hey everyone, Cody from Mac Telecom networks. Today, I'm super excited to introduce two new products from the Ubiquiti Ultra line. The first piece of equipment that we saw in the Ultra line was the UK Ultra or the Swiss army knife access point. But now that line is growing, and the first one that I'll introduce is the Cloud Gateway Ultra. This has multi-gigabit WAN, and we could do more than one WAN connection. We could add a second one if we have the UniFi LTE. That would count as a third WAN connection. Now, the Cloud Gateway Ultra only runs UniFi Network, and it could do 1 Gbit per second routing with IDS and IPS turned on. For the IDS and IPS, we have 35 different categories that we could choose from, which is the same as the UDMC and the UDM Pro. If we take, for example, the UDR, it only has 11 different categories. The Cloud Gateway Ultra has 4 1 Gbit RJ45 ports, and one of those could be remapped to our WAN.

this could also hold up to 30 network devices, so either switches or access points, and up to 300 clients. The price point on this is $129 USD. The next device that we're going to be taking a look at is the UniFi switch Ultra, which features 7 1 GB Poe plus ports. And we could power this switch up a few different ways. On the back of the switch, we have an RJ45 Poe ++ input. So if we use that, we're going to be getting 42 watts Poe availability. Now we also have a 60 W power adapter, which will give us 52 watts. And then we have a 210 W power adapter, which will give us a 202 watt power availability for our Poe ports. I'm going to be using the 210 W power supply as I'm going to be pairing this up with the cloud Gateway Ultra. Now for whichever way you're going to be powering up, there comes a different price point. If you're just using Poe Plus+, it's $129 USD. If we're using 60 W with the

power adapter it's $159, and if we're using the 210 AC adapter, it's $229 USD. Now, this switch is going to pair up very nicely with the cloud Gateway Ultra. I will be using this switch quite a bit, like I said, with cameras. They will be in the future coming out with a utility box for it for the outside, somewhat similar to the USW Flex box. Also, for mounting, we have our standard bracket, which we could mount to the wall, but it is also magnetic. So, if we want to put it on a filing cabinet or just stick it to the side of a rack, that will work perfectly fine. Now, there are some things that the switch Ultra doesn't do, and we'll go more into detail when we get it into our controller, and that's what we're going to do right now. Now, I've opened up the UniFi network controller on my phone, and you could see a new device has been found, and that's the cloud Gateway Ultra. We're going to do the initial setup on my phone so.

we're going to adopt the switch, and we're going to adopt the UK Ultra access point. After that, we're going to move to my computer. So what I'm going to do, I'm just going to click on set up. All right, now we need to go step by step, and it's going to give it a name. So it's saying Cloud Gateway Ultra. I'm just going to leave it at that as I'm fine with it, and I'm going to press next. Now it's testing out the speed limit, and I have a 3 Gbit connection going into this currently. And our speed test results come back at about 2300 megabits per second, and that WAN interface is 2.5 Gbits per second. And we'll press next. Now it's setting up the UniFi OS. It will maybe do a firmware update, and then it will complete. Once that's complete, we need to adopt the devices. And you can see that it is doing a firmware update. So it's saying about 5 minutes and 15 seconds once

that's done. We'll be back. The firmware update is now completed, and we can see at the top that there's two devices ready to be adopted. I'm going to click on adopt. We could also go over to our devices and see that they're adopting in there. So we have the USW Ultra 210 Watt and then the Swiss Army knife Ultra. Once these are done adopting, we're going to head over to my computer and then start looking at some of the settings. Now I've logged into the Cloud Gateway Ultra, and you could see that we have the UniFi Network Controller. And then we could install Interpace on here. And what Interpace is, it's kind of a local version of UniFi Design Center. I do have another video about that, and I'll put that down in the description below. But let's click in the UniFi Network Controller. First thing we're going to do, we're going to go over to the settings wheel, and we're going to change this to be dark mode. So I'll click on settings.

