I have UI Unifi equipment, and I found the integration to be very good. I don't use the hot spot vouchers, but this could be a really good option for small businesses that need some automation and integration to WiFi. I am thinking small hotels, cafe's and the like where Home Assistant would be a good option. Ubiquiti are still good at supporting Open Source community. I think there are some settings in the unifi itegration that can disable adding some of those entities for tracking, but I haven't played with it for a little while. I know if you have a guest network, even on a different VLAN (highly recommended) the guest devices end up showing up as tracking entities in Home Assistant also.
I think they've changed how presence detection now works and you have to add devices by "hand" or enable them and that's better than previously when everything was added by default. And yes, this would be great for a small hotel or similar.
Cool! Didn't know this wss possible in home assistant nowadays. Years ago i used a unifi node in node red to do this type of setup. So now I have an ESP32 in my living room that has a button and if you press it it turns on the guest network, and I generate two types of vouchers (24h for occasional visitors and 4 years for family etc).
While handy for business users, this seems a little overkill for the kids 'friends' when they come over. If they are on a guest network, they are already secured away from the main network. You can cycle the guest network password easily at any time to force clients to authenticate. So adding a extra steo of a voucher that expires every 24 hours seems excessive and hostile that the kids will find other ways around it or just not use it.
Using unifi access points and switches without the gateway equipment, as I assume you are also. It's a fun way to greet guests and maybe also automatically disable some cleaning related schedules or light scripts. Does it also have maybe an event or status for when the issued voucher is successfully used, then expired? As always, thank you for all these great finds you're sharing with us! 🙌
Yes, same setup :) I haven't seen any events, but will check once again, maybe I've just missed it. I did skip few corners in terms of voucher setup on Unifi as videos do tend to be very long :) In theory, this could be workaround. If you set that you always need to have 1 voucher available, when single use voucher is used, system should generate new voucher and this event is triggered. Not sure if Unifi create directly event when voucher is used.
This may seem like I am coming across as being hostile, honestly I am not. At the beginning of Marker 5, "I am not using Unifi router, I'm not silly to keep my eggs inside my basket". What do you think is silly about using the same brand router as access point? I've used pfsense and Cisco ASA's (binned the ASA's off for pfsense) in a colo environment aswell as pfsense at home for a few years. Last year I bought a UDM Pro just to try it out and while I am not 100% happy with it, I can't think why it's silly to have Ubiquiti AP's and a Ubiquiti router.
That's a good point and question and sorry for VERY long reply). You've got to get the whole picture here. Ubituity will never be able to wash off security issue they had of their hands. How they handled and downplayed it - textbook of how you should not do things.. And by forcing use of online accounts it made the breach worse (there was no need for that) Second problem is HW. For example, up until year/two/3 ago, if I would get UDM and turned on all of the security features, there would be a significant impact on performance of the machine and available bandwidth.There were only few devices capable of handling (SOHO range, not PRO) my ISP speeds. But with IDS/IPS, it would lower that to only about 50% of actual speed I can get. (not sure if I managed to explain this well, sorry). And that was also unacceptable for me due to need for high speed Internet. Third, as I work with finance industry (and Cyber security), I'm yet to see any company using same manufacturer in DMZ/edge routing/firewall/NGF,... to have all of the equipment from same manufacturer - reason is simple, if one company has security issue, you have another layer from different company protecting you. That's just one additional layer of security. So back to beginning - no issue with switching and AP from Unifi, but routing/firewall/external access - they are to shady when we talk about security, and that's the most crucial issue for me. But, that's also my personal opinion based on my experience with them and I'm definitively not judging or trying to force anyone hand on this topic and I'm really glad you asked.
@@BeardedTinker That makes perfect sense now. I hadn’t considered it from a security perspective. I’ve probably lost that mindset since switching to a Ubiquiti router, as I don’t fully trust what the UDM Pro is doing in the background. With pfSense, it was easy to monitor interface states or dump everything into Elasticsearch or other tools for syslog analysis. I haven’t looked into their past security measures, but I’ll definitely check it out now. Thanks again!
@@hacwa thanks for reading and sorry for a long reply. Here is overview of it - it's interesting from security perspective: www.zoho.com/workplace/articles/ubiquiti-data-breach.html To add, it's not the breach that is issue, that can always happen, problem is that they didn't notify users when it happened, took a long time to give any info and also took almost 4-5 months until they got all of the incident info out to the public (users). So as user, you would not be aware of the potential risks to your home network.
My switches don’t show the devices connected to the ports. It just says port 1. I have uninstalled and reinstalled according to the exact instructions. Do you know how to show the devices connected?
Thanks for the video and boosting my integration. I'm glad you like it.
I really love it! Thank you so much for making it!!!!
DUDE, I love this guest network sharing! Great Find!
Glad you like it. I've cut a bit of corners in Unifi set-up - but it's really great integration for Guest WiFi 👍🏼
I just picked up my Unifi Security Gateway, so this it great stuff! Many thanks for all your work!
Good luck with it! There will be a lot of additional options to control it available.
I have UI Unifi equipment, and I found the integration to be very good. I don't use the hot spot vouchers, but this could be a really good option for small businesses that need some automation and integration to WiFi. I am thinking small hotels, cafe's and the like where Home Assistant would be a good option.
