Unifi seadme kasutamine: erinevus redaktsioonide vahel
Allikas: Imre kasutab arvutit
Mine navigeerimisribaleMine otsikasti
(→Switch) |
|||
| 444. rida: | 444. rida: | ||
USWProMax24-01-US2.7.2.123# |
USWProMax24-01-US2.7.2.123# |
||
</pre> |
</pre> |
||
| + | |||
| + | ===Ruuter-tulemüür - UCG (Unifi Cloud Gateway)=== |
||
| + | |||
| + | TODO |
||
===Kaughaldus=== |
===Kaughaldus=== |
||
Redaktsioon: 11. juuli 2026, kell 21:51
Sissejuhatus
Unifi on tagasihoidliku nimetamisega
- unifi (firma nimi) - unified - ühendatud üheks tervikuks
- ubiquiti (toote liini nimi) - ubiquitous - igal pool korraga olev
Mõisted
- Unifi OS Server - podman põhine lahendus, kus töötavad erinevad Application rakendused
- Network Application - Unifi lahenduse komponent
- Inner Space Application - Unifi lahenduse komponent
Tööpõhimõte
Unifi toodab mitmeid valdkondi katvaid lahendusi (st riistvara, tarkvara jne)
Start Here -> Site Map -> Expand
kus
- wifi access point
- valvekaamera ja salvestusseade
- tulemüür
- ethernet switch
- sissepääsusüsteem (füüsilisele hoonele)
- igasugused targa maja liidestused jms
Unifi järgib nö moodsat halduse paradima
- esmalt tekitatakse kasutaja isanda juurde, https://ui.com/ osakonda
- esmalt paigaldatakse nutitelefoni app
- avatakse pakend ja ühendatakse seade toitesse
- esmasel käivitusel on seada väga usaldav ja nutitelefoni app saab temaga kontakti üle blootooth-wifi-direct-vms kanali
- seadmele tehakse esmane seadistus, muu hulgas seatakse piirang haldusliidesele
- seade leiab endale kohtvõrku kasutades võrguseadistuse ja võtab ühendust oma https://unifi.ui.com/ isandaga
- logides sisse https://unifi.ui.com/ osakonda telefonist saab seadme registreerida: nutitelefonil on usalduslik kanal ühelt poolt seadmega ja teiselt poolt isandaga
- seadet saab hallata https://unifi.ui.com/ pealt
- disclaimer - tundub, et see wifi-bluetooth jne on pigem teooria - praktiliselt on ikka parim kui seade kohtab alustuseks dhcp serverit ja asub kontrolleriga samas ip subnetis
Tavaliselt on vajalik kohalik nö Unifi kontroller, mis töötab seadmete ja unifi isanda vahel vahendajana, nt wifi juhtumil
unifi isand - https://unifi.ui.com/
_______
| |
| |
|_______|
|
|
internet
|
___|___
| | 3rd party tulemüür - nt OpenBSD
| |
dhcpd |_______| 192.168.10.254 (vlan10), 192.168.17.254 (vlan17)
|
| 192.168.10.0/24, 192.168.17.0/24
-----|-----------|---------------------|-------
| |
| |
___|___ ___|___
kontroller | | | | unifi füüsiline seade
192.168.10.56 | | | | 192.168.10.55
|_______| |_______|
|
|
----|------- raadio, wifi 2.4, 5, 6 GHz ------ 192.168.17.0/24
kus
- unifi füüsilisest seadmest väljuvad ainult vlan siltidega paketid, vlan 10 ja vlan 17
- vlan 10 on haldusliiklus (kontakt 192.168.10.56 ja .55 vahel)
- vlan 17 on wifi teenusliiklus
- saab moodustada järgmisi wifi teenusliikluse subnette ja levialasid juurde
- wifi subnettide võrgulüüsiks on OpenBSD tulemüür
- isand saab kontakti nö tagurpidi teel, st kontroller hoiab pidevalt võrguühendust üleval unifi.ui.com osakonnaga, ja üle sama ühenduse juhib isand kontrollerit
- kontroller propageerib seadistusi unifi füüsilisele seadmele
- füüsilise seadme registreerimist kontrolleriga nimetatakse 'adopteerimiseks'
Kontrolleri ettevalmistamine
Väited
- kontrolleri ettevalmistamine ja kasutamine üldiselt toimub ühteviis sõltumata konkreetsest füüsiliste seadmete komplektist
