유비쿼티 울트라 라인: 클라우드 게이트웨이 및 스위치 기능

유비퀴티 울트라 라인은 합리적인 가격으로 고속 멀티-WAN 기능을 제공하는 클라우드 게이트웨이 울트라 및 유니파이 스위치 울트라를 출시합니다.

### 유비쿼티의 클라우드 게이트웨이 울트라 및 스위치 울트라 소개
* 🌐  코디가 Ubiquiti Ultra 라인의 신제품 2종, 즉 Cloud Gateway Ultra와 Switch Ultra를 소개합니다.
* 💻  클라우드 게이트웨이 울트라는 멀티 기가비트 WAN, 다중 WAN 연결 지원, IDS 및 IPS를 통한 초당 1Gbit 라우팅, 35가지 IDS 및 IPS 카테고리, 4개의 1Gbit RJ45 포트가 특징입니다.
* 🔌  스위치 울트라는 7개의 1GB 포 플러스 포트, 다양한 전원 공급 옵션, 어그리게이션 포트 기능을 갖추고 있습니다.
* 📱  Cody가 UniFi 네트워크 컨트롤러에서 Cloud Gateway Ultra와 Switch Ultra의 초기 설정을 수행하여 기능과 설정을 보여줍니다.
* 🛡️  의심스러운 활동 탐지, 정책 기반 라우팅 설정, 네트워크 생성, IDS 및 IPS를 켠 상태에서 속도 테스트를 시연합니다.
* 🔒  Cloud Gateway Ultra는 텔레포트, VPN 서버, VPN 클라이언트 및 사이트 간 VPN을 포함한 VPN 기능도 제공합니다.
* 👍  Cody는 특히 원격 사무실과 카메라 설정에 적합한 기능과 성능을 갖춘 Cloud Gateway Ultra와 Switch Ultra를 모두 추천합니다.

hey everyone, Cody from Mac Telecom networks. Today, I'm super excited to introduce two new products from the Ubiquiti Ultra line. The first piece of equipment that we saw in the Ultra line was the UK Ultra or the Swiss army knife access point. But now that line is growing, and the first one that I'll introduce is the Cloud Gateway Ultra. This has multi-gigabit WAN, and we could do more than one WAN connection. We could add a second one if we have the UniFi LTE. That would count as a third WAN connection. Now, the Cloud Gateway Ultra only runs UniFi Network, and it could do 1 Gbit per second routing with IDS and IPS turned on. For the IDS and IPS, we have 35 different categories that we could choose from, which is the same as the UDMC and the UDM Pro. If we take, for example, the UDR, it only has 11 different categories. The Cloud Gateway Ultra has 4 1 Gbit RJ45 ports, and one of those could be remapped to our WAN.

this could also hold up to 30 network devices, so either switches or access points, and up to 300 clients. The price point on this is $129 USD. The next device that we're going to be taking a look at is the UniFi switch Ultra, which features 7 1 GB Poe plus ports. And we could power this switch up a few different ways. On the back of the switch, we have an RJ45 Poe ++ input. So if we use that, we're going to be getting 42 watts Poe availability. Now we also have a 60 W power adapter, which will give us 52 watts. And then we have a 210 W power adapter, which will give us a 202 watt power availability for our Poe ports. I'm going to be using the 210 W power supply as I'm going to be pairing this up with the cloud Gateway Ultra. Now for whichever way you're going to be powering up, there comes a different price point. If you're just using Poe Plus+, it's $129 USD. If we're using 60 W with the

power adapter it's $159, and if we're using the 210 AC adapter, it's $229 USD. Now, this switch is going to pair up very nicely with the cloud Gateway Ultra. I will be using this switch quite a bit, like I said, with cameras. They will be in the future coming out with a utility box for it for the outside, somewhat similar to the USW Flex box. Also, for mounting, we have our standard bracket, which we could mount to the wall, but it is also magnetic. So, if we want to put it on a filing cabinet or just stick it to the side of a rack, that will work perfectly fine. Now, there are some things that the switch Ultra doesn't do, and we'll go more into detail when we get it into our controller, and that's what we're going to do right now. Now, I've opened up the UniFi network controller on my phone, and you could see a new device has been found, and that's the cloud Gateway Ultra. We're going to do the initial setup on my phone so.

