 8 Global Moderator
                                          last edited by johnpoz

                                          I concur it would be nice if you could remove stuff from the dashboard like that via the controller settings... Its been asked for years.. But I doubt it will ever happen..

                                          You can turn of specific widgets, and add others, etc. But you can not edit that specific widget with any sort of settings in the controller that I have seen. Might be possible with the right skillset to edit and create your own widget to use in its place that doesn't have what you don't want.. But have not seen anyone make something like that available..

                                          But it takes all of a couple of seconds to just remove that element via your fav browser tool.. Anyone that does any sort internet I would think would have such tools installed.. They are the first thing I install on a new system.. There is always a bunch of crap that like to hide, not just ads..

                                          But as derelict pointed out, and believe we already went over switching from one ap to another is on the client.. Fast roaming has really nothing to do with a client deciding to move to another AP.. To use fast roaming, your clients need to support 802.11r - do they? And only comes into play if your using wpa-enterprise?

                                          These 3 devices are connected to my wpa-enterprise ssid, they are using eap-tls, and they support fast roaming.. But this has nothing to do with client deciding to connect to specific AP or not..

                                          fast.png

                                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                                          If you get confused: Listen to the Music Play
                                          Please don't Chat/PM me for help, unless mod related
                                          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                          1 Reply Last reply Reply Quote 0
                                          • DerelictD
                                            Derelict LAYER 8 Netgate
                                            last edited by

                                            All of that is controller-side effort. It is still up to the client where it decides to connect to.

                                            Chattanooga, Tennessee, USA
                                            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                            Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                            1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.