- kontrolleri tarkvara sisaldab erinevate seadmete tuge (wifi, switch jne), lihtsalt osa menüü valikuid on mitte-aktiivsed kui vastav seade puudub
Kontrolleri kasutamine toimub 'UniFi OS Server' kujul, juhend paistab selline
kus
- 20206 aasta kevadel tuleb tegeleda 'UniFi OS Server', st mitte 'UniFi Network Server' vms lahendusega
riistvara nõuded paistavad olema 2026 kevadel v. 5.1.15 puhul
You are about to install UniFi OS Server version 5.1.15. Proceed? (y/N): y INFO Installing UniFi OS Server 5.1.15... WARN +------------------------------------------------------------+ WARN | WARNING: Insufficient swap space detected | WARN | | WARN | It is recommended for system stability to have a minimal | WARN | amount of swap configured. | WARN | | WARN | Swap recommendations: | WARN | - Minimum: 2 GiB | WARN | - Consider increasing further if running other RAM- | WARN | intensive applications | WARN | - Optionally lower swappiness to 10-20 | WARN | | WARN +------------------------------------------------------------+ INFO Checking compatible podman runtime available... INFO Checking disk space for required directories... WARN - /home/: Requires 15.00 GB, available 9.22 GB INFO - /var/lib/uosserver: Requires 1.00 GB, available 7.67 GB INFO - /usr/local/bin/: Requires 0.12 GB, available 7.67 GB INFO - /tmp/: Requires 2.00 GB, available 2.89 GB INFO - /var/tmp/: Requires 2.00 GB, available 7.67 GB ERROR Failed to install UniFi OS Server err=Insufficient disk space for install. Free up space.
Unifi OS server ettevalmistamiseks on vajalik operatsioonisüsteem podman viisil konteineri pidamiseks, nt Debian v. 13
- 2026 aasta kevadel pigem toetab Unifi OS Server slirp4netns põhist võrku; aga asub toetama ka passt põhist
- tundub, et 2026 aasta alguses on mõne operatsioonisüsteemi koosseisus podman v. 5, ja enamusel podman v. 4, eelistada uuemat
podman ja slirp4netns paigaldamiseks sobib öelda, igaks juhuks muudatuste kehtestamiseks reboot
# apt-get install podman slirp4netns -d # reboot
Seejärel
root@unifi-oss:~/20260218# ./1856-linux-x64-5.0.6-33f4990f-6c68-4e72-9d9c-477496c22450.6-x64 You are about to install UOS Server version 5.0.6. Proceed? (y/N): y INFO Installing UOS Server 5.0.6... INFO Checking compatible podman runtime available... INFO Checking disk space for required directories... INFO - /home/: Requires 15.00 GB, available 27.04 GB INFO - /var/lib/uosserver/: Requires 1.00 GB, available 27.04 GB INFO - /usr/local/bin/: Requires 0.12 GB, available 27.04 GB WARN - /tmp/: Requires 2.00 GB, available 0.96 GB INFO - /var/tmp/: Requires 2.00 GB, available 27.04 GB INFO All disk space requirements met. INFO Checking ports... INFO Adding uosserver user and group... INFO Creating /var/lib/uosserver dir... INFO Creating /var/lib/uosserver/logs dir... INFO Creating /var/lib/uosserver/bin dir... ... INFO Waiting for container 'uosserver' to start (timeout: 60s) INFO Container 'uosserver' is running. (elapsed: 0.0s) INFO Waiting for systemd to be ready (timeout: 60s) INFO Systemd is ready. (elapsed: 7.3s) INFO Starting uosserver systemd service... INFO Waiting for UOS Server to start... WARN Timeout: Unifi-core did not start within 60 seconds. WARN !!! INSTALLATION COMPLETE !!! To grant permission for a user to run 'uosserver' commands: -> Add the user to the 'uosserver' group: usermod -aG uosserver <username> -> Then log out and log back in for the changes to take effect. To get started with available commands, run: uosserver help WARNING: UOS Server startup timed out after 60 seconds. On low-powered devices, the web interface can take a few minutes to be accessible. Try opening it at: 10.0.9.56:11443