we'll go to system, and then we'll go over to dark mode, and we'll apply the changes. Now, this dashboard is going to look like any other UniFi OS dashboard. We have our Cloud Gateway Ultra at the top. You could see the Uplink is 2.5 gbit per second. The switch is connecting at 1 gig, and so is the access point. If we click on the Cloud Gateway Ultra, we're going to see the port manager, the overview insights, and then the settings. Clicking on the overview again, if we go to the port manager, and if we want to create a second WAN on here, we would have to go back to our settings. The port that we would put in our secondary WAN is Port 4. And I'm going to do that because we're going to do some policy-based routing. So, let's go down over to the settings, click on our internet, and then we could see secondary WAN. Currently, it's disabled, but if I hit this drop-down menu, and we'll click on Port 4 to enable it, and press apply.

changes. Now, I'm going to connect my secondary WAN in there, and we should see it come up. I'm just going to have this failover only, not distributed, because that is for load balancing. Now I have the secondary internet connection plugged in, and we could see it at 192.168.10.10, and my primary is 192.168.2.41. What we need to do, we need to create a couple networks. So, we'll click on networks. We have our default that's 192.168.1.0. We're going to create a new virtual Network. I'm going to call this one guest, and then we'll uncheck autoscale, and we'll just leave it at 3.1, and then the VLAN ID will be three, and we'll check off isolation so that the guest Network can't talk to anybody else. And the last Network that we're going to create is an IoT Network. We're going to uncheck autoscale. I'll leave it at 192.168.4.1, and I'll put the VLAN ID of four.

and and then we'll press add. Now, one thing you can't do with the USW Ultra is do aggregation Port. So we'll click on the switch, we'll go over to the port manager, and I'll click on two different ports. If we scroll down and we try to go to manual in the operation mode, you could see that it's grayed out. We can't change it at all, so we can't do aggregate links. That's not a huge deal to me as I already said I'm going to be using this as a camera switch, and I don't need those aggregate links. Now let's test out the policy-based routing. For this video, it's going to be pretty simple. This computer currently is on my main W, and I'll show you that by going what is my IP. Now you can see here that this IP ends in 134. I'm going to go ahead and set this up as a traffic route, and I'm going to route myself to the W 2, and we'll get another IP. So all we need

to do that, we go over to our settings, and then we're going to go to routing. Now we have traffic routes. I'm going to want all of my traffic to go over it. Or you could specify what you want. So by domain name, by IP address, and port. Or you could also do by region. But we want all my traffic for this computer to go down W 2. You may want something like this if you have a VoIP Network and you want the VoIP Network going down your W 2 all the time and your data traffic going down Wan one. So we're going to go to devices and network and select the device. The device we're going to have pushed through is Mac Telecom, which is this computer. Now we're going to select the interface as well. And if you set up a client VPN, you would see that in these interfaces. So something like NordVPN. If you want to route a network through it, this is the way that you would do it. But we're going to go to secondary Wan, and I'm going to say

Cody's computer through W 2. Once I do that entry, I'm just going to do an IP config space release, and then a renew, and we should be on that W 2 connection. Now, I haven't refreshed this page, but once we refresh, we should see a different ending IP address there. So let's go ahead and refresh, and now you can see that it changed to 62. So we are going down W 2, and that was very, very simple to set up. Now, another benefit to the Cloud Gateway Ultra, which I talked about in the beginning, is our suspicious activity. So if we go over to our security, and then we look under General, we have our suspicious activity, and we could go over to advance. It's going to select the networks. By default, it will take all of them, or you could edit which ones you want it to work on. So this on the back end is running Sak cotta, but we could look at the detection sensitivity, and then go to customize. We could see everything that we could check off, right.

