Cloud Gateways | Topics | Ubiquiti Community

USW Pro Max 24 update failed.

danieldgarrett — Tue, 15 Apr 2025 13:18:26 GMT

New to UniFi, but I setup a Cloud Gateway Fiber (AT&T Fiber) and a USW Pro Max 24 along with two U7 Pros. Everything has adopted and is functioning well, but updates have not been working? The Cloud Gateway Fiber update finally installed last night, but the USW Prox Max 24 update fails and I can't seem to find much detail as to why?

The update is from 7.0.21 to 7.1.26 with just two notifications of "update failed." Any ideas?

Site-to-site (Site-magic) stuck on connecting - Wireguard port blocked?

kashefcom — Mon, 14 Apr 2025 07:50:56 GMT

I have 2 sites (UCG - Ultra and UCG-Max) both on the latest official releases where attempting to create a site magic site-to-site VPN results in a 'Connecting' state and never comes up.

I did some troubleshooting and did notice something peculiar - when I manually create a Wireguard VPN server on my UCG-Max the assigned port is not open. The connectivity is allowed through the firewall and I can create an OpenVPN server on the same site which works fine.

It looks like the wireguard server is not listening to connections on the UCG-Max and I believe site magic uses Wireguard, hence I suspect that is the cause site magic is unsuccessful.

Any suggestions on a remedy? I have previously attempted the below:

Removed any custom firewall rules, NAT, static routes, port forwarding etc. and attempted to delete and create
Rebooted the UCG-Max and UCG-Ultra
Tried different port numbers for wireguard

What am I missing: Moving pfSense into Aggregation Switch

minimoose — Sat, 08 Mar 2025 14:38:25 GMT

I've built out my home network over time and only recently started replacing old TPLink gear with Ubiquiti. I ran into a snag when trying to move my pfSense Protecli router and was hoping for some feedback on what I did wrong or don't understand.

I have comcast internet coming into the pfSense and the LAN from that going into an RJ45 port of a USW-Pro-24 switch. For numerous home lab reasons I have DHCP handled by the pfSense router, but DNS handled by pihole and Windows Server forwarding for the domain.

Once I moved to Ubiquiti access points I added a USW-Pro-24-POE to the mix.

In an effort to add 10Gb connectivity to my network for a VMware vSAN cluster among other things I added the USW-Aggregation which I then connected the PoE and Pro-24 up to via SFP+ DAC. No issues. Works great.

A small TPLink switch was also connected to the aggregation switch via 10Gtek 1.25/2.5/5/10G-T SFP+ to RJ45 CAT.6a Copper Transceiver set to 1Gb and worked without issue.

My understanding was that my router should also be going through the aggregation switch rather than hanging off the side of one of the switches so I got another SFP+ to RJ45 transceiver to go about making this change.

I shut down the pfSense and connected it to the aggregation switch via transceiver setting the port to switching and 1Gbps FDX. I powered it on and switches in unifi just started disconnecting. The switches were dropping to their default IP of 192.168.1.20 because they couldn’t see the DHCP server which is coming from pfSense.

I tried restarting the aggregation and PoE switches but still didn’t get a correct IP.

I tried disconnecting DAC connections between aggregation and other switches and re-connecting but that did nothing.

The second I unplugged the transceiver in port 1 on the aggregation switch it showed the right IP on the front screen and everything popped up in the UI. That transceiver goes to one of the vSAN nodes which has never had an issue with connectivity and after putting everything back the way it was before has been fine since.

My question is, should the pfSense router be going into the aggregation switch and if so how do I go about getting it moved over without everything failing as it did?

Thanks