UniFi Site-to-Site VPN

In this video I will show you how to create a Site-to-Site VPN between USGs in your UniFi Controller! Stay tuned for the follow-up this week!

Buy your Ubiquiti gear here:



Beyond Tech Cabling:

Support my channel and keep the lab growing!

Come back for the next video!

SUBSCRIBE! THUMBS-UP! Comment and Share!

[michaelsoremekun]

Very informative video. Thank you. Suppose the hypothetical network has 3 remote sites. I'm assuming 3 VPNs then have to be created which will then allow 2-way connection between all sites, right?
VPN
1) Site A to Site B
2) Site A to Site C
3) Site B to Site C

[kareemcarter]

Awesome Video Willie thanks for taking some of my anxiety away about this. My only question is, does each site need both the Cloud Key and a USG or is just a USG needed?

[pinnyfaska]

I just came across your videos. Does a site to site VPN need any static IP or any ip directly from the isp or can the clients find themselves another way?

[hlimbada]

Hi Willie


Any chance you can do a video on 2 USG site to site VPN - with one behind NAT? I've been using their how to and a community thread, but can not seem to get it working...

[DrPacman]

Fantastic videos Willie, wanted to know if one is able to setup a multi-site to site VPN with a USG’s, very much like you’re able to with a pfsense frontend?

[jeremyboelter]

Thanks for the video -- question though: Once the VPN has been established, can you change the inform IP to an internal one (i.e. have inform-related traffic traverse the VPN instead of over the internet + port forwarding)?

[billnichols]

Being a novice on VPN, are you saying all we need are the USG's? Is the "Controller" a UniFi Cloud Key? If I have NO Unifi products, what do I need to setup and VPN between two locations?

[fateichmann]

Hi Willie, I followed the steps. The VPN creates itself, but The VPN Tunnel is active in USG's behind the Comcast modems with DMZ pointed to USGs, and I not able to ping any local IPs from both sides. Any ideas? Thank you so much

[randywonzer]

So this setup works great! My local IP is using the remote WAN, but using my local DNS. My big question is how to I configure such that my local site is using the remote DNS and WAN. Ideas?

[TheDivision]

I wanted to say that i enjoy yours and CrossTalk Solutions videos, very informative. I just put together my first proposal for a client using all unifi equipment. USG, Two 16 port Unifi POE switches, 7 Unifi cameras, Cloud key, going to use their tough cable and unifi's grounded connectors, 1 Unifi Mesh Pro AC and 1 Unifi Mesh AC, 12tb Synology for the NVR. The reason for the 12tb is if he accepts the qoute and likes the setup. This will be part 1. Part 2 is extended the wireless network further and adding about 15 more cameras. Hope they accept my quote really want to dive into Unifi. Just a suggestion, It be cool to see you and CrossTalk collaborate on an educational program and or release a study course on these products. I see that double radius offers a 2 day course but that seems kind of short to take it all in. I been to a "rushed" boot camp before and it wasn't that satisfying so i am a little hesitant about taking that.

[Bingcoytech]

my friend i have a question? i have a usg pro and usg router it is possible? for site to site vpn between this two?

[mrlizard]

I'll google around as I haven't had a chance to play with this on any of our stuff yet, but I'm really curious as to the phase 1 and phase 2 settings that its using for the auto setup. Also, and this may have been mentioned in the video but I missed it, but are you using a cloud controller or are you using an on prem one?

[woodspepperman]

Great video....but what speed of through put are you getting through the tunnel???

[thegamerfour]

I set up a manual IPsec site-to-site VPN tunnel using your video. But I don't want my customer network having access to my local network. Can you do a video (or a short response) explaining the firewall rules needed to block my customer traffic into my network. I tested firewall rules for WAN IN, LAN IN, and LAN LOCAL, trying both the customers WAN IP and LAN IPs, and both "Don't match" and "match inbound IPsec packets". I can't seem to find the right combination to block my customer's traffic. Thank you.

[HoldDaMayo]

What about a site to site Unifi VPN from locations that aren't on the same controller? Like, 2 sites, each has their own cloudkey, but managed under one single Unifi Cloud Management account? Does that make any sense? The Unifi terminology is all very new to me.

[egaautomation]

Willie can I make a site to site VPN to plug in cameras at that location and have the NVR in my house?

[TheTF]

Would this work with multiple sites as long as they don’t connect at the same time?

[santa]

Hi Willie. I'm kind of new to all this Unifi hardware and just recently hit a wall. I tried to set up my G3 Cam and learned about my ISP is using DS Light. Would be cool if you could point me into the direction of a relay service or some sort of VPN solution I could use.

[rommelroberts]

Hi, Im new to UNIFI, I noticed when you started the video you had two different sites one for lab and the extension, how did you connect to both at the same time, is the cloud key involved connected to the internet allowing you to manage multiple sites ?

[GoldTechMx]

Hi, it's the same to connect a USG Pro to a USG in a site to site VPN? or even the USG Pro to 3 diferent VPN with USG in diferent locations?