Tulemusena on paista
root@unifi-oss:~# su - uosserver $ podman ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 0e99a614a4dd docker.io/library/uosserver:0.0.54 /root/uos-entrypo... 12 days ago Up 3 minutes (healthy) 0.0.0.0:5005->5005/tcp, 0.0.0.0:5671->5671/tcp, 0.0.0.0:6789->6789/tcp, 0.0.0.0:8080->8080/tcp, 0.0.0.0:8443-8444->8443-8444/tcp, 0.0.0.0:8880-8882->8880-8882/tcp, 0.0.0.0:9543->9543/tcp, 0.0.0.0:11084->11084/tcp, 0.0.0.0:11443->443/tcp, 0.0.0.0:3478->3478/udp, 0.0.0.0:5514->5514/udp, 0.0.0.0:10003->10003/udp uosserver $ podman images REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/library/uosserver 0.0.54 0faf0b7f0e4e 3 months ago 2.03 GB $ podman network ls NETWORK ID NAME DRIVER 2f259bab93aa podman bridge $ podman volume ls DRIVER VOLUME NAME local uosserver_persistent local uosserver_var_log local uosserver_data local uosserver_srv local uosserver_var_lib_unifi local uosserver_var_lib_mongodb local uosserver_etc_rabbitmq_ssl
Failisüsteemis olulised muudatused
root@unifi-oss:~# ls -ld /var/lib/uosserver/bin/* -rwxr-xr-x 1 uosserver uosserver 3720952 Jun 19 02:02 /var/lib/uosserver/bin/discovery -rwxr-xr-x 1 uosserver uosserver 330544 Jun 19 02:02 /var/lib/uosserver/bin/pasta -rwxr-xr-x 1 uosserver uosserver 4101360 Jun 19 02:02 /var/lib/uosserver/bin/uosserver-service -rwxr-xr-x 1 uosserver uosserver 6889136 Jun 19 02:02 /var/lib/uosserver/bin/updater-service
ning
root@unifi-oss:~# ls -ld /var/lib/uosserver/logs/* -rw-r--r-- 1 root root 14230 Jun 19 02:03 /var/lib/uosserver/logs/installer.log -rw-r--r-- 1 uosserver uosserver 2808 Jun 19 02:03 /var/lib/uosserver/logs/uos-discovery-client.log -rw-r--r-- 1 uosserver root 0 Jun 19 02:02 /var/lib/uosserver/logs/uosserver.log -rw-r--r-- 1 uosserver uosserver 16527 Jun 19 02:03 /var/lib/uosserver/logs/uosserver-service.log -rw-r--r-- 1 root root 11389 Jun 19 02:03 /var/lib/uosserver/logs/updater-service.log
Passt töötamine toimub nö standardsel viisil
root@unifi-oss:~# netstat -lnpt Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:11002 0.0.0.0:* LISTEN 1779589/discovery tcp 0 0 127.0.0.1:11084 0.0.0.0:* LISTEN 1779375/pasta tcp6 0 0 :::6789 :::* LISTEN 1779375/pasta tcp6 0 0 :::8080 :::* LISTEN 1779375/pasta tcp6 0 0 :::11443 :::* LISTEN 1779375/pasta tcp6 0 0 :::28082 :::* LISTEN 1779375/pasta tcp6 0 0 :::8881 :::* LISTEN 1779375/pasta tcp6 0 0 :::8880 :::* LISTEN 1779375/pasta tcp6 0 0 :::8882 :::* LISTEN 1779375/pasta tcp6 0 0 :::8444 :::* LISTEN 1779375/pasta tcp6 0 0 :::5671 :::* LISTEN 1779375/pasta tcp6 0 0 :::9543 :::* LISTEN 1779375/pasta root@unifi-oss:~# ps aux | grep pasta uosserv+ 1779375 0.0 0.4 193724 25948 ? Ss Jun19 3:38 /var/lib/uosserver/bin/pasta --config-net --ns-ifname eth0 .. root@unifi-oss:~# /usr/bin/pasta --version pasta 0.0~git20250503.587980c-2+deb13u1 Copyright Red Hat GNU General Public License, version 2 or later <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. root@unifi-oss:~# /var/lib/uosserver/bin/pasta --version pasta 2026_05_07.1afd4ed Copyright Red Hat GNU General Public License, version 2 or later <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.