we're going to adopt the switch, and we're going to adopt the UK Ultra access point. After that, we're going to move to my computer. So what I'm going to do, I'm just going to click on set up. All right, now we need to go step by step, and it's going to give it a name. So it's saying Cloud Gateway Ultra. I'm just going to leave it at that as I'm fine with it, and I'm going to press next. Now it's testing out the speed limit, and I have a 3 Gbit connection going into this currently. And our speed test results come back at about 2300 megabits per second, and that WAN interface is 2.5 Gbits per second. And we'll press next. Now it's setting up the UniFi OS. It will maybe do a firmware update, and then it will complete. Once that's complete, we need to adopt the devices. And you can see that it is doing a firmware update. So it's saying about 5 minutes and 15 seconds once

that's done. We'll be back. The firmware update is now completed, and we can see at the top that there's two devices ready to be adopted. I'm going to click on adopt. We could also go over to our devices and see that they're adopting in there. So we have the USW Ultra 210 Watt and then the Swiss Army knife Ultra. Once these are done adopting, we're going to head over to my computer and then start looking at some of the settings. Now I've logged into the Cloud Gateway Ultra, and you could see that we have the UniFi Network Controller. And then we could install Interpace on here. And what Interpace is, it's kind of a local version of UniFi Design Center. I do have another video about that, and I'll put that down in the description below. But let's click in the UniFi Network Controller. First thing we're going to do, we're going to go over to the settings wheel, and we're going to change this to be dark mode. So I'll click on settings.

we'll go to system, and then we'll go over to dark mode, and we'll apply the changes. Now, this dashboard is going to look like any other UniFi OS dashboard. We have our Cloud Gateway Ultra at the top. You could see the Uplink is 2.5 gbit per second. The switch is connecting at 1 gig, and so is the access point. If we click on the Cloud Gateway Ultra, we're going to see the port manager, the overview insights, and then the settings. Clicking on the overview again, if we go to the port manager, and if we want to create a second WAN on here, we would have to go back to our settings. The port that we would put in our secondary WAN is Port 4. And I'm going to do that because we're going to do some policy-based routing. So, let's go down over to the settings, click on our internet, and then we could see secondary WAN. Currently, it's disabled, but if I hit this drop-down menu, and we'll click on Port 4 to enable it, and press apply.

changes. Now, I'm going to connect my secondary WAN in there, and we should see it come up. I'm just going to have this failover only, not distributed, because that is for load balancing. Now I have the secondary internet connection plugged in, and we could see it at 192.168.10.10, and my primary is 192.168.2.41. What we need to do, we need to create a couple networks. So, we'll click on networks. We have our default that's 192.168.1.0. We're going to create a new virtual Network. I'm going to call this one guest, and then we'll uncheck autoscale, and we'll just leave it at 3.1, and then the VLAN ID will be three, and we'll check off isolation so that the guest Network can't talk to anybody else. And the last Network that we're going to create is an IoT Network. We're going to uncheck autoscale. I'll leave it at 192.168.4.1, and I'll put the VLAN ID of four.

and and then we'll press add. Now, one thing you can't do with the USW Ultra is do aggregation Port. So we'll click on the switch, we'll go over to the port manager, and I'll click on two different ports. If we scroll down and we try to go to manual in the operation mode, you could see that it's grayed out. We can't change it at all, so we can't do aggregate links. That's not a huge deal to me as I already said I'm going to be using this as a camera switch, and I don't need those aggregate links. Now let's test out the policy-based routing. For this video, it's going to be pretty simple. This computer currently is on my main W, and I'll show you that by going what is my IP. Now you can see here that this IP ends in 134. I'm going to go ahead and set this up as a traffic route, and I'm going to route myself to the W 2, and we'll get another IP. So all we need

to do that, we go over to our settings, and then we're going to go to routing. Now we have traffic routes. I'm going to want all of my traffic to go over it. Or you could specify what you want. So by domain name, by IP address, and port. Or you could also do by region. But we want all my traffic for this computer to go down W 2. You may want something like this if you have a VoIP Network and you want the VoIP Network going down your W 2 all the time and your data traffic going down Wan one. So we're going to go to devices and network and select the device. The device we're going to have pushed through is Mac Telecom, which is this computer. Now we're going to select the interface as well. And if you set up a client VPN, you would see that in these interfaces. So something like NordVPN. If you want to route a network through it, this is the way that you would do it. But we're going to go to secondary Wan, and I'm going to say

