Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - good-for-nothing

#1
General Discussion / Re: unifi controller cant adopt
October 08, 2020, 05:14:29 PM
Hi,

and if you manually set the controller IP on your AP's ? To do so, SSH into the AP's and then:

mca-cli
set-inform http://<mgmt_ip>:8080/inform

to skip the entire auto-detection thing completely. Unlike the documentation states, I highly recommend to not run the AP's with DHCP and auto channel disabled as that's a pain in the arse, better use static IP's for both the AP's and the controller and, if you wish, you may enable auto channel.
#2
Hi Ho @world,

I'm running a Juniper Firewall and a (non-Juniper) Switch, using a subscription based IDP on the Juniper. Since the license is running out, I'm thinking about not renewing the service and rather put an OPNsense appliciance between the switch and the router.
Though, before spending some money for some hardware box, the setup I've in mind would be something like:

Router <- -> OPNsense <- -> Switch

Where OPNsense runs in bridge mode with e.g. Suricata only. So I move the IDP service from the router one step back into the network.
So far, bridge mode is documented, but does OPNsense support aggregated interfaces + bridge + e.g. Suricata ? So I've 2 links into each direction, right now it's 2 SFP links between switch and router.
If it's some "playing" with the CLI, no problem as I'm no newbie with FreeBSD.