kus
- uosserver podman konteiner kasutab mitte süsteemset, aga kaasa toodud passt tarkvara
ning
root@unifi-oss:~# ip addr show dev ens18
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether bc:24:11:2a:83:91 brd ff:ff:ff:ff:ff:ff
altname enp6s18
altname enxbc24112a8391
inet 192.168.10.56/24 brd 192.168.10.255 scope global ens18
valid_lft forever preferred_lft forever
inet6 fe80::be24:11ff:fe2a:8391/64 scope link proto kernel_ll
valid_lft forever preferred_lft forever
root@unifi-oss:~# su - uosserver
$ bash
uosserver@unifi-oss:~$ podman exec -ti 38 ip addr show dev eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 65520 qdisc fq_codel state UNKNOWN group default qlen 1000
link/ether 4a:ac:cc:6a:ee:63 brd ff:ff:ff:ff:ff:ff
inet 192.168.10.56/24 brd 192.168.10.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::48ac:ccff:fe6a:ee63/64 scope link nodad
valid_lft forever preferred_lft forever
kus
- passt abiga luuakse konteineris töötavatele protsessidele ettekujutus, et nad töötavad host peal (ip aadress on sama, aga mac aadress erinev)
Wifi
Väited
- unifi wifi access point toimib vaid nö L2 kihi seadmena
- unifi wifi ap ei tee nat teisendust
- võimaldab seadistada mitu wifi leviala, igale vastab oma vlan
- unifi wifi ap kasutamiseks peab olema tema ja interneti vahel mingi tulemüür, nt üldotstarbeline OpenBSD või unifi enda tootevalikust 'gateway' seade
- dhcp server asub tulemüüris (mitte unifi wifi ap peal)
- unifi wifi ap oskab tagged vlan liiklust sh halduse liiklus
- unifi wifi ap ainuke ip aadress on tema haldusliidese aadress
- unifi wifi ap halduseks ei ole ta ise (st temas sisalduv veebiliides vms, aga unifi-os-server peal töötav network rakendus
- unifi wifi ap seadme riistvara on arm põhine
- unifi wifi ap seadme operatsioonisüsteem on OpenWrt variatsioon
Ühe adopteeritud wifi ap seadmega kontrolleri webgui ja isanda veebikoha kaudu, paistab nii
kus
- vasakul all on nö hammasratas valitud - Settings - st see on unifi lahenduse üldiste seadistuste osakond (mitte konkreetse unifi ap seadme)
- vlan10 kaudu toimub unifi ap seadme haldus
- vlan17 on wifi teenusliiklus
- default vlan1 ei ole praktiliselt kasutuses
- brauseris on aadress https://unifi.ui.com/
Seadme fookuses paistab webgui lokaalselt selline
kus
- brauseris on aadress https://192.168.10.56:11443/ (11443 on variatsioon 443 -> 8443 -> 11443)
- paremal all on füüsilise unifi ap seadme ssh ligipääsu info
% ssh z3gCdQ1dXdj@192.168.10.55
The authenticity of host '192.168.10.55 (192.168.10.55)' can't be established.