Cody's computer through W 2. Once I do that entry, I'm just going to do an IP config space release, and then a renew, and we should be on that W 2 connection. Now, I haven't refreshed this page, but once we refresh, we should see a different ending IP address there. So let's go ahead and refresh, and now you can see that it changed to 62. So we are going down W 2, and that was very, very simple to set up. Now, another benefit to the Cloud Gateway Ultra, which I talked about in the beginning, is our suspicious activity. So if we go over to our security, and then we look under General, we have our suspicious activity, and we could go over to advance. It's going to select the networks. By default, it will take all of them, or you could edit which ones you want it to work on. So this on the back end is running Sak cotta, but we could look at the detection sensitivity, and then go to customize. We could see everything that we could check off, right.

now it's 17 out of 35, and 35 is the max. That's currently what's on the UDM Pro and the UDM SE. If we look at something like the UDR, it only has 11 different customizations. So for suspicious activity, this blows the UDR out of the water. Now I always recommend having notify and block on and on high. And we could also create some internal honeypots. So I'm going to do one for each one of my networks. And then we have ADD blocking, which is the exact same on any other UniFi OS console. We could click on it, select the networks we want it to run on. And then we have DNS Shield. So DNS Shield is DNS over https. I'll put this on auto, which will use Cloudflare, and it will also use Google. And we'll apply the changes. We can go over to the Gateway, and we could see some things here. So we could see the traffic that's been going through, and we could see our filtering. There's really not going to be

anything on this network right now. As I've just started using it, but if we want to see where our traffic is going, we could go to Geo. And currently, I have some stuff going to the United Kingdom for some reason, and then most of it is in North America. If you need to block a country, you could do it right from this page. So we could say Iceland, click on it, and then we could block them right here. If you want to unblock them, you could do that as well. But when we blocked a country, you could see these little lines going through them. Now let's do some testing. They say that we could do 1 Gbit routing with IDs and IPS turned on. So we'll do a speed test to see if we could get out to the internet and reach those speeds. And we'll also do an internal test going through open Speed tests that I have running on my zema board. But right now we have nothing turned on, so suspicious activity is off. Let's first run a speed test with it off.

suspicious activity off. We are getting 679 down and 944 up. Now let's try an internal test to open Speed Test. We'll go ahead and press start. Now with open speed test, I was getting 903 down and 987 up. Now we need to turn suspicious activity on and try that again. So I'm going to click on Advanced, and we're going to have this on as high as possible with notify and block, and press apply the changes. Now bringing up the speed test again, we should see similar results to what we were doing before. If it is true that I could route at a gigabit, now for whatever reason, we are getting a much higher download when we did have suspicious activity turned on to high. So we're getting 921 down and 944 up. Let's go ahead and we'll do that internal test with open Speed Test. I'll press refresh, and then we'll start the test, and we were getting 924 down, and we are getting 989 up, which is pretty much the exact same when it was turned off.

now the last thing that we're going to take a look at is the VPNs. And this could do any single VPN that the UDM Pro could do as well as the UDM. We have our teleport. We have our VPN server, which we could do WireGuard, OpenVPN, or L2TP. We have our VPN clients where we could do WireGuard or OpenVPN. This would be used with something like NordVPN to route your traffic through there. And then we have site-to-site VPNs. But the biggest one to me is the magic site-to-site that is done under the site manager. So let's take a look now under site manager. I'm going to do site magic. And this is where we could connect a couple consoles together with a few clicks. I'm going to locate my UDMC, which has a public IP, as well as this new Gateway. Now the next steps, we need to select the subnets that we want to talk between these two for the site-to-site VPN. On the Cloud Gateway Ultra, we'll select the

default, and then on the Mac Telecom SE, we'll do it the 64156. Once we do that, we need to press connect, and the VPN will be now. You can see that we have these green lights that mean it's connected. Let's bring open a command prompt, and I'm going to try to Ping the subnet of 10100101, and we should be able to. Now I'm going to type ping and then 10100101, and you can see that we are getting a reply. So this sight-to-sight VPN is now. That's going to be it for this video on the Cloud Gateway Ultra, as well as the Switch Ultra, and would I recommend both of these products? Well, I 100% would. The Cloud Gateway Ultra comes in at a great price at $129, which is really a steal if you're only looking to run UniFi network controller on it. This is all you would need. I could see people with a lot of remote offices taking full advantage of these with the Cloud Gateway Ultras. We could them all together using site magic, and we have the full suspicious activity.

now, like I said at the beginning, the Switch Ultra is going to be perfect. When they come out with that outdoor utility box, this will be my go-to camera setup for when I'm doing it for garages, or for gates, or in barns. Let me know what you think about both of these products down in the comments below. If you like this video, hit the thumbs up button. If you're new here, please subscribe and hit the bell icon.

