Moving from pfSense to UXG-Fiber

Networking & Firewalls
1

Well, I pulled the trigger on the UXG-Fiber rather than the UCG-Fiber (Black Friday :slight_smile: ). I’ve been attending Google university :slight_smile: for a little while but I cannot find some good instructions or recommendations for migrating from pfSense to the UXG-Fiber. I have my self-hosted controller (which I need to continue using - no big deal).

I have a couple of questions:

  1. Do I need to move to Unifi-OS for my self-hosting?
  2. Are there any good guides for migrating? I do not want to have my DMZ servers, etc. inadvertantly exposed, my VLANs messed up, etc.

Thanks!

2

I have a guide I did but since doing this they have added import/export for DHCP so that process does not have to be done manually anymore.

3

Thanks Tom. I have watched this video a couple of times.

The part I seem to be missing is that my self-hosted UniFi controller will need to remain as this the UXG Fiber without the built-in controller. I cannot figure out how to adopt the UXG given that it will replace pfSense including taking over its IP addresses. Maybe I’m overthinking this…

5

Once you remove pfsense and adopt the UXG all the networks will show the same as they did in my video as “Third Party Gateway” and then you can switch each network over to be managed by the UXG and as you are setting those make each network the same as the pfsense was for IP & DHCP.

6

Sorry, still not getting it.

My default network is 10.100.200.x/24. pfSense is 10.100.200.254. The Unifi Controller is 10.100.200.100. There are other subnets (e.g. VLAN 10 - 192.168.10.0/24 gateway on pfSense 192.168.10.254).

If I understand what is being recommended:

  1. connect my laptop to a switchport on the native VLAN (10.100.200.x)
  2. log into the Unifi Controller
  3. remove pfSense
  4. connect the UXG to Internet and internal network
  5. adopt the UXG
  6. assign the VLANs and sett the VLAN gateway IPs to the UXG

Does this seem correct?

7

Well, I migrated from a 6100 with a Cloud Key 2 to a UCG Fiber. I connected the UCG to the existing network, adopted it, and then configured the UCG as the controller with the 6100 available and passing WAN and as a reference. Once the UCG was configured, I connected and swapped over the network connections.

I had to reconfigure most of my ports because I have three different ISPs using the 2.5G and the 10G SFPs for the rest of the network. Just wish I could lag the 2 10 gig SFPs to go into the Lan can on the switch, but not on the UCG. “not yet at least”

8

@net_geek thanks! Did you just connect a LAN port of the UCG to the LAN of the old network?

9

Yes, I used the 4th 2.5 port as I was using the first 3 for WAN and reconfiguring them.

1 Like