ED25519 key fingerprint is: SHA256:oWSfz1QZHgSZL0a3czyXfIdX9GglLSibB+29Qk63Pwo
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.10.55' (ED25519) to the list of known hosts.
z3gCdQ1dXdj@192.168.10.55's password:
********************************* NOTICE **********************************
* By logging in to, accessing, or using any Ubiquiti product, you are *
* signifying that you have read our Terms of Service (ToS) and End User *
* License Agreement (EULA), understand their terms, and agree to be *
* fully bound to them. The use of SSH (Secure Shell) can potentially *
* harm Ubiquiti devices and result in lost access to them and their data. *
* By proceeding, you acknowledge that the use of SSH to modify device(s) *
* outside of their normal operational scope, or in any manner *
* inconsistent with the ToS or EULA, will permanently and irrevocably *
* void any applicable warranty. *
***************************************************************************
___ ___ .__________.__
| | |____ |__\_ ____/__| PRODUCT: U7-Pro
| | / \| || __) | | MAC: 1c:6a:1b:96:ee:e5
| | | | \ || \ | | VERSION: 8.5.21+18681.260330.1557
|______|___| /__||__/ |__|
|_/
Ubiquiti Inc. (c) 2010-2026 https://www.ui.com
z3gCdQ1dXdj@U7Pro:~# uptime
23:10:28 up 4:27, load average: 1.06, 1.03, 1.00
z3gCdQ1dXdj@U7Pro:~# df -h -T
Filesystem Type Size Used Available Use% Mounted on
tmpfs tmpfs 438.4M 75.3M 363.1M 17% /
tmpfs tmpfs 438.4M 1.3M 437.1M 0% /tmp
/dev/mmcblk0p7 ext4 1.9G 3.2M 1.8G 0% /tmp/log
/dev/mmcblk0p3 squashfs 27.0M 27.0M 0 100% /lib/firmware/wififw
tmpfs tmpfs 512.0K 0 512.0K 0% /dev
z3gCdQ1dXdj@U7Pro:~# uname -a
Linux U7Pro 5.4.213 #0 SMP PREEMPT Mon Jul 22 20:17:07 2024 armv7l GNU/Linux
z3gCdQ1dXdj@U7Pro:~# cat /etc/os-release
NAME="OpenWrt"
VERSION="23.05-SNAPSHOT"
ID="openwrt"
ID_LIKE="lede openwrt"
PRETTY_NAME="OpenWrt 23.05-SNAPSHOT"
VERSION_ID="23.05-snapshot"
HOME_URL="https://openwrt.org/"
BUG_URL="https://bugs.openwrt.org/"
SUPPORT_URL="https://forum.openwrt.org/"
BUILD_ID="r0-acca0cea06"
OPENWRT_BOARD="ipq53xx/ipq53xx_32"
OPENWRT_ARCH="arm_cortex-a7_neon-vfpv4"
OPENWRT_TAINTS="no-all busybox"
OPENWRT_DEVICE_MANUFACTURER="OpenWrt"
OPENWRT_DEVICE_MANUFACTURER_URL="https://openwrt.org/"
OPENWRT_DEVICE_PRODUCT="Generic"
OPENWRT_DEVICE_REVISION="v0"
OPENWRT_RELEASE="OpenWrt 23.05-SNAPSHOT r0-acca0cea06"
Switch
Kaks switch unifi lahenduse lokaalse kontrolleri vaade paistab selline
kus
- ees ootab tarkvara-firmware uuendus
USWProMax24-01-US2.7.2.123# cli USWProMax24-01# enable Unknown command USWProMax24-01# show running-config SYSTEM CONFIG FILE ::= BEGIN ! System Description: Unifi Switch UBNT-USPM24 Switch ! System Version: v3.5.0.3 ! System Name: USWProMax24-01 ! System Up Time: 0 days, 15 hours, 39 mins, 57 secs ... USWProMax24-01# exit USWProMax24-01> exit Terminated USWProMax24-01-US2.7.2.123#
Ruuter-tulemüür - UCG (Unifi Cloud Gateway)
TODO
Kaughaldus
Isanda veebikohas
Isanda veebikoht paistab selline peale sisselogimist, nö avapaneel (Site Manager)
kus
- paremal üleval on kahele kontrollerile vastavad nö ristkülikud, ('UOS Server - AUUL' ja 'UOS Server - NPL')
Nutitelefoni app
TODO
Tarkvara uuendamine
Uuendatav materjal
- unifi os server (ehk unifi kontroller platvorm) - 2026 suvel on versioon 5.1.19
- unifi application - os server peal töötavad rakendused, nt 'Network' rakendus (2026 suvel on versioon 10.4.57)