Unifi Cloud Gateway Ultra

Making Tech videos and how-to, if you would like to contact me please send an email to cody@mactelecomnetworks.com

Also if you would like me to test and review any of your products send me an email cody@mactelecomnetworks.com

IF you would like to commission us for some work please visit www.mactelecomnetworks.com

Mactelecom Networks

유비쿼티 울트라 라인의 신제품을 소개합니다.

클라우드 게이트웨이 울트라는 멀티 기가비트 WAN, 다중 WAN 연결 지원, 초당 1Gbit 라우팅, 129달러의 가격대를 제공합니다.

UniFi 스위치 울트라는 7개의 1GB Poe 플러스 포트, 다양한 가격대의 여러 전원 공급 옵션, 다목적 마운팅 기능을 제공합니다.

이 두 장치의 조합은 고성능과 유연성을 갖춘 네트워크에 전원을 공급하는 데 이상적입니다.

Cloud Gateway Ultra 설정하기: 단계별 가이드

이 프로세스에는 Cloud Gateway Ultra의 이름을 지정하고, 속도 테스트를 수행하며, UniFi OS를 설정하는 작업이 포함됩니다.

다음 단계에는 디바이스 채택, 펌웨어 업데이트, 정책 기반 라우팅을 위한 보조 WAN 활성화와 같은 구성 변경이 포함됩니다.

보조 WAN 설정 및 가상 네트워크 만들기

이 프로세스에는 장애 조치를 위해 보조 WAN을 연결하고, 액세스가 제한된 게스트 네트워크를 만들고, IoT 네트워크를 설정하는 작업이 포함됩니다.

USW Ultra 스위치는 집계 포트를 지원하지 않으므로 카메라 스위치로 사용하기에는 문제가 되지 않습니다.

그런 다음 정책 기반 라우팅을 테스트하고 특정 컴퓨터에서 보조 WAN으로 트래픽을 라우팅하도록 구성하여 트래픽 분배를 사용자 지정할 수 있습니다.

W 2 연결 및 클라우드 게이트웨이 울트라 기능 설정하기

Cody는 IP 구성을 해제하고 갱신하여 W 2 연결을 설정하여 최종 IP 주소가 달라집니다.

Cloud Gateway Ultra는 사용자 지정 가능한 설정으로 고급 의심스러운 활동 탐지 기능을 제공하며, 사용자 지정 측면에서 UDR보다 뛰어난 성능을 제공합니다.

또한 내부 허니팟 추가 기능, HTTPS를 통한 DNS를 위한 DNS Shield, 특정 국가로의 트래픽을 추적 및 차단하는 기능도 제공합니다.

그런 다음 IDS 및 IPS를 켠 상태에서 1Gbit 라우팅을 달성할 수 있는지 확인하기 위해 테스트를 수행합니다.

네트워크 속도 및 VPN 문제 해결

속도 테스트 중 다운로드 및 업로드 속도에 변동이 있었으며, 특히 의심스러운 활동 설정을 전환할 때 속도가 더 빨라졌습니다.

의심스러운 활동을 켜면 다운로드 속도가 훨씬 빨라졌습니다.

UDM Pro는 VPN 서버, VPN 클라이언트, 사이트 간 VPN 등 다양한 VPN 옵션을 제공하며, 특히 주목할 만한 기능은 사이트 관리자에서 사이트 간 구성을 마술처럼 설정할 수 있다는 점입니다.

클라우드 게이트웨이 울트라 및 스위치 울트라 제품 검토

클라우드 게이트웨이 울트라는 129달러라는 저렴한 가격으로 UniFi 네트워크 컨트롤러를 실행할 수 있어 원격 사무실에 이상적입니다.

스위치 울트라는 차고, 대문, 헛간과 같은 실외 환경에서 사용할 수 있다는 점에서 높은 평가를 받고 있으며, 곧 출시될 실외용 유틸리티 박스에 대한 기대감도 높습니다.

이 제품은 여러 원격 사무실에서 사용할 것을 권장하며, 시청자는 댓글 섹션에서 자신의 생각과 피드백을 공유해 주시기 바랍니다.