Ubiquiti are still good at supporting Open Source community. I think there are some settings in the unifi itegration that can disable adding some of those entities for tracking, but I haven't played with it for a little while. I know if you have a guest network, even on a different VLAN (highly recommended) the guest devices end up showing up as tracking entities in Home Assistant also.
I think they've changed how presence detection now works and you have to add devices by "hand" or enable them and that's better than previously when everything was added by default.
And yes, this would be great for a small hotel or similar.
Cool! Didn't know this wss possible in home assistant nowadays.
Years ago i used a unifi node in node red to do this type of setup.
So now I have an ESP32 in my living room that has a button and if you press it it turns on the guest network, and I generate two types of vouchers (24h for occasional visitors and 4 years for family etc).
While handy for business users, this seems a little overkill for the kids 'friends' when they come over. If they are on a guest network, they are already secured away from the main network. You can cycle the guest network password easily at any time to force clients to authenticate. So adding a extra steo of a voucher that expires every 24 hours seems excessive and hostile that the kids will find other ways around it or just not use it.
Using unifi access points and switches without the gateway equipment, as I assume you are also.
It's a fun way to greet guests and maybe also automatically disable some cleaning related schedules or light scripts.
Does it also have maybe an event or status for when the issued voucher is successfully used, then expired?
As always, thank you for all these great finds you're sharing with us! 🙌
Yes, same setup :)
I haven't seen any events, but will check once again, maybe I've just missed it.
I did skip few corners in terms of voucher setup on Unifi as videos do tend to be very long :)
In theory, this could be workaround. If you set that you always need to have 1 voucher available, when single use voucher is used, system should generate new voucher and this event is triggered. Not sure if Unifi create directly event when voucher is used.
The manual trigger would be enough since you should be there when welcoming guests :) fun one. Thank you again!
Nice video, thanks for it. could you tell which card is used to get this qr code with informations on dashboard?
Heroes dont wear caps! Merci
I see you have untitled markers on your video. Great video by the way.
Thank you! Yeah - TBH I've seen them just haven't had time to fix it.
Will do it in few minutes.
This may seem like I am coming across as being hostile, honestly I am not.
At the beginning of Marker 5, "I am not using Unifi router, I'm not silly to keep my eggs inside my basket".
What do you think is silly about using the same brand router as access point?
I've used pfsense and Cisco ASA's (binned the ASA's off for pfsense) in a colo environment aswell as pfsense at home for a few years.
Last year I bought a UDM Pro just to try it out and while I am not 100% happy with it, I can't think why it's silly to have Ubiquiti AP's and a Ubiquiti router.
That's a good point and question and sorry for VERY long reply). You've got to get the whole picture here.
Ubituity will never be able to wash off security issue they had of their hands. How they handled and downplayed it - textbook of how you should not do things.. And by forcing use of online accounts it made the breach worse (there was no need for that)
Second problem is HW. For example, up until year/two/3 ago, if I would get UDM and turned on all of the security features, there would be a significant impact on performance of the machine and available bandwidth.There were only few devices capable of handling (SOHO range, not PRO) my ISP speeds. But with IDS/IPS, it would lower that to only about 50% of actual speed I can get. (not sure if I managed to explain this well, sorry). And that was also unacceptable for me due to need for high speed Internet.
Third, as I work with finance industry (and Cyber security), I'm yet to see any company using same manufacturer in DMZ/edge routing/firewall/NGF,... to have all of the equipment from same manufacturer - reason is simple, if one company has security issue, you have another layer from different company protecting you. That's just one additional layer of security.
So back to beginning - no issue with switching and AP from Unifi, but routing/firewall/external access - they are to shady when we talk about security, and that's the most crucial issue for me.
But, that's also my personal opinion based on my experience with them and I'm definitively not judging or trying to force anyone hand on this topic and I'm really glad you asked.
@@BeardedTinker
That makes perfect sense now. I hadn’t considered it from a security perspective. I’ve probably lost that mindset since switching to a Ubiquiti router, as I don’t fully trust what the UDM Pro is doing in the background. With pfSense, it was easy to monitor interface states or dump everything into Elasticsearch or other tools for syslog analysis.
I haven’t looked into their past security measures, but I’ll definitely check it out now. Thanks again!
@@hacwa thanks for reading and sorry for a long reply.
Here is overview of it - it's interesting from security perspective: www.zoho.com/workplace/articles/ubiquiti-data-breach.html
To add, it's not the breach that is issue, that can always happen, problem is that they didn't notify users when it happened, took a long time to give any info and also took almost 4-5 months until they got all of the incident info out to the public (users). So as user, you would not be aware of the potential risks to your home network.
My switches don’t show the devices connected to the ports. It just says port 1. I have uninstalled and reinstalled according to the exact instructions. Do you know how to show the devices connected?
I've renamed ports on switches according to device that is connected to it - if I remember correctly. (renamed in Unifi, not Home Assistant).
What router are you using?
Currently, it's one of the Mikrotik ones.
Any link to the other integrating?
Sorry, didn't get it :(
@@BeardedTinkerat 0:12
Yeah, first part of the video is internal Integration in HA for Ubiquity, and second part is github.com/ufozone/ha-unifi-voucher - Hotspot manager