Skip to content

USG - Unifi Security Gateway

Také viz unifi.

užitečné tipy

show interfaces
show interfaces detail

dump json konfigurace

mca-ctrl -t dump-cfg > /tmp/config.txt

workarounds

static DNS entries (deprecated)

Info

Už není potřeba, Unifi network má pro UXG funkční administraci DNS.

ssh na USG (ssh 192.168.1.254) a následující příkazy:

configure
edit service dns
set forwarding options host-record=wiki.mixi.cz,192.168.1.178
set forwarding options host-record=doc.mixi.cz,192.168.1.178
set forwarding options host-record=tools.mixi.cz,192.168.1.178
set forwarding options host-record=longhorn.mixi.cz,192.168.1.178
set forwarding options host-record=buildbot.mixi.cz,192.168.1.178
set forwarding options host-record=buildbot-master.mixi.cz,192.168.1.178
set forwarding options host-record=vault.mixi.cz,192.168.1.178
set forwarding options host-record=tva.mixi.cz,192.168.1.178
set forwarding options host-record=tva2.mixi.cz,192.168.1.178
set forwarding options host-record=va2.mixi.cz,192.168.1.178
set forwarding options host-record=nats-home.mixi.cz,192.168.1.178
set forwarding options host-record=mqtt.mixi.cz,192.168.1.178
set forwarding options host-record=influxdb.mixi.cz,192.168.1.178
set forwarding options host-record=grafana.mixi.cz,192.168.1.178
set forwarding options host-record=prometheus.mixi.cz,192.168.1.178
set forwarding options host-record=auth.mixi.cz,192.168.1.178
set forwarding options host-record=sso.mixi.cz,192.168.1.178
set forwarding options host-record=pvr.mixi.cz,192.168.1.190
set forwarding options host-record=pvr.intranet,192.168.1.190
set forwarding options host-record=va.mixi.cz,192.168.1.1
set forwarding options host-record=va.intranet,192.168.1.1
set forwarding options host-record=va-api.mixi.cz,192.168.1.178
set forwarding options host-record=ha.mixi.cz,192.168.1.178
commit
save
exit
exit

změna MAC

Bylo potřeba pro ForteNet po náhradě routeru.

port síť
eth0 LAN1
eth1 LAN2
eth2 WAN1
eth3 WAN2
ssh mixi@192.168.1.254

configure
set interfaces ethernet eth2 mac 00:14:C1:1E:1B:01
commit
save
exit

/srv/var/unifi/sites/default/config.gateway.json:

{
    "interfaces": {
        "ethernet": {
            "eth2": {
                "mac": "00:14:C1:1E:1B:01"
            }
        }
    }
}