PeteAsking

Its on page 1 but essentially you change the tag to a tag of your choosing.

Tag 8.3.32-unraid is now available for testing

Vlan is the most configurable option. Other options will prevent things like their being able to print to a wifi printer or use airplay and things like that. Best to do it properly with a segregated network.

If you are plugging every AP into Opnsense it is possible. If you have other equipment in between its not possible. Meshed is fine also. What is impossible is having an ap plugged into a non vlan aware switch or port somewhere in the chain. Every device along the way to the client must be vlan aware for vlans to work and be configured correctly. When the client communicates with another device or out onto the internet via its gateway, the traffic is tagged by the first upstream vlan aware device (ie an AP in your case). From then on every hop must be via a device that is vlan aware, ie next hop is another AP where the tagged traffic is passed then to Opnsense. Then Opnsense reads the tagged traffic and decides what to do based on firewall rules and so on. If a packet passed a device that was not vlan aware it would be dropped at that point.

If you create a vlan then you can segregate their network from your network. You need to have a unifi switch if you want to be able to do it via the unifi controller.

You should test zenarmor. Works great as layer 7 filtering.

Yes but that quote was one of dread and warning dont forget.

You guys should just save up for a opnsense box. Its way cheaper and better anyway.

Nice and thank you 👍

Edit your sources.list and change it I guess. Doesnt seem like an unraid wuestion to be fair.

Good job. I do want to clarify this: “Is it running a "compliant" version of the unifi controller” No it is not running a sanctioned or compliant version of unifis expected deployment. This is an unsanctioned and unofficial option. Their deployment expects the more complex setup (.deb and native db). This was created as I personally (and some others) do not believe their suggested setup is better/more reliable and believe this is simpler and more reliable and conforms to the industry standard KISS rule. However you certainly do not need to agree and should be aware this setup is not what unifi (linuxserver?) suggest. Also note this container was created to solve an imposed problem that nobody wanted or expected when the (official?) container was suddenly deprecated. Had this never happened this container wouldnt exist. So in some ways this setup has come about by necessity and not to compete or be better than anything else. Personally I needed a solution that resolved a problem for me and its being shared here for others because it affected more people than just me, but I do want to be upfront about what you are getting. Its a creation from a bunch of unaffiliated hobbyists who are all in this together.

Did you set the correct inform IP?

Tag 8.2.93-unraid for home users is now available

Some people have found a normal restore does not work for them.

The issue for him is that a UDM does not support the site export feature you used.

That guy seemed to have the same issue going from UDM ---> docker but I dont understand how he resolved it. It also seems like the UDM cannot be controlled or adopted so even if you can migrate the UDM must be abandoned for another firewall at that point. Unclear if @Dynamiteboy is happy to throw away the firewall or not/is aware.

What you are saying sounds strange to me because that’s not my experience with the restore process. Can anyone else confirm this?

Maybe it doesn’t support that feature then.

@bmartino1 ok you are a genius. We should just do whatever you say. @Dynamiteboy the dude on reddit above found site export somehow. Can’t you look for it like he did?

That Reddit link seems to suggest he can do a site export/import but he said he does not have a site export option so why would that be? udms are always surprising me how shit they are. So glad I never used or bought one.

@bmartino1 I’m not clear on your suggestion for him. It sounds like you are saying he might have to setup from scratch. So is a backup file from a UDM incompatible with a docker setup?

If possible post the link so we can see what they say

I think everyone or near 100% of people on this thread had to do a restore from the Linuxserver container to this one but they were all probably docker backup to docker restore. Unsure if anyone has done a udm to docker conversion. Most of us use a firewall like opnsense so don’t have a udm (hence the need for a docker container to begin with).

I don’t know how to fix this issue or how to manipulate unifi’s database. Please can you open a thread on unifi’s support forum and ask them what you are supposed to do if the restore procedure from a UDM to a docker container does not allow you to login post restore. You can link the opened thread here in case they say something but nobody else has the issue so it’s something specific to your setup that’s caused some corruption or issue. Im not sure at this stage if the UDM failed if you even have a valid backup at this time.

You didnt actually answer my troubleshooting step regarding "Sync Local Admins with SSO". Did you do this and then try a restore and ensure that you can login with your unifi email and password? eg login to https://unifi.ui.com/ with your email and this should also work logging into the local device with that option. This would ensure a login synced to unifi can access the controller then restoring it should still work. The username is then synced from unifis servers - no need for local admins to work. You have to do all the troubleshooting steps not just pick a couple here and there.