How to create a VPN server on a Unifi Dream Machine / Pro

VPN
1

This is a tutorial to setup you UDMP as a L2TP VPN server: https://youtu.be/MElaiWFAvQ0

2

L2TP is poop, thanks Ubiquiti.

3

The best way to setup vpn with ubiquity is pass the ports to something else.
I have stopped setting it up as it was never reliable for our clients.

4

I ditched my UDMP for Untangle so I could use WireGuard. Protect doesn’t like UDMP in bridge mode though.

5

Hey, great video. I have followed many of your Synology specific tutorials and find them quite helpful. I have an Open VPN server setup on my Synology NAS, and liked that I can setup static IPs for my clients. Can I do the same with the UDM (non-Pro)? (My UDM is ordered and still on the way.)

If my Open VPN on my NAS is working fine, is there any advantage of using L2TP on the UDM? My main clients will be a remote backup NAS and an Android phone.

7

Thanks. I followed this, and my Android phone can connect and hit a local resource, but I can’t seem to get it to browse the internet whilst connected.

Anything obvious I’m missing? I’ve tried setting the dns servers as you show in the video, tried setting it in the connection profile on the phone, but no luck.

8

Apparently there is a way to setup WireGuard on a USG. Please I need a tutorial.

9

Hi,

i am setting it up like it says but cannot connect. UnifiOS declares
xxx.xxx.xxx.xxx is initiating a Main Mode IKE_SA
05[CFG] received proposals: IKE:AES_CBC_128/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/ECP_256, IKE:ECP_256
05[IKE] no proposal found

Any ideas how to fix that?

10

Does this work on the base non-Pro Dream Machine model too? Or does this only work on the Pro Model?

11

It might not be the best protocol, but it is by far the most supported between Mac, Windows, IOS, Android and kinda Linux from the native OS. (Linux is a pain in the ass unless you have a GUI)

The reason I use it is because I don’t have to install a 3rd party client on my device to connect to it wherever I am.

12

Hey thanks!

Really L2TP VPNs are good if you have a bunch of clients who are not tech savvy conecting back. They don’t have to download a client or anything it just kinda works.

If OpenVPN is working for you I would just leave it at that!

13

I would bet that it is a DNS issue. Try to set your DNS server for the VPN to 8.8.8.8

14

IKEv2? Very well supported on Mac and IOS devices. But for windows it’s a pain in the ass, don’t have any windows computers so it’s not a big deal. VPNs are about security not convenience.

15

Hey, thanks for your response. I’ll stick with my current setup then.

They don’t have to download a client or anything it just kinda works.

This is good to know for the future. Thanks again.

16

Thanks, I did try that, both on the UDMP and then directly on the phone profile.