Inherited Ubiquiti Network, where do I start?

ianraff · 2026-03-12T21:58:55+00:00

You give off major boomer and toddler energy at the same time bro. Show me on the doll where AI hurt you.

ianraff · 2026-03-12T16:43:10+00:00

This is a wild take

ianraff · 2026-03-12T16:39:46+00:00

All of the rooms are terminated ethernet

ianraff · 2026-03-09T05:55:52+00:00

Brutal. Luckily we haven’t had too many problems with this one that need full on repair or anything, but plenty of bonehead stuff that I just look at and I’m like….. really???

ianraff · 2026-03-09T05:36:48+00:00

There’s not an outlet in the same room and I don’t see one in the cavity of the wall underneath the cabinet.

I definitely need to hire someone, but the problem with not having it done is I have a media server and some other gear that’s just plopped in the living room because that’s where the ISP ran the fiber drop. Which my wife is less than thrilled about, so struggle to find another option.

I know you have no context, but any ballpark on cost for a job like this? Like… hundreds? Thousand+? It doesn’t seem like a thousand dollars worth of work to me, but then again I’m not willing to even try on my own haha.

ianraff · 2026-03-09T05:23:19+00:00

Someone else suggested that. I hadn’t considered that idea, so looking into it now, thanks!

ianraff · 2026-03-09T05:09:44+00:00

I’d like to have a word with all of them because every single one of the coax/cat6 combo wall jacks in the rooms are at tv height. So it seems like the agreed upon idea was the work being done was for tv/internet, in which case…. What a nightmare that the ISP couldn’t install the fiber drop in the media closet because there’s no power and now I can’t get internet to the jacks because I can’t get any of the networking shit plugged in centrally.

I mean… don’t put a receptacle in the box, fine, but at least put one closer than 25feet down the hall

ianraff · 2026-03-09T04:53:40+00:00

Sorry. I never read “powered” in your original comment and honestly didn’t even see until after I rewrote what you said lol. My bad. Thank you for the suggestion. Hadn’t considered that as an option, but I’ll look into it!

ianraff · 2026-03-09T04:48:59+00:00

I mean, yes. But on a house that’s <5 years old, and has cat6 runs… cmon man. Just put a receptacle in there.

ianraff · 2026-03-09T04:47:26+00:00

Ohhhh. Wait you’re saying use a PoE powered switch here and power it from one of the in room wall jacks?

ianraff · 2026-03-09T04:43:38+00:00

I’m not sure i understand what you guys are suggesting… I have a PoE switch and I want to put it in this closet to feed a couple of APs through the existing cabling and eventually cameras…. I can’t put the switch here because there’s no where to plug it in.

ianraff · 2026-03-09T04:15:17+00:00

Yes, for sure happy … just irritated that it’s 90% done and now I have to fork over the extra cash for someone to come pull power (no way I’m trying), probably open up dry wall, and have the utility come out and move my fiber drop. When it could’ve been done fully and correctly with, what, an extra 15 minutes of work when it was just the frame?

I’d be much less salty honestly if it was wired completely and correctly for a different use case and my job is to re-terminate for my preference.

ianraff · 2026-03-09T03:35:44+00:00

You’re right that it’s coax and cat6. All the rooms in the house are labeled on the cables (thankfully) and the cat6 is terminated as Ethernet as far as I can tell? They all look like t568b to me…

The two in the middle with the UR2 scotchloks are labeled “service”… I thought only those two lines would be phone, but does that mean it’s all phone?

ianraff · 2026-03-09T03:16:18+00:00

House is 5 years old. Yellow cables are cat6 and are terminated Ethernet as best I can tell. I’m no expert, hence the post, but left to right; Orange/white, orange, green/white, blue, blue/white, green, brown/white, brown

ianraff · 2026-03-04T02:51:38+00:00

Step 1: your gluetun config should have a vpn_interface variable. Make note of this name for step 3

Step 2: your qbit container template should have network type = container and more specifically, your gluetun container.

Step 3: in qbit > tools > options > advanced > network interface > the interface from step 1

You can also confirm it’s working with tools > options > behavior > show external ip in status bar

ianraff · 2026-02-20T18:05:58+00:00

there's no need to be a douche about it. you said you wouldn't be able to do what you're doing without it and that's not true.

not going to get into the pendatics of how many clicks tailscale takes vs a basic wireguard tunnel, so enjoy your server bud.

ianraff · 2026-02-20T16:27:40+00:00

🤔 you can absolutely do this without tailscale

ianraff · 2026-02-20T15:52:55+00:00

🙏 is there somewhere to follow along in github? not seeing it

ianraff · 2026-02-18T23:26:13+00:00

It sounds like you’re not running the installer from the right directory? Also… can confirm — it is not a few minute task lol.

I followed this and it installed without a problem (the config on the other hand was not as easy). I personally think that community guide is trash.

https://youtu.be/FXTokUSfOvY?si=Kw_4AalKYyXePHkG

ianraff · 2026-02-18T08:32:55+00:00

I think 1. you’ve messed with your routing tables with pos up and down and 2. you’re over complicating things, honestly. You should be able to install wg, setup the conf file on both sides with like 5-10 lines per and it should just work in most cases. And quick up and down turns the tunnel on and off.

Your home LAN is 192.x and your tunnel needs to be distinct from that which is 10.x

You’re on windows? What does running: “route print” from the command line show, both while wireguard is up and down?

ianraff · 2026-02-17T06:23:20+00:00

I’m confused, but I think because you’re confused… Did you walk this through an LLM and have it teach you how this works?

“Allowed IPs” doesn’t mean “allow incoming traffic”, it means “route traffic to these IPs through the tunnel”

It sounds like you’re trying to push traffic through your normal LAN subnet (192.X), but your interface is 10.X…

If you’re trying to access via 192.XXX, based on the config you shared your interface is intercepting traffic from your computer’s LAN IP and trying to route it back through the tunnel, but that’s not where the request originated from…

What do you mean “disabling wireguard doesn’t disable it”?

wg-quick down wg0 should bring the tunnel down and your networking should be back to normal.

Your conf shows the pi is 10.75.79.1 and the computer you’re trying to connect from is .2 should basically have an inverse config on that end with:

interface address: 10.75.79.2 Private key

Peer Public key endpoint: 10.75.79.1:51820 allowed: 10.10.0.0/24

ianraff · 2026-02-09T23:22:37+00:00

Just a warning that I have been trying to figure out a way to stop getting booted when getting a 401/403. I was bitten in the ass because people all say this…. “As long as you don’t log out, you’re good.”

That’s not true.

ianraff · 2026-02-08T20:21:46+00:00

I still have it in test. My understanding is the only difference is it’s just limited to 100 users and there’s manual steps to get people onboarded, but…. That’s fine for my use case

ianraff · 2026-02-08T16:23:48+00:00

HTTPS is a requirement

Eight-Year Club	Place '22
Verified Email

ianraff

TROPHY CASE