07 - Client VPN Setup - UDM-Pro Complete Setup 2021

The UniFi Dream Machine Pro (UDM-Pro) is an excellent home user router/firewall/switch/surveillance system device. The UDM-Pro runs the UniFi OS and includes UniFi Network, UniFi Protect, UniFi Access, and UniFi Talk bundled in as applications.

In this series, we will dig deep into how to set up the UDM-Pro and related applications mostly focusing on Network and Protect.

In part 07 we're going to set up a remote client VPN so that you can securely connect into your UDM-Pro networks from the outside world.

Timeline:

00:00 Intro
01:54 Configure the VPN network in UniFi Network
07:50 Set up your client device to connect to the VPN
10:43 Testing the VPN connection

---------------------

Follow me on Twitter: @crosstalksol

Connect with Chris:
Twitter: @CrosstalkSol

[matejfoltyn]

As a new Unifi user I cannot help you enough for your videos. I had a good plan for what I wanted to do but being able to follow you was even better. Now I have a secure network separation, port security and now, once I solve my double NAT problem, a VPN. Thanks Chris!

[richardgracews]

Just ordered my UDM pro the other day it comes tomorrow. Thanks for all your content!

[AAG]

Unifi should give you a huge cut if their profits. Your videos help someone like me that is diving in to networking for the first time.

[philthyphillup]

Could you make a tutorial for setting up a dynamic DNS? That would be awesome! Love the video!

[BillMcDaniel]

I have really enjoyed this series of videos and have learned a lot. Will be very helpful as I set up my Unifi Dream Machine Pro.

[NRay]

This video series has been very helpful so far, thank you. If it's not already in the plans I would greatly appreciate one for MulticastDNS reflector service & IGMP Snooping for AirPlay / Chromecast devices. I want to learn the best way to allow traffic from my trusted LAN network into the IoT network for these services and only allow the port traffic that they require to function.

[JeremyMcMahan]

Great video... I'd love to see you set up a UDM to UDM-Pro P2P tunnel and explain how to set up routing so PCs and Printers on both networks are visible to each other. Thanks for considering!

[Moonraker]

The RADIUS setting would be useful if say for example you were running Active Directory and had a bunch of user accounts in there to authenticate against. You could setup a RADIUS server and then specify this server in the above setting at around the 5:00 mark...

[JesseG]

Chris, I am truly grateful for this series you produced. It is clear and concise and the presentation is spot on! I recently installed the UDM-Pro and have made it through most of these videos by following step by step. Unfortunately, I can't get this VPN to work on my Android phone or my Win10 PC. Could you do a follow-up video to this or provide some directions to what I might be missing? I was successfully running Wireguard prior to the UDM install.

[RobertSandell]

I am using this series as a lookup backa and forth now that my UDM pro arrived.
I think you need to remake this episode though, in version 7.1.65 ov the Network application the VPN setup is completely different. It has mooved to itäs own menu option on the settings page now. ;)

[BrazenNL]

Excellent series. You got me up and running within an hour! Would buy you a beer, but I don't do PayPal.

[VassilisKoulouris]

Hi Chris, thanks for your video. One comment: In many parts of the world (in my case Europe where I have a 100Mbs connection) the WAN IP Address is dynamically allocated from the ISP (>80% of the consumer connections) which makes the UDM Pro VPN config unusable. For some reason, once the configuration is created (when you select the WAN interface), the current IP gets recorded in the config and if it changes (which will happen if you do no not have a static IP) the VPN configuration becomes invalid. Most routers/firewalls bind the interface to the configuration which means that any changes on the IP of that interface will automatically be reflected in the configuration of the VPN. I think this should be mentioned in your video as it will save many frustrated users from trying to figure out what went wrong...
Until now, I have not seen any workaround to fix that other than reconfigure the VPN config created with the new IP... which will change again....

[knifelife...]

Chris Any chance you can add a video to go over Teleport and appropriate / ideal firewall rules?

[alexu]

thanks for your videos! was wondering if you would ever do some sort of troubleshooting videos? i had a bunch of clients disconnecting and reconnecting and couldn't figure out why.

[mikem]

Very helpful, straight to the point guide. Thanks

[Moonraker]

Bridge mode is sometimes also referred to as Passthrough mode...

[ChristianBlueChimp]

This will be very handy once I get my UDM pro. Thanks 👍

[travisharper]

I couldn't get it to work on my Android (Verizon) phone or my win10 tablet when connected to my phones hotspot. I then went home and setup the VPN on my laptop connected to my home network and it worked instantly. I will have to try and figure out why it wont go through my phone... Puzzling :) Thanks for your great videos.

Update: After further testing, I could easily setup the VPN through my iPad on the Verizon network. This appears to be an issue with either the Samsung phone or Verizon on the droid system or all of the above.

[imvipeness]

Great video but doesn't work on Android as the only options they have for L2TP is L2TP/IPSec PSK and L2TP/IPSec RSA.

[braydencorbridge]

Hey Chris I love your videos. You have helped me set up my own unifi network at my house as well as help me learn more about networking in general. I would love to see some more advanced routing with the unifi devices. Could you do a video where you explain a little more into not sending all traffic over the VPN connection? Maybe specifically for windows devices? One thing I am struggling with in my home network is when I am home my connection to my internal servers can be found with DNS but when I go over my VPN I can no longer see my server through DNS and I have to connect to it through ip address. I think you do a wonderful job at explaining how the networking works and I would love to see more advanced configurations from you.