now it's 17 out of 35, and 35 is the max. That's currently what's on the UDM Pro and the UDM SE. If we look at something like the UDR, it only has 11 different customizations. So for suspicious activity, this blows the UDR out of the water. Now I always recommend having notify and block on and on high. And we could also create some internal honeypots. So I'm going to do one for each one of my networks. And then we have ADD blocking, which is the exact same on any other UniFi OS console. We could click on it, select the networks we want it to run on. And then we have DNS Shield. So DNS Shield is DNS over https. I'll put this on auto, which will use Cloudflare, and it will also use Google. And we'll apply the changes. We can go over to the Gateway, and we could see some things here. So we could see the traffic that's been going through, and we could see our filtering. There's really not going to be

anything on this network right now. As I've just started using it, but if we want to see where our traffic is going, we could go to Geo. And currently, I have some stuff going to the United Kingdom for some reason, and then most of it is in North America. If you need to block a country, you could do it right from this page. So we could say Iceland, click on it, and then we could block them right here. If you want to unblock them, you could do that as well. But when we blocked a country, you could see these little lines going through them. Now let's do some testing. They say that we could do 1 Gbit routing with IDs and IPS turned on. So we'll do a speed test to see if we could get out to the internet and reach those speeds. And we'll also do an internal test going through open Speed tests that I have running on my zema board. But right now we have nothing turned on, so suspicious activity is off. Let's first run a speed test with it off.

suspicious activity off. We are getting 679 down and 944 up. Now let's try an internal test to open Speed Test. We'll go ahead and press start. Now with open speed test, I was getting 903 down and 987 up. Now we need to turn suspicious activity on and try that again. So I'm going to click on Advanced, and we're going to have this on as high as possible with notify and block, and press apply the changes. Now bringing up the speed test again, we should see similar results to what we were doing before. If it is true that I could route at a gigabit, now for whatever reason, we are getting a much higher download when we did have suspicious activity turned on to high. So we're getting 921 down and 944 up. Let's go ahead and we'll do that internal test with open Speed Test. I'll press refresh, and then we'll start the test, and we were getting 924 down, and we are getting 989 up, which is pretty much the exact same when it was turned off.

now the last thing that we're going to take a look at is the VPNs. And this could do any single VPN that the UDM Pro could do as well as the UDM. We have our teleport. We have our VPN server, which we could do WireGuard, OpenVPN, or L2TP. We have our VPN clients where we could do WireGuard or OpenVPN. This would be used with something like NordVPN to route your traffic through there. And then we have site-to-site VPNs. But the biggest one to me is the magic site-to-site that is done under the site manager. So let's take a look now under site manager. I'm going to do site magic. And this is where we could connect a couple consoles together with a few clicks. I'm going to locate my UDMC, which has a public IP, as well as this new Gateway. Now the next steps, we need to select the subnets that we want to talk between these two for the site-to-site VPN. On the Cloud Gateway Ultra, we'll select the

default, and then on the Mac Telecom SE, we'll do it the 64156. Once we do that, we need to press connect, and the VPN will be now. You can see that we have these green lights that mean it's connected. Let's bring open a command prompt, and I'm going to try to Ping the subnet of 10100101, and we should be able to. Now I'm going to type ping and then 10100101, and you can see that we are getting a reply. So this sight-to-sight VPN is now. That's going to be it for this video on the Cloud Gateway Ultra, as well as the Switch Ultra, and would I recommend both of these products? Well, I 100% would. The Cloud Gateway Ultra comes in at a great price at $129, which is really a steal if you're only looking to run UniFi network controller on it. This is all you would need. I could see people with a lot of remote offices taking full advantage of these with the Cloud Gateway Ultras. We could them all together using site magic, and we have the full suspicious activity.

now, like I said at the beginning, the Switch Ultra is going to be perfect. When they come out with that outdoor utility box, this will be my go-to camera setup for when I'm doing it for garages, or for gates, or in barns. Let me know what you think about both of these products down in the comments below. If you like this video, hit the thumbs up button. If you're new here, please subscribe and hit the bell icon.

Unifi Cloud Gateway Ultra

Making Tech videos and how-to, if you would like to contact me please send an email to cody@mactelecomnetworks.com

Also if you would like me to test and review any of your products send me an email cody@mactelecomnetworks.com

IF you would like to commission us for some work please visit www.mactelecomnetworks.com