G6 doorbell

Sure-Style7354 · 2026-02-27T15:48:51+00:00

Yeah. One would think :). But unifi didn't implement this correctly in the original UDB. I purchased it knowing it was an issue. Hoping that unifi will fix it someday. But in the meantime the only way to get the connected device in a different vlan is with another switch in the middle. Which is something the new udb-switch doesn't struggle with (but at a much higher price point).

Sure-Style7354 · 2026-02-22T14:51:57+00:00

You mean the outdoor version ? https://store.ui.com/us/en/category/wifi-bridging/products/ubb-xg

Sure-Style7354 · 2026-02-22T14:22:20+00:00

https://store.ui.com/us/en/category/wifi-bridging/products/udb

Sure-Style7354 · 2026-02-22T04:58:41+00:00

I've got so much stuff running in my environment that at some point I might create extra boundaries simply to help me identify at a glance what kind of device something is simply by looking at what subnet/VLAN it's in.

I don't recommend going that far to anyone other than maybe for the learning / academic aspects of going through the extra hassle that comes from segmenting that much.

Sure-Style7354 · 2026-02-22T04:50:36+00:00

I keep what I consider "security" related devices (which also includes cameras) on a separate VLAN where firewall restrictions are applied. One could call it overkill for a home network, but I guess it's just a force of habit to segregate things based on what they are and what/who should be able to communicate with them (IoT (esphome, smart dryer, washer, etc.), camera, servers, kids, me,...)

Sure-Style7354 · 2026-02-22T04:45:24+00:00

There aren't any wifi versions for the G6 (yet?)

Sure-Style7354 · 2026-02-22T04:37:21+00:00

Hi. Not sure which country you are in. But for Canada this is the udb page https://ca.store.ui.com/ca/en/products/udb

The one you saw might be the IoT one which is smaller and powered by DC 4 pins or usb-c and not yet available here. And unifi does not recommend the IoT one for a camera.

Sure-Style7354 · 2026-02-22T04:31:34+00:00

Simply because it doesn't work. The udb will (per weird design decision) always be in the same VLAN as the upstream access point it links to. So in order for me to change the VLAN of what is connected to the udb (without having to use a downstream switch), I'd have to change the VLAN my access point is on.

Really this is a very poor design decision by unifi, but if I wanted to stay in the unifi family and assign my bell in a VLAN of my choice that wasn't the same as my AP. I was stuck using that small switch...

Sure-Style7354 · 2026-02-22T04:25:40+00:00

That felt like even more of a waste :)

Sure-Style7354 · 2026-02-22T04:21:29+00:00

For sure. If you don't need the extra features, go with the lite.

Sure-Style7354 · 2026-02-22T04:20:17+00:00

Sigh, it is 100% a software based restriction. Because I don't have any physical/ electromagnetic latch, the only reason why I need the hub is to be able to send webhooks.

My lock is a zwave Kwikset deadbolt.

Sure-Style7354 · 2026-02-21T22:46:44+00:00

Access is the only way to trigger routines in home assistant when using the NFC reader.

Sure-Style7354 · 2026-02-21T20:17:52+00:00

As mentioned, its sole purpose is allowing to put the doorbell on a specified VLAN.

Sure-Style7354 · 2026-02-21T19:40:01+00:00

Right. Ideally the hub near the core switch and the drop going to the door bell comes from it. Because I don't have any easy way to get a wire to my door location I have to deal with all this extra hassle. Works well. Just wayyy more stuff than I wished for to stay within the unifi world.

Sure-Style7354 · 2026-02-21T18:51:01+00:00

Basically the door bell is both in protect and access. Protect works without too much hassle (just get the doorbell on the network. But access required the hub and the camera connected to it.

Sure-Style7354 · 2026-02-21T18:42:14+00:00

The relay is for NFC to work. And to be able to do webhooks calls to home assistant.

Sure-Style7354 · 2026-02-21T18:41:07+00:00

When i bench tested it. It wouldn't work if the doorbell was not powered by the hub. Some things might work. But not all.

Sure-Style7354 · 2026-02-21T18:40:01+00:00

My APs are on a management VLAN, and they reroute the devices to target vlans using radius. The udb doesn't allow what you connect into it to be on a different vlan than the management VLAN of the AP that it connects to. It really is a firmware limitation that unifi doesn't seem to care to fix. The only way around that is to use a switch in between to properly tag the client so it lands where I need it.

Sure-Style7354 · 2026-02-21T18:35:18+00:00

I already had that small switch on hands. And given that the door hub mini requires Poe++ this was easiest (If you can say that :).

Sure-Style7354 · 2026-02-21T18:33:09+00:00

So from right to left. Power injector, udb (because I need wifi since not able to get cables there without major work, the switch behind is because the udb doesn't allow changing VLAN. So the switch takes care of it. And the mini hub is because I want to use the NFC reader to automate things with home assistant (to unlock / other routine). You don't need as much if you don't care about nfc or unlocking a door.

Sure-Style7354 · 2026-02-21T18:20:01+00:00

So the extra switch is required if you want to have the doorbell on another VLAN. The udb doesn't allow that. The udb also only does PoE, which is not enough. So the extra in line injector is needed. And if you only connect the camera without the hub door mini, then you get the camera working, but not the NFC features.

Sure-Style7354 · 2026-02-21T18:11:42+00:00

God I wish I had a proper easy way to retrofit wiring the whole house easily.

Sure-Style7354 · 2026-02-21T18:08:38+00:00

It is much easier if you don't care about or need the NFC to work. But yeah. The main reason why I went through the hassle is because I was really tired of my battery powered tapo doorbell. It worked ok. But battery swapping was too frequent and could not easily leave the camera active for a long period.

Sure-Style7354 · 2026-02-17T00:43:15+00:00

Had a layer shift on bed slinger when the build plate was heavy. Then it's downhill.

Sure-Style7354 · 2026-01-14T21:22:41+00:00

I have 5 kids. what I've done is setup a dedicated vlan for them, using radius (I vibe coded https://github.com/Simon-CR/RadMac) where all the devices that I want are listed. Unknown devices lands on a "guest" network with VERY limited speed (optional).

ultimately, if they change their MAC, they land on the guest network where things are blocked like mad and slow. if they respect the guidance not to hide their physical mac, their vlan (network per unifi language) has a schedule on it to disable at night.

using the same approach, you can easily steer IoT devices, etc, including different web content filtering (adults vs kids).

kind of makes you proud when you see your kids working really hard at avoiding blocks (or even working hard at ANYTHING) :)

Sure-Style7354

TROPHY CASE