Unifi Magic site to site

In this video I demonstrate how to create a Magic site-to-site VPN. This is a brand new feature that was introduced in Unifi OS 3.1

Introducing magic site to site vpn

▶ Hire us on our website

▶ Join our Discord Channel:

------------------------------------------------------------------------------------
Affiliates I use:

▶ VOIP.MS

▶Canadian Amazon Store front:

▶USA Amazon store front:

------------------------------------------------------------------------------------
▶ Find us on social media:

▶ Instagram:

▶ Facebook:

▶ Twitter:

▶ TikTok:

▶ Linkedin:

▶ Twitch:

0:00 Intro
0:33 Reading Magic site-to-site features
1:40 configuring Magic Site-to Site VPN
3:00 Testing site to site vpn
3:34 Final thoughts

[josefsailer]

Hi, when you do the full build videos please go detailed into the firewall rules.

[APHATMOUSE]

Looking forward to the full build video!

[MOH_ALKHATLAN]

Didn`t think I`ll be thinking about getting another Unifi console till now, yes, I`ll order UDR now just because of 😁this new feature Thank you

[dmistclesgee]

Wow, great stuff, makes connecting to branch and remote offices easier, thanks

[The_Tech_Ninja]

Hi, nice video! For the full setup it would be nice that when you create firewall rules that you show how do you would drop any connection or allow only a few services from your NAS to the Internet and accept only a Plex Media Server. And also a short view about Port Forwarding for a Plex Server.

[LordGooben]

I'm glad they brought back this feature. I had to do a different way for the site to site as they couldn't get a static IP

[felixschndr]

Such a great feature. Love how simple and brilliant it is

[Elandro]

Great feature! That makes site to site very easy

[mattdotdavey]

Great video, super helpful. Would be great to see how to leverage Site Magic in a home setting, where you have two sites, but you want the Apple TV in site 1 (UDM PRO) to access the site 2 (UDM PRO) internet gateway to avoid country content restrictions

[JeremyMcMahan]

That's looking great! (One question, will name resolution across the VPN/subnets work automatically also?)

[andybarber]

Hi - the most requested feature I think people would love you to cover is using this site to site auto vpn BUT crucially allowing the internet to breakout from one site. i.e. if you have 1 main site and 2 additional sites and you would like the additional sites internet to not breakout locally but instead breakout of the main site

[evelbsstudio]

Awesome, can you do a video on setting up 1:1 NAT?

Thanks

[ltrpdqm]

Do you know if the wireguard vpn config is full tunnel or still split tunnel such as the site to site vpn config was before this magic vpn setup?

[techguyintahoe]

Screw Unifi magic, YOU are the magic here my friend! Thanks for the tips. Question: I set up a site to site VPN as per your direction. Everything is working fine as I can access the subnets on either remote network. My question to you is: Is it possible to set up a teleport to one of the networks and have access the remote network that I have site to site set up with? Hope this makes sense and Thank you!

[DangalSon]

I wonder if it will use the secondary WAN in a failover scenario. Seems cool though, nice feature.

[gsawnv]

Hi Cody. Do you think the UniFi NVR could be shared across two sites when using site magic? Synchronous gigabit internet to both locations and 6-10 cameras at each site with a doorbell at each. I don’t know the latency between the two sites yet.

[mutlumehmet]

Hi always love the videos. Do you have anything with udm se vpn speeds for ipsec and any other vpns. I can't find much information on the speed it runs. Many thanks

[jaap]

I do some smart home consultancy and I would like to learn more about the Unifi capabilities for local dns stuff and restructuring network access for certain types of smart home devices.

[Polkster]

On the full setup video, please include setting up Talk VLAN and port profiles. I am having issues getting the phone to be on one VLAN and the other Ethernet port on the phone (used to hook up a computer through the phone) to be on a different VLAN.

[ryangilmore]

Question: Would this situation allow 3 remote devices to be on the same VLAN? Although not a typical use case. In the UK our Satellite Provider has a main device. Additional hubs as such can connect to that and they communicate across on the same network rather than direct via satellite. They can see the main hub to access, place recordings and access the live tv rather than downloading natively through the WWW.

So my question is - would this feature allow me to setup a singular VLAN accessible across my two sites using magic-magic so that we can trick the system to thinking on the same network despite being remote completely from the main interface. Obviously this would be a case that Satellite provider can't detect this and would need testing but the principal - possible?