- unifi füüsilise seadme firmware
Tööpõhimõte
Väited
- unifi os server lahendus töötab konteinerina, lisaks muule on lahenduse koosseisu webgui liides (https://x.x.x.x:11443)
- unifi os server lahendus võimaldab lahendust ennast uuendada
- unifi os server lahenduse uuendamine paistab selles mõttes vastuolulisena, et kuidas konteineri seest saab konteinerit uuendada
Tundub, et uuendamine on korraldatud umbes selliselt
- konteineri sees olev protsess saab teada, et isandal on uus versioon unifi-os-server tarkvarast
- konteineri sees olev protsess kopeerib isanda juurest uue versiooni ära
- uuendamise võimalusest saab podhost peal töötab systemd unit 'uosserver-updater' teada
- host peal käivitatakse konteineri uuendamine
host ja konteiner vahelisele kontaktile viitavad
TODO
Misc
teenuse unit
root@unifi-oss:~# systemctl status uosserver
● uosserver.service - UniFi OS Server Service
Loaded: loaded (/etc/systemd/system/uosserver.service; enabled; preset: enabled)
Active: active (running) since Fri 2026-06-19 02:03:03 EEST; 5 days ago
Invocation: 925dbe158a7741058f2e325d6f13eb12
Main PID: 1779582 (uosserver-servi)
Tasks: 8 (limit: 6921)
Memory: 11M (peak: 22.2M)
CPU: 1min 48.322s
CGroup: /system.slice/uosserver.service
├─1779582 /var/lib/uosserver/bin/uosserver-service
└─1779589 /var/lib/uosserver/bin/discovery
Jun 19 02:03:03 unifi-oss uosserver-service[1779582]: INFO Waiting for systemd to be ready (timeout: 60s)
Jun 19 02:03:03 unifi-oss uosserver-service[1779582]: INFO Systemd is ready. (elapsed: 0.0s)
Jun 19 02:03:13 unifi-oss uosserver-service[1779582]: INFO Attempting to start container...
Jun 19 02:03:13 unifi-oss uosserver-service[1779582]: INFO Checking container status and starting if needed...
Jun 19 02:03:13 unifi-oss uosserver-service[1779582]: INFO Starting existing container: uosserver
Jun 19 02:03:13 unifi-oss uosserver-service[1779582]: INFO Container start command successful
Jun 19 02:03:13 unifi-oss uosserver-service[1779582]: INFO Container start attempted successfully
Jun 19 02:03:20 unifi-oss uosserver-service[1779582]: INFO Supervisor connected
Jun 19 02:03:20 unifi-oss uosserver-service[1779582]: INFO Received: getPorts msg: Message { header: Json(Object {"action": String("getPorts"), "id": String("450bf6c7-2f55-423c-ba07-13b59d6eff1c>
Jun 19 02:03:20 unifi-oss uosserver-service[1779582]: INFO Sending ports configuration...
kus
- peamiselt unitiga seotud protsessid käivitavad sobiva kasutajana (uosserver) podman konteineri
ning uuendamise unit
root@unifi-oss:~# systemctl status uosserver-updater
● uosserver-updater.service - UniFi OS Server Updater Service
Loaded: loaded (/etc/systemd/system/uosserver-updater.service; enabled; preset: enabled)
Active: active (running) since Fri 2026-06-19 02:03:03 EEST; 5 days ago
Invocation: 0096ef565e4147f99057abbb29e1d56a
Main PID: 1779616 (updater-service)
Tasks: 4 (limit: 6921)
Memory: 4.7M (peak: 5.1M)
CPU: 6ms
CGroup: /system.slice/uosserver-updater.service
└─1779616 /var/lib/uosserver/bin/updater-service
Jun 19 02:03:03 unifi-oss systemd[1]: Started uosserver-updater.service - UniFi OS Server Updater Service.
Jun 19 02:03:03 unifi-oss updater-service[1779616]: INFO Starting...
Jun 19 02:03:03 unifi-oss updater-service[1779616]: INFO Updater service listening...
